search

cfntools / cloudformation-gaps

Project to track CloudFormation Coverage
34 stars 1 forks source link

AWS::Cognito::UserPoolMfaConfiguration #20

Open carlnordenfelt opened 5 years ago

carlnordenfelt commented 5 years ago

This is most likely a missing resource after reviewing the APIs. Could potentially be a missing property AWS::Cognito::UserPool however.

https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserPoolMfaConfig.html

Particularly SoftwareTokenMfaConfiguration is missing when creating a UserPool. The UserPool API only accepts an enabled flag which will enable SMS MFA while there is a separate API (linked above) to set TOTP.

For completeness, the Create UserPool API: https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html

benbridts commented 5 years ago

I would have the Create apis as resources and the Set apis as properties, but that's mostly gut feeling. Both are possible in any case. I'll leave for now, is I opted for a resource for #21 too

nuttmeister commented 5 years ago

We have a custom resource for that, if anyone wants to use it it can be found here. It's written in Go, but there are deploy instructions in the readme.

https://github.com/dwtechnologies/custom-cf