this looks like a long article. i stopped after the overview. why would you do all this rather than front your 3 “back office web services” with nginx+oauth2_pr

this looks like a long article. i stopped after the overview. why would you do all this rather than front your 3 “back office web services” with nginx+oauth2_proxy? does cognito offer some particular advantage beyond TFA stated purpose of oauth2 SSO? oh, and just doing SSO is a very far cry from “beyondcorp”.