AWS cognito: Hyphenation fix in CloudTrail PII masking note
Summary
Changed 'personally-identifying information' to 'personally identifying information' in the note about Cognito obscuring private fields in CloudTrail events. Purely editorial.
Security assessment
Only a hyphenation/grammar edit; the existing statement about HIDDEN_DUE_TO_SECURITY_REASONS masking of passwords and tokens is unchanged, so no new security documentation or fix is introduced.
Evidence
+Because user pools and identity pools process user data, Amazon Cognito obscures some private fields in your CloudTrail events with the value `HIDDEN_DUE_TO_SECURITY_REASONS`. For examples of fields that Amazon Cognito doesn't populate to events, see [Example Amazon Cognito events](./understanding-amazon-cognito-entries.html). Amazon Cognito only obscures some fields that commonly contain user information, like passwords and tokens. Amazon Cognito doesn't perform any automatic detection or masking of personally identifying information that you populate to non-private fields in your API requests.
Diff
diff --git a/cognito/latest/developerguide/logging-using-cloudtrail.md b/cognito/latest/developerguide/logging-using-cloudtrail.md index dbe3394..d7bea43 100644 --- a//cognito/latest/developerguide/logging-using-cloudtrail.md +++ b//cognito/latest/developerguide/logging-using-cloudtrail.md @@ -60 +60 @@ For more information, see the [CloudTrail userIdentity element](https://docs.aws -Because user pools and identity pools process user data, Amazon Cognito obscures some private fields in your CloudTrail events with the value `HIDDEN_DUE_TO_SECURITY_REASONS`. For examples of fields that Amazon Cognito doesn't populate to events, see [Example Amazon Cognito events](./understanding-amazon-cognito-entries.html). Amazon Cognito only obscures some fields that commonly contain user information, like passwords and tokens. Amazon Cognito doesn't perform any automatic detection or masking of personally-identifying information that you populate to non-private fields in your API requests. +Because user pools and identity pools process user data, Amazon Cognito obscures some private fields in your CloudTrail events with the value `HIDDEN_DUE_TO_SECURITY_REASONS`. For examples of fields that Amazon Cognito doesn't populate to events, see [Example Amazon Cognito events](./understanding-amazon-cognito-entries.html). Amazon Cognito only obscures some fields that commonly contain user information, like passwords and tokens. Amazon Cognito doesn't perform any automatic detection or masking of personally identifying information that you populate to non-private fields in your API requests.