Consumer identity and access management

Cognito's replica user pool rejects every attribute write with OperationNotEnabledException

AWS's multi-Region replication copies a Cognito pool's configuration, hashed credentials and IdP settings into one other Region with eventual consistency. Only the primary accepts writes, so failover planning becomes a per-path decision.