I used AWS cognito for a startup. I wouldn't do it again