I have a user pool in AWS, and I am using AWS cognito for authentication to access AWS resources. From my client side application (reactjs), the users can log in, log out, and will be logged out when the browser detects inactivity.
I would like to know if it is possible to configure in AWS the expiration of the user token to "log out" users after a certain number of hours of last requesting an AWS resource (API Gateway) to force them to re-authenticate.
I believe the STS
token issued by AWS Cognito
expires in 1 hour.