aws-sdk-cognitoidentityprovider 1.147.0 → 1.149.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c5c460a60038c169e29f9d0e6c09fbb36d7b58a3f64f245a08bbd8682ed19320
-  data.tar.gz: 4617237073fcf85789e22c20f749af51ba4052fc8ac00d6b7f30a08399a37a46
+  metadata.gz: 596a7ce8aa6cd1e63718f70d3e9760e382113bfc5a0a384c59ee90b4a54f400d
+  data.tar.gz: cc937a7321ff09b987ea70b47b0e9ba2e853141238ba481ea1298c6a434d0e89
 SHA512:
-  metadata.gz: 39c75a131e4620200ceb2f90c3f41d77a4948d7994b93e09ecc442db0528a5691b948e10dff93b1123c9fe5ed923f9e1865290f2f5e4f42a8e536f7b7fcc2e37
-  data.tar.gz: de7473281c09a77f60f44fcb0329de15c1f824bd4acd1f87412fe2b4e1f138e59d82f424be2ba3ffadb9b7220c226fc833e49313c06a20e0f6a5a93dbdab6088
+  metadata.gz: 0a33ebb69d6441e6a61e0564f670e834792d19baf3305305a18d97d45c280d8138a35a3ab2ba04d836b395162a0697870ef323842f50a5db7dd3e18d548c73d7
+  data.tar.gz: 3b66ac29709c631addae7649fc7872460dbc0eacc7e02064a2763b34ae59cab2f7ae25bdf19a98972167da8df734f432dda4bcf8205e3b24d88d5f09787c4309

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.149.0 (2026-07-24)
+------------------
+
+* Feature - Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool.
+
+1.148.0 (2026-07-17)
+------------------
+
+* Feature - Amazon Cognito user pools now support sending SMS via AWS End User Messaging. A new EumsSms object in SmsConfigurationType lets you deliver MFA and verification texts through AWS End User Messaging, alongside the existing Amazon SNS option.
+
 1.147.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.147.0
+1.149.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -1598,6 +1598,75 @@ module Aws::CognitoIdentityProvider
       req.send_request(options)
     end
 
