A collection of configuration templates for AWS Cognito resources as well as security controls for monitoring and protecting AWS Cognito configuration such as Config Rules, CloudWatch Alarms, EventBridge Rules, IAM policies, and more.
This template creates a Cognito User Pool 'my-user-pool' that optionally enables MFA for users and sets 'email' as a required attribute.
This template creates a client 'MyWebApp' for an existing Cognito User Pool.
This template creates a UI customization attachment for a user pool. It sets the UI customization information for a user pool's built-in app UI. The template includes the UserPoolId, ClientId, and CSS properties.
This template creates a risk configuration attachment for a user pool in Amazon Cognito. It sets the risk configurations for account takeover, compromised credentials, and risk exceptions. The risk configurations include actions to be taken, notification configurations, and IP range lists. As input the template requires an existing User Pool and Client Id, as well as an SES Identity Arn for sending email notifications
This template creates a new OAuth2.0 resource server in a Cognito user pool. It defines custom scopes in the resource server.
This template creates a SAML identity provider 'YourProviderName' in the referenced user pool. It specifies the user pool ID, provider name, provider details including metadata URL, provider type, attribute mapping, and IDP identifiers.
This template creates the OIDC identity provider 'YourOIDCProviderName' in the referenced user pool. It specifies the user pool ID, provider name, provider details including client ID, client secret, attributes request method, OIDC issuer, and authorize scopes, provider type, attribute mapping, and IDP identifiers.
This template creates a Sign in with Apple identity provider in the referenced user pool. It specifies the user pool ID, provider name, provider details including client ID, team ID, key ID, private key, and authorize scopes, provider type, and attribute mapping.
This template creates a Facebook identity provider in the referenced user pool. It specifies the user pool ID, provider name, provider details including client ID, client secret, and authorize scopes, provider type, and attribute mapping.
This template creates a Google identity provider in the referenced user pool. It specifies the user pool ID, provider name, provider details including client ID, client secret, and authorize scopes, provider type, and attribute mapping.
This template creates a Login with Amazon identity provider in the referenced user pool. It specifies the user pool ID, provider name, provider details including client ID, client secret, and authorize scopes, provider type, and attribute mapping.
This template creates a custom domain, "my-test-user-pool-domain" for the Cognito user pool referenced by the UserPool parameter. The template also requires a certificate referenced by CertificateArn
This template creates an identity pool principal tag attribute map for access control. It maps the claim `aud` to principal tag `app_id` and the claim `sub` to `user_id` in the identity pool `Example_pool`.
Creates an AWS Cognito Identity Pool with SAML and social login providers including Facebook and Google.
This template sets up an AWS Cognito Identity Pool with specific roles for authenticated users, including a role mapping for Facebook login.
This template configures an AWS API Gateway with an authorizer using Cognito User Pools.
Creates a Cognito User Pool and configures a Google Identity Provider for user authentication.
Creates an AWS Cognito Resource Server with a custom scope defined, linked to a user pool.
Sets up a Cognito user pool with custom attributes and creates a user with specific attributes.
This template creates an AWS Cognito user pool, a user, and a user group, and adds the user to the group.
This template customizes the user interface for a single client in an AWS Cognito User Pool, including CSS and logo.
This template customizes the user interface for all clients in an AWS Cognito User Pool, applying universal CSS and logo settings.
Sets up a Cognito User Pool with a client integrated with Pinpoint analytics for enhanced data collection.
Configures a Cognito User Pool Client to use Cognito as the identity provider with support for OAuth flows and scopes.