Front-End Web & Mobile
Category: Security
Build a Mobile App with Passwordless Login on top of AWS Amplify
Note: The Amazon Cognito hosted UI (Web) does not support the custom authentication flow. According to the Gartner Group , 20% to 50% of all IT help desk tickets each year are password resets, meaning the average managed service provider (MSP) with 1,300 users wastes around $7.19 per user, adding up to an annual cost […]
How to enforce user quota on AWS AppSync with Lambda Authorizer
API Quotas define the valid amount of calls available for a consumer during a specific amount of time. Enforcing quotas protects your API from unintentional abuse, minimizes data exfiltration and protects your resources from excessive usage. Beyond the mentioned security benefits, it can also unlock your capabilities to monetize the digital assets sitting behind the […]
GraphQL API Security with AWS AppSync and Amplify
This article was written by Brice Pellé, Principal Specialist Solutions Architect, AWS September 14, 2021: Amazon Elasticsearch Service has been renamed to Amazon OpenSearch Service. See details. AWS AppSync is a fully managed service which allows to deploy and interact with serverless scalable GraphQL backends on AWS. AppSync uses security best practices that AWS has […]
Understanding Amazon Cognito user pool OAuth 2.0 grants
In addition to using the Amazon Cognito-specific user APIs to authenticate users, Amazon Cognito user pools also support the OAuth 2.0 authorization framework for authenticating users. After you configure a domain for the user pool, Amazon Cognito automatically provisions a hosted UI that enables you to easily add a federated, single sign-on experience to your […]