aws-sdk-cognitoidentityprovider 1.135.0 → 1.136.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4d380ce96b154cb4071b9c8171a1d86bcab8f0814dc60aceb4e9cca7677dbff1
-  data.tar.gz: 07bb5ec7fc3e2590fa0784a82105223a312b8837df2b498a9420b3affde4a363
+  metadata.gz: e774d86be446bba76b826238fd783c6ddf721cac39a754b7062c7c7befde96f6
+  data.tar.gz: 4e836c85dbfbe6a1fad863ca433ba40d2ba4d9ce595768e10a6304afdc10aaad
 SHA512:
-  metadata.gz: f74cb637170587f565379ef18078cd26e810c2d19ded6de3f35d93a21cd06391924870378be7a70f4b2d24db36c27c7c4e4a73f9edb35374e614b986a69f4df4
-  data.tar.gz: 3389b51c7869b3e39ab6976b81137da832c6e3e77f2f811a732c9c1e8b8531b388dfb5bd8242aeb33954e769fabc7242e3fcaed110a7e7f1278438e5d50b421f
+  metadata.gz: 2e28261065c7eb58847694ea2cd6da9b6613b90790d34498d4a66b4c72b4b1b1283ed7c420ec3e3ab2265e8ea8f18ad3b0acb053d3746711579066bbe1d3522e
+  data.tar.gz: 0a61b7b2fe484d06dab599a6dc0080664fbe95123389b496d30b4c43fe721700d29ac640903bdcfe0f362701da6c8b4e3bd074ac0c158b64899a05d9e364fb06