+    # Lists the authentication options for a user in a user pool. Returns
+    # the following:
+    #
+    # 1.  The user's multi-factor authentication (MFA) preferences.
+    #
+    # 2.  The user's options for choice-based authentication with the
+    #     `USER_AUTH` flow.
+    #
+    # <note markdown="1"> Amazon Cognito evaluates Identity and Access Management (IAM) policies
+    # in requests for this API operation. For this operation, you must use
+    # IAM credentials to authorize requests, and you must grant yourself the
+    # corresponding IAM permission in a policy.
+    #
+    #  **Learn more**
+    #
+    #  * [Signing Amazon Web Services API Requests][1]
+    #
+    # * [Using the Amazon Cognito user pools API and user pool endpoints][2]
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-signing.html
+    # [2]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html
+    #
+    # @option params [required, String] :user_pool_id
+    #   The ID of the user pool where you want to get information about the
+    #   user's authentication factors.
+    #
+    # @option params [required, String] :username
+    #   The name of the user that you want to query or modify. The value of
+    #   this parameter is typically your user's username, but it can be any
+    #   of their alias attributes. If `username` isn't an alias attribute in
+    #   your user pool, this value must be the `sub` of a local user or the
+    #   username of a user from a third-party IdP.
+    #
+    # @return [Types::AdminGetUserAuthFactorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::AdminGetUserAuthFactorsResponse#username #username} => String
+    #   * {Types::AdminGetUserAuthFactorsResponse#preferred_mfa_setting #preferred_mfa_setting} => String
+    #   * {Types::AdminGetUserAuthFactorsResponse#user_mfa_setting_list #user_mfa_setting_list} => Array&lt;String&gt;
+    #   * {Types::AdminGetUserAuthFactorsResponse#configured_user_auth_factors #configured_user_auth_factors} => Array&lt;String&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.admin_get_user_auth_factors({
+    #     user_pool_id: "UserPoolIdType", # required
+    #     username: "UsernameType", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.username #=> String
+    #   resp.preferred_mfa_setting #=> String
+    #   resp.user_mfa_setting_list #=> Array
+    #   resp.user_mfa_setting_list[0] #=> String
+    #   resp.configured_user_auth_factors #=> Array
+    #   resp.configured_user_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN", "SOFTWARE_TOKEN"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminGetUserAuthFactors AWS API Documentation
+    #
+    # @overload admin_get_user_auth_factors(params = {})
+    # @param [Hash] params ({})
+    def admin_get_user_auth_factors(params = {}, options = {})
+      req = build_request(:admin_get_user_auth_factors, params)
+      req.send_request(options)
+    end
+
     # Starts sign-in for applications with a server-side component, for
     # example a traditional web application. This operation specifies the
     # authentication flow that you'd like to begin. The authentication flow
@@ -4703,6 +4772,12 @@ module Aws::CognitoIdentityProvider
     #   results to Amazon CloudWatch Logs. This parameter is the ARN of that
     #   role.
     #
+    # @option params [String] :password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the CSV
+    #   file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #
     # @return [Types::CreateUserImportJobResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateUserImportJobResponse#user_import_job #user_import_job} => Types::UserImportJobType
@@ -4713,6 +4788,7 @@ module Aws::CognitoIdentityProvider
     #     job_name: "UserImportJobNameType", # required
     #     user_pool_id: "UserPoolIdType", # required
     #     cloud_watch_logs_role_arn: "ArnType", # required
+    #     password_hashing_algorithm: "BCRYPT", # accepts BCRYPT, SCRYPT, ARGON2ID, PBKDF2_SHA256
     #   })
     #
     # @example Response structure
@@ -4730,6 +4806,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CreateUserImportJob AWS API Documentation
     #
@@ -4879,6 +4956,23 @@ module Aws::CognitoIdentityProvider
     #   prompts in API responses and in managed login for users who have
     #   chosen and configured a preferred MFA factor.
     #
+    #   The `CreateUserPool` operation supports only SMS MFA configuration. If
+    #   you set `MfaConfiguration` to either of these values, include an
+    #   `SmsConfiguration` in the same request:
+    #
+    #   * `ON` – Requires MFA for all users
+    #
+    #   * `OPTIONAL` – Makes MFA optional for each user
+    #
+    #   If you omit `SmsConfiguration`, the operation returns an
+    #   `InvalidParameterException`. To configure TOTP or email MFA, use the
+    #   [SetUserPoolMfaConfig][1] operation. You can also use
+    #   `SetUserPoolMfaConfig` to add MFA factors later.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserPoolMfaConfig.html
+    #
     # @option params [Types::UserAttributeUpdateSettingsType] :user_attribute_update_settings
     #   The settings for updates to user attributes. These settings include
     #   the property `AttributesRequireVerificationBeforeUpdate`, a user-pool
@@ -5496,7 +5590,7 @@ module Aws::CognitoIdentityProvider
     #         temporary_password_validity_days: 1,
     #       },
     #       sign_in_policy: {
-    #         allowed_first_auth_factors: ["PASSWORD"], # accepts PASSWORD, EMAIL_OTP, SMS_OTP, WEB_AUTHN
+    #         allowed_first_auth_factors: ["PASSWORD"], # accepts PASSWORD, EMAIL_OTP, SMS_OTP, WEB_AUTHN, SOFTWARE_TOKEN
     #       },
     #     },
     #     deletion_protection: "ACTIVE", # accepts ACTIVE, INACTIVE
@@ -5560,9 +5654,18 @@ module Aws::CognitoIdentityProvider
     #       configuration_set: "SESConfigurationSet",
     #     },
     #     sms_configuration: {
-    #       sns_caller_arn: "ArnType", # required
+    #       sns_caller_arn: "OptionalArnType",
     #       external_id: "StringType",
     #       sns_region: "RegionCodeType",
+    #       eums_sms: {
+    #         caller_arn: "ArnType", # required
+    #         external_id: "StringType",
+    #         origination_identity: "StringType",
+    #         configuration_set_name: "StringType",
+    #         in_entity_id: "StringType",
+    #         in_template_id: "StringType",
+    #         region: "RegionCodeType",
+    #       },
     #     },
     #     user_pool_tags: {
     #       "TagKeysType" => "TagValueType",
@@ -5632,7 +5735,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.policies.password_policy.password_history_size #=> Integer
     #   resp.user_pool.policies.password_policy.temporary_password_validity_days #=> Integer
     #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors #=> Array
-    #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN"
+    #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN", "SOFTWARE_TOKEN"
     #   resp.user_pool.deletion_protection #=> String, one of "ACTIVE", "INACTIVE"
     #   resp.user_pool.lambda_config.pre_sign_up #=> String
     #   resp.user_pool.lambda_config.custom_message #=> String
@@ -5696,6 +5799,13 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.sms_configuration.sns_caller_arn #=> String
     #   resp.user_pool.sms_configuration.external_id #=> String
     #   resp.user_pool.sms_configuration.sns_region #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.external_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.region #=> String
     #   resp.user_pool.user_pool_tags #=> Hash
     #   resp.user_pool.user_pool_tags["TagKeysType"] #=> String
     #   resp.user_pool.sms_configuration_failure #=> String
@@ -6400,9 +6510,18 @@ module Aws::CognitoIdentityProvider
     #   Managed login requires that your user pool be configured for any
     #   [feature plan][1] other than `Lite`.
     #
+    #   A `ManagedLoginVersion` value of `2` does not activate managed login
+    #   pages for your app client. When you create an app client
+    #   programmatically, your app client has no branding style. To use
+    #   managed login, create a branding style using the
+    #   [CreateManagedLoginBranding][2] operation. When you use the console,
+    #   Amazon Cognito assigns a default branding style automatically. When
+    #   you use the API or an SDK, you must create a branding style yourself.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html
+    #   [2]: https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html
     #
     # @option params [Types::CustomDomainConfigType] :custom_domain_config
     #   The configuration for a custom domain. Configures your domain with an
@@ -7503,6 +7622,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/DescribeUserImportJob AWS API Documentation
     #
@@ -7560,7 +7680,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.policies.password_policy.password_history_size #=> Integer
     #   resp.user_pool.policies.password_policy.temporary_password_validity_days #=> Integer
     #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors #=> Array
-    #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN"
+    #   resp.user_pool.policies.sign_in_policy.allowed_first_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN", "SOFTWARE_TOKEN"
     #   resp.user_pool.deletion_protection #=> String, one of "ACTIVE", "INACTIVE"
     #   resp.user_pool.lambda_config.pre_sign_up #=> String
     #   resp.user_pool.lambda_config.custom_message #=> String
@@ -7624,6 +7744,13 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.sms_configuration.sns_caller_arn #=> String
     #   resp.user_pool.sms_configuration.external_id #=> String
     #   resp.user_pool.sms_configuration.sns_region #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.external_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.user_pool.sms_configuration.eums_sms.region #=> String
     #   resp.user_pool.user_pool_tags #=> Hash
     #   resp.user_pool.user_pool_tags["TagKeysType"] #=> String
     #   resp.user_pool.sms_configuration_failure #=> String
@@ -8827,7 +8954,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_mfa_setting_list #=> Array
     #   resp.user_mfa_setting_list[0] #=> String
     #   resp.configured_user_auth_factors #=> Array
-    #   resp.configured_user_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN"
+    #   resp.configured_user_auth_factors[0] #=> String, one of "PASSWORD", "EMAIL_OTP", "SMS_OTP", "WEB_AUTHN", "SOFTWARE_TOKEN"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/GetUserAuthFactors AWS API Documentation
     #
@@ -8894,6 +9021,13 @@ module Aws::CognitoIdentityProvider
     #   resp.sms_mfa_configuration.sms_configuration.sns_caller_arn #=> String
     #   resp.sms_mfa_configuration.sms_configuration.external_id #=> String
     #   resp.sms_mfa_configuration.sms_configuration.sns_region #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.external_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.region #=> String
     #   resp.software_token_mfa_configuration.enabled #=> Boolean
     #   resp.email_mfa_configuration.message #=> String
     #   resp.email_mfa_configuration.subject #=> String
@@ -9767,6 +9901,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_jobs[0].skipped_users #=> Integer
     #   resp.user_import_jobs[0].failed_users #=> Integer
     #   resp.user_import_jobs[0].completion_message #=> String
+    #   resp.user_import_jobs[0].password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #   resp.pagination_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/ListUserImportJobs AWS API Documentation
@@ -11576,9 +11711,18 @@ module Aws::CognitoIdentityProvider
     #     sms_mfa_configuration: {
     #       sms_authentication_message: "SmsVerificationMessageType",
     #       sms_configuration: {
-    #         sns_caller_arn: "ArnType", # required
+    #         sns_caller_arn: "OptionalArnType",
     #         external_id: "StringType",
     #         sns_region: "RegionCodeType",
+    #         eums_sms: {
+    #           caller_arn: "ArnType", # required
+    #           external_id: "StringType",
+    #           origination_identity: "StringType",
+    #           configuration_set_name: "StringType",
+    #           in_entity_id: "StringType",
+    #           in_template_id: "StringType",
+    #           region: "RegionCodeType",
+    #         },
     #       },
     #     },
     #     software_token_mfa_configuration: {
@@ -11602,6 +11746,13 @@ module Aws::CognitoIdentityProvider
     #   resp.sms_mfa_configuration.sms_configuration.sns_caller_arn #=> String
     #   resp.sms_mfa_configuration.sms_configuration.external_id #=> String
     #   resp.sms_mfa_configuration.sms_configuration.sns_region #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.caller_arn #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.external_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.origination_identity #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.configuration_set_name #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_entity_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.in_template_id #=> String
+    #   resp.sms_mfa_configuration.sms_configuration.eums_sms.region #=> String
     #   resp.software_token_mfa_configuration.enabled #=> Boolean
     #   resp.email_mfa_configuration.message #=> String
     #   resp.email_mfa_configuration.subject #=> String
@@ -11922,6 +12073,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/StartUserImportJob AWS API Documentation
     #
@@ -12010,6 +12162,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_import_job.skipped_users #=> Integer
     #   resp.user_import_job.failed_users #=> Integer
     #   resp.user_import_job.completion_message #=> String
+    #   resp.user_import_job.password_hashing_algorithm #=> String, one of "BCRYPT", "SCRYPT", "ARGON2ID", "PBKDF2_SHA256"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/StopUserImportJob AWS API Documentation
     #
@@ -13331,7 +13484,7 @@ module Aws::CognitoIdentityProvider
     #         temporary_password_validity_days: 1,
     #       },
     #       sign_in_policy: {
-    #         allowed_first_auth_factors: ["PASSWORD"], # accepts PASSWORD, EMAIL_OTP, SMS_OTP, WEB_AUTHN
+    #         allowed_first_auth_factors: ["PASSWORD"], # accepts PASSWORD, EMAIL_OTP, SMS_OTP, WEB_AUTHN, SOFTWARE_TOKEN
     #       },
     #     },
     #     deletion_protection: "ACTIVE", # accepts ACTIVE, INACTIVE
@@ -13393,9 +13546,18 @@ module Aws::CognitoIdentityProvider
     #       configuration_set: "SESConfigurationSet",
     #     },
     #     sms_configuration: {
-    #       sns_caller_arn: "ArnType", # required
+    #       sns_caller_arn: "OptionalArnType",
     #       external_id: "StringType",
     #       sns_region: "RegionCodeType",
+    #       eums_sms: {
+    #         caller_arn: "ArnType", # required
+    #         external_id: "StringType",
+    #         origination_identity: "StringType",
+    #         configuration_set_name: "StringType",
+    #         in_entity_id: "StringType",
+    #         in_template_id: "StringType",
+    #         region: "RegionCodeType",
+    #       },
     #     },
     #     user_pool_tags: {
     #       "TagKeysType" => "TagValueType",
@@ -14256,7 +14418,7 @@ module Aws::CognitoIdentityProvider
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.147.0'
+      context[:gem_version] = '1.149.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -46,6 +46,8 @@ module Aws::CognitoIdentityProvider
     AdminForgetDeviceRequest = Shapes::StructureShape.new(name: 'AdminForgetDeviceRequest')
     AdminGetDeviceRequest = Shapes::StructureShape.new(name: 'AdminGetDeviceRequest')
     AdminGetDeviceResponse = Shapes::StructureShape.new(name: 'AdminGetDeviceResponse')
+    AdminGetUserAuthFactorsRequest = Shapes::StructureShape.new(name: 'AdminGetUserAuthFactorsRequest')
+    AdminGetUserAuthFactorsResponse = Shapes::StructureShape.new(name: 'AdminGetUserAuthFactorsResponse')
     AdminGetUserRequest = Shapes::StructureShape.new(name: 'AdminGetUserRequest')
     AdminGetUserResponse = Shapes::StructureShape.new(name: 'AdminGetUserResponse')
     AdminInitiateAuthRequest = Shapes::StructureShape.new(name: 'AdminInitiateAuthRequest')
@@ -258,6 +260,7 @@ module Aws::CognitoIdentityProvider
     EnableSoftwareTokenMFAException = Shapes::StructureShape.new(name: 'EnableSoftwareTokenMFAException')
     EncryptionKeyArnType = Shapes::StringShape.new(name: 'EncryptionKeyArnType')
     EncryptionKeyType = Shapes::StringShape.new(name: 'EncryptionKeyType')
+    EumsSmsConfigurationType = Shapes::StructureShape.new(name: 'EumsSmsConfigurationType')
     EventContextDataType = Shapes::StructureShape.new(name: 'EventContextDataType')
     EventFeedbackType = Shapes::StructureShape.new(name: 'EventFeedbackType')
     EventFilterType = Shapes::StringShape.new(name: 'EventFilterType')
@@ -406,8 +409,10 @@ module Aws::CognitoIdentityProvider
     OAuthFlowType = Shapes::StringShape.new(name: 'OAuthFlowType')
     OAuthFlowsType = Shapes::ListShape.new(name: 'OAuthFlowsType')
     OperationNotEnabledException = Shapes::StructureShape.new(name: 'OperationNotEnabledException')
+    OptionalArnType = Shapes::StringShape.new(name: 'OptionalArnType')
     PaginationKey = Shapes::StringShape.new(name: 'PaginationKey')
     PaginationKeyType = Shapes::StringShape.new(name: 'PaginationKeyType')
+    PasswordHashingAlgorithmType = Shapes::StringShape.new(name: 'PasswordHashingAlgorithmType')
     PasswordHistoryPolicyViolationException = Shapes::StructureShape.new(name: 'PasswordHistoryPolicyViolationException')
     PasswordHistorySizeType = Shapes::IntegerShape.new(name: 'PasswordHistorySizeType')
     PasswordPolicyMinLengthType = Shapes::IntegerShape.new(name: 'PasswordPolicyMinLengthType')
@@ -745,6 +750,16 @@ module Aws::CognitoIdentityProvider
     AdminGetDeviceResponse.add_member(:device, Shapes::ShapeRef.new(shape: DeviceType, required: true, location_name: "Device"))
     AdminGetDeviceResponse.struct_class = Types::AdminGetDeviceResponse
 
+    AdminGetUserAuthFactorsRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
+    AdminGetUserAuthFactorsRequest.add_member(:username, Shapes::ShapeRef.new(shape: UsernameType, required: true, location_name: "Username"))
+    AdminGetUserAuthFactorsRequest.struct_class = Types::AdminGetUserAuthFactorsRequest
+
+    AdminGetUserAuthFactorsResponse.add_member(:username, Shapes::ShapeRef.new(shape: UsernameType, required: true, location_name: "Username"))
+    AdminGetUserAuthFactorsResponse.add_member(:preferred_mfa_setting, Shapes::ShapeRef.new(shape: StringType, location_name: "PreferredMfaSetting"))
+    AdminGetUserAuthFactorsResponse.add_member(:user_mfa_setting_list, Shapes::ShapeRef.new(shape: UserMFASettingListType, location_name: "UserMFASettingList"))
+    AdminGetUserAuthFactorsResponse.add_member(:configured_user_auth_factors, Shapes::ShapeRef.new(shape: ConfiguredUserAuthFactorsListType, location_name: "ConfiguredUserAuthFactors"))
+    AdminGetUserAuthFactorsResponse.struct_class = Types::AdminGetUserAuthFactorsResponse
+
     AdminGetUserRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
     AdminGetUserRequest.add_member(:username, Shapes::ShapeRef.new(shape: UsernameType, required: true, location_name: "Username"))
     AdminGetUserRequest.struct_class = Types::AdminGetUserRequest
@@ -1137,6 +1152,7 @@ module Aws::CognitoIdentityProvider
     CreateUserImportJobRequest.add_member(:job_name, Shapes::ShapeRef.new(shape: UserImportJobNameType, required: true, location_name: "JobName"))
     CreateUserImportJobRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
     CreateUserImportJobRequest.add_member(:cloud_watch_logs_role_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "CloudWatchLogsRoleArn"))
+    CreateUserImportJobRequest.add_member(:password_hashing_algorithm, Shapes::ShapeRef.new(shape: PasswordHashingAlgorithmType, location_name: "PasswordHashingAlgorithm"))
     CreateUserImportJobRequest.struct_class = Types::CreateUserImportJobRequest
 
