AWS Security ChangesHomeSearch

AWS cognito medium security documentation change

Service: cognito · 2026-02-28 · Security-related medium

File: cognito/latest/developerguide/cognito-document-history.md

Summary

Added documentation about client secret rotation capabilities

Security assessment

Introduces secret rotation capabilities which directly improve security posture by enabling credential rotation without downtime

Diff

diff --git a/cognito/latest/developerguide/cognito-document-history.md b/cognito/latest/developerguide/cognito-document-history.md
index a925c1497..ad8112998 100644
--- a//cognito/latest/developerguide/cognito-document-history.md
+++ b//cognito/latest/developerguide/cognito-document-history.md
@@ -10,0 +11 @@ Change| Description| Date
+[Client secret rotation for app clients.](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html)| You can now associate up to two secrets per app client for secret rotation. You can also provide your own custom secret value when adding a secret.| January 30, 2026