npm - @aws-sdk/client-cognito-identity-provider - Versions diffs - 3.95.0 → 3.98.0 - Mend

@aws-sdk/client-cognito-identity-provider 3.95.0 → 3.98.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (70) hide show

package/dist-types/CognitoIdentityProvider.d.ts CHANGED Viewed

@@ -102,9 +102,12 @@ import { UpdateUserPoolDomainCommandInput, UpdateUserPoolDomainCommandOutput } f
 import { VerifySoftwareTokenCommandInput, VerifySoftwareTokenCommandOutput } from "./commands/VerifySoftwareTokenCommand";
 import { VerifyUserAttributeCommandInput, VerifyUserAttributeCommandOutput } from "./commands/VerifyUserAttributeCommand";
 /**
- * <p>Using the Amazon Cognito user pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies.</p>
+ * <p>Using the Amazon Cognito user pools API, you can create a user pool to manage directories and
+ *             users. You can authenticate a user to obtain tokens related to user identity and access
+ *             policies.</p>
  *         <p>This API reference provides information about user pools in Amazon Cognito user pools.</p>
- *         <p>For more information, see the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html">Amazon Cognito Documentation</a>.</p>
+ *         <p>For more information, see the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/what-is-amazon-cognito.html">Amazon Cognito
+ *                 Documentation</a>.</p>
  */
 export declare class CognitoIdentityProvider extends CognitoIdentityProviderClient {
     /**
@@ -121,7 +124,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminAddUserToGroup(args: AdminAddUserToGroupCommandInput, cb: (err: any, data?: AdminAddUserToGroupCommandOutput) => void): void;
     adminAddUserToGroup(args: AdminAddUserToGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminAddUserToGroupCommandOutput) => void): void;
     /**
-     * <p>Confirms user registration as an admin without using a confirmation code. Works on any user.</p>
+     * <p>Confirms user registration as an admin without using a confirmation code. Works on any
+     *             user.</p>
      *         <p>Calling this action requires developer credentials.</p>
      */
     adminConfirmSignUp(args: AdminConfirmSignUpCommandInput, options?: __HttpHandlerOptions): Promise<AdminConfirmSignUpCommandOutput>;
@@ -129,9 +133,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminConfirmSignUp(args: AdminConfirmSignUpCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminConfirmSignUpCommandOutput) => void): void;
     /**
      * <p>Creates a new user in the specified user pool.</p>
-     *         <p>If <code>MessageAction</code> isn't set, the default is to send a welcome message via email or phone (SMS).</p>
-     *
-     *
+     *         <p>If <code>MessageAction</code> isn't set, the default is to send a welcome message via
+     *             email or phone (SMS).</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -151,10 +154,13 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
      *                     Developer Guide</i>.</p>
      *          </note>
      *
-     *         <p>This message is based on a template that you configured in your call to create or update a user pool. This template includes your custom sign-up instructions and placeholders for
-     *             user name and temporary password.</p>
-     *         <p>Alternatively, you can call <code>AdminCreateUser</code> with <code>SUPPRESS</code> for the <code>MessageAction</code> parameter, and Amazon Cognito won't send any email. </p>
-     *         <p>In either case, the user will be in the <code>FORCE_CHANGE_PASSWORD</code> state until they sign in and change their password.</p>
+     *         <p>This message is based on a template that you configured in your call to create or
+     *             update a user pool. This template includes your custom sign-up instructions and
+     *             placeholders for user name and temporary password.</p>
+     *         <p>Alternatively, you can call <code>AdminCreateUser</code> with <code>SUPPRESS</code>
+     *             for the <code>MessageAction</code> parameter, and Amazon Cognito won't send any email. </p>
+     *         <p>In either case, the user will be in the <code>FORCE_CHANGE_PASSWORD</code> state until
+     *             they sign in and change their password.</p>
      *         <p>
      *             <code>AdminCreateUser</code> requires developer credentials.</p>
      */
@@ -169,7 +175,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminDeleteUser(args: AdminDeleteUserCommandInput, cb: (err: any, data?: AdminDeleteUserCommandOutput) => void): void;
     adminDeleteUser(args: AdminDeleteUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminDeleteUserCommandOutput) => void): void;
     /**
-     * <p>Deletes the user attributes in a user pool as an administrator. Works on any user.</p>
+     * <p>Deletes the user attributes in a user pool as an administrator. Works on any
+     *             user.</p>
      *         <p>Calling this action requires developer credentials.</p>
      */
     adminDeleteUserAttributes(args: AdminDeleteUserAttributesCommandInput, options?: __HttpHandlerOptions): Promise<AdminDeleteUserAttributesCommandOutput>;
@@ -177,22 +184,33 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminDeleteUserAttributes(args: AdminDeleteUserAttributesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminDeleteUserAttributesCommandOutput) => void): void;
     /**
      * <p>Prevents the user from signing in with the specified external (SAML or social)
-     *             identity provider. If the user that you want to  deactivate is a Amazon Cognito user pools native
-     *             username + password user, they can't use their password to sign in. If the user to
-     *             deactivate is a linked external identity provider (IdP) user, any link between that user
-     *             and an existing user is removed. When the external user signs in again, and the user is
-     *             no longer attached to the previously linked <code>DestinationUser</code>, the user must
-     *             create a new user account. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminLinkProviderForUser.html">AdminLinkProviderForUser</a>.</p>
-     *         <p>This action is enabled only for admin access and requires developer credentials.</p>
-     *         <p>The <code>ProviderName</code> must match the value specified when creating an IdP for the pool. </p>
-     *         <p>To deactivate a native username + password user, the <code>ProviderName</code> value must be <code>Cognito</code> and the <code>ProviderAttributeName</code> must be <code>Cognito_Subject</code>.
