Aws/cognito
@swamp/aws/cognitov2026.10.25.1
01README
AWS COGNITO infrastructure models
02Release Notes
- Updated: identity_pool_role_attachment
03Behaviors
identity_pool.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| PushSync? | object | |
| CognitoIdentityProviders? | array | |
| DeveloperProviderName? | string | |
| CognitoStreams? | object | |
| SupportedLoginProviders? | record | |
| CognitoEvents? | record | |
| IdentityPoolName? | string | |
| AllowUnauthenticatedIdentities | boolean | |
| SamlProviderARNs? | array | |
| OpenIdConnectProviderARNs? | array | |
| AllowClassicFlow? | boolean | |
| IdentityPoolTags? | array | An array of key-value pairs to apply to this resource. |
fn create()
Create a Cognito IdentityPool
fn get(identifier: string)
Get a Cognito IdentityPool
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPool |
fn update()
Update a Cognito IdentityPool
fn delete(identifier: string)
Delete a Cognito IdentityPool
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPool |
fn sync()
Sync Cognito IdentityPool state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito IdentityPool resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito IdentityPool resource state
identity_pool_principal_tag.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| IdentityPoolId | string | |
| IdentityProviderName | string | |
| UseDefaults? | boolean | |
| PrincipalTags? | record |
fn create()
Create a Cognito IdentityPoolPrincipalTag
fn get(identifier: string)
Get a Cognito IdentityPoolPrincipalTag
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPoolPrincipalTag |
fn update()
Update a Cognito IdentityPoolPrincipalTag
fn delete(identifier: string)
Delete a Cognito IdentityPoolPrincipalTag
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPoolPrincipalTag |
fn sync()
Sync Cognito IdentityPoolPrincipalTag state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito IdentityPoolPrincipalTag resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito IdentityPoolPrincipalTag resource state
identity_pool_role_attachment.tsv2026.10.25.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| IdentityPoolId | string | |
| Roles? | record | |
| RoleMappings? | record |
fn create()
Create a Cognito IdentityPoolRoleAttachment
fn get(identifier: string)
Get a Cognito IdentityPoolRoleAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPoolRoleAttachment |
fn update()
Update a Cognito IdentityPoolRoleAttachment
fn delete(identifier: string)
Delete a Cognito IdentityPoolRoleAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito IdentityPoolRoleAttachment |
fn sync()
Sync Cognito IdentityPoolRoleAttachment state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito IdentityPoolRoleAttachment resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito IdentityPoolRoleAttachment resource state
log_delivery_configuration.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| LogConfigurations? | array |
fn create()
Create a Cognito LogDeliveryConfiguration
fn get(identifier: string)
Get a Cognito LogDeliveryConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito LogDeliveryConfiguration |
fn update()
Update a Cognito LogDeliveryConfiguration
fn delete(identifier: string)
Delete a Cognito LogDeliveryConfiguration
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito LogDeliveryConfiguration |
fn sync()
Sync Cognito LogDeliveryConfiguration state from AWS
Resources
state(infinite)— Cognito LogDeliveryConfiguration resource state
managed_login_branding.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| ClientId? | string | |
| UseCognitoProvidedValues? | boolean | |
| Settings? | record | |
| Assets? | array | |
| ReturnMergedResources? | boolean |
fn create()
Create a Cognito ManagedLoginBranding
fn get(identifier: string)
Get a Cognito ManagedLoginBranding
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito ManagedLoginBranding |
fn update()
Update a Cognito ManagedLoginBranding
fn delete(identifier: string)
Delete a Cognito ManagedLoginBranding
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito ManagedLoginBranding |
fn sync()
Sync Cognito ManagedLoginBranding state from AWS
Resources
state(infinite)— Cognito ManagedLoginBranding resource state
terms.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| ClientId? | string | |
| TermsName | string | |
| TermsSource | enum | |
| Enforcement | enum | |
| Links | record |
fn create()
