@aws-sdk/client-cognito-identity-provider 3.47.2 → 3.51.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +35 -0
- package/README.md +3 -7
- package/dist-types/CognitoIdentityProvider.d.ts +367 -457
- package/dist-types/CognitoIdentityProviderClient.d.ts +3 -7
- package/dist-types/commands/AdminConfirmSignUpCommand.d.ts +1 -2
- package/dist-types/commands/AdminCreateUserCommand.d.ts +20 -23
- package/dist-types/commands/AdminDeleteUserAttributesCommand.d.ts +1 -2
- package/dist-types/commands/AdminDisableProviderForUserCommand.d.ts +14 -28
- package/dist-types/commands/AdminGetUserCommand.d.ts +1 -2
- package/dist-types/commands/AdminInitiateAuthCommand.d.ts +14 -14
- package/dist-types/commands/AdminLinkProviderForUserCommand.d.ts +12 -19
- package/dist-types/commands/AdminListUserAuthEventsCommand.d.ts +1 -2
- package/dist-types/commands/AdminResetUserPasswordCommand.d.ts +20 -24
- package/dist-types/commands/AdminRespondToAuthChallengeCommand.d.ts +14 -14
- package/dist-types/commands/AdminSetUserMFAPreferenceCommand.d.ts +3 -5
- package/dist-types/commands/AdminSetUserPasswordCommand.d.ts +5 -10
- package/dist-types/commands/AdminSetUserSettingsCommand.d.ts +3 -3
- package/dist-types/commands/AdminUpdateAuthEventFeedbackCommand.d.ts +2 -3
- package/dist-types/commands/AdminUpdateUserAttributesCommand.d.ts +17 -20
- package/dist-types/commands/AdminUserGlobalSignOutCommand.d.ts +2 -3
- package/dist-types/commands/AssociateSoftwareTokenCommand.d.ts +6 -10
- package/dist-types/commands/ConfirmDeviceCommand.d.ts +1 -2
- package/dist-types/commands/ConfirmSignUpCommand.d.ts +1 -2
- package/dist-types/commands/CreateResourceServerCommand.d.ts +1 -1
- package/dist-types/commands/CreateUserPoolClientCommand.d.ts +2 -2
- package/dist-types/commands/CreateUserPoolCommand.d.ts +16 -16
- package/dist-types/commands/DescribeUserPoolClientCommand.d.ts +1 -2
- package/dist-types/commands/ForgotPasswordCommand.d.ts +23 -22
- package/dist-types/commands/GetCSVHeaderCommand.d.ts +1 -2
- package/dist-types/commands/GetUICustomizationCommand.d.ts +2 -4
- package/dist-types/commands/GetUserAttributeVerificationCodeCommand.d.ts +15 -14
- package/dist-types/commands/GlobalSignOutCommand.d.ts +2 -3
- package/dist-types/commands/InitiateAuthCommand.d.ts +14 -14
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +1 -2
- package/dist-types/commands/ListUserPoolsCommand.d.ts +1 -1
- package/dist-types/commands/ResendConfirmationCodeCommand.d.ts +16 -16
- package/dist-types/commands/RespondToAuthChallengeCommand.d.ts +14 -14
- package/dist-types/commands/RevokeTokenCommand.d.ts +1 -2
- package/dist-types/commands/SetRiskConfigurationCommand.d.ts +2 -5
- package/dist-types/commands/SetUICustomizationCommand.d.ts +7 -12
- package/dist-types/commands/SetUserMFAPreferenceCommand.d.ts +6 -9
- package/dist-types/commands/SetUserPoolMfaConfigCommand.d.ts +17 -17
- package/dist-types/commands/SetUserSettingsCommand.d.ts +2 -3
- package/dist-types/commands/SignUpCommand.d.ts +16 -16
- package/dist-types/commands/TagResourceCommand.d.ts +7 -14
- package/dist-types/commands/UntagResourceCommand.d.ts +1 -2
- package/dist-types/commands/UpdateAuthEventFeedbackCommand.d.ts +2 -3
- package/dist-types/commands/UpdateResourceServerCommand.d.ts +3 -4
- package/dist-types/commands/UpdateUserAttributesCommand.d.ts +15 -14
- package/dist-types/commands/UpdateUserPoolClientCommand.d.ts +7 -8
- package/dist-types/commands/UpdateUserPoolCommand.d.ts +18 -17
- package/dist-types/commands/UpdateUserPoolDomainCommand.d.ts +11 -20
- package/dist-types/commands/VerifySoftwareTokenCommand.d.ts +2 -3
- package/dist-types/models/models_0.d.ts +1409 -2027
- package/dist-types/models/models_1.d.ts +125 -192
- package/package.json +39 -33
|
@@ -227,13 +227,9 @@ declare type CognitoIdentityProviderClientResolvedConfigType = __SmithyResolvedC
|
|
|
227
227
|
export interface CognitoIdentityProviderClientResolvedConfig extends CognitoIdentityProviderClientResolvedConfigType {
|
|
228
228
|
}
|
|
229
229
|
/**
|
|
230
|
-
* <p>Using the Amazon Cognito
|
|
231
|
-
*
|
|
232
|
-
*
|
|
233
|
-
* <p>This API reference provides information about user pools in Amazon Cognito User
|
|
234
|
-
* Pools.</p>
|
|
235
|
-
* <p>For more information, see the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html">Amazon Cognito
|
|
236
|
-
* Documentation</a>.</p>
|
|
230
|
+
* <p>Using the Amazon Cognito user pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies.</p>
|
|
231
|
+
* <p>This API reference provides information about user pools in Amazon Cognito user pools.</p>
|
|
232
|
+
* <p>For more information, see the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html">Amazon Cognito Documentation</a>.</p>
|
|
237
233
|
*/
|
|
238
234
|
export declare class CognitoIdentityProviderClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, CognitoIdentityProviderClientResolvedConfig> {
|
|
239
235
|
/**
|
|
@@ -7,8 +7,7 @@ export interface AdminConfirmSignUpCommandInput extends AdminConfirmSignUpReques
|
|
|
7
7
|
export interface AdminConfirmSignUpCommandOutput extends AdminConfirmSignUpResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Confirms user registration as an admin without using a confirmation code. Works on any
|
|
11
|
-
* user.</p>
|
|
10
|
+
* <p>Confirms user registration as an admin without using a confirmation code. Works on any user.</p>
|
|
12
11
|
* <p>Calling this action requires developer credentials.</p>
|
|
13
12
|
* @example
|
|
14
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -8,33 +8,30 @@ export interface AdminCreateUserCommandOutput extends AdminCreateUserResponse, _
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Creates a new user in the specified user pool.</p>
|
|
11
|
-
* <p>If <code>MessageAction</code>
|
|
12
|
-
*
|
|
11
|
+
* <p>If <code>MessageAction</code> isn't set, the default is to send a welcome message via email or phone (SMS).</p>
|
|
12
|
+
*
|
|
13
13
|
*
|
|
14
14
|
* <note>
|
|
15
|
-
* <p>This action might generate an SMS text message. Starting June 1, 2021,
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
* in
|
|
22
|
-
*
|
|
23
|
-
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
28
|
-
*
|
|
15
|
+
* <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an
|
|
16
|
+
* origination phone number before you can send SMS messages to U.S. phone numbers. If you use SMS text messages in Amazon Cognito, you must
|
|
17
|
+
* register a phone number with <a href="https://console.aws.amazon.com/pinpoint/home/">Amazon Pinpoint</a>. Amazon Cognito will use the registered number
|
|
18
|
+
* automatically. Otherwise, Amazon Cognito users that must receive SMS messages might be unable to sign up, activate their accounts,
|
|
19
|
+
* or sign in.</p>
|
|
20
|
+
* <p>If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service
|
|
21
|
+
* might place your account in SMS sandbox. In
|
|
22
|
+
* <i>
|
|
23
|
+
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox mode</a>
|
|
24
|
+
* </i>, you will have
|
|
25
|
+
* limitations, such as sending messages only to verified phone numbers. After testing in the sandbox environment, you can move
|
|
26
|
+
* out of the SMS sandbox and into production. For more information, see
|
|
27
|
+
* <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-sms-userpool-settings.html"> SMS
|
|
28
|
+
* message settings for Amazon Cognito User Pools</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
29
29
|
* </note>
|
|
30
30
|
*
|
|
31
|
-
* <p>This message is based on a template that you configured in your call to create or
|
|
32
|
-
*
|
|
33
|
-
*
|
|
34
|
-
* <p>
|
|
35
|
-
* <code>MessageAction</code> parameter, and Amazon Cognito will not send any email. </p>
|
|
36
|
-
* <p>In either case, the user will be in the <code>FORCE_CHANGE_PASSWORD</code> state until
|
|
37
|
-
* they sign in and change their password.</p>
