# CustomThreatProtectionMode

The Type of Threat Protection Enabled for Custom Authentication.

This feature only functions if your FeaturePlan is set to FeaturePlan.PLUS

- Source: [`aws-cognito/lib/user-pool.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/aws-cognito/lib/user-pool.ts#L676)
- Type last changed: v2.181.0 · 26 Feb 2025

## Members

| Member | Description |
| --- | --- |
| `FULL_FUNCTION` | Cognito automatically takes preventative actions in response to different levels of risk that you configure for your user pool. |
| `AUDIT_ONLY` | Cognito gathers metrics on detected risks, but doesn't take automatic action. |

## Referenced by

- [`UserPoolProps`](/v2/docs/aws-cdk-lib.aws_cognito.UserPoolProps).customThreatProtectionMode