Resources & FAQ

Q: What does the Cognito User Profiles Export Reference Architecture solution do?

A: The solution delivers a framework for exporting user profile and group information from your Amazon Cognito user pool to Amazon Dynamo DB, and for populating a new, empty user pool with data from DynamoDB. This can be used to facilitate more complex user queries, or to provide resiliency in case of accidental deletion of users or Regional failure.

Q: Can I schedule the export workflow?

A: When launching the solution, select your preferred export frequency: every 1, 7, or 30 days. If a different schedule is required, you can modify the CloudWatch event rule that starts the export workflow.

Q: Does the solution export and import passwords or MFA tokens?

A: The solution does not export sensitive information, such as user passwords or MFA tokens. For a full list of limitations, refer to the implementation guide.

Q: What are the prerequisites before I can deploy the Cognito User Profiles Export Reference Architecture solution?

A: The solution does not create Cognito user pools, so you must create or have an existing Cognito user pool in the AWS Region where you launch the solution. When you import users into the Cognito user pool, you must either create or already have a Cognito user pool.

Q: Is the solution’s backup table protected against accidental write or delete operations?

A: When the solution launches, the replica for the backup table in the primary Region has DynamoDB point-in-time recovery enabled. With point-in-time recovery, you can restore your table back to any point in time during the last 35 days. DynamoDB maintains incremental backups of your table.

Q: Can customers deploy the solution in any AWS Region?

A: This solution uses Amazon Cognito, which is currently available in specific AWS Regions only. Therefore, you must launch this solution in an AWS Region where Amazon Cognito is available.

For the most current availability by Region, see AWS service offerings by Region.