Requirements
Before you set up the credential, make sure you have an active AWS Cognito account and an API access token from your account settings ready.[3]
Get your AWS Cognito credentials
- Access Key IDtextRequired
IAM access key ID.
[1] - Secret Access KeypasswordRequired
Stored encrypted. Marker for SigV4 signing.
[1] - RegiontextRequired
AWS region for the user pool, e.g. us-east-1. Drives the service endpoint.
[1] - ServiceselectRequired
Cognito IdP signing name. Leave as cognito-idp.
[1] - Session Tokenpassword
Temporary STS session token. Leave blank for long-term IAM credentials.
[1] - Default User Pool IDtext
Convenience default for modules — pre-fills User Pool ID fields.
[1]
Connect AWS Cognito in WEXTL
- Log in to your WEXTL account, add the AWS Cognito node module to your workflow, and click Create new credential.
- Optional: In the Credential name field, enter a name for the credential.
- Enter the authentication credentials you copied from your AWS Cognito account, or follow the on-screen instructions to create the credential.
- If prompted, authenticate your account and confirm access.
- If you want to make changes to your credential in the future, follow the steps in Manage credentials →
Notes
Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →
AWS Cognito node modules
The list below is a reference of every AWS Cognito node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.
Each AWS Cognito node module below opens to reveal its input parameters, outputs, and connection requirements.
Admin Get DeviceSearch
Admin Get UserSearch
Admin Get User Auth FactorsSearch
Admin List DevicesSearch
Admin List Groups For UserSearch
Admin List User Auth EventsSearch
Describe Identity ProviderSearch
Describe Managed Login BrandingSearch
Describe Managed Login Branding By ClientSearch
Describe Resource ServerSearch
Describe Risk ConfigurationSearch
Describe TermsSearch
Describe Terms By ClientSearch
Describe User Import JobSearch
Describe User PoolSearch
Describe User Pool ClientSearch
Describe User Pool DomainSearch
Get Client TokenSearch
Get CSVHeaderSearch
Get DeviceSearch
Get GroupSearch
Get Identity Provider By IdentifierSearch
Get Log Delivery ConfigurationSearch
Get Provisioned LimitSearch
Get Signing CertificateSearch
Get Tokens From Refresh TokenSearch
Get UICustomizationSearch
Get UserSearch
Get User Attribute Verification CodeSearch
Get User Auth FactorsSearch
Get User Pool Mfa ConfigSearch
List DevicesSearch
List GroupsSearch
List Identity ProvidersSearch
List Resource ServersSearch
List Tags For ResourceSearch
List TermsSearch
List User Import JobsSearch
List User Pool Client SecretsSearch
List User Pool ClientsSearch
List User Pool ReplicasSearch
List User PoolsSearch
List UsersSearch
List Users In GroupSearch
List Web Authn CredentialsSearch
Add Custom AttributesAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Custom AttributesRequired | array |
Add User Pool Client SecretAction
Admin Add User To GroupAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Group NameRequired | choice |
Admin Confirm Sign UpAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Client Metadata | object |
Admin Create UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | text |
| Temporary Password | secret |
| User Attributes | array |
| Validation Data | array |
| Message Action | text |
| Desired Delivery Mediums | array |
| Force Alias Creation | text |
| Client Metadata | object |
Output fields[3]
| Field | Type |
|---|---|
UsernameRequired | text |
| User Attributes | array |
| Created Date | date |
| Last Modified Date | date |
| Enabled | boolean |
User StatusRequired | text |
Admin Delete Software TokenAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Admin Delete UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Admin Delete User AttributesAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
User Attribute NamesRequired | array |
Admin Disable Provider For UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
Admin Disable UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Admin Enable UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Admin Forget DeviceAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Device KeyRequired | text |
Admin Initiate AuthAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Auth FlowRequired | text |
| Auth Parameters | object |
| Client Metadata | object |
| Context Data | object |
| Analytics Metadata | object |
| Session | text |
Output fields[3]
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
| Authentication Result | object |
| Challenge Parameters | object |
Admin Link Provider For UserAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Destination UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
