AWS Security ChangesHomeSearch

AWS cognito documentation change

Service: cognito · 2025-08-28 · Documentation low

File: cognito/latest/developerguide/cognito-events.md

Summary

Removed JSON example of a Lambda resource-based policy for Cognito

Security assessment

Removal of a policy example without explicit evidence of addressing a security issue. Likely documentation cleanup.

Diff

diff --git a/cognito/latest/developerguide/cognito-events.md b/cognito/latest/developerguide/cognito-events.md
index 84d3fee0d..e70200d11 100644
--- a//cognito/latest/developerguide/cognito-events.md
+++ b//cognito/latest/developerguide/cognito-events.md
@@ -41,31 +40,0 @@ The following AWS Lambda resource-based policy grants Amazon Cognito a limited a
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Id": "default",
-        "Statement": [
-            {
-                "Sid": "lambda-allow-cognito-my-function",
-                "Effect": "Allow",
-                "Principal": {
-                    "Service": "cognito-sync.amazonaws.com"
-                },
-                "Action": "lambda:InvokeFunction",
-                "Resource": "arn:aws:lambda:us-east-1:111122223333:function/MyFunction",
-                "Condition": {
-                    "StringEquals": {
-                        "AWS:SourceAccount": "111122223333"
-                    },
-                    "ArnLike": {
-                        "AWS:SourceArn": "arn:aws:cognito-identity:us-east-1:111122223333:identitypool/us-east-1:abcdefg-1234-5678-910a-0e8443553f95"
-                    }
-                }
-            }
-        ]
-    }
-    
-