--- title: Case Study for Modernising Authentication with AWS Cognito description: Streamline identity management with AWS Cognito, enhancing security, scalability, and integration for public sector digital solutions through centralised authentication and Infrastructure as Code practices. --- [Skip to content](https://www.bionconsulting.com/case-studies/modernising-authentication-with-aws-cognito#main-content) [![bion-logo-122x40](https://www.bionconsulting.com/hubfs/bion-logo-122x40.png)](https://www.bionconsulting.com?hsLang=en) - [Home](https://www.bionconsulting.com) - Services - DevOps - [DevOps as a Service](https://www.bionconsulting.com/devops-as-a-service) - [DevOps Services](https://www.bionconsulting.com/services/devops/devops-services) - [AWS DevOps Consulting](https://www.bionconsulting.com/services/devops/aws-devops-consulting) - DevSecOps - [DevSecOps Consulting](https://www.bionconsulting.com/services/devsecops) - [DevSecOps Assessment](https://www.bionconsulting.com/services/devsecops-assessment) - [Software Supply Chain Security](https://www.bionconsulting.com/partnerships/anchore) - Kubernetes - [Kubernetes Consulting](https://www.bionconsulting.com/services/kubernetes/kubernetes-consulting-services) - [Kubernetes Security](https://www.bionconsulting.com/services/kubernetes/security) - [Kubernetes Managed Services](https://www.bionconsulting.com/services/kubernetes/managed-services) - [Kubernetes Migration Services](https://www.bionconsulting.com/services/kubernetes/migration-services) - [Kubernetes Training](https://www.bionconsulting.com/services/kubernetes/training) - AWS - [AWS Security Assessment](https://www.bionconsulting.com/services/aws/security-assessment) - [AWS Cloud Security](https://www.bionconsulting.com/services/aws/cloud-security) - [AWS Architecture Design](https://www.bionconsulting.com/services/aws/architecture-design) - [AWS Managed Services](https://www.bionconsulting.com/services/aws/managed-services) - [AWS Migration Services](https://www.bionconsulting.com/services/aws/migration-services) - [AWS Cost Optimisation](https://www.bionconsulting.com/services/aws/aws-cost-optimisation) - [AWS CPPO](https://www.bionconsulting.com/services/aws/aws-cppo) - AI Infrastructure Services - [AI Platform Architecture](https://www.bionconsulting.com/ai-platform-architecture) - [Generative AI & LLM Deployment on AWS](https://www.bionconsulting.com/generative-ai-llm-deployment-aws) - [AI Platform Operations and MLOps](https://www.bionconsulting.com/ai-platform-operations-and-mlops-on-aws) - Observability & Monitoring - [New Relic](https://www.bionconsulting.com/partnerships/new-relic) - [Application Performance Monitoring](https://www.bionconsulting.com/new-relic/application-performance-monitoring) - [Observability for DevOps Teams](https://www.bionconsulting.com/new-relic/observability-for-devops-teams) - [New Relic Health Check](https://www.bionconsulting.com/services/new-relic/observability-health-check) - [SAP Monitoring with New Relic](https://www.bionconsulting.com/partnerships/new-relic/sap-monitoring-with-new-relic) - [Migration from Datadog](https://www.bionconsulting.com/partnerships/new-relic/migration-from-datadog) - Industries - [Financial Services & Insurance](https://www.bionconsulting.com/industries/financial-services-insurance) - [SaaS & ISV](https://www.bionconsulting.com/industries/saas-isv) - [Retail & E-commerce](https://www.bionconsulting.com/industries/retail-e-commerce) - [Travel & Hospitality](https://www.bionconsulting.com/industries/travel-hospitality) - [Healthcare & Life Sciences](https://www.bionconsulting.com/industries/healthcare-life-sciences) - [Education & EdTech](https://www.bionconsulting.com/industries/education-edtech) - Startups - [DaaS for Startups](https://www.bionconsulting.com/startups/devops) - [AWS Migration for Startups](https://www.bionconsulting.com/startups/aws-migration) - Partnerships - [AWS](https://www.bionconsulting.com/partnerships/aws) - [New Relic](https://www.bionconsulting.com/partnerships/new-relic) - [Anchore](https://www.bionconsulting.com/partnerships/anchore) - [Octopus](https://www.bionconsulting.com/partnerships/octopus) - [DBmaestro](https://www.bionconsulting.com/partnerships/dbmaestro) - [Eclypses](https://www.bionconsulting.com/partnerships/eclypses) - [Vanta](https://www.bionconsulting.com/partnerships/vanta) - [Palo