STS vs Cognito

If you use STS you have to create the identity broker to provide the interaction between your application and the provider.

Cognito is an identity broker that provides additional flexibility such as sign up, sign in and guest user access.