Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

AWS Cognito keys rotation frequency

0

I am using Cognito JWKS URI https://cognito-idp.<Region>.amazonaws.com/<userPoolId>/.well-known/jwks.json to get public keys. In this service, it is a simple passthrough of the data from this URL to the client.

I want to add a cache there. In the documentation, it is stated that keys are sometimes rotated but I cannot find any information on how often this happens.

Is there any more conclusive information on how often these keys are rotated?

Topics
Security, Identity, & Compliance
Tags
Amazon Cognito
Language
English
asked 3 years ago2K views
1 Answer
0

I don't think that is documented anywhere. We used Cognito for years and can't remember them ever being rotated. I would say it's safe to cache for at least 24hours or even more. But it's very hard to say.

EXPERT
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content