aws-sdk-cognitoidentityprovider 1.147.0 → 1.148.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c5c460a60038c169e29f9d0e6c09fbb36d7b58a3f64f245a08bbd8682ed19320
-  data.tar.gz: 4617237073fcf85789e22c20f749af51ba4052fc8ac00d6b7f30a08399a37a46
+  metadata.gz: d8baf80545c66988b5292061a646dd936793b4ecf241ab05dcb7892fd4959cef
+  data.tar.gz: 9a687ebd782e428ab54ad5bb1d5ae87b258c05ccb4d5570ed692ff8aeb72fd35
 SHA512:
-  metadata.gz: 39c75a131e4620200ceb2f90c3f41d77a4948d7994b93e09ecc442db0528a5691b948e10dff93b1123c9fe5ed923f9e1865290f2f5e4f42a8e536f7b7fcc2e37
-  data.tar.gz: de7473281c09a77f60f44fcb0329de15c1f824bd4acd1f87412fe2b4e1f138e59d82f424be2ba3ffadb9b7220c226fc833e49313c06a20e0f6a5a93dbdab6088
+  metadata.gz: bef190b5d9b7c2ff52450fd9d6075290f3d1049e423aeb5ac45fff99110b3d6de3c0fa0a5492c1b912580191ba106c9cc27eaebd4a669b86ad461c26f37a9a6d
+  data.tar.gz: 9d073a1ed2609957964879e32b0e608aeaf434e1d74b9bbbbb9c8e15238161c57f33968374ac86dc9a08f79408c842cef3d857f4ba38eabec5d03427ef2a9ea8

