1
00:00:00,150 --> 00:00:04,890
In this video, we are going to learn Amazon Incognito use cases.

2
00:00:05,650 --> 00:00:10,600
As you know, that Amazon Incognito has two main components, which is the user pool.

3
00:00:10,600 --> 00:00:16,960
And identical user pool is a user directory in Amazon Incognito and user pools are user directories

4
00:00:16,960 --> 00:00:21,130
that provide sign up and sign in options for our applications.

5
00:00:21,760 --> 00:00:29,320
Then pools provide ADA credentials to grant users access to other services with identical users can

6
00:00:29,320 --> 00:00:35,920
obtain temporary ADA credentials to access ADA services such as Amazon S3 and Dynamo DB.

7
00:00:36,370 --> 00:00:40,510
So with these pools we can say the use cases.

8
00:00:40,510 --> 00:00:43,450
The first use case is authenticate with user pool.

9
00:00:43,480 --> 00:00:50,590
We can enable users to authenticate with a user pool or application users can sign in directly through

10
00:00:50,590 --> 00:00:54,910
the user pool or federated through the third party identity providers.

11
00:00:54,910 --> 00:01:01,000
The user pool handle the tokens that are returned from social signing like Facebook, Google, Amazon

12
00:01:01,000 --> 00:01:06,190
and Apple or OpenID Connect and the SAML Identity Providers.

13
00:01:06,670 --> 00:01:13,450
And the second use case is Incognito User Pool to access resources with an API, gateway and Lambda.

14
00:01:14,050 --> 00:01:19,990
This use case is one of our hands on use case that we will develop together in the next sections.

15
00:01:20,080 --> 00:01:25,660
Basically, we can enable users to access our API through the API.

16
00:01:25,660 --> 00:01:27,010
Gateway API.

17
00:01:27,010 --> 00:01:33,880
Gateway validates the token from a user pool authentication and used them to grant users access to resources,

18
00:01:33,880 --> 00:01:37,930
including lambda functions or APIs on our application.

19
00:01:37,930 --> 00:01:44,650
So we can also submit our user pool tokens with a request to API gateway for verification by Amazon

20
00:01:44,650 --> 00:01:50,320
Incognito Authorize the Lambda function and we will see how our API Gateway and Lambda can be.

21
00:01:50,340 --> 00:01:52,950
Amazon Cognitive Authorizer in the next videos.

22
00:01:53,380 --> 00:01:59,770
So if you look at the other use cases, we can access ADA sources with user pool and identifiable.

23
00:02:00,070 --> 00:02:06,400
So in the last video we give this example, the first step, the application user signing through the

24
00:02:06,400 --> 00:02:10,780
user pool and receive user pool token after a successful authentication.

25
00:02:10,780 --> 00:02:16,900
And after that exchange the user pool token for a credential with using the identity pools.

26
00:02:16,900 --> 00:02:24,370
And finally, our application user use these ADA credentials to access other ADA services like Amazon

27
00:02:24,370 --> 00:02:25,660
S3 and Dynamo DB.

28
00:02:26,970 --> 00:02:32,670
And another use case is authenticate with third party and access a sources with identical.

29
00:02:32,820 --> 00:02:41,130
We can enable to users access with a services using the identity pools and identical requires an IDP

30
00:02:41,130 --> 00:02:45,180
token from a user date authenticated by a third party identity provider.

31
00:02:45,420 --> 00:02:52,650
In exchange, the identity pool grants temporary temporary aid credentials that we can use these access

32
00:02:52,650 --> 00:02:55,350
to connect other aid services.

33
00:02:55,380 --> 00:03:01,380
These are the main use cases of Amazon incognito authentication flows that we will see in the upcoming

34
00:03:01,380 --> 00:03:03,300
videos and perform some hands on knobs.