|
|
31
|
+
* <p>This message is based on a template that you configured in your call to create or update a user pool. This template includes your custom sign-up instructions and placeholders for
|
|
32
|
+
* user name and temporary password.</p>
|
|
33
|
+
* <p>Alternatively, you can call <code>AdminCreateUser</code> with <code>SUPPRESS</code> for the <code>MessageAction</code> parameter, and Amazon Cognito won't send any email. </p>
|
|
34
|
+
* <p>In either case, the user will be in the <code>FORCE_CHANGE_PASSWORD</code> state until they sign in and change their password.</p>
|
|
38
35
|
* <p>
|
|
39
36
|
* <code>AdminCreateUser</code> requires developer credentials.</p>
|
|
40
37
|
* @example
|
|
@@ -7,8 +7,7 @@ export interface AdminDeleteUserAttributesCommandInput extends AdminDeleteUserAt
|
|
|
7
7
|
export interface AdminDeleteUserAttributesCommandOutput extends AdminDeleteUserAttributesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Deletes the user attributes in a user pool as an administrator. Works on any
|
|
11
|
-
* user.</p>
|
|
10
|
+
* <p>Deletes the user attributes in a user pool as an administrator. Works on any user.</p>
|
|
12
11
|
* <p>Calling this action requires developer credentials.</p>
|
|
13
12
|
* @example
|
|
14
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,34 +7,20 @@ export interface AdminDisableProviderForUserCommandInput extends AdminDisablePro
|
|
|
7
7
|
export interface AdminDisableProviderForUserCommandOutput extends AdminDisableProviderForUserResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Disables the user from signing in with the specified external (SAML or social)
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
* name that is used in the user pool for the user.</p>
|
|
25
|
-
* <p>The <code>ProviderAttributeName</code> must always be <code>Cognito_Subject</code> for
|
|
26
|
-
* social identity providers. The <code>ProviderAttributeValue</code> must always be the
|
|
27
|
-
* exact subject that was used when the user was originally linked as a source user.</p>
|
|
28
|
-
* <p>For de-linking a SAML identity, there are two scenarios. If the linked identity has
|
|
29
|
-
* not yet been used to sign-in, the <code>ProviderAttributeName</code> and
|
|
30
|
-
* <code>ProviderAttributeValue</code> must be the same values that were used for the
|
|
31
|
-
* <code>SourceUser</code> when the identities were originally linked using <code>
|
|
32
|
-
* AdminLinkProviderForUser</code> call. (If the linking was done with
|
|
33
|
-
* <code>ProviderAttributeName</code> set to <code>Cognito_Subject</code>, the same
|
|
34
|
-
* applies here). However, if the user has already signed in, the
|
|
35
|
-
* <code>ProviderAttributeName</code> must be <code>Cognito_Subject</code> and
|
|
36
|
-
* <code>ProviderAttributeValue</code> must be the subject of the SAML
|
|
37
|
-
* assertion.</p>
|
|
10
|
+
* <p>Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Amazon Cognito User Pools native username + password user,
|
|
11
|
+
* they aren't permitted to use their password to sign in. If the user to deactivate is a linked external identity provider (IdP) user, any link between that user and an existing
|
|
12
|
+
* user is removed. The next time the external user (no longer attached to the previously linked <code>DestinationUser</code>) signs in, they must create a new user account.
|
|
13
|
+
* See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminLinkProviderForUser.html">AdminLinkProviderForUser</a>.</p>
|
|
14
|
+
* <p>This action is enabled only for admin access and requires developer credentials.</p>
|
|
15
|
+
* <p>The <code>ProviderName</code> must match the value specified when creating an IdP for the pool. </p>
|
|
16
|
+
* <p>To deactivate a native username + password user, the <code>ProviderName</code> value must be <code>Cognito</code> and the <code>ProviderAttributeName</code> must be <code>Cognito_Subject</code>.
|
|
17
|
+
* The <code>ProviderAttributeValue</code> must be the name that is used in the user pool for the user.</p>
|
|
18
|
+
* <p>The <code>ProviderAttributeName</code> must always be <code>Cognito_Subject</code> for social identity providers. The <code>ProviderAttributeValue</code> must always be the exact
|
|
19
|
+
* subject that was used when the user was originally linked as a source user.</p>
|
|
20
|
+
* <p>For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign in, the <code>ProviderAttributeName</code> and <code>ProviderAttributeValue</code>
|
|
21
|
+
* must be the same values that were used for the <code>SourceUser</code> when the identities were originally linked using <code> AdminLinkProviderForUser</code> call. (If the linking was done
|
|
22
|
+
* with <code>ProviderAttributeName</code> set to <code>Cognito_Subject</code>, the same applies here). However, if the user has already signed in, the <code>ProviderAttributeName</code> must
|
|
23
|
+
* be <code>Cognito_Subject</code> and <code>ProviderAttributeValue</code> must be the subject of the SAML assertion.</p>
|
|
38
24
|
* @example
|
|
39
25
|
* Use a bare-bones client and the command you need to make an API call.
|
|
40
26
|
* ```javascript
|
|
@@ -7,8 +7,7 @@ export interface AdminGetUserCommandInput extends AdminGetUserRequest {
|
|
|
7
7
|
export interface AdminGetUserCommandOutput extends AdminGetUserResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Gets the specified user by user name in a user pool as an administrator. Works on any
|
|
11
|
-
* user.</p>
|
|
10
|
+
* <p>Gets the specified user by user name in a user pool as an administrator. Works on any user.</p>
|
|
12
11
|
* <p>Calling this action requires developer credentials.</p>
|
|
13
12
|
* @example
|
|
14
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -11,20 +11,20 @@ export interface AdminInitiateAuthCommandOutput extends AdminInitiateAuthRespons
|
|
|
11
11
|
*
|
|
12
12
|
*
|
|
13
13
|
* <note>
|
|
14
|
-
* <p>This action might generate an SMS text message. Starting June 1, 2021,
|
|
15
|
-
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
*
|
|
20
|
-
* in
|
|
21
|
-
*
|
|
22
|
-
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
|
|
23
|
-
*
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
14
|
+
* <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an
|
|
15
|
+
* origination phone number before you can send SMS messages to U.S. phone numbers. If you use SMS text messages in Amazon Cognito, you must
|
|
16
|
+
* register a phone number with <a href="https://console.aws.amazon.com/pinpoint/home/">Amazon Pinpoint</a>. Amazon Cognito will use the registered number
|
|
17
|
+
* automatically. Otherwise, Amazon Cognito users that must receive SMS messages might be unable to sign up, activate their accounts,
|
|
18
|
+
* or sign in.</p>
|
|
19
|
+
* <p>If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service
|
|
20
|
+
* might place your account in SMS sandbox. In
|
|
21
|
+
* <i>
|
|
22
|
+
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox mode</a>
|
|
23
|
+
* </i>, you will have
|
|
24
|
+
* limitations, such as sending messages only to verified phone numbers. After testing in the sandbox environment, you can move
|
|
25
|
+
* out of the SMS sandbox and into production. For more information, see
|
|
26
|
+
* <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-sms-userpool-settings.html"> SMS
|
|
27
|
+
* message settings for Amazon Cognito User Pools</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
28
28
|
* </note>
|
|
29
29
|
*
|
|
30
30
|
* <p>Calling this action requires developer credentials.</p>
|
|
@@ -7,27 +7,20 @@ export interface AdminLinkProviderForUserCommandInput extends AdminLinkProviderF
|
|
|
7
7
|
export interface AdminLinkProviderForUserCommandOutput extends AdminLinkProviderForUserResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Links an existing user account in a user pool (<code>DestinationUser</code>) to an
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
* <p> For example, if there is an existing user with a username and password, this API
|
|
17
|
-
* links that user to a federated user identity, so that when the federated user identity
|
|
18
|
-
* is used, the user signs in as the existing user account. </p>
|
|
19
|
-
* <note>
|
|
10
|
+
* <p>Links an existing user account in a user pool (<code>DestinationUser</code>) to an identity from an external identity provider (<code>SourceUser</code>) based on a specified
|
|
11
|
+
* attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not
|
|
12
|
+
* yet been used to sign in. You can then use the federated user identity to sign in as the existing user account. </p>
