I’m trying to change email for user in cognito but constantly failing. Despite of email attribute is locked as writeable and I could not even change that, it is not updating with default query

I’m using Cognito with a SPA and leveraging the Hosted UI to handle all the user interface/authentication logic (i.e. the SPA is only redirecting to Cognito and handling callbacks from Cognito). Sign ups are disabled and users are pre-created using AdminCreateUser so that the new user is in the FORCE_CHANGE_PASSWORD state.

We are using AWS Cognito. We add users using the AdminCreateUser API and they receive the default invitation email. We want to disable sending this default invitation email and have our own mechanism in place.

We are using AWS Cognito. We add users using the AdminCreateUser API and they receive their temporary password. Unfortunately, some of the them do not login within 7 days (temporary password expiration period), and now when they try to login with their expired temporary password, AWS Cognito returns this error: