@aws-sdk/client-cognito-identity-provider 3.687.0 → 3.692.0

package/dist-types/models/models_0.d.ts

@@ -39,7 +39,7 @@ export interface AccountRecoverySettingType {
      * <p>The list of <code>RecoveryOptionTypes</code>.</p>
      * @public
      */
-    RecoveryMechanisms?: RecoveryOptionType[];
+    RecoveryMechanisms?: RecoveryOptionType[] | undefined;
 }
 /**
  * @public
@@ -101,17 +101,17 @@ export interface AccountTakeoverActionsType {
      * <p>Action to take for a low risk.</p>
      * @public
      */
-    LowAction?: AccountTakeoverActionType;
+    LowAction?: AccountTakeoverActionType | undefined;
     /**
      * <p>Action to take for a medium risk.</p>
      * @public
      */
-    MediumAction?: AccountTakeoverActionType;
+    MediumAction?: AccountTakeoverActionType | undefined;
     /**
      * <p>Action to take for a high risk.</p>
      * @public
      */
-    HighAction?: AccountTakeoverActionType;
+    HighAction?: AccountTakeoverActionType | undefined;
 }
 /**
  * <p>The notify email type.</p>
@@ -127,12 +127,12 @@ export interface NotifyEmailType {
      * <p>The email HTML body.</p>
      * @public
      */
-    HtmlBody?: string;
+    HtmlBody?: string | undefined;
     /**
      * <p>The email text body.</p>
      * @public
      */
-    TextBody?: string;
+    TextBody?: string | undefined;
 }
 /**
  * <p>The notify configuration type.</p>
@@ -144,12 +144,12 @@ export interface NotifyConfigurationType {
      *             verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES.</p>
      * @public
      */
-    From?: string;
+    From?: string | undefined;
     /**
      * <p>The destination to which the receiver of an email should reply to.</p>
      * @public
      */
-    ReplyTo?: string;
+    ReplyTo?: string | undefined;
     /**
      * <p>The Amazon Resource Name (ARN) of the identity that is associated with the sending
      *             authorization policy. This identity permits Amazon Cognito to send for the email address
@@ -161,18 +161,18 @@ export interface NotifyConfigurationType {
      * <p>Email template used when a detected risk event is blocked.</p>
      * @public
      */
-    BlockEmail?: NotifyEmailType;
+    BlockEmail?: NotifyEmailType | undefined;
     /**
      * <p>The email template used when a detected risk event is allowed.</p>
      * @public
      */
-    NoActionEmail?: NotifyEmailType;
+    NoActionEmail?: NotifyEmailType | undefined;
     /**
      * <p>The multi-factor authentication (MFA) email template used when MFA is challenged as
      *             part of a detected risk.</p>
      * @public
      */
-    MfaEmail?: NotifyEmailType;
+    MfaEmail?: NotifyEmailType | undefined;
 }
 /**
  * <p>Configuration for mitigation actions and notification for different levels of risk
@@ -184,7 +184,7 @@ export interface AccountTakeoverRiskConfigurationType {
      * <p>The notify configuration used to construct email notifications.</p>
      * @public
      */
-    NotifyConfiguration?: NotifyConfigurationType;
+    NotifyConfiguration?: NotifyConfigurationType | undefined;
     /**
      * <p>Account takeover risk configuration actions.</p>
      * @public
@@ -214,14 +214,14 @@ export interface NumberAttributeConstraintsType {
      * <p>The minimum value of an attribute that is of the number data type.</p>
      * @public
      */
-    MinValue?: string;
+    MinValue?: string | undefined;
     /**
      * <p>The maximum length of a number attribute value. Must be a number less than or equal to
      *                 <code>2^1023</code>, represented as a string with a length of 131072 characters or
      *             fewer.</p>
      * @public
      */
-    MaxValue?: string;
+    MaxValue?: string | undefined;
 }
 /**
  * <p>The constraints associated with a string attribute.</p>
@@ -232,14 +232,14 @@ export interface StringAttributeConstraintsType {
      * <p>The minimum length.</p>
      * @public
      */
-    MinLength?: string;
+    MinLength?: string | undefined;
     /**
      * <p>The maximum length of a string attribute value. Must be a number less than or equal to
      *                 <code>2^1023</code>, represented as a string with a length of 131072 characters or
      *             fewer.</p>
      * @public
      */
-    MaxLength?: string;
+    MaxLength?: string | undefined;
 }
 /**
  * <p>A list of the user attributes and their properties in your user pool. The attribute
@@ -264,7 +264,7 @@ export interface SchemaAttributeType {
      *                 <code>dev:value</code> for developer-only attributes..</p>
      * @public
      */
-    Name?: string;
+    Name?: string | undefined;
     /**
      * <p>The data format of the values for your attribute. When you choose an
      *                 <code>AttributeDataType</code>, Amazon Cognito validates the input against the data type. A
@@ -273,7 +273,7 @@ export interface SchemaAttributeType {
      *                 "12"</code>. </p>
      * @public
      */
-    AttributeDataType?: AttributeDataType;
+    AttributeDataType?: AttributeDataType | undefined;
     /**
      * <note>
      *             <p>You should use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes">WriteAttributes</a> in the user pool client to control how attributes can
@@ -286,7 +286,7 @@ export interface SchemaAttributeType {
      *             AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes.</p>
      * @public
      */
-    DeveloperOnlyAttribute?: boolean;
+    DeveloperOnlyAttribute?: boolean | undefined;
     /**
      * <p>Specifies whether the value of the attribute can be changed.</p>
      *          <p>Any user pool attribute whose value you map from an IdP attribute must be mutable,
@@ -296,23 +296,23 @@ export interface SchemaAttributeType {
      *                 Pool</a>.</p>
      * @public
      */
-    Mutable?: boolean;
+    Mutable?: boolean | undefined;
     /**
      * <p>Specifies whether a user pool attribute is required. If the attribute is required and
      *             the user doesn't provide a value, registration or sign-in will fail.</p>
      * @public
      */
-    Required?: boolean;
+    Required?: boolean | undefined;
     /**
      * <p>Specifies the constraints for an attribute of the number type.</p>
      * @public
      */
-    NumberAttributeConstraints?: NumberAttributeConstraintsType;
+    NumberAttributeConstraints?: NumberAttributeConstraintsType | undefined;
     /**
      * <p>Specifies the constraints for an attribute of the string type.</p>
      * @public
      */
-    StringAttributeConstraints?: StringAttributeConstraintsType;
+    StringAttributeConstraints?: StringAttributeConstraintsType | undefined;
 }
 /**
  * <p>Represents the request to add custom attributes.</p>
@@ -502,7 +502,7 @@ export interface AdminConfirmSignUpRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>Represents the response from the server for the request to confirm
@@ -613,7 +613,7 @@ export interface AttributeType {
      * <p>The value of the attribute.</p>
      * @public
      */
-    Value?: string;
+    Value?: string | undefined;
 }
 /**
  * <p>Represents the request to create a user in the specified user pool.</p>
@@ -683,7 +683,7 @@ export interface AdminCreateUserRequest {
      *          </ul>
      * @public
      */
-    UserAttributes?: AttributeType[];
+    UserAttributes?: AttributeType[] | undefined;
     /**
      * <p>Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda
      *     trigger. This set of key-value pairs are for custom validation of information that you
@@ -696,7 +696,7 @@ export interface AdminCreateUserRequest {
      *          <p>For more information about the pre sign-up Lambda trigger, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html">Pre sign-up Lambda trigger</a>.</p>
      * @public
      */
-    ValidationData?: AttributeType[];
+    ValidationData?: AttributeType[] | undefined;
     /**
      * <p>The user's temporary password. This password must conform to the password policy that
      *             you specified when you created the user pool.</p>
@@ -711,7 +711,7 @@ export interface AdminCreateUserRequest {
      *                 <code>MessageAction</code> parameter.</p>
      * @public
      */
-    TemporaryPassword?: string;
+    TemporaryPassword?: string | undefined;
     /**
      * <p>This parameter is used only if the <code>phone_number_verified</code> or
      *                 <code>email_verified</code> attribute is set to <code>True</code>. Otherwise, it is
@@ -725,7 +725,7 @@ export interface AdminCreateUserRequest {
      *             value is <code>False</code>.</p>
      * @public
      */
-    ForceAliasCreation?: boolean;
+    ForceAliasCreation?: boolean | undefined;
     /**
      * <p>Set to <code>RESEND</code> to resend the invitation message to a user that already
      *             exists and reset the expiration limit on the user's account. Set to
@@ -733,14 +733,14 @@ export interface AdminCreateUserRequest {
      *             value.</p>
      * @public
      */
-    MessageAction?: MessageActionType;
+    MessageAction?: MessageActionType | undefined;
     /**
      * <p>Specify <code>"EMAIL"</code> if email will be used to send the welcome message.
      *             Specify <code>"SMS"</code> if the phone number will be used. The default value is
      *                 <code>"SMS"</code>. You can specify more than one value.</p>
      * @public
      */
-    DesiredDeliveryMediums?: DeliveryMediumType[];
+    DesiredDeliveryMediums?: DeliveryMediumType[] | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -775,7 +775,7 @@ export interface AdminCreateUserRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>
@@ -790,13 +790,13 @@ export interface MFAOptionType {
      *                 <code>SMS</code> delivery medium value.</p>
      * @public
      */
-    DeliveryMedium?: DeliveryMediumType;
+    DeliveryMedium?: DeliveryMediumType | undefined;
     /**
      * <p>The attribute name of the MFA option type. The only valid value is
      *                 <code>phone_number</code>.</p>
      * @public
      */
-    AttributeName?: string;
+    AttributeName?: string | undefined;
 }
 /**
  * @public
@@ -825,28 +825,28 @@ export interface UserType {
      * <p>The user name of the user you want to describe.</p>
      * @public
      */
-    Username?: string;
+    Username?: string | undefined;
     /**
      * <p>A container with information about the user type attributes.</p>
      * @public
      */
-    Attributes?: AttributeType[];
+    Attributes?: AttributeType[] | undefined;
     /**
      * <p>The creation date of the user.</p>
      * @public
      */
-    UserCreateDate?: Date;
+    UserCreateDate?: Date | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    UserLastModifiedDate?: Date;
+    UserLastModifiedDate?: Date | undefined;
     /**
      * <p>Specifies whether the user is enabled.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
     /**
      * <p>The user status. This can be one of the following:</p>
      *          <ul>
@@ -874,12 +874,12 @@ export interface UserType {
      *          </ul>
      * @public
      */
-    UserStatus?: UserStatusType;
+    UserStatus?: UserStatusType | undefined;
     /**
      * <p>The MFA options for the user.</p>
      * @public
      */
-    MFAOptions?: MFAOptionType[];
+    MFAOptions?: MFAOptionType[] | undefined;
 }
 /**
  * <p>Represents the response from the server to the request to create the user.</p>
@@ -890,7 +890,7 @@ export interface AdminCreateUserResponse {
      * <p>The newly created user.</p>
      * @public
      */
-    User?: UserType;
+    User?: UserType | undefined;
 }
 /**
  * <p>This exception is thrown when a verification code fails to deliver
@@ -991,17 +991,17 @@ export interface MessageTemplateType {
      * <p>The message template for SMS messages.</p>
      * @public
      */
-    SMSMessage?: string;
+    SMSMessage?: string | undefined;
     /**
      * <p>The message template for email messages. EmailMessage is allowed only if <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount">EmailSendingAccount</a> is DEVELOPER. </p>
      * @public
      */
-    EmailMessage?: string;
+    EmailMessage?: string | undefined;
     /**
      * <p>The subject line for email messages. EmailSubject is allowed only if <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount">EmailSendingAccount</a> is DEVELOPER. </p>
      * @public
      */
-    EmailSubject?: string;
+    EmailSubject?: string | undefined;
 }
 /**
  * <p>The configuration for creating a new user profile.</p>
@@ -1013,7 +1013,7 @@ export interface AdminCreateUserConfigType {
      *             Set to <code>False</code> if users can sign themselves up via an app.</p>
      * @public
      */
-    AllowAdminCreateUserOnly?: boolean;
+    AllowAdminCreateUserOnly?: boolean | undefined;
     /**
      * <p>The user account expiration limit, in days, after which a new account that hasn't
      *             signed in is no longer usable. To reset the account after that time limit, you must call
@@ -1028,13 +1028,13 @@ export interface AdminCreateUserConfigType {
      *          </note>
      * @public
      */
-    UnusedAccountValidityDays?: number;
+    UnusedAccountValidityDays?: number | undefined;
     /**
      * <p>The message template to be used for the welcome message to new users.</p>
      *          <p>See also <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization">Customizing User Invitation Messages</a>.</p>
      * @public
      */
-    InviteMessageTemplate?: MessageTemplateType;
+    InviteMessageTemplate?: MessageTemplateType | undefined;
 }
 /**
  * <p>Represents the request to delete a user as an administrator.</p>
@@ -1099,18 +1099,18 @@ export interface ProviderUserIdentifierType {
      * <p>The name of the provider, such as Facebook, Google, or Login with Amazon.</p>
      * @public
      */
-    ProviderName?: string;
+    ProviderName?: string | undefined;
     /**
      * <p>The name of the provider attribute to link to, such as <code>NameID</code>.</p>
      * @public
      */
-    ProviderAttributeName?: string;
+    ProviderAttributeName?: string | undefined;
     /**
      * <p>The value of the provider attribute to link to, such as
      *             <code>xxxxx_account</code>.</p>
      * @public
      */
-    ProviderAttributeValue?: string;
+    ProviderAttributeValue?: string | undefined;
 }
 /**
  * @public
@@ -1273,28 +1273,28 @@ export interface DeviceType {
      * <p>The device key.</p>
      * @public
      */
-    DeviceKey?: string;
+    DeviceKey?: string | undefined;
     /**
      * <p>The device attributes.</p>
      * @public
      */
-    DeviceAttributes?: AttributeType[];
+    DeviceAttributes?: AttributeType[] | undefined;
     /**
      * <p>The creation date of the device.</p>
      * @public
      */
-    DeviceCreateDate?: Date;
+    DeviceCreateDate?: Date | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    DeviceLastModifiedDate?: Date;
+    DeviceLastModifiedDate?: Date | undefined;
     /**
      * <p>The date when the device was last authenticated.</p>
      * @public
      */
-    DeviceLastAuthenticatedDate?: Date;
+    DeviceLastAuthenticatedDate?: Date | undefined;
 }
 /**
  * <p>Gets the device response, as an administrator.</p>
@@ -1343,23 +1343,23 @@ export interface AdminGetUserResponse {
      * <p>An array of name-value pairs representing user attributes.</p>
      * @public
      */
-    UserAttributes?: AttributeType[];
+    UserAttributes?: AttributeType[] | undefined;
     /**
      * <p>The date the user was created.</p>
      * @public
      */
-    UserCreateDate?: Date;
+    UserCreateDate?: Date | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    UserLastModifiedDate?: Date;
