Amazon Cognito is a customer identity and access management (CIAM) service that streamlines the process of building secure, scalable, and user-friendly authentication solutions.
Amazon Cognito supports custom authentication flows, which can be used to implement passwordless authentication for users or to require users to solve a CAPTCHA or answer a security question before being allowed to authenticate.
Amazon Cognito advanced security provides a suite of powerful features designed to detect risks and allows users to take action to protect user accounts.
Passwordless authentication offers an improved user experience, while enhancing overall system security by leveraging strong custom factors.
Threat detection can be combined with passwordless authentication using the advanced security features of Amazon Cognito, making your application more secure while providing a seamless authentication experience to users.
Amazon Cognito advanced security now supports custom authentication flows to provide additional threat detection capabilities, including passwordless authentication.
Risk detection and adaptive authentication can be enabled to improve the security of custom authentication factors.
The custom authentication flow includes Define Auth Challenge Lambda function, Create Auth Challenge Lambda function, Verify Auth Challenge Response Lambda function, and advanced security risk detection.
To configure advanced security for custom authentication flow, set up passwordless authentication with Amazon Cognito and WebAuthn, then go to the AWS Management Console for Amazon Cognito and configure advanced security features for your passwordless authentication flow.
Test the configuration, sign in from multiple devices and locations. Amazon Cognito will calculate risk and take action based on your configuration.