---
title: "AWS Auth (Amazon Cognito) - Air Market"
description: "Adding accounts to an app means a login page, password rules, tokens and deciding who can reach your API. This covers that with Cognito and the client libraries, including the errors that show up whe…"
canonical: "https://airmarket.ai/app/aws-auth"
---

[Air Market](/) / [Security](/category/security) / AWS Auth (Amazon Cognito)

Skill by [Amazon Web Services](/@aws)

# AWS Auth (Amazon Cognito)

Put a real login on your app and lock your API behind it

## What this does

Adding accounts to an app means a login page, password rules, tokens and deciding who can reach your API. This covers that with Cognito and the client libraries, including the errors that show up when it does not work. Reach for it when you are adding a login, wiring up social sign-in, or debugging a redirect or token problem.

### Top 3 things it does for you

- Add a sign-up and sign-in page
- Turn on multi-factor and set password rules
- Let people log in with an existing account elsewhere

## Information

**AWS Auth (Amazon Cognito) at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [Amazon Web Services](/@aws) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Version | 1 |
| Size | 85 KB |
| Licence | Apache-2.0 |
| Repository | [aws/agent-toolkit-for-aws](https://github.com/aws/agent-toolkit-for-aws/tree/395df449599f30bcce73117ad7fcd19219b52e84/skills/core-skills/aws-auth) |
| GitHub stars | 2,420 (as of Nov 2026) |
| Installs | 5,182, counted by skills.sh (Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of AWS Auth (Amazon Cognito) and flagged nothing. AIR's verdict: **safe**.

**What AWS Auth (Amazon Cognito)'s check was run against**

|  |  |
| --- | --- |
| Commit | 395df449599f30bcce73117ad7fcd19219b52e84 |
| Content hash | dfe296da74354ea7a3dff05db754d4b643ceb8423c84d2a5eab455d1cd2f78da |
| Files read | [Browse the files at this exact commit](https://github.com/aws/agent-toolkit-for-aws/blob/395df449599f30bcce73117ad7fcd19219b52e84/skills/core-skills/aws-auth/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for AWS Auth (Amazon Cognito)](/security/aws-auth)

## About AWS Auth (Amazon Cognito)

Adds user authentication to web and mobile apps using Amazon Cognito, both user pools and identity pools, together with the AWS Amplify client auth libraries.

It covers sign-up and sign-in flows and the hosted login page, MFA, password policies, OAuth 2.0 and OIDC flows, social and SAML federation, tokens and their rotation, revocation and storage, Cognito Lambda triggers, identity pools for temporary credentials, and gating API Gateway or load balancer routes to signed-in users through authorizers.

It applies when adding a login or sign-up page, configuring a user pool or app client, choosing between user pool and identity pool, wiring social or SAML sign-in, refreshing tokens, requiring sign-in on an API, or debugging redirect, token, MFA, CORS and federation errors. Amplify Gen2 backend definitions, IAM and identity-center work, and API and function configuration beyond the authorizer each belong elsewhere.

## What's inside

- SKILL.md - instructions
- references/api-authorization.md - reference
- references/identity-pools.md - reference
- references/lambda-triggers.md - reference
- references/managed-login-oauth.md - reference
- references/passkeys.md - reference
- references/threat-protection.md - reference
- references/tokens-and-sessions.md - reference
- references/troubleshooting.md - reference
- references/user-pools.md - reference

## Questions

### Is AWS Auth (Amazon Cognito) safe to install?

AIR scanned this exact version of AWS Auth (Amazon Cognito) and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit 395df449599f, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/aws-auth.

### How do I install AWS Auth (Amazon Cognito)?

Open https://airmarket.ai/app/aws-auth on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/aws/agent-toolkit-for-aws/tree/395df449599f30bcce73117ad7fcd19219b52e84/skills/core-skills/aws-auth. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by Amazon Web Services](/@aws)

---

Canonical URL: <https://airmarket.ai/app/aws-auth>