-     *             The <code>ProviderAttributeValue</code> must be the name that is used in the user pool for the user.</p>
-     *         <p>The <code>ProviderAttributeName</code> must always be <code>Cognito_Subject</code> for social identity providers. The <code>ProviderAttributeValue</code> must always be the exact
-     *             subject that was used when the user was originally linked as a source user.</p>
-     *         <p>For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign in, the <code>ProviderAttributeName</code> and <code>ProviderAttributeValue</code>
-     *             must be the same values that were used for the <code>SourceUser</code> when the identities were originally linked using <code> AdminLinkProviderForUser</code> call. (If the linking was done
-     *             with <code>ProviderAttributeName</code> set to <code>Cognito_Subject</code>, the same applies here). However, if the user has already signed in, the <code>ProviderAttributeName</code> must
-     *             be <code>Cognito_Subject</code> and <code>ProviderAttributeValue</code> must be the subject of the SAML assertion.</p>
+     *             identity provider (IdP). If the user that you want to deactivate is a Amazon Cognito user pools
+     *             native username + password user, they can't use their password to sign in. If the user
+     *             to deactivate is a linked external IdP user, any link between that user and an existing
+     *             user is removed. When the external user signs in again, and the user is no longer
+     *             attached to the previously linked <code>DestinationUser</code>, the user must create a
+     *             new user account. See <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminLinkProviderForUser.html">AdminLinkProviderForUser</a>.</p>
+     *         <p>This action is enabled only for admin access and requires developer
+     *             credentials.</p>
+     *         <p>The <code>ProviderName</code> must match the value specified when creating an IdP for
+     *             the pool. </p>
+     *         <p>To deactivate a native username + password user, the <code>ProviderName</code> value
+     *             must be <code>Cognito</code> and the <code>ProviderAttributeName</code> must be
+     *                 <code>Cognito_Subject</code>. The <code>ProviderAttributeValue</code> must be the
+     *             name that is used in the user pool for the user.</p>
+     *         <p>The <code>ProviderAttributeName</code> must always be <code>Cognito_Subject</code> for
+     *             social IdPs. The <code>ProviderAttributeValue</code> must always be the exact subject
+     *             that was used when the user was originally linked as a source user.</p>
+     *         <p>For de-linking a SAML identity, there are two scenarios. If the linked identity has
+     *             not yet been used to sign in, the <code>ProviderAttributeName</code> and
+     *                 <code>ProviderAttributeValue</code> must be the same values that were used for the
+     *                 <code>SourceUser</code> when the identities were originally linked using <code>
+     *                 AdminLinkProviderForUser</code> call. (If the linking was done with
+     *                 <code>ProviderAttributeName</code> set to <code>Cognito_Subject</code>, the same
+     *             applies here). However, if the user has already signed in, the
+     *                 <code>ProviderAttributeName</code> must be <code>Cognito_Subject</code> and
+     *                 <code>ProviderAttributeValue</code> must be the subject of the SAML
+     *             assertion.</p>
      */
     adminDisableProviderForUser(args: AdminDisableProviderForUserCommandInput, options?: __HttpHandlerOptions): Promise<AdminDisableProviderForUserCommandOutput>;
     adminDisableProviderForUser(args: AdminDisableProviderForUserCommandInput, cb: (err: any, data?: AdminDisableProviderForUserCommandOutput) => void): void;
@@ -226,7 +244,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminGetDevice(args: AdminGetDeviceCommandInput, cb: (err: any, data?: AdminGetDeviceCommandOutput) => void): void;
     adminGetDevice(args: AdminGetDeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminGetDeviceCommandOutput) => void): void;
     /**
-     * <p>Gets the specified user by user name in a user pool as an administrator. Works on any user.</p>
+     * <p>Gets the specified user by user name in a user pool as an administrator. Works on any
+     *             user.</p>
      *         <p>Calling this action requires developer credentials.</p>
      */
     adminGetUser(args: AdminGetUserCommandInput, options?: __HttpHandlerOptions): Promise<AdminGetUserCommandOutput>;
@@ -235,7 +254,6 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     /**
      * <p>Initiates the authentication flow, as an administrator.</p>
      *
-     *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
      *                 require you to register an origination phone number before you can send SMS messages
@@ -260,18 +278,23 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminInitiateAuth(args: AdminInitiateAuthCommandInput, cb: (err: any, data?: AdminInitiateAuthCommandOutput) => void): void;
     adminInitiateAuth(args: AdminInitiateAuthCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminInitiateAuthCommandOutput) => void): void;
     /**
-     * <p>Links an existing user account in a user pool (<code>DestinationUser</code>) to an identity from an external identity provider (<code>SourceUser</code>) based on a specified
-     *             attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not
-     *             yet been used to sign in. You can then use the federated user identity to sign in as the existing user account. </p>
-     *         <p> For example, if there is an existing user with a username and password, this API links that user to a federated user identity.  When the user signs in with a federated user
-     *             identity, they sign in as the existing user account.</p>
-     *          <note>
-     *             <p>The maximum number of federated identities linked to a user is 5.</p>
-     *          </note>
-     *          <important>
-     *             <p>Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external
-     *         identity providers and provider attributes that have been trusted by the application owner.</p>
-     *          </important>
+     * <p>Links an existing user account in a user pool (<code>DestinationUser</code>) to an
+     *             identity from an external IdP (<code>SourceUser</code>) based on a specified attribute
+     *             name and value from the external IdP. This allows you to create a link from the existing
+     *             user account to an external federated user identity that has not yet been used to sign
+     *             in. You can then use the federated user identity to sign in as the existing user
+     *             account. </p>
+     *         <p> For example, if there is an existing user with a username and password, this API
+     *             links that user to a federated user identity. When the user signs in with a federated
+     *             user identity, they sign in as the existing user account.</p>
+     *         <note>
+     *             <p>The maximum number of federated identities linked to a user is five.</p>
+     *         </note>
+     *         <important>
+     *             <p>Because this API allows a user with an external federated identity to sign in as
+     *                 an existing user in the user pool, it is critical that it only be used with external
+     *                 IdPs and provider attributes that have been trusted by the application owner.</p>
+     *         </important>
      *
      *         <p>This action is administrative and requires developer credentials.</p>
      */
@@ -293,7 +316,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminListGroupsForUser(args: AdminListGroupsForUserCommandInput, cb: (err: any, data?: AdminListGroupsForUserCommandOutput) => void): void;