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.148.0 (2026-07-17)
+------------------
+
+* Feature - Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
+
 1.147.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.147.0
+1.148.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -4703,6 +4703,12 @@ module Aws::CognitoIdentityProvider
     #   results to Amazon CloudWatch Logs. This parameter is the ARN of that
     #   role.
     #
+    # @option params [String] :password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the CSV
+    #   file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #
     # @return [Types::CreateUserImportJobResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateUserImportJobResponse#user_import_job #user_import_job} => Types::UserImportJobType
@@ -4713,6 +4719,7 @@ module Aws::CognitoIdentityProvider
     #     job_name: "UserImportJobNameType", # required
     #     user_pool_id: "UserPoolIdType", # required
     #     cloud_watch_logs_role_arn: "ArnType", # required
+    #     password_hashing_algorithm: "BCRYPT", # accepts BCRYPT, SCRYPT, ARGON2ID, PBKDF2_SHA256
     #   })
     #
     # @example Response structure
@@ -4730,6 +4737,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CreateUserImportJob AWS API Documentation
     #
@@ -5560,9 +5568,18 @@ module Aws::CognitoIdentityProvider
     #       configuration_set: "SESConfigurationSet",
     #     },
     #     sms_configuration: {
-    #       sns_caller_arn: "ArnType", # required
+    #       sns_caller_arn: "OptionalArnType",
     #       external_id: "StringType",
     #       sns_region: "RegionCodeType",
+    #       eums_sms: {
+    #         caller_arn: "ArnType", # required
+    #         external_id: "StringType",
+    #         origination_identity: "StringType",
+    #         configuration_set_name: "StringType",
+    #         in_entity_id: "StringType",
+    #         in_template_id: "StringType",
+    #         region: "RegionCodeType",
+    #       },
     #     },
     #     user_pool_tags: {
     #       "TagKeysType" => "TagValueType",
@@ -5696,6 +5713,13 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.sms_configuration.sns_caller_arn #=> String
     #   resp.user_pool.sms_configuration.external_id #=> String
     #   resp.user_pool.sms_configuration.sns_region #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.external_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.region #=> String
     #   resp.user_pool.user_pool_tags #=> Hash
     #   resp.user_pool.user_pool_tags["TagKeysType"] #=> String
     #   resp.user_pool.sms_configuration_failure #=> String
@@ -7503,6 +7527,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/DescribeUserImportJob AWS API Documentation
     #
@@ -7624,6 +7649,13 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.sms_configuration.sns_caller_arn #=> String
     #   resp.user_pool.sms_configuration.external_id #=> String
     #   resp.user_pool.sms_configuration.sns_region #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.external_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.region #=> String
     #   resp.user_pool.user_pool_tags #=> Hash
     #   resp.user_pool.user_pool_tags["TagKeysType"] #=> String
     #   resp.user_pool.sms_configuration_failure #=> String
@@ -8894,6 +8926,13 @@ module Aws::CognitoIdentityProvider
     #   resp.sms_mfa_configuration.sms_configuration.sns_caller_arn #=> String
     #   resp.sms_mfa_configuration.sms_configuration.external_id #=> String
     #   resp.sms_mfa_configuration.sms_configuration.sns_region #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.external_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.region #=> String
     #   resp.software_token_mfa_configuration.enabled #=> Boolean
     #   resp.email_mfa_configuration.message #=> String
     #   resp.email_mfa_configuration.subject #=> String
@@ -9767,6 +9806,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_jobs[0].skipped_users #=> Integer
     #   resp.user_import_jobs[0].failed_users #=> Integer
     #   resp.user_import_jobs[0].completion_message #=> String
+    #   resp.user_import_jobs[0].password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #   resp.pagination_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/ListUserImportJobs AWS API Documentation
@@ -11576,9 +11616,18 @@ module Aws::CognitoIdentityProvider
     #     sms_mfa_configuration: {
     #       sms_authentication_message: "SmsVerificationMessageType",
     #       sms_configuration: {
-    #         sns_caller_arn: "ArnType", # required
+    #         sns_caller_arn: "OptionalArnType",
     #         external_id: "StringType",
     #         sns_region: "RegionCodeType",
+    #         eums_sms: {
+    #           caller_arn: "ArnType", # required
+    #           external_id: "StringType",
+    #           origination_identity: "StringType",
+    #           configuration_set_name: "StringType",
+    #           in_entity_id: "StringType",
+    #           in_template_id: "StringType",
+    #           region: "RegionCodeType",
+    #         },
     #       },
     #     },
     #     software_token_mfa_configuration: {
@@ -11602,6 +11651,13 @@ module Aws::CognitoIdentityProvider
     #   resp.sms_mfa_configuration.sms_configuration.sns_caller_arn #=> String
     #   resp.sms_mfa_configuration.sms_configuration.external_id #=> String
     #   resp.sms_mfa_configuration.sms_configuration.sns_region #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.external_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.region #=> String
     #   resp.software_token_mfa_configuration.enabled #=> Boolean
     #   resp.email_mfa_configuration.message #=> String
     #   resp.email_mfa_configuration.subject #=> String
@@ -11922,6 +11978,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/StartUserImportJob AWS API Documentation
     #
@@ -12010,6 +12067,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/StopUserImportJob AWS API Documentation
     #
@@ -13393,9 +13451,18 @@ module Aws::CognitoIdentityProvider
     #       configuration_set: "SESConfigurationSet",
     #     },
     #     sms_configuration: {
-    #       sns_caller_arn: "ArnType", # required
+    #       sns_caller_arn: "OptionalArnType",
     #       external_id: "StringType",
     #       sns_region: "RegionCodeType",
+    #       eums_sms: {
+    #         caller_arn: "ArnType", # required
+    #         external_id: "StringType",
+    #         origination_identity: "StringType",
+    #         configuration_set_name: "StringType",
+    #         in_entity_id: "StringType",
+    #         in_template_id: "StringType",
+    #         region: "RegionCodeType",
+    #       },
     #     },
     #     user_pool_tags: {
     #       "TagKeysType" => "TagValueType",
@@ -14256,7 +14323,7 @@ module Aws::CognitoIdentityProvider
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.147.0'
+      context[:gem_version] = '1.148.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -258,6 +258,7 @@ module Aws::CognitoIdentityProvider
     EnableSoftwareTokenMFAException = Shapes::StructureShape.new(name: 'EnableSoftwareTokenMFAException')
     EncryptionKeyArnType = Shapes::StringShape.new(name: 'EncryptionKeyArnType')
     EncryptionKeyType = Shapes::StringShape.new(name: 'EncryptionKeyType')
+    EumsSmsConfigurationType = Shapes::StructureShape.new(name: 'EumsSmsConfigurationType')
     EventContextDataType = Shapes::StructureShape.new(name: 'EventContextDataType')
     EventFeedbackType = Shapes::StructureShape.new(name: 'EventFeedbackType')
     EventFilterType = Shapes::StringShape.new(name: 'EventFilterType')
@@ -406,8 +407,10 @@ module Aws::CognitoIdentityProvider
     OAuthFlowType = Shapes::StringShape.new(name: 'OAuthFlowType')
     OAuthFlowsType = Shapes::ListShape.new(name: 'OAuthFlowsType')
     OperationNotEnabledException = Shapes::StructureShape.new(name: 'OperationNotEnabledException')
+    OptionalArnType = Shapes::StringShape.new(name: 'OptionalArnType')
     PaginationKey = Shapes::StringShape.new(name: 'PaginationKey')
     PaginationKeyType = Shapes::StringShape.new(name: 'PaginationKeyType')
+    PasswordHashingAlgorithmType = Shapes::StringShape.new(name: 'PasswordHashingAlgorithmType')
     PasswordHistoryPolicyViolationException = Shapes::StructureShape.new(name: 'PasswordHistoryPolicyViolationException')
     PasswordHistorySizeType = Shapes::IntegerShape.new(name: 'PasswordHistorySizeType')
     PasswordPolicyMinLengthType = Shapes::IntegerShape.new(name: 'PasswordPolicyMinLengthType')
@@ -1137,6 +1140,7 @@ module Aws::CognitoIdentityProvider
     CreateUserImportJobRequest.add_member(:job_name, Shapes::ShapeRef.new(shape: UserImportJobNameType, required: true, location_name: "JobName"))
     CreateUserImportJobRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
     CreateUserImportJobRequest.add_member(:cloud_watch_logs_role_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "CloudWatchLogsRoleArn"))
+    CreateUserImportJobRequest.add_member(:password_hashing_algorithm, Shapes::ShapeRef.new(shape: PasswordHashingAlgorithmType, location_name: "PasswordHashingAlgorithm"))
     CreateUserImportJobRequest.struct_class = Types::CreateUserImportJobRequest
 
