Note:

You are viewing the documentation for an older major version of the AWS CLI (version 1).

AWS CLI version 2, the latest major version of AWS CLI, is now stable and recommended for general use. To view this page for the AWS CLI version 2, click here. For more information see the AWS CLI version 2 installation instructions and migration guide.

[ aws ]

cognito-identity

Description

Amazon Cognito Federated Identities is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. It uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito Federated Identities, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon) or an Amazon Cognito user pool, and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

For a description of the authentication flow from the Amazon Cognito Developer Guide see Authentication Flow .

For more information see Amazon Cognito Federated Identities .

Available Commands

• create-identity-pool
• delete-identities
• delete-identity-pool
• describe-identity
• describe-identity-pool
• get-credentials-for-identity
• get-id
• get-identity-pool-roles
• get-open-id-token
• get-open-id-token-for-developer-identity
• get-principal-tag-attribute-map
• list-identities
• list-identity-pools
• list-tags-for-resource
• lookup-developer-identity
• merge-developer-identities
• set-identity-pool-roles
• set-principal-tag-attribute-map
• tag-resource
• unlink-developer-identity
• unlink-identity
• untag-resource
• update-identity-pool