     CreateUserImportJobResponse.add_member(:user_import_job, Shapes::ShapeRef.new(shape: UserImportJobType, location_name: "UserImportJob"))
@@ -1423,6 +1439,15 @@ module Aws::CognitoIdentityProvider
     EnableSoftwareTokenMFAException.add_member(:message, Shapes::ShapeRef.new(shape: MessageType, location_name: "message"))
     EnableSoftwareTokenMFAException.struct_class = Types::EnableSoftwareTokenMFAException
 
+    EumsSmsConfigurationType.add_member(:caller_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "CallerArn"))
+    EumsSmsConfigurationType.add_member(:external_id, Shapes::ShapeRef.new(shape: StringType, location_name: "ExternalId"))
+    EumsSmsConfigurationType.add_member(:origination_identity, Shapes::ShapeRef.new(shape: StringType, location_name: "OriginationIdentity"))
+    EumsSmsConfigurationType.add_member(:configuration_set_name, Shapes::ShapeRef.new(shape: StringType, location_name: "ConfigurationSetName"))
+    EumsSmsConfigurationType.add_member(:in_entity_id, Shapes::ShapeRef.new(shape: StringType, location_name: "InEntityId"))
+    EumsSmsConfigurationType.add_member(:in_template_id, Shapes::ShapeRef.new(shape: StringType, location_name: "InTemplateId"))
+    EumsSmsConfigurationType.add_member(:region, Shapes::ShapeRef.new(shape: RegionCodeType, location_name: "Region"))
+    EumsSmsConfigurationType.struct_class = Types::EumsSmsConfigurationType
+
     EventContextDataType.add_member(:ip_address, Shapes::ShapeRef.new(shape: StringType, location_name: "IpAddress"))
     EventContextDataType.add_member(:device_name, Shapes::ShapeRef.new(shape: StringType, location_name: "DeviceName"))
     EventContextDataType.add_member(:timezone, Shapes::ShapeRef.new(shape: StringType, location_name: "Timezone"))
@@ -2122,9 +2147,10 @@ module Aws::CognitoIdentityProvider
 
     SkippedIPRangeListType.member = Shapes::ShapeRef.new(shape: StringType)
 
