AWS Services
Amazon Cognito Activity
Ingest Amazon Cognito user pool activity — authentication events, user management operations, and token issuance — via CloudTrail.
Amazon Cognito doesn’t emit logs of its own — instead, user pool authentication events, user management operations, and token issuance are recorded in AWS CloudTrail.

