Amazon Cognito Assigning IAM Roles to Groups in user pool and integration with Identity Pool

2.3k Views Asked by At

I am trying to use newly added User Groups in User Pool and integrate the same with Federated Identities.

I followed these steps:

  1. Create Groups in user pool with roles created in IAM having separate policies
  2. Create User and add them to user groups
  3. Create an Identity Pool and add that Cognito provider under Authentication providers using app id and client id.

    Here I don't get Authenticated role selection under which I have to select Choose role from token Step 3

  4. I Save Changes and generate the default policies for authenticated and unauthenticated users

  5. After the Identity Pool creation i edit it to get Authenticated role selection and select Choose role from token and save it. Step 4

  6. After saving the changes if I go back to edit it i see Use default role is selected. Step 5

Is anyone facing the same problem or I have some errors. The policies and Roles work if I define for authenticated role but it overrides User Group roles.

0

There are 0 best solutions below