Correct AdminDeleteUserCommand usage

0

It is unclear to me whether, when deleting a user from a user pool linked to an identity pool (which seems to be, e.g., an Amplify requirement), one should also delete the matching identity pool entry.

feita há um ano277 visualizações
1 Resposta
1

Hello,

Calling the "AdminDeleteUser" API operation[1], only deletes the user from the Cognito Userpool, but does not delete the Identity ID that was created for the user, when calling the "GetID"[2] API Operation. Furthermore, the same Identity ID would always be returned for the existing Userpool User, when calling the "GetID" API operation.

However, when deleting the user using the "AdminDeleteUser" API operation and the user sign-up again, using the same email address/username, the Identity Pool would then generate a new Identity ID for the user, when calling the "GetID" API operation. Considering that you can have an unlimited amount of Identity IDs within your Identity Pool, you can choose to delete the Identity ID that is linked with the deleted user, by using the "DeleteIdentities"[3] API operation and include the required Identity ID in the request.

[1] AdminDeleteUser - https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUser.html

[2] GetId - https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html

[3] DeleteIdentities - https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DeleteIdentities.html

I sincerely hope the above helps address the query of concern.

AWS
ENGENHEIRO DE SUPORTE
respondido há um ano

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas