AWS cli medium security documentation change
Summary
Added documentation for InboundFederation Lambda trigger configuration in UserPool structure output.
Security assessment
Documents the same security feature as create-user-pool.md, enabling visibility into attribute transformation configurations. Security impact: Allows auditing of security-critical attribute transformation logic applied during federated authentication.
Diff
diff --git a/cli/latest/reference/cognito-idp/describe-user-pool.md b/cli/latest/reference/cognito-idp/describe-user-pool.md index 5ff76e079..0c8325f1d 100644 --- a//cli/latest/reference/cognito-idp/describe-user-pool.md +++ b//cli/latest/reference/cognito-idp/describe-user-pool.md @@ -15 +15 @@ - * [AWS CLI 2.33.8 Command Reference](../../index.html) » + * [AWS CLI 2.33.12 Command Reference](../../index.html) » @@ -954,0 +955,28 @@ UserPool -> (structure) +>> +>> InboundFederation -> (structure) +>> +>>> The configuration of an inbound federation Lambda trigger. This trigger can transform federated user attributes during the authentication with external identity providers. +>>> +>>> LambdaVersion -> (string) [required] +>>> +>>>> The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features. +>>>> +>>>> You must use a `LambdaVersion` of `V1_0` with an inbound federation function. +>>>> +>>>> Possible values: +>>>> +>>>> * `V1_0` +>>>> + +>>> +>>> LambdaArn -> (string) [required] +>>> +>>>> The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `20` +>>>> * max: `2048` +>>>> * pattern: `arn:[\w+=/,.@-]+:[\w+=/,.@-]+:([\w+=/,.@-]*)?:[0-9]+:[\w+=/,.@-]+(:[\w+=/,.@-]+)?(:[\w+=/,.@-]+)?` +>>>> + @@ -1724 +1752 @@ UserPool -> (structure) - * [AWS CLI 2.33.8 Command Reference](../../index.html) » + * [AWS CLI 2.33.12 Command Reference](../../index.html) »