aws-sdk-cognitoidentity 1.28.0 → 1.29.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 368099ec3db588ac9185a8b8911d8a9ade23f28ced99fd71962722ffaf40aec1
-  data.tar.gz: b86ef4ecb11861e284827dc9c341534832b522ed78546c749bed9835c525033d
+  metadata.gz: 9ee67dac1dcf5d34eec8fe495a7b75dc30cb50030f2c0ee44bdfb1715aaf28ca
+  data.tar.gz: 6f720b295d7a96609387e7d12010e801809d6ce7e3f8824010527f7fe1cb9f80
 SHA512:
-  metadata.gz: 3f59c1286b1f8c6759d8f9c56c87b2f9a964e22dd898854371712505ecd0ca5d6f6e805f12eeb27c9cdb1840d820a58a736a76ab4769efdf97737f69e7177f3d
-  data.tar.gz: 2196e3e574ccd8b4124fda72352b539b4df4c0f6bb0a524b40985d95ebb8a0f5fd2594aad80e6a84fea090346b864b3fc0e80f03e9ab3ae670e6d3b33234fe37
+  metadata.gz: 6b0714db6b18344622fe43e5f46c3450c1563a92159e6fc14739935f8ce8c3676c683ef597dcef4d1ac669309df5db9758ab8b3ebd1940b68b34f3c8934ae099
+  data.tar.gz: 740ea9819e64e01a3d5f9bfec7a58229448ff795b533711f60a83fa7b51fb0e2859f0fa3bb5709d1578ba6b1b0022538ee78556e8d5ba892aec5838b807fd163

data/lib/aws-sdk-cognitoidentity.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-cognitoidentity/customizations'
 # @!group service
 module Aws::CognitoIdentity
 
-  GEM_VERSION = '1.28.0'
+  GEM_VERSION = '1.29.0'
 
 end

data/lib/aws-sdk-cognitoidentity/client.rb

@@ -382,7 +382,7 @@ module Aws::CognitoIdentity
     #   Please take care in setting this parameter.
     #
     # @option params [Array<String>] :open_id_connect_provider_arns
-    #   A list of OpendID Connect provider ARNs.
+    #   The Amazon Resource Names (ARN) of the OpenID Connect providers.
     #
     # @option params [Array<Types::CognitoIdentityProvider>] :cognito_identity_providers
     #   An array of Amazon Cognito user pools and their client IDs.
@@ -634,13 +634,13 @@ module Aws::CognitoIdentity
     #   unauthenticated identity.
     #
     #   The Logins parameter is required when using identities associated with
-    #   external identity providers such as FaceBook. For examples of `Logins`
+    #   external identity providers such as Facebook. For examples of `Logins`
     #   maps, see the code examples in the [External Identity Providers][1]
     #   section of the Amazon Cognito Developer Guide.
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html
+    #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html
     #
     # @option params [String] :custom_role_arn
     #   The Amazon Resource Name (ARN) of the role to be assumed when multiple
@@ -783,7 +783,7 @@ module Aws::CognitoIdentity
     # is returned by GetId. You can optionally add additional logins for the
     # identity. Supplying multiple logins creates an implicit link.
     #
-    # The OpenId token is valid for 10 minutes.
+    # The OpenID token is valid for 10 minutes.
     #
     # This is a public API. You do not need any credentials to call this
     # API.
@@ -796,7 +796,7 @@ module Aws::CognitoIdentity
     #   tokens. When using graph.facebook.com and www.amazon.com, supply the
     #   access\_token returned from the provider's authflow. For
     #   accounts.google.com, an Amazon Cognito user pool provider, or any
-    #   other OpenId Connect provider, always include the `id_token`.
+    #   other OpenID Connect provider, always include the `id_token`.
     #
     # @return [Types::GetOpenIdTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -862,6 +862,10 @@ module Aws::CognitoIdentity
     #   a user. When you create an identity pool, you can specify the
     #   supported logins.
     #
+    # @option params [Hash<String,String>] :principal_tags
+    #   Use this operation to configure attribute mappings for custom
+    #   providers.
+    #
     # @option params [Integer] :token_duration
     #   The expiration time of the token, in seconds. You can specify a custom
     #   expiration time for the token so that you can cache it. If you don't
@@ -891,6 +895,9 @@ module Aws::CognitoIdentity
     #     logins: { # required
     #       "IdentityProviderName" => "IdentityProviderToken",
     #     },
+    #     principal_tags: {
+    #       "PrincipalTagID" => "PrincipalTagValue",
+    #     },
     #     token_duration: 1,
     #   })
     #
@@ -908,6 +915,47 @@ module Aws::CognitoIdentity
       req.send_request(options)
     end
 
