@aws-sdk/client-cognito-identity-provider 3.474.0 → 3.476.0

package/README.md

@@ -6,20 +6,36 @@
 
 AWS SDK for JavaScript CognitoIdentityProvider Client for Node.js, Browser and React Native.
 
-<p>With the Amazon Cognito user pools API, you can set up user pools and app clients, and
-authenticate users. To authenticate users from third-party identity providers (IdPs) in
-this API, you can <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
-about the authentication and authorization of federated users in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">Using the Amazon Cognito user pools API and user pool endpoints</a>.</p>
+<p>With the Amazon Cognito user pools API, you can configure user pools and authenticate users. To
+authenticate users from third-party identity providers (IdPs) in this API, you can
+<a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
+about the authentication and authorization of federated users at <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html">Adding user pool sign-in through a third party</a> and in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">User pool federation endpoints and hosted UI reference</a>.</p>
 <p>This API reference provides detailed information about API operations and object types
-in Amazon Cognito. At the bottom of the page for each API operation and object, under
-<i>See Also</i>, you can learn how to use it in an Amazon Web Services SDK in the
-language of your choice.</p>
+in Amazon Cognito.</p>
 <p>Along with resource management operations, the Amazon Cognito user pools API includes classes
-of operations and authorization models for client-side and server-side user operations.
-For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito native and OIDC APIs</a> in the
-<i>Amazon Cognito Developer Guide</i>.</p>
-<p>You can also start reading about the <code>CognitoIdentityProvider</code> client in
-the following SDK guides.</p>
+of operations and authorization models for client-side and server-side authentication of
+users. You can interact with operations in the Amazon Cognito user pools API as any of the
+following subjects.</p>
+<ol>
+<li>
+<p>An administrator who wants to configure user pools, app clients, users,
+groups, or other user pool functions.</p>
+</li>
+<li>
+<p>A server-side app, like a web application, that wants to use its Amazon Web Services
+privileges to manage, authenticate, or authorize a user.</p>
+</li>
+<li>
+<p>A client-side app, like a mobile app, that wants to make unauthenticated
+requests to manage, authenticate, or authorize a user.</p>
+</li>
+</ol>
+<p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito user pools API and user pool endpoints</a>
+in the <i>Amazon Cognito Developer Guide</i>.</p>
+<p>With your Amazon Web Services SDK, you can build the logic to support operational flows in every use
+case for this API. You can also make direct REST API requests to <a href="https://docs.aws.amazon.com/general/latest/gr/cognito_identity.html#cognito_identity_your_user_pools_region">Amazon Cognito user pools service endpoints</a>. The following links can get you started
+with the <code>CognitoIdentityProvider</code> client in other supported Amazon Web Services
+SDKs.</p>
 <ul>
 <li>
 <p>

package/dist-cjs/commands/SetRiskConfigurationCommand.js

@@ -7,7 +7,6 @@ const middleware_serde_1 = require("@smithy/middleware-serde");
 const smithy_client_1 = require("@smithy/smithy-client");
 Object.defineProperty(exports, "$Command", { enumerable: true, get: function () { return smithy_client_1.Command; } });
 const types_1 = require("@smithy/types");
-const models_0_1 = require("../models/models_0");
 const models_1_1 = require("../models/models_1");
 const Aws_json1_1_1 = require("../protocols/Aws_json1_1");
 class SetRiskConfigurationCommand extends smithy_client_1.Command {
@@ -35,7 +34,7 @@ class SetRiskConfigurationCommand extends smithy_client_1.Command {
             logger,
             clientName,
             commandName,
-            inputFilterSensitiveLog: models_0_1.SetRiskConfigurationRequestFilterSensitiveLog,
+            inputFilterSensitiveLog: models_1_1.SetRiskConfigurationRequestFilterSensitiveLog,
             outputFilterSensitiveLog: models_1_1.SetRiskConfigurationResponseFilterSensitiveLog,
             [types_1.SMITHY_CONTEXT_KEY]: {
                 service: "AWSCognitoIdentityProviderService",

package/dist-cjs/models/models_0.js

@@ -1,9 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VerifiedAttributeType = exports.ForbiddenException = exports.ConcurrentModificationException = exports.AliasAttributeType = exports.AdvancedSecurityModeType = exports.DeviceRememberedStatusType = exports.SoftwareTokenMFANotFoundException = exports.ExpiredCodeException = exports.CodeMismatchException = exports.InvalidEmailRoleAccessPolicyException = exports.UserPoolAddOnNotEnabledException = exports.EventType = exports.RiskLevelType = exports.RiskDecisionType = exports.EventResponseType = exports.FeedbackValueType = exports.ChallengeResponse = exports.ChallengeName = exports.UserNotConfirmedException = exports.PasswordResetRequiredException = exports.MFAMethodNotFoundException = exports.ChallengeNameType = exports.AuthFlowType = exports.InvalidUserPoolConfigurationException = exports.AliasExistsException = exports.UsernameExistsException = exports.UnsupportedUserStateException = exports.PreconditionNotMetException = exports.InvalidSmsRoleTrustRelationshipException = exports.InvalidSmsRoleAccessPolicyException = exports.InvalidPasswordException = exports.CodeDeliveryFailureException = exports.UserStatusType = exports.MessageActionType = exports.DeliveryMediumType = exports.UserLambdaValidationException = exports.UnexpectedLambdaException = exports.TooManyFailedAttemptsException = exports.LimitExceededException = exports.InvalidLambdaResponseException = exports.UserNotFoundException = exports.UserImportInProgressException = exports.TooManyRequestsException = exports.ResourceNotFoundException = exports.NotAuthorizedException = exports.InvalidParameterException = exports.InternalErrorException = exports.AttributeDataType = exports.AccountTakeoverEventActionType = exports.RecoveryOptionNameType = void 0;
-exports.AdminListGroupsForUserRequestFilterSensitiveLog = exports.AdminListDevicesResponseFilterSensitiveLog = exports.AdminListDevicesRequestFilterSensitiveLog = exports.AdminInitiateAuthResponseFilterSensitiveLog = exports.AuthenticationResultTypeFilterSensitiveLog = exports.AdminInitiateAuthRequestFilterSensitiveLog = exports.AdminGetUserResponseFilterSensitiveLog = exports.AdminGetUserRequestFilterSensitiveLog = exports.AdminGetDeviceResponseFilterSensitiveLog = exports.DeviceTypeFilterSensitiveLog = exports.AdminGetDeviceRequestFilterSensitiveLog = exports.AdminForgetDeviceRequestFilterSensitiveLog = exports.AdminEnableUserRequestFilterSensitiveLog = exports.AdminDisableUserRequestFilterSensitiveLog = exports.AdminDeleteUserAttributesRequestFilterSensitiveLog = exports.AdminDeleteUserRequestFilterSensitiveLog = exports.AdminCreateUserResponseFilterSensitiveLog = exports.UserTypeFilterSensitiveLog = exports.AdminCreateUserRequestFilterSensitiveLog = exports.AttributeTypeFilterSensitiveLog = exports.AdminConfirmSignUpRequestFilterSensitiveLog = exports.AdminAddUserToGroupRequestFilterSensitiveLog = exports.UnsupportedTokenTypeException = exports.UnsupportedOperationException = exports.UnauthorizedException = exports.LogLevel = exports.EventSourceName = exports.DomainStatusType = exports.EventFilterType = exports.CompromisedCredentialsEventActionType = exports.UnsupportedIdentityProviderException = exports.ScopeDoesNotExistException = exports.InvalidOAuthFlowException = exports.TimeUnitsType = exports.PreventUserExistenceErrorTypes = exports.ExplicitAuthFlowsType = exports.OAuthFlowType = exports.UserPoolTaggingException = exports.StatusType = exports.DefaultEmailOptionType = exports.UsernameAttributeType = exports.UserPoolMfaType = exports.CustomSMSSenderLambdaVersionType = exports.CustomEmailSenderLambdaVersionType = exports.EmailSendingAccountType = exports.DeletionProtectionType = exports.UserImportJobStatusType = exports.DuplicateProviderException = exports.IdentityProviderTypeType = exports.GroupExistsException = void 0;
-exports.RespondToAuthChallengeRequestFilterSensitiveLog = exports.ResendConfirmationCodeRequestFilterSensitiveLog = exports.ListUsersInGroupResponseFilterSensitiveLog = exports.ListUsersResponseFilterSensitiveLog = exports.ListUserPoolClientsResponseFilterSensitiveLog = exports.UserPoolClientDescriptionFilterSensitiveLog = exports.ListDevicesResponseFilterSensitiveLog = exports.ListDevicesRequestFilterSensitiveLog = exports.InitiateAuthResponseFilterSensitiveLog = exports.InitiateAuthRequestFilterSensitiveLog = exports.GlobalSignOutRequestFilterSensitiveLog = exports.GetUserAttributeVerificationCodeRequestFilterSensitiveLog = exports.GetUserResponseFilterSensitiveLog = exports.GetUserRequestFilterSensitiveLog = exports.GetUICustomizationResponseFilterSensitiveLog = exports.UICustomizationTypeFilterSensitiveLog = exports.GetUICustomizationRequestFilterSensitiveLog = exports.GetDeviceResponseFilterSensitiveLog = exports.GetDeviceRequestFilterSensitiveLog = exports.ForgotPasswordRequestFilterSensitiveLog = exports.ForgetDeviceRequestFilterSensitiveLog = exports.DescribeUserPoolClientResponseFilterSensitiveLog = exports.DescribeUserPoolClientRequestFilterSensitiveLog = exports.DescribeRiskConfigurationResponseFilterSensitiveLog = exports.RiskConfigurationTypeFilterSensitiveLog = exports.DescribeRiskConfigurationRequestFilterSensitiveLog = exports.DeleteUserPoolClientRequestFilterSensitiveLog = exports.DeleteUserAttributesRequestFilterSensitiveLog = exports.DeleteUserRequestFilterSensitiveLog = exports.CreateUserPoolClientResponseFilterSensitiveLog = exports.UserPoolClientTypeFilterSensitiveLog = exports.ConfirmSignUpRequestFilterSensitiveLog = exports.ConfirmForgotPasswordRequestFilterSensitiveLog = exports.UserContextDataTypeFilterSensitiveLog = exports.ConfirmDeviceRequestFilterSensitiveLog = exports.ChangePasswordRequestFilterSensitiveLog = exports.AssociateSoftwareTokenResponseFilterSensitiveLog = exports.AssociateSoftwareTokenRequestFilterSensitiveLog = exports.AdminUserGlobalSignOutRequestFilterSensitiveLog = exports.AdminUpdateUserAttributesRequestFilterSensitiveLog = exports.AdminUpdateDeviceStatusRequestFilterSensitiveLog = exports.AdminUpdateAuthEventFeedbackRequestFilterSensitiveLog = exports.AdminSetUserSettingsRequestFilterSensitiveLog = exports.AdminSetUserPasswordRequestFilterSensitiveLog = exports.AdminSetUserMFAPreferenceRequestFilterSensitiveLog = exports.AdminRespondToAuthChallengeResponseFilterSensitiveLog = exports.AdminRespondToAuthChallengeRequestFilterSensitiveLog = exports.AdminResetUserPasswordRequestFilterSensitiveLog = exports.AdminRemoveUserFromGroupRequestFilterSensitiveLog = exports.AdminListUserAuthEventsRequestFilterSensitiveLog = void 0;
