@aws-sdk/client-cognito-identity-provider 3.624.0 → 3.627.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/dist-cjs/index.js +94 -55
  2. package/dist-es/models/models_0.js +18 -36
  3. package/dist-es/models/models_1.js +36 -0
  4. package/dist-es/protocols/Aws_json1_1.js +14 -2
  5. package/dist-types/CognitoIdentityProvider.d.ts +5 -5
  6. package/dist-types/CognitoIdentityProviderClient.d.ts +5 -5
  7. package/dist-types/commands/AdminConfirmSignUpCommand.d.ts +6 -9
  8. package/dist-types/commands/AdminCreateUserCommand.d.ts +1 -1
  9. package/dist-types/commands/AdminInitiateAuthCommand.d.ts +1 -1
  10. package/dist-types/commands/AdminResetUserPasswordCommand.d.ts +1 -1
  11. package/dist-types/commands/AdminRespondToAuthChallengeCommand.d.ts +5 -1
  12. package/dist-types/commands/AdminSetUserPasswordCommand.d.ts +4 -0
  13. package/dist-types/commands/AdminUpdateUserAttributesCommand.d.ts +1 -1
  14. package/dist-types/commands/AssociateSoftwareTokenCommand.d.ts +2 -2
  15. package/dist-types/commands/ChangePasswordCommand.d.ts +4 -0
  16. package/dist-types/commands/ConfirmForgotPasswordCommand.d.ts +4 -0
  17. package/dist-types/commands/CreateUserPoolCommand.d.ts +9 -1
  18. package/dist-types/commands/DescribeUserPoolCommand.d.ts +4 -0
  19. package/dist-types/commands/ForgotPasswordCommand.d.ts +1 -1
  20. package/dist-types/commands/GetLogDeliveryConfigurationCommand.d.ts +9 -3
  21. package/dist-types/commands/GetUserAttributeVerificationCodeCommand.d.ts +1 -1
  22. package/dist-types/commands/InitiateAuthCommand.d.ts +1 -1
  23. package/dist-types/commands/ResendConfirmationCodeCommand.d.ts +1 -1
  24. package/dist-types/commands/RespondToAuthChallengeCommand.d.ts +5 -1
  25. package/dist-types/commands/RevokeTokenCommand.d.ts +2 -1
  26. package/dist-types/commands/SetLogDeliveryConfigurationCommand.d.ts +19 -7
  27. package/dist-types/commands/SetUserPoolMfaConfigCommand.d.ts +1 -1
  28. package/dist-types/commands/SignUpCommand.d.ts +1 -1
  29. package/dist-types/commands/UpdateUserAttributesCommand.d.ts +1 -1
  30. package/dist-types/commands/UpdateUserPoolCommand.d.ts +5 -1
  31. package/dist-types/index.d.ts +5 -5
  32. package/dist-types/models/models_0.d.ts +131 -73
  33. package/dist-types/models/models_1.d.ts +61 -2
  34. package/dist-types/ts3.4/commands/RevokeTokenCommand.d.ts +2 -1
  35. package/dist-types/ts3.4/commands/SetLogDeliveryConfigurationCommand.d.ts +4 -2
  36. package/dist-types/ts3.4/models/models_0.d.ts +31 -26
  37. package/dist-types/ts3.4/models/models_1.d.ts +27 -0
  38. package/package.json +1 -1
@@ -933,7 +933,7 @@ export declare class InvalidSmsRoleAccessPolicyException extends __BaseException
933
933
  /**
934
934
  * <p>This exception is thrown when the trust relationship is not valid for the role
935
935
  * provided for SMS configuration. This can happen if you don't trust
936
- * <code>cognito-idp.amazonaws.com</code> or the external ID provided in the role does
936
+ * <code>cognito-idp.amazonaws.com</code> or the external ID provided in the role does
937
937
  * not match what is provided in the SMS configuration for the user pool.</p>
938
938
  * @public
939
939
  */
@@ -2775,6 +2775,19 @@ export declare class ExpiredCodeException extends __BaseException {
2775
2775
  */
2776
2776
  constructor(opts: __ExceptionOptionType<ExpiredCodeException, __BaseException>);
2777
2777
  }
2778
+ /**
2779
+ * <p>The message returned when a user's new password matches a previous password and
2780
+ * doesn't comply with the password-history policy.</p>
2781
+ * @public
2782
+ */
2783
