AMAZON COGNITO NOW SUPPORTS REFRESH TOKEN ROTATION

Summary from the TLDR InfoSec newsletter

Amazon Cognito has announced the release of a new feature that allows customers on the Essentials or Plus tiers to configure automatic refresh token rotation for user pool clients. Before this feature, customers had to choose between long-lived tokens to reduce user friction at the cost of reduced security or short-lived tokens that were more secure but required users to reauthenticate more frequently.