@aws-sdk/client-cognito-identity-provider 3.1070.0 → 3.1072.0

package/dist-cjs/index.js

@@ -2044,6 +2044,11 @@ const TimeUnitsType = {
     MINUTES: "minutes",
     SECONDS: "seconds",
 };
+const SecurityPolicyType = {
+    TLS_V1: "TLS_V1",
+    TLS_V1_2_2021: "TLS_V1_2_2021",
+    TLS_V1_3_2025: "TLS_V1_3_2025",
+};
 const ReplicaRoleType = {
     PRIMARY: "PRIMARY",
     SECONDARY: "SECONDARY",
@@ -2240,6 +2245,7 @@ exports.RespondToAuthChallengeCommand = RespondToAuthChallengeCommand;
 exports.RevokeTokenCommand = RevokeTokenCommand;
 exports.RiskDecisionType = RiskDecisionType;
 exports.RiskLevelType = RiskLevelType;
+exports.SecurityPolicyType = SecurityPolicyType;
 exports.SetLogDeliveryConfigurationCommand = SetLogDeliveryConfigurationCommand;
 exports.SetRiskConfigurationCommand = SetRiskConfigurationCommand;
 exports.SetUICustomizationCommand = SetUICustomizationCommand;

package/dist-cjs/schemas/schemas_0.js

@@ -722,6 +722,7 @@ const _SMSMST = "SMSMfaSettingsType";
 const _SN = "ServerName";
 const _SNc = "ScopeName";
 const _SP = "ServerPath";
+const _SPe = "SecurityPolicy";
 const _SR = "SecondaryRegion";
 const _SRC = "SetRiskConfiguration";
 const _SRCR = "SetRiskConfigurationRequest";
@@ -1984,8 +1985,8 @@ const CreateUserPoolResponse$ = [3, n0, _CUPRr,
 exports.CreateUserPoolResponse$ = CreateUserPoolResponse$;
 const CustomDomainConfigType$ = [3, n0, _CDCT,
     0,
-    [_CAe],
-    [0], 1
+    [_CAe, _SPe],
+    [0, 0], 1
 ];
 exports.CustomDomainConfigType$ = CustomDomainConfigType$;
 const CustomEmailLambdaVersionConfigType$ = [3, n0, _CELVCT,

package/dist-es/models/enums.js

@@ -258,6 +258,11 @@ export const TimeUnitsType = {
     MINUTES: "minutes",
     SECONDS: "seconds",
 };
+export const SecurityPolicyType = {
+    TLS_V1: "TLS_V1",
+    TLS_V1_2_2021: "TLS_V1_2_2021",
+    TLS_V1_3_2025: "TLS_V1_3_2025",
+};
 export const ReplicaRoleType = {
     PRIMARY: "PRIMARY",
     SECONDARY: "SECONDARY",

package/dist-es/schemas/schemas_0.js

@@ -722,6 +722,7 @@ const _SMSMST = "SMSMfaSettingsType";
 const _SN = "ServerName";
 const _SNc = "ScopeName";
 const _SP = "ServerPath";
+const _SPe = "SecurityPolicy";
 const _SR = "SecondaryRegion";
 const _SRC = "SetRiskConfiguration";
 const _SRCR = "SetRiskConfigurationRequest";
@@ -1822,8 +1823,8 @@ export var CreateUserPoolResponse$ = [3, n0, _CUPRr,
 ];
 export var CustomDomainConfigType$ = [3, n0, _CDCT,
     0,
-    [_CAe],
-    [0], 1
+    [_CAe, _SPe],
+    [0, 0], 1
 ];
 export var CustomEmailLambdaVersionConfigType$ = [3, n0, _CELVCT,
     0,

package/dist-types/commands/CreateUserPoolDomainCommand.d.ts

@@ -73,6 +73,7 @@ declare const CreateUserPoolDomainCommand_base: {
  *   ManagedLoginVersion: Number("int"),
  *   CustomDomainConfig: { // CustomDomainConfigType
  *     CertificateArn: "STRING_VALUE", // required
+ *     SecurityPolicy: "TLS_V1" || "TLS_V1_2_2021" || "TLS_V1_3_2025",
  *   },
  *   Routing: { // RoutingType
  *     Failover: { // FailoverType