-exports.SetRiskConfigurationRequestFilterSensitiveLog = exports.RevokeTokenRequestFilterSensitiveLog = exports.RespondToAuthChallengeResponseFilterSensitiveLog = void 0;
+exports.AdminListDevicesResponseFilterSensitiveLog = exports.AdminListDevicesRequestFilterSensitiveLog = exports.AdminInitiateAuthResponseFilterSensitiveLog = exports.AuthenticationResultTypeFilterSensitiveLog = exports.AdminInitiateAuthRequestFilterSensitiveLog = exports.AdminGetUserResponseFilterSensitiveLog = exports.AdminGetUserRequestFilterSensitiveLog = exports.AdminGetDeviceResponseFilterSensitiveLog = exports.DeviceTypeFilterSensitiveLog = exports.AdminGetDeviceRequestFilterSensitiveLog = exports.AdminForgetDeviceRequestFilterSensitiveLog = exports.AdminEnableUserRequestFilterSensitiveLog = exports.AdminDisableUserRequestFilterSensitiveLog = exports.AdminDeleteUserAttributesRequestFilterSensitiveLog = exports.AdminDeleteUserRequestFilterSensitiveLog = exports.AdminCreateUserResponseFilterSensitiveLog = exports.UserTypeFilterSensitiveLog = exports.AdminCreateUserRequestFilterSensitiveLog = exports.AttributeTypeFilterSensitiveLog = exports.AdminConfirmSignUpRequestFilterSensitiveLog = exports.AdminAddUserToGroupRequestFilterSensitiveLog = exports.UnsupportedTokenTypeException = exports.UnsupportedOperationException = exports.UnauthorizedException = exports.LogLevel = exports.EventSourceName = exports.DomainStatusType = exports.EventFilterType = exports.CompromisedCredentialsEventActionType = exports.UnsupportedIdentityProviderException = exports.ScopeDoesNotExistException = exports.InvalidOAuthFlowException = exports.TimeUnitsType = exports.PreventUserExistenceErrorTypes = exports.ExplicitAuthFlowsType = exports.OAuthFlowType = exports.UserPoolTaggingException = exports.StatusType = exports.DefaultEmailOptionType = exports.UsernameAttributeType = exports.UserPoolMfaType = exports.PreTokenGenerationLambdaVersionType = exports.CustomSMSSenderLambdaVersionType = exports.CustomEmailSenderLambdaVersionType = exports.EmailSendingAccountType = exports.DeletionProtectionType = exports.UserImportJobStatusType = exports.DuplicateProviderException = exports.IdentityProviderTypeType = exports.GroupExistsException = void 0;
+exports.ResendConfirmationCodeRequestFilterSensitiveLog = exports.ListUsersInGroupResponseFilterSensitiveLog = exports.ListUsersResponseFilterSensitiveLog = exports.ListUserPoolClientsResponseFilterSensitiveLog = exports.UserPoolClientDescriptionFilterSensitiveLog = exports.ListDevicesResponseFilterSensitiveLog = exports.ListDevicesRequestFilterSensitiveLog = exports.InitiateAuthResponseFilterSensitiveLog = exports.InitiateAuthRequestFilterSensitiveLog = exports.GlobalSignOutRequestFilterSensitiveLog = exports.GetUserAttributeVerificationCodeRequestFilterSensitiveLog = exports.GetUserResponseFilterSensitiveLog = exports.GetUserRequestFilterSensitiveLog = exports.GetUICustomizationResponseFilterSensitiveLog = exports.UICustomizationTypeFilterSensitiveLog = exports.GetUICustomizationRequestFilterSensitiveLog = exports.GetDeviceResponseFilterSensitiveLog = exports.GetDeviceRequestFilterSensitiveLog = exports.ForgotPasswordRequestFilterSensitiveLog = exports.ForgetDeviceRequestFilterSensitiveLog = exports.DescribeUserPoolClientResponseFilterSensitiveLog = exports.DescribeUserPoolClientRequestFilterSensitiveLog = exports.DescribeRiskConfigurationResponseFilterSensitiveLog = exports.RiskConfigurationTypeFilterSensitiveLog = exports.DescribeRiskConfigurationRequestFilterSensitiveLog = exports.DeleteUserPoolClientRequestFilterSensitiveLog = exports.DeleteUserAttributesRequestFilterSensitiveLog = exports.DeleteUserRequestFilterSensitiveLog = exports.CreateUserPoolClientResponseFilterSensitiveLog = exports.UserPoolClientTypeFilterSensitiveLog = exports.ConfirmSignUpRequestFilterSensitiveLog = exports.ConfirmForgotPasswordRequestFilterSensitiveLog = exports.UserContextDataTypeFilterSensitiveLog = exports.ConfirmDeviceRequestFilterSensitiveLog = exports.ChangePasswordRequestFilterSensitiveLog = exports.AssociateSoftwareTokenResponseFilterSensitiveLog = exports.AssociateSoftwareTokenRequestFilterSensitiveLog = exports.AdminUserGlobalSignOutRequestFilterSensitiveLog = exports.AdminUpdateUserAttributesRequestFilterSensitiveLog = exports.AdminUpdateDeviceStatusRequestFilterSensitiveLog = exports.AdminUpdateAuthEventFeedbackRequestFilterSensitiveLog = exports.AdminSetUserSettingsRequestFilterSensitiveLog = exports.AdminSetUserPasswordRequestFilterSensitiveLog = exports.AdminSetUserMFAPreferenceRequestFilterSensitiveLog = exports.AdminRespondToAuthChallengeResponseFilterSensitiveLog = exports.AdminRespondToAuthChallengeRequestFilterSensitiveLog = exports.AdminResetUserPasswordRequestFilterSensitiveLog = exports.AdminRemoveUserFromGroupRequestFilterSensitiveLog = exports.AdminListUserAuthEventsRequestFilterSensitiveLog = exports.AdminListGroupsForUserRequestFilterSensitiveLog = void 0;
+exports.RevokeTokenRequestFilterSensitiveLog = exports.RespondToAuthChallengeResponseFilterSensitiveLog = exports.RespondToAuthChallengeRequestFilterSensitiveLog = void 0;
 const smithy_client_1 = require("@smithy/smithy-client");
 const CognitoIdentityProviderServiceException_1 = require("./CognitoIdentityProviderServiceException");
 exports.RecoveryOptionNameType = {
@@ -574,6 +574,10 @@ exports.CustomEmailSenderLambdaVersionType = {
 exports.CustomSMSSenderLambdaVersionType = {
     V1_0: "V1_0",
 };
+exports.PreTokenGenerationLambdaVersionType = {
+    V1_0: "V1_0",
+    V2_0: "V2_0",
+};
 exports.UserPoolMfaType = {
     OFF: "OFF",
     ON: "ON",
@@ -1160,8 +1164,3 @@ const RevokeTokenRequestFilterSensitiveLog = (obj) => ({
     ...(obj.ClientSecret && { ClientSecret: smithy_client_1.SENSITIVE_STRING }),
 });
 exports.RevokeTokenRequestFilterSensitiveLog = RevokeTokenRequestFilterSensitiveLog;
-const SetRiskConfigurationRequestFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.ClientId && { ClientId: smithy_client_1.SENSITIVE_STRING }),
-});
-exports.SetRiskConfigurationRequestFilterSensitiveLog = SetRiskConfigurationRequestFilterSensitiveLog;

