Amazon Cognito vs CyberArk Secrets Management comparison

Amazon Web Services (AWS) and CyberArk are both solutions in the Access Management category. Amazon Web Services (AWS) is ranked #8 with an average rating of 7.6, while CyberArk is ranked #19 with an average rating of 7.3. Additionally, 80% of Amazon Web Services (AWS) users are willing to recommend the solution, compared to 100% of CyberArk users who would recommend it.

Amazon Cognito

Read 15 Amazon Cognito reviews

1,876 Views
131 Comparison Views

80% willing to recommend

CyberArk Secrets Management

Read 4 CyberArk Secrets Management reviews

47 Views
5 Comparison Views

100% willing to recommend

Amazon Cognito

CyberArk Secrets Management

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Jun 15, 2025

Amazon Cognito and CyberArk Secrets Management are competing in the user authentication and secure credential storage categories. Amazon Cognito appears to have an upper hand in ease of use and pricing, while CyberArk excels with its security features and credential management capabilities, appealing to security-conscious businesses.

Features: Amazon Cognito supports easy user sign-ups, sign-ins, and access controls, integrates with social identity providers, and enables multi-factor authentication. CyberArk Secrets Management provides secure storage, retrieval, and management of sensitive credentials and API keys, along with comprehensive auditing and compliance features, and offers granular access controls.

Room for Improvement: Amazon Cognito could enhance its auditing capabilities, offer more customization options, and improve documentation for complex integrations. CyberArk might streamline its deployment process, provide more intuitive user interfaces, and offer better initial setup support for new users.

Ease of Deployment and Customer Service: Amazon Cognito is easy to deploy with its cloud-based setup that integrates smoothly with AWS services, offering a straightforward user experience. CyberArk, while requiring more initial configuration, offers extensive customer service and support for customized implementations and troubleshooting.

Pricing and ROI: Amazon Cognito provides a cost-effective solution for user authentication, leading to quick ROI. CyberArk, with its higher initial setup cost, justifies its pricing through advanced security features aimed at businesses requiring robust credential management, ultimately delivering higher long-term security ROI.

To learn more, read our detailed Amazon Cognito vs. CyberArk Secrets Management Report (Updated: June 2025).

Buyer's Guide

Amazon Cognito vs. CyberArk Secrets Management

June 2025

Download the complete report

Helped 859,129 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Amazon Cognito

Ranking in Access Management

8th

Average Rating

7.4

Reviews Sentiment

6.9

Number of Reviews

Ranking in other categories

No ranking in other categories

CyberArk Secrets Management

Ranking in Access Management

19th

Average Rating

7.2

Reviews Sentiment

7.6

Number of Reviews

Ranking in other categories

Enterprise Password Managers (16th)

Featured Reviews

Wojciech Doganowski

Solutions Architect & PMO at AS TV Play Baltics/TV3 Group

International setup localization challenges drive custom development while outsourcing credential management enhances security

We are using it in an international setup where we have multiple services running in multiple countries. Cognito localizes only regarding language, but the service is localized in each country. Cognito has the possibility to render the login screen and all the customer flows related to managing the account. Still, it's useless in an international setup. They are unable to localize these screens, so we had to write our own screens and just use the Cognito API. I hope they will fix this soon because it's useful to rely on already prepared flows for all the account management. As it doesn't work with different languages, rewriting it is quite complicated. Additionally, maybe they could find another step in the price so there is not such a significant jump from the basic to extended functionality. Some flexibility would be helpful.

Read full review

Rajat-Jain

Senior Member Of Technical Staff at a energy/utilities company with 10,001+ employees

Helps with compliance and improves operational flexibility

We have had both on-premises and SaaS models. The on-premise setup was a little difficult, but now that it has been moved to the SaaS model, everything is controlled by CyberArk. We just go and do our work. The initial on-premises setup took two weeks because it was an integrated effort. I had to spin up the servers and bring in the CyberArk Secrets Management resource to deploy the scripts. I then had to open networks and firewalls between CyberArk Secrets Management's on-premise servers and the application server. In the initial phase, it took two to three weeks, but it became easier when moving to the SaaS model. In terms of maintenance, it requires patching or upgrades, which happens one day in a month. If there is a failure, we have to roll back and try once again, which takes more time, but if everything goes smoothly, there is three to five hours of downtime.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Cognito speeds up our development and saves us time."

