does anyone know how to change the verification option from no verification to email? can't find it in documentation! (https://www.pulumi.com/registry/packages/aws/api-docs/cognito/userpool/)

I think you need to set the autoVerifiedAttributes property to ["email"}

oh, I thought it means there will be no verification is needed for those fields.

Yeh it's a bit of a confusing name