fix(cognito-identitypool-alpha): allowUnauthenticatedIdentities still creates an unauthenticated IAM role

[Tietew]

Issue # (if applicable)

Closes #25470.

Description of changes

Prevent to create an unauthenticated role when allowUnauthenticatedIdentities is not true.

Description of how you validated changes

Updated unit tests to validate expected roles are created.
Updated an integ test to create an identity pool with allowUnauthenticatedIdentities: false.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

BREAKING CHANGE: The IdentityPool.unauthenticatedRole attribute is now optional. You may need to add non-null assertion on it. On update a stack, an unauthenticated role will be deleted unless allowUnauthenticatedRole is true.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

[aws-cdk-automation]

AWS CodeBuild CI Report

• CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
• Commit ID: 4af5eec
• Result: SUCCEEDED
• Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

[Leo10Gama]

Thanks for the contribution! Unfortunately, these changes will not be needed, since the behaviour outlined in the original issue is actually expected.

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.