Cognito

The Cognito skill enables AI agents to interact with Amazon Cognito, allowing them to manage user pools and identity pools programmatically. It facilitates tasks like creating users, authenticating sessions, and managing groups directly within your AWS infrastructure.

When to use it

• Automate the onboarding process for new users by programmatically creating accounts in a user pool.
• Reset forgotten passwords or update user attributes without manual administrative intervention.
• Generate temporary credentials for federated identities using an identity pool for secure API access.
• Manage group memberships to control permissions and access levels dynamically based on user roles.

Key capabilities

• Create, delete, and list users within Amazon Cognito user pools.
• Authenticate users and retrieve authentication tokens (ID, Access, and Refresh).
• Manage groups and update user attributes in real-time.
• Initiate password resets and handle account recovery flows.
• Link and unlink identities between user pools and identity pools.

Example prompts

• "Create a new user named '[email protected]' with the email attribute set to '[email protected]'."
• "Authenticate the user 'jane.smith' using her username and password, then return the access token."
• "Add the current authenticated user to the 'Admins' group in the specified user pool."

Tips & gotchas

Ensure your AWS credentials have the necessary cognito-idp:* permissions before attempting to execute these operations. This skill requires a pre-configured Cognito user pool or identity pool ID to function correctly.