By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Why is "cognito-idp:UpdateGroup" not included in the AdministratorAccess-Amplify Policy

0

I am curious as to why the "cognito-idp:UpdateGroup" is not included in the AdministratorAccess-Amplify policy. Upon inspection of the afore mentioned policy I see that "cognito-idp:CreateGroup" and "cognito-idp:DeleteGroup" are included. I am mostly trying to ascertain if there is a security or data risk associated with updating a cognito group via the Amplify CLI that is not apparent the average user. Any information is greatly appreciated.

Topics
Front-End Web & MobileSecurity, Identity, & Compliance
Tags
AWS AmplifyAmazon CognitoIAM Policies
Language
English
bobthemagicman
asked a year ago62 views
No Answers

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content