Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

AWS Cognito Auth Skill

A reference skill that guides Claude through AWS Cognito user pools, identity pools, and OAuth flows with ready-to-run CLI and boto3 examples.

Web & APIIntermediate★ 1,150⑂ 444AI score 8/10Last updated: Aug 31, 2026

What it does

  • Clarifies the difference between User Pools (sign-up/sign-in directory) and Identity Pools (temporary AWS credentials, incl. social/SAML/guest identities).
  • Ships copy-paste AWS CLI and Python boto3 snippets for creating user pools, app clients (OAuth callbacks, scopes, token lifetimes), sign-up, confirmation, SRP/admin auth, and refresh-token flows.
  • Documents ID/Access/Refresh token purposes and lifetimes plus JWKS-based JWT verification.
  • Adds security best practices (MFA, password policy, never expose client secrets) and troubleshooting playbooks for sign-in failures, token validation errors, broken Hosted UI, and TooManyRequestsException.

Who it's for

  • Backend/fullstack developers adding authentication to AWS-hosted web or mobile apps.
  • Cloud engineers securing API Gateway or Lambda endpoints with Cognito tokens.
  • Teams wiring up social logins (Google, Apple) or enterprise SAML/OIDC federation.

Example uses

  • "Create a user pool with email sign-in, strict password policy and optional MFA" → generates the full create-user-pool command.
  • "Set up an app client for the authorization code flow with my callback URLs" → produces the CLI call with scopes and token validity units.
  • "Show me how to verify a Cognito ID token server-side" → returns the JWKS + RS256 verification snippet.
  • "A user can't sign in" → walks through admin-get-user diagnosis for unconfirmed, disabled, or locked accounts.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/itsmostafa/aws-agent-skills/HEAD/skills/cognito/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the skills/cognito folder from the GitHub repo itsmostafa/aws-agent-skills into my ~/.claude/skills/cognito/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/itsmostafa/aws-agent-skills.git /tmp/aws-agent-skills && mkdir -p ~/.claude/skills && cp -r /tmp/aws-agent-skills/skills/cognito ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository: git clone https://github.com/itsmostafa/aws-agent-skills.git
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy just this skill: cp -r aws-agent-skills/skills/cognito ~/.claude/skills/
  5. Prerequisites: install AWS CLI v2 (aws --version), run aws configure, and for the Python examples pip install boto3 python-jose requests.
  6. Restart Claude Code and ask something like "help me set up a Cognito user pool" so the skill auto-activates.
  7. Before executing any command, confirm the target AWS account/region and that your IAM role has the needed Cognito permissions.
View source on GitHub ↗License: MIT