Create a Cognito Terms
fn get(identifier: string)
Get a Cognito Terms
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito Terms |
fn update()
Update a Cognito Terms
fn delete(identifier: string)
Delete a Cognito Terms
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito Terms |
fn sync()
Sync Cognito Terms state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito Terms resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito Terms resource state
user_pool.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolName? | string | |
| Policies? | object | |
| AccountRecoverySetting? | object | |
| AdminCreateUserConfig? | object | |
| AliasAttributes? | array | |
| UsernameAttributes? | array | |
| AutoVerifiedAttributes? | array | |
| DeviceConfiguration? | object | |
| EmailConfiguration? | object | |
| EmailVerificationMessage? | string | |
| EmailVerificationSubject? | string | |
| DeletionProtection? | string | |
| LambdaConfig? | object | |
| MfaConfiguration? | string | |
| EnabledMfas? | array | |
| SmsAuthenticationMessage? | string | |
| EmailAuthenticationMessage? | string | |
| EmailAuthenticationSubject? | string | |
| SmsConfiguration? | object | |
| SmsVerificationMessage? | string | |
| KeyConfiguration? | object | |
| WebAuthnRelyingPartyID? | string | |
| WebAuthnUserVerification? | string | |
| WebAuthnFactorConfiguration? | enum | |
| Schema? | array | |
| UsernameConfiguration? | object | |
| UserAttributeUpdateSettings? | object | |
| UserPoolTags? | record | |
| VerificationMessageTemplate? | object | |
| UserPoolAddOns? | object | |
| UserPoolTier? | enum | |
| IssuerConfiguration? | object |
fn create()
Create a Cognito UserPool
fn get(identifier: string)
Get a Cognito UserPool
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPool |
fn update()
Update a Cognito UserPool
fn delete(identifier: string)
Delete a Cognito UserPool
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPool |
fn sync()
Sync Cognito UserPool state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPool resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPool resource state
user_pool_client.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| ClientName? | string | |
| ExplicitAuthFlows? | array | |
| GenerateSecret? | boolean | |
| ReadAttributes? | array | |
| AuthSessionValidity? | number | |
| RefreshTokenValidity? | number | |
| AccessTokenValidity? | number | |
| IdTokenValidity? | number | |
| TokenValidityUnits? | object | |
| RefreshTokenRotation? | object | |
| UserPoolId | string | |
| WriteAttributes? | array | |
| AllowedOAuthFlows? | array | |
| AllowedOAuthFlowsUserPoolClient? | boolean | |
| AllowedOAuthScopes? | array | |
| CallbackURLs? | array | |
| DefaultRedirectURI? | string | |
| LogoutURLs? | array | |
| SupportedIdentityProviders? | array | |
| AnalyticsConfiguration? | object | |
| PreventUserExistenceErrors? | string | |
| EnableTokenRevocation? | boolean | |
| EnablePropagateAdditionalUserContextData? | boolean |
fn create()
Create a Cognito UserPoolClient
fn get(identifier: string)
Get a Cognito UserPoolClient
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolClient |
fn update()
Update a Cognito UserPoolClient
fn delete(identifier: string)
Delete a Cognito UserPoolClient
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolClient |
fn sync()
Sync Cognito UserPoolClient state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolClient resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolClient resource state
user_pool_domain.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| Domain | string | |
| CustomDomainConfig? | object | |
| ManagedLoginVersion? | number | |
| Routing? | object |
fn create()
Create a Cognito UserPoolDomain
fn get(identifier: string)
Get a Cognito UserPoolDomain
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolDomain |
fn update()
Update a Cognito UserPoolDomain
fn delete(identifier: string)
Delete a Cognito UserPoolDomain
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolDomain |
fn sync()
Sync Cognito UserPoolDomain state from AWS
Resources
state(infinite)— Cognito UserPoolDomain resource state
user_pool_group.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| Description? | string | |
| GroupName? | string | |
| Precedence? | number | |
| RoleArn? | string | |
| UserPoolId | string |
fn create()
Create a Cognito UserPoolGroup
fn get(identifier: string)