+    # Use `GetPrincipalTagAttributeMap` to list all mappings between
+    # `PrincipalTags` and user attributes.
+    #
+    # @option params [required, String] :identity_pool_id
+    #   You can use this operation to get the ID of the Identity Pool you
+    #   setup attribute mappings for.
+    #
+    # @option params [required, String] :identity_provider_name
+    #   You can use this operation to get the provider name.
+    #
+    # @return [Types::GetPrincipalTagAttributeMapResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetPrincipalTagAttributeMapResponse#identity_pool_id #identity_pool_id} => String
+    #   * {Types::GetPrincipalTagAttributeMapResponse#identity_provider_name #identity_provider_name} => String
+    #   * {Types::GetPrincipalTagAttributeMapResponse#use_defaults #use_defaults} => Boolean
+    #   * {Types::GetPrincipalTagAttributeMapResponse#principal_tags #principal_tags} => Hash&lt;String,String&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_principal_tag_attribute_map({
+    #     identity_pool_id: "IdentityPoolId", # required
+    #     identity_provider_name: "IdentityProviderName", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.identity_pool_id #=> String
+    #   resp.identity_provider_name #=> String
+    #   resp.use_defaults #=> Boolean
+    #   resp.principal_tags #=> Hash
+    #   resp.principal_tags["PrincipalTagID"] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/GetPrincipalTagAttributeMap AWS API Documentation
+    #
+    # @overload get_principal_tag_attribute_map(params = {})
+    # @param [Hash] params ({})
+    def get_principal_tag_attribute_map(params = {}, options = {})
+      req = build_request(:get_principal_tag_attribute_map, params)
+      req.send_request(options)
+    end
+
     # Lists the identities in an identity pool.
     #
     # You must use AWS Developer credentials to call this API.
@@ -1191,7 +1239,7 @@ module Aws::CognitoIdentity
     #   How users for a specific identity provider are to mapped to roles.
     #   This is a string to RoleMapping object map. The string identifies the
     #   identity provider, for example, "graph.facebook.com" or
-    #   "cognito-idp-east-1.amazonaws.com/us-east-1\_abcdefghi:app\_client\_id".
+    #   "cognito-idp.us-east-1.amazonaws.com/us-east-1\_abcdefghi:app\_client\_id".
     #
     #   Up to 25 rules can be specified per identity provider.
     #
@@ -1231,10 +1279,61 @@ module Aws::CognitoIdentity
       req.send_request(options)
     end
 
