Amazon Cognito is a service that you can use to create unique identities for your users, authenticate these identities with identity providers, and save mobile user data in the AWS Cloud.
Enable this integration to see your Cognito Advanced Security metrics in Datadog.
If you haven’t already, set up the Amazon Web Services integration first.
Cognito is enabled under the Metric Collection tab.Note: Advanced Security must be enabled in AWS. See the AWS documentation to add Advanced Security to a User Pool.
Configure Amazon Cognito to send logs either to a S3 bucket or to CloudWatch.
Note: Only user pool logs can be sent. Amazon does not support the sending of other Cognito logs.
Note: If you log to a S3 bucket, make sure that amazon_cognito is set as Target prefix.
If you haven’t already, set up the Datadog Forwarder Lambda function.
Once the Lambda function is installed, manually add a trigger on the S3 bucket or CloudWatch log group that contains your Amazon Cognito logs in the AWS console:
| aws.cognito.compromised_credential_risk (count) | Requests where Amazon Cognito detected compromised credentials |
| aws.cognito.account_take_over_risk (count) | Requests where Amazon Cognito detected account take-over risk |
| aws.cognito.override_block (count) | Requests that Amazon Cognito blocked because of the configuration provided by the developer |
| aws.cognito.risk (count) | Requests that Amazon Cognito marked as risky |
| aws.cognito.no_risk (count) | Requests where Amazon Cognito did not identify any risk |
| aws.cognito.sign_up_successes (count) | Provides the total number of successful user registration requests made to the Amazon Cognito user pool |
| aws.cognito.sign_up_throttles (count) | Provides the total number of throttled user registration requests made to the Amazon Cognito user pool |
| aws.cognito.sign_in_successes (count) | Provides the total number of successful user authentication requests made to the Amazon Cognito user pool |
| aws.cognito.sign_in_throttles (count) | Provides the total number of throttled user authentication requests made to the Amazon Cognito user pool |
| aws.cognito.token_refresh_successes (count) | Provides the total number of successful requests to refresh an Amazon Cognito token that were made to the Amazon Cognito user pool |
| aws.cognito.token_refresh_throttles (count) | Provides the total number of throttled requests to refresh an Amazon Cognito token that were made to the Amazon Cognito user pool |
| aws.cognito.federation_successes (count) | Provides the total number of successful identity federation requests to the Amazon Cognito user pool |
| aws.cognito.federation_throttles (count) | Provides the total number of throttled identity federation requests to the Amazon Cognito user pool |
The Amazon Cognito integration does not include any events.
The Amazon Cognito integration does not include any service checks.
Need help? Contact Datadog support.