Cognito

# CognitoIdentityPool — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitoidentitypool
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoIdentityPool
metadata:
  name: example-cognitoidentitypool
  namespace: default
spec:
  allowClassicFlow: false
  allowUnauthenticatedIdentities: false
  cognitoIdentityProviders:
  - clientId: example-id
    providerName: example-cognitoidentitypool
    serverSideTokenCheck: false
  cognitoStreams:
    roleArn: arn:aws:iam::123456789012:role/example-role
    streamName: example-cognitoidentitypool
    streamingStatus: example
  developerProviderName: example-cognitoidentitypool
  identityPoolName: example-cognitoidentitypool
  identityPoolTags:
  - key: example
    value: example
  openIdConnectProviderARNs:
  - example
  providerRef:
    name: example-cognitoidentitypool
    region: us-east-1
  pushSync:
    applicationArns:
    - example
    roleArn: arn:aws:iam::123456789012:role/example-role
  samlProviderARNs:
  - example

# CognitoIdentityPoolPrincipalTag — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitoidentitypoolprincipaltag
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoIdentityPoolPrincipalTag
metadata:
  name: example-cognitoidentitypoolprincipaltag
  namespace: default
spec:
  identityPoolId: example-id
  identityProviderName: example-cognitoidentitypoolprincipaltag
  providerRef:
    name: example-cognitoidentitypoolprincipaltag
    region: us-east-1
  useDefaults: false

# CognitoIdentityPoolRoleAttachment — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitoidentitypoolroleattachment
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoIdentityPoolRoleAttachment
metadata:
  name: example-cognitoidentitypoolroleattachment
  namespace: default
spec:
  identityPoolId: example-id
  providerRef:
    name: example-cognitoidentitypoolroleattachment
    region: us-east-1

# CognitoLogDeliveryConfiguration — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitologdeliveryconfiguration
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoLogDeliveryConfiguration
metadata:
  name: example-cognitologdeliveryconfiguration
  namespace: default
spec:
  logConfigurations:
  - cloudWatchLogsConfiguration:
      logGroupArn: arn:aws:iam::123456789012:role/example-role
    eventSource: example
    firehoseConfiguration:
      streamArn: arn:aws:iam::123456789012:role/example-role
    logLevel: example
    s3Configuration:
      bucketArn: arn:aws:iam::123456789012:role/example-role
  providerRef:
    name: example-cognitologdeliveryconfiguration
    region: us-east-1
  userPoolId: example-id

# CognitoManagedLoginBranding — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitomanagedloginbranding
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoManagedLoginBranding
metadata:
  name: example-cognitomanagedloginbranding
  namespace: default
spec:
  assets:
  - bytes: example
    category: FAVICON_ICO
    colorMode: LIGHT
    extension: ICO
  providerRef:
    name: example-cognitomanagedloginbranding
    region: us-east-1
  returnMergedResources: false
  useCognitoProvidedValues: false
  userPoolId: example-id

# CognitoTerms — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitoterms
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoTerms
metadata:
  name: example-cognitoterms
  namespace: default
spec:
  enforcement: NONE
  links:
    key: value
  providerRef:
    name: example-cognitoterms
    region: us-east-1
  termsName: example-cognitoterms
  termsSource: LINK
  userPoolId: example-id

# CognitoUserPoolDomain — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpooldomain
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolDomain
metadata:
  name: example-cognitouserpooldomain
  namespace: default
spec:
  customDomainConfig:
    certificateArn: arn:aws:iam::123456789012:role/example-role
    securityPolicy: example
  domain: example
  managedLoginVersion: 1
  providerRef:
    name: example-cognitouserpooldomain
    region: us-east-1
  routing:
    failover:
      primaryRoute53HealthCheckId: example-id
      secondaryRegion: example
  userPoolId: example-id

