Cognito

This handles AWS Cognito user authentication and authorization, covering both user pools for sign-up/sign-in and identity pools for temporary AWS credentials. You'll reach for it when setting up OAuth flows, managing user attributes, or integrating social logins. The source walks through practical patterns like creating pools with password policies, implementing SRP authentication (the secure way, not just username/password), and getting temporary credentials for API access. One thing to note: Cognito's token handling gets fiddly fast, especially the secret hash calculation for app clients, so having the Python snippets for sign-up and auth flows saves you from fumbling through docs. The security advice is solid too: enable MFA, keep token lifetimes short, and never expose client secrets in frontend code.

Install to Claude Code

npx -y skills add itsmostafa/aws-agent-skills --skill cognito --agent claude-code