Cognito: advanced security features for userpool

[brainstorm]

This is a followup issue from #7245 (comment)

After creating a UserPool, the web console section that reads like the following:

"Do you want to enable advanced security features for this user pool?"

Does not seem to be found on CDK.

Use Case

I need this feature for security auditing purposes on a clinical genomics context.

Proposed Solution

Find out the equivalent Cloudformation section for this, implement it in CDK.

Other

• 👋 I may be able to implement this feature request
• ⚠️ This feature might incur a breaking change

---

This is a 🚀 Feature Request

[ann8ty]

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-userpooladdons.html

The underlying cloudformation supports this feature. It is AWS::Cognito::UserPool UserPoolAddOns

AdvancedSecurityMode
The advanced security mode.

Required: No

Type: String

Allowed values: AUDIT | ENFORCED | OFF

[ulaskeles]

You can do this in CDK. For example in TypeScript:

import cognito = require("@aws-cdk/aws-cognito");
...
const userPool = new cognito.UserPool(...);
const cfnUserPool = userPool.node.defaultChild as cognito.CfnUserPool;
cfnUserPool.userPoolAddOns = { advancedSecurityMode: "AUDIT" };

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.