Failed to deactivate deletion protection - UserPool cognito

1

I want to delete the user pool but receiving the following error message from AWS web console: Failed to deactivate deletion protection

Code: InvalidSmsRoleTrustRelationshipException

Message: Role does not have a trust relationship allowing Cognito to assume the role

How could I disable the protection and delete the user pool?

2개 답변
1

Go to the Messaging tab in the pool. In the SMS section click Edit. Under "IAM role" choose "Create a new IAM role" and then "Save changes". Wait until it's done and try again to deactivate deletion protection and delete the pool.

Rony
답변함 일 년 전
  • This worked when removing the condition from the existing role's Trust Relationship didn't. This looks like the easiest way to solve the issue.

  • and you have this? "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole",

  • Your comment got cut off.

  • { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole", } ] }

0

this error message because the trust relationship for the SMS role in your AWS Cognito User Pool is not configured correctly.

To disable the deletion protection and delete the user pool

Update the trust relationship for the SMS role from the AWS console IAM > Roles > Trust relationships > Update the trust relationship policy document to allow Cognito to assume the role Disable deletion protection for the user pool Amazon Cognito > Manage User Pools > MFA and verifications > Which attributes do you want to verify? > Uncheck 'Phone number

Save > Policies Tab > Deletion protection > Enable deletion protection'

profile picture
전문가
답변함 일 년 전
  • This could work, but can you please be more specific about what changes are needed to the Trust Relationship?

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