AWS Cognito Integration

Amazon Cognito User Pools — manage users, groups, app clients, and identity providers with SigV4. Connect AWS Cognito events to the tools your engineering teams already use. Start with Admin Get Device, then follow with Admin Get User or Admin Get User Auth Factors to automate the next step.

Explore Documentation

3-day trialCancel anytimeUp to 10 minutes quick set up

GDPR
Data Encryption
2FA
Local Data Region

Supported triggers and actions for AWS Cognito integration

Triggers can detect changes in AWS Cognito and run actions that can create, search or modify data inside AWS Cognito automatically [3] — exactly how you set them.

Admin Get DeviceReturns device.
Admin Get UserReturns user.
Admin Get User Auth FactorsReturns user auth factors.
Admin List DevicesRetrieves a list of devices.
Admin List Groups For UserRetrieves a list of groups for user.
Admin List User Auth EventsRetrieves a list of user auth events.
Describe Identity ProviderReturns identity provider configuration.
Describe Managed Login BrandingReturns managed login branding configuration.
Describe Managed Login Branding By ClientReturns managed login branding by client configuration.
Describe Resource ServerReturns resource server configuration.
Describe Risk ConfigurationReturns risk configuration configuration.
Describe TermsReturns terms configuration.
Describe Terms By ClientReturns terms by client configuration.
Describe User Import JobReturns user import job configuration.
Describe User PoolReturns user pool configuration.
Describe User Pool ClientReturns user pool client configuration.
Describe User Pool DomainReturns user pool domain configuration.
Get Client TokenReturns client token.
Get CSVHeaderReturns csvheader.
Get DeviceReturns device.
Get GroupReturns group.
Get Identity Provider By IdentifierReturns identity provider by identifier.
Get Log Delivery ConfigurationReturns log delivery configuration.
Get Provisioned LimitReturns provisioned limit.
Get Signing CertificateReturns signing certificate.
Get Tokens From Refresh TokenReturns tokens from refresh token.
Get UICustomizationReturns uicustomization.
Get UserReturns user.
Get User Attribute Verification CodeReturns user attribute verification code.
Get User Auth FactorsReturns user auth factors.
Get User Pool Mfa ConfigReturns user pool mfa config.
List DevicesRetrieves a list of devices.
List GroupsRetrieves a list of groups.
List Identity ProvidersRetrieves a list of identity providers.
List Resource ServersRetrieves a list of resource servers.
List Tags For ResourceRetrieves a list of tags for resource.
List TermsRetrieves a list of terms.
List User Import JobsRetrieves a list of user import jobs.
List User Pool Client SecretsRetrieves a list of user pool client secrets.
List User Pool ClientsRetrieves a list of user pool clients.
List User Pool ReplicasRetrieves a list of user pool replicas.
List User PoolsRetrieves a list of user pools.
List UsersRetrieves a list of users.
List Users In GroupRetrieves a list of users in group.
List Web Authn CredentialsRetrieves a list of web authn credentials.
Add Custom AttributesPerforms the add custom attributes action.
Add User Pool Client SecretPerforms the add user pool client secret action.
Admin Add User To GroupPerforms the admin add user to group action.
Admin Confirm Sign UpPerforms the admin confirm sign up action.
Admin Create UserCreates a new user.
Admin Delete Software TokenDeletes software token.
Admin Delete UserDeletes user.
Admin Delete User AttributesDeletes user attributes.
Admin Disable Provider For UserPerforms the admin disable provider for user action.
Admin Disable UserPerforms the admin disable user action.
Admin Enable UserPerforms the admin enable user action.
Admin Forget DevicePerforms the admin forget device action.
Admin Initiate AuthPerforms the admin initiate auth action.
Admin Link Provider For UserPerforms the admin link provider for user action.
Admin Remove User From GroupPerforms the admin remove user from group action.
