Skip to content

Cognito Service CFN Tempalte

Dennis Christilaw edited this page Nov 15, 2019 · 2 revisions

NOTE

I will update this page with more clear documentation on this template as soon as I am able.

If you plan to use this for your ElasticSearxch Stack, the access policy you will need to use to connect this to the Cognito Service you just built is:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::<Account>:role/Cognito_Auth_Role"
      },
      "Action": "es:ESHttp*",
      "Resource": "arn:aws:es:us-west-2:<Account>:domain/elasticsearchstack-name/*"
    }
  ]
}
  • Replace Cognito_Auth_Role with the valid value for what you created.
  • Replace elasticsearchstack-name with your ES Domain Name