-    SmsConfigurationType.add_member(:sns_caller_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "SnsCallerArn"))
+    SmsConfigurationType.add_member(:sns_caller_arn, Shapes::ShapeRef.new(shape: OptionalArnType, location_name: "SnsCallerArn"))
     SmsConfigurationType.add_member(:external_id, Shapes::ShapeRef.new(shape: StringType, location_name: "ExternalId"))
     SmsConfigurationType.add_member(:sns_region, Shapes::ShapeRef.new(shape: RegionCodeType, location_name: "SnsRegion"))
+    SmsConfigurationType.add_member(:eums_sms, Shapes::ShapeRef.new(shape: EumsSmsConfigurationType, location_name: "EumsSms"))
     SmsConfigurationType.struct_class = Types::SmsConfigurationType
 
     SmsMfaConfigType.add_member(:sms_authentication_message, Shapes::ShapeRef.new(shape: SmsVerificationMessageType, location_name: "SmsAuthenticationMessage"))
@@ -2425,6 +2451,7 @@ module Aws::CognitoIdentityProvider
     UserImportJobType.add_member(:skipped_users, Shapes::ShapeRef.new(shape: LongType, location_name: "SkippedUsers"))
     UserImportJobType.add_member(:failed_users, Shapes::ShapeRef.new(shape: LongType, location_name: "FailedUsers"))
     UserImportJobType.add_member(:completion_message, Shapes::ShapeRef.new(shape: CompletionMessageType, location_name: "CompletionMessage"))
+    UserImportJobType.add_member(:password_hashing_algorithm, Shapes::ShapeRef.new(shape: PasswordHashingAlgorithmType, location_name: "PasswordHashingAlgorithm"))
     UserImportJobType.struct_class = Types::UserImportJobType
 
     UserImportJobsListType.member = Shapes::ShapeRef.new(shape: UserImportJobType)
@@ -2869,6 +2896,21 @@ module Aws::CognitoIdentityProvider
         o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
       end)
 
+      api.add_operation(:admin_get_user_auth_factors, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "AdminGetUserAuthFactors"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: AdminGetUserAuthFactorsRequest)
+        o.output = Shapes::ShapeRef.new(shape: AdminGetUserAuthFactorsResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: NotAuthorizedException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotEnabledException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: UserNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+      end)
+
       api.add_operation(:admin_initiate_auth, Seahorse::Model::Operation.new.tap do |o|
         o.name = "AdminInitiateAuth"
         o.http_method = "POST"

