Serverless Programming Cookbook

Creating a Cognito user pool client with AWS CLI

We will now create a user pool using CLI commands. In the next section, we will create the user pool using a CloudFormation template:

1. Create a role that allows Cognito to send SMS messages:
   1. Create a policy JSON file with an action, sns:publish, as follows:

{    "Version": "2012-10-17",    "Statement": [        {            "Effect": "Allow",            "Action": [                "sns:publish"            ],            "Resource": [                "*"            ]        }    ]}

Save this as sns-publish-policy.txt.

1. 2. Create the policy, as follows:

aws iam create-policy \    --policy-name cognito_sns_iam_policy \    --policy-document file://resources/sns-publish-policy.txt \    --profile admin

1. 3. Create a trust relationship document for the role, as follows:

{  "Version": "2012-10-17", "Statement": ...