|
|
13
|
+
* <p> For example, if there is an existing user with a username and password, this API links that user to a federated user identity. When the user signs in with a federated user
|
|
14
|
+
* identity, they sign in as the existing user account.</p>
|
|
15
|
+
* <note>
|
|
20
16
|
* <p>The maximum number of federated identities linked to a user is 5.</p>
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
* <p>Because this API allows a user with an external federated identity to sign in as
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
* owner.</p>
|
|
27
|
-
* </important>
|
|
17
|
+
* </note>
|
|
18
|
+
* <important>
|
|
19
|
+
* <p>Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external
|
|
20
|
+
* identity providers and provider attributes that have been trusted by the application owner.</p>
|
|
21
|
+
* </important>
|
|
28
22
|
*
|
|
29
|
-
* <p>This action is
|
|
30
|
-
* credentials.</p>
|
|
23
|
+
* <p>This action is administrative and requires developer credentials.</p>
|
|
31
24
|
* @example
|
|
32
25
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
26
|
* ```javascript
|
|
@@ -7,8 +7,7 @@ export interface AdminListUserAuthEventsCommandInput extends AdminListUserAuthEv
|
|
|
7
7
|
export interface AdminListUserAuthEventsCommandOutput extends AdminListUserAuthEventsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>
|
|
11
|
-
* advanced security.</p>
|
|
10
|
+
* <p>A history of user activity and any risks detected as part of Amazon Cognito advanced security.</p>
|
|
12
11
|
* @example
|
|
13
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
13
|
* ```javascript
|
|
@@ -7,33 +7,29 @@ export interface AdminResetUserPasswordCommandInput extends AdminResetUserPasswo
|
|
|
7
7
|
export interface AdminResetUserPasswordCommandOutput extends AdminResetUserPasswordResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Resets the specified user's password in a user pool as an administrator. Works on any
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
* the user pool has phone verification selected and a verified phone number exists for the
|
|
17
|
-
* user, or if email verification is selected and a verified email exists for the user,
|
|
18
|
-
* calling this API will also result in sending a message to the end user with the code to
|
|
19
|
-
* change their password.</p>
|
|
10
|
+
* <p>Resets the specified user's password in a user pool as an administrator. Works on any user.</p>
|
|
11
|
+
* <p>When a developer calls this API, the current password is invalidated, so it must be changed. If a user tries to sign in after the API is called,
|
|
12
|
+
* the app will get a PasswordResetRequiredException exception back and should direct the user down the flow to reset the password, which is the same
|
|
13
|
+
* as the forgot password flow. In addition, if the user pool has phone verification selected and a verified phone number exists for the user, or if
|
|
14
|
+
* email verification is selected and a verified email exists for the user, calling this API will also result in sending a message to the end user
|
|
15
|
+
* with the code to change their password.</p>
|
|
20
16
|
*
|
|
21
17
|
*
|
|
22
18
|
* <note>
|
|
23
|
-
* <p>This action might generate an SMS text message. Starting June 1, 2021,
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
28
|
-
*
|
|
29
|
-
* in
|
|
30
|
-
*
|
|
31
|
-
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
|
|
32
|
-
*
|
|
33
|
-
*
|
|
34
|
-
*
|
|
35
|
-
*
|
|
36
|
-
*
|
|
19
|
+
* <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an
|
|
20
|
+
* origination phone number before you can send SMS messages to U.S. phone numbers. If you use SMS text messages in Amazon Cognito, you must
|
|
21
|
+
* register a phone number with <a href="https://console.aws.amazon.com/pinpoint/home/">Amazon Pinpoint</a>. Amazon Cognito will use the registered number
|
|
22
|
+
* automatically. Otherwise, Amazon Cognito users that must receive SMS messages might be unable to sign up, activate their accounts,
|
|
23
|
+
* or sign in.</p>
|
|
24
|
+
* <p>If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service
|
|
25
|
+
* might place your account in SMS sandbox. In
|
|
26
|
+
* <i>
|
|
27
|
+
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox mode</a>
|
|
28
|
+
* </i>, you will have
|
|
29
|
+
* limitations, such as sending messages only to verified phone numbers. After testing in the sandbox environment, you can move
|
|
30
|
+
* out of the SMS sandbox and into production. For more information, see
|
|
31
|
+
* <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-sms-userpool-settings.html"> SMS