"They offer a permission tool to help us manage multi-factor authentication."

"I rate Amazon Cognito nine out of ten."

"One of the key benefits of this software is its ease of integration with a wide range of applications, including mobile apps and web applications. This simplifies the process of integration, and it can be seamlessly incorporated with Azure, Kubernetes, and other software systems."

"What is quite valuable is that we can outsource storage of the credentials to AWS, and they manage it quite securely."

"The solution is proto connective and integrates well with other AWS services."

"The features most valuable to us are the ability to integrate with various IDPs and the capability to sync with multiple applications."

"What I find most valuable about Amazon Cognito is the single sign-on feature that provides a token for accessing protected APIs."

More Amazon Cognito pros

"The audit trails have been extremely important for us in helping our organization meet regulatory requirements."

"CyberArk Secrets Management is a critical solution for strengthening our security posture."

"It's vital for effectively managing and securing my credentials."

"One of the most important features for us is the system's performance, particularly its speed of retrieving secrets."

"With CyberArk Secrets Management, we were able to resolve the automatic change of the passwords based on timelines. We were also able to retrieve the passwords in an encrypted format by utilizing the CyberArk platform, which was not provided to us by UiPath."

"CyberArk's support team is knowledgeable and helpful, consistently responding on time."

"The automatic rotation of the password is the top feature."

Cons

"Amazon Cognito could be improved by making it easier for us to add more data to the token, allowing customization of JWT. It requires a complex program to customize the token currently, however, the UI could support this configuration better."

"The secure authentication of Amazon Cognito has benefited our company. We were previously using legacy signup systems."

"You need to evaluate the export users. The multifactor authentication, much less this room for improving the configuration setup of that."

"Cognito triggers can improve by providing more direct use cases rather than giving a white paper. A white paper is not at all interesting, it has too many details. It would be a benefit to provide a smaller document that is summarized. The smaller version would bring microdata, macro data is not helpful."

"I would rate its scalability as five out of ten. Moving users between different pools or accounts creates new identities, which means IDs stored in our database must also be changed."

"What I found generally lacking in AWS is privileged access management (PAM)."

"Amazon Cognito’s UI needs improvement while onboarding new users."

"Cognito has the possibility to render the login screen and all the customer flows related to managing the account. Still, it's useless in an international setup. They are unable to localize these screens, so we had to write our own screens and just use the Cognito API."

More Amazon Cognito cons

"The password search feature and integration between different vaults could be enhanced. For instance, when updating passwords in both lower and higher environment vaults, improvement is required in search and upgrade functions."

"There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence."

"We did not have a good experience with technical support because their numerous processes caused delays in engaging, leading to project delays or issues with production."

"We occasionally experience incidents that delay password injection back into the script."

"Implementation was complex and required professional services."

"Improvements for CyberArk Secrets Management include enhanced documentation with more use cases and step-by-step integration guides."

"Implementing it and ensuring seamless password rotations present challenges."

Pricing and Cost Advice

"The product is relatively inexpensive compared to other tools."

"On a scale from one to ten, where one is cheap and ten is expensive, I rate the solution's pricing a five out of ten."

"The pricing of this solution is good compared to other solutions on the market."

"The price of Amazon Cognito is expensive. We are on an annual subscription."

"The price of the solution depends on the number of users using it."

"The pricing is bad so I rate it a two out of ten."

"The price of Amazon Cognito is low. The pricing model is based on the users."

"We pay $600 monthly per user for licences and there are no other additional costs."

"It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle."

"CyberArk Secrets Management has a moderate pricing structure based on a per-tenant licensing model rather than a per-user account model like their PAM solution."

See which vendors are best for you

Use our free recommendation engine to learn which Access Management solutions are best for your needs.

See recommendations

859,129 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

15%

Comms Service Provider

10%

Government

Manufacturing Company

No data available

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Amazon Cognito?

The most valuable feature of the solution is its swift authentication.

