I am using Cognito JWKS URI `https://cognito-idp..amazonaws.com//.well-known/jwks.json` to get public keys. In this service, it is a simple passthrough of the data from this URL to the client. I want to add a cache there. In the [documentation](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-using-tokens-verifying-a-jwt.html), it is stated that keys are sometimes rotated but I cannot find any information on how often this happens. Is there any more conclusive information on how often these keys are rotated?

AWS Cognito keys rotation frequency

I am using Cognito JWKS URI https://cognito-idp.<Region>.amazonaws.com/<userPoolId>/.well-known/jwks.json to get public keys. In this service, it is a simple passthrough of the data from this URL to the client.

I want to add a cache there. In the documentation, it is stated that keys are sometimes rotated but I cannot find any information on how often this happens.

Is there any more conclusive information on how often these keys are rotated?

주제

보안, 신원 및 규정 준수

태그

아마존 Cognito

언어

English

Anna

질문됨 일 년 전686회 조회

1개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

I don't think that is documented anywhere. We used Cognito for years and can't remember them ever being rotated. I would say it's safe to cache for at least 24hours or even more. But it's very hard to say.

전문가

JimmyDqv

답변함 일 년 전

AWS Cognito keys rotation frequency

관련 콘텐츠