Custom domain for ""


I have a Cognito app client configured to use USER_PASSWORD_AUTH flow. By POSTing this request:

{ "AuthParameters": { "USERNAME": "{{Username}}", "PASSWORD": "{{Password}}" }, "AuthFlow": "USER_PASSWORD_AUTH", "ClientId": "{{AppClientId}}" }

to "", I am able to successfully authenticate and retrieve JWTs.

I would like to CNAME the URL to be something like "", but when I do that, I get a client certificate validation error. Is there anyway to associate a valid certificate so I can CNAME the URL successfully?

3 Answers


You will not be able to CNAME the cognito endpoint domain but you can create a proxy to this endpoint using API Gateway or CloudFront and you can assign a custom domain to your proxy endpoint. You may find this blog post helpful which demonstrates using CloudFront as a proxy to Cognito endpoint but you can also implement a simpler proxy using API Gateway.

answered 2 years ago
  • Thanks for this answer. Is there any alternative method to get the JWT ID Token from the Cognito username/password using a custom domain name? Or is a proxy the only solution here?


Hey there,

It sounds like you're looking to use a custom domain name in Cognito. Give this doc a look and come back to us if you have more questions.

profile pictureAWS
answered 2 years ago
  • Not trying to do this for the Hosted UI. Trying to use a simple request with username/password flow to get a JWT ID Token. This works using, not If I am mistaken, please let me know how to do this without a user entering credentials into a website.


sorry i wasn't able to help, removing my answer

profile picture
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions