AWS::Cognito:UserPoolRiskConfigurationAttachment - [BUG] - inconsistent validation for ClientId property

### Name of the resource

AWS::Cognito::UserPoolRiskConfigurationAttachment

### Resource Name

_No response_

### Issue Description

Your documentation [here](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-cognito-userpoolriskconfigurationattachment.html#cfn-cognito-userpoolriskconfigurationattachment-clientid) says that the ClientId property is optional in its description which reads as follows:

"The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.".

However, the property is marked as "Required: Yes" and the validation ensures it is non-empty.

### Expected Behavior

Assuming the description is correct, this field should be Required: No

### Observed Behavior

this field is marked as Required: Yes

### Test Cases

I think this is fairly obvious from the description

### Other Details

_No response_

Start by comparing the AWS::Cognito::UserPoolRiskConfigurationAttachment documentation for ClientId with the resource's Required setting and non-empty validation. Confirm which behavior matches the documented optional semantics, then update the relevant resource definition or documentation so the requirement and validation agree.

Written by the indexing model from the issue text.