Cognito as IdP provider for Delta Share

pogo — Mon, 04 Aug 2025 21:30:42 GMT

I am trying to setup a delta sharing Recipient using OIDC Federation with the Issuer URL being cognito idp endpoint.

Are there any examples, other than EntraID, for the values of Subject Claim/Subject/Audiences in the OIDC Policy for Cognito or Google?

Re: Cognito as IdP provider for Delta Share

pogo — Mon, 04 Aug 2025 23:56:18 GMT

We managed to figure how to make machine to machine authentication to work.
when you setup cognito pool for m2m scenario you add App Client
and then set App Client as both `sub` and Audience in databricks recepient OIDC Policy:

2. Set `aud` claim to the app client_id in cognito generated access token using a `pre token generation` lambda (cognito pool -> extensions -> Lambda Triggers -> Authentication -> Pre token generation -> select v3 event type)

def lambda_handler(event, context): if event['triggerSource'] == "TokenGeneration_ClientCredentials": # Override the 'aud' claim print("overriding aud claim") event['response'] = { "claimsAndScopeOverrideDetails": { "accessTokenGeneration": { "claimsToAddOrOverride": { "aud": "54m...." } } } } # Return to Amazon Cognito return event

topic Re: Cognito as IdP provider for Delta Share in Data Engineering

Cognito as IdP provider for Delta Share

Re: Cognito as IdP provider for Delta Share