package/dist-types/commands/DescribeUserPoolDomainCommand.d.ts

@@ -75,6 +75,7 @@ declare const DescribeUserPoolDomainCommand_base: {
  * //     Status: "CREATING" || "DELETING" || "UPDATING" || "ACTIVE" || "FAILED",
  * //     CustomDomainConfig: { // CustomDomainConfigType
  * //       CertificateArn: "STRING_VALUE", // required
+ * //       SecurityPolicy: "TLS_V1" || "TLS_V1_2_2021" || "TLS_V1_3_2025",
  * //     },
  * //     ManagedLoginVersion: Number("int"),
  * //     Routing: { // RoutingType

package/dist-types/commands/UpdateUserPoolDomainCommand.d.ts

@@ -80,6 +80,7 @@ declare const UpdateUserPoolDomainCommand_base: {
  *   ManagedLoginVersion: Number("int"),
  *   CustomDomainConfig: { // CustomDomainConfigType
  *     CertificateArn: "STRING_VALUE", // required
+ *     SecurityPolicy: "TLS_V1" || "TLS_V1_2_2021" || "TLS_V1_3_2025",
  *   },
  *   Routing: { // RoutingType
  *     Failover: { // FailoverType

package/dist-types/models/enums.d.ts

@@ -626,6 +626,19 @@ export declare const TimeUnitsType: {
  * @public
  */
 export type TimeUnitsType = (typeof TimeUnitsType)[keyof typeof TimeUnitsType];
+/**
+ * @public
+ * @enum
+ */
+export declare const SecurityPolicyType: {
+    readonly TLS_V1: "TLS_V1";
+    readonly TLS_V1_2_2021: "TLS_V1_2_2021";
+    readonly TLS_V1_3_2025: "TLS_V1_3_2025";
+};
+/**
+ * @public
+ */
+export type SecurityPolicyType = (typeof SecurityPolicyType)[keyof typeof SecurityPolicyType];
 /**
  * @public
  * @enum

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentType as __DocumentType } from "@smithy/types";
-import type { AccountTakeoverEventActionType, AdvancedSecurityEnabledModeType, AdvancedSecurityModeType, AliasAttributeType, AssetCategoryType, AssetExtensionType, AttributeDataType, AuthFactorType, AuthFlowType, ChallengeName, ChallengeNameType, ChallengeResponse, ColorSchemeModeType, CompromisedCredentialsEventActionType, CustomEmailSenderLambdaVersionType, CustomSMSSenderLambdaVersionType, DefaultEmailOptionType, DeletionProtectionType, DeliveryMediumType, DeviceRememberedStatusType, DomainStatusType, EmailSendingAccountType, EncryptionKeyType, EventFilterType, EventResponseType, EventSourceName, EventType, ExplicitAuthFlowsType, FeatureType, FeedbackValueType, IdentityProviderTypeType, InboundFederationLambdaVersionType, IssuerType, LogLevel, MessageActionType, OAuthFlowType, PreTokenGenerationLambdaVersionType, PreventUserExistenceErrorTypes, RecoveryOptionNameType, ReplicaRoleType, ReplicaStatusType, RiskDecisionType, RiskLevelType, StatusType, TermsEnforcementType, TermsSourceType, TimeUnitsType, UserImportJobStatusType, UsernameAttributeType, UserPoolMfaType, UserPoolTierType, UserStatusType, UserVerificationType, VerifiedAttributeType, WebAuthnFactorConfigurationType } from "./enums";
+import type { AccountTakeoverEventActionType, AdvancedSecurityEnabledModeType, AdvancedSecurityModeType, AliasAttributeType, AssetCategoryType, AssetExtensionType, AttributeDataType, AuthFactorType, AuthFlowType, ChallengeName, ChallengeNameType, ChallengeResponse, ColorSchemeModeType, CompromisedCredentialsEventActionType, CustomEmailSenderLambdaVersionType, CustomSMSSenderLambdaVersionType, DefaultEmailOptionType, DeletionProtectionType, DeliveryMediumType, DeviceRememberedStatusType, DomainStatusType, EmailSendingAccountType, EncryptionKeyType, EventFilterType, EventResponseType, EventSourceName, EventType, ExplicitAuthFlowsType, FeatureType, FeedbackValueType, IdentityProviderTypeType, InboundFederationLambdaVersionType, IssuerType, LogLevel, MessageActionType, OAuthFlowType, PreTokenGenerationLambdaVersionType, PreventUserExistenceErrorTypes, RecoveryOptionNameType, ReplicaRoleType, ReplicaStatusType, RiskDecisionType, RiskLevelType, SecurityPolicyType, StatusType, TermsEnforcementType, TermsSourceType, TimeUnitsType, UserImportJobStatusType, UsernameAttributeType, UserPoolMfaType, UserPoolTierType, UserStatusType, UserVerificationType, VerifiedAttributeType, WebAuthnFactorConfigurationType } from "./enums";
 /**
  * <p>A recovery option for a user. The <code>AccountRecoverySettingType</code> data type is
  *             an array of this object. Each <code>RecoveryOptionType</code> has a priority property
@@ -6771,7 +6771,8 @@ export interface CreateUserPoolClientResponse {
     UserPoolClient?: UserPoolClientType | undefined;
 }
 /**
- * <p>The configuration for a hosted UI custom domain.</p>
+ * <p>The configuration for a custom domain, including the SSL certificate and TLS security
+ *             policy.</p>
  * @public
  */
 export interface CustomDomainConfigType {
@@ -6781,6 +6782,30 @@ export interface CustomDomainConfigType {
      * @public
      */
     CertificateArn: string | undefined;
+    /**
+     * <p>The security policy for the custom domain. Defines the minimum TLS version and cipher
+     *             suites that CloudFront uses when communicating with viewers (clients). Valid values are
+     *             as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>TLS_V1</code>: Supports TLS 1.0 and later. Provides the broadest client
+     *                     compatibility.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>TLS_V1_2_2021</code>: Supports TLS 1.2 and later with 2021 cipher
+     *                     suites. Recommended minimum for most use cases.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>TLS_V1_3_2025</code>: Supports TLS 1.3 and later with 2025 cipher
+     *                     suites. Provides the strongest security posture.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    SecurityPolicy?: SecurityPolicyType | undefined;
 }
 /**
  * <p>Specifies failover configuration for multi-region user pool domains. Contains settings for the secondary region and health check configuration.</p>

