Adding support for password_policy.temporary_password_validity_days #10890

michalschott · 2019-11-15T09:59:12Z

Community Note

Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
Please do not leave "+1" or other comments that do not add relevant new information or questions, they generate extra noise for pull request followers and do not help prioritize the request

Release note for CHANGELOG:

`admin_create_user_config.0.unused_account_validity_days` has been deprecated, added support for 
 `password_policy.0.temporary_password_validity_days`

Output from acceptance testing:

$ make testacc TEST=./aws TESTARGS='-run=TestAccAWSCognitoUserPool'
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test ./aws -v -count 1 -parallel 10 -run=TestAccAWSCognitoUserPool -timeout 120m
=== RUN   TestAccAWSCognitoUserPoolClient_basic
=== PAUSE TestAccAWSCognitoUserPoolClient_basic
=== RUN   TestAccAWSCognitoUserPoolClient_RefreshTokenValidity
=== PAUSE TestAccAWSCognitoUserPoolClient_RefreshTokenValidity
=== RUN   TestAccAWSCognitoUserPoolClient_Name
=== PAUSE TestAccAWSCognitoUserPoolClient_Name
=== RUN   TestAccAWSCognitoUserPoolClient_allFields
=== PAUSE TestAccAWSCognitoUserPoolClient_allFields
=== RUN   TestAccAWSCognitoUserPoolClient_allFieldsUpdatingOneField
=== PAUSE TestAccAWSCognitoUserPoolClient_allFieldsUpdatingOneField
=== RUN   TestAccAWSCognitoUserPoolDomain_basic
=== PAUSE TestAccAWSCognitoUserPoolDomain_basic
=== RUN   TestAccAWSCognitoUserPoolDomain_custom
--- SKIP: TestAccAWSCognitoUserPoolDomain_custom (0.00s)
    resource_aws_cognito_user_pool_domain_test.go:56: Environment variable AWS_COGNITO_USER_POOL_DOMAIN_ROOT_DOMAIN is not set. This environment variable must be set to the fqdn of an ISSUED ACM certificate in us-east-1 to enable this test.
=== RUN   TestAccAWSCognitoUserPool_basic
=== PAUSE TestAccAWSCognitoUserPool_basic
=== RUN   TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration
=== PAUSE TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration
=== RUN   TestAccAWSCognitoUserPool_withAdvancedSecurityMode
=== PAUSE TestAccAWSCognitoUserPool_withAdvancedSecurityMode
=== RUN   TestAccAWSCognitoUserPool_withDeviceConfiguration
=== PAUSE TestAccAWSCognitoUserPool_withDeviceConfiguration
=== RUN   TestAccAWSCognitoUserPool_withEmailVerificationMessage
=== PAUSE TestAccAWSCognitoUserPool_withEmailVerificationMessage
=== RUN   TestAccAWSCognitoUserPool_withSmsVerificationMessage
=== PAUSE TestAccAWSCognitoUserPool_withSmsVerificationMessage
=== RUN   TestAccAWSCognitoUserPool_withEmailConfiguration
--- SKIP: TestAccAWSCognitoUserPool_withEmailConfiguration (0.00s)
    resource_aws_cognito_user_pool_test.go:304: 'TEST_AWS_SES_VERIFIED_EMAIL_ARN' not set, skipping test.
=== RUN   TestAccAWSCognitoUserPool_withSmsConfiguration
=== PAUSE TestAccAWSCognitoUserPool_withSmsConfiguration
=== RUN   TestAccAWSCognitoUserPool_withSmsConfigurationUpdated
=== PAUSE TestAccAWSCognitoUserPool_withSmsConfigurationUpdated
=== RUN   TestAccAWSCognitoUserPool_withTags
=== PAUSE TestAccAWSCognitoUserPool_withTags
=== RUN   TestAccAWSCognitoUserPool_withAliasAttributes
=== PAUSE TestAccAWSCognitoUserPool_withAliasAttributes
=== RUN   TestAccAWSCognitoUserPool_withPasswordPolicy
=== PAUSE TestAccAWSCognitoUserPool_withPasswordPolicy
=== RUN   TestAccAWSCognitoUserPool_withLambdaConfig
=== PAUSE TestAccAWSCognitoUserPool_withLambdaConfig
=== RUN   TestAccAWSCognitoUserPool_withSchemaAttributes
