title: Can I login as an IAM user from Cognito?
body: <p>Isit possible to login as an IAM user from Cognito? I am creating a tool that does AWS management functions and I want users to login as their IAM users ideally. Is this possible? </p>
  
  <p>2 alternatives I am considering is: </p>
  
  <ul>
  <li>App will have its own IAM credentials and perform actions on behalf of app users. App will implement ACLs to determine who can do what (but this is implementing what IAM already does)</li>
  <li>Users will login via Cognito and inherit IAM roles, but its still having 2 "IAM users" (1 Cognito + 1 IAM user) for 1 "real" user</li>
  </ul>
  
  <p>Of these 2 which is better and is there a better way? </p>