AWS AWSCloudFormation documentation change
Summary
Clarified ClientMetadata usage with Lambda triggers and updated trigger documentation links
Security assessment
Improved documentation about Lambda trigger integration helps implement secure custom workflows, but doesn't address any specific security vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpooluser.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpooluser.md index 415a00579..bdbf9b36d 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpooluser.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpooluser.md @@ -57 +57 @@ To declare this entity in your AWS CloudFormation template, use the following sy -A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. +A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning AWS Lambda functions to user pool triggers. @@ -59 +59 @@ A map of custom key-value pairs that you can provide as input for any custom wor -You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the _pre sign-up_ trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `ClientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda, you can process the `clientMetadata` value to enhance your workflow for your specific needs. +When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the `clientMetadata` value to enhance your workflow for your specific needs. @@ -61 +61 @@ You create custom workflows by assigning AWS Lambda functions to user pool trigg -For more information, see [ Using Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the _Amazon Cognito Developer Guide_. +To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see [ Connecting API actions to Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event) in the _Amazon Cognito Developer Guide_.