package/dist-cjs/models/models_1.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.VerifyUserAttributeRequestFilterSensitiveLog = exports.VerifySoftwareTokenResponseFilterSensitiveLog = exports.VerifySoftwareTokenRequestFilterSensitiveLog = exports.UpdateUserPoolClientResponseFilterSensitiveLog = exports.UpdateUserPoolClientRequestFilterSensitiveLog = exports.UpdateUserAttributesRequestFilterSensitiveLog = exports.UpdateDeviceStatusRequestFilterSensitiveLog = exports.UpdateAuthEventFeedbackRequestFilterSensitiveLog = exports.SignUpRequestFilterSensitiveLog = exports.SetUserSettingsRequestFilterSensitiveLog = exports.SetUserMFAPreferenceRequestFilterSensitiveLog = exports.SetUICustomizationResponseFilterSensitiveLog = exports.SetUICustomizationRequestFilterSensitiveLog = exports.SetRiskConfigurationResponseFilterSensitiveLog = exports.VerifySoftwareTokenResponseType = exports.EnableSoftwareTokenMFAException = void 0;
+exports.VerifyUserAttributeRequestFilterSensitiveLog = exports.VerifySoftwareTokenResponseFilterSensitiveLog = exports.VerifySoftwareTokenRequestFilterSensitiveLog = exports.UpdateUserPoolClientResponseFilterSensitiveLog = exports.UpdateUserPoolClientRequestFilterSensitiveLog = exports.UpdateUserAttributesRequestFilterSensitiveLog = exports.UpdateDeviceStatusRequestFilterSensitiveLog = exports.UpdateAuthEventFeedbackRequestFilterSensitiveLog = exports.SignUpRequestFilterSensitiveLog = exports.SetUserSettingsRequestFilterSensitiveLog = exports.SetUserMFAPreferenceRequestFilterSensitiveLog = exports.SetUICustomizationResponseFilterSensitiveLog = exports.SetUICustomizationRequestFilterSensitiveLog = exports.SetRiskConfigurationResponseFilterSensitiveLog = exports.SetRiskConfigurationRequestFilterSensitiveLog = exports.VerifySoftwareTokenResponseType = exports.EnableSoftwareTokenMFAException = void 0;
 const smithy_client_1 = require("@smithy/smithy-client");
 const CognitoIdentityProviderServiceException_1 = require("./CognitoIdentityProviderServiceException");
 const models_0_1 = require("./models_0");
@@ -21,6 +21,11 @@ exports.VerifySoftwareTokenResponseType = {
     ERROR: "ERROR",
     SUCCESS: "SUCCESS",
 };
+const SetRiskConfigurationRequestFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.ClientId && { ClientId: smithy_client_1.SENSITIVE_STRING }),
+});
+exports.SetRiskConfigurationRequestFilterSensitiveLog = SetRiskConfigurationRequestFilterSensitiveLog;
 const SetRiskConfigurationResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.RiskConfiguration && { RiskConfiguration: (0, models_0_1.RiskConfigurationTypeFilterSensitiveLog)(obj.RiskConfiguration) }),

package/dist-es/commands/SetRiskConfigurationCommand.js

@@ -3,8 +3,7 @@ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
 import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { SMITHY_CONTEXT_KEY, } from "@smithy/types";
-import { SetRiskConfigurationRequestFilterSensitiveLog } from "../models/models_0";
-import { SetRiskConfigurationResponseFilterSensitiveLog } from "../models/models_1";
+import { SetRiskConfigurationRequestFilterSensitiveLog, SetRiskConfigurationResponseFilterSensitiveLog, } from "../models/models_1";
 import { de_SetRiskConfigurationCommand, se_SetRiskConfigurationCommand } from "../protocols/Aws_json1_1";
 export { $Command };
 export class SetRiskConfigurationCommand extends $Command {

