Cognito has real rough edges, this article doesn't really mention any of them.

If you've ever tried to implement, say, a working SAML integration through Cognito, you'll know how obscure the flow is. I've had to work with the Cognito team to get real showstopping bugs fixed.

Definitely not AWS's most polished service, but workable if you know the ins and outs.