package/dist-types/ts3.4/models/enums.d.ts

@@ -341,6 +341,13 @@ export declare const TimeUnitsType: {
   readonly SECONDS: "seconds";
 };
 export type TimeUnitsType = (typeof TimeUnitsType)[keyof typeof TimeUnitsType];
+export declare const SecurityPolicyType: {
+  readonly TLS_V1: "TLS_V1";
+  readonly TLS_V1_2_2021: "TLS_V1_2_2021";
+  readonly TLS_V1_3_2025: "TLS_V1_3_2025";
+};
+export type SecurityPolicyType =
+  (typeof SecurityPolicyType)[keyof typeof SecurityPolicyType];
 export declare const ReplicaRoleType: {
   readonly PRIMARY: "PRIMARY";
   readonly SECONDARY: "SECONDARY";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -43,6 +43,7 @@ import {
   ReplicaStatusType,
   RiskDecisionType,
   RiskLevelType,
+  SecurityPolicyType,
   StatusType,
   TermsEnforcementType,
   TermsSourceType,
@@ -873,6 +874,7 @@ export interface CreateUserPoolClientResponse {
 }
 export interface CustomDomainConfigType {
   CertificateArn: string | undefined;
+  SecurityPolicy?: SecurityPolicyType | undefined;
 }
 export interface FailoverType {
   SecondaryRegion: string | undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-cognito-identity-provider",
   "description": "AWS SDK for JavaScript Cognito Identity Provider Client for Node.js, Browser and React Native",
-  "version": "3.1070.0",
+  "version": "3.1072.0",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
     "build:cjs": "node ../../scripts/compilation/inline",
@@ -21,8 +21,8 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/core": "^3.974.21",
-    "@aws-sdk/credential-provider-node": "^3.972.56",
+    "@aws-sdk/core": "^3.974.22",
+    "@aws-sdk/credential-provider-node": "^3.972.57",
     "@aws-sdk/types": "^3.973.13",
     "@smithy/core": "^3.24.6",
     "@smithy/fetch-http-handler": "^5.4.6",