AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-02-28 · Documentation low

File: cli/latest/reference/cognito-idp/admin-confirm-sign-up.md

Summary

Updated CLI version, added --cli-error-format parameter, and enhanced ClientMetadata/Lambda trigger documentation

Security assessment

While the changes clarify Lambda trigger integration with ClientMetadata (security-adjacent configuration), they provide general documentation improvements rather than addressing specific vulnerabilities or introducing new security features. Error format addition is a general CLI enhancement.

Diff

diff --git a/cli/latest/reference/cognito-idp/admin-confirm-sign-up.md b/cli/latest/reference/cognito-idp/admin-confirm-sign-up.md
index 9953c0f02..d921182f9 100644
--- a//cli/latest/reference/cognito-idp/admin-confirm-sign-up.md
+++ b//cli/latest/reference/cognito-idp/admin-confirm-sign-up.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.0 Command Reference](../../index.html) »
@@ -105,0 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit
+    [--cli-error-format <value>]
@@ -136 +137 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit
-> A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
+> A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning Lambda functions to user pool triggers.
@@ -138 +139 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit
-> If your user pool configuration includes triggers, the AdminConfirmSignUp API action invokes the Lambda function that is specified for the _post confirmation_ trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. In this payload, the `clientMetadata` attribute provides the data that you assigned to the ClientMetadata parameter in your AdminConfirmSignUp request. In your function code in Lambda, you can process the ClientMetadata value to enhance your workflow for your specific needs.
+> When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the `clientMetadata` value to enhance your workflow for your specific needs.
@@ -140 +141 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit
-> For more information, see [Using Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the _Amazon Cognito Developer Guide_ .
+> To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see [Connecting API actions to Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event) in the _Amazon Cognito Developer Guide_ .
@@ -213,0 +215 @@ The formatting style for command output.
+  * off
@@ -279,0 +282,13 @@ Disable automatically prompt for CLI input parameters.
+`--cli-error-format` (string)
+
+The formatting style for error output. By default, errors are displayed in enhanced format.
+
+  * legacy
+  * json
+  * yaml
+  * text
+  * table
+  * enhanced
+
+
+
@@ -312 +327 @@ None
-  * [AWS CLI 2.33.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.0 Command Reference](../../index.html) »