Query: cognito_identity_pools_restrict_unauthenticated_identities

select
  identity_pool_id as resource,
  case
    when not allow_unauthenticated_identities then 'ok'
    else 'alarm'
  end as status,
  case
    when not allow_unauthenticated_identities then title || ' restrict unauthenticated identities.'
    else title || ' allow unauthenticated identities.'
  end as reason
  
  , region, account_id
from
  aws_cognito_identity_pool;