Static Ip address for AWS Cognito

Question

We have created a cognito userpool that is used by our customers in a machine-machine capacity only. We are trying to  onboard a new customer who has strict egress rules on their firewalls and they have asked us to provide static IP addresses for the cognito endpoint.
How can we achieve this requirement? And also is cognito endpoint a fixed ip address?

Answer

You can keep up to date with the IP Ranges used by AWS by downloading [the list](https://ip-ranges.amazonaws.com/ip-ranges.json).

Cognito is not a range that is tracked. It will fall within the "EC2" IP ranges, which are quite large.

A different solution for your customer would be to use domain restricted rules, which could then be restricted to the [list of Amazon Cognito endpoints](https://docs.aws.amazon.com/general/latest/gr/cognito_identity.html).

Static Ip address for AWS Cognito

Conteúdo relevante