AWS cognito: Add cross-link to user pool threat protection guidance
Summary
A new paragraph was added to the Security in Amazon Cognito page pointing readers to user pool-specific protections against malicious sign-up, sign-in, and account takeover (MFA, adaptive authentication, threat protection); a nav label was also updated.
Security assessment
The added line directs readers to authentication-hardening features (MFA, adaptive authentication, threat protection) against account takeover, i.e., security documentation, but it is a cross-reference rather than a fix for a specific vulnerability.
Evidence
+For user pool–specific protections against malicious sign-up, sign-in, and account takeover—MFA, adaptive authentication, and threat protection—see [Protecting user pools with threat protection](./managing-security.html).
Diff
diff --git a/cognito/latest/developerguide/security.md b/cognito/latest/developerguide/security.md index 01ccbd7..1f08258 100644 --- a//cognito/latest/developerguide/security.md +++ b//cognito/latest/developerguide/security.md @@ -21,0 +22,2 @@ This documentation helps you understand how to apply the shared responsibility m +For user pool–specific protections against malicious sign-up, sign-in, and account takeover—MFA, adaptive authentication, and threat protection—see [Protecting user pools with threat protection](./managing-security.html). + @@ -51 +53 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Customizing workflows with Amazon Cognito Events +Example application