serverless.yml

    #=======================================================================================
    IdentityPool:
      Type                                : AWS::Cognito::IdentityPool
      Description                         : "Federation for the User Pool members to access AWS resources"
      Properties:
        IdentityPoolName                  : ${self:provider.apiname}_identities
        AllowUnauthenticatedIdentities    : true
        CognitoIdentityProviders:
          - ClientId                      : { Ref: AndroidUserPoolClient }
            ProviderName                  : { Fn::Sub: [ 'cognito-idp.${self:provider.region}.amazonaws.com/#{client}', { "client": { Ref: CognitoUserPoolMyPool }}]}
    #=======================================================================================
    IdentityPoolRoleMap:
      Type                                : AWS::Cognito::IdentityPoolRoleAttachment
      Description                         : "Links the unauthenticated and authenticated policies to the identity pool"
      Properties:
        IdentityPoolId                    : { Ref: IdentityPool }
        Roles:
          unauthenticated                 : { Fn::GetAtt: [ UnAuthRole, Arn ]}
          authenticated                   : { Fn::GetAtt: [ AuthRole, Arn ]}
    #=======================================================================================