aws-cognito-app-client-secret-config

A Cognito user-pool app client configured to generate a secret exposes that client secret through DescribeUserPoolClient.

awscritical service: aws:cognito emits ExposesCredential

Where it sits

locationDescribeUserPoolClient.UserPoolClient.ClientSecret
location kindsecret_value
data kindssecret_key oauth_token credential
emits edgeExposesCredential
serviceCognito (aws:cognito)

Collection recipe

access moderead_api
operationDescribeUserPoolClient
response pathUserPoolClient.ClientSecret
encodingstring
params{"ClientId": "\u003cclient-id\u003e", "UserPoolId": "\u003cpool-id\u003e"}

Required permissions

cognito-idp:DescribeUserPoolClient

References

move · open · esc close