Support for using cognito in the alb listner

[sewmiuraj]

Hello,

I wish to add authentication using cognito in my public loadbalancer. However, when I look at https://github.com/gruntwork-io/terraform-aws-load-balancer/blob/main/modules/lb-listener-rules/main.tf, I don't see an option to be able to specify type = "authenticate-cognito".

Have I missed anything, or is there a way to be able to configure this?

---

Tracked in ticket #110382

[gcagle3]

Hi @sewmiuraj! At present, this module only supports type = "authenticate-oidc". If you could explain your use case a bit (clarify how you're wanting to leverage this and what problem you're trying to solve), then we would be happy to open an issue to add this functionality to the module. Thanks in advance!

[sewmiuraj]

Hello @gcagle3 ,

I have a setup where I have integrated Azure AD with AWS Congito. This lets me configure authentication to the application at an alb level. I already have my implementation done manually through the AWS console. While trying to update the configuration in the terragrunt files, I realized that type = "authenticate-cognito" is not supported.

[gcagle3]

Hi @sewmiuraj, we have opened a feature request issue here to add Cognito authentication as an option. If you have any additional or specific criteria you would like to add, please feel free to add it to the issue as a comment. We should be able to start work on this soon.

[gcagle3]

Hi @sewmiuraj! There is a feature branch opened here to add Cognito authentication support to the lb-listener-rules module. If you have time, could you test this out and let us know if this works as expected?

[gcagle3]

Hi @sewmiuraj! I'm happy to report that Cognito support is officially available in terraform-aws-load-balancer v0.29.12 now. I'm going to go ahead and close this discussion, but please feel free to re-open it (or a new discussion) if you have any questions.