AWS cognito documentation change
Summary
Clarified deletion protection workflow and moved configuration to 'User pool security' tab
Security assessment
Improves documentation of security control (accidental deletion prevention). Moving to security tab better surfaces this protection feature but doesn't fix a vulnerability.
Diff
diff --git a/cognito/latest/developerguide/user-pool-settings-deletion-protection.md b/cognito/latest/developerguide/user-pool-settings-deletion-protection.md index 6f9c653cc..1eeb18f3d 100644 --- a//cognito/latest/developerguide/user-pool-settings-deletion-protection.md +++ b//cognito/latest/developerguide/user-pool-settings-deletion-protection.md @@ -9 +9 @@ -To make it so that your administrators don't accidentally delete your user pool, activate deletion protection. With deletion protection active, you must confirm that you want to delete your user pool before you delete it. When you delete a user pool in the AWS Management Console, you can deactivate deletion protection at the same time. When you accept the prompt to deactivate deletion protection and confirm your intention to delete, as shown in the following image, Amazon Cognito deletes your user pool. +To make it so that your administrators don't accidentally delete your user pool, activate deletion protection. With deletion protection active, you can only delete your user pool after you confirm that you want to delete it. When you delete a user pool in the AWS Management Console, you can deactivate deletion protection at the same time. When you accept the prompt to deactivate deletion protection and confirm your intention to delete, as shown in the following image, Amazon Cognito deletes your user pool. @@ -19 +19 @@ You can activate or deactivate deletion protection status in the **Deletion prot -# To configure deletion protection +###### To configure deletion protection @@ -27 +27 @@ You can activate or deactivate deletion protection status in the **Deletion prot - 4. Choose the **Settings** menu and navigate to the **Deletion Protection** tab. Select **Activate** or **Deactivate**. + 4. Choose the **Settings** menu, navigate to the **User pool security** tab, and locate **Deletion Protection**. Select **Activate** or **Deactivate**.