+    UserLastModifiedDate?: Date | undefined;
     /**
      * <p>Indicates that the status is <code>enabled</code>.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
     /**
      * <p>The user status. Can be one of the following:</p>
      *          <ul>
@@ -1384,7 +1384,7 @@ export interface AdminGetUserResponse {
      *          </ul>
      * @public
      */
-    UserStatus?: UserStatusType;
+    UserStatus?: UserStatusType | undefined;
     /**
      * <p>
      *             <i>This response parameter is no longer supported.</i> It provides
@@ -1394,18 +1394,18 @@ export interface AdminGetUserResponse {
      *             instead.</p>
      * @public
      */
-    MFAOptions?: MFAOptionType[];
+    MFAOptions?: MFAOptionType[] | undefined;
     /**
      * <p>The user's preferred MFA setting.</p>
      * @public
      */
-    PreferredMfaSetting?: string;
+    PreferredMfaSetting?: string | undefined;
     /**
      * <p>The MFA options that are activated for the user. The possible values in this list are
      *             <code>SMS_MFA</code>, <code>EMAIL_OTP</code>, and <code>SOFTWARE_TOKEN_MFA</code>.</p>
      * @public
      */
-    UserMFASettingList?: string[];
+    UserMFASettingList?: string[] | undefined;
 }
 /**
  * <p>An Amazon Pinpoint analytics endpoint.</p>
@@ -1419,7 +1419,7 @@ export interface AnalyticsMetadataType {
      * <p>The endpoint ID.</p>
      * @public
      */
-    AnalyticsEndpointId?: string;
+    AnalyticsEndpointId?: string | undefined;
 }
 /**
  * @public
@@ -1447,12 +1447,12 @@ export interface HttpHeader {
      * <p>The header name.</p>
      * @public
      */
-    headerName?: string;
+    headerName?: string | undefined;
     /**
      * <p>The header value.</p>
      * @public
      */
-    headerValue?: string;
+    headerValue?: string | undefined;
 }
 /**
  * <p>Contextual user data type used for evaluating the risk of an unexpected event by Amazon Cognito
@@ -1485,7 +1485,7 @@ export interface ContextDataType {
      *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      * @public
      */
-    EncodedData?: string;
+    EncodedData?: string | undefined;
 }
 /**
  * <p>Initiates the authorization request, as an administrator.</p>
@@ -1589,7 +1589,7 @@ export interface AdminInitiateAuthRequest {
      *             <code>DEVICE_KEY</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html">Working with user devices in your user pool</a>.</p>
      * @public
      */
-    AuthParameters?: Record<string, string>;
+    AuthParameters?: Record<string, string> | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -1656,20 +1656,20 @@ export interface AdminInitiateAuthRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
     /**
      * <p>The analytics metadata for collecting Amazon Pinpoint metrics for
      *                 <code>AdminInitiateAuth</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    ContextData?: ContextDataType;
+    ContextData?: ContextDataType | undefined;
 }
 /**
  * <p>The new device metadata type.</p>
@@ -1680,12 +1680,12 @@ export interface NewDeviceMetadataType {
      * <p>The device key.</p>
      * @public
      */
-    DeviceKey?: string;
+    DeviceKey?: string | undefined;
     /**
      * <p>The device group key.</p>
      * @public
      */
-    DeviceGroupKey?: string;
+    DeviceGroupKey?: string | undefined;
 }
 /**
  * <p>The authentication result.</p>
@@ -1697,32 +1697,32 @@ export interface AuthenticationResultType {
      *             authenticate.</p>
      * @public
      */
-    AccessToken?: string;
+    AccessToken?: string | undefined;
     /**
      * <p>The expiration period of the authentication result in seconds.</p>
      * @public
      */
-    ExpiresIn?: number;
+    ExpiresIn?: number | undefined;
     /**
      * <p>The token type.</p>
      * @public
      */
-    TokenType?: string;
+    TokenType?: string | undefined;
     /**
      * <p>The refresh token.</p>
      * @public
      */
-    RefreshToken?: string;
+    RefreshToken?: string | undefined;
     /**
      * <p>The ID token.</p>
      * @public
      */
-    IdToken?: string;
+    IdToken?: string | undefined;
     /**
      * <p>The new device metadata from an authentication result.</p>
      * @public
      */
-    NewDeviceMetadata?: NewDeviceMetadataType;
+    NewDeviceMetadata?: NewDeviceMetadataType | undefined;
 }
 /**
  * @public
@@ -1842,7 +1842,7 @@ export interface AdminInitiateAuthResponse {
      *          </ul>
      * @public
      */
-    ChallengeName?: ChallengeNameType;
+    ChallengeName?: ChallengeNameType | undefined;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. If <code>AdminInitiateAuth</code> or <code>AdminRespondToAuthChallenge</code>
@@ -1851,7 +1851,7 @@ export interface AdminInitiateAuthResponse {
      *                 <code>AdminRespondToAuthChallenge</code> API call.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
     /**
      * <p>The challenge parameters. These are returned to you in the
      *                 <code>AdminInitiateAuth</code> response if you must pass another challenge. The
@@ -1866,7 +1866,7 @@ export interface AdminInitiateAuthResponse {
      *                 <code>USERNAME</code> attribute can't be an alias.</p>
      * @public
      */
-    ChallengeParameters?: Record<string, string>;
+    ChallengeParameters?: Record<string, string> | undefined;
     /**
      * <p>The result of the authentication response. This is only returned if the caller doesn't
      *             need to pass another challenge. If the caller does need to pass another challenge before
@@ -1874,7 +1874,7 @@ export interface AdminInitiateAuthResponse {
      *                 <code>Session</code> are returned.</p>
      * @public
      */
-    AuthenticationResult?: AuthenticationResultType;
+    AuthenticationResult?: AuthenticationResultType | undefined;
 }
 /**
  * <p>This exception is thrown when Amazon Cognito isn't allowed to use your email identity. HTTP
@@ -2015,7 +2015,7 @@ export interface AdminListDevicesRequest {
      * <p>The limit of the devices request.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>This API operation returns a limited number of results. The pagination token is
      * an identifier that you can present in an additional API request with the same parameters. When
@@ -2024,7 +2024,7 @@ export interface AdminListDevicesRequest {
      * through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * <p>Lists the device's response, as an administrator.</p>
@@ -2035,14 +2035,14 @@ export interface AdminListDevicesResponse {
      * <p>The devices in the list of devices response.</p>
      * @public
      */
-    Devices?: DeviceType[];
+    Devices?: DeviceType[] | undefined;
     /**
      * <p>The identifier that Amazon Cognito returned with the previous request to this operation. When
      * you include a pagination token in your request, Amazon Cognito returns the next set of items in
      * the list. By use of this token, you can paginate through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * @public
@@ -2066,13 +2066,13 @@ export interface AdminListGroupsForUserRequest {
      * <p>The limit of the request to list groups.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>The group type.</p>
@@ -2083,22 +2083,22 @@ export interface GroupType {
      * <p>The name of the group.</p>
      * @public
      */
-    GroupName?: string;
+    GroupName?: string | undefined;
     /**
      * <p>The user pool ID for the user pool.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>A string containing the description of the group.</p>
      * @public
      */
-    Description?: string;
+    Description?: string | undefined;
     /**
      * <p>The role Amazon Resource Name (ARN) for the group.</p>
      * @public
      */
-    RoleArn?: string;
+    RoleArn?: string | undefined;
     /**
      * <p>A non-negative integer value that specifies the precedence of this group relative to
      *             the other groups that a user can belong to in the user pool. Zero is the highest
@@ -2116,19 +2116,19 @@ export interface GroupType {
      *          <p>The default <code>Precedence</code> value is null.</p>
      * @public
      */
-    Precedence?: number;
+    Precedence?: number | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
 }
 /**
  * @public
@@ -2138,13 +2138,13 @@ export interface AdminListGroupsForUserResponse {
      * <p>The groups that the user belongs to.</p>
      * @public
      */
-    Groups?: GroupType[];
+    Groups?: GroupType[] | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -2170,12 +2170,12 @@ export interface AdminListUserAuthEventsRequest {
      *             parameter.</p>
      * @public
      */
-    MaxResults?: number;
+    MaxResults?: number | undefined;
     /**
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -2210,12 +2210,12 @@ export interface ChallengeResponseType {
      * <p>The challenge name.</p>
      * @public
      */
-    ChallengeName?: ChallengeName;
+    ChallengeName?: ChallengeName | undefined;
     /**
      * <p>The challenge response.</p>
      * @public
      */
-    ChallengeResponse?: ChallengeResponse;
+    ChallengeResponse?: ChallengeResponse | undefined;
 }
 /**
  * <p>Specifies the user context data captured at the time of an event request.</p>
@@ -2226,27 +2226,27 @@ export interface EventContextDataType {
      * <p>The source IP address of your user's device.</p>
      * @public
      */
-    IpAddress?: string;
+    IpAddress?: string | undefined;
     /**
      * <p>The user's device name.</p>
      * @public
      */
-    DeviceName?: string;
+    DeviceName?: string | undefined;
     /**
      * <p>The user's time zone.</p>
      * @public
      */
-    Timezone?: string;
+    Timezone?: string | undefined;
     /**
      * <p>The user's city.</p>
      * @public
      */
-    City?: string;
+    City?: string | undefined;
     /**
      * <p>The user's country.</p>
      * @public
      */
-    Country?: string;
+    Country?: string | undefined;
 }
 /**
  * @public
@@ -2283,7 +2283,7 @@ export interface EventFeedbackType {
      * <p>The event feedback date.</p>
      * @public
      */
-    FeedbackDate?: Date;
+    FeedbackDate?: Date | undefined;
 }
 /**
  * @public
@@ -2333,18 +2333,18 @@ export interface EventRiskType {
      * <p>The risk decision.</p>
      * @public
      */
-    RiskDecision?: RiskDecisionType;
+    RiskDecision?: RiskDecisionType | undefined;
     /**
      * <p>The risk level.</p>
      * @public
      */
-    RiskLevel?: RiskLevelType;
+    RiskLevel?: RiskLevelType | undefined;
     /**
      * <p>Indicates whether compromised credentials were detected during an authentication
      *             event.</p>
      * @public
      */
-    CompromisedCredentialsDetected?: boolean;
+    CompromisedCredentialsDetected?: boolean | undefined;
 }
 /**
  * @public
@@ -2370,45 +2370,45 @@ export interface AuthEventType {
      * <p>The event ID.</p>
      * @public
      */
-    EventId?: string;
+    EventId?: string | undefined;
     /**
      * <p>The event type.</p>
      * @public
      */
-    EventType?: EventType;
+    EventType?: EventType | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
     /**
      * <p>The event response.</p>
      * @public
      */
-    EventResponse?: EventResponseType;
+    EventResponse?: EventResponseType | undefined;
     /**
      * <p>The event risk.</p>
      * @public
      */
-    EventRisk?: EventRiskType;
+    EventRisk?: EventRiskType | undefined;
     /**
      * <p>The challenge responses.</p>
      * @public
      */
-    ChallengeResponses?: ChallengeResponseType[];
+    ChallengeResponses?: ChallengeResponseType[] | undefined;
     /**
      * <p>The user context data captured at the time of an event request. This value provides
      *             additional information about the client from which event the request is received.</p>
      * @public
      */
-    EventContextData?: EventContextDataType;
+    EventContextData?: EventContextDataType | undefined;
     /**
      * <p>A flag specifying the user feedback captured at the time of an event request is good
      *             or bad. </p>
      * @public
      */
-    EventFeedback?: EventFeedbackType;
+    EventFeedback?: EventFeedbackType | undefined;
 }
 /**
  * @public
@@ -2420,12 +2420,12 @@ export interface AdminListUserAuthEventsResponse {
      *             <code>EventResponse</code>.</p>
      * @public
      */
-    AuthEvents?: AuthEventType[];
+    AuthEvents?: AuthEventType[] | undefined;
     /**
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>This exception is thrown when user pool add-ons aren't enabled.</p>
@@ -2516,7 +2516,7 @@ export interface AdminResetUserPasswordRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>Represents the response from the server to reset a user password as an
@@ -2655,7 +2655,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *     <code>DEVICE_KEY</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html">Working with user devices in your user pool</a>.</p>
      * @public
      */
-    ChallengeResponses?: Record<string, string>;
+    ChallengeResponses?: Record<string, string> | undefined;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. If an <code>InitiateAuth</code> or <code>RespondToAuthChallenge</code> API call
@@ -2664,20 +2664,20 @@ export interface AdminRespondToAuthChallengeRequest {
      *                 <code>RespondToAuthChallenge</code> API call.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
     /**
      * <p>The analytics metadata for collecting Amazon Pinpoint metrics for
      *                 <code>AdminRespondToAuthChallenge</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    ContextData?: ContextDataType;
+    ContextData?: ContextDataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -2739,7 +2739,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>Responds to the authentication challenge, as an administrator.</p>
@@ -2750,7 +2750,7 @@ export interface AdminRespondToAuthChallengeResponse {
      * <p>The name of the challenge. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html">AdminInitiateAuth</a>.</p>
      * @public
      */
-    ChallengeName?: ChallengeNameType;
+    ChallengeName?: ChallengeNameType | undefined;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. If the caller must pass another challenge, they return a session with other
@@ -2758,17 +2758,17 @@ export interface AdminRespondToAuthChallengeResponse {
      *                 <code>RespondToAuthChallenge</code> API call.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
     /**
      * <p>The challenge parameters. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html">AdminInitiateAuth</a>.</p>
      * @public
      */
-    ChallengeParameters?: Record<string, string>;
+    ChallengeParameters?: Record<string, string> | undefined;
     /**
      * <p>The result returned by the server in response to the authentication request.</p>
      * @public
      */
-    AuthenticationResult?: AuthenticationResultType;
+    AuthenticationResult?: AuthenticationResultType | undefined;
 }
 /**
  * <p>This exception is thrown if the provided code doesn't match what the server was
@@ -2835,12 +2835,12 @@ export interface EmailMfaSettingsType {
      *             attempts, unless device tracking is turned on and the device has been trusted.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
     /**
      * <p>Specifies whether email message MFA is the user's preferred method.</p>
      * @public
      */
-    PreferredMfa?: boolean;
+    PreferredMfa?: boolean | undefined;
 }
 /**
  * <p>The type used for enabling SMS multi-factor authentication (MFA) at the user level.
