AWS cognito: Grammar fix in custom domain hijacking protection note
Summary
Minor grammar/wording edits: 'instead the' to 'instead of the', 'will be associated' to 'is associated', and 'will return' to 'returns'. No semantic change to the existing domain-hijacking protection guidance.
Security assessment
The only security-adjacent sentence is an existing note about parent-domain verification to prevent accidental domain hijacking; the diff merely changes 'will return' to 'returns' and other grammar, not the security behavior or guidance.
Evidence
Amazon Cognito verifies that there is a DNS record for the parent domain of your custom domain to protect against accidental hijacking of production domains. If you do not have a DNS record for the parent domain, Amazon Cognito returns an error when you attempt to set the custom domain. A Start of Authority (SOA) record isn't a sufficient DNS record for the purposes of parent-domain verification.
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.md b/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.md index 44cd0ab..490cf98 100644 --- a//cognito/latest/developerguide/cognito-user-pools-add-custom-domain.md +++ b//cognito/latest/developerguide/cognito-user-pools-add-custom-domain.md @@ -11 +11 @@ Adding a custom domainPrerequisitesStep 1: Enter your custom domain nameStep 2: -After you set up an app client, you can configure your user pool with a custom domain for the domain services of [managed login](./cognito-user-pools-managed-login.html). With a custom domain, users can sign in to your application using your own web address instead the default `amazoncognito.com` [prefix domain](./cognito-user-pools-assign-domain-prefix.html). Custom domains improve user trust in your application with a familiar domain name, especially when the root domain matches the domain that hosts your application. Custom domains can improve compliance with organizational security requirements. +After you set up an app client, you can configure your user pool with a custom domain for the domain services of [managed login](./cognito-user-pools-managed-login.html). With a custom domain, users can sign in to your application using your own web address instead of the default `amazoncognito.com` [prefix domain](./cognito-user-pools-assign-domain-prefix.html). Custom domains improve user trust in your application with a familiar domain name, especially when the root domain matches the domain that hosts your application. Custom domains can improve compliance with organizational security requirements. @@ -56 +56 @@ You might need to obtain a new certificate for your custom domain's subdomain if - * A public SSL/TLS certificate managed by ACM in US East (N. Virginia). The certificate must be in us-east-1 because the certificate will be associated with a distribution in CloudFront, a global service. + * A public SSL/TLS certificate managed by ACM in US East (N. Virginia). The certificate must be in us-east-1 because the certificate is associated with a distribution in CloudFront, a global service. @@ -197 +197 @@ You can also create a new hosted zone for your custom domain with a delegation s -Amazon Cognito verifies that there is a DNS record for the parent domain of your custom domain to protect against accidental hijacking of production domains. If you do not have a DNS record for the parent domain, Amazon Cognito will return an error when you attempt to set the custom domain. A Start of Authority (SOA) record isn't a sufficient DNS record for the purposes of parent-domain verification. +Amazon Cognito verifies that there is a DNS record for the parent domain of your custom domain to protect against accidental hijacking of production domains. If you do not have a DNS record for the parent domain, Amazon Cognito returns an error when you attempt to set the custom domain. A Start of Authority (SOA) record isn't a sufficient DNS record for the purposes of parent-domain verification.