|
|
32
|
+
* message settings for Amazon Cognito User Pools</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
37
33
|
* </note>
|
|
38
34
|
*
|
|
39
35
|
* <p>Calling this action requires developer credentials.</p>
|
|
@@ -10,20 +10,20 @@ export interface AdminRespondToAuthChallengeCommandOutput extends AdminRespondTo
|
|
|
10
10
|
* <p>Responds to an authentication challenge, as an administrator.</p>
|
|
11
11
|
*
|
|
12
12
|
* <note>
|
|
13
|
-
* <p>This action might generate an SMS text message. Starting June 1, 2021,
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
*
|
|
17
|
-
*
|
|
18
|
-
*
|
|
19
|
-
* in
|
|
20
|
-
*
|
|
21
|
-
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
13
|
+
* <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an
|
|
14
|
+
* origination phone number before you can send SMS messages to U.S. phone numbers. If you use SMS text messages in Amazon Cognito, you must
|
|
15
|
+
* register a phone number with <a href="https://console.aws.amazon.com/pinpoint/home/">Amazon Pinpoint</a>. Amazon Cognito will use the registered number
|
|
16
|
+
* automatically. Otherwise, Amazon Cognito users that must receive SMS messages might be unable to sign up, activate their accounts,
|
|
17
|
+
* or sign in.</p>
|
|
18
|
+
* <p>If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service
|
|
19
|
+
* might place your account in SMS sandbox. In
|
|
20
|
+
* <i>
|
|
21
|
+
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox mode</a>
|
|
22
|
+
* </i>, you will have
|
|
23
|
+
* limitations, such as sending messages only to verified phone numbers. After testing in the sandbox environment, you can move
|
|
24
|
+
* out of the SMS sandbox and into production. For more information, see
|
|
25
|
+
* <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-sms-userpool-settings.html"> SMS
|
|
26
|
+
* message settings for Amazon Cognito User Pools</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
27
27
|
* </note>
|
|
28
28
|
*
|
|
29
29
|
* <p>Calling this action requires developer credentials.</p>
|
|
@@ -7,11 +7,9 @@ export interface AdminSetUserMFAPreferenceCommandInput extends AdminSetUserMFAPr
|
|
|
7
7
|
export interface AdminSetUserMFAPreferenceCommandOutput extends AdminSetUserMFAPreferenceResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
* enabled. If multiple options are enabled and no preference is set, a challenge to choose
|
|
14
|
-
* an MFA option will be returned during sign in.</p>
|
|
10
|
+
* <p>The user's multi-factor authentication (MFA) preference, including which MFA options are activated, and if any are preferred. Only one factor can be set as preferred. The preferred
|
|
11
|
+
* MFA factor will be used to authenticate a user if multiple factors are activated. If multiple options are activated and no preference is set, a challenge to choose an MFA option will
|
|
12
|
+
* be returned during sign-in.</p>
|
|
15
13
|
* @example
|
|
16
14
|
* Use a bare-bones client and the command you need to make an API call.
|
|
17
15
|
* ```javascript
|
|
@@ -7,16 +7,11 @@ export interface AdminSetUserPasswordCommandInput extends AdminSetUserPasswordRe
|
|
|
7
7
|
export interface AdminSetUserPasswordCommandOutput extends AdminSetUserPasswordResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Sets the specified user's password in a user pool as an administrator. Works on any
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
* <code>NEW_PASSWORD_REQUIRED</code> challenge. If the user does not sign in before it
|
|
16
|
-
* expires, the user will not be able to sign in and their password will need to be reset
|
|
17
|
-
* by an administrator. </p>
|
|
18
|
-
* <p>Once the user has set a new password, or the password is permanent, the user status
|
|
19
|
-
* will be set to <code>Confirmed</code>.</p>
|
|
10
|
+
* <p>Sets the specified user's password in a user pool as an administrator. Works on any user. </p>
|
|
11
|
+
* <p>The password can be temporary or permanent. If it is temporary, the user status enters the <code>FORCE_CHANGE_PASSWORD</code> state. When the user next tries to sign in,
|
|
12
|
+
* the InitiateAuth/AdminInitiateAuth response will contain the <code>NEW_PASSWORD_REQUIRED</code> challenge. If the user doesn't sign in before it expires, the user won't be
|
|
13
|
+
* able to sign in, and an administrator must reset their password. </p>
|
|
14
|
+
* <p>Once the user has set a new password, or the password is permanent, the user status is set to <code>Confirmed</code>.</p>
|
|
20
15
|
* @example
|
|
21
16
|
* Use a bare-bones client and the command you need to make an API call.