@@ -2858,12 +2858,12 @@ export interface SMSMfaSettingsType {
      *             tracking is turned on and the device has been trusted.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
     /**
      * <p>Specifies whether SMS is the preferred MFA method.</p>
      * @public
      */
-    PreferredMfa?: boolean;
+    PreferredMfa?: boolean | undefined;
 }
 /**
  * <p>The type used for enabling software token MFA at the user level. If an MFA type is
@@ -2880,12 +2880,12 @@ export interface SoftwareTokenMfaSettingsType {
      *             tracking is turned on and the device has been trusted.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
     /**
      * <p>Specifies whether software token MFA is the preferred MFA method.</p>
      * @public
      */
-    PreferredMfa?: boolean;
+    PreferredMfa?: boolean | undefined;
 }
 /**
  * @public
@@ -2896,21 +2896,21 @@ export interface AdminSetUserMFAPreferenceRequest {
      *             the preferred MFA method when multiple methods are available.</p>
      * @public
      */
-    SMSMfaSettings?: SMSMfaSettingsType;
+    SMSMfaSettings?: SMSMfaSettingsType | undefined;
     /**
      * <p>User preferences for time-based one-time password (TOTP) MFA. Activates or deactivates
      *             TOTP MFA and sets it as the preferred MFA method when multiple methods are
      *             available.</p>
      * @public
      */
-    SoftwareTokenMfaSettings?: SoftwareTokenMfaSettingsType;
+    SoftwareTokenMfaSettings?: SoftwareTokenMfaSettingsType | undefined;
     /**
      * <p>User preferences for email message MFA. Activates or deactivates email MFA and sets it
      *             as the preferred MFA method when multiple methods are available. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
      *                      advanced security features</a> must be active in your user pool.</p>
      * @public
      */
-    EmailMfaSettings?: EmailMfaSettingsType;
+    EmailMfaSettings?: EmailMfaSettingsType | undefined;
     /**
      * <p>The username of the user that you want to query or modify. The value of this parameter
      *             is typically your user's username, but it can be any of their alias attributes. If
@@ -2960,7 +2960,7 @@ export interface AdminSetUserPasswordRequest {
      *             temporary.</p>
      * @public
      */
-    Permanent?: boolean;
+    Permanent?: boolean | undefined;
 }
 /**
  * @public
@@ -3079,7 +3079,7 @@ export interface AdminUpdateDeviceStatusRequest {
      * <p>The status indicating whether a device has been remembered or not.</p>
      * @public
      */
-    DeviceRememberedStatus?: DeviceRememberedStatusType;
+    DeviceRememberedStatus?: DeviceRememberedStatusType | undefined;
 }
 /**
  * <p>The status response to the request to update the device, as an administrator.</p>
@@ -3159,7 +3159,7 @@ export interface AdminUpdateUserAttributesRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>Represents the response from the server for the request to update user attributes as
@@ -3220,7 +3220,7 @@ export interface AdvancedSecurityAdditionalFlowsType {
      *         </p>
      * @public
      */
-    CustomAuthMode?: AdvancedSecurityEnabledModeType;
+    CustomAuthMode?: AdvancedSecurityEnabledModeType | undefined;
 }
 /**
  * @public
@@ -3263,31 +3263,31 @@ export interface AnalyticsConfigurationType {
      * <p>The application ID for an Amazon Pinpoint application.</p>
      * @public
      */
-    ApplicationId?: string;
+    ApplicationId?: string | undefined;
     /**
      * <p>The Amazon Resource Name (ARN) of an Amazon Pinpoint project. You can use the Amazon Pinpoint project
      *             to integrate with the chosen user pool Client. Amazon Cognito publishes events to the Amazon Pinpoint
      *             project that the app ARN declares.</p>
      * @public
      */
-    ApplicationArn?: string;
+    ApplicationArn?: string | undefined;
     /**
      * <p>The ARN of an Identity and Access Management role that authorizes Amazon Cognito to publish events to Amazon Pinpoint
      *             analytics.</p>
      * @public
      */
-    RoleArn?: string;
+    RoleArn?: string | undefined;
     /**
      * <p>The external ID.</p>
      * @public
      */
-    ExternalId?: string;
+    ExternalId?: string | undefined;
     /**
      * <p>If <code>UserDataShared</code> is <code>true</code>, Amazon Cognito includes user data in the
      *             events that it publishes to Amazon Pinpoint analytics.</p>
      * @public
      */
-    UserDataShared?: boolean;
+    UserDataShared?: boolean | undefined;
 }
 /**
  * @public
@@ -3298,13 +3298,13 @@ export interface AssociateSoftwareTokenRequest {
      *             generate.</p>
      * @public
      */
-    AccessToken?: string;
+    AccessToken?: string | undefined;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. This allows authentication of the user as part of the MFA setup process.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
 }
 /**
  * @public
@@ -3315,13 +3315,13 @@ export interface AssociateSoftwareTokenResponse {
      *             one-time code.</p>
      * @public
      */
-    SecretCode?: string;
+    SecretCode?: string | undefined;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. This allows authentication of the user as part of the MFA setup process.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
 }
 /**
  * <p>This exception is thrown if two or more modifications are happening
@@ -3398,13 +3398,13 @@ export interface DeviceSecretVerifierConfigType {
      * <p>The password verifier.</p>
      * @public
      */
-    PasswordVerifier?: string;
+    PasswordVerifier?: string | undefined;
     /**
      * <p>The <a href="https://en.wikipedia.org/wiki/Salt_(cryptography)">salt</a>
      *          </p>
      * @public
      */
-    Salt?: string;
+    Salt?: string | undefined;
 }
 /**
  * <p>Confirms the device request.</p>
@@ -3426,12 +3426,12 @@ export interface ConfirmDeviceRequest {
      * <p>The configuration of the device secret verifier.</p>
      * @public
      */
-    DeviceSecretVerifierConfig?: DeviceSecretVerifierConfigType;
+    DeviceSecretVerifierConfig?: DeviceSecretVerifierConfigType | undefined;
     /**
      * <p>The device name.</p>
      * @public
      */
-    DeviceName?: string;
+    DeviceName?: string | undefined;
 }
 /**
  * <p>Confirms the device response.</p>
@@ -3442,7 +3442,7 @@ export interface ConfirmDeviceResponse {
      * <p>Indicates whether the user confirmation must confirm the device response.</p>
      * @public
      */
-    UserConfirmationNecessary?: boolean;
+    UserConfirmationNecessary?: boolean | undefined;
 }
 /**
  * <p>Contextual data, such as the user's device fingerprint, IP address, or location, used
@@ -3454,13 +3454,13 @@ export interface UserContextDataType {
      * <p>The source IP address of your user's device.</p>
      * @public
      */
-    IpAddress?: string;
+    IpAddress?: string | undefined;
     /**
      * <p>Encoded device-fingerprint details that your app collected with the Amazon Cognito
      *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      * @public
      */
-    EncodedData?: string;
+    EncodedData?: string | undefined;
 }
 /**
  * <p>The request representing the confirmation for a password reset.</p>
@@ -3478,7 +3478,7 @@ export interface ConfirmForgotPasswordRequest {
      *             about <code>SecretHash</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/signing-up-users-in-your-app.html#cognito-user-pools-computing-secret-hash">Computing secret hash values</a>.</p>
      * @public
      */
-    SecretHash?: string;
+    SecretHash?: string | undefined;
     /**
      * <p>The username of the user that you want to query or modify. The value of this parameter
      *             is typically your user's username, but it can be any of their alias attributes. If
@@ -3504,14 +3504,14 @@ export interface ConfirmForgotPasswordRequest {
      *                 <code>ConfirmForgotPassword</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -3546,7 +3546,7 @@ export interface ConfirmForgotPasswordRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>The response from the server that results from a user's request to retrieve a
@@ -3570,7 +3570,7 @@ export interface ConfirmSignUpRequest {
      *             user pool client and username plus the client ID in the message.</p>
      * @public
      */
-    SecretHash?: string;
+    SecretHash?: string | undefined;
     /**
      * <p>The username of the user that you want to query or modify. The value of this parameter
      *             is typically your user's username, but it can be any of their alias attributes. If
@@ -3594,20 +3594,20 @@ export interface ConfirmSignUpRequest {
      *                 <b>AliasExistsException</b> error.</p>
      * @public
      */
-    ForceAliasCreation?: boolean;
+    ForceAliasCreation?: boolean | undefined;
     /**
      * <p>The Amazon Pinpoint analytics metadata for collecting metrics for <code>ConfirmSignUp</code>
      *             calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -3642,7 +3642,7 @@ export interface ConfirmSignUpRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>Represents the response from the server for the registration confirmation.</p>
@@ -3668,12 +3668,12 @@ export interface CreateGroupRequest {
      * <p>A string containing the description of the group.</p>
      * @public
      */
-    Description?: string;
+    Description?: string | undefined;
     /**
      * <p>The role Amazon Resource Name (ARN) for the group.</p>
      * @public
      */
-    RoleArn?: string;
+    RoleArn?: string | undefined;
     /**
      * <p>A non-negative integer value that specifies the precedence of this group relative to
      *             the other groups that a user can belong to in the user pool. Zero is the highest
@@ -3692,7 +3692,7 @@ export interface CreateGroupRequest {
      *             value is <code>2^31-1</code>.</p>
      * @public
      */
-    Precedence?: number;
+    Precedence?: number | undefined;
 }
 /**
  * @public
@@ -3702,7 +3702,7 @@ export interface CreateGroupResponse {
      * <p>The group object for the group.</p>
      * @public
      */
-    Group?: GroupType;
+    Group?: GroupType | undefined;
 }
 /**
  * <p>This exception is thrown when Amazon Cognito encounters a group that already exists in the user
@@ -3879,12 +3879,12 @@ export interface CreateIdentityProviderRequest {
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      * @public
      */
-    AttributeMapping?: Record<string, string>;
+    AttributeMapping?: Record<string, string> | undefined;
     /**
      * <p>A list of IdP identifiers.</p>
      * @public
      */
-    IdpIdentifiers?: string[];
+    IdpIdentifiers?: string[] | undefined;
 }
 /**
  * <p>A container for information about an IdP.</p>
@@ -3895,17 +3895,17 @@ export interface IdentityProviderType {
      * <p>The user pool ID.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The IdP name.</p>
      * @public
      */
-    ProviderName?: string;
+    ProviderName?: string | undefined;
     /**
      * <p>The IdP type.</p>
      * @public
      */
-    ProviderType?: IdentityProviderTypeType;
+    ProviderType?: IdentityProviderTypeType | undefined;
     /**
      * <p>The scopes, URLs, and identifiers for your external identity provider. The following
      * examples describe the provider detail keys for each IdP type. These values and their
@@ -4028,29 +4028,29 @@ export interface IdentityProviderType {
      *          </dl>
      * @public
      */
-    ProviderDetails?: Record<string, string>;
+    ProviderDetails?: Record<string, string> | undefined;
     /**
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      * @public
      */
-    AttributeMapping?: Record<string, string>;
+    AttributeMapping?: Record<string, string> | undefined;
     /**
      * <p>A list of IdP identifiers.</p>
      * @public
      */
-    IdpIdentifiers?: string[];
+    IdpIdentifiers?: string[] | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
 }
 /**
  * @public
@@ -4120,7 +4120,7 @@ export interface CreateResourceServerRequest {
      *                 <code>description</code>.</p>
      * @public
      */
-    Scopes?: ResourceServerScopeType[];
+    Scopes?: ResourceServerScopeType[] | undefined;
 }
 /**
  * <p>A container for information about a resource server for a user pool.</p>
@@ -4131,7 +4131,7 @@ export interface ResourceServerType {
      * <p>The user pool ID for the user pool that hosts the resource server.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>A unique resource server identifier for the resource server. The identifier can be an
      *             API friendly name like <code>solar-system-data</code>. You can also set an API URL like
@@ -4141,17 +4141,17 @@ export interface ResourceServerType {
      *             increase the size of your access tokens.</p>
      * @public
      */
-    Identifier?: string;
+    Identifier?: string | undefined;
     /**
      * <p>The name of the resource server.</p>
      * @public
      */
-    Name?: string;
+    Name?: string | undefined;
     /**
      * <p>A list of scopes that are defined for the resource server.</p>
      * @public
      */
-    Scopes?: ResourceServerScopeType[];
+    Scopes?: ResourceServerScopeType[] | undefined;
 }
 /**
  * @public
@@ -4211,38 +4211,38 @@ export interface UserImportJobType {
      * <p>The job name for the user import job.</p>
      * @public
      */
-    JobName?: string;
+    JobName?: string | undefined;
     /**
      * <p>The job ID for the user import job.</p>
      * @public
      */
-    JobId?: string;
+    JobId?: string | undefined;
     /**
      * <p>The user pool ID for the user pool that the users are being imported into.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The pre-signed URL to be used to upload the <code>.csv</code> file.</p>
      * @public
      */
-    PreSignedUrl?: string;
+    PreSignedUrl?: string | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
     /**
      * <p>The date when the user import job was started.</p>
      * @public
      */
-    StartDate?: Date;
+    StartDate?: Date | undefined;
     /**
      * <p>The date when the user import job was completed.</p>
      * @public
      */
-    CompletionDate?: Date;
+    CompletionDate?: Date | undefined;
     /**
      * <p>The status of the user import job. One of the following:</p>
      *          <ul>
@@ -4287,34 +4287,34 @@ export interface UserImportJobType {
      *          </ul>
      * @public
      */
-    Status?: UserImportJobStatusType;
+    Status?: UserImportJobStatusType | undefined;
     /**
      * <p>The role Amazon Resource Name (ARN) for the Amazon CloudWatch Logging role for the user import
      *             job. For more information, see "Creating the CloudWatch Logs IAM Role" in the Amazon Cognito Developer
      *             Guide.</p>
      * @public
      */
-    CloudWatchLogsRoleArn?: string;
+    CloudWatchLogsRoleArn?: string | undefined;
     /**
      * <p>The number of users that were successfully imported.</p>
      * @public
      */
-    ImportedUsers?: number;
+    ImportedUsers?: number | undefined;
     /**
      * <p>The number of users that were skipped.</p>
      * @public
      */
-    SkippedUsers?: number;
+    SkippedUsers?: number | undefined;
     /**
      * <p>The number of users that couldn't be imported.</p>
      * @public
      */
-    FailedUsers?: number;
+    FailedUsers?: number | undefined;
     /**
      * <p>The message returned when the user import job is completed.</p>
      * @public
      */
-    CompletionMessage?: string;
+    CompletionMessage?: string | undefined;
 }
 /**
  * <p>Represents the response from the server to the request to create the user import
@@ -4326,7 +4326,7 @@ export interface CreateUserImportJobResponse {
      * <p>The job object that represents the user import job.</p>
