(cognito): SMS configuration and verification is required when OTP is chosen

[heyarnold1]

Cannot build a User Pool with MFA using OTP without phone number configuration and verification which is inconsistent with the console

Reproduction Steps

mfa_second_factor = aws_cognito.MfaSecondFactor(otp=True, sms=False)

cognito_user_pool = aws_cognito.UserPool(
            self,
            "my-cognito-pool",
            account_recovery=aws_cognito.AccountRecovery.EMAIL_ONLY,
            auto_verify=auto_verify,
            enable_sms_role=False,
            mfa=aws_cognito.Mfa.REQUIRED,
            mfa_second_factor=mfa_second_factor,
            self_sign_up_enabled=True,
            sign_in_aliases=sign_in_aliases,
            sign_in_case_sensitive=False,
        )

What did you expect to happen?

In the console I can create User Pool with the above configuration. I would expect the same behaviour on the CDK

What actually happened?

I got this error

SMS configuration and Auto verification for phone_number are required when MFA is required/optional (Service: AWSCognitoIdentityProviderService; Status Code: 400; Error Code: InvalidParameterException; R

Environment

• CDK CLI Version :1.78.0
• Node.js Version:15.3.0
• Language (Version): Python (3.8)

---

This is 🐛 Bug Report

[nija-at]

Duplicate of #11478

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.