AWS Cognito Configuration

1. Go to AWS Cognito and select your User Pool
2. Under General, go to App Clients and select Add an app client
   1. Configure as you please and select Create App Client
   2. Take note of your Client ID
3. Navigate to App client settings under App integration
   1. Select Identity Providers to enable
   2. Under Callback URL(s), enter your Cloudfront hostname with your preferred path value for the authorization callback. Example: https://my-cloudfront-site.example.com/_callback
   3. Under Allowed OAuth Flows, select Authorization code grant
   4. Finally, under Allowed OAuth Scopes, select openid and email
   5. Save
4. Find your Base URL
   1. https://cognito-idp.{REGION}.amazonaws.com/{USER-POOL-ID}
      1. The User Pool ID can be found at the top of the General Settings tab