Amazon Cognito now supports resource indicators to simplify enhancing protection of OAuth 2.0 resources

Amazon Cognito Resource Indicators

Amazon Cognito now allows app clients to specify resource indicators during access token requests in OAuth 2.0 authorization code grant and implicit grant flows. This feature identifies the protected resource, such as a user’s bank account record or a specific file in a file server, ensuring access tokens are limited to specific resources.

This simplifies protecting resources that users need to access. For example, agents can request access tokens for specific protected resources like a user’s banking records. After validation, Cognito issues an access token with the audience claim set to the specific resource.

What to do

• Use the new resource parameter to specify target resources in a standards-based way.
• Refer to the developer guide for more information.
• Check pricing for Cognito Essentials and Plus tier.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.