How do I create or access my first Refresh Token?

I understand your frustration. Let me clarify how refresh tokens work in AWS services.

Refresh tokens are not something you create directly or access independently. Instead, they are automatically issued to you as part of the authentication process when you successfully authenticate with certain AWS services.

Here's how it works:

For Amazon Cognito: When a user successfully authenticates through the managed login authorization-code flow or through API operations, Amazon Cognito automatically issues refresh tokens along with ID and access tokens. You don't need to create them separately - they come as part of the authentication response.

For AWS IAM Identity Center (SSO): When you authenticate using client secrets or IAM entities, the service creates and returns both access and refresh tokens together. You receive the refresh token in the response when you initially authenticate.

For AWS Sign-In: When you exchange an authorization code for tokens using the OAuth 2.0 flow, you receive both an access token and a refresh token in the response.

The key point is: you get your first refresh token automatically when you complete your initial authentication. You don't need to upgrade your account or search for special instructions to "create" one. Once you have that first refresh token, you can then use it later to obtain new access tokens without requiring the user to re-authenticate.

If you're not receiving a refresh token, it may be a configuration issue with your application client settings or the authentication flow you're using.
Sources
Refresh tokens - Amazon Cognito
CreateOAuth2Token - AWS Sign-In
CreateToken - AWS IAM Identity Center

I do not understand the purpose of down-voting my question... I am struggling to figure this out as I have not found clear instructions that say "Obtain your first refresh token" or something similar.