Medium
Cognito
Regional
Cognito user pools should have threat protection activated with full function enforcement mode for standard authentication
FSBP
Description
Verifies that Cognito user pools have advanced security enabled and set to full enforcement mode, not audit mode.
Remediation
Enable advanced security with full enforcement for your Cognito user pools to protect against compromised credentials and account takeover attacks.
Steps
- Navigate to the Amazon Cognito console
- Go to the User pools section
- Select the user pool that needs advanced security
- Go to the 'Sign-in experience' tab
- Scroll down to 'Advanced security' section
- Enable 'Advanced security features'
- Set the mode to 'Enforce' (not just 'Audit')
- Configure the risk-based adaptive authentication settings
- Save the changes
- Verify that advanced security is now enforced
Compliance
FSBP