Policy: AmazonESCognitoAccess ARN: arn:aws:iam::aws:policy/AmazonESCognitoAccess Allowed Actions Actions Services cognito-identity:DescribeIdentityPool cognito-identity cognito-identity:GetIdentityPoolRoles cognito-identity cognito-identity:SetIdentityPoolRoles cognito-identity cognito-identity:UpdateIdentityPool cognito-identity cognito-idp:AdminInitiateAuth cognito-idp cognito-idp:AdminUserGlobalSignOut cognito-idp cognito-idp:CreateUserPoolClient cognito-idp cognito-idp:DeleteUserPoolClient cognito-idp cognito-idp:DescribeUserPool cognito-idp cognito-idp:DescribeUserPoolClient cognito-idp cognito-idp:ListUserPoolClients cognito-idp cognito-idp:UpdateUserPoolClient cognito-idp iam:PassRole iam