This article announces Amazon Cognito multi-Region replication and customer managed key support for improved application resilience and security.

• Automatic synchronization of user data and configurations across primary and secondary AWS Regions
• Secondary Region operates in read-only mode for authentication; no new registrations during failover
• Users continue signing in with existing credentials; access tokens recognized across both regions
• Supports all authentication methods including federated sign-in and OAuth flows
• Requires multi-Region customer managed AWS KMS keys for encryption at rest
• Requires manual configuration of Lambda functions, SMS/email, logging, and WAF in secondary region
• Health checks and DNS failover managed by customer for control and security
• Pricing: $0.0045-$0.006 per monthly active user per replica (Essentials/Plus tiers)
• Available in 20+ AWS Regions globally

Multi-Region replication eliminates manual synchronization complexity while maintaining security and business continuity during regional incidents.