package/dist-es/models/models_0.js

@@ -535,6 +535,10 @@ export const CustomEmailSenderLambdaVersionType = {
 export const CustomSMSSenderLambdaVersionType = {
     V1_0: "V1_0",
 };
+export const PreTokenGenerationLambdaVersionType = {
+    V1_0: "V1_0",
+    V2_0: "V2_0",
+};
 export const UserPoolMfaType = {
     OFF: "OFF",
     ON: "ON",
@@ -1040,7 +1044,3 @@ export const RevokeTokenRequestFilterSensitiveLog = (obj) => ({
     ...(obj.ClientId && { ClientId: SENSITIVE_STRING }),
     ...(obj.ClientSecret && { ClientSecret: SENSITIVE_STRING }),
 });
-export const SetRiskConfigurationRequestFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.ClientId && { ClientId: SENSITIVE_STRING }),
-});

package/dist-es/models/models_1.js

@@ -17,6 +17,10 @@ export const VerifySoftwareTokenResponseType = {
     ERROR: "ERROR",
     SUCCESS: "SUCCESS",
 };
+export const SetRiskConfigurationRequestFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.ClientId && { ClientId: SENSITIVE_STRING }),
+});
 export const SetRiskConfigurationResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.RiskConfiguration && { RiskConfiguration: RiskConfigurationTypeFilterSensitiveLog(obj.RiskConfiguration) }),

package/dist-types/CognitoIdentityProvider.d.ts

@@ -725,20 +725,36 @@ export interface CognitoIdentityProvider {
 }
 /**
  * @public
- * <p>With the Amazon Cognito user pools API, you can set up user pools and app clients, and
- *             authenticate users. To authenticate users from third-party identity providers (IdPs) in
- *             this API, you can <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
- *             about the authentication and authorization of federated users in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">Using the Amazon Cognito user pools API and user pool endpoints</a>.</p>
+ * <p>With the Amazon Cognito user pools API, you can configure user pools and authenticate users. To
+ *             authenticate users from third-party identity providers (IdPs) in this API, you can
+ *                 <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
+ *             about the authentication and authorization of federated users at <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html">Adding user pool sign-in through a third party</a> and in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">User pool federation endpoints and hosted UI reference</a>.</p>
  *          <p>This API reference provides detailed information about API operations and object types
- *             in Amazon Cognito. At the bottom of the page for each API operation and object, under
- *                 <i>See Also</i>, you can learn how to use it in an Amazon Web Services SDK in the
- *             language of your choice.</p>
+ *             in Amazon Cognito.</p>
  *          <p>Along with resource management operations, the Amazon Cognito user pools API includes classes
- *             of operations and authorization models for client-side and server-side user operations.
- *             For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito native and OIDC APIs</a> in the
- *                 <i>Amazon Cognito Developer Guide</i>.</p>
- *          <p>You can also start reading about the <code>CognitoIdentityProvider</code> client in
- *             the following SDK guides.</p>
+ *             of operations and authorization models for client-side and server-side authentication of
+ *             users. You can interact with operations in the Amazon Cognito user pools API as any of the
+ *             following subjects.</p>
+ *          <ol>
+ *             <li>
+ *                <p>An administrator who wants to configure user pools, app clients, users,
+ *                     groups, or other user pool functions.</p>
+ *             </li>
+ *             <li>
+ *                <p>A server-side app, like a web application, that wants to use its Amazon Web Services
+ *                     privileges to manage, authenticate, or authorize a user.</p>
+ *             </li>
+ *             <li>
+ *                <p>A client-side app, like a mobile app, that wants to make unauthenticated
+ *                     requests to manage, authenticate, or authorize a user.</p>
+ *             </li>
+ *          </ol>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito user pools API and user pool endpoints</a>
+ *             in the <i>Amazon Cognito Developer Guide</i>.</p>
+ *          <p>With your Amazon Web Services SDK, you can build the logic to support operational flows in every use
+ *             case for this API. You can also make direct REST API requests to <a href="https://docs.aws.amazon.com/general/latest/gr/cognito_identity.html#cognito_identity_your_user_pools_region">Amazon Cognito user pools service endpoints</a>. The following links can get you started
+ *             with the <code>CognitoIdentityProvider</code> client in other supported Amazon Web Services
+ *             SDKs.</p>
  *          <ul>
  *             <li>
  *                <p>

