Migrating to Amazon Cognito, featuring approaches from
summary
Four migration patterns arrive: just-in-time migration using Cognito Lambda triggers to validate credentials against the legacy store (seamless for users), bulk import via CSV at ~30–40 users/sec (about 1–2M users/day) that forces password reset, admin-created provisioning (supports permanent passwords and MFA but counts toward MAU billing), and federation/linking for social or SAML identities. Amazon Cognito claims >100B auths/month and a default 40M user-pool quota. Fandango keeps legacy IDs as legacy ID as custom attribute, uses a secure-cookie proxy and phased cutover; Rotten Tomatoes moves CSV → S3 → Lambda → DynamoDB and implements a passwordless magic link with post-confirmation ID remapping via Kinesis.
AI-written summary · about
chapters (21)
- 0:00Intro
- 0:48What to expect
- 1:56Digital-first mindset
- 5:01Availability and scale
- 5:31Deeply integrated
- 6:07Invisible security
- 7:54User migration patterns - User import jobs
- 11:38User migration patterns - JIT migration
- 14:09User migration patterns - Mixed approach
- 15:29User migration patterns-Admin-created users
- 17:31User migration patterns - Account linking
- 20:09Choosing user migration pattern
- 23:03Key business drivers for Amazon Cognito
- 24:24Invest time in your migration plan
- 28:49Fandango approach: Phase 1
- 30:42Fandango approach: Phase 2
- 33:36Rotten Tomatoes: Passwordless login
- 34:30Rotten Tomatoes: User migration
- 35:23Rotten Tomatoes: User data remapping
- 36:55Learnings
- 39:57Considerations for successful transition
related talks
52mStaying ahead of threat actors with Amazon Cognito
13mManaging customer identities with Amazon Cognito
45mInternet-Scale Analysis of AWS Cognito Security
28mLessons From a Financial Services Passkey Deployment
21mEarning Trust in Identity at Scale
16mCloud Migration do's and don'ts
18mRunning Ory on a 30M users platform
01h 00mAWS Identity Workshop