AWS Cognito and empty device list

Hello,

As far I see my account should have permission to list devices under defined user pool. I have permissions for all cognito-idp , as follows.

"Statement": [ { "Effect": "Allow", "Action": [ .... "cognito-idp:*",

Is it possible that my issue is related to the following topic, where devices list supported only under SDK ? https://repost.aws/questions/QUBLMX7pNpR2ayKpP1VRCTLQ/remember-device-to-suppress-mfa-challenge-using-cognito-hosted-ui

AWS is pretty bad at giving permission errorsand sometimes doesn't even tell you you're missing them. I don't know if thats the actual issue in question, but it's usually the first place I check when troubleshooting things like this.

I would check to see if you have cognito-idp:ListDevices there may be other permissions that are needed, that may require some research on your end, such as cognito-idp:AdminListDevices.

Yes I do have user's devices set Always remember, but device list is not updated either after successful TOTP device registration or after TOTP successfull authentication. I just wonder at this point if this feature is actually limited only to track devices from the MFA using SMS option ? Has anyone got an example of the User pool setup where devices list is working and device key is saved under devices .