AWS Golang SDK是否包括对Cognito提供商的支持？

Question

I have been using the AWS mobile SDK previously with AWS Cognito. So I have an AWS Cognito Identity Pool configured with 2 AWS IAM roles (authenticated and unauthenticated). Via that I am currently calling some AWS Lambda functions. (btw I am aware of the AWS API Gateway)

I'm trying to do something similar with a Go/Golang client now, i.e. call an AWS Lambda (unauthenticated role) from client side Go, but I can't find an example.

I found this info, but it just seems to be for calling the service functions (ie with environment configured secrets etc. similar to CLI)

https://docs.aws.amazon.com/sdk-for-go/api/service/cognitoidentity/#New

I also looked through the Go AWS SDK source (credentials) and it is almost like the Cognito Provider option has been excluded from the SDK? and I cant find anything that seems to mention 'identityPoolId'.

If that is the case, could I somehow hook into the Javascript exposed interface in Go without using the SDK?

https://docs.aws.amazon.com/cognito/latest/developerguide/getting-credentials.html#getting-credentials-1.javascript

Although I'm thinking I will need to do this without the Javascript SDK too...

ie A direct HTTPS call to AWS backend? Is the AWS Cognito service exposed in this way?

Answer 1

This doesn't seem to be supported within the current SDK. However I found a way to solve this by using the web API. First calling this:

https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html

And once you have the IdendityId calling this:

https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetCredentialsForIdentity.html

With the returned credentials you have guest/unauthenticated role privilege for calling down to your public Lambda. The IdentityId can be cached locally for subsequent calls.

[edit] work-in-progress example: https://github.com/WhiteHexagon/go2aws