saayam-for-all / saayam-for-all/devsecops
Create QAUserPool in Cognito replicating the DevUserPool (without users) to implement and test Cognito Advanced Security Features
Open
@soujanyab49 is already working on this.
Since Nov 27, 2025.
enhancement
- Dominant language
- Python
- Stars
- 2
- Forks
- 17
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Description
Initial Background
Currently, all development and processes are being performed in the Dev Pipeline using the DevUserPool. Any changes made to the DevUserPool directly affect the development process and web application.
To safely test Cognito Advanced Security and Fraud Check features under implementation, a separate QAUserPool must be created as a replica of DevUserPool. This will isolate testing from development and ensure no disruption to ongoing work.
Expected Outcome
- QAUserPool is created as a clone of DevUserPool (no users imported initially).
- Proper routing and configurations are in place so test traffic can be directed to QAUserPool.
- Logging is enabled in CloudWatch and CloudTrail to audit all actions related to QAUserPool.
- Safe environment for testing Lambdas and fraud detection rules without impacting Dev or Prod.
- Set up another webapp instance for QA with a corresponding URL - QA_saayam-netlify.app, which should replicate the current tested dev environment.
Acceptance Criteria
- QAUserPool exists and mirrors DevUserPool configuration.
- No existing users have been migrated to QAUserPool.
- Both UserPools are isolated and don't affect each other.
- CloudWatch logging is enabled for all Cognito Lambda triggers on QAUserPool.
- CloudTrail events confirm visibility of all user pool modifications.
- We want to remove any public buckets and have a QA bucket with the distinction: ex; Dev-private-virgina; qa-private-virginia; stage-private-virginia; prod-private-virginia; dev-private-ireland (x4) and the environment to be replicated are available to check on this section - https://github.com/saayam-for-all/devsecops/wiki/DevSecOps-CI-CD-Proposal (check the netlify app links to see the distinction)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.