Production Deployment Recommendations

For production deployments, consider the following best practices:

Custom Domain Configuration

Configure a custom domain for your deployment following your organization’s security best practices and policies. You can specify a custom domain during the initial deployment, or configure it after deployment is complete.

External Identity Provider Integration

Instead of managing users and groups directly in Amazon Cognito, integrate with your organization’s external identity provider. This centralizes user and group management in your existing identity system and enforces consistent security policies across your organization. For configuration guidance, see Cognito User Pools Identity Federation in the AWS documentation.