aws-sdk-cognitoidentityprovider 1.98.0 → 1.99.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 44de345428766dd1042a0a6d9ca385d70ba2ec48ae00895d13c712a6d0e7dcf3
-  data.tar.gz: ec43a9dbc42fd4c650168be2a275f08c2b9b31361c5ba39dd1a8c59ad8493f83
+  metadata.gz: '0448672142fc86bc27bf133f51cb3f2c8092f71e46e3bfa5e0def970431994ed'
+  data.tar.gz: a98d09b88ceb9812faa39cc8b0d7b547a9be39bca7693f3f0cb8a4280133bada
 SHA512:
-  metadata.gz: 949a8d9b796c9a508fd400668239b2a7a90881f6a5b24aa3164ffe221d7095d959af8483e81b558bb18e4b14c3882de17a053c911ec017e5032325dd46e621d8
-  data.tar.gz: 33daa5b016d8cd8e0ed38686dc8ca43780ee3e757f2d107f455a07efc04dc6187606f5a82f436f06fcdd94248e020bfc3c0dac5eee1178ce72db7c64a5eca213
+  metadata.gz: bc1ded98828c9bf018c41552b275ec3dd536952c36642b8c315fd03406ebcad1fd60fbc28e002dfc80a284a5d1ead9665dafb59d5e7a86512484abdbe74d7008
+  data.tar.gz: 8bad31b166c87eae0beb13997575320162e52ba7f9b44994398a792515172026528a47f38173f04d1fe2cdc12143ad20be5ec11843c50fb80fc75d28875aff33

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.99.0 (2024-08-08)
+------------------
+
+* Feature - Added support for threat protection for custom authentication in Amazon Cognito user pools.
+
 1.98.0 (2024-08-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.98.0
+1.99.0

data/lib/aws-sdk-cognitoidentityprovider/client.rb

@@ -4730,6 +4730,9 @@ module Aws::CognitoIdentityProvider
     #     ],
     #     user_pool_add_ons: {
     #       advanced_security_mode: "OFF", # required, accepts OFF, AUDIT, ENFORCED
+    #       advanced_security_additional_flows: {
+    #         custom_auth_mode: "AUDIT", # accepts AUDIT, ENFORCED
+    #       },
     #     },
     #     username_configuration: {
     #       case_sensitive: false, # required
@@ -4828,6 +4831,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_message #=> String
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_subject #=> String
     #   resp.user_pool.user_pool_add_ons.advanced_security_mode #=> String, one of "OFF", "AUDIT", "ENFORCED"
+    #   resp.user_pool.user_pool_add_ons.advanced_security_additional_flows.custom_auth_mode #=> String, one of "AUDIT", "ENFORCED"
     #   resp.user_pool.username_configuration.case_sensitive #=> Boolean
     #   resp.user_pool.arn #=> String
     #   resp.user_pool.account_recovery_setting.recovery_mechanisms #=> Array
@@ -6036,6 +6040,7 @@ module Aws::CognitoIdentityProvider
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_message #=> String
     #   resp.user_pool.admin_create_user_config.invite_message_template.email_subject #=> String
     #   resp.user_pool.user_pool_add_ons.advanced_security_mode #=> String, one of "OFF", "AUDIT", "ENFORCED"
+    #   resp.user_pool.user_pool_add_ons.advanced_security_additional_flows.custom_auth_mode #=> String, one of "AUDIT", "ENFORCED"
     #   resp.user_pool.username_configuration.case_sensitive #=> Boolean
     #   resp.user_pool.arn #=> String
     #   resp.user_pool.account_recovery_setting.recovery_mechanisms #=> Array
@@ -10139,6 +10144,9 @@ module Aws::CognitoIdentityProvider
     #     },
     #     user_pool_add_ons: {
     #       advanced_security_mode: "OFF", # required, accepts OFF, AUDIT, ENFORCED
+    #       advanced_security_additional_flows: {
+    #         custom_auth_mode: "AUDIT", # accepts AUDIT, ENFORCED
+    #       },
     #     },
     #     account_recovery_setting: {
     #       recovery_mechanisms: [
@@ -10823,7 +10831,7 @@ module Aws::CognitoIdentityProvider
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-cognitoidentityprovider'
-      context[:gem_version] = '1.98.0'
+      context[:gem_version] = '1.99.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cognitoidentityprovider/client_api.rb

@@ -73,6 +73,8 @@ module Aws::CognitoIdentityProvider
     AdminUpdateUserAttributesResponse = Shapes::StructureShape.new(name: 'AdminUpdateUserAttributesResponse')
     AdminUserGlobalSignOutRequest = Shapes::StructureShape.new(name: 'AdminUserGlobalSignOutRequest')
     AdminUserGlobalSignOutResponse = Shapes::StructureShape.new(name: 'AdminUserGlobalSignOutResponse')
+    AdvancedSecurityAdditionalFlowsType = Shapes::StructureShape.new(name: 'AdvancedSecurityAdditionalFlowsType')
+    AdvancedSecurityEnabledModeType = Shapes::StringShape.new(name: 'AdvancedSecurityEnabledModeType')
     AdvancedSecurityModeType = Shapes::StringShape.new(name: 'AdvancedSecurityModeType')
     AliasAttributeType = Shapes::StringShape.new(name: 'AliasAttributeType')
     AliasAttributesListType = Shapes::ListShape.new(name: 'AliasAttributesListType')
@@ -740,6 +742,9 @@ module Aws::CognitoIdentityProvider
 
