Building Customer Identity and Access Management (CIAM) in Your Applications on AWS
1h 59mIntermediate2025-07-17
Authors

Mahmoud Matouk
Course details
Customer-facing applications need user management to allow customers to create accounts, sign in, and engage in business. Adding user management to applications requires several functionalities and is a security-sensitive component for any application. In this course, instructor Mahmoud Matouk shows you how to offload customer identity management to managed services from AWS. Learn how to integrate your application securely with these services to accelerate the development of user management, increasing your confidence in the security posture of your application. With hands-on demos, Mahmoud demonstrates how to securely provide access to resources through your application and how to monitor interactions while learning how to detect unusual patterns.
Learning objectives
Add user authentication and authorization in your applications using AWS services.
Securely give your end users access to AWS services and resources through your application.
Monitor end-user interactions with your application and detect unusual patterns.
Learning objectives
Add user authentication and authorization in your applications using AWS services.
Securely give your end users access to AWS services and resources through your application.
Monitor end-user interactions with your application and detect unusual patterns.
Skills covered
Identity and Access ManagementCloud SecurityNetwork SecurityAmazon Web Services (AWS)AmazonCybersecurityCloud ComputingDeep Dive (X:Y)
Concepts
0. Introduction
- 01 - CIAM essentials - Building your customer identity foundation
- 02 - Using GitHub Codespaces
1. Customer Identity and Access Management (CIAM)
- 03 - Common CIAM requirements
- 04 - Choosing a CIAM solution
2. CIAM Services on AWS
- 05 - Overview of CIAM services on AWS
- 06 - Getting started with Amazon Cognito
- 07 - Exploring Amazon Cognito default settings
- 08 - Getting started with Amazon Verified Permissions
- 09 - End-to-end CIAM scenario
3. Integrating Your Application with CIAM Services
- 10 - CIAM integration patterns
- 11 - Adding user authentication with Amazon Cognito
- 12 - Customizing user authentication and managed login
- 13 - Accessing backend resources
- 14 - Accessing AWS services
- 15 - Adding authorization with AVP
- 16 - Putting it all together
4. Monitoring and Visibility
- 17 - Understanding metrics
- 18 - AWS CloudTrail events
- 19 - User event history
5. Advanced Patterns
- 20 - Threat protection and adaptive authentication
- 21 - Sign in with social and external providers
- 22 - AWS Lambda extensions and lifecycle hooks
Conclusion
- 23 - Learning more about CIAM and AWS services