AWS cognito: Hyphenation fix in federated user password guidance
Summary
Editorial change removing the hyphen in "automatically-created" to "automatically created" in the note about setting passwords on federated user profiles. The surrounding security best-practice guidance (don't set passwords on federated profiles; use AdminLinkProviderForUser) is unchanged.
Security assessment
The only textual delta is the removal of a hyphen in a compound adjective. The security recommendation about not setting passwords on federated profiles and linking users with AdminLinkProviderForUser already existed and was not modified, so no new security content or vulnerability fix is introduced.
Evidence
* You can set a password for the automatically created federated user profile in an [AdminSetUserPassword](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserPassword.html) API request.
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.md b/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.md index 720e4a1..71ee56d 100644 --- a//cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.md +++ b//cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.md @@ -79 +79 @@ The user profile `Carlos` in your user pool now has the following `identities` a - * You can set a password for the automatically-created federated user profile in an [AdminSetUserPassword](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserPassword.html) API request. That user's status then changes from `EXTERNAL_PROVIDER` to `CONFIRMED`. A user in this state can sign in as a federated user, and initiate authentication flows in the API like a linked local user. They can also modify their password and attributes in token-authenticated API requests like [ChangePassword](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ChangePassword.html) and [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html). As a best security practice and to keep users in sync with your external IdP, don't set passwords on federated user profiles. Instead, link users to local profiles with `AdminLinkProviderForUser`. + * You can set a password for the automatically created federated user profile in an [AdminSetUserPassword](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserPassword.html) API request. That user's status then changes from `EXTERNAL_PROVIDER` to `CONFIRMED`. A user in this state can sign in as a federated user, and initiate authentication flows in the API like a linked local user. They can also modify their password and attributes in token-authenticated API requests like [ChangePassword](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ChangePassword.html) and [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html). As a best security practice and to keep users in sync with your external IdP, don't set passwords on federated user profiles. Instead, link users to local profiles with `AdminLinkProviderForUser`.