pulumi-aws-kotlin/com.pulumi.aws.cognito.kotlin/IdentityPool

IdentityPool

class IdentityPool : KotlinCustomResource

Provides an AWS Cognito Identity Pool.

Example Usage

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.iam.SamlProvider;
import com.pulumi.aws.iam.SamlProviderArgs;
import com.pulumi.aws.cognito.IdentityPool;
import com.pulumi.aws.cognito.IdentityPoolArgs;
import com.pulumi.aws.cognito.inputs.IdentityPoolCognitoIdentityProviderArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var default_ = new SamlProvider("default", SamlProviderArgs.builder()
            .samlMetadataDocument(Files.readString(Paths.get("saml-metadata.xml")))
            .build());
        var main = new IdentityPool("main", IdentityPoolArgs.builder()
            .identityPoolName("identity pool")
            .allowUnauthenticatedIdentities(false)
            .allowClassicFlow(false)
            .cognitoIdentityProviders(
                IdentityPoolCognitoIdentityProviderArgs.builder()
                    .clientId("6lhlkkfbfb4q5kpp90urffae")
                    .providerName("cognito-idp.us-east-1.amazonaws.com/us-east-1_Tv0493apJ")
                    .serverSideTokenCheck(false)
                    .build(),
                IdentityPoolCognitoIdentityProviderArgs.builder()
                    .clientId("7kodkvfqfb4qfkp39eurffae")
                    .providerName("cognito-idp.us-east-1.amazonaws.com/eu-west-1_Zr231apJu")
                    .serverSideTokenCheck(false)
                    .build())
            .supportedLoginProviders(Map.ofEntries(
                Map.entry("graph.facebook.com", "7346241598935552"),
                Map.entry("accounts.google.com", "123456789012.apps.googleusercontent.com")
            ))
            .samlProviderArns(default_.arn())
            .openidConnectProviderArns("arn:aws:iam::123456789012:oidc-provider/id.example.com")
            .build());
    }
}

Import

Cognito Identity Pool can be imported using its ID, e.g.,

$ pulumi import aws:cognito/identityPool:IdentityPool mypool us-west-2_abc123

Properties

allowClassicFlow

val allowClassicFlow: Output<Boolean>?

Enables or disables the classic / basic authentication flow. Default is false.

allowUnauthenticatedIdentities

val allowUnauthenticatedIdentities: Output<Boolean>?

Whether the identity pool supports unauthenticated logins or not.

arn

val arn: Output<String>

The ARN of the identity pool.

cognitoIdentityProviders

val cognitoIdentityProviders: Output<List<IdentityPoolCognitoIdentityProvider>>?

An array of Amazon Cognito Identity user pools and their client IDs.

developerProviderName

val developerProviderName: Output<String>?

The "domain" by which Cognito will refer to your users. This name acts as a placeholder that allows your backend and the Cognito service to communicate about the developer provider.