     CreateUserImportJobResponse.add_member(:user_import_job, Shapes::ShapeRef.new(shape: UserImportJobType, location_name: "UserImportJob"))
@@ -1423,6 +1427,15 @@ module Aws::CognitoIdentityProvider
     EnableSoftwareTokenMFAException.add_member(:message, Shapes::ShapeRef.new(shape: MessageType, location_name: "message"))
     EnableSoftwareTokenMFAException.struct_class = Types::EnableSoftwareTokenMFAException
 
+    EumsSmsConfigurationType.add_member(:caller_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "CallerArn"))
+    EumsSmsConfigurationType.add_member(:external_id, Shapes::ShapeRef.new(shape: StringType, location_name: "ExternalId"))
+    EumsSmsConfigurationType.add_member(:origination_identity, Shapes::ShapeRef.new(shape: StringType, location_name: "OriginationIdentity"))
+    EumsSmsConfigurationType.add_member(:configuration_set_name, Shapes::ShapeRef.new(shape: StringType, location_name: "ConfigurationSetName"))
+    EumsSmsConfigurationType.add_member(:in_entity_id, Shapes::ShapeRef.new(shape: StringType, location_name: "InEntityId"))
+    EumsSmsConfigurationType.add_member(:in_template_id, Shapes::ShapeRef.new(shape: StringType, location_name: "InTemplateId"))
+    EumsSmsConfigurationType.add_member(:region, Shapes::ShapeRef.new(shape: RegionCodeType, location_name: "Region"))
+    EumsSmsConfigurationType.struct_class = Types::EumsSmsConfigurationType
+
     EventContextDataType.add_member(:ip_address, Shapes::ShapeRef.new(shape: StringType, location_name: "IpAddress"))
     EventContextDataType.add_member(:device_name, Shapes::ShapeRef.new(shape: StringType, location_name: "DeviceName"))
     EventContextDataType.add_member(:timezone, Shapes::ShapeRef.new(shape: StringType, location_name: "Timezone"))
@@ -2122,9 +2135,10 @@ module Aws::CognitoIdentityProvider
 
     SkippedIPRangeListType.member = Shapes::ShapeRef.new(shape: StringType)
 
-    SmsConfigurationType.add_member(:sns_caller_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "SnsCallerArn"))
+    SmsConfigurationType.add_member(:sns_caller_arn, Shapes::ShapeRef.new(shape: OptionalArnType, location_name: "SnsCallerArn"))
     SmsConfigurationType.add_member(:external_id, Shapes::ShapeRef.new(shape: StringType, location_name: "ExternalId"))
     SmsConfigurationType.add_member(:sns_region, Shapes::ShapeRef.new(shape: RegionCodeType, location_name: "SnsRegion"))
+    SmsConfigurationType.add_member(:eums_sms, Shapes::ShapeRef.new(shape: EumsSmsConfigurationType, location_name: "EumsSms"))
     SmsConfigurationType.struct_class = Types::SmsConfigurationType
 
     SmsMfaConfigType.add_member(:sms_authentication_message, Shapes::ShapeRef.new(shape: SmsVerificationMessageType, location_name: "SmsAuthenticationMessage"))
@@ -2425,6 +2439,7 @@ module Aws::CognitoIdentityProvider
     UserImportJobType.add_member(:skipped_users, Shapes::ShapeRef.new(shape: LongType, location_name: "SkippedUsers"))
     UserImportJobType.add_member(:failed_users, Shapes::ShapeRef.new(shape: LongType, location_name: "FailedUsers"))
     UserImportJobType.add_member(:completion_message, Shapes::ShapeRef.new(shape: CompletionMessageType, location_name: "CompletionMessage"))
+    UserImportJobType.add_member(:password_hashing_algorithm, Shapes::ShapeRef.new(shape: PasswordHashingAlgorithmType, location_name: "PasswordHashingAlgorithm"))
     UserImportJobType.struct_class = Types::UserImportJobType
 
     UserImportJobsListType.member = Shapes::ShapeRef.new(shape: UserImportJobType)

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -4052,12 +4052,20 @@ module Aws::CognitoIdentityProvider
     #   role.
     #   @return [String]
     #
+    # @!attribute [rw] password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the
+    #   CSV file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CreateUserImportJobRequest AWS API Documentation
     #
     class CreateUserImportJobRequest < Struct.new(
       :job_name,
       :user_pool_id,
-      :cloud_watch_logs_role_arn)
+      :cloud_watch_logs_role_arn,
+      :password_hashing_algorithm)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4962,17 +4970,33 @@ module Aws::CognitoIdentityProvider
     #
     # @!attribute [rw] security_policy
     #   The security policy for the custom domain. Defines the minimum TLS
-    #   version and cipher suites that CloudFront uses when communicating
-    #   with viewers (clients). Valid values are as follows:
+    #   version and cipher suites that Amazon CloudFront supports when
+    #   communicating with clients. For specific guidance, see [Supported
+    #   protocols and ciphers between viewers and CloudFront][1]. Valid
+    #   values are as follows:
+    #
+    #   * `TLS_V1_3_2025` (strictest): A post-quantum-ready policy requiring
+    #     TLS 1.3. It provides the strongest security posture and is ideal
+    #     for workloads where all clients and browsers are updated to the
+    #     latest versions. [Supported protocols and ciphers for
+    #     TLSv1.3\_2025][1].
+    #
+    #   * `TLS_V1_2_2021` (recommended): A post-quantum-ready policy which
+    #     prefers TLS 1.3 but allows fallback to TLS 1.2 to accommodate
+    #     older clients. It is the recommended minimum for typical
+    #     commercial-grade consumer applications. [Supported protocols and
+    #     ciphers for TLSv1.2\_2021][1].
     #
-    #   * `TLS_V1`: Supports TLS 1.0 and later. Provides the broadest client
-    #     compatibility.
+    #   * `TLS_V1` (strongly discouraged): Permits fallback to TLS 1.0. It
+    #     offers the broadest compatibility, including support for legacy
+    #     clients that are more than a decade old. This compatibility comes
+    #     at the expense of allowing TLS versions and cryptographic
+    #     algorithms that are no longer considered safe for commercial use.
+    #     [Supported protocols and ciphers for TLSv1][1].
     #
-    #   * `TLS_V1_2_2021`: Supports TLS 1.2 and later with 2021 cipher
-    #     suites. Recommended minimum for most use cases.
     #
-    #   * `TLS_V1_3_2025`: Supports TLS 1.3 and later with 2025 cipher
-    #     suites. Provides the strongest security posture.
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CustomDomainConfigType AWS API Documentation
@@ -6082,6 +6106,99 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
+    # The configuration that Amazon Cognito uses to send SMS messages
+    # through Amazon Web Services End User Messaging SMS. Provide this
+    # structure in the `EumsSms` member of `SmsConfigurationType` to use
+    # Amazon Web Services End User Messaging SMS instead of Amazon SNS.
+    #
+    # @!attribute [rw] caller_arn
+    #   The ARN of the IAM role that Amazon Cognito assumes to send SMS
+    #   messages through Amazon Web Services End User Messaging SMS. The
+    #   role must grant permission to call the `sms-voice:SendTextMessage`
+    #   operation.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_id
+    #   The external ID that Amazon Cognito includes when it assumes the
+    #   `CallerArn` role. Use this value as a condition in the role trust
+    #   policy to prevent the confused deputy problem.
+    #   @return [String]
+    #
+    # @!attribute [rw] origination_identity
+    #   The origination identity that Amazon Web Services End User Messaging
+    #   SMS uses to send messages to your users. This value can be one of
+    #   the following:
+    #
+    #   * A phone number – A long code, toll-free number, or short code that
