Amazon Cognito Achieves HIPAA Eligibility and PCI Compliance, Adds a Simple Way to Sign in Users by Email Address or Phone Number, and Localizes the Management Console

We are pleased to announce that Amazon Cognito is now HIPAA eligible, has been added to the AWS Business Associate Agreement (BAA), and is PCI compliant. With HIPAA eligibility, Protected Health Information (PHI) can now be used with Amazon Cognito. Our PCI compliance means that merchants and other service providers now have access to an identity platform that has been verified to conform to PCI standards.

We have also added a simple way to sign up and sign in users with Amazon Cognito User Pools using their email address or phone number as their username. This new feature removes the need for a separate username, and you can use the built-in features of Cognito User Pools to verify these email addresses or phone numbers.

Lastly, we have added localization into different languages for the Amazon Cognito Management Console. Today we offer English, Korean, and Japanese, and we will be adding additional languages soon.

Amazon Cognito is available in the US East (N. Virginia), US East (Ohio), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Seoul), Asia Pacific (Sydney), Asia Pacific (Tokyo), EU (Frankfurt), EU (Ireland), and EU (London) AWS regions.

To learn more, visit our Developer Guide.