title: How AWS Cognito User Pool defends against bruteforce attacks
body: <p>I am going to use AWS Cognito User Pool product as user directory for application  and have several questions:</p>
  
  <ol>
  <li>Is Amazon throttle request to Cognito User Pool and if yes what is the rate limit of calls to get throttled?</li>
  <li>How Cognito defends against bruteforce attack on login/password?</li>
  </ol>