add cognito

infra/backend.ts

@@ -18,7 +18,7 @@ esbuild.buildSync({
 });
 
 
-// ---- Lambda ----
+// ---- backend lambda ----
 const lambdaRole = new aws.iam.Role(`${prefix}-lambda-role`, {
   tags,
   assumeRolePolicy: aws.iam.assumeRolePolicyForPrincipal({
@@ -106,3 +106,20 @@ new aws.iam.RolePolicy(`${prefix}-api-role-policy`, {
 });
 
 export const endpoint = pulumi.interpolate`${api.apiEndpoint}`;
+
+
+// ---- cognito ----
+const userPool = new aws.cognito.UserPool(`${prefix}-cognito-userpool`, {
+  tags,
+  autoVerifiedAttributes: ["email"],
+  usernameAttributes: ["email"],
+  passwordPolicy: {
+    minimumLength: 8,
+    requireSymbols: true,
+    requireNumbers: true,
+  },
+});
+new aws.cognito.UserPoolClient(`${prefix}-cognito-userpool-cli`, {
+  userPoolId: userPool.id,
+  generateSecret: false,
+});