{ "AWSTemplateFormatVersion": "2010-09-09", "Description": "Root stack for the Amplify AWS CloudFormation provider", "Parameters": { "DeploymentBucketName": { "Description": "Name of the common deployment bucket provided by the parent stack", "Type": "String", "Default": "DeploymentBucket" }, "AuthRoleName": { "Type": "String", "Default": "AuthRoleName" }, "UnauthRoleName": { "Type": "String", "Default": "UnauthRoleName" } }, "Resources": { "DeploymentBucket": { "Type": "AWS::S3::Bucket", "DeletionPolicy": "Retain", "Properties": { "BucketName": { "Ref": "DeploymentBucketName" } } }, "AuthRole": { "Type": "AWS::IAM::Role", "Properties": { "RoleName": { "Ref": "AuthRoleName" }, "AssumeRolePolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Sid": "", "Effect": "Allow", "Principal": { "Federated": "cognito-identity.amazonaws.com" }, "Action": "sts:AssumeRoleWithWebIdentity", "Condition": { "ForAnyValue:StringLike": { "cognito-identity.amazonaws.com:amr": "authenticated" } } } ] } } }, "UnauthRole": { "Type": "AWS::IAM::Role", "Properties": { "RoleName": { "Ref": "UnauthRoleName" }, "AssumeRolePolicyDocument": { "Version": "2012-10-17", "Statement": [ { "Sid": "", "Effect": "Allow", "Principal": { "Federated": "cognito-identity.amazonaws.com" }, "Action": "sts:AssumeRoleWithWebIdentity", "Condition": { "ForAnyValue:StringLike": { "cognito-identity.amazonaws.com:amr": "unauthenticated" } } } ] } } }, "authcognito704b3e59": { "Type": "AWS::CloudFormation::Stack", "Properties": { "TemplateURL": "https://s3.amazonaws.com/my-aws-project-20190103122546-deployment/amplify-cfn-templates/auth/cognito704b3e59-cloudformation-template.yml", "Parameters": { "identityPoolName": "cognito704b3e59_identitypool_704b3e59", "allowUnauthenticatedIdentities": false, "thirdPartyAuth": false, "lambdaLogPolicy": "cognito704b3e59_lambda_log_policy", "openIdLambdaRoleName": "cognito704b3e59_openid_lambda_role", "openIdRolePolicy": "cognito704b3e59_openid_pass_role_policy", "openIdLambdaIAMPolicy": "cognito704b3e59_openid_lambda_iam_policy", "openIdLogPolicy": "cognito704b3e59_openid_lambda_log_policy", "userPoolName": "cognito704b3e59_userpool_704b3e59", "autoVerifiedAttributes": "email", "mfaConfiguration": "OFF", "mfaTypes": "SMS Text Message", "roleName": "cognito704b3e59_sns-role", "roleExternalId": "cognito704b3e59_role_external_id", "policyName": "cognito704b3e59-sns-policy", "smsAuthenticationMessage": "Your authentication code is {####}", "smsVerificationMessage": "Your verification code is {####}", "emailVerificationSubject": "Your verification code", "emailVerificationMessage": "Your verification code is {####}", "defaultPasswordPolicy": false, "passwordPolicyMinLength": 8, "passwordPolicyCharacters": "Requires Lowercase,Requires Uppercase,Requires Numbers,Requires Symbols", "requiredAttributes": "email", "userpoolClientName": "cognito704b3e59_app_client", "userpoolClientGenerateSecret": true, "userpoolClientRefreshTokenValidity": 30, "userpoolClientReadAttributes": "email", "mfaLambdaRole": "cognito704b3e59_totp_lambda_role", "mfaLambdaLogPolicy": "cognito704b3e59_totp_lambda_log_policy", "mfaPassRolePolicy": "cognito704b3e59_totp_pass_role_policy", "mfaLambdaIAMPolicy": "cognito704b3e59_totp_lambda_iam_policy", "userpoolClientLambdaRole": "cognito704b3e59_userpoolclient_lambda_role", "userpoolClientLogPolicy": "cognito704b3e59_userpoolclient_lambda_log_policy", "userpoolClientLambdaPolicy": "cognito704b3e59_userpoolclient_lambda_iam_policy", "userpoolClientSetAttributes": false, "useDefault": "default", "resourceName": "cognito704b3e59", "authSelections": "identityPoolAndUserPool", "authRoleName": { "Ref": "AuthRoleName" }, "unauthRoleName": { "Ref": "UnauthRoleName" }, "authRoleArn": { "Fn::GetAtt": [ "AuthRole", "Arn" ] }, "unauthRoleArn": { "Fn::GetAtt": [ "UnauthRole", "Arn" ] }, "env": "prod" } } } }, "Outputs": { "Region": { "Description": "CloudFormation provider root stack Region", "Value": { "Ref": "AWS::Region" }, "Export": { "Name": { "Fn::Sub": "${AWS::StackName}-Region" } } }, "StackName": { "Description": "CloudFormation provider root stack ID", "Value": { "Ref": "AWS::StackName" }, "Export": { "Name": { "Fn::Sub": "${AWS::StackName}-StackName" } } }, "StackId": { "Description": "CloudFormation provider root stack name", "Value": { "Ref": "AWS::StackId" }, "Export": { "Name": { "Fn::Sub": "${AWS::StackName}-StackId" } } }, "DeploymentBucketName": { "Description": "CloudFormation provider root stack deployment bucket name", "Value": { "Ref": "DeploymentBucketName" }, "Export": { "Name": { "Fn::Sub": "${AWS::StackName}-DeploymentBucketName" } } }, "AuthRoleArn": { "Value": { "Fn::GetAtt": [ "AuthRole", "Arn" ] } }, "UnauthRoleArn": { "Value": { "Fn::GetAtt": [ "UnauthRole", "Arn" ] } }, "AuthRoleName": { "Value": { "Ref": "AuthRole" } }, "UnauthRoleName": { "Value": { "Ref": "UnauthRole" } } } }