Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Helper script - Cognito user missing email attribute #39

Open
SandraPico opened this issue Feb 12, 2020 · 2 comments
Open

Helper script - Cognito user missing email attribute #39

SandraPico opened this issue Feb 12, 2020 · 2 comments

Comments

@SandraPico
Copy link
Collaborator

Using the helper script causes an application deployment error since email is not set, causing the gurum-owner tag to be empty. Update the script to ask for email information. Consider adding the cognito role policy to the api CloudFormation template and create the cognito group attached to the role policy through the helper script.

@kalleeh
Copy link
Owner

kalleeh commented Feb 13, 2020

One fix for this might be to include the now generic tag based policy (kalleeh/gurum-api#9 (comment)) to the API template. Let's call it for example, gurum-group-policy.
This can then be referenced by whatever automation (helper script today) that would,

  1. Prompt user if they want to create a group (Cognito Group).
  2. If Yes, create an IAM Role that maps to that group and attach the gurum-group-policy to that IAM role.
  3. Prompt if the user want to create a user (Cognito User).
  4. Ask what group the user should be a member of and place the user in that Cognito Group.

This would also of course prompt for the e-mail address to be added to the user.

@kalleeh
Copy link
Owner

kalleeh commented Feb 13, 2020

Policy added in kalleeh/gurum-api#41

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants