This is the new *Amazon CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [Amazon CloudFormation User Guide](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::Cognito::UserPool AdvancedSecurityAdditionalFlows
<a name="aws-properties-cognito-userpool-advancedsecurityadditionalflows"></a>

Threat protection configuration options for additional authentication types in your user pool, including custom authentication. 

## Syntax
<a name="aws-properties-cognito-userpool-advancedsecurityadditionalflows-syntax"></a>

To declare this entity in your Amazon CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-cognito-userpool-advancedsecurityadditionalflows-syntax.json"></a>

```
{
  "[CustomAuthMode](#cfn-cognito-userpool-advancedsecurityadditionalflows-customauthmode)" : {{String}}
}
```

### YAML
<a name="aws-properties-cognito-userpool-advancedsecurityadditionalflows-syntax.yaml"></a>

```
  [CustomAuthMode](#cfn-cognito-userpool-advancedsecurityadditionalflows-customauthmode): {{String}}
```

## Properties
<a name="aws-properties-cognito-userpool-advancedsecurityadditionalflows-properties"></a>

`CustomAuthMode`  <a name="cfn-cognito-userpool-advancedsecurityadditionalflows-customauthmode"></a>
The operating mode of threat protection in custom authentication with [ Custom authentication challenge Lambda triggers](https://docs.amazonaws.cn/cognito/latest/developerguide/user-pool-lambda-challenge.html).   
*Required*: No  
*Type*: String  
*Allowed values*: `AUDIT | ENFORCED`  
*Update requires*: [No interruption](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)