AWS res documentation change
Summary
Added optional Cognito user pool creation step and configuration details for pre-existing user pools with required custom attributes.
Security assessment
The change documents authentication integration using Cognito user pools, which is a security feature. However, there's no evidence of addressing a specific vulnerability. It enhances security documentation by detailing authentication attribute requirements.
Diff
diff --git a/res/archive/release-minus-1/ug/prerequisites.md b/res/archive/release-minus-1/ug/prerequisites.md index 044bac759..816bf6ffb 100644 --- a//res/archive/release-minus-1/ug/prerequisites.md +++ b//res/archive/release-minus-1/ug/prerequisites.md @@ -5 +5 @@ -Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) +Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a Cognito user pool (Optional)Create a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) @@ -16,0 +17,2 @@ Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pa + * Create a Cognito user pool (Optional) + @@ -69,0 +72,12 @@ Your AWS account has default quotas, formerly referred to as limits, for each AW +## Create a Cognito user pool (Optional) + +You have the option to import an existing Cognito User Pool for user and client authentication when you install RES. Otherwise, RES will create a new Cognito User Pool automatically. The pre-existing User Pool needs to have the following sign-up custom attributes: + +Name | Type | Min value/length | Max value/length | Mutable +---|---|---|---|--- +custom:aws_region | String | | | TRUE +custom:cluster_name | String | | | TRUE +custom:password_last_set | Number | | | TRUE +custom:password_max_age | Number | | | TRUE +custom:uid | Number | 2000200001 | 4294967294 | TRUE + @@ -346 +360 @@ If you are setting up `http_proxy` and `https_proxy` environment variables, the - " > /etc/environment + " >> /etc/environment launch template