Amazon Cognito Adds TOTP Reset for Admins
Amazon Cognito just dropped a new AdminDeleteSoftwareToken API that lets admins reset users' TOTP MFA configs without nuking their accounts. When someone loses their authenticator device, you can now remove the old setup and let them re-enroll on next login—keeping security tight while actually helping locked-out users recover. Available everywhere Cognito runs.
source: [aws/whats-new]