programmatically-create-amazon-cognito-groups.yml

service: my-user-pool

provider:
  name: aws
  stage: ${opt:stage, "dev"}

custom:
  COGNITO_USER_POOL: ${self:service.name}-${self:provider.stage}
  COGNITO_CLIENT: ${self:service.name}-cognito-client-${self:provider.stage}

resources:
  Resources:
    CognitoUserPool:
      Type: AWS::Cognito::UserPool
      Properties:
        UserPoolName: ${self:custom.COGNITO_USER_POOL}
        AutoVerifiedAttributes:
          - email
    CognitoUserPoolClient:
      Type: AWS::Cognito::UserPoolClient
      Properties:
        ClientName: ${self:custom.COGNITO_CLIENT}
        UserPoolId:
          Ref: CognitoUserPool
    # create groups     
    CognitoUserPoolGroupAdmins:
      Type: AWS::Cognito::UserPoolGroup
      Properties: 
        Description: "Site admins"
        GroupName: "admins"
        UserPoolId:
          Ref: CognitoUserPool
    CognitoUserPoolGroupEditors:
      Type: AWS::Cognito::UserPoolGroup
      Properties: 
        Description: "Site editors"
        GroupName: "editors"
        UserPoolId:
          Ref: CognitoUserPool
    CognitoUserPoolGroupAuthors:
      Type: AWS::Cognito::UserPoolGroup
      Properties: 
        Description: "Site authors"
        GroupName: "authors"
        UserPoolId:
          Ref: CognitoUserPool