+ export declare class PasswordHistoryPolicyViolationException extends __BaseException {
2784
+ readonly name: "PasswordHistoryPolicyViolationException";
2785
+ readonly $fault: "client";
2786
+ /**
2787
+ * @internal
2788
+ */
2789
+ constructor(opts: __ExceptionOptionType<PasswordHistoryPolicyViolationException, __BaseException>);
2790
+ }
2778
2791
  /**
2779
2792
  * <p>This exception is thrown when the software token time-based one-time password (TOTP)
2780
2793
  * multi-factor authentication (MFA) isn't activated for the user pool.</p>
@@ -3130,6 +3143,35 @@ export interface AdminUserGlobalSignOutRequest {
3130
3143
  */
3131
3144
  export interface AdminUserGlobalSignOutResponse {
3132
3145
  }
3146
+ /**
3147
+ * @public
3148
+ * @enum
3149
+ */
3150
+ export declare const AdvancedSecurityEnabledModeType: {
3151
+ readonly AUDIT: "AUDIT";
3152
+ readonly ENFORCED: "ENFORCED";
3153
+ };
3154
+ /**
3155
+ * @public
3156
+ */
3157
+ export type AdvancedSecurityEnabledModeType = (typeof AdvancedSecurityEnabledModeType)[keyof typeof AdvancedSecurityEnabledModeType];
3158
+ /**
3159
+ * <p>Advanced security configuration options for additional authentication types
3160
+ * in your user pool, including custom authentication and refresh-token
3161
+ * authentication.
3162
+ * </p>
3163
+ * @public
3164
+ */
3165
+ export interface AdvancedSecurityAdditionalFlowsType {
3166
+ /**
3167
+ * <p>The operating mode of advanced security features in custom authentication with
3168
+ * <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html">
3169
+ * Custom authentication challenge Lambda triggers</a>.
3170
+ * </p>
3171
+ * @public
3172
+ */
3173
+ CustomAuthMode?: AdvancedSecurityEnabledModeType;
3174
+ }
3133
3175
  /**
3134
3176
  * @public
3135
3177
  * @enum
@@ -4645,6 +4687,16 @@ export interface PasswordPolicyType {
4645
4687
  * @public
4646
4688
  */
4647
4689
  RequireSymbols?: boolean;
4690
+ /**
4691
+ * <p>The number of previous passwords that you want Amazon Cognito to restrict each user from
4692
+ * reusing. Users can't set a password that matches any of <code>n</code> previous
4693
+ * passwords, where <code>n</code> is the value of <code>PasswordHistorySize</code>.</p>
4694
+ * <p>Password history isn't enforced and isn't displayed in <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html">DescribeUserPool</a> responses when you set this value to
4695
+ * <code>0</code> or don't provide it. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
4696
+ * advanced security features</a> must be active in your user pool.</p>
4697
+ * @public
4698
+ */
4699
+ PasswordHistorySize?: number;
4648
4700
  /**
4649
4701
  * <p>The number of days a temporary password is valid in the password policy. If the user
4650
4702
  * doesn't sign in during this time, an administrator must reset their password. Defaults
@@ -4793,10 +4845,21 @@ export interface UsernameConfigurationType {
4793
4845
  */
4794
4846
  export interface UserPoolAddOnsType {
4795
4847
  /**
4796
- * <p>The operating mode of advanced security features in your user pool.</p>
4848
+ * <p>The operating mode of advanced security features for standard authentication types
4849
+ * in your user pool, including username-password and secure remote password (SRP)
4850
+ * authentication.
4851
+ * </p>
4797
4852
  * @public
4798
4853
  */
4799
4854
  AdvancedSecurityMode: AdvancedSecurityModeType | undefined;
4855
+ /**
4856
+ * <p>Advanced security configuration options for additional authentication types
4857
+ * in your user pool, including custom authentication and refresh-token
4858
+ * authentication.
