Stackpane Stackpane
Download

Cognito Users

Browse, create, edit, and manage AWS Cognito User Pool users.

Overview

The Cognito Users section provides a complete user management interface for AWS Cognito User Pools. Browse all users in a sortable table, inspect individual user details, create new users, and perform account actions like disabling accounts and resetting passwords.

Prerequisites

  • Your IAM user must have cognito-idp permissions. See the StackpaneCognito statement in the AWS Setup guide.
  • Your connection must include a Cognito User Pool ID (e.g., us-east-1_aBcDeFgHi). Enter it when creating the connection or add it later by editing the connection. Find your User Pool ID in the AWS Console under Cognito > User pools.
  • The User Pool must be in the same region as your connection.

User Listing

Navigate to the Authentication section from the sidebar and select a Cognito User Pool to see all users in a table with the following columns:

  • Username — the unique username in the user pool
  • Email — the user’s email address attribute
  • Status — account status (CONFIRMED, UNCONFIRMED, FORCE_CHANGE_PASSWORD, etc.)
  • Enabled — whether the user account is active or disabled
  • Created — account creation date
  • Last Modified — when the user record was last updated

Users load with pagination. Click Load More to fetch additional pages. Use column headers to sort by any field, and toggle column visibility with the column configuration button.

User Inspector

Click any user row to open the inspector panel with complete user details:

  • Username — the unique identifier (selectable for copying)
  • Sub — the unique user ID assigned by Cognito
  • Email — the user’s email address
  • Email Verified — whether the email has been verified
  • Phone Number — if set
  • Phone Number Verified — whether the phone number has been verified
  • Status — current account status
  • Enabled — active or disabled, with a toggle to change it
  • Created and Last Modified timestamps
  • Custom Attributes — any additional attributes defined in the user pool schema

Creating Users

Create a new Cognito user:

  1. Click the + button and select Create User.
  2. Enter the username.
  3. Enter the user’s email address.
  4. Enter a temporary password. Cognito enforces the password policy configured on the user pool.
  5. Click Create User.

The new user is created with AdminCreateUser and appears in the table with a status of FORCE_CHANGE_PASSWORD. The user must change their password on first sign-in.

Editing User Attributes

  1. Select a user and click Edit in the inspector.
  2. Modify attribute values such as email, phone number, or custom attributes.
  3. Click Save to commit changes.

Stackpane sends an AdminUpdateUserAttributes request to Cognito. Only modified attributes are included in the update.

Attribute Limitations

  • The username and sub attributes are immutable and cannot be changed after creation.
  • Custom attributes must be defined in the user pool schema before they can be set on a user.
  • Some attributes (like email_verified) can only be set by an administrator, which Stackpane does on your behalf via the Admin API.

Account Actions

From the user inspector, perform these account actions:

Disable User

Disables the user account, preventing sign-in:

  1. Click Disable in the account actions section.
  2. Confirm in the dialog.

The user’s status changes to disabled. All existing sessions remain valid until their tokens expire, unless you also revoke tokens.

Enable User

Re-enables a previously disabled user account:

  1. Click Enable in the account actions section.
  2. The user can sign in again immediately.

Reset Password

Forces a password reset on the user’s next sign-in:

  1. Click Reset Password in the account actions section.
  2. Confirm in the dialog.

Stackpane sends an AdminResetUserPassword request. The user’s status changes to FORCE_CHANGE_PASSWORD.

Revoke All Sessions

Signs the user out of all active sessions by revoking all tokens:

  1. Click Revoke All Sessions in the account actions section.
  2. Confirm in the dialog.

Stackpane sends an AdminUserGlobalSignOut request. All access tokens and refresh tokens for the user are invalidated immediately.

Delete User

Permanently removes the user account:

  1. Click Delete in the account actions section.
  2. Confirm the deletion in the dialog.

This action is irreversible. The user and all associated data in the user pool are permanently deleted.

Batch Operations

Batch Delete

Delete multiple users at once:

  1. Toggle selection mode from the toolbar.
  2. Select users using checkboxes.
  3. Click Delete Selected in the bulk action bar.
  4. Confirm the deletion in the dialog.

Stackpane deletes users individually using AdminDeleteUser for each selected user, with a progress indicator for larger batches.

Tips

  • Use the search field to filter the user list by username or email without making additional API calls
  • The inspector remembers which user you last viewed when switching between sections
  • Cognito user pool settings (password policies, required attributes, MFA) are managed in the AWS Console — Stackpane focuses on user-level operations