v3.1.0

[3.1.0] - 2022-07-14

Added

• CF template allows to connect external SAML identity provider to cognito user pool
• If SAML IdP is used, cognito-trigger function will add any federated user to ReadOnlyUserGroup after first login
• Added WAF protection to the CloudFront distribution
• Added Security relevant http headers in CloudFront responses

Changed

• Creation of ServiceLinkedRole can be skipped if it exists in spoke account
• Web UI will utilize Cognito Hosted UI instead of Amplify Authenticator component