aws-sdk-cognitoidentityprovider 1.149.0 → 1.150.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 596a7ce8aa6cd1e63718f70d3e9760e382113bfc5a0a384c59ee90b4a54f400d
-  data.tar.gz: cc937a7321ff09b987ea70b47b0e9ba2e853141238ba481ea1298c6a434d0e89
+  metadata.gz: 23816c5ca5f2838e2ee707e3366d50b633c01a78ede71fd26c70ee97e0734786
+  data.tar.gz: 2edaf22d0afe0a9c394876d7014131cff90fa4ef03edb848ba25cd5fe02f6667
 SHA512:
-  metadata.gz: 0a33ebb69d6441e6a61e0564f670e834792d19baf3305305a18d97d45c280d8138a35a3ab2ba04d836b395162a0697870ef323842f50a5db7dd3e18d548c73d7
-  data.tar.gz: 3b66ac29709c631addae7649fc7872460dbc0eacc7e02064a2763b34ae59cab2f7ae25bdf19a98972167da8df734f432dda4bcf8205e3b24d88d5f09787c4309
+  metadata.gz: 66a93703201dac8f7b9e78b7f5d2a6788b1d294bc23e21917e97bc7b6fbfafabbd79c69b4216213a6c9eeac0f78aedcad112b678107f1df53a1a3b89ced43b3f
+  data.tar.gz: 8bc371b0b45ea97259f7b05ff568ebcb71b24eaf6eda57bca1e4bf513f00e88b8c2446dc5a8bf38d6bb5fbe3f37cf1d02e05ad988bbbf94b594abcb8b8fede4f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.150.0 (2026-08-27)
+------------------
+
+* Feature - Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool.
+
 1.149.0 (2026-07-24)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.149.0
+1.150.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -1113,6 +1113,61 @@ module Aws::CognitoIdentityProvider
       req.send_request(options)
     end
 