      * @public
      */
-    UserImportJob?: UserImportJobType;
+    UserImportJob?: UserImportJobType | undefined;
 }
 /**
  * @public
@@ -4372,7 +4372,7 @@ export interface DeviceConfigurationType {
      *          </note>
      * @public
      */
-    ChallengeRequiredOnNewDevice?: boolean;
+    ChallengeRequiredOnNewDevice?: boolean | undefined;
     /**
      * <p>When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a
      *                 <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html">
@@ -4384,7 +4384,7 @@ export interface DeviceConfigurationType {
      *             API request.</p>
      * @public
      */
-    DeviceOnlyRememberedOnUserPrompt?: boolean;
+    DeviceOnlyRememberedOnUserPrompt?: boolean | undefined;
 }
 /**
  * @public
@@ -4434,12 +4434,12 @@ export interface EmailConfigurationType {
      *                 Guide</a>.</p>
      * @public
      */
-    SourceArn?: string;
+    SourceArn?: string | undefined;
     /**
      * <p>The destination to which the receiver of the email should reply.</p>
      * @public
      */
-    ReplyToEmailAddress?: string;
+    ReplyToEmailAddress?: string | undefined;
     /**
      * <p>Specifies whether Amazon Cognito uses its built-in functionality to send your users email
      *             messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following
@@ -4480,7 +4480,7 @@ export interface EmailConfigurationType {
      *          </dl>
      * @public
      */
-    EmailSendingAccount?: EmailSendingAccountType;
+    EmailSendingAccount?: EmailSendingAccountType | undefined;
     /**
      * <p>Either the sender’s email address or the sender’s name with their email address. For
      *             example, <code>testuser@example.com</code> or <code>Test User
@@ -4488,7 +4488,7 @@ export interface EmailConfigurationType {
      *             email.</p>
      * @public
      */
-    From?: string;
+    From?: string | undefined;
     /**
      * <p>The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A
      *             configuration set is applied to an email by including a reference to the configuration
@@ -4512,7 +4512,7 @@ export interface EmailConfigurationType {
      *          </dl>
      * @public
      */
-    ConfigurationSet?: string;
+    ConfigurationSet?: string | undefined;
 }
 /**
  * @public
@@ -4612,42 +4612,42 @@ export interface LambdaConfigType {
      * <p>A pre-registration Lambda trigger.</p>
      * @public
      */
-    PreSignUp?: string;
+    PreSignUp?: string | undefined;
     /**
      * <p>A custom Message Lambda trigger.</p>
      * @public
      */
-    CustomMessage?: string;
+    CustomMessage?: string | undefined;
     /**
      * <p>A post-confirmation Lambda trigger.</p>
      * @public
      */
-    PostConfirmation?: string;
+    PostConfirmation?: string | undefined;
     /**
      * <p>A pre-authentication Lambda trigger.</p>
      * @public
      */
-    PreAuthentication?: string;
+    PreAuthentication?: string | undefined;
     /**
      * <p>A post-authentication Lambda trigger.</p>
      * @public
      */
-    PostAuthentication?: string;
+    PostAuthentication?: string | undefined;
     /**
      * <p>Defines the authentication challenge.</p>
      * @public
      */
-    DefineAuthChallenge?: string;
+    DefineAuthChallenge?: string | undefined;
     /**
      * <p>Creates an authentication challenge.</p>
      * @public
      */
-    CreateAuthChallenge?: string;
+    CreateAuthChallenge?: string | undefined;
     /**
      * <p>Verifies the authentication challenge response.</p>
      * @public
      */
-    VerifyAuthChallengeResponse?: string;
+    VerifyAuthChallengeResponse?: string | undefined;
     /**
      * <p>The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.</p>
      *          <p>Set this parameter for legacy purposes. If you also set an ARN in
@@ -4658,36 +4658,36 @@ export interface LambdaConfigType {
      *          </p>
      * @public
      */
-    PreTokenGeneration?: string;
+    PreTokenGeneration?: string | undefined;
     /**
      * <p>The user migration Lambda config type.</p>
      * @public
      */
-    UserMigration?: string;
+    UserMigration?: string | undefined;
     /**
      * <p>The detailed configuration of a pre token generation trigger. If you also set an ARN
      *             in <code>PreTokenGeneration</code>, its value must be identical to
      *                 <code>PreTokenGenerationConfig</code>.</p>
      * @public
      */
-    PreTokenGenerationConfig?: PreTokenGenerationVersionConfigType;
+    PreTokenGenerationConfig?: PreTokenGenerationVersionConfigType | undefined;
     /**
      * <p>A custom SMS sender Lambda trigger.</p>
      * @public
      */
-    CustomSMSSender?: CustomSMSLambdaVersionConfigType;
+    CustomSMSSender?: CustomSMSLambdaVersionConfigType | undefined;
     /**
      * <p>A custom email sender Lambda trigger.</p>
      * @public
      */
-    CustomEmailSender?: CustomEmailLambdaVersionConfigType;
+    CustomEmailSender?: CustomEmailLambdaVersionConfigType | undefined;
     /**
      * <p>The Amazon Resource Name (ARN) of an <a href="/kms/latest/developerguide/concepts.html#master_keys">KMS key</a>. Amazon Cognito
      *             uses the key to encrypt codes and temporary passwords sent to
      *                 <code>CustomEmailSender</code> and <code>CustomSMSSender</code>.</p>
      * @public
      */
-    KMSKeyID?: string;
+    KMSKeyID?: string | undefined;
 }
 /**
  * @public
@@ -4712,31 +4712,31 @@ export interface PasswordPolicyType {
      *             be less than 6.</p>
      * @public
      */
-    MinimumLength?: number;
+    MinimumLength?: number | undefined;
     /**
      * <p>In the password policy that you have set, refers to whether you have required users to
      *             use at least one uppercase letter in their password.</p>
      * @public
      */
-    RequireUppercase?: boolean;
+    RequireUppercase?: boolean | undefined;
     /**
      * <p>In the password policy that you have set, refers to whether you have required users to
      *             use at least one lowercase letter in their password.</p>
      * @public
      */
-    RequireLowercase?: boolean;
+    RequireLowercase?: boolean | undefined;
     /**
      * <p>In the password policy that you have set, refers to whether you have required users to
      *             use at least one number in their password.</p>
      * @public
      */
-    RequireNumbers?: boolean;
+    RequireNumbers?: boolean | undefined;
     /**
      * <p>In the password policy that you have set, refers to whether you have required users to
      *             use at least one symbol in their password.</p>
      * @public
      */
-    RequireSymbols?: boolean;
+    RequireSymbols?: boolean | undefined;
     /**
      * <p>The number of previous passwords that you want Amazon Cognito to restrict each user from
      *             reusing. Users can't set a password that matches any of <code>n</code> previous
@@ -4746,7 +4746,7 @@ export interface PasswordPolicyType {
      *                      advanced security features</a> must be active in your user pool.</p>
      * @public
      */
-    PasswordHistorySize?: number;
+    PasswordHistorySize?: number | undefined;
     /**
      * <p>The number of days a temporary password is valid in the password policy. If the user
      *             doesn't sign in during this time, an administrator must reset their password. Defaults
@@ -4759,7 +4759,7 @@ export interface PasswordPolicyType {
      *          </note>
      * @public
      */
-    TemporaryPasswordValidityDays?: number;
+    TemporaryPasswordValidityDays?: number | undefined;
 }
 /**
  * <p>The policy associated with a user pool.</p>
@@ -4770,7 +4770,7 @@ export interface UserPoolPolicyType {
      * <p>The password policy.</p>
      * @public
      */
-    PasswordPolicy?: PasswordPolicyType;
+    PasswordPolicy?: PasswordPolicyType | undefined;
 }
 /**
  * <p>The SMS configuration type is the settings that your Amazon Cognito user pool must use to send
@@ -4803,7 +4803,7 @@ export interface SmsConfigurationType {
      *          </p>
      * @public
      */
-    ExternalId?: string;
+    ExternalId?: string | undefined;
     /**
      * <p>The Amazon Web Services Region to use with Amazon SNS integration. You can choose the same Region as your
      *             user pool, or a supported <b>Legacy Amazon SNS alternate
@@ -4813,7 +4813,7 @@ export interface SmsConfigurationType {
      *             configuration in the Asia Pacific (Tokyo) Region. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html">SMS message settings for Amazon Cognito user pools</a>.</p>
      * @public
      */
-    SnsRegion?: string;
+    SnsRegion?: string | undefined;
 }
 /**
  * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
@@ -4838,7 +4838,7 @@ export interface UserAttributeUpdateSettingsType {
      *                 <code>email</code> or <code>phone_number</code> attribute.</p>
      * @public
      */
-    AttributesRequireVerificationBeforeUpdate?: VerifiedAttributeType[];
+    AttributesRequireVerificationBeforeUpdate?: VerifiedAttributeType[] | undefined;
 }
 /**
  * @public
@@ -4908,7 +4908,7 @@ export interface UserPoolAddOnsType {
      *             authentication. </p>
      * @public
      */
-    AdvancedSecurityAdditionalFlows?: AdvancedSecurityAdditionalFlowsType;
+    AdvancedSecurityAdditionalFlows?: AdvancedSecurityAdditionalFlowsType | undefined;
 }
 /**
  * @public
@@ -4931,28 +4931,28 @@ export interface VerificationMessageTemplateType {
      * <p>The template for SMS messages that Amazon Cognito sends to your users.</p>
      * @public
      */
-    SmsMessage?: string;
+    SmsMessage?: string | undefined;
     /**
      * <p>The template for email messages that Amazon Cognito sends to your users. You can set an
      *                 <code>EmailMessage</code> template only if the value of <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount"> EmailSendingAccount</a> is <code>DEVELOPER</code>. When your <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount">EmailSendingAccount</a> is <code>DEVELOPER</code>, your user pool sends email
      *             messages with your own Amazon SES configuration.</p>
      * @public
      */
-    EmailMessage?: string;
+    EmailMessage?: string | undefined;
     /**
      * <p>The subject line for the email message template. You can set an
      *                 <code>EmailSubject</code> template only if the value of <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount"> EmailSendingAccount</a> is <code>DEVELOPER</code>. When your <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount">EmailSendingAccount</a> is <code>DEVELOPER</code>, your user pool sends email
      *             messages with your own Amazon SES configuration.</p>
      * @public
      */
-    EmailSubject?: string;
+    EmailSubject?: string | undefined;
     /**
      * <p>The email message template for sending a confirmation link to the user. You can set an
      *                 <code>EmailMessageByLink</code> template only if the value of <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount"> EmailSendingAccount</a> is <code>DEVELOPER</code>. When your <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount">EmailSendingAccount</a> is <code>DEVELOPER</code>, your user pool sends email
      *             messages with your own Amazon SES configuration.</p>
      * @public
      */
-    EmailMessageByLink?: string;
+    EmailMessageByLink?: string | undefined;
     /**
      * <p>The subject line for the email message template for sending a confirmation link to the
      *             user. You can set an <code>EmailSubjectByLink</code> template only if the value of
@@ -4960,12 +4960,12 @@ export interface VerificationMessageTemplateType {
      *             messages with your own Amazon SES configuration.</p>
      * @public
      */
-    EmailSubjectByLink?: string;
+    EmailSubjectByLink?: string | undefined;
     /**
      * <p>The default email option.</p>
      * @public
      */
-    DefaultEmailOption?: DefaultEmailOptionType;
+    DefaultEmailOption?: DefaultEmailOptionType | undefined;
 }
 /**
  * <p>Represents the request to create a user pool.</p>
@@ -4981,7 +4981,7 @@ export interface CreateUserPoolRequest {
      * <p>The policies associated with the new user pool.</p>
      * @public
      */
-    Policies?: UserPoolPolicyType;
+    Policies?: UserPoolPolicyType | undefined;
     /**
      * <p>When active, <code>DeletionProtection</code> prevents accidental deletion of your user
      * pool. Before you can delete a user pool that you have protected against deletion, you
@@ -4992,7 +4992,7 @@ export interface CreateUserPoolRequest {
      * <code>UpdateUserPool</code> API request.</p>
      * @public
      */
-    DeletionProtection?: DeletionProtectionType;
+    DeletionProtection?: DeletionProtectionType | undefined;
     /**
      * <p>The Lambda trigger configuration information for the new user pool.</p>
      *          <note>
@@ -5007,55 +5007,55 @@ export interface CreateUserPoolRequest {
      *          </note>
      * @public
      */
-    LambdaConfig?: LambdaConfigType;
+    LambdaConfig?: LambdaConfigType | undefined;
     /**
      * <p>The attributes to be auto-verified. Possible values: <b>email</b>, <b>phone_number</b>.</p>
      * @public
      */
-    AutoVerifiedAttributes?: VerifiedAttributeType[];
+    AutoVerifiedAttributes?: VerifiedAttributeType[] | undefined;
     /**
      * <p>Attributes supported as an alias for this user pool. Possible values: <b>phone_number</b>, <b>email</b>, or
      *                 <b>preferred_username</b>.</p>
      * @public
      */
-    AliasAttributes?: AliasAttributeType[];
+    AliasAttributes?: AliasAttributeType[] | undefined;
     /**
      * <p>Specifies whether a user can use an email address or phone number as a username when
      *             they sign up.</p>
      * @public
      */
-    UsernameAttributes?: UsernameAttributeType[];
+    UsernameAttributes?: UsernameAttributeType[] | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    SmsVerificationMessage?: string;
+    SmsVerificationMessage?: string | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    EmailVerificationMessage?: string;
+    EmailVerificationMessage?: string | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    EmailVerificationSubject?: string;
+    EmailVerificationSubject?: string | undefined;
     /**
      * <p>The template for the verification message that the user sees when the app requests
      *             permission to access the user's information.</p>
      * @public
      */
-    VerificationMessageTemplate?: VerificationMessageTemplateType;
+    VerificationMessageTemplate?: VerificationMessageTemplateType | undefined;
     /**
      * <p>A string representing the SMS authentication message.</p>
      * @public
      */
-    SmsAuthenticationMessage?: string;
+    SmsAuthenticationMessage?: string | undefined;
     /**
      * <p>Specifies MFA configuration details.</p>
      * @public
      */
-    MfaConfiguration?: UserPoolMfaType;
+    MfaConfiguration?: UserPoolMfaType | undefined;
     /**
      * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
      * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
@@ -5063,7 +5063,7 @@ export interface CreateUserPoolRequest {
      * Verifying updates to email addresses and phone numbers</a>.</p>
      * @public
      */
-    UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
+    UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType | undefined;
     /**
      * <p>The device-remembering configuration for a user pool. A null value indicates that you
      *             have deactivated device remembering in your user pool.</p>
@@ -5073,14 +5073,14 @@ export interface CreateUserPoolRequest {
      *          </note>
      * @public
      */
