Is there a way to get IAM Credentials from Cognito Username Password from CLI

Question

I wish to get IAM Credentials from an Identity Pool using Cognito user/pass authentication from the command line:

The problem is, I can't find anything in the AWS-CLI that does this in one-step or multiple steps of bash code. Do we have CLI tools for it?

Can we write a quick script to get IAM Credentials to plugin for testing an API.

Answer 1

Try doing it the other way round. IAM is to set the users to use the AWS services. Cognito is meant for user authentication ie for apps, API’s.

Consider this, if I have a pool, SampleTest-pool, First I will create an IAM user and give it an access to the SampleTest-pool; then I will use the access and secret keys, of the IAM user, within the application with the Cognito pool properties (id, region) to contact the user pool for authentication purposes.

Now if you have 100 users to your one application, then you have one IAM user and 100 Cognito users.

Answer 2

Cognito is for user authentication to your apps, apis.

For example, if I have a pool, test-pool, I create an IAM user and give it an access to the test-pool; then I will use the access and secret keys, of the IAM user, within the application with the Cognito pool properties (id, region) to contact the user pool for authentication purposes.