cognito-identity

26 actions in the cognito-identity service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

cognito-identity:CreateIdentityPool

Write

Grants permission to create a new identity pool

cognito-identity:DeleteIdentities

Write

Grants permission to delete identities from an identity pool. You can specify a list of 1-60 identities that you want to delete

cognito-identity:DeleteIdentityPool

Write

Grants permission to delete a user pool. Once a pool is deleted, users will not be able to authenticate with the pool

cognito-identity:DescribeIdentity

Read

Grants permission to return metadata related to the given identity, including when the identity was created and any associated linked logins

cognito-identity:DescribeIdentityPool

Read

Grants permission to get details about a particular identity pool, including the pool name, ID description, creation date, and current number of users

cognito-identity:GetCredentialsForIdentity

Read

Grants permission to return credentials for the provided identity ID

cognito-identity:GetId

Write

Grants permission to generate (or retrieve) a Cognito ID. Supplying multiple logins will create an implicit linked account

cognito-identity:GetIdentityPoolAnalytics

Read

Grants permission to get analytics data about the total current identity count for all identity pool identity provider (IdPs)

cognito-identity:GetIdentityPoolDailyAnalytics

Read

Grants permission to get analytics data about the number of new identities and total identities for all identity pool identity providers (IdPs)

cognito-identity:GetIdentityPoolRoles

Read

Grants permission to get the roles for an identity pool

cognito-identity:GetIdentityProviderDailyAnalytics

Read

Grants permission to get analytics data about the number of new identities and total identities for one identity pool identity provider (IdPs)

cognito-identity:GetOpenIdToken

Read

Grants permission to get an OpenID token, using a known Cognito ID

cognito-identity:GetOpenIdTokenForDeveloperIdentity

Read

Grants permission to register (or retrieve) a Cognito IdentityId and an OpenID Connect token for a user authenticated by your backend authentication process

cognito-identity:GetPrincipalTagAttributeMap

Read

Grants permission to get the principal tags for an identity pool and provider

cognito-identity:ListIdentities

List

Grants permission to list the identities in an identity pool

cognito-identity:ListIdentityPools

List

Grants permission to list all of the Cognito identity pools registered for your account

cognito-identity:ListTagsForResource

Read

Grants permission to list the tags that are assigned to an Amazon Cognito identity pool

cognito-identity:LookupDeveloperIdentity

Read

Grants permission to retrieve the IdentityId associated with a DeveloperUserIdentifier or the list of DeveloperUserIdentifiers associated with an IdentityId for an existing identity

cognito-identity:MergeDeveloperIdentities

Write

Grants permission to merge two users having different IdentityIds, existing in the same identity pool, and identified by the same developer provider

cognito-identity:SetIdentityPoolRoles

Write

Grants permission to set the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action

cognito-identity:SetPrincipalTagAttributeMap

Write

Grants permission to set the principal tags for an identity pool and provider. These tags are used when making calls to GetOpenIdToken action

cognito-identity:TagResource

Tagging

Grants permission to assign a set of tags to an Amazon Cognito identity pool

cognito-identity:UnlinkDeveloperIdentity

Write

Grants permission to unlink a DeveloperUserIdentifier from an existing identity

cognito-identity:UnlinkIdentity

Write

Grants permission to unlink a federated identity from an existing account

cognito-identity:UntagResource

Tagging

Grants permission to remove the specified tags from an Amazon Cognito identity pool

cognito-identity:UpdateIdentityPool

Write

Grants permission to update an identity pool