4859
+ * </p>
4860
+ * @public
4861
+ */
4862
+ AdvancedSecurityAdditionalFlows?: AdvancedSecurityAdditionalFlowsType;
4800
4863
  }
4801
4864
  /**
4802
4865
  * @public
@@ -5725,6 +5788,7 @@ export interface CreateUserPoolClientRequest {
5725
5788
  * existence related errors aren't prevented.</p>
5726
5789
  * </li>
5727
5790
  * </ul>
5791
+ * <p>Defaults to <code>LEGACY</code> when you don't provide a value.</p>
5728
5792
  * @public
5729
5793
  */
5730
5794
  PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
@@ -6074,10 +6138,11 @@ export interface UserPoolClientType {
6074
6138
  * </li>
6075
6139
  * <li>
6076
6140
  * <p>
6077
- * <code>LEGACY</code> - This represents the old behavior of Amazon Cognito where user
6141
+ * <code>LEGACY</code> - This represents the early behavior of Amazon Cognito where user
6078
6142
  * existence related errors aren't prevented.</p>
6079
6143
  * </li>
6080
6144
  * </ul>
6145
+ * <p>Defaults to <code>LEGACY</code> when you don't provide a value.</p>
6081
6146
  * @public
6082
6147
  */
6083
6148
  PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
@@ -6941,15 +7006,15 @@ export interface GetIdentityProviderByIdentifierResponse {
6941
7006
  */
6942
7007
  export interface GetLogDeliveryConfigurationRequest {
6943
7008
  /**
6944
- * <p>The ID of the user pool where you want to view detailed activity logging
6945
- * configuration.</p>
7009
+ * <p>The ID of the user pool that has the logging configuration that you want to
7010
+ * view.</p>
6946
7011
  * @public
6947
7012
  */
6948
7013
  UserPoolId: string | undefined;
6949
7014
  }
6950
7015
  /**
6951
- * <p>The CloudWatch logging destination of a user pool detailed activity logging
6952
- * configuration.</p>
7016
+ * <p>Configuration for the CloudWatch log group destination of user pool detailed activity
7017
+ * logging, or of user activity log export with advanced security features.</p>
6953
7018
  * @public
6954
7019
  */
6955
7020
  export interface CloudWatchLogsConfigurationType {
@@ -6970,23 +7035,51 @@ export interface CloudWatchLogsConfigurationType {
6970
7035
  * @enum
6971
7036
  */
6972
7037
  export declare const EventSourceName: {
7038
+ readonly USER_AUTH_EVENTS: "userAuthEvents";
6973
7039
  readonly USER_NOTIFICATION: "userNotification";
6974
7040
  };
6975
7041
  /**
6976
7042
  * @public
6977
7043
  */
6978
7044
  export type EventSourceName = (typeof EventSourceName)[keyof typeof EventSourceName];
7045
+ /**
7046
+ * <p>Configuration for the Amazon Data Firehose stream destination of user activity log export with
7047
+ * advanced security features.</p>
7048
+ * @public
7049
+ */
7050
+ export interface FirehoseConfigurationType {
7051
+ /**
7052
+ * <p>The ARN of an Amazon Data Firehose stream that's the destination for advanced security
7053
+ * features log export.</p>
7054
+ * @public
7055
+ */
7056
+ StreamArn?: string;
7057
+ }
6979
7058
  /**
6980
7059
  * @public
6981
7060
  * @enum
6982
7061
  */
6983
7062
  export declare const LogLevel: {
6984
7063
  readonly ERROR: "ERROR";
7064
+ readonly INFO: "INFO";
6985
7065
  };
6986
7066
  /**
6987
7067
  * @public
6988
7068
  */
6989
7069
  export type LogLevel = (typeof LogLevel)[keyof typeof LogLevel];
7070
+ /**
7071
+ * <p>Configuration for the Amazon S3 bucket destination of user activity log export with
7072
+ * advanced security features.</p>
7073
+ * @public
7074
+ */
7075
+ export interface S3ConfigurationType {
7076
+ /**
7077
+ * <p>The ARN of an Amazon S3 bucket that's the destination for advanced security features
7078
+ * log export.</p>
7079
+ * @public
7080
+ */
7081
+ BucketArn?: string;
7082
+ }
6990
7083
  /**
6991
7084
