aws-cognito.html

AWS Cognito

Amazon's bundled identity service. Cheap at scale, complex to set up, AWS-locked.

VISIT AWS COGNITO

Quick facts

  • CategoryBundled with platform
  • LanguageTypeScript
  • PricingFreemium
  • LicenseProprietary
  • Created2014
  • GitHub starsclosed
  • HIPAA-eligibleYes (BAA)
  • SSO / SAMLOut of box

What it is

AWS Cognito is Amazon's identity product. User pools + identity pools, MFA, social logins, SAML federation. Cheap once configured (50k free MAUs); complex to set up correctly, with documentation that lags the product. Used by AWS-locked teams who want auth in the same account.

Best for

  • AWS-first teams that want auth in the same procurement contract
  • High-scale apps where per-MAU pricing makes Clerk / Auth0 unattractive

When not to pick it

Skip Cognito for any project where developer time matters more than monthly auth bill. The setup pain is real and persistent.

My take

Cognito is cheap at scale and a real time-sink to set up. Most teams should pick something else unless AWS-locked is non-negotiable.

Links

Similar tools you should also consider

Firebase Auth

Google's bundled auth — email, social, phone, anonymous. Generous free tier, locks you into Google.

Read the take →

Auth0

The enterprise hosted auth incumbent. Acquired by Okta in 2021. Mature, expensive, procurement-default.

Read the take →

If AWS Cognito is your pick — the next conversation is short

The 30-min call is where your auth choice becomes a real architecture, a migration plan if you are switching, and a price range you can take to your stakeholders. Describe your stack, your scale, your compliance constraints. I tell you whether AWS Cognito is genuinely your fit.