Table Of Contents

Feedback

User Guide

First time using the AWS CLI? See the User Guide for help getting started.

[ aws . cognito-idp ]

create-user-pool-client

Description

Creates the user pool client.

See also: AWS API Documentation

See 'aws help' for descriptions of global parameters.

Synopsis

  create-user-pool-client
--user-pool-id <value>
--client-name <value>
[--generate-secret | --no-generate-secret]
[--refresh-token-validity <value>]
[--read-attributes <value>]
[--write-attributes <value>]
[--explicit-auth-flows <value>]
[--supported-identity-providers <value>]
[--callback-urls <value>]
[--logout-urls <value>]
[--default-redirect-uri <value>]
[--allowed-o-auth-flows <value>]
[--allowed-o-auth-scopes <value>]
[--allowed-o-auth-flows-user-pool-client | --no-allowed-o-auth-flows-user-pool-client]
[--analytics-configuration <value>]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]

Options

--user-pool-id (string)

The user pool ID for the user pool where you want to create a user pool client.

--client-name (string)

The client name for the user pool client you would like to create.

--generate-secret | --no-generate-secret (boolean)

Boolean to specify whether you want to generate a secret for the user pool client being created.

--refresh-token-validity (integer)

The time limit, in days, after which the refresh token is no longer valid and cannot be used.

--read-attributes (list)

The read attributes.

Syntax:

"string" "string" ...

--write-attributes (list)

The write attributes.

Syntax:

"string" "string" ...

--explicit-auth-flows (list)

The explicit authentication flows.

Syntax:

"string" "string" ...

Where valid values are:
  ADMIN_NO_SRP_AUTH
  CUSTOM_AUTH_FLOW_ONLY
  USER_PASSWORD_AUTH

--supported-identity-providers (list)

A list of provider names for the identity providers that are supported on this client.

Syntax:

"string" "string" ...

--callback-urls (list)

A list of allowed callback URLs for the identity providers.

Syntax:

"string" "string" ...

--logout-urls (list)

A list of allowed logout URLs for the identity providers.

Syntax:

"string" "string" ...

--default-redirect-uri (string)

The default redirect URI. Must be in the CallbackURLs list.

--allowed-o-auth-flows (list)

Set to code to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint.

Set to token to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly.

Syntax:

"string" "string" ...

Where valid values are:
  code
  implicit
  client_credentials

--allowed-o-auth-scopes (list)

A list of allowed OAuth scopes. Currently supported values are "phone" , "email" , "openid" , and "Cognito" .

Syntax:

"string" "string" ...

--allowed-o-auth-flows-user-pool-client | --no-allowed-o-auth-flows-user-pool-client (boolean)

Set to True if the client is allowed to follow the OAuth protocol when interacting with Cognito user pools.

--analytics-configuration (structure)

The Amazon Pinpoint analytics configuration for collecting metrics for this user pool.

Shorthand Syntax:

ApplicationId=string,RoleArn=string,ExternalId=string,UserDataShared=boolean

JSON Syntax:

{
  "ApplicationId": "string",
  "RoleArn": "string",
  "ExternalId": "string",
  "UserDataShared": true|false
}

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

See 'aws help' for descriptions of global parameters.

Output

UserPoolClient -> (structure)

The user pool client that was just created.

UserPoolId -> (string)

The user pool ID for the user pool client.

ClientName -> (string)

The client name from the user pool request of the client type.

ClientId -> (string)

The ID of the client associated with the user pool.

ClientSecret -> (string)

The client secret from the user pool request of the client type.

LastModifiedDate -> (timestamp)

The date the user pool client was last modified.

CreationDate -> (timestamp)

The date the user pool client was created.

RefreshTokenValidity -> (integer)

The time limit, in days, after which the refresh token is no longer valid and cannot be used.

ReadAttributes -> (list)

The Read-only attributes.

(string)

WriteAttributes -> (list)

The writeable attributes.

(string)

ExplicitAuthFlows -> (list)

The explicit authentication flows.

(string)

SupportedIdentityProviders -> (list)

A list of provider names for the identity providers that are supported on this client.

(string)

CallbackURLs -> (list)

A list of allowed callback URLs for the identity providers.

(string)

LogoutURLs -> (list)

A list of allowed logout URLs for the identity providers.

(string)

DefaultRedirectURI -> (string)

The default redirect URI. Must be in the CallbackURLs list.

AllowedOAuthFlows -> (list)

Set to code to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint.

Set to token to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly.

(string)

AllowedOAuthScopes -> (list)

A list of allowed OAuth scopes. Currently supported values are "phone" , "email" , "openid" , and "Cognito" .

(string)

AllowedOAuthFlowsUserPoolClient -> (boolean)

Set to TRUE if the client is allowed to follow the OAuth protocol when interacting with Cognito user pools.

AnalyticsConfiguration -> (structure)

The Amazon Pinpoint analytics configuration for the user pool client.

ApplicationId -> (string)

The application ID for an Amazon Pinpoint application.

RoleArn -> (string)

The ARN of an IAM role that authorizes Amazon Cognito to publish events to Amazon Pinpoint analytics.

ExternalId -> (string)

The external ID.

UserDataShared -> (boolean)

If UserDataShared is true , Amazon Cognito will include user data in the events it publishes to Amazon Pinpoint analytics.