My company is designing an API to be accessed by our business partners (clients) i.e. Clients API calls our API. We decided to go with AWS Cognito as our authentication server.<