+    #     is assigned to your account.
+    #
+    #   * A sender ID – An alphabetic name that identifies the message
+    #     sender in supported countries.
+    #
+    #   * A phone pool – A group of phone numbers that Amazon Web Services
+    #     End User Messaging SMS selects from when it sends messages.
+    #
+    #   You can provide an E.164 phone number or the ARN of the phone
+    #   number, sender ID, or phone pool. Amazon Web Services End User
+    #   Messaging SMS evaluates IAM authorization with the value that you
+    #   provide. If the permissions policy of your `CallerArn` role scopes
+    #   the `sms-voice:SendTextMessage` resource to a specific ARN, provide
+    #   that same ARN. If the formats do not match, requests fail with an
+    #   `InvalidSmsRoleAccessPolicyException`.
+    #
+    #   Depending on the destination country, you must provide an
+    #   origination identity. For country-specific requirements, see
+    #   [Supported countries and regions for SMS messaging][1] in the Amazon
+    #   Web Services End User Messaging SMS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/sms-voice/latest/userguide/phone-numbers-sms-by-country.html
+    #   @return [String]
+    #
+    # @!attribute [rw] configuration_set_name
+    #   The name of the Amazon Web Services End User Messaging SMS
+    #   configuration set that Amazon Cognito applies to messages, for
+    #   logging and event destinations. If you omit this member, Amazon
+    #   Cognito sends messages without applying a configuration set.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_entity_id
+    #   The principal entity ID required by India's Distributed Ledger
+    #   Technology (DLT) regulations for SMS messages.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_template_id
+    #   The registered template ID for the message template required by
+    #   India's DLT regulations for SMS messages.
+    #   @return [String]
+    #
+    # @!attribute [rw] region
+    #   The Amazon Web Services Region of the Amazon Web Services End User
+    #   Messaging SMS resources that Amazon Cognito uses to send messages.
+    #   Amazon Web Services End User Messaging SMS must be available in your
+    #   user pool's Region.
+    #
+    #   If you omit this parameter, Amazon Cognito uses the same Region as
+    #   your user pool. You can also set this parameter to your user pool's
+    #   Region explicitly. Amazon Cognito rejects any other value with an
+    #   `InvalidParameterException`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/EumsSmsConfigurationType AWS API Documentation
+    #
+    class EumsSmsConfigurationType < Struct.new(
+      :caller_arn,
+      :external_id,
+      :origination_identity,
+      :configuration_set_name,
+      :in_entity_id,
+      :in_template_id,
+      :region)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The context data that your application submitted in an authentication
     # request with threat protection, as displayed in an
     # `AdminListUserAuthEvents` response.
@@ -11212,12 +11329,22 @@ module Aws::CognitoIdentityProvider
     #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html
     #   @return [String]
     #
+    # @!attribute [rw] eums_sms
+    #   The configuration for sending SMS messages through Amazon Web
+    #   Services End User Messaging SMS, as an alternative to Amazon SNS. In
+    #   a user pool, provide either the Amazon SNS configuration
+    #   (`SnsCallerArn`) or this configuration, but not both. In Amazon Web
+    #   Services Regions where Amazon SNS is not available, this
+    #   configuration is required.
+    #   @return [Types::EumsSmsConfigurationType]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/SmsConfigurationType AWS API Documentation
     #
     class SmsConfigurationType < Struct.new(
       :sns_caller_arn,
       :external_id,
-      :sns_region)
+      :sns_region,
+      :eums_sms)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -13418,6 +13545,13 @@ module Aws::CognitoIdentityProvider
     #   The message returned when the user import job is completed.
     #   @return [String]
     #
+    # @!attribute [rw] password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the
+    #   CSV file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UserImportJobType AWS API Documentation
     #
     class UserImportJobType < Struct.new(
@@ -13433,7 +13567,8 @@ module Aws::CognitoIdentityProvider
       :imported_users,
       :skipped_users,
       :failed_users,
-      :completion_message)
+      :completion_message,
+      :password_hashing_algorithm)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -54,7 +54,7 @@ module Aws::CognitoIdentityProvider
   autoload :EndpointProvider, 'aws-sdk-cognitoidentityprovider/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cognitoidentityprovider/endpoints'
 