     adminListGroupsForUser(args: AdminListGroupsForUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminListGroupsForUserCommandOutput) => void): void;
     /**
-     * <p>A history of user activity and any risks detected as part of Amazon Cognito advanced security.</p>
+     * <p>A history of user activity and any risks detected as part of Amazon Cognito advanced
+     *             security.</p>
      */
     adminListUserAuthEvents(args: AdminListUserAuthEventsCommandInput, options?: __HttpHandlerOptions): Promise<AdminListUserAuthEventsCommandOutput>;
     adminListUserAuthEvents(args: AdminListUserAuthEventsCommandInput, cb: (err: any, data?: AdminListUserAuthEventsCommandOutput) => void): void;
@@ -306,12 +330,16 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminRemoveUserFromGroup(args: AdminRemoveUserFromGroupCommandInput, cb: (err: any, data?: AdminRemoveUserFromGroupCommandOutput) => void): void;
     adminRemoveUserFromGroup(args: AdminRemoveUserFromGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminRemoveUserFromGroupCommandOutput) => void): void;
     /**
-     * <p>Resets the specified user's password in a user pool as an administrator. Works on any user.</p>
-     *         <p>When a developer calls this API, the current password is invalidated, so it must be changed. If a user tries to sign in after the API is called,
-     *             the app will get a PasswordResetRequiredException exception back and should direct the user down the flow to reset the password, which is the same
-     *             as the forgot password flow. In addition, if the user pool has phone verification selected and a verified phone number exists for the user, or if
-     *             email verification is selected and a verified email exists for the user, calling this API will also result in sending a message to the end user
-     *             with the code to change their password.</p>
+     * <p>Resets the specified user's password in a user pool as an administrator. Works on any
+     *             user.</p>
+     *         <p>When a developer calls this API, the current password is invalidated, so it must be
+     *             changed. If a user tries to sign in after the API is called, the app will get a
+     *             PasswordResetRequiredException exception back and should direct the user down the flow
+     *             to reset the password, which is the same as the forgot password flow. In addition, if
+     *             the user pool has phone verification selected and a verified phone number exists for the
+     *             user, or if email verification is selected and a verified email exists for the user,
+     *             calling this API will also result in sending a message to the end user with the code to
+     *             change their password.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -363,35 +391,43 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminRespondToAuthChallenge(args: AdminRespondToAuthChallengeCommandInput, cb: (err: any, data?: AdminRespondToAuthChallengeCommandOutput) => void): void;
     adminRespondToAuthChallenge(args: AdminRespondToAuthChallengeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminRespondToAuthChallengeCommandOutput) => void): void;
     /**
-     * <p>The user's multi-factor authentication (MFA) preference, including which MFA options are activated, and if any are preferred. Only one factor can be set as preferred. The preferred
-     *             MFA factor will be used to authenticate a user if multiple factors are activated. If multiple options are activated and no preference is set, a challenge to choose an MFA option will
-     *             be returned during sign-in.</p>
+     * <p>The user's multi-factor authentication (MFA) preference, including which MFA options
+     *             are activated, and if any are preferred. Only one factor can be set as preferred. The
+     *             preferred MFA factor will be used to authenticate a user if multiple factors are
+     *             activated. If multiple options are activated and no preference is set, a challenge to
+     *             choose an MFA option will be returned during sign-in.</p>
      */
     adminSetUserMFAPreference(args: AdminSetUserMFAPreferenceCommandInput, options?: __HttpHandlerOptions): Promise<AdminSetUserMFAPreferenceCommandOutput>;
     adminSetUserMFAPreference(args: AdminSetUserMFAPreferenceCommandInput, cb: (err: any, data?: AdminSetUserMFAPreferenceCommandOutput) => void): void;
     adminSetUserMFAPreference(args: AdminSetUserMFAPreferenceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminSetUserMFAPreferenceCommandOutput) => void): void;
     /**
-     * <p>Sets the specified user's password in a user pool as an administrator. Works on any user. </p>
-     *         <p>The password can be temporary or permanent. If it is temporary, the user status enters the <code>FORCE_CHANGE_PASSWORD</code> state. When the user next tries to sign in,
-     *             the InitiateAuth/AdminInitiateAuth response will contain the <code>NEW_PASSWORD_REQUIRED</code> challenge. If the user doesn't sign in before it expires, the user won't be
-     *             able to sign in, and an administrator must reset their password. </p>
-     *         <p>Once the user has set a new password, or the password is permanent, the user status is set to <code>Confirmed</code>.</p>
+     * <p>Sets the specified user's password in a user pool as an administrator. Works on any
+     *             user. </p>
+     *         <p>The password can be temporary or permanent. If it is temporary, the user status enters
+     *             the <code>FORCE_CHANGE_PASSWORD</code> state. When the user next tries to sign in, the
+     *             InitiateAuth/AdminInitiateAuth response will contain the
+     *                 <code>NEW_PASSWORD_REQUIRED</code> challenge. If the user doesn't sign in before it
+     *             expires, the user won't be able to sign in, and an administrator must reset their
+     *             password. </p>
+     *         <p>Once the user has set a new password, or the password is permanent, the user status is
+     *             set to <code>Confirmed</code>.</p>
      */
     adminSetUserPassword(args: AdminSetUserPasswordCommandInput, options?: __HttpHandlerOptions): Promise<AdminSetUserPasswordCommandOutput>;
     adminSetUserPassword(args: AdminSetUserPasswordCommandInput, cb: (err: any, data?: AdminSetUserPasswordCommandOutput) => void): void;
     adminSetUserPassword(args: AdminSetUserPasswordCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminSetUserPasswordCommandOutput) => void): void;
     /**
      * <p>
-     *             <i>This action is no longer supported.</i> You can use it to configure only SMS MFA. You can't use it to configure time-based one-time password (TOTP)
-     *             software token MFA. To configure either type of MFA,
-     *             use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserMFAPreference.html">AdminSetUserMFAPreference</a> instead.</p>
+     *             <i>This action is no longer supported.</i> You can use it to configure
+     *             only SMS MFA. You can't use it to configure time-based one-time password (TOTP) software
+     *             token MFA. To configure either type of MFA, use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserMFAPreference.html">AdminSetUserMFAPreference</a> instead.</p>
      */
     adminSetUserSettings(args: AdminSetUserSettingsCommandInput, options?: __HttpHandlerOptions): Promise<AdminSetUserSettingsCommandOutput>;
     adminSetUserSettings(args: AdminSetUserSettingsCommandInput, cb: (err: any, data?: AdminSetUserSettingsCommandOutput) => void): void;
     adminSetUserSettings(args: AdminSetUserSettingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminSetUserSettingsCommandOutput) => void): void;
     /**
-     * <p>Provides feedback for an authentication event indicating if it was from a valid user. This feedback is used for improving the risk evaluation decision for the user pool
-     *             as part of Amazon Cognito advanced security.</p>
+     * <p>Provides feedback for an authentication event indicating if it was from a valid user.