See all answers

What is your experience regarding pricing and costs for Amazon Cognito?

The basic functionality is reasonably priced, but the extended functionalities, especially the extended security, are quite expensive. There is a significant jump from the basic to the extended fun...

See all answers

What needs improvement with Amazon Cognito?

See all answers

What is your experience regarding pricing and costs for CyberArk Secrets Management?

It is in the middle. It is neither very cheap nor very expensive, so I would place it in the middle.

See all answers

What needs improvement with CyberArk Secrets Management?

There is room for improvement with better documentation and less need for CyberArk Secrets Management personnel to assist us with their presence.

See all answers

What is your primary use case for CyberArk Secrets Management?

My main use cases at the moment promote security all across the organization.

See all answers

Comparisons

Microsoft Entra ID vs Amazon Cognito

Compared 62% of the time

Auth0 vs Amazon Cognito

Compared 12% of the time

Cloudflare One vs Amazon Cognito

Compared 9% of the time

ForgeRock vs Amazon Cognito

Compared 4% of the time

Ping Identity Platform vs Amazon Cognito

Compared 4% of the time

More Amazon Cognito Competitors

HashiCorp Vault vs CyberArk Secrets Management

Compared 100% of the time

More CyberArk Secrets Management Competitors

Product Reports

Buyer's Guide

Amazon Cognito

June 2025

Download Amazon Cognito product report

Buyer's Guide

CyberArk Secrets Management

June 2025

Download CyberArk Secrets Management product report

Overview

Amazon Cognito is a simple user identity and data synchronization service that helps you securely manage and synchronize app data for your users across their mobile devices. You can create unique identities for your users through a number of public login providers (Amazon, Facebook, and Google) and also support unauthenticated guests. You can save app data locally on users’ devices allowing your applications to work even when the devices are offline. With Amazon Cognito, you can save any kind of data in the AWS Cloud, such as app preferences or game state, without writing any backend code or managing any infrastructure. This means you can focus on creating great app experiences instead of having to worry about building and managing a backend solution to handle identity management, network state, storage, and sync.

Amazon Web Services (AWS)

CyberArk Secrets Management offers comprehensive security for managing sensitive information, addressing crucial needs in secure storage, access, and control of credentials across IT environments.

CyberArk Secrets Management focuses on ensuring the secure handling of sensitive enterprise data, offering a robust infrastructure for credentials and secrets management. Designed for organizations that need high levels of security, it provides efficiency in automating access controls and compliance. Its features are tailored to integrate seamlessly with existing IT frameworks, facilitating a secure and scalable approach to managing critical information across complex infrastructures. CyberArk's approach addresses both security and operational efficiency.

What features make CyberArk Secrets Management essential?

Enhanced Security Controls: Allows detailed configuration of access policies to safeguard sensitive data.
Automated Credential Rotation: Automatically rotates credentials to minimize the risk of security breaches.
Integrated Audit Trails: Provides comprehensive tracking and reporting to ensure compliance and accountability.

What benefits and ROI can be expected from CyberArk Secrets Management?

Risk Reduction: Minimizes potential exposure to data breaches through advanced security measures.
Operational Efficiency: Streamlines access management tasks, reducing manual overhead and errors.
Regulatory Compliance: Helps maintain adherence to industry standards and regulations, reducing the risk of fines.

CyberArk Secrets Management is widely implemented across sectors like finance, healthcare, and government, focusing on industries where data sensitivity and compliance are critical. Its application helps organizations mitigate risks and enhance data governance, proving invaluable in environments where trust and security are paramount.

CyberArk

Sample Customers

Expedia, Intuit, Royal Dutch Shell, Brooks Brothers

Information Not Available

Buyer's Guide

Amazon Cognito vs. CyberArk Secrets Management

June 2025

Free Report: Amazon Cognito vs. CyberArk Secrets Management

Find out what your peers are saying about Amazon Cognito vs. CyberArk Secrets Management and other solutions. Updated: June 2025.

DOWNLOAD NOW

859,129 professionals have used our research since 2012.

See our Amazon Cognito vs. CyberArk Secrets Management report.

See our list of best Access Management vendors.

We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.