-    # Assigns a set of tags to an Amazon Cognito identity pool. A tag is a
-    # label that you can use to categorize and manage identity pools in
-    # different ways, such as by purpose, owner, environment, or other
-    # criteria.
+    # You can use this operation to use default (username and clientID)
+    # attribute or custom attribute mappings.
+    #
+    # @option params [required, String] :identity_pool_id
+    #   The ID of the Identity Pool you want to set attribute mappings for.
+    #
+    # @option params [required, String] :identity_provider_name
+    #   The provider name you want to use for attribute mappings.
+    #
+    # @option params [Boolean] :use_defaults
+    #   You can use this operation to use default (username and clientID)
+    #   attribute mappings.
+    #
+    # @option params [Hash<String,String>] :principal_tags
+    #   You can use this operation to add principal tags.
+    #
+    # @return [Types::SetPrincipalTagAttributeMapResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::SetPrincipalTagAttributeMapResponse#identity_pool_id #identity_pool_id} => String
+    #   * {Types::SetPrincipalTagAttributeMapResponse#identity_provider_name #identity_provider_name} => String
+    #   * {Types::SetPrincipalTagAttributeMapResponse#use_defaults #use_defaults} => Boolean
+    #   * {Types::SetPrincipalTagAttributeMapResponse#principal_tags #principal_tags} => Hash&lt;String,String&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.set_principal_tag_attribute_map({
+    #     identity_pool_id: "IdentityPoolId", # required
+    #     identity_provider_name: "IdentityProviderName", # required
+    #     use_defaults: false,
+    #     principal_tags: {
+    #       "PrincipalTagID" => "PrincipalTagValue",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.identity_pool_id #=> String
+    #   resp.identity_provider_name #=> String
+    #   resp.use_defaults #=> Boolean
+    #   resp.principal_tags #=> Hash
+    #   resp.principal_tags["PrincipalTagID"] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/SetPrincipalTagAttributeMap AWS API Documentation
+    #
+    # @overload set_principal_tag_attribute_map(params = {})
+    # @param [Hash] params ({})
+    def set_principal_tag_attribute_map(params = {}, options = {})
+      req = build_request(:set_principal_tag_attribute_map, params)
+      req.send_request(options)
+    end
+
+    # Assigns a set of tags to the specified Amazon Cognito identity pool. A
+    # tag is a label that you can use to categorize and manage identity
+    # pools in different ways, such as by purpose, owner, environment, or
+    # other criteria.
     #
     # Each tag consists of a key and value, both of which you define. A key
     # is a general category for more specific values. For example, if you
@@ -1253,8 +1352,7 @@ module Aws::CognitoIdentity
     # identity pool can have as many as 50 tags.
     #
     # @option params [required, String] :resource_arn
-    #   The Amazon Resource Name (ARN) of the identity pool to assign the tags
-    #   to.
+    #   The Amazon Resource Name (ARN) of the identity pool.
     #
     # @option params [required, Hash<String,String>] :tags
     #   The tags to assign to the identity pool.
@@ -1358,12 +1456,11 @@ module Aws::CognitoIdentity
       req.send_request(options)
     end
 
-    # Removes the specified tags from an Amazon Cognito identity pool. You
-    # can use this action up to 5 times per second, per account
+    # Removes the specified tags from the specified Amazon Cognito identity
+    # pool. You can use this action up to 5 times per second, per account
     #
     # @option params [required, String] :resource_arn
-    #   The Amazon Resource Name (ARN) of the identity pool that the tags are
-    #   assigned to.
+    #   The Amazon Resource Name (ARN) of the identity pool.
     #
     # @option params [required, Array<String>] :tag_keys
     #   The keys of the tags to remove from the user pool.
@@ -1415,7 +1512,7 @@ module Aws::CognitoIdentity
     #   The "domain" by which Cognito will refer to your users.
     #
     # @option params [Array<String>] :open_id_connect_provider_arns
-    #   A list of OpendID Connect provider ARNs.
+    #   The ARNs of the OpenID Connect providers.
     #
     # @option params [Array<Types::CognitoIdentityProvider>] :cognito_identity_providers
     #   A list representing an Amazon Cognito user pool and its client ID.
@@ -1510,7 +1607,7 @@ module Aws::CognitoIdentity
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-cognitoidentity'
-      context[:gem_version] = '1.28.0'
+      context[:gem_version] = '1.29.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentity/client_api.rb

