Jay Brown
e544f08505
DRAFT for mfa demo * for mfa demo * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1 * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1 * cleanup * list cognito users * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1
1.1 KiB
1.1 KiB
User pool creation
Step-by-Step Process for creation of new user pool and dependencies
-
Create User Pool: Creates a new Cognito User Pool with email as the username attribute and password policies.
-
Enable MFA: Configures the user pool to require MFA using software token (TOTP) authentication.
-
Create Domain: Sets up a custom Cognito domain for the hosted UI at
https://{DOMAIN_PREFIX}.auth.{AWS_REGION}.amazoncognito.com. -
Apply UI Customization: Adds minimal branding with custom CSS for the login pages.
-
Create App Client: Creates an application client with:
- OAuth code flow
- Refresh token validity
- Callback and logout URLs
- Client secret
-
Create Test User: Creates a test user with the specified email and phone number.
Output
The script logs all operations to creation.log.txt and outputs a summary with:
- User Pool ID
- Domain URL
- App Client ID
- App Client Secret
- Test user information
Usage
Edit the
DOMAIN_PREFIX, LOG_FILE and
NEW_USER_POOL_NAME with unique values for your test run.