63 releases (19 stable)

new 1.20.0 Apr 12, 2024
1.18.0 Mar 26, 2024
1.9.0 Dec 21, 2023
1.3.0 Nov 27, 2023
0.0.0 May 7, 2021

#568 in Authentication

Download history 304/week @ 2023-12-23 430/week @ 2023-12-30 1093/week @ 2024-01-06 883/week @ 2024-01-13 847/week @ 2024-01-20 975/week @ 2024-01-27 533/week @ 2024-02-03 607/week @ 2024-02-10 933/week @ 2024-02-17 766/week @ 2024-02-24 1083/week @ 2024-03-02 1545/week @ 2024-03-09 1054/week @ 2024-03-16 432/week @ 2024-03-23 498/week @ 2024-03-30 678/week @ 2024-04-06

2,940 downloads per month


27K SLoC


Amazon Cognito Federated Identities is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. It uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito Federated Identities, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon) or an Amazon Cognito user pool, and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

For a description of the authentication flow from the Amazon Cognito Developer Guide see Authentication Flow.

For more information see Amazon Cognito Federated Identities.

Getting Started

Examples are available for many services and operations, check out the examples folder in GitHub.

The SDK provides one crate per AWS service. You must add Tokio as a dependency within your Rust project to execute asynchronous code. To add aws-sdk-cognitoidentity to your project, add the following to your Cargo.toml file:

aws-config = { version = "1.1.7", features = ["behavior-version-latest"] }
aws-sdk-cognitoidentity = "1.20.0"
tokio = { version = "1", features = ["full"] }

Then in code, a client can be created with the following:

use aws_sdk_cognitoidentity as cognitoidentity;

async fn main() -> Result<(), cognitoidentity::Error> {
    let config = aws_config::load_from_env().await;
    let client = aws_sdk_cognitoidentity::Client::new(&config);

    // ... make some calls with the client


See the client documentation for information on what calls can be made, and the inputs and outputs for each of those calls.

Using the SDK

Until the SDK is released, we will be adding information about using the SDK to the Developer Guide. Feel free to suggest additional sections for the guide by opening an issue and describing what you are trying to do.

Getting Help


This project is licensed under the Apache-2.0 License.


~272K SLoC