Correct AdminDeleteUserCommand usage

0

It is unclear to me whether, when deleting a user from a user pool linked to an identity pool (which seems to be, e.g., an Amplify requirement), one should also delete the matching identity pool entry.

已提問 1 年前檢視次數 278 次
1 個回答
1

Hello,

Calling the "AdminDeleteUser" API operation[1], only deletes the user from the Cognito Userpool, but does not delete the Identity ID that was created for the user, when calling the "GetID"[2] API Operation. Furthermore, the same Identity ID would always be returned for the existing Userpool User, when calling the "GetID" API operation.

However, when deleting the user using the "AdminDeleteUser" API operation and the user sign-up again, using the same email address/username, the Identity Pool would then generate a new Identity ID for the user, when calling the "GetID" API operation. Considering that you can have an unlimited amount of Identity IDs within your Identity Pool, you can choose to delete the Identity ID that is linked with the deleted user, by using the "DeleteIdentities"[3] API operation and include the required Identity ID in the request.

[1] AdminDeleteUser - https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUser.html

[2] GetId - https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html

[3] DeleteIdentities - https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_DeleteIdentities.html

I sincerely hope the above helps address the query of concern.

AWS
支援工程師
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南