=== PAUSE TestAccAWSCognitoUserPool_withSchemaAttributes
=== RUN   TestAccAWSCognitoUserPool_withVerificationMessageTemplate
=== PAUSE TestAccAWSCognitoUserPool_withVerificationMessageTemplate
=== RUN   TestAccAWSCognitoUserPool_update
=== PAUSE TestAccAWSCognitoUserPool_update
=== CONT  TestAccAWSCognitoUserPoolClient_basic
=== CONT  TestAccAWSCognitoUserPool_basic
=== CONT  TestAccAWSCognitoUserPool_withSmsVerificationMessage
=== CONT  TestAccAWSCognitoUserPool_withVerificationMessageTemplate
=== CONT  TestAccAWSCognitoUserPool_withSchemaAttributes
=== CONT  TestAccAWSCognitoUserPool_withLambdaConfig
=== CONT  TestAccAWSCognitoUserPool_withPasswordPolicy
=== CONT  TestAccAWSCognitoUserPool_update
=== CONT  TestAccAWSCognitoUserPool_withTags
=== CONT  TestAccAWSCognitoUserPool_withAliasAttributes
--- PASS: TestAccAWSCognitoUserPool_basic (34.67s)
=== CONT  TestAccAWSCognitoUserPool_withSmsConfigurationUpdated
--- PASS: TestAccAWSCognitoUserPoolClient_basic (39.40s)
=== CONT  TestAccAWSCognitoUserPool_withSmsConfiguration
--- PASS: TestAccAWSCognitoUserPool_withSmsVerificationMessage (54.44s)
=== CONT  TestAccAWSCognitoUserPoolClient_allFields
--- PASS: TestAccAWSCognitoUserPool_withVerificationMessageTemplate (54.44s)
=== CONT  TestAccAWSCognitoUserPoolDomain_basic
--- PASS: TestAccAWSCognitoUserPool_withAliasAttributes (55.41s)
=== CONT  TestAccAWSCognitoUserPoolClient_allFieldsUpdatingOneField
--- PASS: TestAccAWSCognitoUserPool_withPasswordPolicy (56.14s)
=== CONT  TestAccAWSCognitoUserPool_withDeviceConfiguration
--- PASS: TestAccAWSCognitoUserPool_withSchemaAttributes (58.23s)
=== CONT  TestAccAWSCognitoUserPool_withEmailVerificationMessage
--- PASS: TestAccAWSCognitoUserPool_withTags (77.46s)
=== CONT  TestAccAWSCognitoUserPoolClient_Name
--- PASS: TestAccAWSCognitoUserPool_withSmsConfiguration (49.83s)
=== CONT  TestAccAWSCognitoUserPoolClient_RefreshTokenValidity
--- PASS: TestAccAWSCognitoUserPoolClient_allFields (37.53s)
=== CONT  TestAccAWSCognitoUserPool_withAdvancedSecurityMode
--- PASS: TestAccAWSCognitoUserPool_withLambdaConfig (93.05s)
=== CONT  TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration
--- PASS: TestAccAWSCognitoUserPoolDomain_basic (39.21s)
--- PASS: TestAccAWSCognitoUserPool_update (104.76s)
--- PASS: TestAccAWSCognitoUserPool_withSmsConfigurationUpdated (70.37s)
--- PASS: TestAccAWSCognitoUserPool_withDeviceConfiguration (52.87s)
--- PASS: TestAccAWSCognitoUserPool_withEmailVerificationMessage (53.27s)
--- PASS: TestAccAWSCognitoUserPoolClient_allFieldsUpdatingOneField (58.13s)
--- PASS: TestAccAWSCognitoUserPoolClient_Name (60.39s)
--- PASS: TestAccAWSCognitoUserPoolClient_RefreshTokenValidity (58.94s)
--- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration (71.57s)
--- PASS: TestAccAWSCognitoUserPool_withAdvancedSecurityMode (75.25s)
PASS
ok  	github.com/terraform-providers/terraform-provider-aws/aws	168.608s

michalschott · 2019-11-20T13:42:26Z

@bflad @gdavison @aeschright any chance that this might get your attention, looks like more and more people are affected.

aeschright · 2019-12-12T19:47:03Z

Hi @michalschott -- thanks for getting a start on this! I think it makes sense to mark unused_account_validity_days as explicitly deprecated: https://www.terraform.io/docs/extend/best-practices/deprecations.html

michalschott · 2020-01-11T16:54:09Z

@aeschright thanks for the link, I'm facing very similar problems with failing tests without updating them with new parameter.