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.136.0 (2026-01-28)
+------------------
+
+* Feature - This release adds support for a new lambda trigger to transform federated user attributes during the authentication with external identity providers on Cognito Managed Login.
+
 1.135.0 (2026-01-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.135.0
+1.136.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -5042,6 +5042,10 @@ module Aws::CognitoIdentityProvider
     #         lambda_version: "V1_0", 
     #       }, 
     #       define_auth_challenge: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
+    #       inbound_federation: {
+    #         lambda_arn: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
+    #         lambda_version: "V1_0", 
+    #       }, 
     #       kms_key_id: "arn:aws:kms:us-east-1:123456789012:key/a6c4f8e2-0c45-47db-925f-87854bc9e357", 
     #       post_authentication: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
     #       post_confirmation: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
@@ -5165,6 +5169,10 @@ module Aws::CognitoIdentityProvider
     #           lambda_version: "V1_0", 
     #         }, 
     #         define_auth_challenge: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
+    #         inbound_federation: {
+    #           lambda_arn: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
+    #           lambda_version: "V1_0", 
+    #         }, 
     #         kms_key_id: "arn:aws:kms:us-east-1:767671399759:key/4d43904c-8edf-4bb4-9fca-fb1a80e41cbe", 
     #         post_authentication: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
     #         post_confirmation: "arn:aws:lambda:us-east-1:123456789012:function:MyFunction", 
@@ -5486,6 +5494,10 @@ module Aws::CognitoIdentityProvider
     #         lambda_arn: "ArnType", # required
     #       },
     #       kms_key_id: "ArnType",
+    #       inbound_federation: {
+    #         lambda_version: "V1_0", # required, accepts V1_0
+    #         lambda_arn: "ArnType", # required
+    #       },
     #     },
     #     auto_verified_attributes: ["phone_number"], # accepts phone_number, email
     #     alias_attributes: ["phone_number"], # accepts phone_number, email, preferred_username
@@ -5602,6 +5614,8 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.lambda_config.custom_email_sender.lambda_version #=> String, one of "V1_0"
     #   resp.user_pool.lambda_config.custom_email_sender.lambda_arn #=> String
     #   resp.user_pool.lambda_config.kms_key_id #=> String
+    #   resp.user_pool.lambda_config.inbound_federation.lambda_version #=> String, one of "V1_0"
+    #   resp.user_pool.lambda_config.inbound_federation.lambda_arn #=> String
     #   resp.user_pool.status #=> String, one of "Enabled", "Disabled"
     #   resp.user_pool.last_modified_date #=> Time
     #   resp.user_pool.creation_date #=> Time
@@ -6733,8 +6747,8 @@ module Aws::CognitoIdentityProvider
     # your Amazon Web Services account. Amazon Cognito retains deleted user
     # pools in an inactive state for 14 days, then begins a cleanup process
     # that fully removes them from Amazon Web Services systems. In case of
-    # accidental deletion, contact Amazon Web ServicesSupport within 14 days
-    # for restoration assistance.
+    # accidental deletion, contact Amazon Web Services Support within 14
+    # days for restoration assistance.
     #
     # Amazon Cognito begins full deletion of all resources from deleted user
     # pools after 14 days. In the case of large user pools, the cleanup
@@ -7311,6 +7325,8 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.lambda_config.custom_email_sender.lambda_version #=> String, one of "V1_0"
     #   resp.user_pool.lambda_config.custom_email_sender.lambda_arn #=> String
     #   resp.user_pool.lambda_config.kms_key_id #=> String
+    #   resp.user_pool.lambda_config.inbound_federation.lambda_version #=> String, one of "V1_0"
+    #   resp.user_pool.lambda_config.inbound_federation.lambda_arn #=> String
     #   resp.user_pool.status #=> String, one of "Enabled", "Disabled"
     #   resp.user_pool.last_modified_date #=> Time
     #   resp.user_pool.creation_date #=> Time
@@ -9557,6 +9573,8 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pools[0].lambda_config.custom_email_sender.lambda_version #=> String, one of "V1_0"
     #   resp.user_pools[0].lambda_config.custom_email_sender.lambda_arn #=> String
     #   resp.user_pools[0].lambda_config.kms_key_id #=> String
+    #   resp.user_pools[0].lambda_config.inbound_federation.lambda_version #=> String, one of "V1_0"
+    #   resp.user_pools[0].lambda_config.inbound_federation.lambda_arn #=> String
     #   resp.user_pools[0].status #=> String, one of "Enabled", "Disabled"
     #   resp.user_pools[0].last_modified_date #=> Time
     #   resp.user_pools[0].creation_date #=> Time
@@ -12721,6 +12739,10 @@ module Aws::CognitoIdentityProvider
     #         lambda_arn: "ArnType", # required
     #       },
     #       kms_key_id: "ArnType",
+    #       inbound_federation: {
+    #         lambda_version: "V1_0", # required, accepts V1_0
+    #         lambda_arn: "ArnType", # required
+    #       },
     #     },
     #     auto_verified_attributes: ["phone_number"], # accepts phone_number, email
     #     sms_verification_message: "SmsVerificationMessageType",
@@ -13512,7 +13534,7 @@ module Aws::CognitoIdentityProvider
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.135.0'
+      context[:gem_version] = '1.136.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -306,6 +306,8 @@ module Aws::CognitoIdentityProvider
     IdpIdentifiersListType = Shapes::ListShape.new(name: 'IdpIdentifiersListType')
     ImageFileType = Shapes::BlobShape.new(name: 'ImageFileType')
     ImageUrlType = Shapes::StringShape.new(name: 'ImageUrlType')
+    InboundFederationLambdaType = Shapes::StructureShape.new(name: 'InboundFederationLambdaType')
+    InboundFederationLambdaVersionType = Shapes::StringShape.new(name: 'InboundFederationLambdaVersionType')
     InitiateAuthRequest = Shapes::StructureShape.new(name: 'InitiateAuthRequest')
     InitiateAuthResponse = Shapes::StructureShape.new(name: 'InitiateAuthResponse')
     IntegerType = Shapes::IntegerShape.new(name: 'IntegerType')
@@ -1505,6 +1507,10 @@ module Aws::CognitoIdentityProvider
 
     IdpIdentifiersListType.member = Shapes::ShapeRef.new(shape: IdpIdentifierType)
 
+    InboundFederationLambdaType.add_member(:lambda_version, Shapes::ShapeRef.new(shape: InboundFederationLambdaVersionType, required: true, location_name: "LambdaVersion"))
+    InboundFederationLambdaType.add_member(:lambda_arn, Shapes::ShapeRef.new(shape: ArnType, required: true, location_name: "LambdaArn"))
+    InboundFederationLambdaType.struct_class = Types::InboundFederationLambdaType
+
     InitiateAuthRequest.add_member(:auth_flow, Shapes::ShapeRef.new(shape: AuthFlowType, required: true, location_name: "AuthFlow"))
     InitiateAuthRequest.add_member(:auth_parameters, Shapes::ShapeRef.new(shape: AuthParametersType, location_name: "AuthParameters"))
     InitiateAuthRequest.add_member(:client_metadata, Shapes::ShapeRef.new(shape: ClientMetadataType, location_name: "ClientMetadata"))
@@ -1563,6 +1569,7 @@ module Aws::CognitoIdentityProvider
     LambdaConfigType.add_member(:custom_sms_sender, Shapes::ShapeRef.new(shape: CustomSMSLambdaVersionConfigType, location_name: "CustomSMSSender"))
     LambdaConfigType.add_member(:custom_email_sender, Shapes::ShapeRef.new(shape: CustomEmailLambdaVersionConfigType, location_name: "CustomEmailSender"))
     LambdaConfigType.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: ArnType, location_name: "KMSKeyID"))
+    LambdaConfigType.add_member(:inbound_federation, Shapes::ShapeRef.new(shape: InboundFederationLambdaType, location_name: "InboundFederation"))
     LambdaConfigType.struct_class = Types::LambdaConfigType
 
