Failed to deactivate deletion protection - UserPool cognito

1

I want to delete the user pool but receiving the following error message from AWS web console: Failed to deactivate deletion protection

Code: InvalidSmsRoleTrustRelationshipException

Message: Role does not have a trust relationship allowing Cognito to assume the role

How could I disable the protection and delete the user pool?

已提问 1 年前1039 查看次数
2 回答
1

Go to the Messaging tab in the pool. In the SMS section click Edit. Under "IAM role" choose "Create a new IAM role" and then "Save changes". Wait until it's done and try again to deactivate deletion protection and delete the pool.

Rony
已回答 1 年前
  • This worked when removing the condition from the existing role's Trust Relationship didn't. This looks like the easiest way to solve the issue.

  • and you have this? "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole",

  • Your comment got cut off.

  • { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "cognito-idp.amazonaws.com" }, "Action": "sts:AssumeRole", } ] }

0

this error message because the trust relationship for the SMS role in your AWS Cognito User Pool is not configured correctly.

To disable the deletion protection and delete the user pool

Update the trust relationship for the SMS role from the AWS console IAM > Roles > Trust relationships > Update the trust relationship policy document to allow Cognito to assume the role Disable deletion protection for the user pool Amazon Cognito > Manage User Pools > MFA and verifications > Which attributes do you want to verify? > Uncheck 'Phone number

Save > Policies Tab > Deletion protection > Enable deletion protection'

profile picture
专家
已回答 1 年前
  • This could work, but can you please be more specific about what changes are needed to the Trust Relationship?

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则