+     *             This feedback is used for improving the risk evaluation decision for the user pool as
+     *             part of Amazon Cognito advanced security.</p>
      */
     adminUpdateAuthEventFeedback(args: AdminUpdateAuthEventFeedbackCommandInput, options?: __HttpHandlerOptions): Promise<AdminUpdateAuthEventFeedbackCommandOutput>;
     adminUpdateAuthEventFeedback(args: AdminUpdateAuthEventFeedbackCommandInput, cb: (err: any, data?: AdminUpdateAuthEventFeedbackCommandOutput) => void): void;
@@ -404,9 +440,12 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminUpdateDeviceStatus(args: AdminUpdateDeviceStatusCommandInput, cb: (err: any, data?: AdminUpdateDeviceStatusCommandOutput) => void): void;
     adminUpdateDeviceStatus(args: AdminUpdateDeviceStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminUpdateDeviceStatusCommandOutput) => void): void;
     /**
-     * <p>Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user.</p>
-     *         <p>For custom attributes, you must prepend the <code>custom:</code> prefix to the attribute name.</p>
-     *         <p>In addition to updating user attributes, this API can also be used to mark phone and email as verified.</p>
+     * <p>Updates the specified user's attributes, including developer attributes, as an
+     *             administrator. Works on any user.</p>
+     *         <p>For custom attributes, you must prepend the <code>custom:</code> prefix to the
+     *             attribute name.</p>
+     *         <p>In addition to updating user attributes, this API can also be used to mark phone and
+     *             email as verified.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -432,20 +471,28 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminUpdateUserAttributes(args: AdminUpdateUserAttributesCommandInput, cb: (err: any, data?: AdminUpdateUserAttributesCommandOutput) => void): void;
     adminUpdateUserAttributes(args: AdminUpdateUserAttributesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminUpdateUserAttributesCommandOutput) => void): void;
     /**
-     * <p>Signs out users from all devices, as an administrator. It also invalidates all refresh tokens issued to a user. The user's current access and Id tokens remain valid until their expiry. Access and
-     *             Id tokens expire one hour after they're issued.</p>
+     * <p>Signs out a user from all devices. You must sign <code>AdminUserGlobalSignOut</code> requests
+     *             with Amazon Web Services credentials. It also invalidates all refresh tokens that Amazon Cognito has issued to
+     *             a user. The user's current access and ID tokens remain valid until they expire. By
+     *             default, access and ID tokens expire one hour after they're issued. A user can still use
+     *             a hosted UI cookie to retrieve new tokens for the duration of the cookie validity period
+     *             of 1 hour.</p>
      *         <p>Calling this action requires developer credentials.</p>
      */
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, options?: __HttpHandlerOptions): Promise<AdminUserGlobalSignOutCommandOutput>;
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     /**
-     * <p>Returns a unique generated shared secret key code for the user account. The request takes an access token or a session string, but not both.</p>
-     *          <note>
-     *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software token from the user account. If the user doesn't subsequently verify the software token,
-     *             their account is set up to authenticate without MFA. If MFA config is set to Optional at the user pool level, the user can then log in without MFA. However, if MFA is
-     *             set to Required for the user pool, the user is asked to set up a new software token MFA during sign-in.</p>
-     *          </note>
+     * <p>Returns a unique generated shared secret key code for the user account. The request
+     *             takes an access token or a session string, but not both.</p>
+     *         <note>
+     *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software
+     *                 token from the user account. If the user doesn't subsequently verify the software
+     *                 token, their account is set up to authenticate without MFA. If MFA config is set to
+     *                 Optional at the user pool level, the user can then log in without MFA. However, if
+     *                 MFA is set to Required for the user pool, the user is asked to set up a new software
+     *                 token MFA during sign-in.</p>
+     *         </note>
      */
     associateSoftwareToken(args: AssociateSoftwareTokenCommandInput, options?: __HttpHandlerOptions): Promise<AssociateSoftwareTokenCommandOutput>;
     associateSoftwareToken(args: AssociateSoftwareTokenCommandInput, cb: (err: any, data?: AssociateSoftwareTokenCommandOutput) => void): void;
@@ -457,7 +504,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     changePassword(args: ChangePasswordCommandInput, cb: (err: any, data?: ChangePasswordCommandOutput) => void): void;
     changePassword(args: ChangePasswordCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ChangePasswordCommandOutput) => void): void;
     /**
-     * <p>Confirms tracking of the device. This API call is the call that begins device tracking.</p>
+     * <p>Confirms tracking of the device. This API call is the call that begins device
+     *             tracking.</p>
      */
     confirmDevice(args: ConfirmDeviceCommandInput, options?: __HttpHandlerOptions): Promise<ConfirmDeviceCommandOutput>;
     confirmDevice(args: ConfirmDeviceCommandInput, cb: (err: any, data?: ConfirmDeviceCommandOutput) => void): void;
@@ -469,7 +517,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     confirmForgotPassword(args: ConfirmForgotPasswordCommandInput, cb: (err: any, data?: ConfirmForgotPasswordCommandOutput) => void): void;
     confirmForgotPassword(args: ConfirmForgotPasswordCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ConfirmForgotPasswordCommandOutput) => void): void;
     /**
-     * <p>Confirms registration of a user and handles the existing alias from a previous user.</p>
+     * <p>Confirms registration of a new user.</p>
      */
     confirmSignUp(args: ConfirmSignUpCommandInput, options?: __HttpHandlerOptions): Promise<ConfirmSignUpCommandOutput>;
     confirmSignUp(args: ConfirmSignUpCommandInput, cb: (err: any, data?: ConfirmSignUpCommandOutput) => void): void;
@@ -482,7 +530,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     createGroup(args: CreateGroupCommandInput, cb: (err: any, data?: CreateGroupCommandOutput) => void): void;
     createGroup(args: CreateGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateGroupCommandOutput) => void): void;
     /**
-     * <p>Creates an identity provider for a user pool.</p>
+     * <p>Creates an IdP for a user pool.</p>
      */
     createIdentityProvider(args: CreateIdentityProviderCommandInput, options?: __HttpHandlerOptions): Promise<CreateIdentityProviderCommandOutput>;
     createIdentityProvider(args: CreateIdentityProviderCommandInput, cb: (err: any, data?: CreateIdentityProviderCommandOutput) => void): void;
@@ -500,7 +548,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     createUserImportJob(args: CreateUserImportJobCommandInput, cb: (err: any, data?: CreateUserImportJobCommandOutput) => void): void;
     createUserImportJob(args: CreateUserImportJobCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateUserImportJobCommandOutput) => void): void;
     /**
-     * <p>Creates a new Amazon Cognito user pool and sets the password policy for the pool.</p>
+     * <p>Creates a new Amazon Cognito user pool and sets the password policy for the
+     *             pool.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -525,8 +574,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     createUserPool(args: CreateUserPoolCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateUserPoolCommandOutput) => void): void;
     /**
      * <p>Creates the user pool client.</p>
-     *         <p>When you create a new user pool client, token revocation is automatically activated. For more information about revoking tokens,
-     *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
+     *         <p>When you create a new user pool client, token revocation is automatically activated.
+     *             For more information about revoking tokens, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     createUserPoolClient(args: CreateUserPoolClientCommandInput, options?: __HttpHandlerOptions): Promise<CreateUserPoolClientCommandOutput>;
     createUserPoolClient(args: CreateUserPoolClientCommandInput, cb: (err: any, data?: CreateUserPoolClientCommandOutput) => void): void;
@@ -545,7 +594,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     deleteGroup(args: DeleteGroupCommandInput, cb: (err: any, data?: DeleteGroupCommandOutput) => void): void;
     deleteGroup(args: DeleteGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteGroupCommandOutput) => void): void;
     /**
-     * <p>Deletes an identity provider for a user pool.</p>
+     * <p>Deletes an IdP for a user pool.</p>
      */
     deleteIdentityProvider(args: DeleteIdentityProviderCommandInput, options?: __HttpHandlerOptions): Promise<DeleteIdentityProviderCommandOutput>;
     deleteIdentityProvider(args: DeleteIdentityProviderCommandInput, cb: (err: any, data?: DeleteIdentityProviderCommandOutput) => void): void;
@@ -587,7 +636,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     deleteUserPoolDomain(args: DeleteUserPoolDomainCommandInput, cb: (err: any, data?: DeleteUserPoolDomainCommandOutput) => void): void;
     deleteUserPoolDomain(args: DeleteUserPoolDomainCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteUserPoolDomainCommandOutput) => void): void;
     /**
-     * <p>Gets information about a specific identity provider.</p>
+     * <p>Gets information about a specific IdP.</p>
      */
     describeIdentityProvider(args: DescribeIdentityProviderCommandInput, options?: __HttpHandlerOptions): Promise<DescribeIdentityProviderCommandOutput>;
     describeIdentityProvider(args: DescribeIdentityProviderCommandInput, cb: (err: any, data?: DescribeIdentityProviderCommandOutput) => void): void;
@@ -617,7 +666,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     describeUserPool(args: DescribeUserPoolCommandInput, cb: (err: any, data?: DescribeUserPoolCommandOutput) => void): void;
     describeUserPool(args: DescribeUserPoolCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeUserPoolCommandOutput) => void): void;
     /**
-     * <p>Client method for returning the configuration information and metadata of the specified user pool app client.</p>
+     * <p>Client method for returning the configuration information and metadata of the
+     *             specified user pool app client.</p>
      */
     describeUserPoolClient(args: DescribeUserPoolClientCommandInput, options?: __HttpHandlerOptions): Promise<DescribeUserPoolClientCommandOutput>;
     describeUserPoolClient(args: DescribeUserPoolClientCommandInput, cb: (err: any, data?: DescribeUserPoolClientCommandOutput) => void): void;
@@ -635,14 +685,14 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     forgetDevice(args: ForgetDeviceCommandInput, cb: (err: any, data?: ForgetDeviceCommandOutput) => void): void;
     forgetDevice(args: ForgetDeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ForgetDeviceCommandOutput) => void): void;
     /**
-     * <p>Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the
-     *             <code>Username</code> parameter, you can use the username or user alias. The method used to send the confirmation code is sent according to the
-     *             specified AccountRecoverySetting. For more information,
-     *             see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/how-to-recover-a-user-account.html">Recovering User Accounts</a>
-     *             in the <i>Amazon Cognito Developer Guide</i>. If neither a verified phone number nor a verified email exists,
-     *             an <code>InvalidParameterException</code> is thrown. To use the confirmation code for resetting the password,
-     *             call <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmForgotPassword.html">ConfirmForgotPassword</a>.
