Jay Brown
e544f08505
DRAFT for mfa demo * for mfa demo * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1 * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1 * cleanup * list cognito users * Merge branch 'main' of bitbucket.org:aarete/query-orchestration into feature/cognito-mfa-1
36 lines
1.1 KiB
Markdown
36 lines
1.1 KiB
Markdown
# User pool creation
|
|
|
|
## Step-by-Step Process for creation of new user pool and dependencies
|
|
|
|
1. **Create User Pool**: Creates a new Cognito User Pool with email as the username attribute and password policies.
|
|
|
|
2. **Enable MFA**: Configures the user pool to require MFA using software token (TOTP) authentication.
|
|
|
|
3. **Create Domain**: Sets up a custom Cognito domain for the hosted UI at `https://{DOMAIN_PREFIX}.auth.{AWS_REGION}.amazoncognito.com`.
|
|
|
|
4. **Apply UI Customization**: Adds minimal branding with custom CSS for the login pages.
|
|
|
|
5. **Create App Client**: Creates an application client with:
|
|
- OAuth code flow
|
|
- Refresh token validity
|
|
- Callback and logout URLs
|
|
- Client secret
|
|
|
|
6. **Create Test User**: Creates a test user with the specified email and phone number.
|
|
|
|
## Output
|
|
|
|
The script logs all operations to `creation.log.txt` and outputs a summary with:
|
|
- User Pool ID
|
|
- Domain URL
|
|
- App Client ID
|
|
- App Client Secret
|
|
- Test user information
|
|
|
|
## Usage
|
|
|
|
Edit the
|
|
`DOMAIN_PREFIX`, `LOG_FILE` and
|
|
`NEW_USER_POOL_NAME` with unique values for your test run.
|
|
|