与IAM Identity Center结合

IAM Identity Center作为IdP，Cognito作为SP，使用SAML协议进行联合登录。用户和安全凭据保存在IAM Identity Center，负责验证登录的用户。

参考资料

1-https://repost.aws/zh-Hans/knowledge-center/cognito-user-pool-iam-integration

2-https://aws.amazon.com/blogs/security/how-to-set-up-saml-federation-in-amazon-cognito-using-idp-initiated-single-sign-on-request-signing-and-encrypted-assertions/