  * <p>The logging parameters of a user pool.</p>
6992
7085
  * @public
@@ -6994,33 +7087,57 @@ export type LogLevel = (typeof LogLevel)[keyof typeof LogLevel];
6994
7087
  export interface LogConfigurationType {
6995
7088
  /**
6996
7089
  * <p>The <code>errorlevel</code> selection of logs that a user pool sends for detailed
6997
- * activity logging.</p>
7090
+ * activity logging. To send <code>userNotification</code> activity with <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/tracking-quotas-and-usage-in-cloud-watch-logs.html">information about message delivery</a>, choose <code>ERROR</code> with
7091
+ * <code>CloudWatchLogsConfiguration</code>. To send <code>userAuthEvents</code>
7092
+ * activity with user logs from advanced security features, choose <code>INFO</code> with
7093
+ * one of <code>CloudWatchLogsConfiguration</code>, <code>FirehoseConfiguration</code>, or
7094
+ * <code>S3Configuration</code>.</p>
6998
7095
  * @public
6999
7096
  */
7000
7097
  LogLevel: LogLevel | undefined;
7001
7098
  /**
7002
- * <p>The source of events that your user pool sends for detailed activity logging.</p>
7099
+ * <p>The source of events that your user pool sends for logging. To send error-level logs
7100
+ * about user notification activity, set to <code>userNotification</code>. To send
7101
+ * info-level logs about advanced security features user activity, set to
7102
+ * <code>userAuthEvents</code>.</p>
7003
7103
  * @public
7004
7104
  */
7005
7105
  EventSource: EventSourceName | undefined;
7006
7106
  /**
7007
- * <p>The CloudWatch logging destination of a user pool.</p>
7107
+ * <p>The CloudWatch log group destination of user pool detailed activity logs, or of user
7108
+ * activity log export with advanced security features.</p>
7008
7109
  * @public
7009
7110
  */
7010
7111
  CloudWatchLogsConfiguration?: CloudWatchLogsConfigurationType;
7112
+ /**
7113
+ * <p>The Amazon S3 bucket destination of user activity log export with advanced security
7114
+ * features. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
7115
+ * advanced security features</a> must be active in your user pool.</p>
7116
+ * @public
7117
+ */
7118
+ S3Configuration?: S3ConfigurationType;
7119
+ /**
7120
+ * <p>The Amazon Data Firehose stream destination of user activity log export with advanced security
7121
+ * features. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
7122
+ * advanced security features</a> must be active in your user pool.</p>
7123
+ * @public
7124
+ */
7125
+ FirehoseConfiguration?: FirehoseConfigurationType;
7011
7126
  }
7012
7127
  /**
7013
- * <p>The logging parameters of a user pool.</p>
7128
+ * <p>The logging parameters of a user pool returned in response to
7129
+ * <code>GetLogDeliveryConfiguration</code>.</p>
7014
7130
  * @public
7015
7131
  */
7016
7132
  export interface LogDeliveryConfigurationType {
7017
7133
  /**
7018
- * <p>The ID of the user pool where you configured detailed activity logging.</p>
7134
+ * <p>The ID of the user pool where you configured logging.</p>
7019
7135
  * @public
7020
7136
  */
7021
7137
  UserPoolId: string | undefined;
7022
7138
  /**
7023
- * <p>The detailed activity logging destination of a user pool.</p>
7139
+ * <p>A logging destination of a user pool. User pools can have multiple logging
7140
+ * destinations for message-delivery and user-activity logs.</p>
7024
7141
  * @public
7025
7142
  */
7026
7143
  LogConfigurations: LogConfigurationType[] | undefined;
@@ -7030,7 +7147,7 @@ export interface LogDeliveryConfigurationType {
7030
7147
  */
7031
7148
  export interface GetLogDeliveryConfigurationResponse {
7032
7149
  /**
7033
