Amazon Cognito

Amazon Cognito handles user authentication and authorization for your web and mobile apps. With user pools, you can easily and securely add sign-up and sign-in functionality to your apps. With identity pools (federated identities), your apps can get temporary credentials that grant users access to specific AWS resources, whether the users are anonymous or are signed in.

You must configure cloud connections to monitor this entity. See Set up Cisco AppDynamics Cloud Collectors to Monitor AWS.

Cisco Cloud Observability displays AWS entities on the Observe page. Metrics are displayed for specific entity instances in the list and detail views.

This document contains references to third-party documentation. Cisco AppDynamics does not own any rights and assumes no responsibility for the accuracy or completeness of such third-party documentation.

Detail View

To display the detail view for an Amazon Cognito instance:

Navigate to the Observe page.
Under Cloud Governance & Security Management, click AWS Cognito User Pools.
The list view now displays.
From the list, click an instance Name to display the detail view.
The detail view displays the metrics, key performance indicators, and properties (attributes) related to the instance you selected.

Metrics and Key Performance Indicators

Cisco Cloud Observability displays the following metrics and key performance indicators (KPIs) for Amazon Cognito. For more information, see Metrics for Amazon Cognito user pools.

Display Name	Source Metric Name	Description
User Sign Ups Count by Client ID	`SignUpSuccesses`	Provides the total number of successful user registration requests made to the Amazon Cognito user pool. A successful user registration request produces a value of 1, whereas an unsuccessful request produces a value of 0. A throttled request is also considered as an unsuccessful request, and hence a throttled request will also produce a count of 0.
User Sign Ins Count by Client ID	`SignInSuccesses`	Provides the total number of successful user authentication requests made to the Amazon Cognito user pool. A user authentication is considered successful when authentication token is issued to the user. A successful authentication produces a value of 1, whereas an unsuccessful request produces a value of 0. A throttled request is also considered as an unsuccessful request, and hence a throttled request will also produce a count of 0.
User Tokens Refresh Count by Client ID	`TokenRefreshSuccesses`	Provides the total number of successful requests to refresh an Amazon Cognito token that were made to the Amazon Cognito user pool. A successful refresh Amazon Cognito token request produces a value of 1, whereas an unsuccessful request produces a value of 0. A throttled request is also considered as an unsuccessful request, and hence a throttled request will also produce a count of 0.
Requests Throttle Count by Client ID	`TokenRefreshThrottles`	Provides the total number of throttled requests to refresh an Amazon Cognito token that were made to the Amazon Cognito user pool. A count of 1 is published whenever a refresh Amazon Cognito token request is throttled.

Properties (Attributes)

Cisco Cloud Observability displays the following properties for Amazon Cognito.

Display Name	Property Name	Description
ID	`aws.cognito.user_pool.id`	The unique identifier for the user pool.
Name	`aws.cognito.user_pool.name`	The name of the user pool.
ARN	`aws.cognito.user_pool.arn`	The Amazon Resource Name (ARN) of the user pool.
Estimated Number of Users	`aws.cognito.user_pool.number_of_users`	Specifies the estimated number of users in the user pool.
Status	`aws.cognito.user_pool.status`	The status of the identity pool.
Last Modified Date	`aws.cognito.user_pool.last_modified_date`	The date and time that the item was modified.
Creation Date	`aws.cognito.user_pool.creation_date`	The date and time that the item was created.
MFA Configuration Status	`aws.cognito.user_pool.mfa_configuration`	The status of MFA configuration.
Cloud Provider	`cloud.provider`	The name of the cloud provider.

Retention and Purge Time-To-Live (TTL)

For all cloud and infrastructure entities, the retention TTL is 180 minutes (3 hours) and the purge TTL is 525,600 minutes (365 days).

Amazon Web Services, the AWS logo, AWS, and any other AWS Marks used in these materials are trademarks of Amazon.com, Inc. or its affiliates in the United States and/or other countries.