Control: AWS > Cognito > Identity Pool > Guest Access

Enforce guest access requirements for AWS Cognito identity pools based on the AWS > Cognito > Identity Pool > Guest Access policy.

The control evaluates the guest access setting and ensures it matches the policy requirements. When the policy is set to enforce, the control will automatically update the guest access setting to match the policy.

Resource Types

This control targets the following resource types:

AWS > Cognito > Identity Pool

Policies

The following policies can be used to configure this control:

AWS > Cognito > Identity Pool > Guest Access

Permissions

Cloud permissions used by this control and its actions:

cognito-identity:UpdateIdentityPool

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-cognito#/control/types/identityPoolGuestAccess

Category URI

tmod:@turbot/turbot#/control/categories/security

GraphQL

query controlType(id: "tmod:@turbot/aws-cognito#/control/types/identityPoolGuestAccess") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-cognito#/control/types/identityPoolGuestAccess'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-cognito#/control/types/identityPoolGuestAccess"