Well Architected cognito user pool client

Default Configuration

Prevent user existence errors: Enabled Token REvocation: Enabled

Default Alarms

None

Note that the default alarm uses the WaAlarm construct, which sets up an alarm action to notify the SNS Topic AlarmEventsTopic by default.

Examples

Default Usage

new WaUserPoolClient(this, "LogicalId", {});

Custom Configuration

new WaUserPoolClient(this, "LogicalId", {
preventUserExistenceErrors: true
});

Compliance

It addresses the following compliance requirements

  1. User existence errors should not be propagated
    • Risk Level: Medium
    • Compliance: NIST4
    • Well Architected Pillar: Security

Hierarchy

  • UserPoolClient
    • WaUserPoolClient

Constructors

Constructors

Generated using TypeDoc