AWS cognito high security documentation change
Summary
Added detailed trigger sources table including AccountTakeOverNotification event, restructured sections, and enhanced code example documentation
Security assessment
Added 'CustomEmailSender_AccountTakeOverNotification' trigger source which specifically documents handling account takeover detection notifications. This directly addresses security monitoring and response capabilities.
Diff
diff --git a/cognito/latest/developerguide/user-pool-lambda-custom-email-sender.md b/cognito/latest/developerguide/user-pool-lambda-custom-email-sender.md index 888547124..4f0495ba6 100644 --- a//cognito/latest/developerguide/user-pool-lambda-custom-email-sender.md +++ b//cognito/latest/developerguide/user-pool-lambda-custom-email-sender.md @@ -5 +5 @@ -Custom email sender Lambda trigger parametersActivating the custom email sender Lambda triggerCustom email sender trigger sources +Trigger sourcesParametersSet upExample: decrypt code @@ -42,0 +43,15 @@ To set up this trigger, perform the following steps: +## Custom email sender Lambda trigger sources + +The following table shows the triggering events for custom email trigger sources in your Lambda code. + +`TriggerSource value` | Event +---|--- +`CustomEmailSender_SignUp` | A user signs up and Amazon Cognito sends a welcome message. +`CustomEmailSender_Authentication` | A user signs in and Amazon Cognito sends an multi-factor authentication (MFA) code. +`CustomEmailSender_ForgotPassword` | A user requests a code to reset their password. +`CustomEmailSender_ResendCode` | A user requests a replacement account-confirmation code. +`CustomEmailSender_UpdateUserAttribute` | A user updates an email address or phone number attribute and Amazon Cognito sends a code to verify the attribute. +`CustomEmailSender_VerifyUserAttribute` | A user creates a new email address or phone number attribute and Amazon Cognito sends a code to verify the attribute. +`CustomEmailSender_AdminCreateUser` | You create a new user in your user pool and Amazon Cognito sends them a temporary password. +`CustomEmailSender_AccountTakeOverNotification` | Amazon Cognito detects an attempt to take over a user account and sends the user a notification. + @@ -180 +195 @@ To remove a custom sender Lambda trigger with an `UpdateUserPool` API request, o -### Code example +## Code example @@ -239,15 +253,0 @@ The Amazon Resource Name (ARN) of the KMS key that you want to use to encrypt an -## Custom email sender Lambda trigger sources - -The following table shows the triggering events for custom email trigger sources in your Lambda code. - -`TriggerSource value` | Event ----|--- -`CustomEmailSender_SignUp` | A user signs up and Amazon Cognito sends a welcome message. -`CustomEmailSender_Authentication` | A user signs in and Amazon Cognito sends an multi-factor authentication (MFA) code. -`CustomEmailSender_ForgotPassword` | A user requests a code to reset their password. -`CustomEmailSender_ResendCode` | A user requests a replacement account-confirmation code. -`CustomEmailSender_UpdateUserAttribute` | A user updates an email address or phone number attribute and Amazon Cognito sends a code to verify the attribute. -`CustomEmailSender_VerifyUserAttribute` | A user creates a new email address or phone number attribute and Amazon Cognito sends a code to verify the attribute. -`CustomEmailSender_AdminCreateUser` | You create a new user in your user pool and Amazon Cognito sends them a temporary password. -`CustomEmailSender_AccountTakeOverNotification` | Amazon Cognito detects an attempt to take over a user account and sends the user a notification. - @@ -260 +260 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Custom sender Lambda triggers +Custom senders @@ -262 +262 @@ Custom sender Lambda triggers -Custom SMS sender Lambda trigger +Custom SMS sender