accountRecoverySetting
construct an aws.sdk.kotlin.services.cognitoidentityprovider.model.AccountRecoverySettingType inside the given block
The available verified method a user can use to recover their password when they call ForgotPassword
. You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. Email MFA is also disqualifying for account recovery with email. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred over email.
As a best practice, configure both verified_email
and verified_phone_number
, with one having a higher priority than the other.