nsc auth trust-aws-cognito-identity-pool establishes trust between your Namespace workspace and an AWS Cognito identity pool, so that identities issued by that pool can be exchanged for Namespace access. It is a narrower, Cognito-specific counterpart to nsc auth trust-relationships add — rather than specifying a generic OIDC issuer and subject-match pattern yourself, you point this command at the identity pool and it configures the trust relationship for you.
Once a pool is trusted, tokens obtained from it can be redeemed for a Namespace token using nsc auth exchange-aws-cognito-token.
Usage
Example
Options
—aws_region string
The AWS region to connect to. This should match the region the Cognito identity pool was created in.—identity_pool string
UUID of the identity pool to trust. This identifies the specific AWS Cognito identity pool whose identities will be accepted.—tenant_id string
What tenant to authenticate. Use this to target a specific tenant when your account has access to more than one.Related Topics
- nsc auth trust-relationships - Manage general-purpose OIDC trust relationships
- nsc auth trust-relationships add - Add a trust relationship with a custom issuer and subject match pattern