Requirements
Before you set up the credential, make sure you have an active AWS Cognito account and an API access token from your account settings ready.[3]
Get your AWS Cognito credentials
- Access Key IDtextRequired
IAM access key ID.
[1] - Secret Access KeypasswordRequired
Stored encrypted. Marker for SigV4 signing.
[1] - RegiontextRequired
AWS region for the user pool, e.g. us-east-1. Drives the service endpoint.
[1] - ServiceselectRequired
Cognito IdP signing name. Leave as cognito-idp.
[1] - Session Tokenpassword
Temporary STS session token. Leave blank for long-term IAM credentials.
[1] - Default User Pool IDtext
Convenience default for modules — pre-fills User Pool ID fields.
[1]
Connect AWS Cognito in WEXTL
- Log in to your WEXTL account, add the AWS Cognito node module to your workflow, and click Create new credential.
- Optional: In the Credential name field, enter a name for the credential.
- Enter the authentication credentials you copied from your AWS Cognito account, or follow the on-screen instructions to create the credential.
- If prompted, authenticate your account and confirm access.
- If you want to make changes to your credential in the future, follow the steps in Manage credentials →
Notes
Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →
AWS Cognito node modules
The list below is a reference of every AWS Cognito node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.
Each AWS Cognito node module below opens to reveal its input parameters, outputs, and connection requirements.
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Custom AttributesRequired | array |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Group NameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Client Metadata | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | text |
Temporary Password | secret |
User Attributes | array |
Validation Data | array |
Message Action | text |
Desired Delivery Mediums | array |
Force Alias Creation | text |
Client Metadata | object |
| Field | Type |
|---|---|
UsernameRequired | text |
User Attributes | array |
Created Date | date |
Last Modified Date | date |
Enabled | boolean |
User StatusRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
User Attribute NamesRequired | array |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Device KeyRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Auth FlowRequired | text |
Auth Parameters | object |
Client Metadata | object |
Context Data | object |
Analytics Metadata | object |
Session | text |
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
Authentication Result | object |
Challenge Parameters | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Destination UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
Source UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Group NameRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Client Metadata | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Challenge NameRequired | text |
Challenge Responses | object |
Session | text |
Context Data | object |
Analytics Metadata | object |
Client Metadata | object |
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
Authentication Result | object |
Challenge Parameters | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
SMS MFA Settings | object |
Software Token MFA Settings | object |
Email MFA Settings | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
PasswordRequired | secret |
PermanentRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
MFA OptionsRequired | array |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Event IDRequired | text |
Feedback ValueRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Device KeyRequired | text |
Device Remembered StatusRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
User Attributes | array |
Client Metadata | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Field | Type |
|---|---|
Proposed PasswordRequired | secret |
Access TokenRequired | secret |
| Field | Type |
|---|---|
Access TokenRequired | secret |
CredentialRequired | object |
| Field | Type |
|---|---|
Client IDRequired | choice |
UsernameRequired | text |
Confirmation CodeRequired | text |
PasswordRequired | secret |
Analytics Metadata | object |
User Context Data | object |
Client Metadata | object |
Secret Hash | text |
| Field | Type |
|---|---|
Client IDRequired | choice |
UsernameRequired | text |
Confirmation CodeRequired | text |
Force Alias Creation | text |
Analytics Metadata | object |
User Context Data | object |
Client Metadata | object |
Session | text |
| Field | Type |
|---|---|
Pool NameRequired | text |
Policies | object |
Deletion Protection | text |
Lambda Config | object |
Auto Verified Attributes | array |
Alias Attributes | array |
Username Attributes | array |
MFA Configuration | text |
Email Configuration | object |
| Field | Type |
|---|---|
IDRequired | text |
NameRequired | text |
StatusRequired | text |
Last Modified Date | date |
Creation Date | date |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client NameRequired | text |
Generate Secret | text |
Refresh Token Validity | number |
Access Token Validity | number |
ID Token Validity | number |
Explicit Auth Flows | array |
Supported Identity Providers | array |
Callback URLs | array |
| Field | Type |
|---|---|
User Pool IDRequired | text |
Client IDRequired | text |
Client NameRequired | text |
| Field | Type |
|---|---|
Group NameRequired | choice |
User Pool IDRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Provider NameRequired | choice |
| Field | Type |
|---|---|
Managed Login Branding IDRequired | text |
User Pool IDRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
IdentifierRequired | choice |
| Field | Type |
|---|---|
Terms IDRequired | text |
User Pool IDRequired | choice |
| Field | Type |
|---|---|
Access TokenRequired | secret |
| Field | Type |
|---|---|
User Attribute NamesRequired | array |
Access TokenRequired | secret |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Client Secret IDRequired | text |
| Field | Type |
|---|---|
DomainRequired | text |
User Pool IDRequired | choice |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Region NameRequired | text |
| Field | Type |
|---|---|
Access TokenRequired | secret |
Credential IDRequired | text |
| Field | Type |
|---|---|
Device KeyRequired | text |
Access Token | secret |
| Field | Type |
|---|---|
Access TokenRequired | secret |
| Field | Type |
|---|---|
Client IDRequired | choice |
Challenge NameRequired | text |
Challenge Responses | object |
Session | text |
Analytics Metadata | object |
User Context Data | object |
Client Metadata | object |
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
Authentication Result | object |
Challenge Parameters | object |
| Field | Type |
|---|---|
TokenRequired | secret |
Client IDRequired | choice |
Client Secret | secret |
| Field | Type |
|---|---|
Access TokenRequired | secret |
SMS MFA Settings | object |
Software Token MFA Settings | object |
Email MFA Settings | object |
| Field | Type |
|---|---|
Access TokenRequired | secret |
MFA OptionsRequired | array |
| Field | Type |
|---|---|
Resource ARNRequired | text |
TagsRequired | object |
| Field | Type |
|---|---|
Resource ARNRequired | text |
Tag KeysRequired | array |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Event IDRequired | text |
Feedback TokenRequired | secret |
Feedback ValueRequired | text |
| Field | Type |
|---|---|
Access TokenRequired | secret |
Device KeyRequired | text |
Device Remembered StatusRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Policies | object |
Deletion Protection | text |
Lambda Config | object |
Auto Verified Attributes | array |
MFA Configuration | text |
Email Configuration | object |
SMS Configuration | object |
User Pool Tags | object |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Client Name | text |
Refresh Token Validity | number |
Access Token Validity | number |
Explicit Auth Flows | array |
Supported Identity Providers | array |
Callback URLs | array |
Logout URLs | array |
| Field | Type |
|---|---|
User Pool IDRequired | text |
Client IDRequired | text |
Client NameRequired | text |
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Region NameRequired | text |
StatusRequired | text |
| Field | Type |
|---|---|
Access TokenRequired | secret |
Attribute NameRequired | text |
CodeRequired | text |
Templates
Look for AWS Cognito templates in the WEXTL template library.
Browse templates →Explore alternative apps
- AWS S3[2]Store and manage objects in Amazon S3 — buckets, uploads, copies, ACLs, lifecycle, and event notifications.
- AWS LambdaServerless compute that runs your code without managing servers.
- ClerkAuthentication and user management with sign-in, sign-up, and MFA.
- Azure StorageManage containers and blobs in Azure Blob Storage.
- Bunny.netCDN control plane — manage pull zones, storage zones, DNS, video libraries, and cache purge.
References
- WEXTL® AWS Cognito Source Code connector implementation.
- Our users use cases and automations.
- Official API Documentation for AWS Cognito.
- WEXTL® visual workflow builder data.
Last updated: Sep 1, 2026 22:26