AWS has launched multi-region replication for Amazon Cognito, automatically syncing user identities, credentials, and user pool configurations from a primary to a secondary region. This allows applications to continue authenticating users during regional outages without custom replication logic. The feature is active-passive (not active-active), meaning the secondary region is read-only except during failover. Limitations include no TOTP MFA support on the secondary, no new sign-ups or password resets outside failover state, and DNS-driven failover requiring a custom domain. It requires next-generation Cognito infrastructure and a multi-region customer-managed AWS KMS key. Pricing is $0.0045–$0.006 per MAU per replica region depending on tier, available in select regions including Northern Virginia, Singapore, Frankfurt, and Ireland.
