## Pain Point * Get AWS Temporary Credentials In CLI/SDK * Auth0 Can't Work on CLI

## Why AWS Temporary Credentials * The long term credentials is not safe * I don't want to use my AWS_ACCESS_KEY_ID and AWS_SECRET_KEY anywherrre * I just want to remember my user name and password

## Why Auth0 Doesn't Work On CLI * It only support [SSO](https://auth0.com/docs/integrations/aws/sso) on browser * They have docs for [Delegated Authentication](https://auth0.com/docs/aws-api-setup), but it was not supported now

## SAML 2.0 <p class="stretch"><img src="https://cdn.ubisecure.com/wp-content/uploads/2017/06/SAML_flow.jpg" /></p>

## OAuth 2.0 <p class="stretch"><img src="https://cdn.ubisecure.com/wp-content/uploads/2017/06/OAuth_flow.jpg" /></p>

## Cognito * Provides authentication, authorization, and user management for your web and mobile apps * Your users can sign in directly with a user name and password, or through a third party such as Facebook, Amazon, or Google

## User Pool * User pools are user directories that provide sign-up and sign-in options for your app users

## Identity Pool * Provide AWS credentials to grant your users access to other AWS services * You can configure an identity pool to exchange user pool tokens for AWS credentials

## Get AWS Temporary Credentials <p class="stretch"><img src="https://docs.aws.amazon.com/cognito/latest/developerguide/images/scenario-cup-cib2.png" /></p> You can find the script in [here](https://github.com/sjmyuan/aws-tmp-auth/blob/master/aws-tmp-auth.sh)