🧠 AWS Cognito Identity Pool allows unauthenticated identities - prod.logic.yaml🟢

• Contextual name: 🧠 prod.logic.yaml🟢
• ID: /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml
• Tags:
  • 🟢 Logic test success
  • 🟢 Logic with extracts
  • 🟢 Logic with test data

Uses

• 📗 AWS Cognito Identity Pool
• 🔌 AWS Cognito Identity Pool - object.extracts.yaml
• 🧪 test-data.json

Test Results 🟢

Generated at: 2026-04-25T12:02:19.104388464Z Open

Result	Id	Condition Index	Condition Text	Runtime Error
🟢	test1	✔️ 99	✔️ isDisappeared(CA10A1__disappearanceTime__c)	✔️ null
🟢	test2	✔️ 199	✔️ extract('CA10A1__allowUnauthenticatedIdentities__c') == 'true'	✔️ null
🟢	test3	✔️ 299	✔️ extract('CA10A1__allowUnauthenticatedIdentities__c') == 'false'	✔️ null
🟢	test4	✔️ 300	✔️ otherwise	✔️ null

Generation Bundle

	File	MD5
Open	/ce/ca/aws/cognito/identity-pool-unauthenticated-identities/policy.yaml	E3357605FD52CBF2F7F7C0248C50B9B8
Open	/ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml	64179898E57D5DC09922269AC7D81647
Open	/ce/ca/aws/cognito/identity-pool-unauthenticated-identities/test-data.json	A33E2E5D005F3FDCDEDE98E3AB3036BD
Open	/types/CA10A1__CaAwsCognitoIdentityPool__c/object.extracts.yaml	40CDE354F90428C792575A718C58F2CA

Available Commands

repo-manager policies generate FULL /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/cognito/identity-pool-unauthenticated-identities/prod.logic.yaml

Content

Open File

---
inputType: "CA10A1__CaAwsCognitoIdentityPool__c"
importExtracts:
  - file: "/types/CA10A1__CaAwsCognitoIdentityPool__c/object.extracts.yaml"
testData:
  - file: "test-data.json"
conditions:
  - status: "INCOMPLIANT"
    currentStateMessage: "The Cognito identity pool allows unauthenticated identities."
    remediationMessage: "Disable unauthenticated identities for the Cognito identity pool."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10A1__allowUnauthenticatedIdentities__c"
        right:
          TEXT: "true"
  - status: "COMPLIANT"
    currentStateMessage: "The Cognito identity pool does not allow unauthenticated identities."
    check:
      IS_EQUAL:
        left:
          EXTRACT: "CA10A1__allowUnauthenticatedIdentities__c"
        right:
          TEXT: "false"
otherwise:
  status: "UNDETERMINED"
  currentStateMessage: "Unexpected value was found in the Cognito identity pool unauthenticated identities setting."