AWS cognito documentation change
Summary
Updated feature plan descriptions and added details about managed login pages, OIDC authorization, and user group functionality
Security assessment
Changes are descriptive updates about feature availability in different tiers, with no direct security implications or vulnerability references
Diff
diff --git a/cognito/latest/developerguide/cognito-sign-in-feature-plans.md b/cognito/latest/developerguide/cognito-sign-in-feature-plans.md index eebab4b3a..42cc5d0fd 100644 --- a//cognito/latest/developerguide/cognito-sign-in-feature-plans.md +++ b//cognito/latest/developerguide/cognito-sign-in-feature-plans.md @@ -37 +37 @@ You can switch between feature plans at any time to fit the requirements of your -Lite is a low-cost feature plan for user pools with lower numbers of monthly active users. This plan is sufficient for user directories with basic authentication features. It includes sign-in features and the classic hosted UI, a slimmer, less-customizable version of managed login. Many newer features, like access-token customization and passkey authentication, aren't included in the Lite plan. +Lite is a low-cost feature plan for user pools with lower numbers of monthly active users. This plan is sufficient for user directories with basic authentication features. It includes sign-in features and the classic hosted UI, a slimmer, less-customizable predecessor to managed login. Many newer features, like access-token customization and passkey authentication, aren't included in the Lite plan. @@ -124,2 +124,2 @@ Passkey sign-in with hardware or software FIDO2 authenticators | Permit users to -Sign-up and sign-in | | Lite + Essentials + Plus -User groups | | Lite + Essentials + Plus +Sign-up and sign-in | Perform authentication operations and let new users register for an account in your application. | Lite + Essentials + Plus +User groups | Create logical groupings of users and assign default IAM roles for identity pool operations. | Lite + Essentials + Plus @@ -127,2 +127,2 @@ Sign-in with social, SAML, and OIDC providers | Provide users with the options t -OAuth 2.0 and OIDC authorization server | | Lite + Essentials + Plus -Managed login pages | | Lite + Essentials + Plus +OAuth 2.0/OIDC authorization server | Act as a OIDC issuer. | Lite + Essentials + Plus +Login pages | A hosted collection of webpages for authentication. Managed login is available in the Essentials and Plus tiers. The classic hosted UI is available in all feature tiers. | Lite + Essentials + Plus @@ -130,3 +130,3 @@ Password, custom, refresh-token, and SRP authentication | Prompt users for a use -Machine-to-machine (M2M) with client credentials | | Lite + Essentials + Plus -API authorization with resource servers | | Lite + Essentials + Plus -User import | | Lite + Essentials + Plus +Machine-to-machine (M2M) with client credentials | Issue access tokens for authorization of non-human entities. | Lite + Essentials + Plus +API authorization with resource servers | Issue access tokens with custom scopes that authorize access to external systems. | Lite + Essentials + Plus +User import | Set up import jobs from CSV files and perform just-in-time migration of users as they sign in. | Lite + Essentials + Plus