Cannot add Cognito authentification to Load Balancer (ELB) in eu-west-3

Question

I try to authenticate end-users of my application at ELB level by using Cognito provided feature.

I first deployed all my resources in eu-west-1 and works perfectly.
When trying to do the same in eu-west-1, CloudFormation sent me an error:
```
Resource handler returned message: "Invalid request provided: AWS::ElasticLoadBalancingV2::ListenerRule Validation exception" 
```

Also see a trace in Cloud Trail (partial copy)
```
"eventTime": "2022-04-11T13:47:08Z",
"eventSource": "elasticloadbalancing.amazonaws.com",
"eventName": "CreateRule",
"awsRegion": "eu-west-3",
"sourceIPAddress": "cloudformation.amazonaws.com",
"userAgent": "cloudformation.amazonaws.com",
"errorCode": "ValidationException",
"errorMessage": "Action type 'authenticate-cognito' must be one of 'redirect,fixed-response,forward,authenticate-oidc'"
```

I suspect that this feature is not yet available in eu-west-3, but can't find an official answer (which region supports this feature).

Thanks for your help

Giovanni Lauria · Answer

Cognito is available in Paris since 2020.
https://aws.amazon.com/about-aws/whats-new/2020/11/amazon-cognito-available-stockholm-paris/

I would check with support if that particular feature instead is indeed supported. Which seems not.

Cannot add Cognito authentification to Load Balancer (ELB) in eu-west-3

Add your answer

Relevant content