amazon-cognito - aws cognito 如何为未经身份验证的用户安全地保存 identityId？

Question

使用 cognito，我可以获得代表“我”的“未经身份验证”的身份标识。cognito 如何防止别人自称是“我”？

GetCredentialsForIdentityRequest request = new GetCredentialsForIdentityRequest();
request.setIdentityId("us-west-2:639dc6e0-1f14-4c0a-9a08-a48c742f5395"); //Could I just enter whatever identity Id I want here?  Is knowing what the identityId is the security?  Is that really secure?
GetCredentialsForIdentityResult result = cognitoIdentityClient.getCredentialsForIdentity(request);

AWS JAVA SDK 中显示的代码

标签： amazon-cognito