Using Cognito for Outbound Gateway Authentication?

Hi,

If you have an API that is already secured by Amazon Cognito (use by an SPA app) and you want to see if I can reuse this API as set of MCP Tools, is it possible to use Amazon Cognito for Outbound AgentCore Gateway Authentication?

I have been playing around with this a bit by trying to adapt the existing samples that use Github, Google etc using the _require_access_token_ with **USER_FEDERATION** however I now get a Cognito Redirect mismatch errors.

This seems like it would be a common use-case but no samples or documentation that I can find that??

Review the existing authentication samples that use require_access_token with USER_FEDERATION, then trace how the Cognito redirect is configured. Done means documenting whether Amazon Cognito can authenticate Outbound AgentCore Gateway requests and providing the required configuration or a sample that avoids the redirect mismatch.

Written by the indexing model from the issue text.