interface CognitoIdentityProviderProperty

Language	Type name
.NET	`Amazon.CDK.AWS.Cognito.CfnIdentityPool.CognitoIdentityProviderProperty`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awscognito#CfnIdentityPool_CognitoIdentityProviderProperty`
Java	`software.amazon.awscdk.services.cognito.CfnIdentityPool.CognitoIdentityProviderProperty`
Python	`aws_cdk.aws_cognito.CfnIdentityPool.CognitoIdentityProviderProperty`
TypeScript	`aws-cdk-lib` » `aws_cognito` » `CfnIdentityPool` » `CognitoIdentityProviderProperty`

CognitoIdentityProvider is a property of the AWS::Cognito::IdentityPool resource that represents an Amazon Cognito user pool and its client ID.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cognito as cognito } from 'aws-cdk-lib';
const cognitoIdentityProviderProperty: cognito.CfnIdentityPool.CognitoIdentityProviderProperty = {
  clientId: 'clientId',
  providerName: 'providerName',

  // the properties below are optional
  serverSideTokenCheck: false,
};

Properties

Name	Type	Description
clientId	`string`	The client ID for the Amazon Cognito user pool.
providerName	`string`	The provider name for an Amazon Cognito user pool.
serverSideTokenCheck?	`boolean \|` `IResolvable`	TRUE if server-side token validation is enabled for the identity provider’s token.

clientId

Type: string

The client ID for the Amazon Cognito user pool.

providerName

Type: string

The provider name for an Amazon Cognito user pool.

For example: cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789 .

serverSideTokenCheck?

Type: boolean | IResolvable (optional)

TRUE if server-side token validation is enabled for the identity provider’s token.

After you set the ServerSideTokenCheck to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.

If the user is signed out or deleted, the identity pool returns a 400 Not Authorized error.

AWS CDK