cognito-identity-pool.tf

cognito-identity-pool.tf

resource "aws_cognito_identity_pool" "users" {
  identity_pool_name               = "users_identity_pool"
  allow_unauthenticated_identities = true
  allow_classic_flow               = true

  cognito_identity_providers {
    client_id               = aws_cognito_user_pool_client.users.id
    provider_name           = "cognito-idp.${var.region}.amazonaws.com/${aws_cognito_user_pool.users.id}"
    server_side_token_check = false
  }

  supported_login_providers = {}

  saml_provider_arns           = []
  openid_connect_provider_arns = []
}

resource "aws_cognito_identity_pool_roles_attachment" "main" {
  identity_pool_id = aws_cognito_identity_pool.users.id

  roles = {
    "unauthenticated" = local.identity_pool_role_arn,
    "authenticated" = local.identity_pool_role_arn
  }
}