AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-22 · Documentation low

File: cli/latest/reference/cognito-idp/forgot-password.md

Summary

Updated documentation to clarify password reset confirmation code delivery methods and username alias types. Added reference to AccountRecoverySetting configuration.

Security assessment

The change clarifies security-related account recovery mechanisms (email/phone delivery and AccountRecoverySetting) but does not indicate a security vulnerability fix. Enhances documentation of security features.

Diff

diff --git a/cli/latest/reference/cognito-idp/forgot-password.md b/cli/latest/reference/cognito-idp/forgot-password.md
index edf0e968d..33cc746df 100644
--- a//cli/latest/reference/cognito-idp/forgot-password.md
+++ b//cli/latest/reference/cognito-idp/forgot-password.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.15 Command Reference](../../index.html) »
@@ -60 +60 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c
-Sends a password-reset confirmation code for the currently signed-in user.
+Sends a password-reset confirmation code to the email address or phone number of the requested username. The message delivery method is determined by the user’s available attributes and the `AccountRecoverySetting` configuration of the user pool.
@@ -62 +62 @@ Sends a password-reset confirmation code for the currently signed-in user.
-For the `Username` parameter, you can use the username or user alias.
+For the `Username` parameter, you can use the username or an email, phone, or preferred username alias.
@@ -363 +363 @@ CodeDeliveryDetails -> (structure)
-  * [AWS CLI 2.28.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.15 Command Reference](../../index.html) »