Admin Reset User PasswordPerforms the admin reset user password action.
Admin Respond To Auth ChallengePerforms the admin respond to auth challenge action.
Admin Set User MFAPreferencePerforms the admin set user mfapreference action.
Admin Set User PasswordPerforms the admin set user password action.
Admin Set User SettingsPerforms the admin set user settings action.
Admin Update Auth Event FeedbackUpdates auth event feedback.
Admin Update Device StatusUpdates device status.
Admin Update User AttributesUpdates user attributes.
Admin User Global Sign OutSigns a user out of all sessions as an administrator.
Associate Software TokenPerforms the associate software token action.
Change PasswordPerforms the change password action.
Complete Web Authn RegistrationPerforms the complete web authn registration action.
Confirm DevicePerforms the confirm device action.
Confirm Forgot PasswordPerforms the confirm forgot password action.
Confirm Sign UpPerforms the confirm sign up action.
Create GroupCreates a new group.
Create Identity ProviderCreates a new identity provider.
Create Managed Login BrandingCreates a new managed login branding.
Create Resource ServerCreates a new resource server.
Create TermsCreates a new terms.
Create User Import JobCreates a new user import job.
Create User PoolCreates a new user pool.
Create User Pool ClientCreates a new user pool client.
Create User Pool DomainCreates a new user pool domain.
Create User Pool ReplicaCreates a new user pool replica.
Delete GroupDeletes group.
Delete Identity ProviderDeletes identity provider.
Delete Managed Login BrandingDeletes managed login branding.
Delete Resource ServerDeletes resource server.
Delete TermsDeletes terms.
Delete UserDeletes user.
Delete User AttributesDeletes user attributes.
Delete User PoolDeletes user pool.
Delete User Pool ClientDeletes user pool client.
Delete User Pool Client SecretDeletes user pool client secret.
Delete User Pool DomainDeletes user pool domain.
Delete User Pool ReplicaDeletes user pool replica.
Delete Web Authn CredentialDeletes web authn credential.
Forget DevicePerforms the forget device action.
Forgot PasswordPerforms the forgot password action.
Global Sign OutSigns the current user out of all sessions.
Initiate AuthStarts a user authentication flow.
Make an API CallPerforms an arbitrary authorized Cognito Identity Provider request.
Resend Confirmation CodePerforms the resend confirmation code action.
Respond To Auth ChallengeCompletes an authentication challenge step.
Revoke TokenRevokes an issued refresh or access token.
Set Log Delivery ConfigurationPerforms the set log delivery configuration action.
Set Risk ConfigurationPerforms the set risk configuration action.
Set UICustomizationPerforms the set uicustomization action.
Set User MFAPreferencePerforms the set user mfapreference action.
Set User Pool Mfa ConfigPerforms the set user pool mfa config action.
Set User SettingsPerforms the set user settings action.
Sign UpRegisters a new user in the user pool.
Start User Import JobPerforms the start user import job action.
Start Web Authn RegistrationPerforms the start web authn registration action.
Stop User Import JobPerforms the stop user import job action.
Tag ResourcePerforms the tag resource action.
Untag ResourcePerforms the untag resource action.
Update Auth Event FeedbackUpdates auth event feedback.
Update Device StatusUpdates device status.
Update GroupUpdates group.
Update Identity ProviderUpdates identity provider.
Update Managed Login BrandingUpdates managed login branding.
Update Provisioned LimitUpdates provisioned limit.
Update Resource ServerUpdates resource server.
Update TermsUpdates terms.
Update User AttributesUpdates user attributes.
Update User PoolUpdates user pool.
Update User Pool ClientUpdates user pool client.
Update User Pool DomainUpdates user pool domain.
Update User Pool ReplicaUpdates user pool replica.
Verify Software TokenPerforms the verify software token action.
Verify User AttributePerforms the verify user attribute action.