Get a Cognito UserPoolGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolGroup |
fn update()
Update a Cognito UserPoolGroup
fn delete(identifier: string)
Delete a Cognito UserPoolGroup
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolGroup |
fn sync()
Sync Cognito UserPoolGroup state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolGroup resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolGroup resource state
user_pool_identity_provider.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| ProviderName | string | |
| ProviderType | string | |
| ProviderDetails | record | |
| IdpIdentifiers? | array | |
| AttributeMapping? | record |
fn create()
Create a Cognito UserPoolIdentityProvider
fn get(identifier: string)
Get a Cognito UserPoolIdentityProvider
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolIdentityProvider |
fn update()
Update a Cognito UserPoolIdentityProvider
fn delete(identifier: string)
Delete a Cognito UserPoolIdentityProvider
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolIdentityProvider |
fn sync()
Sync Cognito UserPoolIdentityProvider state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolIdentityProvider resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolIdentityProvider resource state
user_pool_regional_configuration_attachment.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| Status? | string | The status of the replica. Set to ACTIVE or INACTIVE. |
| EmailConfiguration? | object | |
| LambdaConfig? | object | |
| SmsConfiguration? | object | |
| UserPoolTags? | record |
fn create()
Create a Cognito UserPoolRegionalConfigurationAttachment
fn get(identifier: string)
Get a Cognito UserPoolRegionalConfigurationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolRegionalConfigurationAttachment |
fn update()
Update a Cognito UserPoolRegionalConfigurationAttachment
fn delete(identifier: string)
Delete a Cognito UserPoolRegionalConfigurationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolRegionalConfigurationAttachment |
fn sync()
Sync Cognito UserPoolRegionalConfigurationAttachment state from AWS
Resources
state(infinite)— Cognito UserPoolRegionalConfigurationAttachment resource state
user_pool_replica.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| RegionName | string | |
| UserPoolTagsAtCreate? | record |
fn create()
Create a Cognito UserPoolReplica
fn get(identifier: string)
Get a Cognito UserPoolReplica
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolReplica |
fn update()
Update a Cognito UserPoolReplica
fn delete(identifier: string)
Delete a Cognito UserPoolReplica
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolReplica |
fn sync()
Sync Cognito UserPoolReplica state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolReplica resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolReplica resource state
user_pool_resource_server.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| Identifier | string | |
| Name | string | |
| Scopes? | array |
fn create()
Create a Cognito UserPoolResourceServer
fn get(identifier: string)
Get a Cognito UserPoolResourceServer
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolResourceServer |
fn update()
Update a Cognito UserPoolResourceServer
fn delete(identifier: string)
Delete a Cognito UserPoolResourceServer
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolResourceServer |
fn sync()
Sync Cognito UserPoolResourceServer state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolResourceServer resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolResourceServer resource state
user_pool_risk_configuration_attachment.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| ClientId | string | |
| RiskExceptionConfiguration? | object | |
| CompromisedCredentialsRiskConfiguration? | object | |
| AccountTakeoverRiskConfiguration? | object |
fn create()
Create a Cognito UserPoolRiskConfigurationAttachment
fn get(identifier: string)
Get a Cognito UserPoolRiskConfigurationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolRiskConfigurationAttachment |
fn update()
Update a Cognito UserPoolRiskConfigurationAttachment
fn delete(identifier: string)
Delete a Cognito UserPoolRiskConfigurationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolRiskConfigurationAttachment |
fn sync()
Sync Cognito UserPoolRiskConfigurationAttachment state from AWS
Resources
state(infinite)— Cognito UserPoolRiskConfigurationAttachment resource state
