Description:
Currently, the privateWebsite: true feature creates private UI and backend components, but authentication still requires internet access to reach Cognito public endpoints. This prevents truly isolated network deployments.
Current Behavior:
• Private website accessible via ALB in VPC ✅
• Backend services use VPC endpoints ✅
• Authentication requires internet access to cognito-idp.region.amazonaws.com ❌
Expected Behavior:
When privateWebsite: true, the entire application including authentication should work without internet access using Cognito VPC endpoints.
References:
• Cognito VPC Endpoints Documentation