JA EN
shiichan

Building on Amazon Cognito? Let Your AI Agent Handle It!

AWS What's New ★★★★ View Markdown
#aws#ai#security

Hey everyone, it's Shiichan! Today's news is great if you rely on AI coding agents — setting up authentication just got a lot easier to hand off.

AWS What's New aws.amazon.com

What was announced?

AWS's What's New page announced that Amazon Cognito is now available as a core skill, called aws-auth, in the Agent Toolkit for AWS. AI coding agents using the toolkit can now set up, configure, secure, and troubleshoot Amazon Cognito through best-practice workflows, helping developers implement secure sign-in flows for users, AI agents, and microservices faster.

The story so far

Configuring something like Cognito touches a lot of moving parts — user pool and app client design, OAuth 2.0 flows, token handling, passkey support, and more — so getting it right by best practice takes real expertise. Even when you hand it off to an AI coding agent, the agent needed to actually know Cognito's specific quirks to land on a secure configuration, which wasn't a given before.

What changes

The aws-auth skill covers a broad set of topics:

  • User pool and app client configuration
  • Managed login and OAuth 2.0 flows
  • Token management
  • JWT authorizers
  • Passkey/WebAuthn enrollment
  • Threat protection
  • Lambda trigger wiring
  • Identity pools

With an agent handling all of this consistently and by best practice, developers no longer need to look up "what's the right way to configure this part of Cognito" every time they want a secure sign-in flow.

Dive Deep

The aws-auth skill also works alongside the AWS MCP Server — in that setup, agents execute AWS CLI commands with IAM-based guardrails and CloudTrail audit logging. It works standalone too, using just the AWS CLI without the MCP Server.

You can get the skill from the Amazon Cognito aws-auth skill repo on GitHub, and get started via the Agent Toolkit for AWS Quick Start guide.

Wrap-up

  • Amazon Cognito is now available as the aws-auth core skill in the Agent Toolkit for AWS
  • It covers user pool configuration, OAuth 2.0, token management, JWT authorizers, passkeys, Lambda triggers, and more
  • Paired with the AWS MCP Server, agents run CLI commands with IAM guardrails and CloudTrail audit logging
  • It also works standalone via the AWS CLI, and is available on GitHub

If you want your AI coding agent to handle authentication setup, this is worth trying as early as next week.

Related posts