user_pool_uicustomization_attachment.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| ClientId | string | |
| CSS? | string |
fn create()
Create a Cognito UserPoolUICustomizationAttachment
fn get(identifier: string)
Get a Cognito UserPoolUICustomizationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUICustomizationAttachment |
fn update()
Update a Cognito UserPoolUICustomizationAttachment
fn delete(identifier: string)
Delete a Cognito UserPoolUICustomizationAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUICustomizationAttachment |
fn sync()
Sync Cognito UserPoolUICustomizationAttachment state from AWS
Resources
state(infinite)— Cognito UserPoolUICustomizationAttachment resource state
user_pool_user.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| ValidationData? | array | |
| UserPoolId | string | |
| Username? | string | |
| MessageAction? | string | |
| ClientMetadata? | record | |
| DesiredDeliveryMediums? | array | |
| ForceAliasCreation? | boolean | |
| UserAttributes? | array |
fn create()
Create a Cognito UserPoolUser
fn get(identifier: string)
Get a Cognito UserPoolUser
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUser |
fn delete(identifier: string)
Delete a Cognito UserPoolUser
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUser |
fn sync()
Sync Cognito UserPoolUser state from AWS
fn list(maxPages?: number, resourceModel?: string)
List Cognito UserPoolUser resources
| Argument | Type | Description |
|---|---|---|
| maxPages? | number | Maximum number of pages to fetch (default: 10) |
| resourceModel? | string | JSON resource model for parent-scoped listing (e.g. parent identifier) |
Resources
state(infinite)— Cognito UserPoolUser resource state
user_pool_user_to_group_attachment.tsv2026.10.23.1
Global Arguments
| Argument | Type | Description |
|---|---|---|
| name | string | Instance name for this resource (used as the unique identifier in the factory pattern) |
| accessKeyId? | string | AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| secretAccessKey? | string | AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| sessionToken? | string | AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault. |
| region? | string | AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1. |
| UserPoolId | string | |
| Username | string | |
| GroupName | string |
fn create()
Create a Cognito UserPoolUserToGroupAttachment
fn get(identifier: string)
Get a Cognito UserPoolUserToGroupAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUserToGroupAttachment |
fn delete(identifier: string)
Delete a Cognito UserPoolUserToGroupAttachment
| Argument | Type | Description |
|---|---|---|
| identifier | string | The primary identifier of the Cognito UserPoolUserToGroupAttachment |
fn sync()
Sync Cognito UserPoolUserToGroupAttachment state from AWS
Resources
state(infinite)— Cognito UserPoolUserToGroupAttachment resource state
04Previous Versions
2026.10.24.1AGPL-3.0-or-later
2026.10.23.1AGPL-3.0-or-later(was none)
- Updated: identity_pool, identity_pool_principal_tag, identity_pool_role_attachment, log_delivery_configuration, managed_login_branding, terms, user_pool, user_pool_client, user_pool_domain, user_pool_group, user_pool_identity_provider, user_pool_regional_configuration_attachment, user_pool_replica, user_pool_resource_server, user_pool_risk_configuration_attachment, user_pool_uicustomization_attachment, user_pool_user, user_pool_user_to_group_attachment
2026.10.13.1
- Updated: identity_pool, identity_pool_principal_tag, identity_pool_role_attachment, log_delivery_configuration, managed_login_branding, terms, user_pool, user_pool_client, user_pool_domain, user_pool_group, user_pool_identity_provider, user_pool_regional_configuration_attachment, user_pool_replica, user_pool_resource_server, user_pool_risk_configuration_attachment, user_pool_uicustomization_attachment, user_pool_user, user_pool_user_to_group_attachment
2026.10.08.1
2026.10.06.1
2026.10.04.1
2026.10.03.1
2026.10.02.1
2026.10.01.1
2026.09.30.1
2026.09.29.1
2026.09.28.1
2026.09.27.1
2026.09.26.1
2026.09.25.1
2026.09.24.1
2026.09.23.1
2026.09.21.1
2026.09.20.1
05Stats
A
100 / 100
Downloads
40
Archive size
3.6 MB
Verified by Swamp
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Docs keep secrets in a vault1/1earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License2/2earned
- Verified public repository2/2earned
06Platforms
07Labels