- * <p>The detailed activity logging configuration of the requested user pool.</p>
7150
+ * <p>The logging configuration of the requested user pool.</p>
7034
7151
  * @public
7035
7152
  */
7036
7153
  LogDeliveryConfiguration?: LogDeliveryConfigurationType;
@@ -8512,65 +8629,6 @@ export interface RevokeTokenRequest {
8512
8629
  */
8513
8630
  ClientSecret?: string;
8514
8631
  }
8515
- /**
8516
- * @public
8517
- */
8518
- export interface RevokeTokenResponse {
8519
- }
8520
- /**
8521
- * <p>Exception that is thrown when the request isn't authorized. This can happen due to an
8522
- * invalid access token in the request.</p>
8523
- * @public
8524
- */
8525
- export declare class UnauthorizedException extends __BaseException {
8526
- readonly name: "UnauthorizedException";
8527
- readonly $fault: "client";
8528
- /**
8529
- * @internal
8530
- */
8531
- constructor(opts: __ExceptionOptionType<UnauthorizedException, __BaseException>);
8532
- }
8533
- /**
8534
- * <p>Exception that is thrown when you attempt to perform an operation that isn't enabled
8535
- * for the user pool client.</p>
8536
- * @public
8537
- */
8538
- export declare class UnsupportedOperationException extends __BaseException {
8539
- readonly name: "UnsupportedOperationException";
8540
- readonly $fault: "client";
8541
- /**
8542
- * @internal
8543
- */
8544
- constructor(opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>);
8545
- }
8546
- /**
8547
- * <p>Exception that is thrown when an unsupported token is passed to an operation.</p>
8548
- * @public
8549
- */
8550
- export declare class UnsupportedTokenTypeException extends __BaseException {
8551
- readonly name: "UnsupportedTokenTypeException";
8552
- readonly $fault: "client";
8553
- /**
8554
- * @internal
8555
- */
8556
- constructor(opts: __ExceptionOptionType<UnsupportedTokenTypeException, __BaseException>);
8557
- }
8558
- /**
8559
- * @public
8560
- */
8561
- export interface SetLogDeliveryConfigurationRequest {
8562
- /**
8563
- * <p>The ID of the user pool where you want to configure detailed activity logging .</p>
8564
- * @public
8565
- */
8566
- UserPoolId: string | undefined;
8567
- /**
8568
- * <p>A collection of all of the detailed activity logging configurations for a user
8569
- * pool.</p>
8570
- * @public
8571
- */
8572
- LogConfigurations: LogConfigurationType[] | undefined;
8573
- }
8574
8632
  /**
8575
8633
  * @internal
8576
8634
  */
@@ -1,6 +1,64 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
2
  import { CognitoIdentityProviderServiceException as __BaseException } from "./CognitoIdentityProviderServiceException";
3
- import { AccountRecoverySettingType, AccountTakeoverRiskConfigurationType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AttributeType, CodeDeliveryDetailsType, CompromisedCredentialsRiskConfigurationType, CustomDomainConfigType, DeletionProtectionType, DeviceConfigurationType, DeviceRememberedStatusType, EmailConfigurationType, ExplicitAuthFlowsType, FeedbackValueType, GroupType, IdentityProviderType, LambdaConfigType, LogDeliveryConfigurationType, MFAOptionType, OAuthFlowType, PreventUserExistenceErrorTypes, ResourceServerScopeType, ResourceServerType, RiskConfigurationType, RiskExceptionConfigurationType, SmsConfigurationType, SmsMfaConfigType, SMSMfaSettingsType, SoftwareTokenMfaConfigType, SoftwareTokenMfaSettingsType, TokenValidityUnitsType, UICustomizationType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolMfaType, UserPoolPolicyType, VerificationMessageTemplateType, VerifiedAttributeType } from "./models_0";
3
