AWS Security ChangesHomeSearch

AWS AWSCloudFormation documentation change

Service: AWSCloudFormation · 2026-07-04 · Documentation medium

File: AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.md

Summary

Added IssuerConfiguration and KeyConfiguration properties with documentation about token issuing and encryption settings

Security assessment

New properties document security features (token issuing configuration and encryption settings) but lack evidence of addressing specific vulnerabilities. Changes enhance security documentation without referencing security incidents.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.md
index b6a70657c..fb052e6fd 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpool.md
@@ -38,0 +39,2 @@ To declare this entity in your CloudFormation template, use the following syntax
+          "IssuerConfiguration" : [IssuerConfiguration](./aws-properties-cognito-userpool-issuerconfiguration.html),
+          "KeyConfiguration" : [KeyConfiguration](./aws-properties-cognito-userpool-keyconfiguration.html),
@@ -84,0 +87,4 @@ To declare this entity in your CloudFormation template, use the following syntax
+      IssuerConfiguration: 
+        [IssuerConfiguration](./aws-properties-cognito-userpool-issuerconfiguration.html)
+      KeyConfiguration: 
+        [KeyConfiguration](./aws-properties-cognito-userpool-keyconfiguration.html)
@@ -282,0 +289,22 @@ _Required_ : No
+
+`IssuerConfiguration`
+    
+
+The issuer configuration for the user pool, including token issuing settings.
+
+_Required_ : No
+
+ _Type_ : [IssuerConfiguration](./aws-properties-cognito-userpool-issuerconfiguration.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)
+
+`KeyConfiguration`
+    
+
+The key configuration for the user pool, including encryption settings.
+
+_Required_ : No
+
+ _Type_ : [KeyConfiguration](./aws-properties-cognito-userpool-keyconfiguration.html)
+
+ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)