aws-sdk-cognitoidentityprovider 1.98.0 → 1.100.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 44de345428766dd1042a0a6d9ca385d70ba2ec48ae00895d13c712a6d0e7dcf3
-  data.tar.gz: ec43a9dbc42fd4c650168be2a275f08c2b9b31361c5ba39dd1a8c59ad8493f83
+  metadata.gz: '0255780452e225b92adddeaa1d0577c15cf0c7bf400a3a646f485aec3809ce59'
+  data.tar.gz: 63ee964886c8d3030e0c5251c87a7daff7309498ec6d8e628ad2926fe9ce3653
 SHA512:
-  metadata.gz: 949a8d9b796c9a508fd400668239b2a7a90881f6a5b24aa3164ffe221d7095d959af8483e81b558bb18e4b14c3882de17a053c911ec017e5032325dd46e621d8
-  data.tar.gz: 33daa5b016d8cd8e0ed38686dc8ca43780ee3e757f2d107f455a07efc04dc6187606f5a82f436f06fcdd94248e020bfc3c0dac5eee1178ce72db7c64a5eca213
+  metadata.gz: 286d9330dfe50dcf0a4cc52473cc2772040bcc9f3f7e0a1c1f9bb254f0caf0ff9470a83e20f06ce06f0fa0e166f89645959d9b5c8f0e22ce88aa85f05c612b1b
+  data.tar.gz: d5769cfc50da1ef309dc04e318787c350d19eafdd332165a676cd96c9e2999836d649ab093efe360c279d0fb7bec26db54437c9699fdb59cbb8d61bfd5a9a228

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.100.0 (2024-08-09)
+------------------
+
+* Feature - Fixed a description of AdvancedSecurityAdditionalFlows in Amazon Cognito user pool configuration.
+
+1.99.0 (2024-08-08)
+------------------
+
+* Feature - Added support for threat protection for custom authentication in Amazon Cognito user pools.
+
 1.98.0 (2024-08-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.98.0
+1.100.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -658,8 +658,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -1456,8 +1456,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -2117,8 +2117,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -2248,8 +2248,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -2858,8 +2858,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -3952,8 +3952,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -4730,6 +4730,9 @@ module Aws::CognitoIdentityProvider
     #     ],
     #     user_pool_add_ons: {
     #       advanced_security_mode: "OFF", # required, accepts OFF, AUDIT, ENFORCED
+    #       advanced_security_additional_flows: {
+    #         custom_auth_mode: "AUDIT", # accepts AUDIT, ENFORCED
+    #       },
     #     },
     #     username_configuration: {
     #       case_sensitive: false, # required
@@ -4828,6 +4831,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_message #=> String
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_subject #=> String
     #   resp.user_pool.user_pool_add_ons.advanced_security_mode #=> String, one of "OFF", "AUDIT", "ENFORCED"
+    #   resp.user_pool.user_pool_add_ons.advanced_security_additional_flows.custom_auth_mode #=> String, one of "AUDIT", "ENFORCED"
     #   resp.user_pool.username_configuration.case_sensitive #=> Boolean
     #   resp.user_pool.arn #=> String
     #   resp.user_pool.account_recovery_setting.recovery_mechanisms #=> Array
@@ -6036,6 +6040,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_message #=> String
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_subject #=> String
     #   resp.user_pool.user_pool_add_ons.advanced_security_mode #=> String, one of "OFF", "AUDIT", "ENFORCED"
+    #   resp.user_pool.user_pool_add_ons.advanced_security_additional_flows.custom_auth_mode #=> String, one of "AUDIT", "ENFORCED"
     #   resp.user_pool.username_configuration.case_sensitive #=> Boolean
     #   resp.user_pool.arn #=> String
     #   resp.user_pool.account_recovery_setting.recovery_mechanisms #=> Array
@@ -6259,8 +6264,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -6747,8 +6752,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -6960,8 +6965,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -8050,8 +8055,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -8196,8 +8201,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -8785,8 +8790,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -8944,8 +8949,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -9755,8 +9760,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -9870,8 +9875,8 @@ module Aws::CognitoIdentityProvider
     # sign in.
     #
     #  If you have never used SMS text messages with Amazon Cognito or any
-    # other Amazon Web Service, Amazon Simple Notification Service might
-    # place your account in the SMS sandbox. In <i> <a
+    # other Amazon Web Services service, Amazon Simple Notification Service
+    # might place your account in the SMS sandbox. In <i> <a
     # href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
     # mode</a> </i>, you can send messages only to verified phone numbers.
     # After you test your app while in the sandbox environment, you can move
@@ -10139,6 +10144,9 @@ module Aws::CognitoIdentityProvider
     #     },
     #     user_pool_add_ons: {
     #       advanced_security_mode: "OFF", # required, accepts OFF, AUDIT, ENFORCED
+    #       advanced_security_additional_flows: {
+    #         custom_auth_mode: "AUDIT", # accepts AUDIT, ENFORCED
+    #       },
     #     },
     #     account_recovery_setting: {
     #       recovery_mechanisms: [
@@ -10823,7 +10831,7 @@ module Aws::CognitoIdentityProvider
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.98.0'
+      context[:gem_version] = '1.100.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -73,6 +73,8 @@ module Aws::CognitoIdentityProvider
     AdminUpdateUserAttributesResponse = Shapes::StructureShape.new(name: 'AdminUpdateUserAttributesResponse')
     AdminUserGlobalSignOutRequest = Shapes::StructureShape.new(name: 'AdminUserGlobalSignOutRequest')
     AdminUserGlobalSignOutResponse = Shapes::StructureShape.new(name: 'AdminUserGlobalSignOutResponse')
+    AdvancedSecurityAdditionalFlowsType = Shapes::StructureShape.new(name: 'AdvancedSecurityAdditionalFlowsType')
+    AdvancedSecurityEnabledModeType = Shapes::StringShape.new(name: 'AdvancedSecurityEnabledModeType')
     AdvancedSecurityModeType = Shapes::StringShape.new(name: 'AdvancedSecurityModeType')
     AliasAttributeType = Shapes::StringShape.new(name: 'AliasAttributeType')
     AliasAttributesListType = Shapes::ListShape.new(name: 'AliasAttributesListType')
@@ -740,6 +742,9 @@ module Aws::CognitoIdentityProvider
 
