Cloudformation-coverage-roadmap: AWS::Cognito::UserPoolClient-Devices

[brainstorm]

1. Title

AWS::Cognito::UserPoolClient-Devices-Always/User Opt-In/No

2. Scope of request

Coverage of CRUD actions on the Cognito User Pool Client's "Remember Devices" attribute, which is not yet available via CloudFormation

5. Helpful Links to speed up research and evaluation

This is a followup on AWS CDK issue https://github.com/aws/aws-cdk/issues/7245 for Web Console's UserPool->General Settings->Devices, a.k.a:

"Do you want to remember your user's devices?"

[cmckni3]

Isn't this already available under DeviceConfiguration?

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-deviceconfiguration.html#cfn-cognito-userpool-deviceconfiguration-challengerequiredonnewdevice

Always, MFA Yes

DeviceConfiguration:
  ChallengeRequiredOnNewDevice: true

Always, MFA No

DeviceConfiguration:
  ChallengeRequiredOnNewDevice: false
  DeviceOnlyRememberedOnUserPrompt: false

User Opt In, MFA No

DeviceConfiguration:
  DeviceOnlyRememberedOnUserPrompt: true

User Opt In, MFA Yes

DeviceConfiguration:
  DeviceOnlyRememberedOnUserPrompt: true
  ChallengeRequiredOnNewDevice: true

No

Omit DeviceConfiguration

This domain modeling drives me nuts (see also AccountRecoverySetting). Way more difficult and confusing than it should be in my opinion. Maybe Cognito team is planning for features that may/may not happen. No idea.

[bensie]

@cmckni3 Thanks for supplying all the permutations for this! Such a frustrating API.

[ayozemr]

Thanks for the help. I was looking for the "No" option

[codelogn]

Saved my cloudformation. Thank you.

[wascou]

Thanks for comfirming the solution I was about to implement..
A complementary blog post on how to use that , if required : https://aws.amazon.com/fr/blogs/mobile/tracking-and-remembering-devices-using-amazon-cognito-your-user-pools/