Alto](https://www.bionconsulting.com/partnerships/palo-alto) - [About us](https://www.bionconsulting.com/about) - [Case Studies](https://www.bionconsulting.com/case-studies) - [Blog](https://www.bionconsulting.com/blog) - [Contact us](https://www.bionconsulting.com/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. # Modernising Authentication with AWS Cognito To unify access control, simplify operations, and support multi-environment deployments, we replaced the existing OAuth Proxy with AWS Cognito. This involved adopting AWS-native identity services and integrating Google IdP, creating a centralised and reusable authentication framework that improved security, reduced manual overhead, and enabled scalable access management across workloads. [![Let's Talk](https://no-cache.hubspot.com/cta/default/8950083/interactive-187617980733.png)](https://www.bionconsulting.com/hs/cta/wi/redirect?encryptedPayload=AVxigLKRemPQzjafR5OosRyATS%2FShxXikN2jhXDqUpv75Na%2B0qJ%2Fp%2FEYxWazW2iv%2BBFqRCjOJzox7Foyl4nq7s%2Bhd0HHSEyG%2F19%2BMFRaBWWA24r8ItT%2FwC05A9TNIw2KL7wDeti%2FkN7MSN1nHSKFvhQhIDOb6ZZli2%2BCDYTfpm1l43Ves9TvTpPgBn1ySf3zmP23ybZtz2XP355r&webInteractiveContentId=187617980733&portalId=8950083&hsLang=en) ![cloud-computing-ai-concept-with-multiple-blue-3d-icons-digital-transformation-theme-featuring-blue-3d-icons-representing-cloud-computing-ai (1)](https://www.bionconsulting.com/hubfs/cloud-computing-ai-concept-with-multiple-blue-3d-icons-digital-transformation-theme-featuring-blue-3d-icons-representing-cloud-computing-ai%20(1).jpg) ## Client Overview The client is a CMS platform provider offering digital solutions for public sector organisations, including local councils and nonprofits. Their modular platform helps institutions improve citizen engagement, accessibility, and digital service delivery. With a growing user base and increasing demands for flexible and secure deployments, the client needed a more scalable and standardised identity management system for its cloud-native workloads. ![Public Sector DevOps Solution](https://www.bionconsulting.com/hubfs/customer-2.png) ## Challenge The client’s existing authentication flow, managed through an OAuth Proxy on AWS EKS, created several functional and architectural limitations. Key challenges included: #### Fragmented IAM Strategy Workloads had separate authentication mechanisms, making it difficult to maintain a unified identity model. #### No External IdP Integration The legacy setup didn’t support Google IdP, limiting flexibility and interoperability for downstream clients. #### Inconsistent Multi-Environment Support There was no parameterised or reusable configuration, which increased overhead for provisioning environments across different clients. #### Manual Infrastructure Management IAM and identity services were not fully managed with Infrastructure as Code, making scaling error-prone and cost harder to control. ## Solution We designed and implemented a reusable AWS Cognito-based authentication architecture, with full Infrastructure as Code automation and multi-environment support. ### Cognito Integration and IdP Support - **Terraform Module with Google IdP:** Built a modular Terraform component to provision AWS Cognito, including full Google IdP integration. - **Single Pool, Multi-App Logins:** Leveraged Cognito’s App-Client-Based Multi-Tenancy to support Kubernetes Dashboard, Grafana, AlertManager, and OpenSearch—each with separate callback URLs, all from a single user pool. ### Reusable Infrastructure Setup - **Terragrunt for Scalability:** Created parameterised Terragrunt configurations optimised for cross-environment reusability, enabling fast onboarding of new client environments. - **Code Efficiency:** Streamlined the IaC setup to minimise code duplication, ensuring better maintainability and easier updates. ## Results The client’s identity layer is now centralised, secure, and fully automated, providing a scalable foundation for future growth. ![054-timer](https://www.bionconsulting.com/hubfs/icons/054-timer.png) ### Unified IAM with One User Pool Authentication across