@aws-sdk/client-cognito-identity-provider 3.100.0 → 3.109.0

package/dist-types/models/models_0.d.ts

@@ -467,9 +467,7 @@ export interface AdminConfirmSignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminConfirmSignUpRequest {
     /**
@@ -712,9 +710,7 @@ export interface AdminCreateUserRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminCreateUserRequest {
     /**
@@ -1081,8 +1077,8 @@ export declare namespace AdminDisableProviderForUserResponse {
 }
 /**
  * <p>This exception is thrown when a user tries to confirm the account with an email
- *             address or phone number that has already been supplied as an alias from a different
- *             account. This exception indicates that an account with this email address or phone
+ *             address or phone number that has already been supplied as an alias for a different
+ *             user profile. This exception indicates that an account with this email address or phone
  *             already exists in a user pool that you've configured to use email address or phone
  *             number as a sign-in alias.</p>
  */
@@ -1408,7 +1404,7 @@ export declare namespace HttpHeader {
  */
 export interface ContextDataType {
     /**
-     * <p>Source IP address of your user.</p>
+     * <p>The source IP address of your user's device.</p>
      */
     IpAddress: string | undefined;
     /**
@@ -1424,8 +1420,8 @@ export interface ContextDataType {
      */
     HttpHeaders: HttpHeader[] | undefined;
     /**
-     * <p>Encoded data containing device fingerprinting details collected using the Amazon Cognito
-     *             context data collection library.</p>
+     * <p>Encoded device-fingerprint details that your app collected with the Amazon Cognito
+     *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      */
     EncodedData?: string;
 }
@@ -1530,9 +1526,7 @@ export interface AdminInitiateAuthRequest {
      *             </li>
      *          </ul>
      */
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -1603,17 +1597,16 @@ export interface AdminInitiateAuthRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     /**
      * <p>The analytics metadata for collecting Amazon Pinpoint metrics for
      *                 <code>AdminInitiateAuth</code> calls.</p>
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     ContextData?: ContextDataType;
 }
@@ -1801,9 +1794,7 @@ export interface AdminInitiateAuthResponse {
      *                 <code>AdminRespondToAuthChallenge</code> API <code>ChallengeResponses</code>, the
      *                 <code>USERNAME</code> attribute can't be an alias.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result of the authentication response. This is only returned if the caller doesn't
      *             need to pass another challenge. If the caller does need to pass another challenge before
@@ -2111,7 +2102,7 @@ export declare namespace ChallengeResponseType {
  */
 export interface EventContextDataType {
     /**
-     * <p>The user's IP address.</p>
+     * <p>The source IP address of your user's device.</p>
      */
     IpAddress?: string;
     /**
@@ -2348,9 +2339,7 @@ export interface AdminResetUserPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminResetUserPasswordRequest {
     /**
@@ -2457,9 +2446,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *                 <code>USERNAMEUSER_ID_FOR_SRP</code> attribute. This happens even if you specified
      *             an alias in your call to <code>AdminInitiateAuth</code>.</p>
      */
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. If an <code>InitiateAuth</code> or <code>RespondToAuthChallenge</code> API call
@@ -2474,8 +2461,9 @@ export interface AdminRespondToAuthChallengeRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     ContextData?: ContextDataType;
     /**
@@ -2540,9 +2528,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminRespondToAuthChallengeRequest {
     /**
@@ -2568,9 +2554,7 @@ export interface AdminRespondToAuthChallengeResponse {
     /**
      * <p>The challenge parameters. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html">AdminInitiateAuth</a>.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result returned by the server in response to the authentication request.</p>
      */
@@ -2910,9 +2894,7 @@ export interface AdminUpdateUserAttributesRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminUpdateUserAttributesRequest {
     /**
@@ -3164,14 +3146,18 @@ export declare namespace ConfirmDeviceResponse {
     const filterSensitiveLog: (obj: ConfirmDeviceResponse) => any;
 }
 /**
- * <p>Information that your app generates about a user's <code>AdminInitiateAuth</code> or
- *                 <code>AdminRespondToAuthChallenge</code> session. Amazon Cognito advanced security features
- *             calculate risk levels for user sessions based on this context data.</p>
+ * <p>Contextual data, such as the user's device fingerprint, IP address, or location, used
+ *             for evaluating the risk of an unexpected event by Amazon Cognito advanced
+ *         security.</p>
  */
 export interface UserContextDataType {
     /**
-     * <p>Contextual data, such as the user's device fingerprint, IP address, or location, used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>The source IP address of your user's device.</p>
+     */
+    IpAddress?: string;
+    /**
+     * <p>Encoded device-fingerprint details that your app collected with the Amazon Cognito
+     *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      */
     EncodedData?: string;
 }
@@ -3214,8 +3200,9 @@ export interface ConfirmForgotPasswordRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -3253,9 +3240,7 @@ export interface ConfirmForgotPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmForgotPasswordRequest {
