Auth0 AWS Amplify Gen2: OIDC Authorization for AppSync via Identity Pool Federation

Introduction AWS Amplify simplifies adding authentication using Amazon Cognito User Pool. However, there are situations where you need to use a different IdP — for example, due to organizational policy or when integrating AWS Amplify into an existing system. In such cases, instead of using federated sign-in through Amazon Cognito User Pool, you can adopt the external ID provider approach via Amazon Cognito Identity Pool. For instance, if your service already uses Auth0 by Okta, you are likely using the Auth0 SDK for login and Auth0's Universal Login for the sign-in screen. You can keep this setup while also accessing backend resources added through AWS Amplify (such as AWS AppSync and Amazon DynamoDB) using authenticated credentials. This article provides a guide on integrating Auth0 with Cognito Identity Pool Federation so that you can use Auth0 for authentication in AWS Amplify while accessing Amplify Data (AWS AppSync / Amazon DynamoDB) through the Amplify libraries. The Official Do