Because of AWS sets temporary_password_validity_days on their side, any further updates are failing until you set

  password_policy {
    temporary_password_validity_days = $int
  }

Without that we're not even able to update UnusedAccountValidityDays value anymore.

Updated the code to not fully drop support for the old parameter, but continuing to update user pools without updating your code will fail with in certain scenarios - reason why I had to add password_policy block to testAccAWSCognitoUserPoolConfig_withAdminCreateUserConfiguration and testAccAWSCognitoUserPoolConfig_withAdminCreateUserConfigurationUpdated tests. Really hope this is acceptably by now.

stevegula · 2020-01-11T23:46:54Z

@michalschott is there a work around one can use while we wait for this patch to get merged?

disregard - i somehow missed this comment #8827 (comment)

michalschott · 2020-01-12T22:31:31Z

Code used for testing:

resource "aws_cognito_user_pool" "test" {
  name = "terraform-test-pool-test"

  admin_create_user_config {
    allow_admin_create_user_only = true
    unused_account_validity_days = 6

    invite_message_template {
      email_message = "Your username is {username} and temporary password is {####}. "
      email_subject = "FooBar {####}"
      sms_message   = "Your username is {username} and temporary password is {####}."
    }
  }
}

Testing steps:

Create user pool with stable provider, state looks like:

...
admin_create_user_config.0.unused_account_validity_days            = 6
...
password_policy.#                                                  = 1
password_policy.0.minimum_length                                   = 8
password_policy.0.require_lowercase                                = true
password_policy.0.require_numbers                                  = true
password_policy.0.require_symbols                                  = true
password_policy.0.require_uppercase                                = true
schema.#                                                           = 0
...

Added new field, rebuild custom version, ran apply, state has changed:

...
admin_create_user_config.0.unused_account_validity_days            = 6
...
password_policy.#                                                  = 1
password_policy.0.minimum_length                                   = 8
password_policy.0.require_lowercase                                = true
password_policy.0.require_numbers                                  = true
password_policy.0.require_symbols                                  = true
password_policy.0.require_uppercase                                = true
password_policy.0.temporary_password_validity_days                 = 6
...

I'm no longer available to update admin_create_user_config.0.unused_account_validity_days field due to Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDays responce from AWS API. This only happens once support for temporary_password_validity_days is in.

Any thought how can this be bypassed, I was thinking about forcing resource to be recreated but that might lead to various scenarios where this might not fit (once support for deprecated field drops).

Shall we create new resource cognito_userpool_v2 to keep backwards compatibility?

claydanford · 2020-01-15T01:35:19Z

Since the old attribute is being deprecated, can we remove it from the provider, and push this forward? Seems the grace period is over, or perhaps I'm missing something?

michalschott · 2020-01-17T22:17:45Z

@aeschright have you internally agreed on final decision how this should be handled, as mentioned above adding support for new field partially drops support for (already legacy field) unused_account_validity_days as it is no longer available to update its value.

claydanford · 2020-01-22T21:17:40Z

I've now run into this blocker like everyone else. Cannot update anything in the pools.

aeschright

Looks good! Just a couple of small things I'd like you to have a look at, and then we'll ship it 🚀

aeschright · 2020-01-23T23:04:57Z

aws/resource_aws_cognito_user_pool.go

@@ -948,6 +955,11 @@ func resourceAwsCognitoUserPoolUpdate(d *schema.ResourceData, meta interface{})
 			log.Printf("[DEBUG] Received %s, retrying UpdateUserPool", err)
 			return resource.RetryableError(err)
 		}
+		if isAWSErr(err, cognitoidentityprovider.ErrCodeInvalidParameterException, "Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDays") {


Suggested change

if isAWSErr(err, cognitoidentityprovider.ErrCodeInvalidParameterException, "Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDays") {

if isAWSErr(err, cognitoidentityprovider.ErrCodeInvalidParameterException, "UnusedAccountValidityDays has been deprecated, set TemporaryPasswordValidityDays in PasswordPolicy instead.") {

If you have time, I think it would be a good idea to add a test that checks the error condition, but I know this is a blocker for folks who've been following the PR, so I don't want to delay it any longer.

Suggested change is not working as this is the exact error message from AWS API I need to act on.

