title: Is AWS cognito client side authentication secure
body: <p>I am using <em><strong>AWS Cognito</strong></em> for authentication in my application. Cognito provides fully client-side authentication. But, we need to store credentials in <code>.env</code> file which is accessible from the browser.</p>
  <p>Is it secure to use AWS Cognito for authentication, if I am building an enterprise application and security is important for me?</p>