@aws-sdk/credential-provider-cognito-identity

Retrieve AWS Credentials

This feature allows developers to retrieve AWS credentials for authenticated or unauthenticated users from an Amazon Cognito Identity Pool. The credentials can then be used to access other AWS services.

import { fromCognitoIdentityPool } from '@aws-sdk/credential-provider-cognito-identity';
const credentials = fromCognitoIdentityPool({
  clientConfig: { region: 'us-west-2' },
  identityPoolId: 'us-west-2:12345678-1234-1234-1234-123456789012'
});

Customize Credential Behavior

Developers can specify a custom role ARN to define which IAM role the credentials should assume when accessing AWS services. This is useful for fine-grained control over permissions.

import { fromCognitoIdentityPool } from '@aws-sdk/credential-provider-cognito-identity';
const credentials = fromCognitoIdentityPool({
  clientConfig: { region: 'us-west-2' },
  identityPoolId: 'us-west-2:12345678-1234-1234-1234-123456789012',
  customRoleArn: 'arn:aws:iam::123456789012:role/MyCustomRole'
});