package/dist-types/CognitoIdentityProviderClient.d.ts

@@ -255,20 +255,36 @@ export interface CognitoIdentityProviderClientResolvedConfig extends CognitoIden
 }
 /**
  * @public
- * <p>With the Amazon Cognito user pools API, you can set up user pools and app clients, and
- *             authenticate users. To authenticate users from third-party identity providers (IdPs) in
- *             this API, you can <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
- *             about the authentication and authorization of federated users in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">Using the Amazon Cognito user pools API and user pool endpoints</a>.</p>
+ * <p>With the Amazon Cognito user pools API, you can configure user pools and authenticate users. To
+ *             authenticate users from third-party identity providers (IdPs) in this API, you can
+ *                 <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html">link IdP users to native user profiles</a>. Learn more
+ *             about the authentication and authorization of federated users at <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html">Adding user pool sign-in through a third party</a> and in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-userpools-server-contract-reference.html">User pool federation endpoints and hosted UI reference</a>.</p>
  *          <p>This API reference provides detailed information about API operations and object types
- *             in Amazon Cognito. At the bottom of the page for each API operation and object, under
- *                 <i>See Also</i>, you can learn how to use it in an Amazon Web Services SDK in the
- *             language of your choice.</p>
+ *             in Amazon Cognito.</p>
  *          <p>Along with resource management operations, the Amazon Cognito user pools API includes classes
- *             of operations and authorization models for client-side and server-side user operations.
- *             For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito native and OIDC APIs</a> in the
- *                 <i>Amazon Cognito Developer Guide</i>.</p>
- *          <p>You can also start reading about the <code>CognitoIdentityProvider</code> client in
- *             the following SDK guides.</p>
+ *             of operations and authorization models for client-side and server-side authentication of
+ *             users. You can interact with operations in the Amazon Cognito user pools API as any of the
+ *             following subjects.</p>
+ *          <ol>
+ *             <li>
+ *                <p>An administrator who wants to configure user pools, app clients, users,
+ *                     groups, or other user pool functions.</p>
+ *             </li>
+ *             <li>
+ *                <p>A server-side app, like a web application, that wants to use its Amazon Web Services
+ *                     privileges to manage, authenticate, or authorize a user.</p>
+ *             </li>
+ *             <li>
+ *                <p>A client-side app, like a mobile app, that wants to make unauthenticated
+ *                     requests to manage, authenticate, or authorize a user.</p>
+ *             </li>
+ *          </ol>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito user pools API and user pool endpoints</a>
+ *             in the <i>Amazon Cognito Developer Guide</i>.</p>
+ *          <p>With your Amazon Web Services SDK, you can build the logic to support operational flows in every use
+ *             case for this API. You can also make direct REST API requests to <a href="https://docs.aws.amazon.com/general/latest/gr/cognito_identity.html#cognito_identity_your_user_pools_region">Amazon Cognito user pools service endpoints</a>. The following links can get you started
+ *             with the <code>CognitoIdentityProvider</code> client in other supported Amazon Web Services
+ *             SDKs.</p>
  *          <ul>
  *             <li>
  *                <p>

package/dist-types/commands/AdminAddUserToGroupCommand.d.ts

@@ -23,7 +23,9 @@ export interface AdminAddUserToGroupCommandOutput extends __MetadataBearer {
 }
 /**
  * @public
- * <p>Adds the specified user to the specified group.</p>
+ * <p>Adds a user to a group. A user who is in a group can present a preferred-role claim to
+ *             an identity pool, and populates a <code>cognito:groups</code> claim to their access and
+ *             identity tokens.</p>
  *          <note>
  *             <p>Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you must use IAM credentials to authorize requests, and you must

package/dist-types/commands/AdminConfirmSignUpCommand.d.ts

@@ -23,8 +23,15 @@ export interface AdminConfirmSignUpCommandOutput extends AdminConfirmSignUpRespo
 }
 /**
  * @public
- * <p>Confirms user registration as an admin without using a confirmation code. Works on any
- *             user.</p>
+ * <p>This IAM-authenticated API operation provides a code that Amazon Cognito sent to your user
+ *             when they signed up in your user pool. After your user enters their code, they confirm
+ *             ownership of the email address or phone number that they provided, and their user
+ *             account becomes active. Depending on your user pool configuration, your users will
+ *             receive their confirmation code in an email or SMS message.</p>
+ *          <p>Local users who signed up in your user pool are the only type of user who can confirm
+ *             sign-up with a code. Users who federate through an external identity provider (IdP) have
+ *             already been confirmed by their IdP. Administrator-created users confirm their accounts
+ *             when they respond to their invitation email message and choose a password.</p>
  *          <note>
  *             <p>Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you must use IAM credentials to authorize requests, and you must

package/dist-types/commands/AdminListGroupsForUserCommand.d.ts

@@ -23,7 +23,7 @@ export interface AdminListGroupsForUserCommandOutput extends AdminListGroupsForU
 }
 /**
  * @public
- * <p>Lists the groups that the user belongs to.</p>
+ * <p>Lists the groups that a user belongs to.</p>
  *          <note>
  *             <p>Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you must use IAM credentials to authorize requests, and you must

package/dist-types/commands/AdminRespondToAuthChallengeCommand.d.ts

@@ -23,7 +23,13 @@ export interface AdminRespondToAuthChallengeCommandOutput extends AdminRespondTo
 }
 /**
  * @public
- * <p>Responds to an authentication challenge, as an administrator.</p>
+ * <p>Some API operations in a user pool generate a challenge, like a prompt for an MFA
+ *             code, for device authentication that bypasses MFA, or for a custom authentication
+ *             challenge. An <code>AdminRespondToAuthChallenge</code> API request provides the answer
+ *             to that challenge, like a code or a secure remote password (SRP). The parameters of a
+ *             response to an authentication challenge vary with the type of challenge.</p>
+ *          <p>For more information about custom authentication challenges, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html">Custom
+ *                 authentication challenge Lambda triggers</a>.</p>
  *          <note>
  *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
  *                 require you to register an origination phone number before you can send SMS messages

