v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-142311090.8 KB

Sets the roles for an identity pool. These roles are used when making calls to GetCredentialsForIdentity action.

You must use AWS Developer credentials to call this API.

post/#X-Amz-Target=AWSCognitoIdentityService.SetIdentityPoolRoles

Headers

X-Amz-Target'AWSCognitoIdentityService.SetIdentityPoolRoles' required

Request body

IdentityPoolIdstring required

An identity pool ID in the format REGION:GUID.

Rolesobject required

The map of roles associated with this pool. For a given role, the key will be either "authenticated" or "unauthenticated" and the value will be the Role ARN.

RoleMappingsobject
<p>How users for a specific identity provider are to mapped to roles. This is a string to <a>RoleMapping</a> object map. The string identifies the identity provider, for example, "graph.facebook.com" or "cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id".</p> <p>Up to 25 rules can be specified per identity provider.</p>

Response

Success