Cognito verification code. That access token claims contain the correct OAuth 2.