---
title: Getting Started with Datadog
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: Docs > Infrastructure > Datadog Resource Catalog
---

# aws_cognito_identity_pool{% #aws_cognito_identity_pool %}

## `account_id`{% #account_id %}

**Type**: `STRING`

## `allow_classic_flow`{% #allow_classic_flow %}

**Type**: `BOOLEAN`**Provider name**: `AllowClassicFlow`**Description**: Enables or disables the Basic (Classic) authentication flow. For more information, see [Identity Pools (Federated Identities) Authentication Flow](https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html) in the Amazon Cognito Developer Guide.

## `allow_unauthenticated_identities`{% #allow_unauthenticated_identities %}

**Type**: `BOOLEAN`**Provider name**: `AllowUnauthenticatedIdentities`**Description**: TRUE if the identity pool supports unauthenticated logins.

## `cognito_identity_providers`{% #cognito_identity_providers %}

**Type**: `UNORDERED_LIST_STRUCT`**Provider name**: `CognitoIdentityProviders`**Description**: A list representing an Amazon Cognito user pool and its client ID.

- `client_id`**Type**: `STRING`**Provider name**: `ClientId`**Description**: The client ID for the Amazon Cognito user pool.
- `provider_name`**Type**: `STRING`**Provider name**: `ProviderName`**Description**: The provider name for an Amazon Cognito user pool. For example, `cognito-idp.us-east-1.amazonaws.com/us-east-1_123456789`.
- `server_side_token_check`**Type**: `BOOLEAN`**Provider name**: `ServerSideTokenCheck`**Description**: TRUE if server-side token validation is enabled for the identity provider's token. Once you set `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool will check with the integrated user pools to make sure that the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user. If the user is signed out or deleted, the identity pool will return a 400 Not Authorized error.

## `developer_provider_name`{% #developer_provider_name %}

**Type**: `STRING`**Provider name**: `DeveloperProviderName`**Description**: The "domain" by which Cognito will refer to your users.

## `identity_pool_arn`{% #identity_pool_arn %}

**Type**: `STRING`

## `identity_pool_id`{% #identity_pool_id %}

**Type**: `STRING`**Provider name**: `IdentityPoolId`**Description**: An identity pool ID in the format REGION:GUID.

## `identity_pool_name`{% #identity_pool_name %}

**Type**: `STRING`**Provider name**: `IdentityPoolName`**Description**: A string that you provide.

## `identity_pool_tags`{% #identity_pool_tags %}

**Type**: `MAP_STRING_STRING`**Provider name**: `IdentityPoolTags`**Description**: The tags that are assigned to the identity pool. A tag is a label that you can apply to identity pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria.

## `open_id_connect_provider_arns`{% #open_id_connect_provider_arns %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `OpenIdConnectProviderARNs`**Description**: The ARNs of the OpenID Connect providers.

## `role_mappings`{% #role_mappings %}

**Type**: `STRING`**Provider name**: `RoleMappings`**Description**: How users for a specific identity provider are to mapped to roles. This is a String-to-RoleMapping object map. The string identifies the identity provider, for example, "graph.facebook.com" or "cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id".

## `roles`{% #roles %}

**Type**: `MAP_STRING_STRING`**Provider name**: `Roles`**Description**: The map of roles associated with this pool. Currently only authenticated and unauthenticated roles are supported.

## `saml_provider_arns`{% #saml_provider_arns %}

**Type**: `UNORDERED_LIST_STRING`**Provider name**: `SamlProviderARNs`**Description**: An array of Amazon Resource Names (ARNs) of the SAML provider for your identity pool.

## `supported_login_providers`{% #supported_login_providers %}

**Type**: `MAP_STRING_STRING`**Provider name**: `SupportedLoginProviders`**Description**: Optional key:value pairs mapping provider names to provider app IDs.

## `tags`{% #tags %}

**Type**: `UNORDERED_LIST_STRING`