Cognito - using Cognito for server to server authentication

Question

A customer has asked if they can use Cognito for server to server authentication.  The end user in this scenario being a kiosk/server rather than an actual person entering their credentials.

Accepted Answer

The general answer is yes, you can use [client credentials flow][1] for machine to machine authentication scenarios.

The more specific answer will depend on what your backend looks like and what the kiosk/server will be doing. if both client and backend live on AWS then using combination of IAM policies, network security ...etc. could be other options to control access in machine to machine use-cases

[1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-app-idp-settings.html

Cognito - using Cognito for server to server authentication

Relevant content