Source UserRequired | object |
Provider NameRequired | text |
Attribute NameRequired | text |
Attribute ValueRequired | text |
Admin Remove User From GroupAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Group NameRequired | choice |
Admin Reset User PasswordAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| Client Metadata | object |
Admin Respond To Auth ChallengeAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Challenge NameRequired | text |
| Challenge Responses | object |
| Session | text |
| Context Data | object |
| Analytics Metadata | object |
| Client Metadata | object |
Output fields[3]
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
| Authentication Result | object |
| Challenge Parameters | object |
Admin Set User MFAPreferenceAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| SMS MFA Settings | object |
| Software Token MFA Settings | object |
| Email MFA Settings | object |
Admin Set User PasswordAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
PasswordRequired | secret |
PermanentRequired | text |
Admin Set User SettingsAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
MFA OptionsRequired | array |
Admin Update Auth Event FeedbackAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Event IDRequired | text |
Feedback ValueRequired | text |
Admin Update Device StatusAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Device KeyRequired | text |
Device Remembered StatusRequired | text |
Admin Update User AttributesAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
| User Attributes | array |
| Client Metadata | object |
Admin User Global Sign OutAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Associate Software TokenAction
Change PasswordAction
Input fields[3]
| Field | Type |
|---|---|
Proposed PasswordRequired | secret |
Access TokenRequired | secret |
Complete Web Authn RegistrationAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
CredentialRequired | object |
Confirm DeviceAction
Confirm Forgot PasswordAction
Input fields[3]
| Field | Type |
|---|---|
Client IDRequired | choice |
UsernameRequired | text |
Confirmation CodeRequired | text |
PasswordRequired | secret |
| Analytics Metadata | object |
| User Context Data | object |
| Client Metadata | object |
| Secret Hash | text |
Confirm Sign UpAction
Input fields[3]
| Field | Type |
|---|---|
Client IDRequired | choice |
UsernameRequired | text |
Confirmation CodeRequired | text |
| Force Alias Creation | text |
| Analytics Metadata | object |
| User Context Data | object |
| Client Metadata | object |
| Session | text |
Create GroupAction
Create Identity ProviderAction
Create Managed Login BrandingAction
Create Resource ServerAction
Create TermsAction
Create User Import JobAction
Create User PoolAction
Input fields[3]
| Field | Type |
|---|---|
Pool NameRequired | text |
| Policies | object |
| Deletion Protection | text |
| Lambda Config | object |
| Auto Verified Attributes | array |
| Alias Attributes | array |
| Username Attributes | array |
| MFA Configuration | text |
| Email Configuration | object |
5other input fields
Output fields[3]
| Field | Type |
|---|---|
IDRequired | text |
NameRequired | text |
StatusRequired | text |
| Last Modified Date | date |
| Creation Date | date |
Create User Pool ClientAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client NameRequired | text |
| Generate Secret | text |
| Refresh Token Validity | number |
| Access Token Validity | number |
| ID Token Validity | number |
| Explicit Auth Flows | array |
| Supported Identity Providers | array |
| Callback URLs | array |
5other input fields
Output fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | text |
Client IDRequired | text |
Client NameRequired | text |
Create User Pool DomainAction
Create User Pool ReplicaAction
Delete GroupAction
Input fields[3]
| Field | Type |
|---|---|
Group NameRequired | choice |
User Pool IDRequired | choice |
Delete Identity ProviderAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Provider NameRequired | choice |
Delete Managed Login BrandingAction
Input fields[3]
| Field | Type |
|---|---|
Managed Login Branding IDRequired | text |
User Pool IDRequired | choice |
Delete Resource ServerAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
IdentifierRequired | choice |
Delete TermsAction
Input fields[3]
| Field | Type |
|---|---|
Terms IDRequired | text |
User Pool IDRequired | choice |
Delete UserAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
Delete User AttributesAction
Input fields[3]
| Field | Type |
|---|---|
User Attribute NamesRequired | array |
Access TokenRequired | secret |
