Amazon Cognito
Review authentication changes with the user pool’s password policy, MFA setting, and Lambda trigger references.
Read the user pool configuration
Proofline reads selected Cognito user pools. The evidence includes the pool identity, password policy, MFA configuration, and the pre-signup, post-confirmation, and pre-token-generation Lambda trigger references.
These are the settings around the authentication code. A trigger ARN identifies the configured function; it does not describe what the function does.
Investigate a change to sign-up or tokens
A sign-up change may assume that a pre-signup trigger runs, or that the pool requires MFA. The configured trigger references and MFA setting let the review inspect those assumptions.
User records and groups are outside this read scope. The integration does not perform sign-ins, administer users, or inspect verification messages.
Connect your AWS account
Choose the AWS account and region for the environment under review. Apply the connection’s scoped read-only role, verify access, and check the environment’s evidence coverage.
Get started with GitHub