|
|
22
17
|
* ```javascript
|
|
@@ -8,9 +8,9 @@ export interface AdminSetUserSettingsCommandOutput extends AdminSetUserSettingsR
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>
|
|
11
|
-
* <i>This action is no longer supported.</i> You can use it to configure
|
|
12
|
-
*
|
|
13
|
-
*
|
|
11
|
+
* <i>This action is no longer supported.</i> You can use it to configure only SMS MFA. You can't use it to configure time-based one-time password (TOTP)
|
|
12
|
+
* software token MFA. To configure either type of MFA,
|
|
13
|
+
* use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserMFAPreference.html">AdminSetUserMFAPreference</a> instead.</p>
|
|
14
14
|
* @example
|
|
15
15
|
* Use a bare-bones client and the command you need to make an API call.
|
|
16
16
|
* ```javascript
|
|
@@ -7,9 +7,8 @@ export interface AdminUpdateAuthEventFeedbackCommandInput extends AdminUpdateAut
|
|
|
7
7
|
export interface AdminUpdateAuthEventFeedbackCommandOutput extends AdminUpdateAuthEventFeedbackResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Provides feedback for an authentication event
|
|
11
|
-
*
|
|
12
|
-
* part of Amazon Cognito advanced security.</p>
|
|
10
|
+
* <p>Provides feedback for an authentication event indicating if it was from a valid user. This feedback is used for improving the risk evaluation decision for the user pool
|
|
11
|
+
* as part of Amazon Cognito advanced security.</p>
|
|
13
12
|
* @example
|
|
14
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
15
14
|
* ```javascript
|
|
@@ -7,28 +7,25 @@ export interface AdminUpdateUserAttributesCommandInput extends AdminUpdateUserAt
|
|
|
7
7
|
export interface AdminUpdateUserAttributesCommandOutput extends AdminUpdateUserAttributesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Updates the specified user's attributes, including developer attributes, as an
|
|
11
|
-
*
|
|
12
|
-
* <p>
|
|
13
|
-
* attribute name.</p>
|
|
14
|
-
* <p>In addition to updating user attributes, this API can also be used to mark phone and
|
|
15
|
-
* email as verified.</p>
|
|
10
|
+
* <p>Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user.</p>
|
|
11
|
+
* <p>For custom attributes, you must prepend the <code>custom:</code> prefix to the attribute name.</p>
|
|
12
|
+
* <p>In addition to updating user attributes, this API can also be used to mark phone and email as verified.</p>
|
|
16
13
|
*
|
|
17
14
|
* <note>
|
|
18
|
-
* <p>This action might generate an SMS text message. Starting June 1, 2021,
|
|
19
|
-
*
|
|
20
|
-
*
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
24
|
-
* in
|
|
25
|
-
*
|
|
26
|
-
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox
|
|
27
|
-
*
|
|
28
|
-
*
|
|
29
|
-
*
|
|
30
|
-
*
|
|
31
|
-
*
|
|
15
|
+
* <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an
|
|
16
|
+
* origination phone number before you can send SMS messages to U.S. phone numbers. If you use SMS text messages in Amazon Cognito, you must
|
|
17
|
+
* register a phone number with <a href="https://console.aws.amazon.com/pinpoint/home/">Amazon Pinpoint</a>. Amazon Cognito will use the registered number
|
|
18
|
+
* automatically. Otherwise, Amazon Cognito users that must receive SMS messages might be unable to sign up, activate their accounts,
|
|
19
|
+
* or sign in.</p>
|
|
20
|
+
* <p>If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service
|
|
21
|
+
* might place your account in SMS sandbox. In
|
|
22
|
+
* <i>
|
|
23
|
+
* <a href="https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox.html">sandbox mode</a>
|
|
24
|
+
* </i>, you will have
|
|
25
|
+
* limitations, such as sending messages only to verified phone numbers. After testing in the sandbox environment, you can move
|
|
26
|
+
* out of the SMS sandbox and into production. For more information, see
|
|
27
|
+
* <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-sms-userpool-settings.html"> SMS
|
|
28
|
+
* message settings for Amazon Cognito User Pools</a> in the <i>Amazon Cognito Developer Guide</i>.</p>
|
|
32
29
|
* </note>
|
|
33
30
|
*
|
|
34
31
|
* <p>Calling this action requires developer credentials.</p>
|
|
@@ -7,9 +7,8 @@ export interface AdminUserGlobalSignOutCommandInput extends AdminUserGlobalSignO
|
|
|
7
7
|