-    DeviceConfiguration?: DeviceConfigurationType;
+    DeviceConfiguration?: DeviceConfigurationType | undefined;
     /**
      * <p>The email configuration of your user pool. The email configuration type sets your
      *             preferred sending method, Amazon Web Services Region, and sender for messages from your user
      *             pool.</p>
      * @public
      */
-    EmailConfiguration?: EmailConfigurationType;
+    EmailConfiguration?: EmailConfigurationType | undefined;
     /**
      * <p>The SMS configuration with the settings that your Amazon Cognito user pool must use to send an
      *             SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To send SMS messages
@@ -5088,25 +5088,25 @@ export interface CreateUserPoolRequest {
      *             (IAM) role in your Amazon Web Services account.</p>
      * @public
      */
-    SmsConfiguration?: SmsConfigurationType;
+    SmsConfiguration?: SmsConfigurationType | undefined;
     /**
      * <p>The tag keys and values to assign to the user pool. A tag is a label that you can use
      *             to categorize and manage user pools in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      * @public
      */
-    UserPoolTags?: Record<string, string>;
+    UserPoolTags?: Record<string, string> | undefined;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      * @public
      */
-    AdminCreateUserConfig?: AdminCreateUserConfigType;
+    AdminCreateUserConfig?: AdminCreateUserConfigType | undefined;
     /**
      * <p>An array of schema attributes for the new user pool. These attributes can be standard
      *             or custom attributes.</p>
      * @public
      */
-    Schema?: SchemaAttributeType[];
+    Schema?: SchemaAttributeType[] | undefined;
     /**
      * <p>User pool add-ons. Contains settings for activation of advanced security features. To
      *     log user security information but take no action, set to <code>AUDIT</code>. To
@@ -5115,7 +5115,7 @@ export interface CreateUserPoolRequest {
      *          <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">Adding advanced security to a user pool</a>.</p>
      * @public
      */
-    UserPoolAddOns?: UserPoolAddOnsType;
+    UserPoolAddOns?: UserPoolAddOnsType | undefined;
     /**
      * <p>Case sensitivity on the username input for the selected sign-in option. When case
      *             sensitivity is set to <code>False</code> (case insensitive), users can sign in with any
@@ -5129,7 +5129,7 @@ export interface CreateUserPoolRequest {
      *          <p>This configuration is immutable after you set it. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html">UsernameConfigurationType</a>.</p>
      * @public
      */
-    UsernameConfiguration?: UsernameConfigurationType;
+    UsernameConfiguration?: UsernameConfigurationType | undefined;
     /**
      * <p>The available verified method a user can use to recover their password when they call
      *                 <code>ForgotPassword</code>. You can use this setting to define a preferred method
@@ -5139,7 +5139,7 @@ export interface CreateUserPoolRequest {
      *             behavior to determine the recovery method where SMS is preferred through email.</p>
      * @public
      */
-    AccountRecoverySetting?: AccountRecoverySettingType;
+    AccountRecoverySetting?: AccountRecoverySettingType | undefined;
 }
 /**
  * @public
@@ -5162,17 +5162,17 @@ export interface UserPoolType {
      * <p>The ID of the user pool.</p>
      * @public
      */
-    Id?: string;
+    Id?: string | undefined;
     /**
      * <p>The name of the user pool.</p>
      * @public
      */
-    Name?: string;
+    Name?: string | undefined;
     /**
      * <p>The policies associated with the user pool.</p>
      * @public
      */
-    Policies?: UserPoolPolicyType;
+    Policies?: UserPoolPolicyType | undefined;
     /**
      * <p>When active, <code>DeletionProtection</code> prevents accidental deletion of your user
      * pool. Before you can delete a user pool that you have protected against deletion, you
@@ -5183,31 +5183,31 @@ export interface UserPoolType {
      * <code>UpdateUserPool</code> API request.</p>
      * @public
      */
-    DeletionProtection?: DeletionProtectionType;
+    DeletionProtection?: DeletionProtectionType | undefined;
     /**
      * <p>The Lambda triggers associated with the user pool.</p>
      * @public
      */
-    LambdaConfig?: LambdaConfigType;
+    LambdaConfig?: LambdaConfigType | undefined;
     /**
      * @deprecated
      *
      * <p>This parameter is no longer used.</p>
      * @public
      */
-    Status?: StatusType;
+    Status?: StatusType | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
     /**
      * <p>A list of the user attributes and their properties in your user pool. The attribute
      *             schema contains standard attributes, custom attributes with a <code>custom:</code>
@@ -5219,48 +5219,48 @@ export interface UserPoolType {
      *             API operations. Use app client read/write permissions instead.</p>
      * @public
      */
-    SchemaAttributes?: SchemaAttributeType[];
+    SchemaAttributes?: SchemaAttributeType[] | undefined;
     /**
      * <p>The attributes that are auto-verified in a user pool.</p>
      * @public
      */
-    AutoVerifiedAttributes?: VerifiedAttributeType[];
+    AutoVerifiedAttributes?: VerifiedAttributeType[] | undefined;
     /**
      * <p>The attributes that are aliased in a user pool.</p>
      * @public
      */
-    AliasAttributes?: AliasAttributeType[];
+    AliasAttributes?: AliasAttributeType[] | undefined;
     /**
      * <p>Specifies whether a user can use an email address or phone number as a username when
      *             they sign up.</p>
      * @public
      */
-    UsernameAttributes?: UsernameAttributeType[];
+    UsernameAttributes?: UsernameAttributeType[] | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    SmsVerificationMessage?: string;
+    SmsVerificationMessage?: string | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    EmailVerificationMessage?: string;
+    EmailVerificationMessage?: string | undefined;
     /**
      * <p>This parameter is no longer used. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html">VerificationMessageTemplateType</a>.</p>
      * @public
      */
-    EmailVerificationSubject?: string;
+    EmailVerificationSubject?: string | undefined;
     /**
      * <p>The template for verification messages.</p>
      * @public
      */
-    VerificationMessageTemplate?: VerificationMessageTemplateType;
+    VerificationMessageTemplate?: VerificationMessageTemplateType | undefined;
     /**
      * <p>The contents of the SMS authentication message.</p>
      * @public
      */
-    SmsAuthenticationMessage?: string;
+    SmsAuthenticationMessage?: string | undefined;
     /**
      * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
      * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
@@ -5268,7 +5268,7 @@ export interface UserPoolType {
      * Verifying updates to email addresses and phone numbers</a>.</p>
      * @public
      */
-    UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
+    UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType | undefined;
     /**
      * <p>Can be one of the following values:</p>
      *          <ul>
@@ -5290,7 +5290,7 @@ export interface UserPoolType {
      *          </ul>
      * @public
      */
-    MfaConfiguration?: UserPoolMfaType;
+    MfaConfiguration?: UserPoolMfaType | undefined;
     /**
      * <p>The device-remembering configuration for a user pool. A null value indicates that you
      *             have deactivated device remembering in your user pool.</p>
@@ -5300,19 +5300,19 @@ export interface UserPoolType {
      *          </note>
      * @public
      */
-    DeviceConfiguration?: DeviceConfigurationType;
+    DeviceConfiguration?: DeviceConfigurationType | undefined;
     /**
      * <p>A number estimating the size of the user pool.</p>
      * @public
      */
-    EstimatedNumberOfUsers?: number;
+    EstimatedNumberOfUsers?: number | undefined;
     /**
      * <p>The email configuration of your user pool. The email configuration type sets your
      *             preferred sending method, Amazon Web Services Region, and sender for messages from your user
      *             pool.</p>
      * @public
      */
-    EmailConfiguration?: EmailConfigurationType;
+    EmailConfiguration?: EmailConfigurationType | undefined;
     /**
      * <p>The SMS configuration with the settings that your Amazon Cognito user pool must use to send an
      *             SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To send SMS messages
@@ -5320,14 +5320,14 @@ export interface UserPoolType {
      *             (IAM) role in your Amazon Web Services account.</p>
      * @public
      */
-    SmsConfiguration?: SmsConfigurationType;
+    SmsConfiguration?: SmsConfigurationType | undefined;
     /**
      * <p>The tags that are assigned to the user pool. A tag is a label that you can apply to
      *             user pools to categorize and manage them in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      * @public
      */
-    UserPoolTags?: Record<string, string>;
+    UserPoolTags?: Record<string, string> | undefined;
     /**
      * <p>The reason why the SMS configuration can't send the messages to your users.</p>
      *          <p>This message might include comma-separated values to describe why your SMS
@@ -5350,19 +5350,19 @@ export interface UserPoolType {
      *          </dl>
      * @public
      */
-    SmsConfigurationFailure?: string;
+    SmsConfigurationFailure?: string | undefined;
     /**
      * <p>Deprecated. Review error codes from API requests with
      *                 <code>EventSource:cognito-idp.amazonaws.com</code> in CloudTrail for
      *             information about problems with user pool email configuration.</p>
      * @public
      */
-    EmailConfigurationFailure?: string;
+    EmailConfigurationFailure?: string | undefined;
     /**
      * <p>The domain prefix, if the user pool has a domain associated with it.</p>
      * @public
      */
-    Domain?: string;
+    Domain?: string | undefined;
     /**
      * <p>A custom domain name that you provide to Amazon Cognito. This parameter applies only if you use
      *             a custom domain to host the sign-up and sign-in pages for your application. An example
@@ -5370,12 +5370,12 @@ export interface UserPoolType {
      *          <p>For more information about adding a custom domain to your user pool, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.html">Using Your Own Domain for the Hosted UI</a>.</p>
      * @public
      */
-    CustomDomain?: string;
+    CustomDomain?: string | undefined;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      * @public
      */
-    AdminCreateUserConfig?: AdminCreateUserConfigType;
+    AdminCreateUserConfig?: AdminCreateUserConfigType | undefined;
     /**
      * <p>User pool add-ons. Contains settings for activation of advanced security features. To
      *     log user security information but take no action, set to <code>AUDIT</code>. To
@@ -5384,7 +5384,7 @@ export interface UserPoolType {
      *          <p>For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">Adding advanced security to a user pool</a>.</p>
      * @public
      */
-    UserPoolAddOns?: UserPoolAddOnsType;
+    UserPoolAddOns?: UserPoolAddOnsType | undefined;
     /**
      * <p>Case sensitivity of the username input for the selected sign-in option. For example,
      *             when case sensitivity is set to <code>False</code>, users can sign in using either
@@ -5392,12 +5392,12 @@ export interface UserPoolType {
      *             information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html">UsernameConfigurationType</a>.</p>
      * @public
      */
-    UsernameConfiguration?: UsernameConfigurationType;
+    UsernameConfiguration?: UsernameConfigurationType | undefined;
     /**
      * <p>The Amazon Resource Name (ARN) for the user pool.</p>
      * @public
      */
-    Arn?: string;
+    Arn?: string | undefined;
     /**
      * <p>The available verified method a user can use to recover their password when they call
      *                 <code>ForgotPassword</code>. You can use this setting to define a preferred method
@@ -5407,7 +5407,7 @@ export interface UserPoolType {
      *             behavior to determine the recovery method where SMS is preferred through email.</p>
      * @public
      */
-    AccountRecoverySetting?: AccountRecoverySettingType;
+    AccountRecoverySetting?: AccountRecoverySettingType | undefined;
 }
 /**
  * <p>Represents the response from the server for the request to create a user pool.</p>
@@ -5418,7 +5418,7 @@ export interface CreateUserPoolResponse {
      * <p>A container for the user pool details.</p>
      * @public
      */
-    UserPool?: UserPoolType;
+    UserPool?: UserPoolType | undefined;
 }
 /**
  * <p>This exception is thrown when a user pool tag can't be set or updated.</p>
@@ -5503,7 +5503,7 @@ export interface TokenValidityUnitsType {
      *             day.</p>
      * @public
      */
-    AccessToken?: TimeUnitsType;
+    AccessToken?: TimeUnitsType | undefined;
     /**
      * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
      *                 <code>days</code> for the value that you set in the <code>IdTokenValidity</code>
@@ -5511,7 +5511,7 @@ export interface TokenValidityUnitsType {
      *                 <code>IdTokenValidity</code> duration can range from five minutes to one day.</p>
      * @public
      */
-    IdToken?: TimeUnitsType;
+    IdToken?: TimeUnitsType | undefined;
     /**
      * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
      *                 <code>days</code> for the value that you set in the
@@ -5521,7 +5521,7 @@ export interface TokenValidityUnitsType {
      *             years.</p>
      * @public
      */
-    RefreshToken?: TimeUnitsType;
+    RefreshToken?: TimeUnitsType | undefined;
 }
 /**
  * <p>Represents the request to create a user pool client.</p>
@@ -5543,7 +5543,7 @@ export interface CreateUserPoolClientRequest {
      *             being created.</p>
      * @public
      */
-    GenerateSecret?: boolean;
+    GenerateSecret?: boolean | undefined;
     /**
      * <p>The refresh token time limit. After this limit expires, your user can't use
      * their refresh token. To specify the time unit for <code>RefreshTokenValidity</code> as
@@ -5560,7 +5560,7 @@ export interface CreateUserPoolClientRequest {
      * tokens are valid for 30 days.</p>
      * @public
      */
-    RefreshTokenValidity?: number;
+    RefreshTokenValidity?: number | undefined;
     /**
      * <p>The access token time limit. After this limit expires, your user can't use
      * their access token. To specify the time unit for <code>AccessTokenValidity</code> as
@@ -5575,7 +5575,7 @@ export interface CreateUserPoolClientRequest {
      * tokens are valid for one hour.</p>
      * @public
      */
-    AccessTokenValidity?: number;
+    AccessTokenValidity?: number | undefined;
     /**
      * <p>The ID token time limit. After this limit expires, your user can't use
      * their ID token. To specify the time unit for <code>IdTokenValidity</code> as
@@ -5590,13 +5590,13 @@ export interface CreateUserPoolClientRequest {
      * tokens are valid for one hour.</p>
      * @public
      */
-    IdTokenValidity?: number;
+    IdTokenValidity?: number | undefined;
     /**
      * <p>The units in which the validity times are represented. The default unit for
      *             RefreshToken is days, and default for ID and access tokens are hours.</p>
      * @public
      */
-    TokenValidityUnits?: TokenValidityUnitsType;
+    TokenValidityUnits?: TokenValidityUnitsType | undefined;
     /**
      * <p>The list of user attributes that you want your app client to have read access to.
