Cave of Broken Mirrors: 3 Issues with AWS Cognito - Security Boulevard