AWS cognito documentation change
Summary
Renamed 'branding designer' to 'branding editor' throughout the document, updated related links, and added a note about text modification limitations on login pages.
Security assessment
The change adds a note clarifying that text on managed login pages cannot be modified except for localization. This documentation update helps users understand security controls preventing unauthorized UI text changes that could enable phishing. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/cognito/latest/developerguide/managed-login-branding.md b/cognito/latest/developerguide/managed-login-branding.md index eaed38f00..6c92a9b83 100644 --- a//cognito/latest/developerguide/managed-login-branding.md +++ b//cognito/latest/developerguide/managed-login-branding.md @@ -9 +9 @@ Choose a branding experience and assign styles -You might want to provide a consistent user experience between your authentication service and your application. You can accomplish this goal either with custom forms and back-end API operations in an AWS SDK, or with managed login. Managed login and the classic hosted UI are web front ends for the component of your application that serves authentication with user pools. To synchronize your managed authentication services with your application UX, you have two customization options: the branding designer and hosted UI branding. You can choose your preferred experience in the Amazon Cognito console and with user pool API operations. +You might want to provide a consistent user experience between your authentication service and your application. You can accomplish this goal either with custom forms and back-end API operations in an AWS SDK, or with managed login. Managed login and the classic hosted UI are web front ends for the component of your application that serves authentication with user pools. To synchronize your managed authentication services with your application UX, you have two customization options: the branding editor and hosted UI branding. You can choose your preferred experience in the Amazon Cognito console and with user pool API operations. @@ -11 +11 @@ You might want to provide a consistent user experience between your authenticati -**The branding designer** +**The branding editor** @@ -14 +14 @@ You might want to provide a consistent user experience between your authenticati -The [branding designer](./managed-login-brandingdesigner.html) is the newest customization option for the newest user pools UI experience, [managed login](./cognito-user-pools-managed-login.html). The branding designer is a no-code visual editor for managed login assets and style, and a set of API operations for programmatic configuration of a large number of configuration options. User pools that you configure with a [domain](./cognito-user-pools-assign-domain.html) and managed login automatically render the branding-designer version of your login pages. +The [branding editor](./managed-login-brandingeditor.html) is the newest customization option for the newest user pools UI experience, [managed login](./cognito-user-pools-managed-login.html). The branding editor is a no-code visual editor for managed login assets and style, and a set of API operations for programmatic configuration of a large number of configuration options. User pools that you configure with a [domain](./cognito-user-pools-assign-domain.html) and managed login automatically render the branding-designer version of your login pages. @@ -20,0 +21,4 @@ The [hosted UI (classic) branding experience](./hosted-ui-classic-branding.html) +###### Note + +The branding editor and the classic branding experience modify the visual properties of your hosted authentication service. Currently, you can't modify the text that's displayed on your managed login pages, except to apply localization into one of several languages. For more information about localization, see [Managed login localization](./cognito-user-pools-managed-login.html#managed-login-localization). + @@ -31 +35 @@ You can assign styles to the app clients in a user pool where a domain is set to -When you create a style, you link it to an app client. To change a style assignment for an app client, you must first delete the original style. Currently, you can't copy settings between styles. You must do this programmatically. To replicate settings between styles and app clients, get the settings for a style with the [DescribeManagedLoginBranding](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBranding.html) API operation and apply them with [CreateManagedLoginBranding](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html) or [UpdateManagedLoginBranding](). You can't change the assigned styles of an app client—you can only delete the original and set a new one. For more information about managing styles with API and SDK operations, see [API and SDK operations for managed login branding](./managed-login-brandingdesigner.html#branding-designer-api). +When you create a style, you link it to an app client. To change a style assignment for an app client, you must first delete the original style. Currently, you can't copy settings between styles. You must do this programmatically. To replicate settings between styles and app clients, get the settings for a style with the [DescribeManagedLoginBranding](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBranding.html) API operation and apply them with [CreateManagedLoginBranding](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html) or [UpdateManagedLoginBranding](). You can't change the assigned styles of an app client—you can only delete the original and set a new one. For more information about managing styles with API and SDK operations, see [API and SDK operations for managed login branding](./managed-login-brandingeditor.html#branding-designer-api). @@ -56 +60 @@ At a high level, the process of assigning branding to a domain consists of the f - 4. To start configuring your branding settings, choose **Launch branding designer**. + 4. To start configuring your branding settings, choose **Launch branding editor**. @@ -63 +67 @@ At a high level, the process of assigning branding to a domain consists of the f - * [The branding designer and customizing managed login](./managed-login-brandingdesigner.html) + * [The branding editor and customizing managed login](./managed-login-brandingeditor.html)