Preparation

Create Cognito Identity Pool

  1. Open Amazon Cognito console, select Federated identities

Cognito

  1. Click Create new identity pool

Cognito

  1. In Identity pool name, select FaceRecognition. Check to 2 checkboxs Unauthenticated identities and Authentication flow setting.
  2. Click Create Pool

Cognito

  1. In Identity the IAM roles to use with your new identity pool page, click Allow

Cognito

  1. Copy Identity pool ID, we will use it in the following steps

Cognito

Create DynamoDB table

  1. Access AWS DynamoDB, click Create table.
  2. In Table name section, enter facerecognition
  3. In Primary key section, enter faceId.

Cognito

  • Then scroll to the bottom of the page and press Create table.

Cognito

Create S3 bucket

  1. We will create 2 S3 buckets, a m7www bucket containing the website source code and a facerecognitions3bucket bucket containing image data for identification.

Cognito

Cognito

Uncheck Block Public Access settings for this bucket checkbox.

Create Rekognition Collection

  1. Use the following CLI command to create the iDevelopKnownFaces collection:
aws rekognition create-collection --collection-id iDevelopKnownFaces

Cognito

Authorize Cognito

  1. Go to Amazon IAM console, select Role, search by keyword Cognito. We will see 2 Roles Cognito_FaceRecognitionAuth_Role and Cognito_FaceRecognitionUnauth_Role of Cognito Identity Pool that we created in the previous step, we will edit the policy of these 2 Roles.

Cognito

  1. Select Cognito_FaceRecognitionUnauth_Role, in Permision section, select oneClick_Cognito_Cognito_FaceRecognitionAuth_Role_xxxxxxxx, click Edit policy

Edit policy

  1. Copy and paste the following into the JSON tab
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "rekognition:DetectLabels",
                "mobileanalytics:PutEvents",
                "cognito-sync:*",
		"cognito-identity:*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "rekognition:CreateCollection",
                "rekognition:DeleteCollection",
                "rekognition:IndexFaces",
                "dynamodb:Scan",
                "dynamodb:Query",
                "dynamodb:UpdateItem",
                "rekognition:SearchFacesByImage"
            ],
            "Resource": [
                "arn:aws:s3:::facerecognitions3bucket/*",
                "arn:aws:dynamodb:<YOUR_REGION>:<ACCOUNT_ID>:table/facerecognition",
                "arn:aws:rekognition:<YOUR_REGION>:<ACCOUNT_ID>:collection/iDevelopKnownFaces"
            ]
        }
    ]
}
  1. Click Review Policy.

Edit policy

  • Then click Save changes.

Edit policy

  1. Do the same with Cognito_FaceRecognitionAuth_Role
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "rekognition:DetectLabels",
                "mobileanalytics:PutEvents",
                "cognito-sync:*",
                "cognito-identity:*"
            ],
            "Resource": "*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "rekognition:CreateCollection",
                "rekognition:DeleteCollection",
                "rekognition:IndexFaces",
                "dynamodb:Scan",
                "dynamodb:Query",
                "dynamodb:UpdateItem",
                "rekognition:SearchFacesByImage"
            ],
            "Resource": [
                "arn:aws:s3:::facerecognitions3bucket/*",
                "arn:aws:dynamodb:<YOUR_REGION>:<ACCOUNT_ID>:table/facerecognition",
                "arn:aws:rekognition:<YOUR_REGION>:<ACCOUNT_ID>:collection/iDevelopKnownFaces"
            ]
        }
    ]
}

Edit policy

Edit policy