AWS Security ChangesHomeSearch

AWS config high security documentation change

Service: config · 2025-06-16 · Security-related high

File: config/latest/developerguide/codepipeline-region-fanout-check.md

Summary

Replaced reference from 'cognito-user-pool-advanced-security-enabled' to 'cognito-identity-pool-unauth-access-check'

Security assessment

The change introduces a check for Cognito identity pool unauthorized access, which directly relates to security controls for authentication and access management. Unauthorized access to identity pools could lead to privilege escalation or resource exposure.

Diff

diff --git a/config/latest/developerguide/codepipeline-region-fanout-check.md b/config/latest/developerguide/codepipeline-region-fanout-check.md
index 98e207618..a70186f2d 100644
--- a//config/latest/developerguide/codepipeline-region-fanout-check.md
+++ b//config/latest/developerguide/codepipeline-region-fanout-check.md
@@ -40 +40 @@ codepipeline-deployment-count-check
-cognito-user-pool-advanced-security-enabled
+cognito-identity-pool-unauth-access-check