Failed to deactivate deletion protection - UserPool cognito

1

I want to delete the user pool but receiving the following error message from AWS web console: Failed to deactivate deletion protection

Code: InvalidSmsRoleTrustRelationshipException

Message: Role does not have a trust relationship allowing Cognito to assume the role

How could I disable the protection and delete the user pool?

2回答
1

Go to the Messaging tab in the pool. In the SMS section click Edit. Under "IAM role" choose "Create a new IAM role" and then "Save changes". Wait until it's done and try again to deactivate deletion protection and delete the pool.

Rony
回答済み 1年前
  • This worked when removing the condition from the existing role's Trust Relationship didn't. This looks like the easiest way to solve the issue.

  • and you have this? "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole",

  • Your comment got cut off.

  • { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole", } ] }

0

this error message because the trust relationship for the SMS role in your AWS Cognito User Pool is not configured correctly.

To disable the deletion protection and delete the user pool

Update the trust relationship for the SMS role from the AWS console IAM > Roles > Trust relationships > Update the trust relationship policy document to allow Cognito to assume the role Disable deletion protection for the user pool Amazon Cognito > Manage User Pools > MFA and verifications > Which attributes do you want to verify? > Uncheck 'Phone number

Save > Policies Tab > Deletion protection > Enable deletion protection'

profile picture
エキスパート
回答済み 1年前
  • This could work, but can you please be more specific about what changes are needed to the Trust Relationship?

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