Is a single AWS Cognito Region, us-west-2 for example, suitable for serving Canada, US and Puerto Rico?

Question

I'm looking at my options for a managed sign-on service and AWS Cognito looks promising.

I notice that it's user pools etc do not currently replicate across regions. I wanted to confirm that 1 region is sufficient us-west-# for example (or us-east-#) would be sufficient for an application that has users spread across Canada, the US and Puerto Rico.

Answer 1

In general, not only in the case of Cognito, the closer your users are in the data center that hosts your services the better. And this is only so you can minimize the propagation delays between your clients and the data center hosting your service.

Therefore, if you have to choose one region, choose the one that the majority of your clients are closer to.

AWS Cognito, does not replicate userPools across regions at the moment. Therefore, if you want to use the AccessToken against that userPool you need to go to the region that the userPool resides.

Now, every other service that accepts accessTokens, will accept your token inside AWS, outside AWS in any region.