Can you export/migrate users out of AWS cognito, does it cause vendor lock-in?
This is a question about vendor lock in and AWS cognito. Can user data and encrypted/hashed passwords be exported out of cognito if we ever move off of AWS?
Can/does cognito use standard hashing or configurable hashing of the user passwords or allow export of things like tokens?
Answer
At this point in time, Cognito does not allow a way to export users from a user pool. We have heard this request from other customers, though, and have prioritized it for future releases.
As far as passwords go, Cognito uses secure remote password protocol to do the actual authentications, so the metadata that could come out may not be particularly useful, if it was included at all.