AWS Section10 advanced IAM

Gives users the ability to use authenticators like google or facebook to get authentication code to trade for temporary AWS security creds

• - Amazon cognito. 
• - Signup and sign-in to apps
• - Access for guest users
• - Acts as identity broker between app and web ID providers
• - Synchronises user data for multiple devices
• - Recommended for mobile apps of AWS

No need for the app to embed or store AWS credentials on the device locally and gives users a seamless experience.

User directories to manage the signup and signin functionality of mobile and web apps.

Successful idendtication creates a bunch of json web tokens

Enables you to create unique identities for your users and authenticate them with identiy providers. 

You can obtain temporary limited privelege aws creds to access other aws services.

a service fro mcognito to send updates and synchronise user data. Kinda like kindle.

It uses SNS to send a silent push notification to all devices associated with a given user identity when data stored in the cloud changes.

• Managed policy - AWS managed defualt policies. You cant edit them
• Customer Managed policy - Managed by you and embedded in a single user, group or role
• Inline policy - Managed by you and embedded in a single user, group or role.