Which AWS service enables user authentication for applications, supporting both direct sign-in with username and password and integration with third-party identity providers?