Optional ReadonlycognitoWhether to add Cognito as an identity provider alongside external providers
Optional ReadonlycognitoPath to JSON file containing Cognito branding configuration. If undefined, default branding will be used.
You can configure the branding through the AWS console and then export it using AWS CLI using aws cognito-idp describe-managed-login-branding.
(i.e. : aws cognito-idp describe-managed-login-branding --managed-login-branding-id
Optional ReadonlycognitoCognito domain prefix for hosted UI
Optional ReadonlycognitoCognito feature plan for advanced security features. Defaults to PLUS if not specified
Optional ReadonlycognitoStandard threat protection mode. Defaults to FULL_FUNCTION if not specified
Optional ReadonlyentraEntra ID OIDC configuration for enterprise authentication
Optional ReadonlyexistingExisting User Pool Client ID to use instead of creating new one
Optional ReadonlyexistingExisting User Pool Domain to use instead of creating new one
Optional ReadonlyexistingExisting User Pool ID to use instead of creating new one
Optional ReadonlyoOAuth callback URLs for authentication flow
Optional ReadonlyoOAuth logout URLs for authentication flow
Optional ReadonlywafWAF ARN to associatiate with cognito.
Authentication configuration for the GAIA v2 user pool and client. Selects the identity provider (Cognito-native, external OIDC such as Entra ID, or both) and controls OAuth callback/logout URLs, Cognito domain, attribute mapping, and optional WAF and managed-login branding.