@@ -50,6 +50,8 @@ module Aws::CognitoIdentity
     GetOpenIdTokenForDeveloperIdentityResponse = Shapes::StructureShape.new(name: 'GetOpenIdTokenForDeveloperIdentityResponse')
     GetOpenIdTokenInput = Shapes::StructureShape.new(name: 'GetOpenIdTokenInput')
     GetOpenIdTokenResponse = Shapes::StructureShape.new(name: 'GetOpenIdTokenResponse')
+    GetPrincipalTagAttributeMapInput = Shapes::StructureShape.new(name: 'GetPrincipalTagAttributeMapInput')
+    GetPrincipalTagAttributeMapResponse = Shapes::StructureShape.new(name: 'GetPrincipalTagAttributeMapResponse')
     HideDisabled = Shapes::BooleanShape.new(name: 'HideDisabled')
     IdentitiesList = Shapes::ListShape.new(name: 'IdentitiesList')
     IdentityDescription = Shapes::StructureShape.new(name: 'IdentityDescription')
@@ -90,6 +92,9 @@ module Aws::CognitoIdentity
     OIDCProviderList = Shapes::ListShape.new(name: 'OIDCProviderList')
     OIDCToken = Shapes::StringShape.new(name: 'OIDCToken')
     PaginationKey = Shapes::StringShape.new(name: 'PaginationKey')
+    PrincipalTagID = Shapes::StringShape.new(name: 'PrincipalTagID')
+    PrincipalTagValue = Shapes::StringShape.new(name: 'PrincipalTagValue')
+    PrincipalTags = Shapes::MapShape.new(name: 'PrincipalTags')
     QueryLimit = Shapes::IntegerShape.new(name: 'QueryLimit')
     ResourceConflictException = Shapes::StructureShape.new(name: 'ResourceConflictException')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
@@ -103,6 +108,8 @@ module Aws::CognitoIdentity
     SecretKeyString = Shapes::StringShape.new(name: 'SecretKeyString')
     SessionTokenString = Shapes::StringShape.new(name: 'SessionTokenString')
     SetIdentityPoolRolesInput = Shapes::StructureShape.new(name: 'SetIdentityPoolRolesInput')
+    SetPrincipalTagAttributeMapInput = Shapes::StructureShape.new(name: 'SetPrincipalTagAttributeMapInput')
+    SetPrincipalTagAttributeMapResponse = Shapes::StructureShape.new(name: 'SetPrincipalTagAttributeMapResponse')
     String = Shapes::StringShape.new(name: 'String')
     TagKeysType = Shapes::StringShape.new(name: 'TagKeysType')
     TagResourceInput = Shapes::StructureShape.new(name: 'TagResourceInput')
@@ -116,6 +123,7 @@ module Aws::CognitoIdentity
     UnprocessedIdentityIdList = Shapes::ListShape.new(name: 'UnprocessedIdentityIdList')
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
     UntagResourceResponse = Shapes::StructureShape.new(name: 'UntagResourceResponse')
+    UseDefaults = Shapes::BooleanShape.new(name: 'UseDefaults')
 
     CognitoIdentityProvider.add_member(:provider_name, Shapes::ShapeRef.new(shape: CognitoIdentityProviderName, location_name: "ProviderName"))
     CognitoIdentityProvider.add_member(:client_id, Shapes::ShapeRef.new(shape: CognitoIdentityProviderClientId, location_name: "ClientId"))
@@ -195,6 +203,7 @@ module Aws::CognitoIdentity
     GetOpenIdTokenForDeveloperIdentityInput.add_member(:identity_pool_id, Shapes::ShapeRef.new(shape: IdentityPoolId, required: true, location_name: "IdentityPoolId"))
     GetOpenIdTokenForDeveloperIdentityInput.add_member(:identity_id, Shapes::ShapeRef.new(shape: IdentityId, location_name: "IdentityId"))
     GetOpenIdTokenForDeveloperIdentityInput.add_member(:logins, Shapes::ShapeRef.new(shape: LoginsMap, required: true, location_name: "Logins"))
+    GetOpenIdTokenForDeveloperIdentityInput.add_member(:principal_tags, Shapes::ShapeRef.new(shape: PrincipalTags, location_name: "PrincipalTags"))
     GetOpenIdTokenForDeveloperIdentityInput.add_member(:token_duration, Shapes::ShapeRef.new(shape: TokenDuration, location_name: "TokenDuration"))
     GetOpenIdTokenForDeveloperIdentityInput.struct_class = Types::GetOpenIdTokenForDeveloperIdentityInput
 
@@ -210,6 +219,16 @@ module Aws::CognitoIdentity
     GetOpenIdTokenResponse.add_member(:token, Shapes::ShapeRef.new(shape: OIDCToken, location_name: "Token"))
     GetOpenIdTokenResponse.struct_class = Types::GetOpenIdTokenResponse
 