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -809,6 +809,67 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
+    # @!attribute [rw] user_pool_id
+    #   The ID of the user pool where you want to get information about the
+    #   user's authentication factors.
+    #   @return [String]
+    #
+    # @!attribute [rw] username
+    #   The name of the user that you want to query or modify. The value of
+    #   this parameter is typically your user's username, but it can be any
+    #   of their alias attributes. If `username` isn't an alias attribute
+    #   in your user pool, this value must be the `sub` of a local user or
+    #   the username of a user from a third-party IdP.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminGetUserAuthFactorsRequest AWS API Documentation
+    #
+    class AdminGetUserAuthFactorsRequest < Struct.new(
+      :user_pool_id,
+      :username)
+      SENSITIVE = [:username]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] username
+    #   The name of the user who is eligible for the authentication factors
+    #   in the response.
+    #   @return [String]
+    #
+    # @!attribute [rw] preferred_mfa_setting
+    #   The challenge method that Amazon Cognito returns to the user in
+    #   response to sign-in requests. Users can prefer SMS message, email
+    #   message, or TOTP MFA.
+    #   @return [String]
+    #
+    # @!attribute [rw] user_mfa_setting_list
+    #   The MFA options that are activated for the user. The possible values
+    #   in this list are `SMS_MFA`, `EMAIL_OTP`, and `SOFTWARE_TOKEN_MFA`.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] configured_user_auth_factors
+    #   The authentication types that are available to the user with
+    #   `USER_AUTH` sign-in, for example `["PASSWORD", "WEB_AUTHN"]`.
+    #
+    #   `PASSWORD` can only be used as a first authentication factor.
+    #   `SOFTWARE_TOKEN` can only be used as an MFA factor. `EMAIL_OTP`,
+    #   `SMS_OTP`, and `WEB_AUTHN` can be used as either a first
+    #   authentication factor or an MFA factor. `WEB_AUTHN` is available as
+    #   an MFA factor only when passkey MFA is enabled at the user pool
+    #   level.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminGetUserAuthFactorsResponse AWS API Documentation
+    #
+    class AdminGetUserAuthFactorsResponse < Struct.new(
+      :username,
+      :preferred_mfa_setting,
+      :user_mfa_setting_list,
+      :configured_user_auth_factors)
+      SENSITIVE = [:username]
+      include Aws::Structure
+    end
+
     # Represents the request to get the specified user as an administrator.
     #
     # @!attribute [rw] user_pool_id
@@ -4052,12 +4113,20 @@ module Aws::CognitoIdentityProvider
     #   role.
     #   @return [String]
     #
+    # @!attribute [rw] password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the
+    #   CSV file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CreateUserImportJobRequest AWS API Documentation
     #
     class CreateUserImportJobRequest < Struct.new(
       :job_name,
       :user_pool_id,
-      :cloud_watch_logs_role_arn)
+      :cloud_watch_logs_role_arn,
+      :password_hashing_algorithm)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4535,9 +4604,19 @@ module Aws::CognitoIdentityProvider
     #   Managed login requires that your user pool be configured for any
     #   [feature plan][1] other than `Lite`.
     #
+    #   A `ManagedLoginVersion` value of `2` does not activate managed login
+    #   pages for your app client. When you create an app client
+    #   programmatically, your app client has no branding style. To use
+    #   managed login, create a branding style using the
+    #   [CreateManagedLoginBranding][2] operation. When you use the console,
+    #   Amazon Cognito assigns a default branding style automatically. When
+    #   you use the API or an SDK, you must create a branding style
+    #   yourself.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-sign-in-feature-plans.html
+    #   [2]: https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html
     #   @return [Integer]
     #
     # @!attribute [rw] custom_domain_config
@@ -4753,6 +4832,23 @@ module Aws::CognitoIdentityProvider
     #   automatically prompt users to set up MFA. Amazon Cognito generates
     #   MFA prompts in API responses and in managed login for users who have
     #   chosen and configured a preferred MFA factor.
+    #
+    #   The `CreateUserPool` operation supports only SMS MFA configuration.
+    #   If you set `MfaConfiguration` to either of these values, include an
+    #   `SmsConfiguration` in the same request:
+    #
+    #   * `ON` – Requires MFA for all users
+    #
+    #   * `OPTIONAL` – Makes MFA optional for each user
+    #
+    #   If you omit `SmsConfiguration`, the operation returns an
+    #   `InvalidParameterException`. To configure TOTP or email MFA, use the
+    #   [SetUserPoolMfaConfig][1] operation. You can also use
+    #   `SetUserPoolMfaConfig` to add MFA factors later.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserPoolMfaConfig.html
     #   @return [String]
     #
     # @!attribute [rw] user_attribute_update_settings
@@ -4962,17 +5058,33 @@ module Aws::CognitoIdentityProvider
     #
     # @!attribute [rw] security_policy
     #   The security policy for the custom domain. Defines the minimum TLS
-    #   version and cipher suites that CloudFront uses when communicating
-    #   with viewers (clients). Valid values are as follows:
+    #   version and cipher suites that Amazon CloudFront supports when
+    #   communicating with clients. For specific guidance, see [Supported
+    #   protocols and ciphers between viewers and CloudFront][1]. Valid
+    #   values are as follows:
+    #
+    #   * `TLS_V1_3_2025` (strictest): A post-quantum-ready policy requiring
+    #     TLS 1.3. It provides the strongest security posture and is ideal
+    #     for workloads where all clients and browsers are updated to the
+    #     latest versions. [Supported protocols and ciphers for
+    #     TLSv1.3\_2025][1].
+    #
+    #   * `TLS_V1_2_2021` (recommended): A post-quantum-ready policy which
+    #     prefers TLS 1.3 but allows fallback to TLS 1.2 to accommodate
+    #     older clients. It is the recommended minimum for typical
+    #     commercial-grade consumer applications. [Supported protocols and
+    #     ciphers for TLSv1.2\_2021][1].
     #
-    #   * `TLS_V1`: Supports TLS 1.0 and later. Provides the broadest client
-    #     compatibility.
+    #   * `TLS_V1` (strongly discouraged): Permits fallback to TLS 1.0. It
+    #     offers the broadest compatibility, including support for legacy
+    #     clients that are more than a decade old. This compatibility comes
+    #     at the expense of allowing TLS versions and cryptographic
+    #     algorithms that are no longer considered safe for commercial use.
+    #     [Supported protocols and ciphers for TLSv1][1].
     #
-    #   * `TLS_V1_2_2021`: Supports TLS 1.2 and later with 2021 cipher
-    #     suites. Recommended minimum for most use cases.
     #
-    #   * `TLS_V1_3_2025`: Supports TLS 1.3 and later with 2025 cipher
-    #     suites. Provides the strongest security posture.
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/CustomDomainConfigType AWS API Documentation
@@ -6082,6 +6194,99 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
+    # The configuration that Amazon Cognito uses to send SMS messages
+    # through Amazon Web Services End User Messaging SMS. Provide this
+    # structure in the `EumsSms` member of `SmsConfigurationType` to use
+    # Amazon Web Services End User Messaging SMS instead of Amazon SNS.
+    #
+    # @!attribute [rw] caller_arn
+    #   The ARN of the IAM role that Amazon Cognito assumes to send SMS
+    #   messages through Amazon Web Services End User Messaging SMS. The
+    #   role must grant permission to call the `sms-voice:SendTextMessage`
+    #   operation.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_id
+    #   The external ID that Amazon Cognito includes when it assumes the
+    #   `CallerArn` role. Use this value as a condition in the role trust
+    #   policy to prevent the confused deputy problem.
+    #   @return [String]
+    #
+    # @!attribute [rw] origination_identity
+    #   The origination identity that Amazon Web Services End User Messaging
+    #   SMS uses to send messages to your users. This value can be one of
+    #   the following:
+    #
+    #   * A phone number – A long code, toll-free number, or short code that
+    #     is assigned to your account.
+    #
+    #   * A sender ID – An alphabetic name that identifies the message
+    #     sender in supported countries.
+    #
+    #   * A phone pool – A group of phone numbers that Amazon Web Services
+    #     End User Messaging SMS selects from when it sends messages.
+    #
+    #   You can provide an E.164 phone number or the ARN of the phone
+    #   number, sender ID, or phone pool. Amazon Web Services End User
+    #   Messaging SMS evaluates IAM authorization with the value that you
+    #   provide. If the permissions policy of your `CallerArn` role scopes
+    #   the `sms-voice:SendTextMessage` resource to a specific ARN, provide
+    #   that same ARN. If the formats do not match, requests fail with an
+    #   `InvalidSmsRoleAccessPolicyException`.
+    #
+    #   Depending on the destination country, you must provide an
+    #   origination identity. For country-specific requirements, see
+    #   [Supported countries and regions for SMS messaging][1] in the Amazon
+    #   Web Services End User Messaging SMS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/sms-voice/latest/userguide/phone-numbers-sms-by-country.html
+    #   @return [String]
+    #
+    # @!attribute [rw] configuration_set_name
+    #   The name of the Amazon Web Services End User Messaging SMS
+    #   configuration set that Amazon Cognito applies to messages, for
+    #   logging and event destinations. If you omit this member, Amazon
+    #   Cognito sends messages without applying a configuration set.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_entity_id
+    #   The principal entity ID required by India's Distributed Ledger
+    #   Technology (DLT) regulations for SMS messages.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_template_id
+    #   The registered template ID for the message template required by
+    #   India's DLT regulations for SMS messages.
+    #   @return [String]
+    #
+    # @!attribute [rw] region
+    #   The Amazon Web Services Region of the Amazon Web Services End User
+    #   Messaging SMS resources that Amazon Cognito uses to send messages.
+    #   Amazon Web Services End User Messaging SMS must be available in your
+    #   user pool's Region.
+    #
+    #   If you omit this parameter, Amazon Cognito uses the same Region as
+    #   your user pool. You can also set this parameter to your user pool's
+    #   Region explicitly. Amazon Cognito rejects any other value with an
+    #   `InvalidParameterException`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/EumsSmsConfigurationType AWS API Documentation
+    #
+    class EumsSmsConfigurationType < Struct.new(
+      :caller_arn,
+      :external_id,
+      :origination_identity,
+      :configuration_set_name,
+      :in_entity_id,
+      :in_template_id,
+      :region)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The context data that your application submitted in an authentication
     # request with threat protection, as displayed in an
     # `AdminListUserAuthEvents` response.
@@ -6858,6 +7063,13 @@ module Aws::CognitoIdentityProvider
     # @!attribute [rw] configured_user_auth_factors
     #   The authentication types that are available to the user with
     #   `USER_AUTH` sign-in, for example `["PASSWORD", "WEB_AUTHN"]`.
+    #
+    #   `PASSWORD` can only be used as a first authentication factor.
+    #   `SOFTWARE_TOKEN` can only be used as an MFA factor. `EMAIL_OTP`,
+    #   `SMS_OTP`, and `WEB_AUTHN` can be used as either a first
+    #   authentication factor or an MFA factor. `WEB_AUTHN` is available as
+    #   an MFA factor only when passkey MFA is enabled at the user pool
+    #   level.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/GetUserAuthFactorsResponse AWS API Documentation
@@ -10970,6 +11182,11 @@ module Aws::CognitoIdentityProvider
     #   You can permit users to start authentication with a standard
     #   username and password, or with other one-time password and hardware
     #   factors.
+    #
+    #   <note markdown="1"> `SOFTWARE_TOKEN` is not currently supported as a first auth factor.
+    #   Do not include this value in `AllowedFirstAuthFactors`.
+    #
+    #    </note>
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/SignInPolicyType AWS API Documentation
@@ -11212,12 +11429,22 @@ module Aws::CognitoIdentityProvider
     #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html
     #   @return [String]
     #
+    # @!attribute [rw] eums_sms
+    #   The configuration for sending SMS messages through Amazon Web
+    #   Services End User Messaging SMS, as an alternative to Amazon SNS. In
+    #   a user pool, provide either the Amazon SNS configuration
+    #   (`SnsCallerArn`) or this configuration, but not both. In Amazon Web
+    #   Services Regions where Amazon SNS is not available, this
+    #   configuration is required.
+    #   @return [Types::EumsSmsConfigurationType]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/SmsConfigurationType AWS API Documentation
     #
     class SmsConfigurationType < Struct.new(
       :sns_caller_arn,
       :external_id,
-      :sns_region)
+      :sns_region,
+      :eums_sms)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -13418,6 +13645,13 @@ module Aws::CognitoIdentityProvider
     #   The message returned when the user import job is completed.
     #   @return [String]
     #
+    # @!attribute [rw] password_hashing_algorithm
+    #   The password hashing algorithm used to generate the hashes in the
+    #   CSV file for this import job.
+    #
+    #   Valid values: `BCRYPT` \| `SCRYPT` \| `ARGON2ID` \| `PBKDF2_SHA256`
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UserImportJobType AWS API Documentation
     #
     class UserImportJobType < Struct.new(
@@ -13433,7 +13667,8 @@ module Aws::CognitoIdentityProvider
       :imported_users,
       :skipped_users,
       :failed_users,
-      :completion_message)
+      :completion_message,
+      :password_hashing_algorithm)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -54,7 +54,7 @@ module Aws::CognitoIdentityProvider
   autoload :EndpointProvider, 'aws-sdk-cognitoidentityprovider/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cognitoidentityprovider/endpoints'
 
