AWS Security ChangesHomeSearch

AWS cognito: Update auth-model link and add user pool replica API quotas

Service: cognito · 2026-10-09 · Documentation low

File: cognito/latest/developerguide/quotas.md

Summary

Fixed the 'differing authorization models' link to point to authentication-flows-public-server-side, added ListUserPoolReplicas to a quota category and CreateUserPoolReplica/UpdateUserPoolReplica/DeleteUserPoolReplica to another, and updated nav labels to 'Deploying and operating' / 'Multi-Region replication'.

Security assessment

Quota tables were updated for new multi-Region replication APIs and a documentation link was corrected; no security control or vulnerability is addressed.

Evidence

+  * [CreateUserPoolReplica](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolReplica.html)

Diff

diff --git a/cognito/latest/developerguide/quotas.md b/cognito/latest/developerguide/quotas.md
index f888abb..6177f9d 100644
--- a//cognito/latest/developerguide/quotas.md
+++ b//cognito/latest/developerguide/quotas.md
@@ -355 +355 @@ The following workflow describes how to increase your provisioned limit.
-Because Amazon Cognito has overlapping classes of API operations with [differing authorization models](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html), each operation belongs to a category. Each category has its own pooled quota for all member API operations, across all user pools in one AWS Region in your account. You can only request an increase to _adjustable_ category quotas. For more information, see Requesting a quota increase. Quota adjustments apply to the user pools in your account in a single Region. Amazon Cognito restricts operations in some categories3 to 5 requests per second (RPS), per user pool. The **Default quota (RPS)** additionally applies to all user pools in an AWS account.
+Because Amazon Cognito has overlapping classes of API operations with [differing authorization models](https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flows-public-server-side.html), each operation belongs to a category. Each category has its own pooled quota for all member API operations, across all user pools in one AWS Region in your account. You can only request an increase to _adjustable_ category quotas. For more information, see Requesting a quota increase. Quota adjustments apply to the user pools in your account in a single Region. Amazon Cognito restricts operations in some categories3 to 5 requests per second (RPS), per user pool. The **Default quota (RPS)** additionally applies to all user pools in an AWS account.
@@ -507,0 +508 @@ Category | Description | Default quota (RPS) | Adjustable
+  * [ListUserPoolReplicas](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolReplicas.html)
@@ -535,0 +537,3 @@ Category | Description | Default quota (RPS) | Adjustable
+  * [CreateUserPoolReplica](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolReplica.html)
+  * [UpdateUserPoolReplica](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolReplica.html)
+  * [DeleteUserPoolReplica](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolReplica.html)
@@ -725 +729 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Tagging resources
+Deploying and operating
@@ -727 +731 @@ Tagging resources
-Document history
+Multi-Region replication