Creating Amazon Verified Permissions resources with AWS CloudFormation
Amazon Verified Permissions is integrated with AWS CloudFormation, a service that helps you to model and set up your AWS resources so that you can spend less time creating and managing your resources and infrastructure. You create a template that describes all the AWS resources that you want (such as policy stores), and CloudFormation provisions and configures those resources for you.
When you use CloudFormation, you can reuse your template to set up your Verified Permissions resources consistently and repeatedly. Describe your resources once, and then provision the same resources over and over in multiple AWS accounts and Regions.
Important
Amazon Cognito Identity is not available in all of the same AWS Regions as Amazon Verified Permissions. If you receive
an error from CloudFormation regarding Amazon Cognito Identity, such as Unrecognized resource types:
AWS::Cognito::UserPool, AWS::Cognito::UserPoolClient, we recommend that you
create the Amazon Cognito user pool and client in the geographically closest AWS Region where
Amazon Cognito Identity is available. Use this newly created user pool when creating the Verified Permissions identity
source.
Verified Permissions and CloudFormation templates
To provision and configure resources for Verified Permissions and related services, you must understand CloudFormation templates. Templates are formatted text files in JSON or YAML. These templates describe the resources that you want to provision in your CloudFormation stacks. If you're unfamiliar with JSON or YAML, you can use CloudFormation Designer to help you get started with CloudFormation templates. For more information, see What is CloudFormation Designer? in the AWS CloudFormation User Guide.
Verified Permissions supports creating identity sources, policies, policy stores, and policy templates in CloudFormation. For more information, including examples of JSON and YAML templates for Verified Permissions resources, see the Amazon Verified Permissions resource type reference in the AWS CloudFormation User Guide.
AWS CDK constructs
The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through CloudFormation. Constructs, or reusable cloud components, can be used to create CloudFormation templates. These templates can then be used to deploy your cloud infrastructure.
To learn more and download AWS CDK, see AWS Cloud Development Kit
The following are links to documentation for Verified Permissions AWS CDK resources, such as constructs.
Learn more about CloudFormation
To learn more about CloudFormation, see the following resources:
