Amazon Cognito with identity pools allows you to grant your users temporary, limited-privilege credentials to access AWS resources. This service can federate with external identity providers like social media platforms and corporate directories, exchanging their authentication tokens for temporary permissions in your environment. While Amazon Cognito user pools handle user management and authentication, they do not support direct federation for resource access. The IAM service is responsible for defining roles and permissions but does not handle direct identity federation. Similarly, STS is used for granting temporary credentials but is not directly responsible for federating with identity providers in the context of your application's users.