AWS cognito documentation change
Summary
Updated section titles and terminology for consistency (e.g., 'Important considerations' to 'Things to know', 'Adding' to 'Add'). Added clarification about Lambda trigger event handling and default behavior.
Security assessment
Changes are documentation improvements and terminology updates without addressing specific security vulnerabilities. References to IAM permissions and resource-based policies are part of standard security practices but do not indicate a new security issue or feature.
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.md b/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.md index e1663258f..6d90b074e 100644 --- a//cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.md +++ b//cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.md @@ -5 +5 @@ -Important considerationsAdding a user pool triggerUser pool Lambda trigger eventUser pool Lambda trigger common parametersLambda trigger sources by eventLambda trigger sources by function +Things to knowSet up triggersUser pool Lambda trigger eventUser pool Lambda trigger common parametersTrigger sources by operationTrigger sources by function @@ -36 +36 @@ User Pool Flow | Operation | Description - * Important considerations + * Things to know about Lambda triggers @@ -38 +38 @@ User Pool Flow | Operation | Description - * Adding a user pool Lambda trigger + * Add a user pool Lambda trigger @@ -69 +69 @@ User Pool Flow | Operation | Description -## Important considerations +## Things to know about Lambda triggers @@ -124 +124 @@ The following example Lambda resource-based policy grants Amazon Cognito a limit -## Adding a user pool Lambda trigger +## Add a user pool Lambda trigger @@ -144 +144 @@ The following example Lambda resource-based policy grants Amazon Cognito a limit -If your AWS Identity and Access Management (IAM) credentials have permission to update the Lambda function, Amazon Cognito adds a Lambda resource-based policy. With this policy, Amazon Cognito can invoke the function that you select. If the signed-in credentials do not have sufficient IAM permissions, you must update the resource-based policy separately. For more information, see Important considerations. +If your AWS Identity and Access Management (IAM) credentials have permission to update the Lambda function, Amazon Cognito adds a Lambda resource-based policy. With this policy, Amazon Cognito can invoke the function that you select. If the signed-in credentials do not have sufficient IAM permissions, you must update the resource-based policy separately. For more information, see Things to know about Lambda triggers. @@ -155 +155 @@ If your AWS Identity and Access Management (IAM) credentials have permission to -Amazon Cognito passes event information to your Lambda function. The Lambda function returns the same event object back to Amazon Cognito with any changes in the response. This event shows the Lambda trigger common parameters: +Amazon Cognito passes event information to your Lambda function. The Lambda function returns the same event object back to Amazon Cognito with any changes in the response. If your function returns the input event without modification, Amazon Cognito proceed with default behavior. The following shows the parameters that are common to all Lambda trigger input events. For trigger-specific event syntax, review the event schema on the section of this guide for each trigger. @@ -399 +399 @@ Hosted UI (classic) branding -Pre sign-up Lambda trigger +Pre sign-up