+    GetPrincipalTagAttributeMapInput.add_member(:identity_pool_id, Shapes::ShapeRef.new(shape: IdentityPoolId, required: true, location_name: "IdentityPoolId"))
+    GetPrincipalTagAttributeMapInput.add_member(:identity_provider_name, Shapes::ShapeRef.new(shape: IdentityProviderName, required: true, location_name: "IdentityProviderName"))
+    GetPrincipalTagAttributeMapInput.struct_class = Types::GetPrincipalTagAttributeMapInput
+
+    GetPrincipalTagAttributeMapResponse.add_member(:identity_pool_id, Shapes::ShapeRef.new(shape: IdentityPoolId, location_name: "IdentityPoolId"))
+    GetPrincipalTagAttributeMapResponse.add_member(:identity_provider_name, Shapes::ShapeRef.new(shape: IdentityProviderName, location_name: "IdentityProviderName"))
+    GetPrincipalTagAttributeMapResponse.add_member(:use_defaults, Shapes::ShapeRef.new(shape: UseDefaults, location_name: "UseDefaults"))
+    GetPrincipalTagAttributeMapResponse.add_member(:principal_tags, Shapes::ShapeRef.new(shape: PrincipalTags, location_name: "PrincipalTags"))
+    GetPrincipalTagAttributeMapResponse.struct_class = Types::GetPrincipalTagAttributeMapResponse
+
     IdentitiesList.member = Shapes::ShapeRef.new(shape: IdentityDescription)
 
     IdentityDescription.add_member(:identity_id, Shapes::ShapeRef.new(shape: IdentityId, location_name: "IdentityId"))
@@ -322,6 +341,9 @@ module Aws::CognitoIdentity
 
     OIDCProviderList.member = Shapes::ShapeRef.new(shape: ARNString)
 
+    PrincipalTags.key = Shapes::ShapeRef.new(shape: PrincipalTagID)
+    PrincipalTags.value = Shapes::ShapeRef.new(shape: PrincipalTagValue)
+
     ResourceConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     ResourceConflictException.struct_class = Types::ResourceConflictException
 
@@ -349,6 +371,18 @@ module Aws::CognitoIdentity
     SetIdentityPoolRolesInput.add_member(:role_mappings, Shapes::ShapeRef.new(shape: RoleMappingMap, location_name: "RoleMappings"))
     SetIdentityPoolRolesInput.struct_class = Types::SetIdentityPoolRolesInput
 
+    SetPrincipalTagAttributeMapInput.add_member(:identity_pool_id, Shapes::ShapeRef.new(shape: IdentityPoolId, required: true, location_name: "IdentityPoolId"))
+    SetPrincipalTagAttributeMapInput.add_member(:identity_provider_name, Shapes::ShapeRef.new(shape: IdentityProviderName, required: true, location_name: "IdentityProviderName"))
+    SetPrincipalTagAttributeMapInput.add_member(:use_defaults, Shapes::ShapeRef.new(shape: UseDefaults, location_name: "UseDefaults"))
+    SetPrincipalTagAttributeMapInput.add_member(:principal_tags, Shapes::ShapeRef.new(shape: PrincipalTags, location_name: "PrincipalTags"))
+    SetPrincipalTagAttributeMapInput.struct_class = Types::SetPrincipalTagAttributeMapInput
+
+    SetPrincipalTagAttributeMapResponse.add_member(:identity_pool_id, Shapes::ShapeRef.new(shape: IdentityPoolId, location_name: "IdentityPoolId"))
+    SetPrincipalTagAttributeMapResponse.add_member(:identity_provider_name, Shapes::ShapeRef.new(shape: IdentityProviderName, location_name: "IdentityProviderName"))
+    SetPrincipalTagAttributeMapResponse.add_member(:use_defaults, Shapes::ShapeRef.new(shape: UseDefaults, location_name: "UseDefaults"))
+    SetPrincipalTagAttributeMapResponse.add_member(:principal_tags, Shapes::ShapeRef.new(shape: PrincipalTags, location_name: "PrincipalTags"))
+    SetPrincipalTagAttributeMapResponse.struct_class = Types::SetPrincipalTagAttributeMapResponse
+
     TagResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: ARNString, required: true, location_name: "ResourceArn"))
     TagResourceInput.add_member(:tags, Shapes::ShapeRef.new(shape: IdentityPoolTagsType, required: true, location_name: "Tags"))
     TagResourceInput.struct_class = Types::TagResourceInput
@@ -542,6 +576,19 @@ module Aws::CognitoIdentity
         o.errors << Shapes::ShapeRef.new(shape: DeveloperUserAlreadyRegisteredException)
       end)
 