-     *         </p>
+     * <p>Calling this API causes a message to be sent to the end user with a confirmation code
+     *             that is required to change the user's password. For the <code>Username</code> parameter,
+     *             you can use the username or user alias. The method used to send the confirmation code is
+     *             sent according to the specified AccountRecoverySetting. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/how-to-recover-a-user-account.html">Recovering
+     *                 User Accounts</a> in the <i>Amazon Cognito Developer Guide</i>. If
+     *             neither a verified phone number nor a verified email exists, an
+     *                 <code>InvalidParameterException</code> is thrown. To use the confirmation code for
+     *             resetting the password, call <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmForgotPassword.html">ConfirmForgotPassword</a>. </p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -666,7 +716,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     forgotPassword(args: ForgotPasswordCommandInput, cb: (err: any, data?: ForgotPasswordCommandOutput) => void): void;
     forgotPassword(args: ForgotPasswordCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ForgotPasswordCommandOutput) => void): void;
     /**
-     * <p>Gets the header information for the comma-separated value (CSV) file to be used as input for the user import job.</p>
+     * <p>Gets the header information for the comma-separated value (CSV) file to be used as
+     *             input for the user import job.</p>
      */
     getCSVHeader(args: GetCSVHeaderCommandInput, options?: __HttpHandlerOptions): Promise<GetCSVHeaderCommandOutput>;
     getCSVHeader(args: GetCSVHeaderCommandInput, cb: (err: any, data?: GetCSVHeaderCommandOutput) => void): void;
@@ -685,7 +736,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     getGroup(args: GetGroupCommandInput, cb: (err: any, data?: GetGroupCommandOutput) => void): void;
     getGroup(args: GetGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetGroupCommandOutput) => void): void;
     /**
-     * <p>Gets the specified identity provider.</p>
+     * <p>Gets the specified IdP.</p>
      */
     getIdentityProviderByIdentifier(args: GetIdentityProviderByIdentifierCommandInput, options?: __HttpHandlerOptions): Promise<GetIdentityProviderByIdentifierCommandOutput>;
     getIdentityProviderByIdentifier(args: GetIdentityProviderByIdentifierCommandInput, cb: (err: any, data?: GetIdentityProviderByIdentifierCommandOutput) => void): void;
@@ -697,8 +748,11 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     getSigningCertificate(args: GetSigningCertificateCommandInput, cb: (err: any, data?: GetSigningCertificateCommandOutput) => void): void;
     getSigningCertificate(args: GetSigningCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetSigningCertificateCommandOutput) => void): void;
     /**
-     * <p>Gets the user interface (UI) Customization information for a particular app client's app UI, if any such information exists for the client. If nothing is set for the particular client,
-     *             but there is an existing pool level customization (the app <code>clientId</code> is <code>ALL</code>), then that information is returned. If nothing is present, then an empty shape is returned.</p>
+     * <p>Gets the user interface (UI) Customization information for a particular app client's
+     *             app UI, if any such information exists for the client. If nothing is set for the
+     *             particular client, but there is an existing pool level customization (the app
+     *                 <code>clientId</code> is <code>ALL</code>), then that information is returned. If
+     *             nothing is present, then an empty shape is returned.</p>
      */
     getUICustomization(args: GetUICustomizationCommandInput, options?: __HttpHandlerOptions): Promise<GetUICustomizationCommandOutput>;
     getUICustomization(args: GetUICustomizationCommandInput, cb: (err: any, data?: GetUICustomizationCommandOutput) => void): void;
@@ -710,7 +764,9 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     getUser(args: GetUserCommandInput, cb: (err: any, data?: GetUserCommandOutput) => void): void;
     getUser(args: GetUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetUserCommandOutput) => void): void;
     /**
-     * <p>Gets the user attribute verification code for the specified attribute name.</p>
+     * <p>Generates a user attribute verification code for the specified attribute name. Sends a
+     *             message to a user with a code that they must return in a VerifyUserAttribute
+     *             request.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -740,14 +796,18 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     getUserPoolMfaConfig(args: GetUserPoolMfaConfigCommandInput, cb: (err: any, data?: GetUserPoolMfaConfigCommandOutput) => void): void;
     getUserPoolMfaConfig(args: GetUserPoolMfaConfigCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetUserPoolMfaConfigCommandOutput) => void): void;
     /**
-     * <p>Signs out users from all devices. It also invalidates all refresh tokens issued to a user. The user's current access and ID tokens remain valid until their expiry. Access and Id tokens expire
-     *             one hour after they're issued.</p>
+     * <p>Signs out users from all devices. It also invalidates all refresh tokens that Amazon Cognito
+     *             has issued to a user. The user's current access and ID tokens remain valid until their
+     *             expiry. By default, access and ID tokens expire one hour after Amazon Cognito issues them. A user
+     *             can still use a hosted UI cookie to retrieve new tokens for the duration of the cookie
+     *             validity period of 1 hour.</p>
      */
     globalSignOut(args: GlobalSignOutCommandInput, options?: __HttpHandlerOptions): Promise<GlobalSignOutCommandOutput>;
     globalSignOut(args: GlobalSignOutCommandInput, cb: (err: any, data?: GlobalSignOutCommandOutput) => void): void;
     globalSignOut(args: GlobalSignOutCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GlobalSignOutCommandOutput) => void): void;
     /**
-     * <p>Initiates the authentication flow.</p>
+     * <p>Initiates sign-in for a user in the Amazon Cognito user directory. You can't sign in a user
+     *             with a federated IdP with <code>InitiateAuth</code>. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation.html"> Adding user pool sign-in through a third party</a>.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -771,7 +831,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     initiateAuth(args: InitiateAuthCommandInput, cb: (err: any, data?: InitiateAuthCommandOutput) => void): void;
     initiateAuth(args: InitiateAuthCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: InitiateAuthCommandOutput) => void): void;
     /**
-     * <p>Lists the devices.</p>
+     * <p>Lists the sign-in devices that Amazon Cognito has registered to the current user.</p>
      */
     listDevices(args: ListDevicesCommandInput, options?: __HttpHandlerOptions): Promise<ListDevicesCommandOutput>;