     LimitExceededException.add_member(:message, Shapes::ShapeRef.new(shape: MessageType, location_name: "message"))

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -7040,6 +7040,31 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
+    # The properties of an inbound federation Lambda trigger.
+    #
+    # @!attribute [rw] lambda_version
+    #   The user pool trigger version of the request that Amazon Cognito
+    #   sends to your Lambda function. Higher-numbered versions add fields
+    #   that support new features.
+    #
+    #   You must use a `LambdaVersion` of `V1_0` with an inbound federation
+    #   function.
+    #   @return [String]
+    #
+    # @!attribute [rw] lambda_arn
+    #   The Amazon Resource Name (ARN) of the function that you want to
+    #   assign to your Lambda trigger.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/InboundFederationLambdaType AWS API Documentation
+    #
+    class InboundFederationLambdaType < Struct.new(
+      :lambda_version,
+      :lambda_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Initiates the authentication request.
     #
     # @!attribute [rw] auth_flow
@@ -7697,6 +7722,12 @@ module Aws::CognitoIdentityProvider
     #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#master_keys
     #   @return [String]
     #
+    # @!attribute [rw] inbound_federation
+    #   The configuration of an inbound federation Lambda trigger. This
+    #   trigger can transform federated user attributes during the
+    #   authentication with external identity providers.
+    #   @return [Types::InboundFederationLambdaType]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/LambdaConfigType AWS API Documentation
     #
     class LambdaConfigType < Struct.new(
@@ -7713,7 +7744,8 @@ module Aws::CognitoIdentityProvider
       :pre_token_generation_config,
       :custom_sms_sender,
       :custom_email_sender,
-      :kms_key_id)
+      :kms_key_id,
+      :inbound_federation)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -54,7 +54,7 @@ module Aws::CognitoIdentityProvider
   autoload :EndpointProvider, 'aws-sdk-cognitoidentityprovider/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cognitoidentityprovider/endpoints'
 
-  GEM_VERSION = '1.135.0'
+  GEM_VERSION = '1.136.0'
 
 end
 

data/sig/client.rbs

@@ -727,7 +727,11 @@ module Aws
                                   lambda_version: ("V1_0"),
                                   lambda_arn: ::String
                                 }?,
-                                kms_key_id: ::String?
+                                kms_key_id: ::String?,
+                                inbound_federation: {
+                                  lambda_version: ("V1_0"),
+                                  lambda_arn: ::String
+                                }?
                               },
                               ?auto_verified_attributes: Array[("phone_number" | "email")],
                               ?alias_attributes: Array[("phone_number" | "email" | "preferred_username")],
@@ -1902,7 +1906,11 @@ module Aws
                                   lambda_version: ("V1_0"),
                                   lambda_arn: ::String
                                 }?,
-                                kms_key_id: ::String?
+                                kms_key_id: ::String?,
+                                inbound_federation: {
+                                  lambda_version: ("V1_0"),
+                                  lambda_arn: ::String
+                                }?
                               },
                               ?auto_verified_attributes: Array[("phone_number" | "email")],
                               ?sms_verification_message: ::String,

data/sig/types.rbs

@@ -1220,6 +1220,12 @@ module Aws::CognitoIdentityProvider
       SENSITIVE: []
     end
 
+    class InboundFederationLambdaType
+      attr_accessor lambda_version: ("V1_0")
+      attr_accessor lambda_arn: ::String
+      SENSITIVE: []
+    end
+
     class InitiateAuthRequest
       attr_accessor auth_flow: ("USER_SRP_AUTH" | "REFRESH_TOKEN_AUTH" | "REFRESH_TOKEN" | "CUSTOM_AUTH" | "ADMIN_NO_SRP_AUTH" | "USER_PASSWORD_AUTH" | "ADMIN_USER_PASSWORD_AUTH" | "USER_AUTH")
       attr_accessor auth_parameters: ::Hash[::String, ::String]
@@ -1301,6 +1307,7 @@ module Aws::CognitoIdentityProvider
       attr_accessor custom_sms_sender: Types::CustomSMSLambdaVersionConfigType
       attr_accessor custom_email_sender: Types::CustomEmailLambdaVersionConfigType
       attr_accessor kms_key_id: ::String
+      attr_accessor inbound_federation: Types::InboundFederationLambdaType
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.135.0
+  version: 1.136.0
 platform: ruby
 authors:
 - Amazon Web Services