# CognitoUserPoolGroup — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolgroup
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolGroup
metadata:
  name: example-cognitouserpoolgroup
  namespace: default
spec:
  description: Managed by konfig-konector
  groupName: example-cognitouserpoolgroup
  precedence: 1
  providerRef:
    name: example-cognitouserpoolgroup
    region: us-east-1
  roleArn: arn:aws:iam::123456789012:role/example-role
  userPoolId: example-id

# CognitoUserPoolIdentityProvider — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolidentityprovider
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolIdentityProvider
metadata:
  name: example-cognitouserpoolidentityprovider
  namespace: default
spec:
  attributeMapping:
    key: value
  idpIdentifiers:
  - example
  providerDetails:
    key: value
  providerName: example-cognitouserpoolidentityprovider
  providerRef:
    name: example-cognitouserpoolidentityprovider
    region: us-east-1
  providerType: example
  userPoolId: example-id

# CognitoUserPoolRegionalConfigurationAttachment — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolregionalconfigurationattachment
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolRegionalConfigurationAttachment
metadata:
  name: example-cognitouserpoolregionalconfigurationattachment
  namespace: default
spec:
  emailConfiguration:
    configurationSet: example
    emailSendingAccount: ops@example.com
    from: example
    replyToEmailAddress: ops@example.com
    sourceArn: arn:aws:iam::123456789012:role/example-role
  lambdaConfig:
    createAuthChallenge: example
    customEmailSender:
      lambdaArn: arn:aws:iam::123456789012:role/example-role
      lambdaVersion: '1.0'
    customMessage: example
    customSMSSender:
      lambdaArn: arn:aws:iam::123456789012:role/example-role
      lambdaVersion: '1.0'
    defineAuthChallenge: example
    inboundFederation:
      lambdaArn: arn:aws:iam::123456789012:role/example-role
      lambdaVersion: '1.0'
    kmsKeyID: arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab
    postAuthentication: example
    postConfirmation: example
    preAuthentication: example
    preSignUp: example
    preTokenGeneration: example
    preTokenGenerationConfig:
      lambdaArn: arn:aws:iam::123456789012:role/example-role
      lambdaVersion: '1.0'
    userMigration: example
    verifyAuthChallengeResponse: example
  providerRef:
    name: example-cognitouserpoolregionalconfigurationattachment
    region: us-east-1
  smsConfiguration:
    eumsSms:
      callerArn: arn:aws:iam::123456789012:role/example-role
      configurationSetName: example-cognitouserpoolregionalconfigurationattachment
      originationIdentity: example
      region: us-east-1
    snsCallerArn: arn:aws:iam::123456789012:role/example-role
    snsRegion: example
  status: example
  userPoolId: example-id
  userPoolTags:
    environment: dev
    team: platform

# CognitoUserPoolReplica — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolreplica
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolReplica
metadata:
  name: example-cognitouserpoolreplica
  namespace: default
spec:
  providerRef:
    name: example-cognitouserpoolreplica
    region: us-east-1
  regionName: example-cognitouserpoolreplica
  userPoolId: example-id
  userPoolTagsAtCreate:
    environment: dev
    team: platform

# CognitoUserPoolResourceServer — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolresourceserver
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolResourceServer
metadata:
  name: example-cognitouserpoolresourceserver
  namespace: default
spec:
  identifier: example
  name: example-cognitouserpoolresourceserver
  providerRef:
    name: example-cognitouserpoolresourceserver
    region: us-east-1
  scopes:
  - scopeDescription: Managed by konfig-konector
    scopeName: example-cognitouserpoolresourceserver
  userPoolId: example-id

