Skip to content

Add Cognito VPC Endpoint (Private Link) Support for Isolated Network Deployment #703

@maryamkhidir

Description

@maryamkhidir

Description:

Currently, the privateWebsite: true feature creates private UI and backend components, but authentication still requires internet access to reach Cognito public endpoints. This prevents truly isolated network deployments.

Current Behavior:

• Private website accessible via ALB in VPC ✅
• Backend services use VPC endpoints ✅
• Authentication requires internet access to cognito-idp.region.amazonaws.com ❌

Expected Behavior:

When privateWebsite: true, the entire application including authentication should work without internet access using Cognito VPC endpoints.

References:

Cognito VPC Endpoints Documentation

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions