Using a different AWS account for Cognito to send SMS messages?

Question

I have Pinpoint SMS configured so that Cognito can send SMS MFA messages with a 10DLC in my production AWS account.  Can I use that same account to send SMS messages from Cognito in my development AWS account or do I need to get a new 10DLC number in my development account?   I see articles that state I can do this, but there's no way to tell Cognito to use a role from another account to send SMS messages.

Answer

Hello,

Please note that it is currently not possible to use a cross-account roles in Cognito. Therefore the role has to be present in the account where your Cognito User Pool Exists.

You can setup a role in the account where your Cognito User Pool exists which has access to use the cross-account 10DLC and use that role in the User Pool settings. Below is a documentation that details the process:

[+] Setting up 10DLC cross-account access - https://docs.aws.amazon.com/pinpoint/latest/userguide/settings-sms-10dlc-configure-cross-account-access.html

If you have further queries, you can always raise a case with our dedicated Cognito and Pinpoint team to get a tailored solution

Using a different AWS account for Cognito to send SMS messages?

Relevant content