# CognitoUserPoolRiskConfigurationAttachment — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolriskconfigurationattachment
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolRiskConfigurationAttachment
metadata:
  name: example-cognitouserpoolriskconfigurationattachment
  namespace: default
spec:
  accountTakeoverRiskConfiguration:
    actions:
      highAction:
        eventAction: example
        notify: false
      lowAction:
        eventAction: example
        notify: false
      mediumAction:
        eventAction: example
        notify: false
    notifyConfiguration:
      blockEmail:
        htmlBody: example
        subject: example
        textBody: example
      from: example
      mfaEmail:
        htmlBody: example
        subject: example
        textBody: example
      noActionEmail:
        htmlBody: example
        subject: example
        textBody: example
      replyTo: example
      sourceArn: arn:aws:iam::123456789012:role/example-role
  clientId: example-id
  compromisedCredentialsRiskConfiguration:
    actions:
      eventAction: example
    eventFilter:
    - example
  providerRef:
    name: example-cognitouserpoolriskconfigurationattachment
    region: us-east-1
  riskExceptionConfiguration:
    blockedIPRangeList:
    - example
    skippedIPRangeList:
    - example
  userPoolId: example-id

# CognitoUserPoolUICustomizationAttachment — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpooluicustomizationattachment
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolUICustomizationAttachment
metadata:
  name: example-cognitouserpooluicustomizationattachment
  namespace: default
spec:
  clientId: example-id
  css: example
  providerRef:
    name: example-cognitouserpooluicustomizationattachment
    region: us-east-1
  userPoolId: example-id

# CognitoUserPoolUser — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpooluser
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolUser
metadata:
  name: example-cognitouserpooluser
  namespace: default
spec:
  clientMetadata:
    key: value
  desiredDeliveryMediums:
  - example
  forceAliasCreation: false
  messageAction: example
  providerRef:
    name: example-cognitouserpooluser
    region: us-east-1
  userAttributes:
  - name: example-cognitouserpooluser
    value: example
  userPoolId: example-id
  username: example-cognitouserpooluser
  validationData:
  - name: example-cognitouserpooluser
    value: example

# CognitoUserPoolUserToGroupAttachment — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#cognitouserpoolusertogroupattachment
apiVersion: aws.konfig.io/v1alpha1
kind: CognitoUserPoolUserToGroupAttachment
metadata:
  name: example-cognitouserpoolusertogroupattachment
  namespace: default
spec:
  groupName: example-cognitouserpoolusertogroupattachment
  providerRef:
    name: example-cognitouserpoolusertogroupattachment
    region: us-east-1
  userPoolId: example-id
  username: example-cognitouserpoolusertogroupattachment

# IdentityProvider — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#identityprovider
apiVersion: aws.konfig.io/v1alpha1
kind: IdentityProvider
metadata:
  name: example-identityprovider
  namespace: default
spec:
  attributeMapping:
    key: value
  idpIdentifiers:
  - example
  providerDetails:
    key: value
  providerName: example-identityprovider
  providerRef:
    name: example-identityprovider
    region: us-east-1
  providerType: SAML
  userPoolRef:
    name: example-identityprovider

# UserPool — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#userpool
apiVersion: aws.konfig.io/v1alpha1
kind: UserPool
metadata:
  name: example-userpool
  namespace: default
spec:
  autoVerifiedAttributes:
  - example
  mfaConfiguration: 'OFF'
  passwordPolicy:
    minimumLength: 6
    requireLowercase: false
    requireNumbers: false
    requireSymbols: false
    requireUppercase: false
  poolName: example-userpool
  providerRef:
    name: example-userpool
    region: us-east-1
  tags:
    environment: dev
    team: platform

# UserPoolClient — Cognito
# Full-options example generated from the CRD schema. Optional fields are
# included with sample values; delete what you don't need. Field reference:
# https://konfig-konector.io/docs/cognito.html#userpoolclient
apiVersion: aws.konfig.io/v1alpha1
kind: UserPoolClient
metadata:
  name: example-userpoolclient
  namespace: default
spec:
  accessTokenValidity: 1
  allowedOAuthFlows:
  - example
  allowedOAuthScopes:
  - example
  callbackUrls:
  - example
  clientName: example-userpoolclient
  explicitAuthFlows:
  - example
  generateSecret: false
  idTokenValidity: 1
  logoutUrls:
  - example
  providerRef:
    name: example-userpoolclient
    region: us-east-1
  refreshTokenValidity: 1
  supportedIdentityProviders:
  - example
  userPoolRef:
    name: example-userpoolclient