Migrating workloads from one AWS account to another

See whether this can help:

1. Create a New User Pool in the Destination Account • Enable User Migration Lambda Trigger. • Ensure the new pool supports the same attributes and authentication flow (e.g., USER_PASSWORD_AUTH).
2. Set Up a Lambda Function

o Authenticate the user against the old user pool. o Return user attributes to the new pool. o Create the user in the new pool without requiring password reset.

3. Configure IAM Roles for Cross-Account Access • In the old account, create a role that allows: o cognito-idp:AdminInitiateAuth o cognito-idp:AdminGetUser o cognito-idp:ListUsers • Trust the Lambda execution role from the new account.
4. Attach the Lambda to the New User Pool • Go to User Pool > Triggers > Migration. • Select your Lambda function.