Cognito, used for secure user authentication, previously generated all app client secrets automatically. The update allows users to maintain up to two active secrets per app client, facilitating secret rotation without downtime, and to supply custom secrets for existing or new app clients to better meet organizational security policies.
These lifecycle management improvements support compliance requirements and improve credential security posture in enterprise environments. Available in all AWS Regions with Cognito user pools, the feature integrates with standard AWS development tools. Independent audits of security benefits have not been disclosed, but the enhancements align with common credential management best practices.
Source & further reading
Amazon Cognito enhances client secret management with secret rotation and custom secrets ↗Source published 2026-02-26. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.