-  GEM_VERSION = '1.147.0'
+  GEM_VERSION = '1.149.0'
 
 end
 

data/sig/client.rbs

@@ -241,6 +241,20 @@ module Aws
                           ) -> _AdminGetUserResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AdminGetUserResponseSuccess
 
+      interface _AdminGetUserAuthFactorsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::AdminGetUserAuthFactorsResponse]
+        def username: () -> ::String
+        def preferred_mfa_setting: () -> ::String
+        def user_mfa_setting_list: () -> ::Array[::String]
+        def configured_user_auth_factors: () -> ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CognitoIdentityProvider/Client.html#admin_get_user_auth_factors-instance_method
+      def admin_get_user_auth_factors: (
+                                         user_pool_id: ::String,
+                                         username: ::String
+                                       ) -> _AdminGetUserAuthFactorsResponseSuccess
+                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AdminGetUserAuthFactorsResponseSuccess
+
       interface _AdminInitiateAuthResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::AdminInitiateAuthResponse]
         def challenge_name: () -> ("SMS_MFA" | "EMAIL_OTP" | "SOFTWARE_TOKEN_MFA" | "SELECT_MFA_TYPE" | "MFA_SETUP" | "PASSWORD_VERIFIER" | "CUSTOM_CHALLENGE" | "SELECT_CHALLENGE" | "DEVICE_SRP_AUTH" | "DEVICE_PASSWORD_VERIFIER" | "ADMIN_NO_SRP_AUTH" | "NEW_PASSWORD_REQUIRED" | "SMS_OTP" | "PASSWORD" | "WEB_AUTHN" | "PASSWORD_SRP")
@@ -657,7 +671,8 @@ module Aws
       def create_user_import_job: (
                                     job_name: ::String,
                                     user_pool_id: ::String,
-                                    cloud_watch_logs_role_arn: ::String
+                                    cloud_watch_logs_role_arn: ::String,
+                                    ?password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
                                   ) -> _CreateUserImportJobResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateUserImportJobResponseSuccess
 
