> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bronto.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Amazon Cognito Activity

> Ingest Amazon Cognito user pool activity — authentication events, user management operations, and token issuance — via CloudTrail.

Amazon Cognito doesn't emit logs of its own — instead, user pool authentication events, user management operations, and token issuance are recorded in [AWS CloudTrail](./aws-cloudtrail).

## Recommended method

[**CloudWatch Log Forwarder**](./aws-client-cloudwatch) — configure CloudTrail to deliver Cognito events to a CloudWatch Log Group, and the Bronto forwarder Lambda streams them into Bronto.

See [Ingesting AWS Data into Bronto](./aws-overview) for the full service-to-method mapping.

## References

* [Amazon Cognito — logging API calls with CloudTrail](https://docs.aws.amazon.com/cognito/latest/developerguide/logging-using-cloudtrail.html)