+ import { AccountRecoverySettingType, AccountTakeoverRiskConfigurationType, AdminCreateUserConfigType, AnalyticsConfigurationType, AnalyticsMetadataType, AttributeType, CodeDeliveryDetailsType, CompromisedCredentialsRiskConfigurationType, CustomDomainConfigType, DeletionProtectionType, DeviceConfigurationType, DeviceRememberedStatusType, EmailConfigurationType, ExplicitAuthFlowsType, FeedbackValueType, GroupType, IdentityProviderType, LambdaConfigType, LogConfigurationType, LogDeliveryConfigurationType, MFAOptionType, OAuthFlowType, PreventUserExistenceErrorTypes, ResourceServerScopeType, ResourceServerType, RiskConfigurationType, RiskExceptionConfigurationType, SmsConfigurationType, SmsMfaConfigType, SMSMfaSettingsType, SoftwareTokenMfaConfigType, SoftwareTokenMfaSettingsType, TokenValidityUnitsType, UICustomizationType, UserAttributeUpdateSettingsType, UserContextDataType, UserImportJobType, UserPoolAddOnsType, UserPoolClientType, UserPoolMfaType, UserPoolPolicyType, VerificationMessageTemplateType, VerifiedAttributeType } from "./models_0";
4
+ /**
5
+ * @public
6
+ */
7
+ export interface RevokeTokenResponse {
8
+ }
9
+ /**
10
+ * <p>Exception that is thrown when the request isn't authorized. This can happen due to an
11
+ * invalid access token in the request.</p>
12
+ * @public
13
+ */
14
+ export declare class UnauthorizedException extends __BaseException {
15
+ readonly name: "UnauthorizedException";
16
+ readonly $fault: "client";
17
+ /**
18
+ * @internal
19
+ */
20
+ constructor(opts: __ExceptionOptionType<UnauthorizedException, __BaseException>);
21
+ }
22
+ /**
23
+ * <p>Exception that is thrown when you attempt to perform an operation that isn't enabled
24
+ * for the user pool client.</p>
25
+ * @public
26
+ */
27
+ export declare class UnsupportedOperationException extends __BaseException {
28
+ readonly name: "UnsupportedOperationException";
29
+ readonly $fault: "client";
30
+ /**
31
+ * @internal
32
+ */
33
+ constructor(opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>);
34
+ }
35
+ /**
36
+ * <p>Exception that is thrown when an unsupported token is passed to an operation.</p>
37
+ * @public
38
+ */
39
+ export declare class UnsupportedTokenTypeException extends __BaseException {
40
+ readonly name: "UnsupportedTokenTypeException";
41
+ readonly $fault: "client";
42
+ /**
43
+ * @internal
44
+ */
45
+ constructor(opts: __ExceptionOptionType<UnsupportedTokenTypeException, __BaseException>);
46
+ }
47
+ /**
48
+ * @public
49
+ */
50
+ export interface SetLogDeliveryConfigurationRequest {
51
+ /**
52
+ * <p>The ID of the user pool where you want to configure logging.</p>
53
+ * @public
54
+ */
55
+ UserPoolId: string | undefined;
56
+ /**
57
+ * <p>A collection of the logging configurations for a user pool.</p>
58
+ * @public
59
+ */
60
+ LogConfigurations: LogConfigurationType[] | undefined;
61
+ }
4
62
  /**
5
63
  * @public
6
64
  */
@@ -334,7 +392,7 @@ export interface SignUpResponse {
334
392
  */
335
393
  CodeDeliveryDetails?: CodeDeliveryDetailsType;
336
394
  /**
337
- * <p>The UUID of the authenticated user. This isn't the same as
395
+ * <p>The 128-bit ID of the authenticated user. This isn't the same as
338
396
  * <code>username</code>.</p>
339
397
  * @public
340
398
  */
@@ -1288,6 +1346,7 @@ export interface UpdateUserPoolClientRequest {
1288
1346
  * existence related errors aren't prevented.</p>
1289
1347
  * </li>
1290
1348
  * </ul>
1349
+ * <p>Defaults to <code>LEGACY</code> when you don't provide a value.</p>
1291
1350
  * @public
1292
1351
  */
1293
1352
  PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
@@ -5,7 +5,8 @@ import {
5
5
  ServiceInputTypes,
6
6
  ServiceOutputTypes,
7
7
  } from "../CognitoIdentityProviderClient";
8
- import { RevokeTokenRequest, RevokeTokenResponse } from "../models/models_0";
8
