---
格式版本: 2
标题: "Amazon Cognito now supports machine-to-machine authorization without a user pool domain"
原文链接: "https://aws.amazon.com/cn/about-aws/whats-new/2026/08/amazon-cognito-get-client-token/"
发布日期: "2026-08-31"
发布时间校准状态: "found"
发布时间需复核: "否"
发布时间来源: "llm:local:original_script_field"
发布时间证据: "postDateTime: 2026-08-31T18:00:00Z"
发布时间校准原因: "候选为脚本字段明确标注的发布时间，且位于正文来源中，符合发布时判定优先级。"
发布时间校准置信度: "1"
发布时间候选数量: 1
发布时间严格候选数量: 0
发布时间原页读取状态: "source template page reused from URL open"
发布时间未找到原因: ""
发布时间校准时间: "2026-09-01T06:05:05+08:00"
发布时间仲裁状态: "confirmed"
发布时间仲裁尝试次数: 1
发布时间仲裁耗时毫秒: 8330
发现时间: "2026-09-01T06:05:01+08:00"
入库时间: "2026-08-31T22:05:14.082Z"
来源平台: "固定入口"
搜索渠道: "fixed_url"
搜索词: "https://aws.amazon.com/new"
匹配关键词:
  []
相关厂家:
  - "AWS"
相关专家:
  []
内容类型: "网页"
抓取工具: "Free Fetch + Defuddle"
清洗工具: "Defuddle Markdown + Defuddle/Readability 正文提取"
原始附件:
  []
AI摘要: "Amazon Cognito 新增 GetClientToken API，让应用客户端无需配置用户池域名，即可通过 AWS SDK、CLI 或 API 获取访问令牌，实现机器对机器（M2M）授权。"
AI摘要模型: "ali-deepseek-v4-flash"
AI摘要时间: "2026-08-31T23:36:54.861Z"
AI优质: "否"
AI打分: 43
AI分档: "非优质"
AI质检状态: "不通过"
AI打分理由: "正文主线是Amazon Cognito新增GetClientToken API，用于无用户池域名的M2M授权，属于云身份认证功能，与超节点、AI机架及关键基础设施无直接关系。来源为AWS官方发布，正文完整并提供SDK、CLI、PrivateLink、WAF及区域可用性信息。固定知识库未见该功能的既有记录，但未命中不能证明首次出现；可确认的新增仅是Cognito API能力。未命中任何超节点高价值准入通道，因主题根本不相关而否决。"
AI质检模型: "gpt-5.6-sol"
AI质检时间: "2026-09-01T07:40:36+08:00"
AI主题相关性: 0
AI来源权威性: 15
AI新颖性: 11
AI技术细节: 5
AI商业部署信号: 3
AI完整性: 9
AI评分提示词版本: "v17-精简生产版"
AI评分提示词SHA256: "48fb9777f386026761b4873eaff30807694fb11e9b352d7c69bf2dfde750cc7d"
AI评分知识库版本: "knowledge_base_v1-20260819+runtime.63"
AI评分知识库SHA256: "b2a4248d43868dee4c86d2b502d43668e260aea6b69d15f73a5dfe53287ca63f"
AI评分知识库检索词: "[\"AWS\",\"https://aws.amazon.com/new\",\"API\",\"M2M\",\"SDK\",\"CLI\",\"ID\",\"SDKs\",\"WAF\",\"VPC\",\"OAuth\"]"
AI评分知识库命中: "[{\"id\":\"runtime-bf4039a0342d37545e9459a2\",\"title\":\"Most Neoclouds Suck At Security\",\"sourceType\":\"ai_excellent_article\",\"time\":\"2026-08-30\",\"matchedTerms\":[\"AWS\",\"API\",\"CLI\",\"ID\",\"VPC\"],\"rank\":-13.584531254673688},{\"id\":\"runtime-5581f72bc66fda8e6c6bf711\",\"title\":\"Advancing Standards-Based AI Fabric RAS Through COSMOS Integration\",\"sourceType\":\"ai_excellent_article\",\"time\":\"2026-08-10\",\"matchedTerms\":[\"API\",\"SDK\",\"ID\"],\"rank\":-11.107137789114919},{\"id\":\"runtime-569639751a0dbe7ef3ffccc5\",\"title\":\"[2608.17503] Predict Before Replay: Joint FEC and Flight Control for Reliable Scale-Up Links\",\"sourceType\":\"ai_excellent_article\",\"time\":\"2026-08-18\",\"matchedTerms\":[\"API\",\"ID\"],\"rank\":-7.501577959093985},{\"id\":\"runtime-9f43a79e9c23b1f329d8a71a\",\"title\":\"AWS and NVIDIA to Deliver 2 Million Additional GPUs and Next-Generation Infrastructure for Agentic and Physical AI\",\"sourceType\":\"ai_excellent_article\",\"time\":\"2026-08-26\",\"matchedTerms\":[\"AWS\",\"API\",\"ID\"],\"rank\":-6.445081362359269},{\"id\":\"runtime-bf6a5bdbe28961c50fb91e45\",\"title\":\"Amazon EC2 P6-B300 instances are now available in additional AWS Regions\",\"sourceType\":\"ai_excellent_article\",\"time\":\"2026-08-28\",\"matchedTerms\":[\"AWS\",\"ID\"],\"rank\":-6.016755218061574}]"
采集批次: "2026年9月1日6点04分57秒"
采集批次ID: "20260901-060457-414"
去重键: "https://aws.amazon.com/cn/about-aws/whats-new/2026/08/amazon-cognito-get-client-token"
---

Amazon Cognito now supports the GetClientToken API operation, enabling app clients to obtain access tokens for machine-to-machine (M2M) authorization directly through the AWS SDK, CLI, or API — without configuring a user pool domain. This gives you an additional path to authorize service-to-service communication for applications, microservices, and automated workloads.

The new GetClientToken API operation lets your app client authenticate with its client ID and secret to receive an access token authorized for custom scopes on your resource servers. As a native AWS API operation, GetClientToken integrates seamlessly with AWS SDKs and supports AWS WAF and VPC interface endpoints (AWS PrivateLink). The existing domain-based OAuth 2.0 client-credentials flow remains available.

This feature is available in all AWS Regions where Amazon Cognito user pools are available. To get started, configure an app client and call GetClientToken using the AWS Management Console, CLI, or SDKs. Standard Amazon [Cognito M2M pricing](https://aws.amazon.com/cognito/pricing/) applies. See [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-define-resource-servers.html#get-client-token) and [GetClientToken API Reference](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetClientToken.html) for details.