I notice that the Cognito tokens can be used to consume other AWS services after the user logout. Moreover, even I revoke the token calling the AdminUserGlobalSignOut API, I am still seeing the response as if the token is valid. Actually users can sign out from all devices where they are currently signed in when you revoke all of the…