     listDevices(args: ListDevicesCommandInput, cb: (err: any, data?: ListDevicesCommandOutput) => void): void;
@@ -784,7 +844,7 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     listGroups(args: ListGroupsCommandInput, cb: (err: any, data?: ListGroupsCommandOutput) => void): void;
     listGroups(args: ListGroupsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListGroupsCommandOutput) => void): void;
     /**
-     * <p>Lists information about all identity providers for a user pool.</p>
+     * <p>Lists information about all IdPs for a user pool.</p>
      */
     listIdentityProviders(args: ListIdentityProvidersCommandInput, options?: __HttpHandlerOptions): Promise<ListIdentityProvidersCommandOutput>;
     listIdentityProviders(args: ListIdentityProvidersCommandInput, cb: (err: any, data?: ListIdentityProvidersCommandOutput) => void): void;
@@ -797,7 +857,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     listResourceServers(args: ListResourceServersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListResourceServersCommandOutput) => void): void;
     /**
      * <p>Lists the tags that are assigned to an Amazon Cognito user pool.</p>
-     *         <p>A tag is a label that you can apply to user pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria.</p>
+     *         <p>A tag is a label that you can apply to user pools to categorize and manage them in
+     *             different ways, such as by purpose, owner, environment, or other criteria.</p>
      *         <p>You can use this action up to 10 times per second, per account.</p>
      */
     listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
@@ -835,7 +896,8 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     listUsersInGroup(args: ListUsersInGroupCommandInput, cb: (err: any, data?: ListUsersInGroupCommandOutput) => void): void;
     listUsersInGroup(args: ListUsersInGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListUsersInGroupCommandOutput) => void): void;
     /**
-     * <p>Resends the confirmation (for confirmation of registration) to a specific user in the user pool.</p>
+     * <p>Resends the confirmation (for confirmation of registration) to a specific user in the
+     *             user pool.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -883,36 +945,50 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     respondToAuthChallenge(args: RespondToAuthChallengeCommandInput, cb: (err: any, data?: RespondToAuthChallengeCommandOutput) => void): void;
     respondToAuthChallenge(args: RespondToAuthChallengeCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RespondToAuthChallengeCommandOutput) => void): void;
     /**
-     * <p>Revokes all of the access tokens generated by the specified refresh token. After the token is revoked, you can't use the revoked token to access Amazon Cognito authenticated APIs.</p>
+     * <p>Revokes all of the access tokens generated by the specified refresh token. After the
+     *             token is revoked, you can't use the revoked token to access Amazon Cognito authenticated
+     *             APIs.</p>
      */
     revokeToken(args: RevokeTokenCommandInput, options?: __HttpHandlerOptions): Promise<RevokeTokenCommandOutput>;
     revokeToken(args: RevokeTokenCommandInput, cb: (err: any, data?: RevokeTokenCommandOutput) => void): void;
     revokeToken(args: RevokeTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RevokeTokenCommandOutput) => void): void;
     /**
-     * <p>Configures actions on detected risks. To delete the risk configuration for <code>UserPoolId</code> or <code>ClientId</code>, pass null values for all four configuration types.</p>
-     *         <p>To activate Amazon Cognito advanced security features, update the user pool to include the <code>UserPoolAddOns</code> key<code>AdvancedSecurityMode</code>.</p>
+     * <p>Configures actions on detected risks. To delete the risk configuration for
+     *                 <code>UserPoolId</code> or <code>ClientId</code>, pass null values for all four
+     *             configuration types.</p>
+     *         <p>To activate Amazon Cognito advanced security features, update the user pool to include the
+     *                 <code>UserPoolAddOns</code> key<code>AdvancedSecurityMode</code>.</p>
      */
     setRiskConfiguration(args: SetRiskConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<SetRiskConfigurationCommandOutput>;
     setRiskConfiguration(args: SetRiskConfigurationCommandInput, cb: (err: any, data?: SetRiskConfigurationCommandOutput) => void): void;
     setRiskConfiguration(args: SetRiskConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetRiskConfigurationCommandOutput) => void): void;
     /**
-     * <p>Sets the user interface (UI) customization information for a user pool's built-in app UI.</p>
-     *         <p>You can specify app UI customization settings for a single client (with a specific <code>clientId</code>) or for all clients (by setting the <code>clientId</code>
-     *             to <code>ALL</code>). If you specify <code>ALL</code>, the default configuration is used for every client that has no previously set UI customization. If you specify UI
-     *             customization settings for a particular client, it will no longer return to the <code>ALL</code> configuration.</p>
-     *          <note>
-     *             <p>To use this API, your user pool must have a domain associated with it. Otherwise, there is no place to host the app's pages, and the service will throw an error.</p>
-     *          </note>
+     * <p>Sets the user interface (UI) customization information for a user pool's built-in app
+     *             UI.</p>
+     *         <p>You can specify app UI customization settings for a single client (with a specific
+     *                 <code>clientId</code>) or for all clients (by setting the <code>clientId</code> to
+     *                 <code>ALL</code>). If you specify <code>ALL</code>, the default configuration is
+     *             used for every client that has no previously set UI customization. If you specify UI
+     *             customization settings for a particular client, it will no longer return to the
+     *                 <code>ALL</code> configuration.</p>
+     *         <note>
+     *             <p>To use this API, your user pool must have a domain associated with it. Otherwise,
+     *                 there is no place to host the app's pages, and the service will throw an
+     *                 error.</p>
+     *         </note>
      */
     setUICustomization(args: SetUICustomizationCommandInput, options?: __HttpHandlerOptions): Promise<SetUICustomizationCommandOutput>;
     setUICustomization(args: SetUICustomizationCommandInput, cb: (err: any, data?: SetUICustomizationCommandOutput) => void): void;
     setUICustomization(args: SetUICustomizationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetUICustomizationCommandOutput) => void): void;
     /**
-     * <p>Set the user's multi-factor authentication (MFA) method preference, including which MFA factors are activated and if any are preferred.
-     *             Only one factor can be set as preferred. The preferred MFA factor will be used to authenticate a user if multiple factors are activated.
