Skip to content

Instantly share code, notes, and snippets.

@ross-humphrey
Created November 5, 2019 18:14
Show Gist options
  • Save ross-humphrey/de73211c99c3bf3dc6aa8a75889cca69 to your computer and use it in GitHub Desktop.
Save ross-humphrey/de73211c99c3bf3dc6aa8a75889cca69 to your computer and use it in GitHub Desktop.
πŸ±β€πŸ‘€ Create a cognito pool for server to server authentication using Windows commands
# Windows script to set up Cognito Pool
# Handy guide for Server to Server credentials using Cognito @ https://lobster1234.github.io/2018/05/31/server-to-server-auth-with-amazon-cognito/
# CREATE COGNITO USER POOL
SET POOLNAME="PoolName"
SET ENV="DEV"
aws cognito-idp create-user-pool --pool-name %POOLNAME%%ENV%
# MANUAL STEP (FOR NOW - COPY THE ID FROM THE OUTPUT ABOVE)
# Take the UserPool->Id, everything below is created from it: eu-west-1_g*****
# CREATE RESOURCE SERVER
SET ID="eu-west-*****"
SET RESOURCE_SERVER_NAME="resourceservername"
SET SCOPE_NAME_ONE="getscope"
SET SCOPE_NAME_TWO="postscope"
aws cognito-idp create-resource-server --name %RESOURCE_SERVER_NAME% --identifier %RESOURCE_SERVER_NAME% --user-pool-id %ID% --scopes ScopeName=%SCOPE_NAME_ONE%,ScopeDescription=%SCOPE_NAME_ONE% ScopeName=%SCOPE_NAME_TWO%,ScopeDescription=%SCOPE_NAME_TWO%
# CREATE CLIENT APP
SET CLIENT_APP_NAME="clientname"
aws cognito-idp create-user-pool-client --user-pool-id %ID% --allowed-o-auth-flows client_credentials --client-name %CLIENT_APP_NAME% --generate-secret --allowed-o-auth-scopes %RESOURCE_SERVER_NAME%/%SCOPE_NAME_ONE% %RESOURCE_SERVER_NAME%/%SCOPE_NAME_TWO% --allowed-o-auth-flows-user-pool-client
# ADD A DOMAIN
SET UNIQUE_DOMAIN_NAME="somethingunique1231515353515135"
aws cognito-idp create-user-pool-domain --domain %UNIQUE_DOMAIN_NAME% --user-pool-id %ID% # The Domain must be globally unique
# OTHER USEFUL COMMANDS
# DELETE RESOURCE SERVER
# aws cognito-idp delete-resource-server --user-pool-id %ID% --identifier %RESOURCE_SERVER_NAME%
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment