01
Email-first defaults
Required and auto-verified email reduces per-application setup.
Pattern 03
Cognito Auth
Email-first Cognito authentication with app client defaults and Lambda-ready outputs.
Status
Available module
Deployment scope
Single region with DR support
Recommended version
~> 1.0
What you get
02
Flexible security
Tune MFA, password policy, and token validity with variables.
03
Application-ready outputs
Consume pool and client details directly from your runtime.
Start here
Add the module to your configuration and customize only what you need.
main.tf
module "auth" {
source = "pomo-studio/cognito-auth/aws"
version = "~> 1.0"
name = "my-app-users"
client_name = "my-app"
mfa_configuration = "OPTIONAL"
}Key inputs
- name
- client_name
- mfa_configuration
- enable_hosted_ui
- oauth_callback_urls
Useful outputs
- user_pool_id
- client_id
- lambda_env_vars
- hosted_ui_signin_url
Built with
- Amazon Cognito
- JWT
- Lambda
- Terraform