STEP 1
Connect AWS Cognito and MISP
Save credentials in WEXTL once. We store them encrypted and reuse the authorization across every workflow [3]. No coding or API skills required.
AWS Cognito and MISP Integration
Connect AWS Cognito and MISP to automate developer tools workflows. Trigger events from one app, run actions in the other and use AI to make smart decisions. Integrate apps in 3 simple steps - no code required.
3-day trialCancel anytimeUp to 10 minutes quick set up
- GDPR
- Data Encryption
- 2FA
- Local Data Region
Learn about AWS Cognito and MISP
Detailed info you need to know about AWS Cognito and MISP integrations in WEXTL. Explore which modules apps support and how you connect them.
AWS Cognito
Amazon Cognito User Pools — manage users, groups, app clients, and identity providers with SigV4. [5]
How to connect AWS Cognito to MISP
Set up your AWS Cognito and MISP integration in 3 simple steps [2] — no coding required. Up to 10 minutes setup.
STEP 2
Build a workflow
Paste selected AWS Cognito and MISP nodes onto the canvas [4], or describe what you want and WEXTL wires the flow together with AI Builder.
STEP 3
Map your data
Choose which fields need to sync between AWS Cognito and MISP. Use filters or leverage a JS custom code step in between — everything is on the canvas.
How does the integration between AWS Cognito and MISP work in WEXTL?
WEXTL exposes actions and triggers for AWS Cognito and MISP that help you connect apps and automate repetitive tasks [1]. A trigger is an event that happens, an action — a step that performs when the event has occurred.
MISP triggersAWS Cognito actions
MISP modules
- Watch EventsTriggers when events are detected.
- Add a CollectionAdds a collection.
- Add a FeedAdds a feed.
- Add a Server to a Sharing GroupAdds a server to a sharing group.
- Add a Sharing GroupAdds a sharing group.
- Add an AttributeAdds an attribute.
- Add an Object to an EventAdds an object to an event.
- Add an Organisation to a Sharing GroupAdds an organisation to a sharing group.
- Add Analyst DataAdds analyst data.
- Add EventAdds event.
- Add Event ReportAdds event report.
- Add Event TagAdds event tag.
- Add Galaxy ClusterAdds galaxy cluster.
- Add OrganisationAdds organisation.
- Add ServerAdds server.
- Add Sighting of an AttributeAdds sighting of an attribute.
- Add Sightings of a List of ValuesAdds sightings of a list of values.
- Add TagAdds tag.
- Add Tag(s) to Attribute(s)Adds tag(s) to attribute(s).
- Add UserAdds user.
- Attach the Galaxy Cluster Tag a Given EntityAttaches the galaxy cluster tag a given entity.
- Cache FeedsCaches feeds.
- Check If a List of Values Matches Any WarninglistsRetrieves check if a list of values matches any warninglists.
- Delete a CollectionDeletes a collection.
- Delete a GalaxyDeletes a galaxy.
- Delete a Server from a Sharing GroupDeletes a server from a sharing group.
- Delete a Sharing GroupDeletes a sharing group.
- Delete a Tag from an AttributeDeletes a tag from an attribute.
- Delete an AttributeDeletes an attribute.
- Delete an Organisation from a Sharing GroupDeletes an organisation from a sharing group.
- Delete Analyst DataDeletes analyst data.
- Delete EventDeletes event.
- Delete Event ReportDeletes event report.
- Delete Event Report PermanentlyDeletes event report permanently.
- Delete Event TagDeletes event tag.
- Delete Galaxy ClusterDeletes galaxy cluster.
- Delete ObjectDeletes object.
- Delete OrganisationDeletes organisation.
- Delete ServerDeletes server.
- Delete SightingDeletes sighting.
- Delete TagDeletes tag.
- Delete UserDeletes user.
- Delete User Setting by IdDeletes user setting by id.
- Disable FeedDisables feed.
- Disable TaxonomyDisables taxonomy.
- Edit a CollectionEdits a collection.
- Edit a FeedEdits a feed.
- Edit a Sharing GroupEdits a sharing group.
- Edit an AttributeEdits an attribute.
- Edit Analyst DataEdits analyst data.
AWS Cognito modules
- Add Custom AttributesPerforms the add custom attributes action.
- Add User Pool Client SecretPerforms the add user pool client secret action.
- Admin Add User To GroupPerforms the admin add user to group action.
- Admin Confirm Sign UpPerforms the admin confirm sign up action.
- Admin Create UserCreates a new user.
- Admin Delete Software TokenDeletes software token.
- Admin Delete UserDeletes user.