     AdminUserGlobalSignOutResponse.struct_class = Types::AdminUserGlobalSignOutResponse
 
+    AdvancedSecurityAdditionalFlowsType.add_member(:custom_auth_mode, Shapes::ShapeRef.new(shape: AdvancedSecurityEnabledModeType, location_name: "CustomAuthMode"))
+    AdvancedSecurityAdditionalFlowsType.struct_class = Types::AdvancedSecurityAdditionalFlowsType
+
     AliasAttributesListType.member = Shapes::ShapeRef.new(shape: AliasAttributeType)
 
     AliasExistsException.add_member(:message, Shapes::ShapeRef.new(shape: MessageType, location_name: "message"))
@@ -1932,6 +1937,7 @@ module Aws::CognitoIdentityProvider
     UserPoolAddOnNotEnabledException.struct_class = Types::UserPoolAddOnNotEnabledException
 
     UserPoolAddOnsType.add_member(:advanced_security_mode, Shapes::ShapeRef.new(shape: AdvancedSecurityModeType, required: true, location_name: "AdvancedSecurityMode"))
+    UserPoolAddOnsType.add_member(:advanced_security_additional_flows, Shapes::ShapeRef.new(shape: AdvancedSecurityAdditionalFlowsType, location_name: "AdvancedSecurityAdditionalFlows"))
     UserPoolAddOnsType.struct_class = Types::UserPoolAddOnsType
 
     UserPoolClientDescription.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, location_name: "ClientId"))

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -1961,6 +1961,27 @@ module Aws::CognitoIdentityProvider
     #
     class AdminUserGlobalSignOutResponse < Aws::EmptyStructure; end
 
+    # Advanced security configuration options for additional authentication
+    # types in your user pool, including custom authentication.
+    #
+    # @!attribute [rw] custom_auth_mode
+    #   The operating mode of advanced security features in custom
+    #   authentication with [ Custom authentication challenge Lambda
+    #   triggers][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdvancedSecurityAdditionalFlowsType AWS API Documentation
+    #
+    class AdvancedSecurityAdditionalFlowsType < Struct.new(
+      :custom_auth_mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This exception is thrown when a user tries to confirm the account with
     # an email address or phone number that has already been supplied as an
     # alias for a different user profile. This exception indicates that an
@@ -9838,13 +9859,22 @@ module Aws::CognitoIdentityProvider
     # [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html
     #
     # @!attribute [rw] advanced_security_mode
-    #   The operating mode of advanced security features in your user pool.
+    #   The operating mode of advanced security features for standard
+    #   authentication types in your user pool, including username-password
+    #   and secure remote password (SRP) authentication.
     #   @return [String]
     #
+    # @!attribute [rw] advanced_security_additional_flows
+    #   Advanced security configuration options for additional
+    #   authentication types in your user pool, including custom
+    #   authentication.
+    #   @return [Types::AdvancedSecurityAdditionalFlowsType]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UserPoolAddOnsType AWS API Documentation
     #
     class UserPoolAddOnsType < Struct.new(
-      :advanced_security_mode)
+      :advanced_security_mode,
+      :advanced_security_additional_flows)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-cognitoidentityprovider/customizations'
 # @!group service
 module Aws::CognitoIdentityProvider
 
-  GEM_VERSION = '1.98.0'
+  GEM_VERSION = '1.100.0'
 
 end

data/sig/client.rbs

@@ -727,7 +727,10 @@ module Aws
                                 },
                               ],
                               ?user_pool_add_ons: {
-                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED"),
+                                advanced_security_additional_flows: {
+                                  custom_auth_mode: ("AUDIT" | "ENFORCED")?
+                                }?
                               },
                               ?username_configuration: {
                                 case_sensitive: bool
@@ -1691,7 +1694,10 @@ module Aws
                                 }?
                               },
                               ?user_pool_add_ons: {
-                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED"),
+                                advanced_security_additional_flows: {
+                                  custom_auth_mode: ("AUDIT" | "ENFORCED")?
+                                }?
                               },
                               ?account_recovery_setting: {
                                 recovery_mechanisms: Array[

data/sig/types.rbs

@@ -346,6 +346,11 @@ module Aws::CognitoIdentityProvider
     class AdminUserGlobalSignOutResponse < Aws::EmptyStructure
     end
 
+    class AdvancedSecurityAdditionalFlowsType
+      attr_accessor custom_auth_mode: ("AUDIT" | "ENFORCED")
+      SENSITIVE: []
+    end
+
     class AliasExistsException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -1915,6 +1920,7 @@ module Aws::CognitoIdentityProvider
 
     class UserPoolAddOnsType
       attr_accessor advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+      attr_accessor advanced_security_additional_flows: Types::AdvancedSecurityAdditionalFlowsType
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.98.0
+  version: 1.100.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-08-06 00:00:00.000000000 Z
+date: 2024-08-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core