Use Case:-

I have a frontend that is calling Amazon Transcribe service. I'm using s3 as deployment so can't expose the amazon credentials(access_key and secret_key) on front end. So I created a backend endpoint and want to call Cognito service to get temporary credentials that I can pass to front end(even if someone get the creds, it will be only for some time). And then these credentials should be passed to Amazon Transcribe service to get the speech to text.

The thing is I am new to AWS and reading the documentation is creating a lot of confusion for me.

My First question is - Is it possible to get the temporary credentials from Amazon Cognito that can be used in the Amazon Transcribe service?(It is possible, but correct me if I'm wrong.)

Second question - How do I do it? Can you provide some steps and exact resources which I should go through?

Thanks in advance.