AWS cognito: Removed Cognito password hash import infrastructure limitation note
Summary
Deleted the Important note explaining that password hash import requires the modern Cognito infrastructure and that some user pools are not yet eligible.
Security assessment
The change only removes an availability/eligibility caveat about password hash import; it does not alter guidance on how password hashes are handled or introduce any new security control or vulnerability.
Evidence
-Password hash import is not available for all user pools at this time. Password hash import requires the modern Amazon Cognito infrastructure with enhanced capabilities and scalability. Some user pools are still on a previous infrastructure and AWS will upgrade them to the new infrastructure, which unlocks this feature. In the Amazon Cognito console, eligible user pools display the password hashing algorithm option when creating import jobs, and ineligible pools do not display this option. For more information, see [Amazon Cognito unlocks advanced capabilities with next-generation infrastructure](https://aws.amazon.com/blogs/security/amazon-cognito-unlocks-advanced-capabilities-with-next-generation-infrastructure/) in the AWS Security Blog.
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-using-import-tool.md b/cognito/latest/developerguide/cognito-user-pools-using-import-tool.md index 1c3ea09..2e0270d 100644 --- a//cognito/latest/developerguide/cognito-user-pools-using-import-tool.md +++ b//cognito/latest/developerguide/cognito-user-pools-using-import-tool.md @@ -707,4 +706,0 @@ When you migrate users from an existing authentication system to Amazon Cognito, -###### Important - -Password hash import is not available for all user pools at this time. Password hash import requires the modern Amazon Cognito infrastructure with enhanced capabilities and scalability. Some user pools are still on a previous infrastructure and AWS will upgrade them to the new infrastructure, which unlocks this feature. In the Amazon Cognito console, eligible user pools display the password hashing algorithm option when creating import jobs, and ineligible pools do not display this option. For more information, see [Amazon Cognito unlocks advanced capabilities with next-generation infrastructure](https://aws.amazon.com/blogs/security/amazon-cognito-unlocks-advanced-capabilities-with-next-generation-infrastructure/) in the AWS Security Blog. -