In the AWS Cognito console, you can only set a temporary password for a user and the user has to change their password on first login. Since we primarily use Facebook login, and direct user pool users only for special cases (e.g. admin scripting), we don't have the password login flow implemented at all.
Is there any publicly available (e.g. AWS hosted) page which could be used for setting the password of a user from any user pool? Or is there a simple way of creating a page for ourselves?
I've found one way to do this through the AppSync console, but it's quite cumbersome (will write it in the answer for reference).