-     *             If multiple options are activated and no preference is set, a challenge to choose an MFA option will be returned during sign-in. If an
-     *             MFA type is activated for a user, the user will be prompted for MFA during all sign-in attempts unless device tracking is turned on and
-     *             the device has been trusted. If you want MFA to be applied selectively based on the assessed risk level of sign-in attempts, deactivate
+     * <p>Set the user's multi-factor authentication (MFA) method preference, including which
+     *             MFA factors are activated and if any are preferred. Only one factor can be set as
+     *             preferred. The preferred MFA factor will be used to authenticate a user if multiple
+     *             factors are activated. If multiple options are activated and no preference is set, a
+     *             challenge to choose an MFA option will be returned during sign-in. If an MFA type is
+     *             activated for a user, the user will be prompted for MFA during all sign-in attempts
+     *             unless device tracking is turned on and the device has been trusted. If you want MFA to
+     *             be applied selectively based on the assessed risk level of sign-in attempts, deactivate
      *             MFA for users and turn on Adaptive Authentication for the user pool.</p>
      */
     setUserMFAPreference(args: SetUserMFAPreferenceCommandInput, options?: __HttpHandlerOptions): Promise<SetUserMFAPreferenceCommandOutput>;
@@ -944,14 +1020,16 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     setUserPoolMfaConfig(args: SetUserPoolMfaConfigCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetUserPoolMfaConfigCommandOutput) => void): void;
     /**
      * <p>
-     *             <i>This action is no longer supported.</i> You can use it to configure only SMS MFA. You can't use it to configure time-based one-time password (TOTP) software token MFA.
-     *             To configure either type of MFA, use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserMFAPreference.html">SetUserMFAPreference</a> instead.</p>
+     *             <i>This action is no longer supported.</i> You can use it to configure
+     *             only SMS MFA. You can't use it to configure time-based one-time password (TOTP) software
+     *             token MFA. To configure either type of MFA, use <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserMFAPreference.html">SetUserMFAPreference</a> instead.</p>
      */
     setUserSettings(args: SetUserSettingsCommandInput, options?: __HttpHandlerOptions): Promise<SetUserSettingsCommandOutput>;
     setUserSettings(args: SetUserSettingsCommandInput, cb: (err: any, data?: SetUserSettingsCommandOutput) => void): void;
     setUserSettings(args: SetUserSettingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetUserSettingsCommandOutput) => void): void;
     /**
-     * <p>Registers the user in the specified user pool and creates a user name, password, and user attributes.</p>
+     * <p>Registers the user in the specified user pool and creates a user name, password, and
+     *             user attributes.</p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -987,26 +1065,35 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     stopUserImportJob(args: StopUserImportJobCommandInput, cb: (err: any, data?: StopUserImportJobCommandOutput) => void): void;
     stopUserImportJob(args: StopUserImportJobCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: StopUserImportJobCommandOutput) => void): void;
     /**
-     * <p>Assigns a set of tags to an Amazon Cognito user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.</p>
-     *         <p>Each tag consists of a key and value, both of which you define. A key is a general category for more specific values. For example, if you have two versions of a user pool,
-     *             one for testing and another for production, you might assign an <code>Environment</code> tag key to both user pools. The value of this key might be <code>Test</code> for
-     *             one user pool, and <code>Production</code> for the other.</p>
-     *         <p>Tags are useful for cost tracking and access control. You can activate your tags so that they appear on the Billing and Cost Management console, where you can track the costs associated with
-     *             your user pools. In an Identity and Access Management policy, you can constrain permissions for user pools based on specific tags or tag values.</p>
-     *         <p>You can use this action up to 5 times per second, per account. A user pool can have as many as 50 tags.</p>
+     * <p>Assigns a set of tags to an Amazon Cognito user pool. A tag is a label that you can use to
+     *             categorize and manage user pools in different ways, such as by purpose, owner,
+     *             environment, or other criteria.</p>
+     *         <p>Each tag consists of a key and value, both of which you define. A key is a general
+     *             category for more specific values. For example, if you have two versions of a user pool,
+     *             one for testing and another for production, you might assign an <code>Environment</code>
+     *             tag key to both user pools. The value of this key might be <code>Test</code> for one
+     *             user pool, and <code>Production</code> for the other.</p>
+     *         <p>Tags are useful for cost tracking and access control. You can activate your tags so
+     *             that they appear on the Billing and Cost Management console, where you can track the
+     *             costs associated with your user pools. In an Identity and Access Management policy, you can constrain
+     *             permissions for user pools based on specific tags or tag values.</p>
+     *         <p>You can use this action up to 5 times per second, per account. A user pool can have as
+     *             many as 50 tags.</p>
      */
     tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
     tagResource(args: TagResourceCommandInput, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
     tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
     /**
-     * <p>Removes the specified tags from an Amazon Cognito user pool. You can use this action up to 5 times per second, per account.</p>
+     * <p>Removes the specified tags from an Amazon Cognito user pool. You can use this action up to 5
+     *             times per second, per account.</p>
      */
     untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
     untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
     untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
     /**
-     * <p>Provides the feedback for an authentication event, whether it was from a valid user or not. This feedback is used for improving the risk evaluation decision for the user pool as part
-     *             of Amazon Cognito advanced security.</p>
+     * <p>Provides the feedback for an authentication event, whether it was from a valid user or
+     *             not. This feedback is used for improving the risk evaluation decision for the user pool
+     *             as part of Amazon Cognito advanced security.</p>
      */
     updateAuthEventFeedback(args: UpdateAuthEventFeedbackCommandInput, options?: __HttpHandlerOptions): Promise<UpdateAuthEventFeedbackCommandOutput>;
     updateAuthEventFeedback(args: UpdateAuthEventFeedbackCommandInput, cb: (err: any, data?: UpdateAuthEventFeedbackCommandOutput) => void): void;
@@ -1025,16 +1112,17 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     updateGroup(args: UpdateGroupCommandInput, cb: (err: any, data?: UpdateGroupCommandOutput) => void): void;
     updateGroup(args: UpdateGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateGroupCommandOutput) => void): void;
     /**
-     * <p>Updates identity provider information for a user pool.</p>
+     * <p>Updates IdP information for a user pool.</p>
      */
     updateIdentityProvider(args: UpdateIdentityProviderCommandInput, options?: __HttpHandlerOptions): Promise<UpdateIdentityProviderCommandOutput>;
     updateIdentityProvider(args: UpdateIdentityProviderCommandInput, cb: (err: any, data?: UpdateIdentityProviderCommandOutput) => void): void;
     updateIdentityProvider(args: UpdateIdentityProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateIdentityProviderCommandOutput) => void): void;
     /**
      * <p>Updates the name and scopes of resource server. All other fields are read-only.</p>
-     *          <important>
-     *             <p>If you don't provide a value for an attribute, it is set to the default value.</p>
-     *          </important>
+     *         <important>
+     *             <p>If you don't provide a value for an attribute, it is set to the default
+     *                 value.</p>
+     *         </important>
      */
     updateResourceServer(args: UpdateResourceServerCommandInput, options?: __HttpHandlerOptions): Promise<UpdateResourceServerCommandOutput>;
     updateResourceServer(args: UpdateResourceServerCommandInput, cb: (err: any, data?: UpdateResourceServerCommandOutput) => void): void;
@@ -1064,9 +1152,10 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     updateUserAttributes(args: UpdateUserAttributesCommandInput, cb: (err: any, data?: UpdateUserAttributesCommandOutput) => void): void;
     updateUserAttributes(args: UpdateUserAttributesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateUserAttributesCommandOutput) => void): void;
     /**
-     * <p>Updates the specified user pool with the specified attributes. You can get a list of the current user pool settings using
-     *             <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html">DescribeUserPool</a>.