+ import { RevokeTokenRequest } from "../models/models_0";
9
+ import { RevokeTokenResponse } from "../models/models_1";
9
10
  export { __MetadataBearer };
10
11
  export { $Command };
11
12
  export interface RevokeTokenCommandInput extends RevokeTokenRequest {}
@@ -5,8 +5,10 @@ import {
5
5
  ServiceInputTypes,
6
6
  ServiceOutputTypes,
7
7
  } from "../CognitoIdentityProviderClient";
8
- import { SetLogDeliveryConfigurationRequest } from "../models/models_0";
9
- import { SetLogDeliveryConfigurationResponse } from "../models/models_1";
8
+ import {
9
+ SetLogDeliveryConfigurationRequest,
10
+ SetLogDeliveryConfigurationResponse,
11
+ } from "../models/models_1";
10
12
  export { __MetadataBearer };
11
13
  export { $Command };
12
14
  export interface SetLogDeliveryConfigurationCommandInput
@@ -643,6 +643,16 @@ export declare class ExpiredCodeException extends __BaseException {
643
643
  opts: __ExceptionOptionType<ExpiredCodeException, __BaseException>
644
644
  );
645
645
  }
646
+ export declare class PasswordHistoryPolicyViolationException extends __BaseException {
647
+ readonly name: "PasswordHistoryPolicyViolationException";
648
+ readonly $fault: "client";
649
+ constructor(
650
+ opts: __ExceptionOptionType<
651
+ PasswordHistoryPolicyViolationException,
652
+ __BaseException
653
+ >
654
+ );
655
+ }
646
656
  export declare class SoftwareTokenMFANotFoundException extends __BaseException {
647
657
  readonly name: "SoftwareTokenMFANotFoundException";
648
658
  readonly $fault: "client";
@@ -713,6 +723,15 @@ export interface AdminUserGlobalSignOutRequest {
713
723
  Username: string | undefined;
714
724
  }
715
725
  export interface AdminUserGlobalSignOutResponse {}
726
+ export declare const AdvancedSecurityEnabledModeType: {
727
+ readonly AUDIT: "AUDIT";
728
+ readonly ENFORCED: "ENFORCED";
729
+ };
730
+ export type AdvancedSecurityEnabledModeType =
731
+ (typeof AdvancedSecurityEnabledModeType)[keyof typeof AdvancedSecurityEnabledModeType];
732
+ export interface AdvancedSecurityAdditionalFlowsType {
733
+ CustomAuthMode?: AdvancedSecurityEnabledModeType;
734
+ }
716
735
  export declare const AdvancedSecurityModeType: {
717
736
  readonly AUDIT: "AUDIT";
718
737
  readonly ENFORCED: "ENFORCED";
@@ -997,6 +1016,7 @@ export interface PasswordPolicyType {
997
1016
  RequireLowercase?: boolean;
998
1017
  RequireNumbers?: boolean;
999
1018
  RequireSymbols?: boolean;
1019
+ PasswordHistorySize?: number;
1000
1020
  TemporaryPasswordValidityDays?: number;
1001
1021
  }
1002
1022
  export interface UserPoolPolicyType {
@@ -1021,6 +1041,7 @@ export interface UsernameConfigurationType {
1021
1041
  }
1022
1042
  export interface UserPoolAddOnsType {
1023
1043
  AdvancedSecurityMode: AdvancedSecurityModeType | undefined;
1044
+ AdvancedSecurityAdditionalFlows?: AdvancedSecurityAdditionalFlowsType;
1024
1045
  }
1025
1046
  export declare const DefaultEmailOptionType: {
1026
1047
  readonly CONFIRM_WITH_CODE: "CONFIRM_WITH_CODE";
@@ -1421,18 +1442,28 @@ export interface CloudWatchLogsConfigurationType {
1421
1442
  LogGroupArn?: string;
1422
1443
  }
1423
1444
  export declare const EventSourceName: {
1445
+ readonly USER_AUTH_EVENTS: "userAuthEvents";
1424
1446
  readonly USER_NOTIFICATION: "userNotification";
1425
1447
  };
1426
1448
  export type EventSourceName =
1427
1449
  (typeof EventSourceName)[keyof typeof EventSourceName];
1450
+ export interface FirehoseConfigurationType {
1451
+ StreamArn?: string;
1452
+ }
1428
1453
  export declare const LogLevel: {
1429
1454
  readonly ERROR: "ERROR";
1455
+ readonly INFO: "INFO";
1430
1456
  };
1431
1457
  export type LogLevel = (typeof LogLevel)[keyof typeof LogLevel];
1458
