Amazon Cognito Gets OAuth 2.0 Token Exchange – Cleaner Service-to-Service Auth

Amazon Cognito now supports OAuth 2.0 token exchange (RFC 8693), letting services and AI agents swap user tokens for narrowly scoped ones without forwarding the original credentials. This feature is live on Essentials and Plus plans across all AWS regions where Cognito operates, making it way easier to handle multi-hop authentication without building your own token logic.