For something as globally admired as @awscloud, the Cognito API reference is dreadful. And pretty useless. Needs a major overhaul...