AWS Security ChangesHomeSearch

AWS cli medium security documentation change

Service: cli · 2026-01-31 · Security-related medium

File: cli/latest/reference/cognito-idp/list-user-pools.md

Summary

Added documentation for InboundFederation Lambda trigger configuration in UserPools output structure.

Security assessment

Extends security documentation to list-user-pools command, enabling discovery of user pools using the attribute transformation feature. Security impact: Facilitates security audits by identifying pools using federated attribute transformation capabilities.

Diff

diff --git a/cli/latest/reference/cognito-idp/list-user-pools.md b/cli/latest/reference/cognito-idp/list-user-pools.md
index ccb3ff728..e1cf8a14d 100644
--- a//cli/latest/reference/cognito-idp/list-user-pools.md
+++ b//cli/latest/reference/cognito-idp/list-user-pools.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.12 Command Reference](../../index.html) »
@@ -540,0 +541,28 @@ UserPools -> (list)
+>>> 
+>>> InboundFederation -> (structure)
+>>>
+>>>> The configuration of an inbound federation Lambda trigger. This trigger can transform federated user attributes during the authentication with external identity providers.
+>>>> 
+>>>> LambdaVersion -> (string) [required]
+>>>>
+>>>>> The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
+>>>>> 
+>>>>> You must use a `LambdaVersion` of `V1_0` with an inbound federation function.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `V1_0`
+>>>>> 
+
+>>>> 
+>>>> LambdaArn -> (string) [required]
+>>>>
+>>>>> The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `20`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `arn:[\w+=/,.@-]+:[\w+=/,.@-]+:([\w+=/,.@-]*)?:[0-9]+:[\w+=/,.@-]+(:[\w+=/,.@-]+)?(:[\w+=/,.@-]+)?`
+>>>>> 
+
@@ -582 +610 @@ NextToken -> (string)
-  * [AWS CLI 2.33.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.12 Command Reference](../../index.html) »