Terraform Configuration for AWS Cognito User Pool and Access Controls

Overview

This Terraform configuration file sets up an AWS environment including a Cognito User Pool, client, and specified Cognito user groups ('AdminUser' & 'StandardUser'). It also defines and assigns permissions using AWS IAM Permissions and restricts access to specified AWS API Gateway methods based on Cognito user groups.

Key Deliverables

1. AWS Cognito User Pool Setup: Implemented a Cognito User Pool to manage user authentication for the AWS environment.
2. Cognito User Groups Configuration: Configured two Cognito user groups, 'AdminUser' and 'StandardUser', to categorize users based on their access levels.
3. IAM Permissions Assignment: Defined and assigned appropriate IAM permissions to the Cognito user groups, ensuring granular access control to AWS resources.
4. API Gateway Access Controls: Configured API Gateway methods to restrict access based on the Cognito user groups, allowing only authorized users to access specific endpoints.
5. Terraform Configuration File: Developed a Terraform configuration file to automate the provisioning and management of AWS resources, ensuring consistency and reproducibility.

Implementation Details

1. Terraform Configuration: Leveraged Terraform to define the AWS infrastructure components, enabling infrastructure as code practices and version-controlled deployments.
2. AWS Resources: Utilized AWS services including Cognito User Pool, IAM, and API Gateway to implement user authentication and access controls.
3. Cognito User Groups: Configured 'AdminUser' and 'StandardUser' groups within the Cognito User Pool to categorize users based on their roles and access requirements.
4. IAM Permissions: Defined IAM policies to grant specific permissions to each Cognito user group, ensuring fine-grained access control to AWS resources.
5. API Gateway: Integrated API Gateway with Cognito User Pool to enforce access controls on API endpoints, restricting access based on user group membership.