Other capabilities
Beyond signing users in to your application with a user pool, Amazon Cognito offers additional capabilities for specialized needs. Amazon Cognito identity pools exchange a user's identity for temporary, limited-privilege AWS credentials so that your application can call AWS services directly.