     AdminUserGlobalSignOutResponse.struct_class = Types::AdminUserGlobalSignOutResponse
 
+    AdvancedSecurityAdditionalFlowsType.add_member(:custom_auth_mode, Shapes::ShapeRef.new(shape: AdvancedSecurityEnabledModeType, location_name: "CustomAuthMode"))
+    AdvancedSecurityAdditionalFlowsType.struct_class = Types::AdvancedSecurityAdditionalFlowsType
+
     AliasAttributesListType.member = Shapes::ShapeRef.new(shape: AliasAttributeType)
 
     AliasExistsException.add_member(:message, Shapes::ShapeRef.new(shape: MessageType, location_name: "message"))
@@ -1932,6 +1937,7 @@ module Aws::CognitoIdentityProvider
     UserPoolAddOnNotEnabledException.struct_class = Types::UserPoolAddOnNotEnabledException
 
     UserPoolAddOnsType.add_member(:advanced_security_mode, Shapes::ShapeRef.new(shape: AdvancedSecurityModeType, required: true, location_name: "AdvancedSecurityMode"))
+    UserPoolAddOnsType.add_member(:advanced_security_additional_flows, Shapes::ShapeRef.new(shape: AdvancedSecurityAdditionalFlowsType, location_name: "AdvancedSecurityAdditionalFlows"))
     UserPoolAddOnsType.struct_class = Types::UserPoolAddOnsType
 
     UserPoolClientDescription.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, location_name: "ClientId"))

data/lib/aws-sdk-cognitoidentityprovider/types.rb

@@ -1961,6 +1961,28 @@ module Aws::CognitoIdentityProvider
     #
     class AdminUserGlobalSignOutResponse < Aws::EmptyStructure; end
 
+    # Advanced security configuration options for additional authentication
+    # types in your user pool, including custom authentication and
+    # refresh-token authentication.
+    #
+    # @!attribute [rw] custom_auth_mode
+    #   The operating mode of advanced security features in custom
+    #   authentication with [ Custom authentication challenge Lambda
+    #   triggers][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AdvancedSecurityAdditionalFlowsType AWS API Documentation
+    #
+    class AdvancedSecurityAdditionalFlowsType < Struct.new(
+      :custom_auth_mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This exception is thrown when a user tries to confirm the account with
     # an email address or phone number that has already been supplied as an
     # alias for a different user profile. This exception indicates that an
@@ -9838,13 +9860,22 @@ module Aws::CognitoIdentityProvider
     # [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html
     #
     # @!attribute [rw] advanced_security_mode
-    #   The operating mode of advanced security features in your user pool.
+    #   The operating mode of advanced security features for standard
+    #   authentication types in your user pool, including username-password
+    #   and secure remote password (SRP) authentication.
     #   @return [String]
     #
+    # @!attribute [rw] advanced_security_additional_flows
+    #   Advanced security configuration options for additional
+    #   authentication types in your user pool, including custom
+    #   authentication and refresh-token authentication.
+    #   @return [Types::AdvancedSecurityAdditionalFlowsType]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UserPoolAddOnsType AWS API Documentation
     #
     class UserPoolAddOnsType < Struct.new(
-      :advanced_security_mode)
+      :advanced_security_mode,
+      :advanced_security_additional_flows)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-cognitoidentityprovider.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-cognitoidentityprovider/customizations'
 # @!group service
 module Aws::CognitoIdentityProvider
 
-  GEM_VERSION = '1.98.0'
+  GEM_VERSION = '1.99.0'
 
 end

data/sig/client.rbs

@@ -727,7 +727,10 @@ module Aws
                                 },
                               ],
                               ?user_pool_add_ons: {
-                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED"),
+                                advanced_security_additional_flows: {
+                                  custom_auth_mode: ("AUDIT" | "ENFORCED")?
+                                }?
                               },
                               ?username_configuration: {
                                 case_sensitive: bool
@@ -1691,7 +1694,10 @@ module Aws
                                 }?
                               },
                               ?user_pool_add_ons: {
-                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+                                advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED"),
+                                advanced_security_additional_flows: {
+                                  custom_auth_mode: ("AUDIT" | "ENFORCED")?
+                                }?
                               },
                               ?account_recovery_setting: {
                                 recovery_mechanisms: Array[

data/sig/types.rbs

@@ -346,6 +346,11 @@ module Aws::CognitoIdentityProvider
     class AdminUserGlobalSignOutResponse < Aws::EmptyStructure
     end
 
+    class AdvancedSecurityAdditionalFlowsType
+      attr_accessor custom_auth_mode: ("AUDIT" | "ENFORCED")
+      SENSITIVE: []
+    end
+
     class AliasExistsException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -1915,6 +1920,7 @@ module Aws::CognitoIdentityProvider
 
     class UserPoolAddOnsType
       attr_accessor advanced_security_mode: ("OFF" | "AUDIT" | "ENFORCED")
+      attr_accessor advanced_security_additional_flows: Types::AdvancedSecurityAdditionalFlowsType
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cognitoidentityprovider
 version: !ruby/object:Gem::Version
-  version: 1.98.0
+  version: 1.99.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-08-06 00:00:00.000000000 Z
+date: 2024-08-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core