+    # Deletes a user's registered time-based one-time password (TOTP)
+    # multi-factor authentication (MFA) factor, also known as a software
+    # token. After this operation, the user can no longer sign in with TOTP
+    # MFA, and can register a new TOTP factor with `AssociateSoftwareToken`.
+    # Use this operation when a user loses access to their TOTP-generating
+    # device, for example, a lost or reset phone, and needs to register a
+    # new one.
+    #
+    # <note markdown="1"> Amazon Cognito evaluates Identity and Access Management (IAM) policies
+    # in requests for this API operation. For this operation, you must use
+    # IAM credentials to authorize requests, and you must grant yourself the
+    # corresponding IAM permission in a policy.
+    #
+    #  **Learn more**
+    #
+    #  * [Signing Amazon Web Services API Requests][1]
+    #
+    # * [Using the Amazon Cognito user pools API and user pool endpoints][2]
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-signing.html
+    # [2]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html
+    #
+    # @option params [required, String] :user_pool_id
+    #   The ID of the user pool where you want to delete the user's software
+    #   token.
+    #
+    # @option params [required, String] :username
+    #   The name of the user that you want to query or modify. The value of
+    #   this parameter is typically your user's username, but it can be any
+    #   of their alias attributes. If `username` isn't an alias attribute in
+    #   your user pool, this value must be the `sub` of a local user or the
+    #   username of a user from a third-party IdP.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.admin_delete_software_token({
+    #     user_pool_id: "UserPoolIdType", # required
+    #     username: "UsernameType", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminDeleteSoftwareToken AWS API Documentation
+    #
+    # @overload admin_delete_software_token(params = {})
+    # @param [Hash] params ({})
+    def admin_delete_software_token(params = {}, options = {})
+      req = build_request(:admin_delete_software_token, params)
+      req.send_request(options)
+    end
+
     # Deletes a user profile in your user pool.
     #
     # <note markdown="1"> Amazon Cognito evaluates Identity and Access Management (IAM) policies
@@ -2027,10 +2082,6 @@ module Aws::CognitoIdentityProvider
     #   The `ProviderName` should be set to `Cognito` for users in Cognito
     #   user pools.
     #
-    #   All attributes in the DestinationUser profile must be mutable. If you
-    #   have assigned the user any immutable custom attributes, the operation
-    #   won't succeed.
-    #
     # @option params [required, Types::ProviderUserIdentifierType] :source_user
     #   An external IdP account for a user who doesn't exist yet in the user
     #   pool. This user must be a federated user (for example, a SAML or
@@ -7881,6 +7932,14 @@ module Aws::CognitoIdentityProvider
     # Given a user pool domain name, returns information about the domain
     # configuration.
     #
+    # <note markdown="1"> This operation doesn't return results when you query a prefix domain
+    # in a secondary Region. Prefix domains are Region-specific and can only
+    # be described in the Region where they were created. To describe a
+    # prefix domain for a replica user pool, make the request to the primary
+    # Region's endpoint.
+    #
+    #  </note>
+    #
     # <note markdown="1"> Amazon Cognito evaluates Identity and Access Management (IAM) policies
     # in requests for this API operation. For this operation, you must use
     # IAM credentials to authorize requests, and you must grant yourself the
@@ -14418,7 +14477,7 @@ module Aws::CognitoIdentityProvider
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.149.0'
+      context[:gem_version] = '1.150.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -34,6 +34,8 @@ module Aws::CognitoIdentityProvider
     AdminCreateUserRequest = Shapes::StructureShape.new(name: 'AdminCreateUserRequest')
     AdminCreateUserResponse = Shapes::StructureShape.new(name: 'AdminCreateUserResponse')
     AdminCreateUserUnusedAccountValidityDaysType = Shapes::IntegerShape.new(name: 'AdminCreateUserUnusedAccountValidityDaysType')
+    AdminDeleteSoftwareTokenRequest = Shapes::StructureShape.new(name: 'AdminDeleteSoftwareTokenRequest')
+    AdminDeleteSoftwareTokenResponse = Shapes::StructureShape.new(name: 'AdminDeleteSoftwareTokenResponse')
     AdminDeleteUserAttributesRequest = Shapes::StructureShape.new(name: 'AdminDeleteUserAttributesRequest')
     AdminDeleteUserAttributesResponse = Shapes::StructureShape.new(name: 'AdminDeleteUserAttributesResponse')
     AdminDeleteUserRequest = Shapes::StructureShape.new(name: 'AdminDeleteUserRequest')
@@ -708,6 +710,12 @@ module Aws::CognitoIdentityProvider
     AdminCreateUserResponse.add_member(:user, Shapes::ShapeRef.new(shape: UserType, location_name: "User"))
     AdminCreateUserResponse.struct_class = Types::AdminCreateUserResponse
 
+    AdminDeleteSoftwareTokenRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
+    AdminDeleteSoftwareTokenRequest.add_member(:username, Shapes::ShapeRef.new(shape: UsernameType, required: true, location_name: "Username"))
+    AdminDeleteSoftwareTokenRequest.struct_class = Types::AdminDeleteSoftwareTokenRequest
+
+    AdminDeleteSoftwareTokenResponse.struct_class = Types::AdminDeleteSoftwareTokenResponse
+
     AdminDeleteUserAttributesRequest.add_member(:user_pool_id, Shapes::ShapeRef.new(shape: UserPoolIdType, required: true, location_name: "UserPoolId"))
     AdminDeleteUserAttributesRequest.add_member(:username, Shapes::ShapeRef.new(shape: UsernameType, required: true, location_name: "Username"))
     AdminDeleteUserAttributesRequest.add_member(:user_attribute_names, Shapes::ShapeRef.new(shape: AttributeNameListType, required: true, location_name: "UserAttributeNames"))
@@ -2774,6 +2782,22 @@ module Aws::CognitoIdentityProvider
         o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
       end)
 
