aws-cognito-app-client-secret-config
A Cognito user-pool app client configured to generate a secret exposes that client secret through DescribeUserPoolClient.
Where it sits
| location | DescribeUserPoolClient.UserPoolClient.ClientSecret |
|---|---|
| location kind | secret_value |
| data kinds | secret_key oauth_token credential |
| emits edge | ExposesCredential |
| service | Cognito (aws:cognito) |
Collection recipe
| access mode | read_api |
|---|---|
| operation | DescribeUserPoolClient |
| response path | UserPoolClient.ClientSecret |
| encoding | string |
| params | {"ClientId": "\u003cclient-id\u003e", "UserPoolId": "\u003cpool-id\u003e"} |
Required permissions
cognito-idp:DescribeUserPoolClient