Free AWS Security Whitepaper
    Toc Consulting Logo
    All Tags

    JWT

    2 items across 2 sections

    Blog Posts1

    Pentesting With Credentials

    Part 8 of 16 in the AWS Security Agent: From Zero to Hero series. I ran the same pentest twice against the same application. The only change was providing a username and password. Findings went from 5 to 13, a 160 percent increase, including two critical JWT bypasses and a privilege escalation.

    13 min read · 2026-07-29
    Best Practices1

    Amazon Cognito Security Best Practices

    Comprehensive guide to securing Amazon Cognito user pools and identity pools. Covers MFA enforcement, advanced threat protection, password policies, WAF integration, JWT verification, Lambda trigger security, and identity pool least privilege.

    15 min read

    Related Tags

    Authentication4AWS Security53AWS Security Agent16Identity & Security15Penetration Testing14AppSec13waf9MFA5Cognito4IDOR3OAuth3AWS Secrets Manager2

    Need Help with AWS Security?

    Our AWS security experts can help you implement best practices across all these topics.

    Contact Us