AWS cli documentation change
Summary
Enhanced ClientMetadata documentation for password reset workflows, added --cli-error-format parameter, and updated Lambda trigger references.
Security assessment
The changes provide clearer guidance about ClientMetadata usage in password reset Lambda triggers. While this improves documentation for security-adjacent features (custom workflows), there's no evidence of addressing a specific vulnerability. The updates help prevent misconfiguration but don't directly resolve a security flaw.
Diff
diff --git a/cli/latest/reference/cognito-idp/admin-reset-user-password.md b/cli/latest/reference/cognito-idp/admin-reset-user-password.md index 37d0fd600..6cd6c0ad3 100644 --- a//cli/latest/reference/cognito-idp/admin-reset-user-password.md +++ b//cli/latest/reference/cognito-idp/admin-reset-user-password.md @@ -15 +15 @@ - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) » @@ -109,0 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit + [--cli-error-format <value>] @@ -140 +141 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit -> A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. +> A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers. You create custom workflows by assigning Lambda functions to user pool triggers. @@ -142 +143 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit -> You create custom workflows by assigning Lambda functions to user pool triggers. The `AdminResetUserPassword` API operation invokes the function that is assigned to the _custom message_ trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminResetUserPassword request. In your function code in Lambda, you can process the `clientMetadata` value to enhance your workflow for your specific needs. +> When Amazon Cognito invokes any of these functions, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute that provides the data that you assigned to the ClientMetadata parameter in your request. In your function code, you can process the `clientMetadata` value to enhance your workflow for your specific needs. @@ -144 +145 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit -> For more information, see [Using Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the _Amazon Cognito Developer Guide_ . +> To review the Lambda trigger types that Amazon Cognito invokes at runtime with API requests, see [Connecting API actions to Lambda triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-working-with-lambda-triggers.html#lambda-triggers-by-event) in the _Amazon Cognito Developer Guide_ . @@ -217,0 +219 @@ The formatting style for command output. + * off @@ -283,0 +286,13 @@ Disable automatically prompt for CLI input parameters. +`--cli-error-format` (string) + +The formatting style for error output. By default, errors are displayed in enhanced format. + + * legacy + * json + * yaml + * text + * table + * enhanced + + + @@ -316 +331 @@ None - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) »