title: Is there a way to immediately revoke a Cognito Client Credentials Flow issued access token?
body: <p>AWS Cognito has API methods <strong>GlobalSignout</strong> and <strong>AdminUserGlobalSignout</strong> that can be used to revoke the access and refresh tokens issued for a user in a user pool (but not the ID token). However, the access token issued using the client credentials flow has no associated user. GlobalSignout fails with an error and AdminUserGlobalSignout requires a username, of which there is none in this context.</p>
  <p>The token is short-lived, but in a situation where access tokens have been compromised, revoking the token in a way similar to that described in <a href="https://www.rfc-editor.org/rfc/rfc7009" rel="nofollow noreferrer">RFC 7009</a> would be great peace of mind.</p>
  <p>I haven't found anything indicating it is possible to explicitly revoke the token before it expires. Is there any facility to do this?</p>