Think the test I've added should do the work. Since we're retrying on error without deprecated field being send, the plan will still show that a change will be required - reason why I have used nonemptyplan.

aws/resource_aws_cognito_user_pool_test.go

aeschright

Thanks for all your work on this! It will be included in next week's release.

--- PASS: TestAccAWSCognitoUserPoolClient_basic (17.77s)
--- PASS: TestAccAWSCognitoUserPoolDomain_basic (20.42s)
--- PASS: TestAccAWSCognitoUserPoolClient_allFields (20.49s)
--- PASS: TestAccAWSCognitoUserPool_basic (20.88s)
--- PASS: TestAccAWSCognitoUserPool_withDeviceConfiguration (27.58s)
--- PASS: TestAccAWSCognitoUserPoolClient_Name (27.68s)
--- PASS: TestAccAWSCognitoUserPool_withVerificationMessageTemplate (27.68s)
--- PASS: TestAccAWSCognitoUserPoolClient_allFieldsUpdatingOneField (30.56s)
--- PASS: TestAccAWSCognitoUserPool_withPasswordPolicy (31.04s)
--- PASS: TestAccAWSCognitoUserPool_withSmsVerificationMessage (31.19s)
--- PASS: TestAccAWSCognitoUserPool_withSmsConfiguration (32.60s)
--- PASS: TestAccAWSCognitoUserPool_withSchemaAttributes (34.14s)
--- PASS: TestAccAWSCognitoUserPool_withEmailVerificationMessage (34.22s)
--- PASS: TestAccAWSCognitoUserPool_withAliasAttributes (34.82s)
--- PASS: TestAccAWSCognitoUserPool_withAdvancedSecurityMode (38.25s)
--- PASS: TestAccAWSCognitoUserPool_withTags (39.37s)
--- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration (39.42s)
--- PASS: TestAccAWSCognitoUserPool_withSmsConfigurationUpdated (41.02s)
--- PASS: TestAccAWSCognitoUserPoolClient_RefreshTokenValidity (25.85s)
--- PASS: TestAccAWSCognitoUserPool_withLambdaConfig (58.46s)
--- PASS: TestAccAWSCognitoUserPool_update (62.47s)

ghost · 2020-01-30T21:44:05Z

This has been released in version 2.47.0 of the Terraform AWS provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading.

For further feature requests or bug reports with this functionality, please create a new GitHub issue following the template for triage. Thanks!

…uration block unused_account_validity_days to be omitted Reference: #11858 Reference: #10890 There was previously no test configuration covering both admin_create_user_config and password_policy being defined. The upstream API has deprecated a field in the former, however if the configuration block was defined, the attribute would errantly show a difference on the deprecated field. Previous output from acceptance testing (before code fix): ``` --- FAIL: TestAccAWSCognitoUserPool_withAdminCreateUserConfigurationAndPasswordPolicy (13.28s) testing.go:640: Step 0 error: After applying this step, the plan was not empty: DIFF: UPDATE: aws_cognito_user_pool.test admin_create_user_config.#: "1" => "1" admin_create_user_config.0.allow_admin_create_user_only: "true" => "true" admin_create_user_config.0.invite_message_template.#: "0" => "0" admin_create_user_config.0.unused_account_validity_days: "7" => "" ... omitted for clarity ... ``` Output from acceptance testing: ``` --- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfigurationAndPasswordPolicy (18.41s) --- PASS: TestAccAWSCognitoUserPool_basic (18.46s) --- PASS: TestAccAWSCognitoUserPool_withAliasAttributes (27.92s) --- PASS: TestAccAWSCognitoUserPool_withPasswordPolicy (29.64s) --- PASS: TestAccAWSCognitoUserPool_withVerificationMessageTemplate (29.68s) --- PASS: TestAccAWSCognitoUserPool_withDeviceConfiguration (30.52s) --- PASS: TestAccAWSCognitoUserPool_withEmailVerificationMessage (31.38s) --- PASS: TestAccAWSCognitoUserPool_withSmsVerificationMessage (32.67s) --- PASS: TestAccAWSCognitoUserPool_withSchemaAttributes (33.39s) --- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration (37.94s) --- PASS: TestAccAWSCognitoUserPool_withAdvancedSecurityMode (39.71s) --- PASS: TestAccAWSCognitoUserPool_withTags (44.33s) --- PASS: TestAccAWSCognitoUserPool_withSmsConfiguration (50.12s) --- PASS: TestAccAWSCognitoUserPool_withSmsConfigurationUpdated (51.37s) --- PASS: TestAccAWSCognitoUserPool_update (66.06s) --- PASS: TestAccAWSCognitoUserPool_withLambdaConfig (75.15s) ```