- Admin Delete User AttributesDeletes user attributes.
- Admin Disable Provider For UserPerforms the admin disable provider for user action.
- Admin Disable UserPerforms the admin disable user action.
- Admin Enable UserPerforms the admin enable user action.
- Admin Forget DevicePerforms the admin forget device action.
- Admin Get DeviceReturns device.
- Admin Get UserReturns user.
- Admin Get User Auth FactorsReturns user auth factors.
- Admin Initiate AuthPerforms the admin initiate auth action.
- Admin Link Provider For UserPerforms the admin link provider for user action.
- Admin List DevicesRetrieves a list of devices.
- Admin List Groups For UserRetrieves a list of groups for user.
- Admin List User Auth EventsRetrieves a list of user auth events.
- Admin Remove User From GroupPerforms the admin remove user from group action.
- Admin Reset User PasswordPerforms the admin reset user password action.
- Admin Respond To Auth ChallengePerforms the admin respond to auth challenge action.
- Admin Set User MFAPreferencePerforms the admin set user mfapreference action.
- Admin Set User PasswordPerforms the admin set user password action.
- Admin Set User SettingsPerforms the admin set user settings action.
- Admin Update Auth Event FeedbackUpdates auth event feedback.
- Admin Update Device StatusUpdates device status.
- Admin Update User AttributesUpdates user attributes.
- Admin User Global Sign OutSigns a user out of all sessions as an administrator.
- Associate Software TokenPerforms the associate software token action.
- Change PasswordPerforms the change password action.
- Complete Web Authn RegistrationPerforms the complete web authn registration action.
- Confirm DevicePerforms the confirm device action.
- Confirm Forgot PasswordPerforms the confirm forgot password action.
- Confirm Sign UpPerforms the confirm sign up action.
- Create GroupCreates a new group.
- Create Identity ProviderCreates a new identity provider.
- Create Managed Login BrandingCreates a new managed login branding.
- Create Resource ServerCreates a new resource server.
- Create TermsCreates a new terms.
- Create User Import JobCreates a new user import job.
- Create User PoolCreates a new user pool.
- Create User Pool ClientCreates a new user pool client.
- Create User Pool DomainCreates a new user pool domain.
- Create User Pool ReplicaCreates a new user pool replica.
- Delete GroupDeletes group.
- Delete Identity ProviderDeletes identity provider.
- Delete Managed Login BrandingDeletes managed login branding.
- Delete Resource ServerDeletes resource server.
Explore alternative integrations
There are other apps [9] supported by WEXTL that can be paired with AWS Cognito and MISP integrations. Pick any from the list below if the current combination isn't the one you need.
Frequently asked questions
Common questions about connecting AWS Cognito and MISP.
Connect your AWS Cognito and MISP accounts once, pick a trigger in one app and an action in the other, then map the fields so data flows automatically between them. [3]
Example: when MISP's "Watch Events" fires, WEXTL can "Add Custom Attributes" in AWS Cognito. AWS Cognito has 133 actions (including Add Custom Attributes, Add User Pool Client Secret, and Admin Add User To Group); MISP has 138 actions (including Add a Collection, Add a Feed, and Add a Server to a Sharing Group). Add filters and transforms between steps when you need them. [1]
Yes — the integration works in both directions. Use each app's triggers to start a workflow and the other app's actions to update it. [2]
No. AWS Cognito-to-MISP automations are built visually on the canvas. You can optionally add custom JavaScript with Functions when you need advanced logic. [4]
Yes. Trigger-based automations start the moment AWS Cognito (or MISP) fires a new event — webhook-backed apps run within seconds, and polling-only apps re-check on a schedule you control. [7]
A first automation typically takes 5–10 minutes: connect each app's credential once, drop a trigger + action onto the canvas, map the fields, and turn the workflow on.
You can build your AWS Cognito + MISP automation on a 3-day trial with every feature unlocked. Cancel anytime. For your protection, a small deposit is charged to your card when your trial starts. It counts toward your first payment and is non-refundable. [8]
References
List of sources used to gather information about the AWS Cognito and MISP integration.
- AWS Cognito and MISP integration source code, module specs and credentials implementation.
- Our AWS Cognito and MISP integration documentation, structured input and output parameters, scopes, and authentication methods.
- Official vendor API documentation for AWS Cognito and MISP — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
- WEXTL® visual workflow builder, anonymized data from our technical support team.
- AWS Cognito integration information
- MISP integration information
- WEXTL® Scheduling
- WEXTL® Pricing and Trial
- WEXTL® Apps Library