AWS Identity Pool Attributes为身份池属性,可用于控制访问授权。身份池是一组针对AWS服务或应用程序的身份验证和授权信息。以下是使用Cognito身份池管理AWS访问控制的代码示例:
// Create an Identity Pool
val cognitoclient = AmazonCognitoIdentityClientBuilder.standard()
.withRegion(Regions.US_WEST_2)
.build()
val createIdentityPoolRequest = CreateIdentityPoolRequest().apply {
identityPoolName = "MyPool"
}
val createIdentityPoolResult = cognitoclient.createIdentityPool(createIdentityPoolRequest)
// Set Identity Pool Attributes
val setCognitoIdentityProviderRequest = SetIdentityPoolRolesRequest().apply {
identityPoolId = createIdentityPoolResult.identityPoolId
roles = mapOf(
"authenticated" to "arn:aws:iam::11111111111:role/MyAuthorizedRole"
)
cognitoIdentityProviders = listOf(
CognitoIdentityProvider().apply {
providerName = "cognito-idp.us-west-2.amazonaws.com/us-west-2_123456789"
clientId = "abcdefghijklmno"
}
)
}
cognitoclient.setIdentityPoolRoles(setCognitoIdentityProviderRequest)
以上代码段首先创建了一个名为"MyPool"的身份池,然后设置了身份池的角色和Cognito身份提供者。在这种情况下,"MyAuthorizedRole"授予了验证过的用户授权。
上一篇:AWSIdentityCenter用户中使用awscli时如何检查“aws:MultiFactorAuthPresent”属性是否存在。
下一篇:AWSImageBuilder在通过HTTP代理cURLs3时出现SSM执行错误-是否有一种方式将HTTP_PROXY环境变量注入到镜像构建器中?