# UserPoolAddOnsProperty

User pool add-ons.

Contains settings for activation of threat protection. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .

For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . To activate this setting, your user pool must be on the [Plus tier](https://docs.aws.amazon.com/cognito/latest/developerguide/feature-plans-features-plus.html) .

- Source: Generated code
- Type last changed: v2.154.0 · 22 Aug 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_cognito as cognito } from 'aws-cdk-lib';
const userPoolAddOnsProperty: cognito.CfnUserPool.UserPoolAddOnsProperty = {
  advancedSecurityAdditionalFlows: {
    customAuthMode: 'customAuthMode',
  },
  advancedSecurityMode: 'advancedSecurityMode',
};
```

## Properties

- `advancedSecurityAdditionalFlows`: [IResolvable](/cdk/api/v2/docs/aws-cdk-lib.IResolvable.html) | [CfnUserPool.AdvancedSecurityAdditionalFlowsProperty](/cdk/api/v2/docs/aws-cdk-lib.aws_cognito.CfnUserPool.AdvancedSecurityAdditionalFlowsProperty.html) — Threat protection configuration options for additional authentication types in your user pool, including custom authentication.

- `advancedSecurityMode`: string — The operating mode of threat protection for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.