amplify push overwrites manual changes to userPoolGroups/template.js

Before opening, please confirm:

• I have installed the latest version of the Amplify CLI (see above), and confirmed that the issue still persists.
• I have searched for duplicate or closed issues.
• I have read the guide for submitting bug reports.
• I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.

How did you install the Amplify CLI?

No response

If applicable, what version of Node.js are you using?

No response

Amplify CLI Version

4.52.0

What operating system are you using?

Mac

Amplify Categories

auth

Amplify Commands

push

Describe the bug

I need to make some changes to my user pool groups template. More specifically I am adding another action to the AssumeRolePolicyDocument section under the section that defines one of my user pool groups.

   "orgAdminGroupRole": {
            "Type": "AWS::IAM::Role",
            "Properties": {
                "RoleName":{
                    "Fn::Join": [
                        "",
                        [
                          {
                            "Ref": "authcognitoUserPoolId"
                          },
                          "-orgAdminGroupRole"
                        ]
                    ]
                },
                "AssumeRolePolicyDocument": {
                    "Version": "2012-10-17",
                    "Statement": [
                        {
                            "Sid": "",
                            "Effect": "Allow",
                            "Principal": {
                                "Federated": "cognito-identity.amazonaws.com"
                            },
                            "Action": [
                                "sts:AssumeRoleWithWebIdentity",
                                "sts:TagSession"
                            ],
                            "Condition": {
                              "StringEquals": {"cognito-identity.amazonaws.com:aud": {"Ref":"authcognitoIdentityPoolId"}},
                              "ForAnyValue:StringLike": {"cognito-identity.amazonaws.com:amr": "authenticated"}
                            }
                        }
                    ]
                }
            }
        },

After amplify push, the Action section gets overwritten to

"Action": "sts:AssumeRoleWithWebIdentity"

Expected behavior

Amplify push should not override the file but should just deployed.

Reproduction steps

Make changes to the template Run amplify push

GraphQL schema(s)

# Put schemas below this line

Log output

# Put your logs below this line

Additional information

No response

[HieronymusLex]

@setterlee I have created #9738 for that same issue

[setterlee]

Similar issue here but with the user-pool-group-precedence.json file, i’m trying to add some custom policies to give access to geolocations resources to my default users group but the amplify push command overrides the file…