AWS serverless-application-model documentation change
Summary
Updated UserPoolArn property to accept either a String or List type, allowing specification of multiple user pool ARNs for Cognito authorizer
Security assessment
This change expands the UserPoolArn property to accept multiple user pool ARNs as a list, which is a feature enhancement for multi-user pool authorization scenarios. There is no evidence of security vulnerability remediation or security incident response in this change.
Diff
diff --git a/serverless-application-model/latest/developerguide/sam-property-api-cognitoauthorizer.md b/serverless-application-model/latest/developerguide/sam-property-api-cognitoauthorizer.md index 7fdcf4ed8..b22dd6245 100644 --- a//serverless-application-model/latest/developerguide/sam-property-api-cognitoauthorizer.md +++ b//serverless-application-model/latest/developerguide/sam-property-api-cognitoauthorizer.md @@ -24 +24 @@ To declare this entity in your AWS Serverless Application Model (AWS SAM) templa - UserPoolArn: String + UserPoolArn: String | List @@ -54 +54 @@ _CloudFormation compatibility_ : This property is unique to AWS SAM and doesn't -Can refer to a user pool/specify a userpool arn to which you want to add this cognito authorizer +The Amazon Cognito user pool ARN(s) to use for authorization. Specify a single ARN as a string, or multiple ARNs as a list to use multiple user pools. @@ -56 +56 @@ Can refer to a user pool/specify a userpool arn to which you want to add this co -_Type_ : String +_Type_ : String | List