Amazon Cognito Replicates User Pools Across Regions for Auth Failover

Signed-in users won't need to re-authenticate when you flip traffic to a standby region. That's the headline from Amazon Cognito's new multi-Region replication, announced June 4, 2026.

What Actually Gets Replicated

Amazon Cognito now synchronizes user and machine identity data — including credentials, user pool configurations, and federation setups — to a secondary user pool in a standby region you designate. The sync runs in near real-time. Authentication methods that carry over include username/password, social identity federation, SAML/OIDC providers, and machine-to-machine (M2M) authorization flows.

This isn't a separate product. Multi-Region replication is an add-on for user pools already on the Essentials or Plus feature tiers. You configure it via the AWS Management Console, CLI, or SDKs by adding a replica user pool.

Regions and Practical Constraints

Launch regions cover US East (Ohio, N. Virginia), US West (N. California, Oregon), Asia Pacific (Mumbai, Seoul, Singapore, Sydney, Tokyo), Canada (Central), Europe (Frankfurt, Ireland, London, Paris, Stockholm), and South America (São Paulo). If your primary region isn't there, you're out of luck for now.

Pricing is per add-on — check the dedicated pricing page rather than assuming it's bundled. The developer guide has the step-by-step.

This feature closes a gap in Cognito's disaster recovery story. Before, you had to build custom replication or accept a single-region dependency. Now, for teams that already run multi-region architectures, Cognito becomes a first-class citizen in the failover plan instead of the weakest link.

Source: Amazon Cognito now supports multi-Region replication
Domain: aws.amazon.com