Open
Conversation
This module provides production-ready configuration for AWS Cognito User Pools and Identity Pools with comprehensive authentication and authorization features: - User Pool with flexible sign-in options (email, phone number, username) - Password policy configuration with strength requirements - Multi-factor authentication (MFA) support (TOTP and SMS) - User Pool Clients for web, mobile, and server-side applications - OAuth 2.0 flows with hosted UI support - Identity Pool for providing AWS credentials to authenticated users - Custom user attributes for application-specific data - Advanced security features (adaptive authentication, compromised credentials detection) - Lambda triggers for custom authentication flows - Account recovery mechanisms - Device tracking and remembering Features: - Multiple user pool clients with independent configurations - Hosted UI domain for OAuth 2.0 authentication - Identity pool with IAM role management for authenticated/unauthenticated users - Custom schema attributes for multi-tenant applications - Token validity configuration per client - Advanced security modes (audit/enforced) - SMS configuration with automatic IAM role creation - Email configuration for custom email sending - Deletion protection for production environments Includes: - Complete module implementation (main.tf, variables.tf, outputs.tf) - Basic test: Simple user pool with email authentication - Advanced test: Full production setup with identity pool, OAuth, custom attributes - Comprehensive documentation with authentication patterns and SDK examples
Contributor
|
✅ Terraform formatting has been automatically applied to this PR. |
Contributor
🔍 Terraform Check Results📊 Summary✅ All checks passed!
🔍 TFLint Details (0 issue(s))🔒 Trivy Security Details (21 issue(s))👤 Pusher: @llama90 | 🔄 Action: |
Remove data source dependencies that require API calls: - Remove aws_caller_identity and aws_region data sources - Use provider::aws::region for region references in outputs - Remove region and account_id outputs This allows terraform plan to run without actual AWS credentials.
Contributor
🔍 Terraform Check Results📊 Summary✅ All checks passed!
🔍 TFLint Details (0 issue(s))🔒 Trivy Security Details (21 issue(s))👤 Pusher: @llama90 | 🔄 Action: |
- Reduce from 694 lines to ~64 lines (ultra-minimal) - Remove all verbose use cases and authentication tutorials - Remove duplicated code examples (OAuth flows, API Gateway integration, etc) - Simplify Quick Start (minimal client configuration) - Add terraform-docs section with <details> - Follow exact structure: Features, Quick Start, Examples, Testing, Docs - Limit features to 8 items - Reference tests/ instead of duplicating code Follows DOCUMENTATION_GUIDELINES.md pattern like ec2 module.
Contributor
🔍 Terraform Check Results📊 Summary✅ All checks passed!
🔍 TFLint Details (0 issue(s))🔒 Trivy Security Details (21 issue(s))👤 Pusher: @llama90 | 🔄 Action: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This module provides production-ready configuration for AWS Cognito User Pools and Identity Pools with comprehensive authentication and authorization features:
Features:
Includes:
Type of Change
Checklist
Module Information
Module Path:
terraform/___________Purpose:
Key Resources:
Additional Notes
Related Issues
Closes #