Cognito

AWS Cognito manages authentication and user identity, with risks around weak configurations, token exposure, and improper access controls.

Cognito handles user authentication and identity management. Misconfiguration can result in weak authentication flows, insecure token handling, or unintended access to resources. Strong policies and secure integration are essential.

Cognito Documentation

Cognito User Pools Should Have Delete Protection

moderate

aws cognito

Cognito User Pools Should Have Delete Protection

AWS Cognito User Pools should utilise Delete Protection to avoid accidental deletion