-     *             If you don't provide a value for an attribute, it will be set to the default value.</p>
+     * <p>Updates the specified user pool with the specified attributes. You can get a list of
+     *             the current user pool settings using <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html">DescribeUserPool</a>. If you don't provide a value for an attribute, it will be
+     *             set to the default value.
+     *         </p>
      *
      *          <note>
      *             <p>This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers
@@ -1090,43 +1179,58 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     updateUserPool(args: UpdateUserPoolCommandInput, cb: (err: any, data?: UpdateUserPoolCommandOutput) => void): void;
     updateUserPool(args: UpdateUserPoolCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateUserPoolCommandOutput) => void): void;
     /**
-     * <p>Updates the specified user pool app client with the specified attributes. You can get a list of the current user pool app client settings using
-     *             <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolClient.html">DescribeUserPoolClient</a>.</p>
-     *          <important>
-     *             <p>If you don't provide a value for an attribute, it will be set to the default value.</p>
-     *          </important>
-     *         <p>You can also use this operation to enable token revocation for user pool clients. For more information about revoking tokens,
-     *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
+     * <p>Updates the specified user pool app client with the specified attributes. You can get
+     *             a list of the current user pool app client settings using <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolClient.html">DescribeUserPoolClient</a>.</p>
+     *         <important>
+     *             <p>If you don't provide a value for an attribute, it will be set to the default
+     *                 value.</p>
+     *         </important>
+     *         <p>You can also use this operation to enable token revocation for user pool clients. For
+     *             more information about revoking tokens, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     updateUserPoolClient(args: UpdateUserPoolClientCommandInput, options?: __HttpHandlerOptions): Promise<UpdateUserPoolClientCommandOutput>;
     updateUserPoolClient(args: UpdateUserPoolClientCommandInput, cb: (err: any, data?: UpdateUserPoolClientCommandOutput) => void): void;
     updateUserPoolClient(args: UpdateUserPoolClientCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateUserPoolClientCommandOutput) => void): void;
     /**
-     * <p>Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user pool.</p>
-     *         <p>You can use this operation to provide the Amazon Resource Name (ARN) of a new certificate to Amazon Cognito. You can't use it to change the domain for a user pool.</p>
-     *         <p>A custom domain is used to host the Amazon Cognito hosted UI, which provides sign-up and sign-in pages for your application. When you set up a custom domain, you provide a certificate that you
-     *             manage with Certificate Manager (ACM). When necessary, you can use this operation to change the certificate that you applied to your custom domain.</p>
-     *         <p>Usually, this is unnecessary following routine certificate renewal with ACM. When you renew your existing certificate in ACM, the ARN for your certificate remains the same,
-     *             and your custom domain uses the new certificate automatically.</p>
-     *         <p>However, if you replace your existing certificate with a new one, ACM gives the new certificate a new ARN. To apply the new certificate to your custom domain, you must provide
-     *             this ARN to Amazon Cognito.</p>
-     *         <p>When you add your new certificate in ACM, you must choose US East (N. Virginia) as the Amazon Web Services Region.</p>
-     *         <p>After you submit your request, Amazon Cognito requires up to 1 hour to distribute your new certificate to your custom domain.</p>
-     *         <p>For more information about adding a custom domain to your user pool,
-     *             see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.html">Using Your Own Domain for the Hosted UI</a>.</p>
+     * <p>Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user
+     *             pool.</p>
+     *         <p>You can use this operation to provide the Amazon Resource Name (ARN) of a new
+     *             certificate to Amazon Cognito. You can't use it to change the domain for a user pool.</p>
+     *         <p>A custom domain is used to host the Amazon Cognito hosted UI, which provides sign-up and
+     *             sign-in pages for your application. When you set up a custom domain, you provide a
+     *             certificate that you manage with Certificate Manager (ACM). When necessary, you can use this
+     *             operation to change the certificate that you applied to your custom domain.</p>
+     *         <p>Usually, this is unnecessary following routine certificate renewal with ACM. When
+     *             you renew your existing certificate in ACM, the ARN for your certificate remains the
+     *             same, and your custom domain uses the new certificate automatically.</p>
+     *         <p>However, if you replace your existing certificate with a new one, ACM gives the new
+     *             certificate a new ARN. To apply the new certificate to your custom domain, you must
+     *             provide this ARN to Amazon Cognito.</p>
+     *         <p>When you add your new certificate in ACM, you must choose US East (N. Virginia) as
+     *             the Amazon Web Services Region.</p>
+     *         <p>After you submit your request, Amazon Cognito requires up to 1 hour to distribute your new
+     *             certificate to your custom domain.</p>
+     *         <p>For more information about adding a custom domain to your user pool, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.html">Using Your Own Domain for the Hosted UI</a>.</p>
      */
     updateUserPoolDomain(args: UpdateUserPoolDomainCommandInput, options?: __HttpHandlerOptions): Promise<UpdateUserPoolDomainCommandOutput>;
     updateUserPoolDomain(args: UpdateUserPoolDomainCommandInput, cb: (err: any, data?: UpdateUserPoolDomainCommandOutput) => void): void;
     updateUserPoolDomain(args: UpdateUserPoolDomainCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateUserPoolDomainCommandOutput) => void): void;
     /**
-     * <p>Use this API to register a user's entered time-based one-time password (TOTP) code and mark the user's software token MFA status as "verified" if successful. The request takes an access
-     *             token or a session string, but not both.</p>
+     * <p>Use this API to register a user's entered time-based one-time password (TOTP) code and
+     *             mark the user's software token MFA status as "verified" if successful. The request takes
+     *             an access token or a session string, but not both.</p>
      */
     verifySoftwareToken(args: VerifySoftwareTokenCommandInput, options?: __HttpHandlerOptions): Promise<VerifySoftwareTokenCommandOutput>;
     verifySoftwareToken(args: VerifySoftwareTokenCommandInput, cb: (err: any, data?: VerifySoftwareTokenCommandOutput) => void): void;
     verifySoftwareToken(args: VerifySoftwareTokenCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: VerifySoftwareTokenCommandOutput) => void): void;
     /**
      * <p>Verifies the specified user attributes in the user pool.</p>
+     *         <p>
+     *             If your user pool requires verification before Amazon Cognito updates the attribute value,
+     *             VerifyUserAttribute updates the affected attribute to its pending value. For more information,
+     *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserAttributeUpdateSettingsType.html">
+     *             UserAttributeUpdateSettingsType</a>.
+     *         </p>
      */
     verifyUserAttribute(args: VerifyUserAttributeCommandInput, options?: __HttpHandlerOptions): Promise<VerifyUserAttributeCommandOutput>;
     verifyUserAttribute(args: VerifyUserAttributeCommandInput, cb: (err: any, data?: VerifyUserAttributeCommandOutput) => void): void;