+      api.add_operation(:get_principal_tag_attribute_map, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetPrincipalTagAttributeMap"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetPrincipalTagAttributeMapInput)
+        o.output = Shapes::ShapeRef.new(shape: GetPrincipalTagAttributeMapResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: NotAuthorizedException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+      end)
+
       api.add_operation(:list_identities, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListIdentities"
         o.http_method = "POST"
@@ -630,6 +677,19 @@ module Aws::CognitoIdentity
         o.errors << Shapes::ShapeRef.new(shape: ConcurrentModificationException)
       end)
 
+      api.add_operation(:set_principal_tag_attribute_map, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "SetPrincipalTagAttributeMap"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: SetPrincipalTagAttributeMapInput)
+        o.output = Shapes::ShapeRef.new(shape: SetPrincipalTagAttributeMapResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: NotAuthorizedException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+      end)
+
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
         o.name = "TagResource"
         o.http_method = "POST"

data/lib/aws-sdk-cognitoidentity/types.rb

@@ -129,7 +129,7 @@ module Aws::CognitoIdentity
     #   @return [String]
     #
     # @!attribute [rw] open_id_connect_provider_arns
-    #   A list of OpendID Connect provider ARNs.
+    #   The Amazon Resource Names (ARN) of the OpenID Connect providers.
     #   @return [Array<String>]
     #
     # @!attribute [rw] cognito_identity_providers
@@ -347,13 +347,13 @@ module Aws::CognitoIdentity
     #   unauthenticated identity.
     #
     #   The Logins parameter is required when using identities associated
-    #   with external identity providers such as FaceBook. For examples of
+    #   with external identity providers such as Facebook. For examples of
     #   `Logins` maps, see the code examples in the [External Identity
     #   Providers][1] section of the Amazon Cognito Developer Guide.
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html
+    #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] custom_role_arn
@@ -520,6 +520,9 @@ module Aws::CognitoIdentity
     #         logins: { # required
     #           "IdentityProviderName" => "IdentityProviderToken",
     #         },
+    #         principal_tags: {
+    #           "PrincipalTagID" => "PrincipalTagValue",
+    #         },
     #         token_duration: 1,
     #       }
     #
@@ -544,6 +547,11 @@ module Aws::CognitoIdentity
     #   identity pool, you can specify the supported logins.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] principal_tags
+    #   Use this operation to configure attribute mappings for custom
+    #   providers.
+    #   @return [Hash<String,String>]
+    #
     # @!attribute [rw] token_duration
     #   The expiration time of the token, in seconds. You can specify a
     #   custom expiration time for the token so that you can cache it. If
@@ -567,6 +575,7 @@ module Aws::CognitoIdentity
       :identity_pool_id,
       :identity_id,
       :logins,
+      :principal_tags,
       :token_duration)
       SENSITIVE = []
       include Aws::Structure
@@ -613,7 +622,7 @@ module Aws::CognitoIdentity
     #   provider tokens. When using graph.facebook.com and www.amazon.com,
     #   supply the access\_token returned from the provider's authflow. For
     #   accounts.google.com, an Amazon Cognito user pool provider, or any
-    #   other OpenId Connect provider, always include the `id_token`.
+    #   other OpenID Connect provider, always include the `id_token`.
     #   @return [Hash<String,String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/GetOpenIdTokenInput AWS API Documentation
@@ -645,6 +654,62 @@ module Aws::CognitoIdentity
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetPrincipalTagAttributeMapInput
+    #   data as a hash:
+    #
+    #       {
+    #         identity_pool_id: "IdentityPoolId", # required
+    #         identity_provider_name: "IdentityProviderName", # required
+    #       }
+    #
+    # @!attribute [rw] identity_pool_id
+    #   You can use this operation to get the ID of the Identity Pool you
+    #   setup attribute mappings for.
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_provider_name
+    #   You can use this operation to get the provider name.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/GetPrincipalTagAttributeMapInput AWS API Documentation
+    #
+    class GetPrincipalTagAttributeMapInput < Struct.new(
+      :identity_pool_id,
+      :identity_provider_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] identity_pool_id
+    #   You can use this operation to get the ID of the Identity Pool you
+    #   setup attribute mappings for.
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_provider_name
+    #   You can use this operation to get the provider name.
