AWS Security ChangesHomeSearch

AWS cognito: Grammar and hyphenation fixes in Cognito domain docs

Service: cognito · 2026-10-21 · Documentation low

File: cognito/latest/developerguide/cognito-user-pools-assign-domain.md

Summary

Wording edits: 'that's owned' to 'that is owned', 'will provide' to 'provides', and 'fully-qualified' to 'fully qualified'. No change to passkey RP ID or discovery endpoint security behavior.

Security assessment

The diff only changes grammar and hyphenation in existing text about passkey RP IDs and OIDC discovery endpoints; it does not add or modify security guidance.

Evidence

When you set up user pool authentication with [passkeys](./amazon-cognito-user-pools-authentication-flow-methods.html#amazon-cognito-user-pools-authentication-flow-methods-passkey), you must set a relying party (RP) ID. When you have a custom domain and a prefix domain, you can set the RP ID only as your custom domain. To set a prefix domain as the RP ID in the Amazon Cognito console, delete your custom domain or enter the fully qualified domain name (FQDN) of the prefix domain as a **Third-party domain**.

Diff

diff --git a/cognito/latest/developerguide/cognito-user-pools-assign-domain.md b/cognito/latest/developerguide/cognito-user-pools-assign-domain.md
index 275176a..800786b 100644
--- a//cognito/latest/developerguide/cognito-user-pools-assign-domain.md
+++ b//cognito/latest/developerguide/cognito-user-pools-assign-domain.md
@@ -59 +59 @@ It can take Amazon Cognito up to a minute to launch or update the branding versi
-You can set up a user pool with both a custom domain and a prefix domain that's owned by AWS. Because the user pool [discovery endpoints](./federation-endpoints.html) are hosted at a different domain, they only serve the _custom domain_. For example, your `openid-configuration` will provide a single value for `"authorization_endpoint"` of `"https://auth.example.com/oauth2/authorize"`.
+You can set up a user pool with both a custom domain and a prefix domain that's owned by AWS. Because the user pool [discovery endpoints](./federation-endpoints.html) are hosted at a different domain, they only serve the _custom domain_. For example, your `openid-configuration` provides a single value for `"authorization_endpoint"` of `"https://auth.example.com/oauth2/authorize"`.
@@ -65 +65 @@ When you have both custom and prefix domains in a user pool, you can use the cus
-When you set up user pool authentication with [passkeys](./amazon-cognito-user-pools-authentication-flow-methods.html#amazon-cognito-user-pools-authentication-flow-methods-passkey), you must set a relying party (RP) ID. When you have a custom domain and a prefix domain, you can set the RP ID only as your custom domain. To set a prefix domain as the RP ID in the Amazon Cognito console, delete your custom domain or enter the fully-qualified domain name (FQDN) of the prefix domain as a **Third-party domain**.
+When you set up user pool authentication with [passkeys](./amazon-cognito-user-pools-authentication-flow-methods.html#amazon-cognito-user-pools-authentication-flow-methods-passkey), you must set a relying party (RP) ID. When you have a custom domain and a prefix domain, you can set the RP ID only as your custom domain. To set a prefix domain as the RP ID in the Amazon Cognito console, delete your custom domain or enter the fully qualified domain name (FQDN) of the prefix domain as a **Third-party domain**.