      *     After your user authenticates in your app, their access token authorizes them to read
@@ -5613,7 +5613,7 @@ export interface CreateUserPoolClientRequest {
      *     custom set of read attributes.</p>
      * @public
      */
-    ReadAttributes?: string[];
+    ReadAttributes?: string[] | undefined;
     /**
      * <p>The list of user attributes that you want your app client to have write access to.
      *     After your user authenticates in your app, their access token authorizes them to set or
@@ -5635,7 +5635,7 @@ export interface CreateUserPoolClientRequest {
      *     pool</a>.</p>
      * @public
      */
-    WriteAttributes?: string[];
+    WriteAttributes?: string[] | undefined;
     /**
      * <p>The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in
      * your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and
@@ -5679,7 +5679,7 @@ export interface CreateUserPoolClientRequest {
      * like <code>ALLOW_USER_SRP_AUTH</code>.</p>
      * @public
      */
-    ExplicitAuthFlows?: ExplicitAuthFlowsType[];
+    ExplicitAuthFlows?: ExplicitAuthFlowsType[] | undefined;
     /**
      * <p>A list of provider names for the identity providers (IdPs) that are supported on this
      *             client. The following are supported: <code>COGNITO</code>, <code>Facebook</code>,
@@ -5688,7 +5688,7 @@ export interface CreateUserPoolClientRequest {
      *             user pool, for example <code>MySAMLIdP</code> or <code>MyOIDCIdP</code>.</p>
      * @public
      */
-    SupportedIdentityProviders?: string[];
+    SupportedIdentityProviders?: string[] | undefined;
     /**
      * <p>A list of allowed redirect (callback) URLs for the IdPs.</p>
      *          <p>A redirect URI must:</p>
@@ -5710,12 +5710,12 @@ export interface CreateUserPoolClientRequest {
      *          <p>App callback URLs such as myapp://example are also supported.</p>
      * @public
      */
-    CallbackURLs?: string[];
+    CallbackURLs?: string[] | undefined;
     /**
      * <p>A list of allowed logout URLs for the IdPs.</p>
      * @public
      */
-    LogoutURLs?: string[];
+    LogoutURLs?: string[] | undefined;
     /**
      * <p>The default redirect URI. In app clients with one assigned IdP, replaces
      *                 <code>redirect_uri</code> in authentication requests. Must be in the
@@ -5738,7 +5738,7 @@ export interface CreateUserPoolClientRequest {
      *          <p>App callback URLs such as myapp://example are also supported.</p>
      * @public
      */
-    DefaultRedirectURI?: string;
+    DefaultRedirectURI?: string | undefined;
     /**
      * <p>The OAuth grant types that you want your app client to generate. To create an app
      *             client that generates client credentials grants, you must add
@@ -5764,7 +5764,7 @@ export interface CreateUserPoolClientRequest {
      *          </dl>
      * @public
      */
-    AllowedOAuthFlows?: OAuthFlowType[];
+    AllowedOAuthFlows?: OAuthFlowType[] | undefined;
     /**
      * <p>The allowed OAuth scopes. Possible values provided by OAuth are <code>phone</code>,
      *                 <code>email</code>, <code>openid</code>, and <code>profile</code>. Possible values
@@ -5772,7 +5772,7 @@ export interface CreateUserPoolClientRequest {
      *             scopes created in Resource Servers are also supported.</p>
      * @public
      */
-    AllowedOAuthScopes?: string[];
+    AllowedOAuthScopes?: string[] | undefined;
     /**
      * <p>Set to <code>true</code> to use OAuth 2.0 features in your user pool app client.</p>
      *          <p>
@@ -5803,7 +5803,7 @@ export interface CreateUserPoolClientRequest {
      * to <code>false</code>.</p>
      * @public
      */
-    AllowedOAuthFlowsUserPoolClient?: boolean;
+    AllowedOAuthFlowsUserPoolClient?: boolean | undefined;
     /**
      * <p>The user pool analytics configuration for collecting metrics and sending them to your
      *             Amazon Pinpoint campaign.</p>
@@ -5815,7 +5815,7 @@ export interface CreateUserPoolClientRequest {
      *          </note>
      * @public
      */
-    AnalyticsConfiguration?: AnalyticsConfigurationType;
+    AnalyticsConfiguration?: AnalyticsConfigurationType | undefined;
     /**
      * <p>Errors and responses that you want Amazon Cognito APIs to return during authentication, account
      *             confirmation, and password recovery when the user doesn't exist in the user pool. When
@@ -5840,7 +5840,7 @@ export interface CreateUserPoolClientRequest {
      *          <p>Defaults to <code>LEGACY</code> when you don't provide a value.</p>
      * @public
      */
-    PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
+    PreventUserExistenceErrors?: PreventUserExistenceErrorTypes | undefined;
     /**
      * <p>Activates or deactivates token revocation. For more information about revoking tokens,
      *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
@@ -5848,7 +5848,7 @@ export interface CreateUserPoolClientRequest {
      *             the new user pool client.</p>
      * @public
      */
-    EnableTokenRevocation?: boolean;
+    EnableTokenRevocation?: boolean | undefined;
     /**
      * <p>Activates the propagation of additional user context data. For more information about
      *             propagation of user context data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"> Adding advanced security to a user pool</a>. If you don’t include this
@@ -5858,13 +5858,13 @@ export interface CreateUserPoolClientRequest {
      *             client secret.</p>
      * @public
      */
-    EnablePropagateAdditionalUserContextData?: boolean;
+    EnablePropagateAdditionalUserContextData?: boolean | undefined;
     /**
      * <p>Amazon Cognito creates a session token for each API request in an authentication flow. <code>AuthSessionValidity</code> is the duration,
      * in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.</p>
      * @public
      */
-    AuthSessionValidity?: number;
+    AuthSessionValidity?: number | undefined;
 }
 /**
  * <p>Contains information about a user pool client.</p>
@@ -5875,34 +5875,34 @@ export interface UserPoolClientType {
      * <p>The user pool ID for the user pool client.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The client name from the user pool request of the client type.</p>
      * @public
      */
-    ClientName?: string;
+    ClientName?: string | undefined;
     /**
      * <p>The ID of the client associated with the user pool.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
     /**
      * <p>The client secret from the user pool request of the client type.</p>
      * @public
      */
-    ClientSecret?: string;
+    ClientSecret?: string | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
     /**
      * <p>The refresh token time limit. After this limit expires, your user can't use
      * their refresh token. To specify the time unit for <code>RefreshTokenValidity</code> as
@@ -5919,7 +5919,7 @@ export interface UserPoolClientType {
      * tokens are valid for 30 days.</p>
      * @public
      */
-    RefreshTokenValidity?: number;
+    RefreshTokenValidity?: number | undefined;
     /**
      * <p>The access token time limit. After this limit expires, your user can't use
      * their access token. To specify the time unit for <code>AccessTokenValidity</code> as
@@ -5934,7 +5934,7 @@ export interface UserPoolClientType {
      * tokens are valid for one hour.</p>
      * @public
      */
-    AccessTokenValidity?: number;
+    AccessTokenValidity?: number | undefined;
     /**
      * <p>The ID token time limit. After this limit expires, your user can't use
      * their ID token. To specify the time unit for <code>IdTokenValidity</code> as
@@ -5949,13 +5949,13 @@ export interface UserPoolClientType {
      * tokens are valid for one hour.</p>
      * @public
      */
-    IdTokenValidity?: number;
+    IdTokenValidity?: number | undefined;
     /**
      * <p>The time units used to specify the token validity times of each token type: ID,
      *             access, and refresh.</p>
      * @public
      */
-    TokenValidityUnits?: TokenValidityUnitsType;
+    TokenValidityUnits?: TokenValidityUnitsType | undefined;
     /**
      * <p>The list of user attributes that you want your app client to have read access to.
      *     After your user authenticates in your app, their access token authorizes them to read
@@ -5972,7 +5972,7 @@ export interface UserPoolClientType {
      *     custom set of read attributes.</p>
      * @public
      */
-    ReadAttributes?: string[];
+    ReadAttributes?: string[] | undefined;
     /**
      * <p>The list of user attributes that you want your app client to have write access to.
      *     After your user authenticates in your app, their access token authorizes them to set or
@@ -5994,7 +5994,7 @@ export interface UserPoolClientType {
      *     pool</a>.</p>
      * @public
      */
-    WriteAttributes?: string[];
+    WriteAttributes?: string[] | undefined;
     /**
      * <p>The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in
      * your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and
@@ -6038,7 +6038,7 @@ export interface UserPoolClientType {
      * like <code>ALLOW_USER_SRP_AUTH</code>.</p>
      * @public
      */
-    ExplicitAuthFlows?: ExplicitAuthFlowsType[];
+    ExplicitAuthFlows?: ExplicitAuthFlowsType[] | undefined;
     /**
      * <p>A list of provider names for the IdPs that this client supports. The following are
      *             supported: <code>COGNITO</code>, <code>Facebook</code>, <code>Google</code>,
@@ -6046,7 +6046,7 @@ export interface UserPoolClientType {
      *             own SAML and OIDC providers.</p>
      * @public
      */
-    SupportedIdentityProviders?: string[];
+    SupportedIdentityProviders?: string[] | undefined;
     /**
      * <p>A list of allowed redirect (callback) URLs for the IdPs.</p>
      *          <p>A redirect URI must:</p>
@@ -6068,12 +6068,12 @@ export interface UserPoolClientType {
      *          <p>App callback URLs such as myapp://example are also supported.</p>
      * @public
      */
-    CallbackURLs?: string[];
+    CallbackURLs?: string[] | undefined;
     /**
      * <p>A list of allowed logout URLs for the IdPs.</p>
      * @public
      */
-    LogoutURLs?: string[];
+    LogoutURLs?: string[] | undefined;
     /**
      * <p>The default redirect URI. Must be in the <code>CallbackURLs</code> list.</p>
      *          <p>A redirect URI must:</p>
@@ -6095,7 +6095,7 @@ export interface UserPoolClientType {
      *          <p>App callback URLs such as myapp://example are also supported.</p>
      * @public
      */
-    DefaultRedirectURI?: string;
+    DefaultRedirectURI?: string | undefined;
     /**
      * <p>The allowed OAuth flows.</p>
      *          <dl>
@@ -6119,7 +6119,7 @@ export interface UserPoolClientType {
      *          </dl>
      * @public
      */
-    AllowedOAuthFlows?: OAuthFlowType[];
+    AllowedOAuthFlows?: OAuthFlowType[] | undefined;
     /**
      * <p>The OAuth scopes that your app client supports. Possible values that OAuth provides
      *             are <code>phone</code>, <code>email</code>, <code>openid</code>, and
@@ -6128,7 +6128,7 @@ export interface UserPoolClientType {
      *             you create in Resource Servers.</p>
      * @public
      */
-    AllowedOAuthScopes?: string[];
+    AllowedOAuthScopes?: string[] | undefined;
     /**
      * <p>Set to <code>true</code> to use OAuth 2.0 features in your user pool app client.</p>
      *          <p>
@@ -6159,7 +6159,7 @@ export interface UserPoolClientType {
      * to <code>false</code>.</p>
      * @public
      */
-    AllowedOAuthFlowsUserPoolClient?: boolean;
+    AllowedOAuthFlowsUserPoolClient?: boolean | undefined;
     /**
      * <p>The Amazon Pinpoint analytics configuration for the user pool client.</p>
      *          <note>
@@ -6169,7 +6169,7 @@ export interface UserPoolClientType {
      *          </note>
      * @public
      */
-    AnalyticsConfiguration?: AnalyticsConfigurationType;
+    AnalyticsConfiguration?: AnalyticsConfigurationType | undefined;
     /**
      * <p>Errors and responses that you want Amazon Cognito APIs to return during authentication, account
      *             confirmation, and password recovery when the user doesn't exist in the user pool. When
@@ -6194,14 +6194,14 @@ export interface UserPoolClientType {
      *          <p>Defaults to <code>LEGACY</code> when you don't provide a value.</p>
      * @public
      */
-    PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
+    PreventUserExistenceErrors?: PreventUserExistenceErrorTypes | undefined;
     /**
      * <p>Indicates whether token revocation is activated for the user pool client. When you
      *             create a new user pool client, token revocation is activated by default. For more
      *             information about revoking tokens, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      * @public
      */
-    EnableTokenRevocation?: boolean;
+    EnableTokenRevocation?: boolean | undefined;
     /**
      * <p>When <code>EnablePropagateAdditionalUserContextData</code> is true, Amazon Cognito accepts an
      *                 <code>IpAddress</code> value that you send in the <code>UserContextData</code>
@@ -6220,13 +6220,13 @@ export interface UserPoolClientType {
      *             data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      * @public
      */
-    EnablePropagateAdditionalUserContextData?: boolean;
+    EnablePropagateAdditionalUserContextData?: boolean | undefined;
     /**
      * <p>Amazon Cognito creates a session token for each API request in an authentication flow. <code>AuthSessionValidity</code> is the duration,
      * in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.</p>
      * @public
      */
-    AuthSessionValidity?: number;
+    AuthSessionValidity?: number | undefined;
 }
 /**
  * <p>Represents the response from the server to create a user pool client.</p>
@@ -6237,7 +6237,7 @@ export interface CreateUserPoolClientResponse {
      * <p>The user pool client that was just created.</p>
      * @public
      */
-    UserPoolClient?: UserPoolClientType;
+    UserPoolClient?: UserPoolClientType | undefined;
 }
 /**
  * <p>This exception is thrown when the specified OAuth flow is not valid.</p>
@@ -6301,7 +6301,7 @@ export interface CreateUserPoolDomainRequest {
      *          <p>For more information about the hosted domain and custom domains, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-assign-domain.html">Configuring a User Pool Domain</a>.</p>
      * @public
      */
-    CustomDomainConfig?: CustomDomainConfigType;
+    CustomDomainConfig?: CustomDomainConfigType | undefined;
 }
 /**
  * @public
@@ -6314,7 +6314,7 @@ export interface CreateUserPoolDomainResponse {
      *             operation returns a blank response.</p>
      * @public
      */
-    CloudFrontDomain?: string;
+    CloudFrontDomain?: string | undefined;
 }
 /**
  * @public
@@ -6527,7 +6527,7 @@ export interface DescribeRiskConfigurationRequest {
      * <p>The app client ID.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
 }
 /**
  * @public
@@ -6575,7 +6575,7 @@ export interface CompromisedCredentialsRiskConfigurationType {
      *             filter is specified.</p>
      * @public
      */
-    EventFilter?: EventFilterType[];
+    EventFilter?: EventFilterType[] | undefined;
     /**