+    #   @return [String]
+    #
+    # @!attribute [rw] use_defaults
+    #   You can use this operation to list
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] principal_tags
+    #   You can use this operation to add principal tags. The
+    #   `PrincipalTags`operation enables you to reference user attributes in
+    #   your IAM permissions policy.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/GetPrincipalTagAttributeMapResponse AWS API Documentation
+    #
+    class GetPrincipalTagAttributeMapResponse < Struct.new(
+      :identity_pool_id,
+      :identity_provider_name,
+      :use_defaults,
+      :principal_tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A description of the identity.
     #
     # @!attribute [rw] identity_id
@@ -733,7 +798,7 @@ module Aws::CognitoIdentity
     #   @return [String]
     #
     # @!attribute [rw] open_id_connect_provider_arns
-    #   A list of OpendID Connect provider ARNs.
+    #   The ARNs of the OpenID Connect providers.
     #   @return [Array<String>]
     #
     # @!attribute [rw] cognito_identity_providers
@@ -1352,7 +1417,7 @@ module Aws::CognitoIdentity
     #   How users for a specific identity provider are to mapped to roles.
     #   This is a string to RoleMapping object map. The string identifies
     #   the identity provider, for example, "graph.facebook.com" or
-    #   "cognito-idp-east-1.amazonaws.com/us-east-1\_abcdefghi:app\_client\_id".
+    #   "cognito-idp.us-east-1.amazonaws.com/us-east-1\_abcdefghi:app\_client\_id".
     #
     #   Up to 25 rules can be specified per identity provider.
     #   @return [Hash<String,Types::RoleMapping>]
@@ -1367,6 +1432,76 @@ module Aws::CognitoIdentity
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass SetPrincipalTagAttributeMapInput
+    #   data as a hash:
+    #
+    #       {
+    #         identity_pool_id: "IdentityPoolId", # required
+    #         identity_provider_name: "IdentityProviderName", # required
+    #         use_defaults: false,
+    #         principal_tags: {
+    #           "PrincipalTagID" => "PrincipalTagValue",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] identity_pool_id
+    #   The ID of the Identity Pool you want to set attribute mappings for.
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_provider_name
+    #   The provider name you want to use for attribute mappings.
+    #   @return [String]
+    #
+    # @!attribute [rw] use_defaults
+    #   You can use this operation to use default (username and clientID)
+    #   attribute mappings.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] principal_tags
+    #   You can use this operation to add principal tags.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/SetPrincipalTagAttributeMapInput AWS API Documentation
+    #
+    class SetPrincipalTagAttributeMapInput < Struct.new(
+      :identity_pool_id,
+      :identity_provider_name,
+      :use_defaults,
+      :principal_tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] identity_pool_id
+    #   The ID of the Identity Pool you want to set attribute mappings for.
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_provider_name
+    #   The provider name you want to use for attribute mappings.
+    #   @return [String]
+    #
+    # @!attribute [rw] use_defaults
+    #   You can use this operation to select default (username and clientID)
+    #   attribute mappings.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] principal_tags
+    #   You can use this operation to add principal tags. The
+    #   `PrincipalTags`operation enables you to reference user attributes in
+    #   your IAM permissions policy.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-identity-2014-06-30/SetPrincipalTagAttributeMapResponse AWS API Documentation
+    #
+    class SetPrincipalTagAttributeMapResponse < Struct.new(
+      :identity_pool_id,
+      :identity_provider_name,
+      :use_defaults,
+      :principal_tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass TagResourceInput
     #   data as a hash:
     #
@@ -1378,8 +1513,7 @@ module Aws::CognitoIdentity
     #       }
     #
     # @!attribute [rw] resource_arn
-    #   The Amazon Resource Name (ARN) of the identity pool to assign the
-    #   tags to.
+    #   The Amazon Resource Name (ARN) of the identity pool.
     #   @return [String]
     #
     # @!attribute [rw] tags
@@ -1518,8 +1652,7 @@ module Aws::CognitoIdentity
     #       }
     #
     # @!attribute [rw] resource_arn
-    #   The Amazon Resource Name (ARN) of the identity pool that the tags
-    #   are assigned to.
+    #   The Amazon Resource Name (ARN) of the identity pool.
     #   @return [String]
     #
     # @!attribute [rw] tag_keys

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentity
 version: !ruby/object:Gem::Version
-  version: 1.28.0
+  version: 1.29.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-20 00:00:00.000000000 Z
+date: 2021-01-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core