Shared Responsibility Environment
User Responsibility vs AWS responsibility
Amazon Cognito
create unique identities for users;
authenticate identities with identity providers, or your own auth process;
supports unauthenticated identities;
save mobile user data
user credentials obtained to synchronized data with Cognito Sync
IAM Role Scenario
User logs in to app
We generate temporary AWS credentials
The temporary credentials are associated with a specific IAM role
The IAM role gives access to DynamoDB to read/write progress