I am going to use AWS Cognito User Pool product as user directory for application and have several questions:
Yes, Cognito User Pools protects against brute force attacks by using various security mechanisms. Throttling is one of those of mechanisms. We do not share limits as they vary dynamically.