AWS CDK で Cognito ユーザープールの機能プラン(Tier)を設定してみた

npm i aws-cdk-lib@latest aws-cdk@latest

import * as cdk from 'aws-cdk-lib';
import * as cognito from 'aws-cdk-lib/aws-cognito';
import { Construct } from 'constructs';

export class MainStack extends cdk.Stack {
  constructor(scope: Construct, id: string) {
    super(scope, id);

    new cognito.UserPool(this, 'TestUserPool', {
      featurePlan: cognito.FeaturePlan.PLUS, // 機能プランを指定
    });
  }
}

import * as cdk from 'aws-cdk-lib';
import * as cognito from 'aws-cdk-lib/aws-cognito';
import { Construct } from 'constructs';

export class MainStack extends cdk.Stack {
  constructor(scope: Construct, id: string) {
    super(scope, id);

    new cognito.UserPool(this, 'TestUserPool', {
      featurePlan: cognito.FeaturePlan.PLUS,
      advancedSecurityMode: cognito.AdvancedSecurityMode.AUDIT,
    });
  }
}

$ npx cdk synth Main
[WARNING] aws-cdk-lib.aws_cognito.UserPoolProps#advancedSecurityMode is deprecated.
  Advanced Security Mode is deprecated in favor of user pool feature plans.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cognito.AdvancedSecurityMode is deprecated.
  Advanced Security Mode is deprecated in favor of user pool feature plans.
  This API will be removed in the next major release.
[WARNING] aws-cdk-lib.aws_cognito.AdvancedSecurityMode#AUDIT is deprecated.

  This API will be removed in the next major release.

(中略)

Error: you cannot enable Advanced Security Mode when feature plan is Essentials or higher.
    at new UserPool (/Users/wakatsuki.ryuta/projects/cm-rwakatsuki/cdk_sample_app/node_modules/aws-cdk-lib/aws-cognito/lib/user-pool.js:1:8121)
    at new MainStack (/Users/wakatsuki.ryuta/projects/cm-rwakatsuki/cdk_sample_app/lib/main-stack.ts:9:5)
    at Object.<anonymous> (/Users/wakatsuki.ryuta/projects/cm-rwakatsuki/cdk_sample_app/bin/cdk_sample_app.ts:7:1)
    at Module._compile (node:internal/modules/cjs/loader:1241:14)
    at Module.m._compile (/Users/wakatsuki.ryuta/.npm/_npx/1bf7c3c15bf47d04/node_modules/ts-node/src/index.ts:1618:23)
    at Module._extensions..js (node:internal/modules/cjs/loader:1295:10)
    at Object.require.extensions.<computed> [as .ts] (/Users/wakatsuki.ryuta/.npm/_npx/1bf7c3c15bf47d04/node_modules/ts-node/src/index.ts:1621:12)
    at Module.load (node:internal/modules/cjs/loader:1091:32)
    at Function.Module._load (node:internal/modules/cjs/loader:938:12)
    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:83:12)
Subprocess exited with error 1

import * as cdk from 'aws-cdk-lib';
import * as cognito from 'aws-cdk-lib/aws-cognito';
import { Construct } from 'constructs';

export class MainStack extends cdk.Stack {
  constructor(scope: Construct, id: string) {
    super(scope, id);

    new cognito.UserPool(this, 'UserPool', {
      signInAliases: {
        email: true,
      },
    });
  }
}

$ npx cdk diff Main
start: Building c7b0979f671072304df5ac7dde1882bf0c9bb4df6de1a959f4eb52f7aa41299b:current_account-current_region
success: Built c7b0979f671072304df5ac7dde1882bf0c9bb4df6de1a959f4eb52f7aa41299b:current_account-current_region
start: Publishing c7b0979f671072304df5ac7dde1882bf0c9bb4df6de1a959f4eb52f7aa41299b:current_account-current_region
success: Published c7b0979f671072304df5ac7dde1882bf0c9bb4df6de1a959f4eb52f7aa41299b:current_account-current_region
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
Stack Main
There were no differences

✨  Number of stacks with differences: 0

import * as cdk from 'aws-cdk-lib';
import * as cognito from 'aws-cdk-lib/aws-cognito';
import { Construct } from 'constructs';

export class MainStack extends cdk.Stack {
  constructor(scope: Construct, id: string) {
    super(scope, id);

    new cognito.UserPool(this, 'UserPool', {
      signInAliases: {
        email: true,
      },
      featurePlan: cognito.FeaturePlan.LITE, // 機能プランを既定の Essentials から変更
    });
  }
}

$ npx cdk diff Main
start: Building ef6a19532e27cca75df0ce382f2520b6bd909f362495631432ff1759a3f64934:current_account-current_region
success: Built ef6a19532e27cca75df0ce382f2520b6bd909f362495631432ff1759a3f64934:current_account-current_region
start: Publishing ef6a19532e27cca75df0ce382f2520b6bd909f362495631432ff1759a3f64934:current_account-current_region
success: Published ef6a19532e27cca75df0ce382f2520b6bd909f362495631432ff1759a3f64934:current_account-current_region
Hold on while we create a read-only change set to get a diff with accurate replacement information (use --no-change-set to use a less accurate but faster template-only diff)
Stack Main
Resources
[~] AWS::Cognito::UserPool UserPool UserPool6BA7E5F2
 └─ [+] UserPoolTier
     └─ LITE


✨  Number of stacks with differences: 1