package/dist-types/commands/AdminUserGlobalSignOutCommand.d.ts

@@ -23,14 +23,30 @@ export interface AdminUserGlobalSignOutCommandOutput extends AdminUserGlobalSign
 }
 /**
  * @public
- * <p>Signs out a user from all devices. <code>AdminUserGlobalSignOut</code> invalidates all
- *             identity, access and refresh tokens that Amazon Cognito has issued to a user. A user can still
- *             use a hosted UI cookie to retrieve new tokens for the duration of the 1-hour cookie
- *             validity period.</p>
- *          <p>Your app isn't aware that a user's access token is revoked unless it attempts to
- *             authorize a user pools API request with an access token that contains the scope
- *                 <code>aws.cognito.signin.user.admin</code>. Your app might otherwise accept access
- *             tokens until they expire.</p>
+ * <p>Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call
+ *             this operation with your administrative credentials when your user signs out of your
+ *             app. This results in the following behavior. </p>
+ *          <ul>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts <i>token-authorized</i> user operations
+ *                     that you authorize with a signed-out user's access tokens. For more information,
+ *                     see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito user pools API and user pool
+ *                         endpoints</a>.</p>
+ *                <p>Amazon Cognito returns an <code>Access Token has been revoked</code> error when your
+ *                     app attempts to authorize a user pools API request with a revoked access token
+ *                     that contains the scope <code>aws.cognito.signin.user.admin</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts a signed-out user's ID token in a <a href="https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html">GetId </a> request to an identity pool with
+ *                         <code>ServerSideTokenCheck</code> enabled for its user pool IdP
+ *                     configuration in <a href="https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_CognitoIdentityProvider.html">CognitoIdentityProvider</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts a signed-out user's refresh tokens in refresh
+ *                     requests.</p>
+ *             </li>
+ *          </ul>
+ *          <p>Other requests might be valid until your user's token expires.</p>
  *          <note>
  *             <p>Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you must use IAM credentials to authorize requests, and you must

package/dist-types/commands/ConfirmSignUpCommand.d.ts

@@ -23,7 +23,18 @@ export interface ConfirmSignUpCommandOutput extends ConfirmSignUpResponse, __Met
 }
 /**
  * @public
- * <p>Confirms registration of a new user.</p>
+ * <p>This public API operation provides a code that Amazon Cognito sent to your user when they
+ *             signed up in your user pool via the <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html">SignUp</a>
+ *             API operation. After your user enters their code, they confirm ownership of the email
+ *             address or phone number that they provided, and their user account becomes active.
+ *             Depending on your user pool configuration, your users will receive their confirmation
+ *             code in an email or SMS message.</p>
+ *          <p>Local users who signed up in your user pool are the only type of user who can confirm
+ *             sign-up with a code. Users who federate through an external identity provider (IdP) have
+ *             already been confirmed by their IdP. Administrator-created users, users created with the
+ *                 <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminCreateUser.html">AdminCreateUser</a> API operation, confirm their accounts when they respond to
+ *             their invitation email message and choose a password. They do not receive a confirmation
+ *             code. Instead, they receive a temporary password.</p>
  *          <note>
  *             <p>Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you can't use IAM credentials to authorize requests, and you can't

package/dist-types/commands/CreateUserPoolCommand.d.ts

@@ -94,6 +94,10 @@ export interface CreateUserPoolCommandOutput extends CreateUserPoolResponse, __M
  *     CreateAuthChallenge: "STRING_VALUE",
  *     VerifyAuthChallengeResponse: "STRING_VALUE",
  *     PreTokenGeneration: "STRING_VALUE",
+ *     PreTokenGenerationConfig: { // PreTokenGenerationVersionConfigType
+ *       LambdaVersion: "V1_0" || "V2_0", // required
+ *       LambdaArn: "STRING_VALUE", // required
+ *     },
  *     UserMigration: "STRING_VALUE",
  *     CustomSMSSender: { // CustomSMSLambdaVersionConfigType
  *       LambdaVersion: "V1_0", // required
@@ -219,6 +223,10 @@ export interface CreateUserPoolCommandOutput extends CreateUserPoolResponse, __M
  * //       CreateAuthChallenge: "STRING_VALUE",
  * //       VerifyAuthChallengeResponse: "STRING_VALUE",
  * //       PreTokenGeneration: "STRING_VALUE",
+ * //       PreTokenGenerationConfig: { // PreTokenGenerationVersionConfigType
+ * //         LambdaVersion: "V1_0" || "V2_0", // required
+ * //         LambdaArn: "STRING_VALUE", // required
+ * //       },
  * //       UserMigration: "STRING_VALUE",
  * //       CustomSMSSender: { // CustomSMSLambdaVersionConfigType
  * //         LambdaVersion: "V1_0", // required

package/dist-types/commands/DescribeUserPoolCommand.d.ts

@@ -80,6 +80,10 @@ export interface DescribeUserPoolCommandOutput extends DescribeUserPoolResponse,
  * //       CreateAuthChallenge: "STRING_VALUE",
  * //       VerifyAuthChallengeResponse: "STRING_VALUE",
  * //       PreTokenGeneration: "STRING_VALUE",
+ * //       PreTokenGenerationConfig: { // PreTokenGenerationVersionConfigType
+ * //         LambdaVersion: "V1_0" || "V2_0", // required
+ * //         LambdaArn: "STRING_VALUE", // required
+ * //       },
  * //       UserMigration: "STRING_VALUE",
  * //       CustomSMSSender: { // CustomSMSLambdaVersionConfigType
  * //         LambdaVersion: "V1_0", // required