…uration block unused_account_validity_days to be omitted (#12001) Reference: #11858 Reference: #10890 There was previously no test configuration covering both admin_create_user_config and password_policy being defined. The upstream API has deprecated a field in the former, however if the configuration block was defined, the attribute would errantly show a difference on the deprecated field. Previous output from acceptance testing (before code fix): ``` --- FAIL: TestAccAWSCognitoUserPool_withAdminCreateUserConfigurationAndPasswordPolicy (13.28s) testing.go:640: Step 0 error: After applying this step, the plan was not empty: DIFF: UPDATE: aws_cognito_user_pool.test admin_create_user_config.#: "1" => "1" admin_create_user_config.0.allow_admin_create_user_only: "true" => "true" admin_create_user_config.0.invite_message_template.#: "0" => "0" admin_create_user_config.0.unused_account_validity_days: "7" => "" ... omitted for clarity ... ``` Output from acceptance testing: ``` --- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfigurationAndPasswordPolicy (18.41s) --- PASS: TestAccAWSCognitoUserPool_basic (18.46s) --- PASS: TestAccAWSCognitoUserPool_withAliasAttributes (27.92s) --- PASS: TestAccAWSCognitoUserPool_withPasswordPolicy (29.64s) --- PASS: TestAccAWSCognitoUserPool_withVerificationMessageTemplate (29.68s) --- PASS: TestAccAWSCognitoUserPool_withDeviceConfiguration (30.52s) --- PASS: TestAccAWSCognitoUserPool_withEmailVerificationMessage (31.38s) --- PASS: TestAccAWSCognitoUserPool_withSmsVerificationMessage (32.67s) --- PASS: TestAccAWSCognitoUserPool_withSchemaAttributes (33.39s) --- PASS: TestAccAWSCognitoUserPool_withAdminCreateUserConfiguration (37.94s) --- PASS: TestAccAWSCognitoUserPool_withAdvancedSecurityMode (39.71s) --- PASS: TestAccAWSCognitoUserPool_withTags (44.33s) --- PASS: TestAccAWSCognitoUserPool_withSmsConfiguration (50.12s) --- PASS: TestAccAWSCognitoUserPool_withSmsConfigurationUpdated (51.37s) --- PASS: TestAccAWSCognitoUserPool_update (66.06s) --- PASS: TestAccAWSCognitoUserPool_withLambdaConfig (75.15s) ```

ghost · 2020-03-27T17:30:12Z

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. Thanks!

michalschott requested a review from a team November 15, 2019 09:59

ghost added size/XS Managed by automation to categorize the size of a PR. needs-triage Waiting for first response or review from a maintainer. service/cognito labels Nov 15, 2019

michalschott mentioned this pull request Nov 15, 2019

aws_cognito_user_pool support temporary password validity days in password policy #8827

Closed

ghost added the documentation Introduces or discusses updates to documentation. label Nov 15, 2019

michalschott changed the title ~~Adding new field.~~ Adding new field for cognito_user_pool Nov 15, 2019

michalschott changed the title ~~Adding new field for cognito_user_pool~~ Adding new field for cognito_user_pool (temporary_password_validity_days) Nov 15, 2019

lukasz-reszke approved these changes Nov 15, 2019

View reviewed changes

michalschott force-pushed the cognito_fix branch 3 times, most recently from ce6af14 to 7d00f44 Compare November 15, 2019 14:57

aeschright removed the needs-triage Waiting for first response or review from a maintainer. label Dec 12, 2019

aeschright added the waiting-response Maintainers are waiting on response from community or contributor. label Dec 12, 2019

michalschott force-pushed the cognito_fix branch from 7d00f44 to 97fa671 Compare December 12, 2019 23:08

michalschott force-pushed the cognito_fix branch from 97fa671 to a95846d Compare December 12, 2019 23:11

Adding support for password_policy.temporary_password_validity_days

f8e23ac

michalschott force-pushed the cognito_fix branch from 62bdce5 to f8e23ac Compare January 11, 2020 16:52

michalschott changed the title ~~Renaming admin_create_user_config.0.unused_account_validity_days to password_policy.0.temporary_password_validity_days~~ Adding support for password_policy.temporary_password_validity_days Jan 11, 2020

Added ConflictsWith, updated tests.

