Free AWS Security Whitepaper
    Toc Consulting Logo
    All Tags

    Authentication

    3 items across 2 sections

    Blog Posts1

    Stop Reinventing Authentication: How I Built a Production-Ready Auth API That Scales to 50K Users for Free

    How I built CognitoApi, an open-source serverless authentication API on AWS Cognito that handles 50,000 users for free with MFA, token management, and complete user lifecycle support.

    10 min read · 2025-07-06
    Best Practices2

    Amazon API Gateway Security Best Practices

    Comprehensive guide to securing Amazon API Gateway. Covers authentication with Cognito and Lambda authorizers, mutual TLS, WAF integration, resource policies, throttling and usage plans, private APIs with VPC endpoints, access logging, SSL/TLS enforcement, and request validation.

    15 min read

    Amazon Cognito Security Best Practices

    Comprehensive guide to securing Amazon Cognito user pools and identity pools. Covers MFA enforcement, advanced threat protection, password policies, WAF integration, JWT verification, Lambda trigger security, and identity pool least privilege.

    15 min read

    Related Tags

    waf8API Gateway5Cognito4Serverless19Identity & Security15Terraform12MFA5OAuth3REST API2WebSocket2Resource Policy2VPC Endpoint2

    Need Help with AWS Security?

    Our AWS security experts can help you implement best practices across all these topics.

    Contact Us