package/dist-types/commands/GlobalSignOutCommand.d.ts

@@ -23,14 +23,30 @@ export interface GlobalSignOutCommandOutput extends GlobalSignOutResponse, __Met
 }
 /**
  * @public
- * <p>Signs out a user from all devices. <code>GlobalSignOut</code> invalidates all
- *             identity, access and refresh tokens that Amazon Cognito has issued to a user. A user can still
- *             use a hosted UI cookie to retrieve new tokens for the duration of the 1-hour cookie
- *             validity period.</p>
- *          <p>Your app isn't aware that a user's access token is revoked unless it attempts to
- *             authorize a user pools API request with an access token that contains the scope
- *                 <code>aws.cognito.signin.user.admin</code>. Your app might otherwise accept access
- *             tokens until they expire.</p>
+ * <p>Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call
+ *             this operation when your user signs out of your app. This results in the following
+ *             behavior. </p>
+ *          <ul>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts <i>token-authorized</i> user operations
+ *                     that you authorize with a signed-out user's access tokens. For more information,
+ *                     see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pools-API-operations.html">Using the Amazon Cognito user pools API and user pool
+ *                         endpoints</a>.</p>
+ *                <p>Amazon Cognito returns an <code>Access Token has been revoked</code> error when your
+ *                     app attempts to authorize a user pools API request with a revoked access token
+ *                     that contains the scope <code>aws.cognito.signin.user.admin</code>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts a signed-out user's ID token in a <a href="https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_GetId.html">GetId </a> request to an identity pool with
+ *                         <code>ServerSideTokenCheck</code> enabled for its user pool IdP
+ *                     configuration in <a href="https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/API_CognitoIdentityProvider.html">CognitoIdentityProvider</a>.</p>
+ *             </li>
+ *             <li>
+ *                <p>Amazon Cognito no longer accepts a signed-out user's refresh tokens in refresh
+ *                     requests.</p>
+ *             </li>
+ *          </ul>
+ *          <p>Other requests might be valid until your user's token expires.</p>
  *          <note>
  *             <p>Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you can't use IAM credentials to authorize requests, and you can't

package/dist-types/commands/ListUserPoolsCommand.d.ts

@@ -71,6 +71,10 @@ export interface ListUserPoolsCommandOutput extends ListUserPoolsResponse, __Met
  * //         CreateAuthChallenge: "STRING_VALUE",
  * //         VerifyAuthChallengeResponse: "STRING_VALUE",
  * //         PreTokenGeneration: "STRING_VALUE",
+ * //         PreTokenGenerationConfig: { // PreTokenGenerationVersionConfigType
+ * //           LambdaVersion: "V1_0" || "V2_0", // required
+ * //           LambdaArn: "STRING_VALUE", // required
+ * //         },
  * //         UserMigration: "STRING_VALUE",
  * //         CustomSMSSender: { // CustomSMSLambdaVersionConfigType
  * //           LambdaVersion: "V1_0", // required

package/dist-types/commands/RespondToAuthChallengeCommand.d.ts

@@ -23,7 +23,13 @@ export interface RespondToAuthChallengeCommandOutput extends RespondToAuthChalle
 }
 /**
  * @public
- * <p>Responds to the authentication challenge.</p>
+ * <p>Some API operations in a user pool generate a challenge, like a prompt for an MFA
+ *             code, for device authentication that bypasses MFA, or for a custom authentication
+ *             challenge. A <code>RespondToAuthChallenge</code> API request provides the answer to that
+ *             challenge, like a code or a secure remote password (SRP). The parameters of a response
+ *             to an authentication challenge vary with the type of challenge.</p>
+ *          <p>For more information about custom authentication challenges, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html">Custom
+ *                 authentication challenge Lambda triggers</a>.</p>
  *          <note>
  *             <p>Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you can't use IAM credentials to authorize requests, and you can't

package/dist-types/commands/SetLogDeliveryConfigurationCommand.d.ts

@@ -2,7 +2,8 @@ import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
 import { Command as $Command } from "@smithy/smithy-client";
 import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
 import { CognitoIdentityProviderClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CognitoIdentityProviderClient";
-import { SetLogDeliveryConfigurationRequest, SetLogDeliveryConfigurationResponse } from "../models/models_0";
+import { SetLogDeliveryConfigurationRequest } from "../models/models_0";
+import { SetLogDeliveryConfigurationResponse } from "../models/models_1";
 /**
  * @public
  */

package/dist-types/commands/SetRiskConfigurationCommand.d.ts

@@ -2,8 +2,7 @@ import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
 import { Command as $Command } from "@smithy/smithy-client";
 import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
 import { CognitoIdentityProviderClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../CognitoIdentityProviderClient";
-import { SetRiskConfigurationRequest } from "../models/models_0";
-import { SetRiskConfigurationResponse } from "../models/models_1";
+import { SetRiskConfigurationRequest, SetRiskConfigurationResponse } from "../models/models_1";
 /**
  * @public
  */

package/dist-types/commands/UpdateUserAttributesCommand.d.ts

@@ -23,7 +23,11 @@ export interface UpdateUserAttributesCommandOutput extends UpdateUserAttributesR
 }
 /**
  * @public
- * <p>Allows a user to update a specific attribute (one at a time).</p>
+ * <p>With this operation, your users can update one or more of their attributes with their
+ *             own credentials. You authorize this API request with the user's access token. To delete
+ *             an attribute from your user, submit the attribute in your API request with a blank
+ *             value. Custom attribute values in this request must include the <code>custom:</code>
+ *             prefix.</p>
  *          <note>
  *             <p>Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For
  *             this operation, you can't use IAM credentials to authorize requests, and you can't

package/dist-types/commands/UpdateUserPoolCommand.d.ts

@@ -94,6 +94,10 @@ export interface UpdateUserPoolCommandOutput extends UpdateUserPoolResponse, __M
  *     CreateAuthChallenge: "STRING_VALUE",
  *     VerifyAuthChallengeResponse: "STRING_VALUE",
  *     PreTokenGeneration: "STRING_VALUE",
+ *     PreTokenGenerationConfig: { // PreTokenGenerationVersionConfigType
+ *       LambdaVersion: "V1_0" || "V2_0", // required
+ *       LambdaArn: "STRING_VALUE", // required
+ *     },
  *     UserMigration: "STRING_VALUE",
  *     CustomSMSSender: { // CustomSMSLambdaVersionConfigType
  *       LambdaVersion: "V1_0", // required