bcgov / ocp-sso

BCGov Single Sign-On KeyCloak
http://oidc.gov.bc.ca/
Apache License 2.0
8 stars 8 forks source link

Enhance Cognito Terraform to Protect user pools #380

Closed ConradBoydElliottGustafson closed 3 years ago

ConradBoydElliottGustafson commented 3 years ago

By default the user pool has this:

admin_create_user_config { allow_admin_create_user_only = true }

The result is that any user that knows the user pool ID and the client ID can create users! Please turn this off by default (in our Terraform code).