Comment by vinckr

Ory Kratos has a password migration hook that lets you migrate password credentials out of anything (including Cognito) without password resets. I believe most other (modern) auth vendors have an equivalent.

I really don't see any reason to be using Cognito in $currentyear.

Disclosure: working for Ory.