+      api.add_operation(:admin_delete_software_token, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "AdminDeleteSoftwareToken"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: AdminDeleteSoftwareTokenRequest)
+        o.output = Shapes::ShapeRef.new(shape: AdminDeleteSoftwareTokenResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: NotAuthorizedException)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsException)
+        o.errors << Shapes::ShapeRef.new(shape: UserNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: UserNotConfirmedException)
+        o.errors << Shapes::ShapeRef.new(shape: OperationNotEnabledException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalErrorException)
+      end)
+
       api.add_operation(:admin_delete_user, Seahorse::Model::Operation.new.tap do |o|
         o.name = "AdminDeleteUser"
         o.http_method = "POST"

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -593,6 +593,32 @@ module Aws::CognitoIdentityProvider
       include Aws::Structure
     end
 
+    # @!attribute [rw] user_pool_id
+    #   The ID of the user pool where you want to delete the user's
+    #   software token.
+    #   @return [String]
+    #
+    # @!attribute [rw] username
+    #   The name of the user that you want to query or modify. The value of
+    #   this parameter is typically your user's username, but it can be any
+    #   of their alias attributes. If `username` isn't an alias attribute
+    #   in your user pool, this value must be the `sub` of a local user or
+    #   the username of a user from a third-party IdP.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminDeleteSoftwareTokenRequest AWS API Documentation
+    #
+    class AdminDeleteSoftwareTokenRequest < Struct.new(
+      :user_pool_id,
+      :username)
+      SENSITIVE = [:username]
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdminDeleteSoftwareTokenResponse AWS API Documentation
+    #
+    class AdminDeleteSoftwareTokenResponse < Aws::EmptyStructure; end
+
     # Represents the request to delete user attributes as an administrator.
     #
     # @!attribute [rw] user_pool_id
@@ -1375,10 +1401,6 @@ module Aws::CognitoIdentityProvider
     #
     #   The `ProviderName` should be set to `Cognito` for users in Cognito
     #   user pools.
-    #
-    #   All attributes in the DestinationUser profile must be mutable. If
-    #   you have assigned the user any immutable custom attributes, the
-    #   operation won't succeed.
     #   @return [Types::ProviderUserIdentifierType]
     #
     # @!attribute [rw] source_user

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -54,7 +54,7 @@ module Aws::CognitoIdentityProvider
   autoload :EndpointProvider, 'aws-sdk-cognitoidentityprovider/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cognitoidentityprovider/endpoints'
 
-  GEM_VERSION = '1.149.0'
+  GEM_VERSION = '1.150.0'
 
 end
 

data/sig/client.rbs

@@ -150,6 +150,16 @@ module Aws
                              ) -> _AdminCreateUserResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AdminCreateUserResponseSuccess
 
+      interface _AdminDeleteSoftwareTokenResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::AdminDeleteSoftwareTokenResponse]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CognitoIdentityProvider/Client.html#admin_delete_software_token-instance_method
+      def admin_delete_software_token: (
+                                         user_pool_id: ::String,
+                                         username: ::String
+                                       ) -> _AdminDeleteSoftwareTokenResponseSuccess
+                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _AdminDeleteSoftwareTokenResponseSuccess
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CognitoIdentityProvider/Client.html#admin_delete_user-instance_method
       def admin_delete_user: (
                                user_pool_id: ::String,

data/sig/types.rbs

@@ -100,6 +100,15 @@ module Aws::CognitoIdentityProvider
       SENSITIVE: []
     end
 
+    class AdminDeleteSoftwareTokenRequest
+      attr_accessor user_pool_id: ::String
+      attr_accessor username: ::String
+      SENSITIVE: [:username]
+    end
+
+    class AdminDeleteSoftwareTokenResponse < Aws::EmptyStructure
+    end
+
     class AdminDeleteUserAttributesRequest
       attr_accessor user_pool_id: ::String
       attr_accessor username: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.149.0
+  version: 1.150.0
 platform: ruby
 authors:
 - Amazon Web Services