Cognito Identity
Prefix cognito-identity, 26 actions · Domain Security, Identity & Compliance
6 AWS managed policies. 0 have reviewed guidance; the rest have authoritative permission data pending editorial review.
User access (2)
Operator and limited (4)
- AmazonCognitoDeveloperAuthenticatedIdentitiesOperator
- AmazonCognitoReadOnlyOperator
- AmazonESCognitoAccessOperator
- AmazonOpenSearchServiceCognitoAccessOperator
Also grants Cognito Identity actions (23)
- AdministratorAccess
- AdministratorAccess-Amplify
- AIDevOpsAgentAccessPolicy
- AIOpsAssistantPolicy
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSIoTDeviceDefenderAudit
- AWSLambdaFullAccess
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SecurityAudit
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
createidentitypool deleteidentities deleteidentitypool describeidentity describeidentitypool getcredentialsforidentity getid getidentitypoolanalytics getidentitypooldailyanalytics getidentitypoolroles getidentityproviderdailyanalytics getopenidtoken getopenidtokenfordeveloperidentity getprincipaltagattributemap listidentities listidentitypools listtagsforresource lookupdeveloperidentity mergedeveloperidentities setidentitypoolroles setprincipaltagattributemap tagresource unlinkdeveloperidentity unlinkidentity untagresource updateidentitypool
Actions (26)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| cognito-identity:CreateIdentityPool | Write | 5 | 2 |
| cognito-identity:DeleteIdentities | Write | 4 | 1 |
| cognito-identity:DeleteIdentityPool | Write | 5 | 1 |
| cognito-identity:DescribeIdentity | Read | 9 | 2 |
| cognito-identity:DescribeIdentityPool | Read | 19 | 5 |
| cognito-identity:GetCredentialsForIdentity | Read | 7 | 1 |
| cognito-identity:GetId | Write | 6 | 1 |
| cognito-identity:GetIdentityPoolAnalytics | Read | 8 | 1 |
| cognito-identity:GetIdentityPoolDailyAnalytics | Read | 8 | 1 |
| cognito-identity:GetIdentityPoolRoles | Read | 19 | 5 |
| cognito-identity:GetIdentityProviderDailyAnalytics | Read | 8 | 1 |
| cognito-identity:GetOpenIdToken | Read | 7 | 1 |
| cognito-identity:GetOpenIdTokenForDeveloperIdentity | Read | 8 | 1 |
| cognito-identity:GetPrincipalTagAttributeMap | Read | 11 | 3 |
| cognito-identity:ListIdentities | List | 11 | 1 |
| cognito-identity:ListIdentityPools | List | 20 | 4 |
| cognito-identity:ListTagsForResource | Read | 13 | 2 |
| cognito-identity:LookupDeveloperIdentity | Read | 8 | 1 |
| cognito-identity:MergeDeveloperIdentities | Write | 5 | 1 |
| cognito-identity:SetIdentityPoolRoles | Write | 7 | 2 |
| cognito-identity:SetPrincipalTagAttributeMap | Write | 4 | 1 |
| cognito-identity:TagResource | Tagging | 5 | 2 |
| cognito-identity:UnlinkDeveloperIdentity | Write | 5 | 1 |
| cognito-identity:UnlinkIdentity | Write | 4 | 1 |
| cognito-identity:UntagResource | Tagging | 5 | 1 |
| cognito-identity:UpdateIdentityPool | Write | 5 | 3 |