Can we export migrate users from AWS cognito does it cause vendor lock-in

Question

If we discuss vendor lock-in and AWS cognito, can a user data and encrypted/hashed passwords be exported out of the cognito if we ever move out of the AWS?

Does cognito uses standard hashing or configurable hashing of the user passwords or allow export of things like the tokens?

Answer 1

Cognito does not allow a way to export users from a user pool. I have heard these requests from many customers of AWS, though, they have prioritized it for future releases.
As far as the passwords are concerned, Cognito uses secure remote password protocol to do the actual authentications, so the metadata that could come out may not be particularly useful if it was included at all.

Answer 2

Cognito actually has the capability to import users using CSV files, however no export functionality is available 

( unless you List Users and write to a CSV )

Comments

Even listing users and building a CSV would still require all users to reset passwords