Amazon cognito integrantes pretty good with everything in the AWS cloud (obvious), and is not hard to use. Seems like the best choice for that stack.