How to integrate AWS Cognito in automation workflow?

3 simple steps to make your AWS Cognito connected with other apps in automation workflows on WEXTL. Up to 10 minutes integration set up.

STEP 1

Select AWS Cognito in workflow

Pick AWS Cognito app in the workflow builder [4] - just one click to select the app.

STEP 2

Connect AWS Cognito

When prompted, authorize access to AWS Cognito in WEXTL once. AWS Cognito credentials are encrypted and never shared with WEXTL. Authorization will be reused in any future API calls [3].

WEXTL wants to integrate with your AWS Cognito account. Approve?

STEP 3

Build a workflow

Build your workflow with AWS Cognito yourself or with WEXTL® AI Builder. Connect AWS Cognito to any available integrations [5], or use HTTP node to go beyond them.

AWS Cognito

How AWS Cognito connects and integrates with WEXTL

Save and approve your credentials once — WEXTL® stores authorization information encrypted and reuses the authentication whenever AWS Cognito app is called in workflows. That allows your developer tools automations to run without your attention, per defined schedule [7]. Explore documentation [6] for a detailed list of fields that AWS Cognito supports.

Full AWS Cognito API documentation

The following table illustrates what fields AWS Cognito integration require during authorization flow inside our workflow builder [4].

Demonstration of AWS Cognito connection step inside WEXTL Workflow Builder [4].

Field	Type	Help
Access Key IDRequired	text	IAM access key ID.
Secret Access KeyRequired	password	Stored encrypted. Marker for SigV4 signing.
RegionRequired	text	AWS region for the user pool, e.g. us-east-1. Drives the service endpoint.
ServiceRequired	select	Cognito IdP signing name. Leave as cognito-idp.
Session Token	password	Temporary STS session token. Leave blank for long-term IAM credentials.
Default User Pool ID	text	Convenience default for modules — pre-fills User Pool ID fields.

Connect AWS Cognito to popular apps on WEXTL

Enter a name of the other app you want to sync with AWS Cognito below. Click on selected app to explore integration options with AWS Cognito. If the app you search for is not available in WEXTL yet, you can use HTTP node [10] instead to integrate it directly.

Example automation with AWS Cognito integration

Select Admin Get Device action from AWS Cognito - this will be a starting point in your automation. Whenever event happens in AWS Cognito, workflow will start [7] from Admin Get Device node.

Search for Update Device Status, connect it as the next step of integration sequence. You can use filters between Admin Get Device and Update Device Status, so only important data pass from Admin Get Device to the next step. WEXTL gives you full control over the process of AWS Cognito automation. All parts of workflow are visible on the canvas [4].

AWS Cognito on WEXTL has 133 modules for creating developer tools automations. Explore AWS Cognito documentation for more.

AWS Cognito

Admin Get Device

AWS S3

Performs action

AWS S3

Triggers

AWS Cognito

Update Device Status

Demonstration of how visual AWS Cognito automation [6] looks in WEXTL.

Frequently asked questions

Common questions about automating AWS Cognito in your workflows.

AWS Cognito has no triggers, but it provides 133 actions including "Admin Get Device", "Admin Get User", and "Admin Get User Auth Factors". Pair them with triggers from other apps to automate AWS Cognito tasks.

Integration has 133 actions, including "Admin Get Device", "Admin Get User", and "Admin Get User Auth Factors", and more. Refer to our AWS Cognito Documentation for detailed inputs and outputs.

No. Most automations are built visually on the canvas by picking triggers, actions, and mapping fields. You can add custom JavaScript with Functions when advanced logic is needed — but our customers do that in rare cases [4].

Yes. Connections are authenticated per account, credentials are encrypted at rest, and you can enforce approvals and team-level access controls on any automation.

The AWS Cognito integration on WEXTL runs directly on its vendor public API — every field name, authentication method, and rate limit is controlled by AWS Cognito official API and covered in documentation [3]. WEXTL handles the request signing and pagination for you.

Absolutely. Where AWS Cognito provides native webhooks, you can use instant triggers to eliminate polling delay. For custom webhooks, WEXTL offers Custom Webhook node, so you can start automation whenever AWS Cognito or any other service sends event to webhook URL.

WEXTL is an AI-first visual canvas. The platform allows you to describe automation in plain text — and AI will wire nodes for AWS Cognito inside the workflow builder [4]. You can also use built-in workflow nodes (AI Agent, Human in the Loop, Condition, Aggregate Results) in pair with AWS Cognito modules to craft complex integration flows with branches, filtering, and conditional logic. There are absolutely no limits of what you can build.

References

List of sources used to gather information about the AWS Cognito integration.

AWS Cognito integration source code, module specs and credentials implementation.
Internal AWS Cognito integration documentation, structured input and output parameters, scopes, and authentication methods.
Official AWS Cognito vendor API documentation — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
WEXTL® Visual Workflow Builder, anonymized data from our technical support team.
WEXTL® Apps Library
WEXTL® AWS Cognito App Documentation
WEXTL® Workflow Scheduler
WEXTL® HTTP node documentation

AWS Cognito Integration

Supported triggers and actions for AWS Cognito integration