I read a great post about protecting Amazon Cognito with an Amazon CloudFront proxy and wondered if using an Amazon API Gateway proxy instead would work better.

It really really did. Being able to use the full power of Lambda was fantastic, and the performance was improved significantly.

This approach also let us quickly implement a few tiny features that Cognito doesn’t have yet, like server-side attribute validation and user lifecycle events.

I got in touch with the author of the original post and he was generous enough to offer a collaboration on a follow-up post on the AWS architecture blog.

Check out the full post for all the details.