     /**
@@ -3311,8 +3296,9 @@ export interface ConfirmSignUpRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -3350,9 +3336,7 @@ export interface ConfirmSignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmSignUpRequest {
     /**
@@ -3574,15 +3558,11 @@ export interface CreateIdentityProviderRequest {
      *             </li>
      *          </ul>
      */
-    ProviderDetails: {
-        [key: string]: string;
-    } | undefined;
+    ProviderDetails: Record<string, string> | undefined;
     /**
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -3730,15 +3710,11 @@ export interface IdentityProviderType {
      *             </li>
      *          </ul>
      */
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     /**
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -4394,7 +4370,10 @@ export declare namespace SmsConfigurationType {
     const filterSensitiveLog: (obj: SmsConfigurationType) => any;
 }
 /**
- * <p>The settings for updates to user attributes.</p>
+ * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+ * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+ * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+ * Verifying updates to to email addresses and phone numbers</a>.</p>
  */
 export interface UserAttributeUpdateSettingsType {
     /**
@@ -4587,7 +4566,10 @@ export interface CreateUserPoolRequest {
      */
     MfaConfiguration?: UserPoolMfaType | string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -4612,9 +4594,7 @@ export interface CreateUserPoolRequest {
      *             to categorize and manage user pools in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      */
@@ -4726,7 +4706,10 @@ export interface UserPoolType {
      */
     SmsAuthenticationMessage?: string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -4776,9 +4759,7 @@ export interface UserPoolType {
      *             user pools to categorize and manage them in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The reason why the SMS configuration can't send the messages to your users.</p>
      *         <p>This message might include comma-separated values to describe why your SMS
@@ -4910,18 +4891,22 @@ export declare enum TimeUnitsType {
  */
 export interface TokenValidityUnitsType {
     /**
-     * <p> A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             AccessTokenValidity, defaulting to hours.</p>
+     * <p> A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the <code>AccessTokenValidity</code>
+     *             parameter. The default <code>AccessTokenValidity</code> time unit is hours.</p>
      */
     AccessToken?: TimeUnitsType | string;
     /**
-     * <p>A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             IdTokenValidity, defaulting to hours.</p>
+     * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the <code>IdTokenValidity</code>
+     *             parameter. The default <code>IdTokenValidity</code> time unit is hours.</p>
      */
     IdToken?: TimeUnitsType | string;
     /**
-     * <p>A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             RefreshTokenValidity, defaulting to days.</p>
+     * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the
+     *                 <code>RefreshTokenValidity</code> parameter. The default
+     *                 <code>RefreshTokenValidity</code> time unit is days.</p>
      */
     RefreshToken?: TimeUnitsType | string;
 }
@@ -5177,6 +5162,15 @@ export interface CreateUserPoolClientRequest {
      *             the new user pool client.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>Activates the propagation of additional user context data. For more information about
+     *             propagation of user context data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"> Adding advanced security to a user pool</a>. If you don’t include this
+     *             parameter, you can't send device fingerprint information, including source IP address,
+     *             to Amazon Cognito advanced security. You can only activate
+     *                 <code>EnablePropagateAdditionalUserContextData</code> in an app client that has a
+     *             client secret.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace CreateUserPoolClientRequest {
     /**
@@ -5427,6 +5421,24 @@ export interface UserPoolClientType {
      *             information about revoking tokens, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>When <code>EnablePropagateAdditionalUserContextData</code> is true, Amazon Cognito accepts an
+     *                 <code>IpAddress</code> value that you send in the <code>UserContextData</code>
+     *             parameter. The <code>UserContextData</code> parameter sends information to Amazon Cognito
+     *             advanced security for risk analysis. You can send <code>UserContextData</code> when you
+     *             sign in Amazon Cognito native users with the <code>InitiateAuth</code> and
+     *                 <code>RespondToAuthChallenge</code> API operations.</p>
+     *         <p>When <code>EnablePropagateAdditionalUserContextData</code> is false, you can't send
+     *             your user's source IP address to Amazon Cognito advanced security with unauthenticated API
+     *             operations. <code>EnablePropagateAdditionalUserContextData</code> doesn't affect whether
+     *             you can send a source IP address in a <code>ContextData</code> parameter with the
+     *             authenticated API operations <code>AdminInitiateAuth</code> and
+     *                 <code>AdminRespondToAuthChallenge</code>.</p>
+     *         <p>You can only activate <code>EnablePropagateAdditionalUserContextData</code> in an app