Delete User PoolAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Delete User Pool ClientAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Delete User Pool Client SecretAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
Client Secret IDRequired | text |
Delete User Pool DomainAction
Input fields[3]
| Field | Type |
|---|---|
DomainRequired | text |
User Pool IDRequired | choice |
Delete User Pool ReplicaAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Region NameRequired | text |
Delete Web Authn CredentialAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
Credential IDRequired | text |
Forget DeviceAction
Input fields[3]
| Field | Type |
|---|---|
Device KeyRequired | text |
| Access Token | secret |
Forgot PasswordAction
Global Sign OutAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
Initiate AuthAction
Make an API Calluniversal
Resend Confirmation CodeAction
Respond To Auth ChallengeAction
Input fields[3]
| Field | Type |
|---|---|
Client IDRequired | choice |
Challenge NameRequired | text |
| Challenge Responses | object |
| Session | text |
| Analytics Metadata | object |
| User Context Data | object |
| Client Metadata | object |
Output fields[3]
| Field | Type |
|---|---|
Challenge NameRequired | text |
SessionRequired | text |
| Authentication Result | object |
| Challenge Parameters | object |
Revoke TokenAction
Input fields[3]
| Field | Type |
|---|---|
TokenRequired | secret |
Client IDRequired | choice |
| Client Secret | secret |
Set Log Delivery ConfigurationAction
Set Risk ConfigurationAction
Set UICustomizationAction
Set User MFAPreferenceAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
| SMS MFA Settings | object |
| Software Token MFA Settings | object |
| Email MFA Settings | object |
Set User Pool Mfa ConfigAction
Set User SettingsAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
MFA OptionsRequired | array |
Sign UpAction
Start User Import JobAction
Start Web Authn RegistrationAction
Stop User Import JobAction
Tag ResourceAction
Input fields[3]
| Field | Type |
|---|---|
Resource ARNRequired | text |
TagsRequired | object |
Untag ResourceAction
Input fields[3]
| Field | Type |
|---|---|
Resource ARNRequired | text |
Tag KeysRequired | array |
Update Auth Event FeedbackAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
UsernameRequired | choice |
Event IDRequired | text |
Feedback TokenRequired | secret |
Feedback ValueRequired | text |
Update Device StatusAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
Device KeyRequired | text |
Device Remembered StatusRequired | text |
Update GroupAction
Update Identity ProviderAction
Update Managed Login BrandingAction
Update Provisioned LimitAction
Update Resource ServerAction
Update TermsAction
Update User AttributesAction
Update User PoolAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
| Policies | object |
| Deletion Protection | text |
| Lambda Config | object |
| Auto Verified Attributes | array |
| MFA Configuration | text |
| Email Configuration | object |
| SMS Configuration | object |
| User Pool Tags | object |
2other input fields
Update User Pool ClientAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Client IDRequired | choice |
| Client Name | text |
| Refresh Token Validity | number |
| Access Token Validity | number |
| Explicit Auth Flows | array |
| Supported Identity Providers | array |
| Callback URLs | array |
| Logout URLs | array |
3other input fields
Output fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | text |
Client IDRequired | text |
Client NameRequired | text |
Update User Pool DomainAction
Update User Pool ReplicaAction
Input fields[3]
| Field | Type |
|---|---|
User Pool IDRequired | choice |
Region NameRequired | text |
StatusRequired | text |
Verify Software TokenAction
Verify User AttributeAction
Input fields[3]
| Field | Type |
|---|---|
Access TokenRequired | secret |
Attribute NameRequired | text |
CodeRequired | text |
Templates
Look for AWS Cognito templates in the WEXTL template library.
Browse templates →Explore alternative apps
- AWS S3[2]Store and manage objects in Amazon S3 — buckets, uploads, copies, ACLs, lifecycle, and event notifications.
- AWS LambdaServerless compute that runs your code without managing servers.
- ClerkAuthentication and user management with sign-in, sign-up, and MFA.
- Azure StorageManage containers and blobs in Azure Blob Storage.
- Bunny.netCDN control plane — manage pull zones, storage zones, DNS, video libraries, and cache purge.
References
- WEXTL® AWS Cognito Source Code connector implementation.
- Our users use cases and automations.
- Official API Documentation for AWS Cognito.
- WEXTL® visual workflow builder data.
Last updated: Sep 1, 2026 22:26