export interface AdminUserGlobalSignOutCommandOutput extends AdminUserGlobalSignOutResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Signs out users from all devices, as an administrator. It also invalidates all refresh
|
|
11
|
-
* tokens
|
|
12
|
-
* their expiry. Access and Id tokens expire one hour after they are issued.</p>
|
|
10
|
+
* <p>Signs out users from all devices, as an administrator. It also invalidates all refresh tokens issued to a user. The user's current access and Id tokens remain valid until their expiry. Access and
|
|
11
|
+
* Id tokens expire one hour after they're issued.</p>
|
|
13
12
|
* <p>Calling this action requires developer credentials.</p>
|
|
14
13
|
* @example
|
|
15
14
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,16 +7,12 @@ export interface AssociateSoftwareTokenCommandInput extends AssociateSoftwareTok
|
|
|
7
7
|
export interface AssociateSoftwareTokenCommandOutput extends AssociateSoftwareTokenResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Returns a unique generated shared secret key code for the user account. The request
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
*
|
|
14
|
-
*
|
|
15
|
-
*
|
|
16
|
-
* config is set to Optional at the user pool level, the user can then login without
|
|
17
|
-
* MFA. However, if MFA is set to Required for the user pool, the user will be asked to
|
|
18
|
-
* setup a new software token MFA during sign in.</p>
|
|
19
|
-
* </note>
|
|
10
|
+
* <p>Returns a unique generated shared secret key code for the user account. The request takes an access token or a session string, but not both.</p>
|
|
11
|
+
* <note>
|
|
12
|
+
* <p>Calling AssociateSoftwareToken immediately disassociates the existing software token from the user account. If the user doesn't subsequently verify the software token,
|
|
13
|
+
* their account is set up to authenticate without MFA. If MFA config is set to Optional at the user pool level, the user can then log in without MFA. However, if MFA is
|
|
14
|
+
* set to Required for the user pool, the user is asked to set up a new software token MFA during sign-in.</p>
|
|
15
|
+
* </note>
|
|
20
16
|
* @example
|
|
21
17
|
* Use a bare-bones client and the command you need to make an API call.
|
|
22
18
|
* ```javascript
|
|
@@ -7,8 +7,7 @@ export interface ConfirmDeviceCommandInput extends ConfirmDeviceRequest {
|
|
|
7
7
|
export interface ConfirmDeviceCommandOutput extends ConfirmDeviceResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Confirms tracking of the device. This API call is the call that begins device
|
|
11
|
-
* tracking.</p>
|
|
10
|
+
* <p>Confirms tracking of the device. This API call is the call that begins device tracking.</p>
|
|
12
11
|
* @example
|
|
13
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
13
|
* ```javascript
|
|
@@ -7,8 +7,7 @@ export interface ConfirmSignUpCommandInput extends ConfirmSignUpRequest {
|
|
|
7
7
|
export interface ConfirmSignUpCommandOutput extends ConfirmSignUpResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Confirms registration of a user and handles the existing alias from a previous
|
|
11
|
-
* user.</p>
|
|
10
|
+
* <p>Confirms registration of a user and handles the existing alias from a previous user.</p>
|
|
12
11
|
* @example
|
|
13
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface CreateResourceServerCommandInput extends CreateResourceServerRe
|
|
|
7
7
|
export interface CreateResourceServerCommandOutput extends CreateResourceServerResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates a new OAuth2.0 resource server and defines custom scopes
|
|
10
|
+
* <p>Creates a new OAuth2.0 resource server and defines custom scopes within it.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -8,8 +8,8 @@ export interface CreateUserPoolClientCommandOutput extends CreateUserPoolClientR
|
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
10
|
* <p>Creates the user pool client.</p>
|
|
11
|
-
* <p>When you create a new user pool client, token revocation is automatically
|
|
12
|
-
*
|
|
11
|
+
* <p>When you create a new user pool client, token revocation is automatically activated. For more information about revoking tokens,
|
|
12
|
+
* see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
|
|
13
13
|
* @example
|
|
14
14
|
* Use a bare-bones client and the command you need to make an API call.
|
|
15
15
|
* ```javascript
|