      * <p>The compromised credentials risk configuration actions.</p>
      * @public
@@ -6593,13 +6593,13 @@ export interface RiskExceptionConfigurationType {
      *             prefix.</p>
      * @public
      */
-    BlockedIPRangeList?: string[];
+    BlockedIPRangeList?: string[] | undefined;
     /**
      * <p>Risk detection isn't performed on the IP addresses in this range list. The IP range is
      *             in CIDR notation.</p>
      * @public
      */
-    SkippedIPRangeList?: string[];
+    SkippedIPRangeList?: string[] | undefined;
 }
 /**
  * <p>The risk configuration type.</p>
@@ -6610,36 +6610,36 @@ export interface RiskConfigurationType {
      * <p>The user pool ID.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The app client ID.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
     /**
      * <p>The compromised credentials risk configuration object, including the
      *                 <code>EventFilter</code> and the <code>EventAction</code>.</p>
      * @public
      */
-    CompromisedCredentialsRiskConfiguration?: CompromisedCredentialsRiskConfigurationType;
+    CompromisedCredentialsRiskConfiguration?: CompromisedCredentialsRiskConfigurationType | undefined;
     /**
      * <p>The account takeover risk configuration object, including the
      *                 <code>NotifyConfiguration</code> object and <code>Actions</code> to take if there is
      *             an account takeover.</p>
      * @public
      */
-    AccountTakeoverRiskConfiguration?: AccountTakeoverRiskConfigurationType;
+    AccountTakeoverRiskConfiguration?: AccountTakeoverRiskConfigurationType | undefined;
     /**
      * <p>The configuration to override the risk decision.</p>
      * @public
      */
-    RiskExceptionConfiguration?: RiskExceptionConfigurationType;
+    RiskExceptionConfiguration?: RiskExceptionConfigurationType | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
 }
 /**
  * @public
@@ -6677,7 +6677,7 @@ export interface DescribeUserImportJobResponse {
      * <p>The job object that represents the user import job.</p>
      * @public
      */
-    UserImportJob?: UserImportJobType;
+    UserImportJob?: UserImportJobType | undefined;
 }
 /**
  * <p>Represents the request to describe the user pool.</p>
@@ -6699,7 +6699,7 @@ export interface DescribeUserPoolResponse {
      * <p>The container of metadata returned by the server to describe the pool.</p>
      * @public
      */
-    UserPool?: UserPoolType;
+    UserPool?: UserPoolType | undefined;
 }
 /**
  * <p>Represents the request to describe a user pool client.</p>
@@ -6727,7 +6727,7 @@ export interface DescribeUserPoolClientResponse {
      * <p>The user pool client from a server response to describe the user pool client.</p>
      * @public
      */
-    UserPoolClient?: UserPoolClientType;
+    UserPoolClient?: UserPoolClientType | undefined;
 }
 /**
  * @public
@@ -6765,46 +6765,46 @@ export interface DomainDescriptionType {
      * <p>The user pool ID.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The Amazon Web Services ID for the user pool owner.</p>
      * @public
      */
-    AWSAccountId?: string;
+    AWSAccountId?: string | undefined;
     /**
      * <p>The domain string. For custom domains, this is the fully-qualified domain name, such
      *             as <code>auth.example.com</code>. For Amazon Cognito prefix domains, this is the prefix alone,
      *             such as <code>auth</code>.</p>
      * @public
      */
-    Domain?: string;
+    Domain?: string | undefined;
     /**
      * <p>The Amazon S3 bucket where the static files for this domain are stored.</p>
      * @public
      */
-    S3Bucket?: string;
+    S3Bucket?: string | undefined;
     /**
      * <p>The Amazon CloudFront endpoint that you use as the target of the alias that you set up with
      *             your Domain Name Service (DNS) provider.</p>
      * @public
      */
-    CloudFrontDistribution?: string;
+    CloudFrontDistribution?: string | undefined;
     /**
      * <p>The app version.</p>
      * @public
      */
-    Version?: string;
+    Version?: string | undefined;
     /**
      * <p>The domain status.</p>
      * @public
      */
-    Status?: DomainStatusType;
+    Status?: DomainStatusType | undefined;
     /**
      * <p>The configuration for a custom domain that hosts the sign-up and sign-in webpages for
      *             your application.</p>
      * @public
      */
-    CustomDomainConfig?: CustomDomainConfigType;
+    CustomDomainConfig?: CustomDomainConfigType | undefined;
 }
 /**
  * @public
@@ -6814,7 +6814,7 @@ export interface DescribeUserPoolDomainResponse {
      * <p>A domain description object containing information about the domain.</p>
      * @public
      */
-    DomainDescription?: DomainDescriptionType;
+    DomainDescription?: DomainDescriptionType | undefined;
 }
 /**
  * <p>Represents the request to forget the device.</p>
@@ -6826,7 +6826,7 @@ export interface ForgetDeviceRequest {
      *             forget.</p>
      * @public
      */
-    AccessToken?: string;
+    AccessToken?: string | undefined;
     /**
      * <p>The device key.</p>
      * @public
@@ -6848,14 +6848,14 @@ export interface ForgotPasswordRequest {
      *             user pool client and username plus the client ID in the message.</p>
      * @public
      */
-    SecretHash?: string;
+    SecretHash?: string | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
     /**
      * <p>The username of the user that you want to query or modify. The value of this parameter
      *             is typically your user's username, but it can be any of their alias attributes. If
@@ -6870,7 +6870,7 @@ export interface ForgotPasswordRequest {
      *                 <code>ForgotPassword</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -6907,7 +6907,7 @@ export interface ForgotPasswordRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>The delivery details for an email or SMS message that Amazon Cognito sent for authentication or
@@ -6919,17 +6919,17 @@ export interface CodeDeliveryDetailsType {
      * <p>The email address or phone number destination where Amazon Cognito sent the code.</p>
      * @public
      */
-    Destination?: string;
+    Destination?: string | undefined;
     /**
      * <p>The method that Amazon Cognito used to send the code.</p>
      * @public
      */
-    DeliveryMedium?: DeliveryMediumType;
+    DeliveryMedium?: DeliveryMediumType | undefined;
     /**
      * <p>The name of the attribute that Amazon Cognito verifies with the code.</p>
      * @public
      */
-    AttributeName?: string;
+    AttributeName?: string | undefined;
 }
 /**
  * <p>The response from Amazon Cognito to a request to reset a password.</p>
@@ -6941,7 +6941,7 @@ export interface ForgotPasswordResponse {
      *             password.</p>
      * @public
      */
-    CodeDeliveryDetails?: CodeDeliveryDetailsType;
+    CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
 }
 /**
  * <p>Represents the request to get the header information of the CSV file for the user
@@ -6965,12 +6965,12 @@ export interface GetCSVHeaderResponse {
      * <p>The user pool ID for the user pool that the users are to be imported into.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The header information of the CSV file for the user import job.</p>
      * @public
      */
-    CSVHeader?: string[];
+    CSVHeader?: string[] | undefined;
 }
 /**
  * <p>Represents the request to get the device.</p>
@@ -6987,7 +6987,7 @@ export interface GetDeviceRequest {
      *             to request.</p>
      * @public
      */
-    AccessToken?: string;
+    AccessToken?: string | undefined;
 }
 /**
  * <p>Gets the device response.</p>
@@ -7023,7 +7023,7 @@ export interface GetGroupResponse {
      * <p>The group object for the group.</p>
      * @public
      */
-    Group?: GroupType;
+    Group?: GroupType | undefined;
 }
 /**
  * @public
@@ -7077,7 +7077,7 @@ export interface CloudWatchLogsConfigurationType {
      *                 logging from certain Amazon Web Services services</a>.</p>
      * @public
      */
-    LogGroupArn?: string;
+    LogGroupArn?: string | undefined;
 }
 /**
  * @public
@@ -7102,7 +7102,7 @@ export interface FirehoseConfigurationType {
      *             features log export.</p>
      * @public
      */
-    StreamArn?: string;
+    StreamArn?: string | undefined;
 }
 /**
  * @public
@@ -7127,7 +7127,7 @@ export interface S3ConfigurationType {
      *             log export.</p>
      * @public
      */
-    BucketArn?: string;
+    BucketArn?: string | undefined;
 }
 /**
  * <p>The logging parameters of a user pool.</p>
@@ -7157,21 +7157,21 @@ export interface LogConfigurationType {
      *             activity log export with advanced security features.</p>
      * @public
      */
-    CloudWatchLogsConfiguration?: CloudWatchLogsConfigurationType;
+    CloudWatchLogsConfiguration?: CloudWatchLogsConfigurationType | undefined;
     /**
      * <p>The Amazon S3 bucket destination of user activity log export with advanced security
      *             features. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
      *                      advanced security features</a> must be active in your user pool.</p>
      * @public
      */
-    S3Configuration?: S3ConfigurationType;
+    S3Configuration?: S3ConfigurationType | undefined;
     /**
      * <p>The Amazon Data Firehose stream destination of user activity log export with advanced security
      *             features. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
      *                      advanced security features</a> must be active in your user pool.</p>
      * @public
      */
-    FirehoseConfiguration?: FirehoseConfigurationType;
+    FirehoseConfiguration?: FirehoseConfigurationType | undefined;
 }
 /**
  * <p>The logging parameters of a user pool returned in response to
@@ -7199,7 +7199,7 @@ export interface GetLogDeliveryConfigurationResponse {
      * <p>The logging configuration of the requested user pool.</p>
      * @public
      */
-    LogDeliveryConfiguration?: LogDeliveryConfigurationType;
+    LogDeliveryConfiguration?: LogDeliveryConfigurationType | undefined;
 }
 /**
  * <p>Request to get a signing certificate from Amazon Cognito.</p>
@@ -7221,7 +7221,7 @@ export interface GetSigningCertificateResponse {
      * <p>The signing certificate.</p>
      * @public
      */
-    Certificate?: string;
+    Certificate?: string | undefined;
 }
 /**
  * @public
@@ -7236,7 +7236,7 @@ export interface GetUICustomizationRequest {
      * <p>The client ID for the client app.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
 }
 /**
  * <p>A container for the UI customization information for a user pool's built-in app
@@ -7248,39 +7248,39 @@ export interface UICustomizationType {
      * <p>The user pool ID for the user pool.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The client ID for the client app.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
     /**
      * <p>The logo image for the UI customization.</p>
      * @public
      */
-    ImageUrl?: string;
+    ImageUrl?: string | undefined;
     /**
      * <p>The CSS values in the UI customization.</p>
      * @public
      */
-    CSS?: string;
+    CSS?: string | undefined;
     /**
      * <p>The CSS version number.</p>
      * @public
      */
-    CSSVersion?: string;
+    CSSVersion?: string | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
 }
 /**
  * @public
@@ -7330,18 +7330,18 @@ export interface GetUserResponse {
      *             instead.</p>
      * @public
      */
-    MFAOptions?: MFAOptionType[];
+    MFAOptions?: MFAOptionType[] | undefined;
     /**
      * <p>The user's preferred MFA setting.</p>
      * @public
      */
-    PreferredMfaSetting?: string;
+    PreferredMfaSetting?: string | undefined;
     /**
      * <p>The MFA options that are activated for the user. The possible values in this list are
      *             <code>SMS_MFA</code>, <code>EMAIL_OTP</code>, and <code>SOFTWARE_TOKEN_MFA</code>.</p>
      * @public
      */
-    UserMFASettingList?: string[];
+    UserMFASettingList?: string[] | undefined;
 }
 /**
  * <p>Represents the request to get user attribute verification.</p>
@@ -7394,7 +7394,7 @@ export interface GetUserAttributeVerificationCodeRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>The verification code response returned by the server response to get the user
@@ -7407,7 +7407,7 @@ export interface GetUserAttributeVerificationCodeResponse {
      *             user attribute verification code.</p>
      * @public
      */
-    CodeDeliveryDetails?: CodeDeliveryDetailsType;
+    CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
 }
 /**
  * @public
@@ -7433,13 +7433,13 @@ export interface EmailMfaConfigType {
      *             Amazon Cognito sends messages in the default format.</p>
      * @public
      */
-    Message?: string;
+    Message?: string | undefined;
     /**
      * <p>The subject of the email message that your user pool sends to users with an MFA
      *             code.</p>
      * @public
      */
-    Subject?: string;
+    Subject?: string | undefined;
 }
 /**
  * <p>Configures user pool SMS messages for multi-factor authentication (MFA). Sets the
@@ -7454,7 +7454,7 @@ export interface SmsMfaConfigType {
      *             messages in the default format.</p>
      * @public
      */
-    SmsAuthenticationMessage?: string;
+    SmsAuthenticationMessage?: string | undefined;
     /**
      * <p>The SMS configuration with the settings that your Amazon Cognito user pool must use to send an
      *             SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To request Amazon SNS in
@@ -7462,7 +7462,7 @@ export interface SmsMfaConfigType {
      *             you provide for your Amazon Web Services account.</p>
      * @public
      */
-    SmsConfiguration?: SmsConfigurationType;
+    SmsConfiguration?: SmsConfigurationType | undefined;
 }
 /**
  * <p>Configures a user pool for time-based one-time password (TOTP) multi-factor
@@ -7474,7 +7474,7 @@ export interface SoftwareTokenMfaConfigType {
      * <p>Specifies whether software token MFA is activated.</p>
      * @public
      */
-    Enabled?: boolean;
+    Enabled?: boolean | undefined;
 }
 /**
  * @public
@@ -7485,20 +7485,20 @@ export interface GetUserPoolMfaConfigResponse {
      *             the SMS message sending configuration for Amazon SNS.</p>
      * @public
      */
-    SmsMfaConfiguration?: SmsMfaConfigType;
+    SmsMfaConfiguration?: SmsMfaConfigType | undefined;
     /**
      * <p>Shows user pool configuration for time-based one-time password (TOTP) MFA. Includes
      *             TOTP enabled or disabled state.</p>
      * @public
      */
-    SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType;
+    SoftwareTokenMfaConfiguration?: SoftwareTokenMfaConfigType | undefined;
     /**
      * <p>Shows user pool email message configuration for MFA. Includes the subject and body of
      *             the email message template for MFA messages. To activate this setting, <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html">
      *                      advanced security features</a> must be active in your user pool.</p>
      * @public
      */
-    EmailMfaConfiguration?: EmailMfaConfigType;
+    EmailMfaConfiguration?: EmailMfaConfigType | undefined;
     /**
      * <p>The multi-factor authentication (MFA) configuration. Valid values include:</p>
      *          <ul>
