Tagged
Local JWT validation is fast until revocation lags bite you. When to introspect at Cognito, use API Gateway JWT authorizers, and add Verified Permissions for fine-grained authz.
June 2026 AWS announcements — Console Private Access without internet (June 15), EC2 M9g/M9gd Graviton5 GA, Claude Fable 5 GA, FinOps Agent preview, Cost Explorer Analyze with Amazon Q, Bedrock console redesign, Cognito multi-Region replication, GPT-5.4 in GovCloud. Plus June 30 lifecycle updates for Bedrock Agents Classic, Q Business, and Kendra.
July 2026: Cognito user pools for SaaS — managed login vs classic hosted UI, pool vs silo tenancy, federation limits, and a checklist before you outgrow Cognito into Auth0/Okta.