All checks
Medium
Cognito user pools should have threat protection activated with full function enforcement mode for standard authentication
Verifies that Cognito user pools have advanced security enabled and set to full enforcement mode, not audit mode.
- service
- Cognito
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable advanced security with full enforcement for your Cognito user pools to protect against compromised credentials and account takeover attacks.
- Navigate to the Amazon Cognito console
- Go to the User pools section
- Select the user pool that needs advanced security
- Go to the 'Sign-in experience' tab
- Scroll down to 'Advanced security' section
- Enable 'Advanced security features'
- Set the mode to 'Enforce' (not just 'Audit')
- Configure the risk-based adaptive authentication settings
- Save the changes
- Verify that advanced security is now enforced
See which of your accounts this check is failing on.
Book a demo