Add user_migration to the lambda_config section of the aws_cognito_user_pool resource

[ghost]

This issue was originally opened by @nwayve as hashicorp/terraform#17750. It was migrated here as a result of the provider split. The original body of the issue is below.

---

Feature Request

Terraform Version

Terraform v0.11.5

Terraform Configuration Files

provider "aws" {
  # AWS Settings
}

resource "aws_cognito_user_pool" "my-user-pool" {
  name = "My User Pool"
  lambda_config = [{
    user_migration = "arn:aws:lambda:xx-xxxx-#:123412341234:function:my-user-pool-lambda-arn"
  }]
}

Debug Output

Error: aws_cognito_user_pool.my-user-pool: lambda_config.0: invalid or unknown key: user_migration

Expected Behavior

user_migration should be a known key

Actual Behavior

user_migration is an unknown key

Steps to Reproduce

1. terraform init
2. terraform apply

Additional Context

AWS CLI Version: 1.14.67

> aws cognito-idp update-user-pool help
...
"--lambda-config" (structure)

   The AWS Lambda configuration information from the request to update
   the user pool.

Shorthand Syntax:
PreSignUp=string,CustomMessage=string,PostConfirmation=string,PreAuthentication=string,PostAuthentication=string,DefineAuthChallenge=string,CreateAuthChallenge=string,VerifyAuthChallengeResponse=string,PreTokenGeneration=string,UserMigration=string

Note the UserMigration=string option for --lambda-config

> aws cognito-idp update-user-pool --user-pool-id xx-xxxx-#_aaaaaaaaa --lambda-config UserMigration="arn:aws:lambda:xx-xxxx-#:123412341234:function:my-user-pool-lambda"
>

The above command successfully updates the Cognito UserPool UserMigration trigger with the specified lambda arn.

References

AWS Cognito UserMigration trigger

[bflad]

Support for this has been added via #4301 and will release with v1.16.0 of the AWS provider, likely in a few days.

[bflad]

This has been released in version 1.16.0 of the AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!