AWS Amplify + Amazon Cognito + AWS CDK: A Complete Setup Guide

Setting up AWS Amplify with Amazon Cognito using CDK is mostly straightforward. The tricky parts? GitHub integration (PAT → GitHub App migration) Cognito email configuration with SES Automating login page branding (which isn’t supported in CDK yet) This article walks you through the full setup with the important details without unnecessary boilerplate. Amplify App with CDK You can create your Amplify app in CDK using Level 1 Cloudformation constructs. That part is pretty simple if you know CDK. However, the GitHub integration still requires a Personal Access Token (PAT) for the initial setup in CDK. If you go to the Amplify console after your deployment, it will immediately suggest you to migrate to GitHub App authentication. This can be done easily following the steps in the console. From now on you can revoke the PAT and replace it with a random string in your CDK code (at least 1 char length). Cognito User Pool (Email as Login) Here’s a clean CDK example: new cognito . UserPool ( th