25f0582

ghost added size/S Managed by automation to categorize the size of a PR. and removed size/M Managed by automation to categorize the size of a PR. labels Jan 12, 2020

aeschright suggested changes Jan 23, 2020

View reviewed changes

Adding test to ensure deprecated field is not longer updateable.

6148590

michalschott force-pushed the cognito_fix branch from d8dfdab to 6148590 Compare January 24, 2020 12:40

ghost added size/M Managed by automation to categorize the size of a PR. and removed size/S Managed by automation to categorize the size of a PR. labels Jan 24, 2020

aeschright added this to the v2.47.0 milestone Jan 24, 2020

aeschright approved these changes Jan 24, 2020

View reviewed changes

aeschright merged commit 9b606be into hashicorp:master Jan 24, 2020

aeschright added a commit that referenced this pull request Jan 24, 2020

Update Changelog for #10890

f8c3fcd

bflad added a commit that referenced this pull request Jan 28, 2020

Update CHANGELOG for #10890

b26df2f

jakubmiarka mentioned this pull request Feb 3, 2020

Bump engine and rds cert alphagov/verify-infrastructure#372

Merged

michalschott mentioned this pull request Feb 11, 2020

Cognito unused_account_validity_days bug with 2.47 #11858

Closed

bflad mentioned this pull request Feb 11, 2020

resource/aws_cognito_user_pool: Allow admin_create_user_config configuration block unused_account_validity_days to be omitted #12001

Merged

ghost locked and limited conversation to collaborators Mar 27, 2020

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Adding support for password_policy.temporary_password_validity_days #10890

Adding support for password_policy.temporary_password_validity_days #10890

michalschott commented Nov 15, 2019 •

edited

Loading

michalschott commented Nov 20, 2019

aeschright commented Dec 12, 2019

michalschott commented Jan 11, 2020 •

edited

Loading

stevegula commented Jan 11, 2020 •

edited

Loading

michalschott commented Jan 12, 2020 •

edited

Loading

claydanford commented Jan 15, 2020

michalschott commented Jan 17, 2020

claydanford commented Jan 22, 2020

aeschright left a comment

aeschright Jan 23, 2020

aeschright Jan 23, 2020

michalschott Jan 24, 2020

michalschott Jan 24, 2020 •

edited

Loading

aeschright left a comment

ghost commented Jan 30, 2020

ghost commented Mar 27, 2020

	if isAWSErr(err, cognitoidentityprovider.ErrCodeInvalidParameterException, "Please use TemporaryPasswordValidityDays in PasswordPolicy instead of UnusedAccountValidityDays") {
	if isAWSErr(err, cognitoidentityprovider.ErrCodeInvalidParameterException, "UnusedAccountValidityDays has been deprecated, set TemporaryPasswordValidityDays in PasswordPolicy instead.") {

Adding support for password_policy.temporary_password_validity_days #10890

Adding support for password_policy.temporary_password_validity_days #10890

Conversation

michalschott commented Nov 15, 2019 • edited Loading

Community Note

michalschott commented Nov 20, 2019

aeschright commented Dec 12, 2019

michalschott commented Jan 11, 2020 • edited Loading

stevegula commented Jan 11, 2020 • edited Loading

michalschott commented Jan 12, 2020 • edited Loading

claydanford commented Jan 15, 2020

michalschott commented Jan 17, 2020

claydanford commented Jan 22, 2020

aeschright left a comment

Choose a reason for hiding this comment

aeschright Jan 23, 2020

Choose a reason for hiding this comment

aeschright Jan 23, 2020

Choose a reason for hiding this comment

michalschott Jan 24, 2020

Choose a reason for hiding this comment

michalschott Jan 24, 2020 • edited Loading

Choose a reason for hiding this comment

aeschright left a comment

Choose a reason for hiding this comment

ghost commented Jan 30, 2020

ghost commented Mar 27, 2020

michalschott commented Nov 15, 2019 •

edited

Loading

michalschott commented Jan 11, 2020 •

edited

Loading

stevegula commented Jan 11, 2020 •

edited

Loading

michalschott commented Jan 12, 2020 •

edited

Loading

michalschott Jan 24, 2020 •

edited

Loading