+ export interface S3ConfigurationType {
1459
+ BucketArn?: string;
1460
+ }
1432
1461
  export interface LogConfigurationType {
1433
1462
  LogLevel: LogLevel | undefined;
1434
1463
  EventSource: EventSourceName | undefined;
1435
1464
  CloudWatchLogsConfiguration?: CloudWatchLogsConfigurationType;
1465
+ S3Configuration?: S3ConfigurationType;
1466
+ FirehoseConfiguration?: FirehoseConfigurationType;
1436
1467
  }
1437
1468
  export interface LogDeliveryConfigurationType {
1438
1469
  UserPoolId: string | undefined;
@@ -1653,32 +1684,6 @@ export interface RevokeTokenRequest {
1653
1684
  ClientId: string | undefined;
1654
1685
  ClientSecret?: string;
1655
1686
  }
1656
- export interface RevokeTokenResponse {}
1657
- export declare class UnauthorizedException extends __BaseException {
1658
- readonly name: "UnauthorizedException";
1659
- readonly $fault: "client";
1660
- constructor(
1661
- opts: __ExceptionOptionType<UnauthorizedException, __BaseException>
1662
- );
1663
- }
1664
- export declare class UnsupportedOperationException extends __BaseException {
1665
- readonly name: "UnsupportedOperationException";
1666
- readonly $fault: "client";
1667
- constructor(
1668
- opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>
1669
- );
1670
- }
1671
- export declare class UnsupportedTokenTypeException extends __BaseException {
1672
- readonly name: "UnsupportedTokenTypeException";
1673
- readonly $fault: "client";
1674
- constructor(
1675
- opts: __ExceptionOptionType<UnsupportedTokenTypeException, __BaseException>
1676
- );
1677
- }
1678
- export interface SetLogDeliveryConfigurationRequest {
1679
- UserPoolId: string | undefined;
1680
- LogConfigurations: LogConfigurationType[] | undefined;
1681
- }
1682
1687
  export declare const AdminAddUserToGroupRequestFilterSensitiveLog: (
1683
1688
  obj: AdminAddUserToGroupRequest
1684
1689
  ) => any;
@@ -19,6 +19,7 @@ import {
19
19
  GroupType,
20
20
  IdentityProviderType,
21
21
  LambdaConfigType,
22
+ LogConfigurationType,
22
23
  LogDeliveryConfigurationType,
23
24
  MFAOptionType,
24
25
  OAuthFlowType,
@@ -44,6 +45,32 @@ import {
44
45
  VerificationMessageTemplateType,
45
46
  VerifiedAttributeType,
46
47
  } from "./models_0";
48
+ export interface RevokeTokenResponse {}
49
+ export declare class UnauthorizedException extends __BaseException {
50
+ readonly name: "UnauthorizedException";
51
+ readonly $fault: "client";
52
+ constructor(
53
+ opts: __ExceptionOptionType<UnauthorizedException, __BaseException>
54
+ );
55
+ }
56
+ export declare class UnsupportedOperationException extends __BaseException {
57
+ readonly name: "UnsupportedOperationException";
58
+ readonly $fault: "client";
59
+ constructor(
60
+ opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>
61
+ );
62
+ }
63
+ export declare class UnsupportedTokenTypeException extends __BaseException {
64
+ readonly name: "UnsupportedTokenTypeException";
65
+ readonly $fault: "client";
66
+ constructor(
67
+ opts: __ExceptionOptionType<UnsupportedTokenTypeException, __BaseException>
68
+ );
69
+ }
70
+ export interface SetLogDeliveryConfigurationRequest {
71
+ UserPoolId: string | undefined;
72
+ LogConfigurations: LogConfigurationType[] | undefined;
73
+ }
47
74
  export interface SetLogDeliveryConfigurationResponse {
48
75
  LogDeliveryConfiguration?: LogDeliveryConfigurationType;
49
76
  }
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-cognito-identity-provider",
3
3
  "description": "AWS SDK for JavaScript Cognito Identity Provider Client for Node.js, Browser and React Native",
4
- "version": "3.624.0",
4
+ "version": "3.627.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-cognito-identity-provider",