User account protection
Amazon Cognito Advanced Security is applied to the log-in flow to protect against brute-force attempts to log in to a user’s account. For more information on this, please see Amazon’s product documentation. We encourage all users to set up two-factor authentication using a TOTP-compatible authenticator app. Alternatively, an organisation can choose to use their single-sign on system, in which case any additional brute-force protection is delegated to that system.