logo

nsc auth trust-aws-cognito-identity-pool

Trust an AWS Cognito identity pool.

nsc auth trust-aws-cognito-identity-pool establishes trust between your Namespace workspace and an AWS Cognito identity pool, so that identities issued by that pool can be exchanged for Namespace access. It is a narrower, Cognito-specific counterpart to nsc auth trust-relationships add — rather than specifying a generic OIDC issuer and subject-match pattern yourself, you point this command at the identity pool and it configures the trust relationship for you.

Once a pool is trusted, tokens obtained from it can be redeemed for a Namespace token using nsc auth exchange-aws-cognito-token.

Usage

nsc auth trust-aws-cognito-identity-pool [--aws_region string] [--identity_pool string] [--tenant_id string]

Example

$ nsc auth trust-aws-cognito-identity-pool \
  --identity_pool "us-east-1:11111111-2222-3333-4444-555555555555" \
  --aws_region us-east-1

Options

--aws_region string

The AWS region to connect to. This should match the region the Cognito identity pool was created in.

--identity_pool string

UUID of the identity pool to trust. This identifies the specific AWS Cognito identity pool whose identities will be accepted.

--tenant_id string

What tenant to authenticate. Use this to target a specific tenant when your account has access to more than one.