@@ -694,11 +709,7 @@ module Aws
                                 from: ::String?,
                                 configuration_set: ::String?
                               },
-                              ?sms_configuration: {
-                                sns_caller_arn: ::String,
-                                external_id: ::String?,
-                                sns_region: ::String?
-                              },
+                              ?sms_configuration: Params::sms_configuration_type,
                               ?user_pool_tags: Hash[::String, ::String],
                               ?admin_create_user_config: Params::admin_create_user_config_type,
                               ?schema: Array[
@@ -1190,7 +1201,7 @@ module Aws
         def username: () -> ::String
         def preferred_mfa_setting: () -> ::String
         def user_mfa_setting_list: () -> ::Array[::String]
-        def configured_user_auth_factors: () -> ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN")]
+        def configured_user_auth_factors: () -> ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CognitoIdentityProvider/Client.html#get_user_auth_factors-instance_method
       def get_user_auth_factors: (
@@ -1613,11 +1624,7 @@ module Aws
                                       user_pool_id: ::String,
                                       ?sms_mfa_configuration: {
                                         sms_authentication_message: ::String?,
-                                        sms_configuration: {
-                                          sns_caller_arn: ::String,
-                                          external_id: ::String?,
-                                          sns_region: ::String?
-                                        }?
+                                        sms_configuration: Params::sms_configuration_type?
                                       },
                                       ?software_token_mfa_configuration: {
                                         enabled: bool?
@@ -1907,11 +1914,7 @@ module Aws
                                 from: ::String?,
                                 configuration_set: ::String?
                               },
-                              ?sms_configuration: {
-                                sns_caller_arn: ::String,
-                                external_id: ::String?,
-                                sns_region: ::String?
-                              },
+                              ?sms_configuration: Params::sms_configuration_type,
                               ?user_pool_tags: Hash[::String, ::String],
                               ?admin_create_user_config: Params::admin_create_user_config_type,
                               ?user_pool_add_ons: {

data/sig/params.rbs

@@ -50,7 +50,7 @@ module Aws
       type user_pool_policy_type = {
       password_policy: Params::password_policy_type?,
       sign_in_policy: {
-        allowed_first_auth_factors: Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN")]?
+        allowed_first_auth_factors: Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]?
       }?
     }
 
@@ -93,6 +93,23 @@ module Aws
       default_email_option: ("CONFIRM_WITH_LINK" | "CONFIRM_WITH_CODE")?
     }
 
+      type eums_sms_configuration_type = {
+      caller_arn: ::String,
+      external_id: ::String?,
+      origination_identity: ::String?,
+      configuration_set_name: ::String?,
+      in_entity_id: ::String?,
+      in_template_id: ::String?,
+      region: ::String?
+    }
+
+      type sms_configuration_type = {
+      sns_caller_arn: ::String?,
+      external_id: ::String?,
+      sns_region: ::String?,
+      eums_sms: Params::eums_sms_configuration_type?
+    }
+
       type admin_create_user_config_type = {
       allow_admin_create_user_only: bool?,
       unused_account_validity_days: ::Integer?,

data/sig/types.rbs

@@ -162,6 +162,20 @@ module Aws::CognitoIdentityProvider
       SENSITIVE: []
     end
 
+    class AdminGetUserAuthFactorsRequest
+      attr_accessor user_pool_id: ::String
+      attr_accessor username: ::String
+      SENSITIVE: [:username]
+    end
+
+    class AdminGetUserAuthFactorsResponse
+      attr_accessor username: ::String
+      attr_accessor preferred_mfa_setting: ::String
+      attr_accessor user_mfa_setting_list: ::Array[::String]
+      attr_accessor configured_user_auth_factors: ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]
+      SENSITIVE: [:username]
+    end
+
     class AdminGetUserRequest
       attr_accessor user_pool_id: ::String
       attr_accessor username: ::String
@@ -640,6 +654,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor job_name: ::String
       attr_accessor user_pool_id: ::String
       attr_accessor cloud_watch_logs_role_arn: ::String
+      attr_accessor password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
       SENSITIVE: []
     end
 
@@ -1037,6 +1052,17 @@ module Aws::CognitoIdentityProvider
       SENSITIVE: []
     end
 
+    class EumsSmsConfigurationType
+      attr_accessor caller_arn: ::String
+      attr_accessor external_id: ::String
+      attr_accessor origination_identity: ::String
+      attr_accessor configuration_set_name: ::String
+      attr_accessor in_entity_id: ::String
+      attr_accessor in_template_id: ::String
+      attr_accessor region: ::String
+      SENSITIVE: []
+    end
+
     class EventContextDataType
       attr_accessor ip_address: ::String
       attr_accessor device_name: ::String
@@ -1227,7 +1253,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor username: ::String
       attr_accessor preferred_mfa_setting: ::String
       attr_accessor user_mfa_setting_list: ::Array[::String]
-      attr_accessor configured_user_auth_factors: ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN")]
+      attr_accessor configured_user_auth_factors: ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]
       SENSITIVE: [:username]
     end
 
@@ -1953,7 +1979,7 @@ module Aws::CognitoIdentityProvider
     end
 
     class SignInPolicyType
-      attr_accessor allowed_first_auth_factors: ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN")]
+      attr_accessor allowed_first_auth_factors: ::Array[("PASSWORD" | "EMAIL_OTP" | "SMS_OTP" | "WEB_AUTHN" | "SOFTWARE_TOKEN")]
       SENSITIVE: []
     end
 
@@ -1982,6 +2008,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor sns_caller_arn: ::String
       attr_accessor external_id: ::String
       attr_accessor sns_region: ::String
+      attr_accessor eums_sms: Types::EumsSmsConfigurationType
       SENSITIVE: []
     end
 
@@ -2388,6 +2415,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor skipped_users: ::Integer
       attr_accessor failed_users: ::Integer
       attr_accessor completion_message: ::String
+      attr_accessor password_hashing_algorithm: ("BCRYPT" | "SCRYPT" | "ARGON2ID" | "PBKDF2_SHA256")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.147.0
+  version: 1.149.0
 platform: ruby
 authors:
 - Amazon Web Services