**To describe a risk configuration**
This example describes the risk configuration associated with pool us-west-2_aaaaaaaaa.
Command::
aws cognito-idp describe-risk-configuration --user-pool-id us-west-2_aaaaaaaaa
Output::
{
"RiskConfiguration": {
"UserPoolId": "us-west-2_aaaaaaaaa",
"CompromisedCredentialsRiskConfiguration": {
"EventFilter": [
"SIGN_IN",
"SIGN_UP",
"PASSWORD_CHANGE"
],
"Actions": {
"EventAction": "BLOCK"
}
},
"AccountTakeoverRiskConfiguration": {
"NotifyConfiguration": {
"From": "diego@example.com",
"ReplyTo": "diego@example.com",
"SourceArn": "arn:aws:ses:us-east-1:111111111111:identity/diego@example.com",
"BlockEmail": {
"Subject": "Blocked sign-in attempt",
"HtmlBody": "\n\n\n\tHTML email context\n\t\n\n\nWe blocked an unrecognized sign-in to your account with this information:\n
\n- Time: {login-time}
\n- Device: {device-name}
\n- Location: {city}, {country}
\n
\nIf this sign-in was not by you, you should change your password and notify us by clicking on this link\nIf this sign-in was by you, you can follow this link to let us know\n\n",
"TextBody": "We blocked an unrecognized sign-in to your account with this information:\nTime: {login-time}\nDevice: {device-name}\nLocation: {city}, {country}\nIf this sign-in was not by you, you should change your password and notify us by clicking on {one-click-link-invalid}\nIf this sign-in was by you, you can follow {one-click-link-valid} to let us know"
},
"NoActionEmail": {
"Subject": "New sign-in attempt",
"HtmlBody": "\n\n\n\tHTML email context\n\t\n\n\nWe observed an unrecognized sign-in to your account with this information:\n
\n- Time: {login-time}
\n- Device: {device-name}
\n- Location: {city}, {country}
\n
\nIf this sign-in was not by you, you should change your password and notify us by clicking on this link\nIf this sign-in was by you, you can follow this link to let us know\n\n",
"TextBody": "We observed an unrecognized sign-in to your account with this information:\nTime: {login-time}\nDevice: {device-name}\nLocation: {city}, {country}\nIf this sign-in was not by you, you should change your password and notify us by clicking on {one-click-link-invalid}\nIf this sign-in was by you, you can follow {one-click-link-valid} to let us know"
},
"MfaEmail": {
"Subject": "New sign-in attempt",
"HtmlBody": "\n\n\n\tHTML email context\n\t\n\n\nWe required you to use multi-factor authentication for the following sign-in attempt:\n
\n- Time: {login-time}
\n- Device: {device-name}
\n- Location: {city}, {country}
\n
\nIf this sign-in was not by you, you should change your password and notify us by clicking on this link\nIf this sign-in was by you, you can follow this link to let us know\n\n",
"TextBody": "We required you to use multi-factor authentication for the following sign-in attempt:\nTime: {login-time}\nDevice: {device-name}\nLocation: {city}, {country}\nIf this sign-in was not by you, you should change your password and notify us by clicking on {one-click-link-invalid}\nIf this sign-in was by you, you can follow {one-click-link-valid} to let us know"
}
},
"Actions": {
"LowAction": {
"Notify": true,
"EventAction": "NO_ACTION"
},
"MediumAction": {
"Notify": true,
"EventAction": "MFA_IF_CONFIGURED"
},
"HighAction": {
"Notify": true,
"EventAction": "MFA_IF_CONFIGURED"
}
}
}
}
}