serverless/serverless
GitHub で見るUse of Cognito "PoolName" in Events Can Associate Function with Incorrect/Unexpected Cognito User Pool
Open
#8,270 opened on 2020年9月19日
bug/designcat/aws-event-cognitodeprecationhelp wanted
説明
When using a "PoolName" as the mechanism by which to associate a Lambda Function Event with a Cognito User Pool it is possible to associate a Lambda Function with an unexpected/incorrect User Pool. The cause of this issue is that User Pool Names are not guaranteed to be unique and the impact is that lambda functions can be triggered unexpectedly.
service: service
provider:
name: aws
region: us-west-2
runtime: nodejs12.x
stage: ${opt:stage}
functions:
functionname:
handler: function.handler
events:
- cognitoUserPool:
existing: true
# "poolname" is not guaranteed to be unique
# resulting in a situation where his event/function could
# be associated with an unexpected CognitoUserPool
pool: poolname
trigger: UserMigration
Serverless: Packaging service...
Serverless: Excluding development dependencies...
Serverless: Installing dependencies for custom CloudFormation resources...
Serverless: Uploading CloudFormation file to S3...
Serverless: Uploading artifacts...
Serverless: Uploading service auth.zip file to S3 (1.11 KB)...
Serverless: Uploading custom CloudFormation resources...
Serverless: Validating template...
Serverless: Updating Stack...
Serverless: Checking Stack update progress...
.......
Serverless: Stack update finished...
Service Information
service: service
stage: dev
region: us-west-2
stack: stack
resources: 9
api keys:
None
endpoints:
None
functions:
user-migration: function
layers:
None
Serverless: Removing old service artifacts from S3...
Installed version
Framework Core: 2.1.1
Plugin: 4.0.4
SDK: 2.3.2
Components: 3.1.3