@@ -7518,7 +7518,7 @@ export interface GetUserPoolMfaConfigResponse {
      *          </ul>
      * @public
      */
-    MfaConfiguration?: UserPoolMfaType;
+    MfaConfiguration?: UserPoolMfaType | undefined;
 }
 /**
  * <p>Represents the request to sign out all devices.</p>
@@ -7625,7 +7625,7 @@ export interface InitiateAuthRequest {
      *             <code>DEVICE_KEY</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html">Working with user devices in your user pool</a>.</p>
      * @public
      */
-    AuthParameters?: Record<string, string>;
+    AuthParameters?: Record<string, string> | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -7692,7 +7692,7 @@ export interface InitiateAuthRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
     /**
      * <p>The app client ID.</p>
      * @public
@@ -7703,14 +7703,14 @@ export interface InitiateAuthRequest {
      *                 <code>InitiateAuth</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
 }
 /**
  * <p>Initiates the authentication response.</p>
@@ -7795,7 +7795,7 @@ export interface InitiateAuthResponse {
      *          </ul>
      * @public
      */
-    ChallengeName?: ChallengeNameType;
+    ChallengeName?: ChallengeNameType | undefined;
     /**
      * <p>The session that should pass both ways in challenge-response calls to the service. If
      *             the caller must pass another challenge, they return a session with other challenge
@@ -7803,7 +7803,7 @@ export interface InitiateAuthResponse {
      *                 <code>RespondToAuthChallenge</code> API call.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
     /**
      * <p>The challenge parameters. These are returned in the <code>InitiateAuth</code> response
      *             if you must pass another challenge. The responses in this parameter should be used to
@@ -7812,7 +7812,7 @@ export interface InitiateAuthResponse {
      *             applicable).</p>
      * @public
      */
-    ChallengeParameters?: Record<string, string>;
+    ChallengeParameters?: Record<string, string> | undefined;
     /**
      * <p>The result of the authentication response. This result is only returned if the caller
      *             doesn't need to pass another challenge. If the caller does need to pass another
@@ -7820,7 +7820,7 @@ export interface InitiateAuthResponse {
      *                 <code>ChallengeParameters</code>, and <code>Session</code> are returned.</p>
      * @public
      */
-    AuthenticationResult?: AuthenticationResultType;
+    AuthenticationResult?: AuthenticationResultType | undefined;
 }
 /**
  * <p>Represents the request to list the devices.</p>
@@ -7837,7 +7837,7 @@ export interface ListDevicesRequest {
      * <p>The limit of the device request.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>This API operation returns a limited number of results. The pagination token is
      * an identifier that you can present in an additional API request with the same parameters. When
@@ -7846,7 +7846,7 @@ export interface ListDevicesRequest {
      * through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * <p>Represents the response to list devices.</p>
@@ -7857,14 +7857,14 @@ export interface ListDevicesResponse {
      * <p>The devices returned in the list devices response.</p>
      * @public
      */
-    Devices?: DeviceType[];
+    Devices?: DeviceType[] | undefined;
     /**
      * <p>The identifier that Amazon Cognito returned with the previous request to this operation. When
      * you include a pagination token in your request, Amazon Cognito returns the next set of items in
      * the list. By use of this token, you can paginate through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * @public
@@ -7879,13 +7879,13 @@ export interface ListGroupsRequest {
      * <p>The limit of the request to list groups.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -7895,13 +7895,13 @@ export interface ListGroupsResponse {
      * <p>The group objects for the groups.</p>
      * @public
      */
-    Groups?: GroupType[];
+    Groups?: GroupType[] | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -7916,12 +7916,12 @@ export interface ListIdentityProvidersRequest {
      * <p>The maximum number of IdPs to return.</p>
      * @public
      */
-    MaxResults?: number;
+    MaxResults?: number | undefined;
     /**
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>A container for IdP details.</p>
@@ -7932,23 +7932,23 @@ export interface ProviderDescription {
      * <p>The IdP name.</p>
      * @public
      */
-    ProviderName?: string;
+    ProviderName?: string | undefined;
     /**
      * <p>The IdP type.</p>
      * @public
      */
-    ProviderType?: IdentityProviderTypeType;
+    ProviderType?: IdentityProviderTypeType | undefined;
     /**
      * <p>The date the provider was last modified.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
 }
 /**
  * @public
@@ -7963,7 +7963,7 @@ export interface ListIdentityProvidersResponse {
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -7978,12 +7978,12 @@ export interface ListResourceServersRequest {
      * <p>The maximum number of resource servers to return.</p>
      * @public
      */
-    MaxResults?: number;
+    MaxResults?: number | undefined;
     /**
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -7998,7 +7998,7 @@ export interface ListResourceServersResponse {
      * <p>A pagination token.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -8018,7 +8018,7 @@ export interface ListTagsForResourceResponse {
      * <p>The tags that are assigned to the user pool.</p>
      * @public
      */
-    Tags?: Record<string, string>;
+    Tags?: Record<string, string> | undefined;
 }
 /**
  * <p>Represents the request to list the user import jobs.</p>
@@ -8043,7 +8043,7 @@ export interface ListUserImportJobsRequest {
      * through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * <p>Represents the response from the server to the request to list the user import
@@ -8055,14 +8055,14 @@ export interface ListUserImportJobsResponse {
      * <p>The user import jobs.</p>
      * @public
      */
-    UserImportJobs?: UserImportJobType[];
+    UserImportJobs?: UserImportJobType[] | undefined;
     /**
      * <p>The identifier that Amazon Cognito returned with the previous request to this operation. When
      * you include a pagination token in your request, Amazon Cognito returns the next set of items in
      * the list. By use of this token, you can paginate through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * <p>Represents the request to list the user pool clients.</p>
@@ -8079,13 +8079,13 @@ export interface ListUserPoolClientsRequest {
      *             pool clients.</p>
      * @public
      */
-    MaxResults?: number;
+    MaxResults?: number | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>The description of the user pool client.</p>
@@ -8096,18 +8096,18 @@ export interface UserPoolClientDescription {
      * <p>The ID of the client associated with the user pool.</p>
      * @public
      */
-    ClientId?: string;
+    ClientId?: string | undefined;
     /**
      * <p>The user pool ID for the user pool where you want to describe the user pool
      *             client.</p>
      * @public
      */
-    UserPoolId?: string;
+    UserPoolId?: string | undefined;
     /**
      * <p>The client name from the user pool client description.</p>
      * @public
      */
-    ClientName?: string;
+    ClientName?: string | undefined;
 }
 /**
  * <p>Represents the response from the server that lists user pool clients.</p>
@@ -8118,13 +8118,13 @@ export interface ListUserPoolClientsResponse {
      * <p>The user pool clients in the response that lists user pool clients.</p>
      * @public
      */
-    UserPoolClients?: UserPoolClientDescription[];
+    UserPoolClients?: UserPoolClientDescription[] | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>Represents the request to list user pools.</p>
@@ -8136,7 +8136,7 @@ export interface ListUserPoolsRequest {
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
     /**
      * <p>The maximum number of results you want the request to return when listing the user
      *             pools.</p>
@@ -8153,36 +8153,36 @@ export interface UserPoolDescriptionType {
      * <p>The ID in a user pool description.</p>
      * @public
      */
-    Id?: string;
+    Id?: string | undefined;
     /**
      * <p>The name in a user pool description.</p>
      * @public
      */
-    Name?: string;
+    Name?: string | undefined;
     /**
      * <p>The Lambda configuration information in a user pool description.</p>
      * @public
      */
-    LambdaConfig?: LambdaConfigType;
+    LambdaConfig?: LambdaConfigType | undefined;
     /**
      * @deprecated
      *
      * <p>The user pool status in a user pool description.</p>
      * @public
      */
-    Status?: StatusType;
+    Status?: StatusType | undefined;
     /**
      * <p>The date and time when the item was modified. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    LastModifiedDate?: Date;
+    LastModifiedDate?: Date | undefined;
     /**
      * <p>The date and time when the item was created. Amazon Cognito returns this timestamp in UNIX epoch time format. Your SDK might render the output in a
      * human-readable format like ISO 8601 or a Java <code>Date</code> object.</p>
      * @public
      */
-    CreationDate?: Date;
+    CreationDate?: Date | undefined;
 }
 /**
  * <p>Represents the response to list user pools.</p>
@@ -8193,13 +8193,13 @@ export interface ListUserPoolsResponse {
      * <p>The user pools from the response to list users.</p>
      * @public
      */
-    UserPools?: UserPoolDescriptionType[];
+    UserPools?: UserPoolDescriptionType[] | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>Represents the request to list users.</p>
@@ -8223,12 +8223,12 @@ export interface ListUsersRequest {
      *             before an <code>AttributesToGet</code> parameter returns results.</p>
      * @public
      */
-    AttributesToGet?: string[];
+    AttributesToGet?: string[] | undefined;
     /**
      * <p>Maximum number of users to be returned.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>This API operation returns a limited number of results. The pagination token is
      * an identifier that you can present in an additional API request with the same parameters. When
@@ -8237,7 +8237,7 @@ export interface ListUsersRequest {
      * through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
     /**
      * <p>A filter string of the form "<i>AttributeName</i>
      *             <i>Filter-Type</i> "<i>AttributeValue</i>"". Quotation marks
@@ -8332,7 +8332,7 @@ export interface ListUsersRequest {
      *                 Guide</i>.</p>
      * @public
      */
-    Filter?: string;
+    Filter?: string | undefined;
 }
 /**
  * <p>The response from the request to list users.</p>
@@ -8351,14 +8351,14 @@ export interface ListUsersResponse {
      *          </note>
      * @public
      */
-    Users?: UserType[];
+    Users?: UserType[] | undefined;
     /**
      * <p>The identifier that Amazon Cognito returned with the previous request to this operation. When
      * you include a pagination token in your request, Amazon Cognito returns the next set of items in
      * the list. By use of this token, you can paginate through the full list of items.</p>
      * @public
      */
-    PaginationToken?: string;
+    PaginationToken?: string | undefined;
 }
 /**
  * @public
@@ -8378,13 +8378,13 @@ export interface ListUsersInGroupRequest {
      * <p>The maximum number of users that you want to retrieve before pagination.</p>
      * @public
      */
-    Limit?: number;
+    Limit?: number | undefined;
     /**
      * <p>An identifier that was returned from the previous call to this operation, which can be
      *             used to return the next set of items in the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * @public
@@ -8394,13 +8394,13 @@ export interface ListUsersInGroupResponse {
      * <p>A list of users in the group, and their attributes.</p>
      * @public
      */
-    Users?: UserType[];
+    Users?: UserType[] | undefined;
     /**
      * <p>An identifier that you can use in a later request to return the next set of items in
      *             the list.</p>
      * @public
      */
-    NextToken?: string;
+    NextToken?: string | undefined;
 }
 /**
  * <p>Represents the request to resend the confirmation code.</p>
@@ -8417,14 +8417,14 @@ export interface ResendConfirmationCodeRequest {
      *             user pool client and username plus the client ID in the message.</p>
      * @public
      */
-    SecretHash?: string;
+    SecretHash?: string | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
     /**
      * <p>The username of the user that you want to query or modify. The value of this parameter
      *             is typically your user's username, but it can be any of their alias attributes. If
@@ -8439,7 +8439,7 @@ export interface ResendConfirmationCodeRequest {
      *                 <code>ResendConfirmationCode</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -8474,7 +8474,7 @@ export interface ResendConfirmationCodeRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * <p>The response from the server when Amazon Cognito makes the request to resend a confirmation
@@ -8487,7 +8487,7 @@ export interface ResendConfirmationCodeResponse {
      *             the confirmation code.</p>
      * @public
      */
-    CodeDeliveryDetails?: CodeDeliveryDetailsType;
+    CodeDeliveryDetails?: CodeDeliveryDetailsType | undefined;
 }
 /**
  * <p>The request to respond to an authentication challenge.</p>
@@ -8514,7 +8514,7 @@ export interface RespondToAuthChallengeRequest {
      *                 <code>RespondToAuthChallenge</code> API call.</p>
      * @public
      */
-    Session?: string;
+    Session?: string | undefined;
     /**
      * <p>The responses to the challenge that you received in the previous request. Each
      *     challenge has its own required response parameters. The following examples are partial
@@ -8625,20 +8625,20 @@ export interface RespondToAuthChallengeRequest {
      *     <code>DEVICE_KEY</code>, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-device-tracking.html">Working with user devices in your user pool</a>.</p>
      * @public
      */
-    ChallengeResponses?: Record<string, string>;
+    ChallengeResponses?: Record<string, string> | undefined;
     /**
      * <p>The Amazon Pinpoint analytics metadata that contributes to your metrics for
      *                 <code>RespondToAuthChallenge</code> calls.</p>
      * @public
      */
-    AnalyticsMetadata?: AnalyticsMetadataType;
+    AnalyticsMetadata?: AnalyticsMetadataType | undefined;
     /**
      * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
      * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
      * when it makes API requests.</p>
      * @public
      */
-    UserContextData?: UserContextDataType;
+    UserContextData?: UserContextDataType | undefined;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for any custom workflows
      *             that this action triggers.</p>
@@ -8677,7 +8677,7 @@ export interface RespondToAuthChallengeRequest {
      *          </note>
      * @public
      */
-    ClientMetadata?: Record<string, string>;
+    ClientMetadata?: Record<string, string> | undefined;
 }
 /**
  * @internal