all workloads now flows through a single, centralised Cognito pool, simplifying governance and user management. ![001-cyber security](https://www.bionconsulting.com/hubfs/icons/001-cyber%20security.png) ### Improved Reusability and Scale The Terraform + Terragrunt approach made infrastructure modular and reusable, reducing onboarding time for new environments. ![017-deployment-1](https://www.bionconsulting.com/hubfs/icons/017-deployment-1.png) ### External IdP Compatibility Google IdP support enabled greater flexibility for external identity integrations, improved user access control, and supported future scalability. ![010-monitor](https://www.bionconsulting.com/hubfs/icons/010-monitor.png) ### DevOps Enablement and Support Bion provided hands-on support throughout the rollout, including IaC design, implementation, and transition assistance for internal DevOps teams. ## Technology Stack   To support a scalable and secure identity architecture, the following technologies were used: - **Authentication:** AWS Cognito with Google IdP - **Infrastructure as Code:** Terraform, Terragrunt - **Container Management:** AWS EKS - **Monitoring & Interfaces:** Grafana, AlertManager, Kubernetes Dashboard - **Search & Analytics:** AWS OpenSearch By transitioning from OAuth Proxy to AWS Cognito, the client now benefits from a cost-efficient, standardised, and scalable authentication framework, purpose-built for the demands of public sector digital platforms. ![case study-new relic](https://www.bionconsulting.com/hubfs/case%20study-new%20relic.webp) ![bion-logo-white-122x40](https://www.bionconsulting.com/hubfs/bion-logo-white-122x40.png) Bion Consulting helps organisations build secure, scalable, and high-performing cloud environments. With deep expertise in DevOps, security, containerisation, observability, and AI platform operations, we deliver resilient solutions for complex and evolving business needs. #### Company - [About us](https://www.bionconsulting.com/about) - [Case Studies](https://www.bionconsulting.com/case-studies) - [Blog](https://www.bionconsulting.com/blog) - [Contact us](https://www.bionconsulting.com/contact-us) - [Careers](https://www.bionconsulting.com/careers) #### Industries - [Financial Services](https://www.bionconsulting.com/industries/financial-services-insurance) - [Insurance](https://www.bionconsulting.com/industries/financial-services-insurance) - [SaaS](https://www.bionconsulting.com/industries/saas-isv) - [ISV](https://www.bionconsulting.com/industries/saas-isv) - [Healthcare](https://www.bionconsulting.com/industries/healthcare-life-sciences) - [Education & EdTech](https://www.bionconsulting.com/industries/education-edtech) - [Retail](https://www.bionconsulting.com/industries/retail-e-commerce) - [E-Commerce](https://www.bionconsulting.com/industries/retail-e-commerce) #### Services - [AI Infrastructure & Platform Operations](https://www.bionconsulting.com/ai-platform-architecture) - [AWS Security Assessment](https://www.bionconsulting.com/services/aws/security-assessment) - [Kubernetes Security Audit](https://www.bionconsulting.com/kubernetes-security-audit) - [Observability](https://www.bionconsulting.com/partnerships/new-relic) - [DevOps as a Service](https://www.bionconsulting.com/devops-as-a-service) - [DevSecOps](https://www.bionconsulting.com/services/devsecops) - [Software Supply Chain](https://www.bionconsulting.com/partnerships/anchore) - [AWS Marketplace](https://aws.amazon.com/marketplace/seller-profile?id=92428d47-c0cc-4f92-8f95-1b0b6d25ea82) #### Partnerships - [AWS](https://www.bionconsulting.com/partnerships/aws) - [New Relic](https://www.bionconsulting.com/partnerships/new-relic) - [Anchore](https://www.bionconsulting.com/partnerships/anchore) - [Octopus Deploy](https://www.bionconsulting.com/partnerships/octopus) - [DBmaestro](https://www.bionconsulting.com/partnerships/dbmaestro) - [Eclypses](https://www.bionconsulting.com/partnerships/eclypses) - [Vanta](https://www.bionconsulting.com/partnerships/vanta) - [Prisma Cloud](https://www.bionconsulting.com/partnerships/palo-alto) © 2026 All rights reserved. - [Privacy Policy](https://www.bionconsulting.com/privacy-policy) - [Cookie Policy](https://www.bionconsulting.com/cookie-policy)