+     *             client that has a client secret. For more information about propagation of user context
+     *             data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UserPoolClientType {
     /**
@@ -6097,8 +6109,9 @@ export interface ForgotPasswordRequest {
      */
     SecretHash?: string;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -6148,9 +6161,7 @@ export interface ForgotPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ForgotPasswordRequest {
     /**
@@ -6183,8 +6194,7 @@ export declare namespace CodeDeliveryDetailsType {
     const filterSensitiveLog: (obj: CodeDeliveryDetailsType) => any;
 }
 /**
- * <p>Represents the response from the server regarding the request to reset a
- *             password.</p>
+ * <p>The response from Amazon Cognito to a request to reset a password.</p>
  */
 export interface ForgotPasswordResponse {
     /**
@@ -6528,9 +6538,7 @@ export interface GetUserAttributeVerificationCodeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace GetUserAttributeVerificationCodeRequest {
     /**
@@ -6745,9 +6753,7 @@ export interface InitiateAuthRequest {
      *             </li>
      *          </ul>
      */
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -6818,9 +6824,7 @@ export interface InitiateAuthRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     /**
      * <p>The app client ID.</p>
      */
@@ -6831,8 +6835,9 @@ export interface InitiateAuthRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
 }
@@ -6933,9 +6938,7 @@ export interface InitiateAuthResponse {
      *         <p>All challenges require <code>USERNAME</code> and <code>SECRET_HASH</code> (if
      *             applicable).</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result of the authentication response. This result is only returned if the caller
      *             doesn't need to pass another challenge. If the caller does need to pass another
@@ -7146,9 +7149,7 @@ export interface ListTagsForResourceResponse {
     /**
      * <p>The tags that are assigned to the user pool.</p>
      */
-    Tags?: {
-        [key: string]: string;
-    };
+    Tags?: Record<string, string>;
 }
 export declare namespace ListTagsForResourceResponse {
     /**
@@ -7546,8 +7547,9 @@ export interface ResendConfirmationCodeRequest {
      */
     SecretHash?: string;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -7595,9 +7597,7 @@ export interface ResendConfirmationCodeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ResendConfirmationCodeRequest {
     /**
@@ -7711,17 +7711,16 @@ export interface RespondToAuthChallengeRequest {
      *             </li>
      *          </ul>
      */
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     /**
      * <p>The Amazon Pinpoint analytics metadata that contributes to your metrics for
      *                 <code>RespondToAuthChallenge</code> calls.</p>
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -7763,9 +7762,7 @@ export interface RespondToAuthChallengeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace RespondToAuthChallengeRequest {
     /**
@@ -7791,9 +7788,7 @@ export interface RespondToAuthChallengeResponse {
     /**
      * <p>The challenge parameters. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html">InitiateAuth</a>.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result returned by the server in response to the request to respond to the
      *             authentication challenge.</p>
@@ -8125,8 +8120,9 @@ export interface SignUpRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -8165,9 +8161,7 @@ export interface SignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace SignUpRequest {
     /**

package/dist-types/models/models_1.d.ts

@@ -79,9 +79,7 @@ export interface TagResourceRequest {
     /**
      * <p>The tags to assign to the user pool.</p>
      */
-    Tags: {
-        [key: string]: string;
-    } | undefined;
+    Tags: Record<string, string> | undefined;
 }
 export declare namespace TagResourceRequest {
     /**
@@ -248,15 +246,11 @@ export interface UpdateIdentityProviderRequest {
      * <p>The IdP details to be updated, such as <code>MetadataURL</code> and
      *                 <code>MetadataFile</code>.</p>
      */
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     /**
      * <p>The IdP attribute mapping to be changed.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -371,9 +365,7 @@ export interface UpdateUserAttributesRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace UpdateUserAttributesRequest {
     /**
@@ -440,7 +432,10 @@ export interface UpdateUserPoolRequest {
      */
     SmsAuthenticationMessage?: string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -488,9 +483,7 @@ export interface UpdateUserPoolRequest {
      *             to categorize and manage user pools in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      */
@@ -759,6 +752,15 @@ export interface UpdateUserPoolClientRequest {
      *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>Activates the propagation of additional user context data. For more information about
+     *             propagation of user context data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"> Adding advanced security to a user pool</a>. If you don’t include this
+     *             parameter, you can't send device fingerprint information, including source IP address,
+     *             to Amazon Cognito advanced security. You can only activate
+     *                 <code>EnablePropagateAdditionalUserContextData</code> in an app client that has a
+     *             client secret.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UpdateUserPoolClientRequest {
     /**