Cognito Users

Cognito Users are used for User Authentication and are separate from individual Application Users.

A Cognito User's name and custom:SuperUser attribute can be updated. Additionally, Super Users can manually verify a user's email address or resend an account verification email to the user.

A Cognito User's email address can not be changed.

Cognito User status can be one of the following:

• UNCONFIRMED - The user has been created but not confirmed.                  
• CONFIRMED - The user has been confirmed.
• EXTERNAL_PROVIDER - User signed in with a third-party IdP.
• UNKNOWN - User status isn't known.
• RESET_REQUIRED - The user is confirmed, but the user must request a code and their password before they can sign in.
• FORCE_CHANGE_PASSWORD - The user is confirmed and can sign in using a temporary password, but on the first sign-in, the user must change their password to a new value before doing anything else.