AWS res documentation change

Service: res · 2025-10-16 · Documentation medium

File: res/latest/ug/prerequisites.md

Summary

Added 'Create a Cognito user pool (Optional)' section with required custom attributes for authentication

Security assessment

The change provides documentation for configuring Cognito user pools with security-related attributes (e.g., password policies, UID ranges), which supports secure authentication workflows. No explicit security vulnerability is addressed.

Diff

diff --git a/res/latest/ug/prerequisites.md b/res/latest/ug/prerequisites.md
index 73e5d0e61..76dd6d35f 100644
--- a//res/latest/ug/prerequisites.md
+++ b//res/latest/ug/prerequisites.md
@@ -5 +5 @@
-Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional)
+Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a Cognito user pool (Optional)Create a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional)
@@ -16,0 +17,2 @@ Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pa
+  * Create a Cognito user pool (Optional)
+
@@ -69,0 +72,12 @@ Your AWS account has default quotas, formerly referred to as limits, for each AW
+## Create a Cognito user pool (Optional)
+
+You have the option to import an existing Cognito User Pool for user and client authentication when you install RES. Otherwise, RES will create a new Cognito User Pool automatically. The pre-existing User Pool needs to have the following sign-up custom attributes:
+
+Name | Type | Min value/length | Max value/length | Mutable  
+---|---|---|---|---  
+custom:aws_region | String |  |  | TRUE  
+custom:cluster_name | String |  |  | TRUE  
+custom:password_last_set  | Number |  |  | TRUE  
+custom:password_max_age | Number |  |  | TRUE  
+custom:uid | Number | 2000200001 | 4294967294 | TRUE  
+  
@@ -346 +360 @@ If you are setting up `http_proxy` and `https_proxy` environment variables, the
-                               " > /etc/environment   
+                               " >> /etc/environment launch template