Create Amazon Cognito users
Workload Discovery on AWS uses Amazon Cognito to manage all users and authentication. It creates a user for you during deployment and sends an email at the address provided in the AdminUserEmailAddress parameter with temporary credentials.
To create additional users:
-
Sign in to the AWS Cognito console
. -
Choose Manage User Pools.
-
Choose WDCognitoUserPool-
<ID-string>
. -
In the navigation pane, under General Settings, choose Users and groups.
-
On the Users tab, choose Create user.
-
On the Create user box, enter values for all required fields.
Form Field Required? Description Username
Yes
The username that you will use to log in to Workload Discovery on AWS.
Send an invitation
Yes (email only)
When selected, sends a notification as a reminder of the temporary password. Select Email only. If you select SMS (default), an error message displays, but the user is still created.
Temporary Password
Yes
Enter a temporary password. The user is forced to change this when they sign in to Workload Discovery on AWS for the first time.
Phone Number
No
Enter a phone number in international format, for example,
\+44
. Ensure that the Mark phone number as verified? box is selected.Email
Yes
Enter a valid email address. Ensure that the Mark email as verified? box is selected.
-
Choose Create user.
Repeat this process to create as many users as you need.
Note
Every user will have the same level of access to resources discovered. We recommend provisioning a separate deployment of Workload Discovery on AWS for accounts that contain sensitive workloads or data. This allows you to restrict access to only the users that need it.