-  GEM_VERSION = '1.147.0'
+  GEM_VERSION = '1.148.0'
 
 end
 

data/sig/client.rbs

@@ -657,7 +657,8 @@ module Aws
       def create_user_import_job: (
                                     job_name: ::String,
                                     user_pool_id: ::String,
-                                    cloud_watch_logs_role_arn: ::String
+                                    cloud_watch_logs_role_arn: ::String,
+                                    ?password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
                                   ) -> _CreateUserImportJobResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateUserImportJobResponseSuccess
 
@@ -694,11 +695,7 @@ module Aws
                                 from: ::String?,
                                 configuration_set: ::String?
                               },
-                              ?sms_configuration: {
-                                sns_caller_arn: ::String,
-                                external_id: ::String?,
-                                sns_region: ::String?
-                              },
+                              ?sms_configuration: Params::sms_configuration_type,
                               ?user_pool_tags: Hash[::String, ::String],
                               ?admin_create_user_config: Params::admin_create_user_config_type,
                               ?schema: Array[
@@ -1613,11 +1610,7 @@ module Aws
                                       user_pool_id: ::String,
                                       ?sms_mfa_configuration: {
                                         sms_authentication_message: ::String?,
-                                        sms_configuration: {
-                                          sns_caller_arn: ::String,
-                                          external_id: ::String?,
-                                          sns_region: ::String?
-                                        }?
+                                        sms_configuration: Params::sms_configuration_type?
                                       },
                                       ?software_token_mfa_configuration: {
                                         enabled: bool?
@@ -1907,11 +1900,7 @@ module Aws
                                 from: ::String?,
                                 configuration_set: ::String?
                               },
-                              ?sms_configuration: {
-                                sns_caller_arn: ::String,
-                                external_id: ::String?,
-                                sns_region: ::String?
-                              },
+                              ?sms_configuration: Params::sms_configuration_type,
                               ?user_pool_tags: Hash[::String, ::String],
                               ?admin_create_user_config: Params::admin_create_user_config_type,
                               ?user_pool_add_ons: {

data/sig/params.rbs

@@ -93,6 +93,23 @@ module Aws
       default_email_option: ("CONFIRM_WITH_LINK" | "CONFIRM_WITH_CODE")?
     }
 
+      type eums_sms_configuration_type = {
+      caller_arn: ::String,
+      external_id: ::String?,
+      origination_identity: ::String?,
+      configuration_set_name: ::String?,
+      in_entity_id: ::String?,
+      in_template_id: ::String?,
+      region: ::String?
+    }
+
+      type sms_configuration_type = {
+      sns_caller_arn: ::String?,
+      external_id: ::String?,
+      sns_region: ::String?,
+      eums_sms: Params::eums_sms_configuration_type?
+    }
+
       type admin_create_user_config_type = {
       allow_admin_create_user_only: bool?,
       unused_account_validity_days: ::Integer?,

data/sig/types.rbs

@@ -640,6 +640,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor job_name: ::String
       attr_accessor user_pool_id: ::String
       attr_accessor cloud_watch_logs_role_arn: ::String
+      attr_accessor password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
       SENSITIVE: []
     end
 
@@ -1037,6 +1038,17 @@ module Aws::CognitoIdentityProvider
       SENSITIVE: []
     end
 
+    class EumsSmsConfigurationType
+      attr_accessor caller_arn: ::String
+      attr_accessor external_id: ::String
+      attr_accessor origination_identity: ::String
+      attr_accessor configuration_set_name: ::String
+      attr_accessor in_entity_id: ::String
+      attr_accessor in_template_id: ::String
+      attr_accessor region: ::String
+      SENSITIVE: []
+    end
+
     class EventContextDataType
       attr_accessor ip_address: ::String
       attr_accessor device_name: ::String
@@ -1982,6 +1994,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor sns_caller_arn: ::String
       attr_accessor external_id: ::String
       attr_accessor sns_region: ::String
+      attr_accessor eums_sms: Types::EumsSmsConfigurationType
       SENSITIVE: []
     end
 
@@ -2388,6 +2401,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor skipped_users: ::Integer
       attr_accessor failed_users: ::Integer
       attr_accessor completion_message: ::String
+      attr_accessor password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.147.0
+  version: 1.148.0
 platform: ruby
 authors:
 - Amazon Web Services