@aws-sdk/client-cognito-identity-provider 3.99.0 → 3.105.0

package/CHANGELOG.md

@@ -3,6 +3,36 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [3.105.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.104.0...v3.105.0) (2022-06-06)
+
+
+### Features
+
+* **clients:** support recursion detection in Lambda ([#3654](https://github.com/aws/aws-sdk-js-v3/issues/3654)) ([ecfe46e](https://github.com/aws/aws-sdk-js-v3/commit/ecfe46ea1fd8b6e3812b75b3dc6c03554fb4b3fa))
+
+
+
+
+
+# [3.102.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.101.0...v3.102.0) (2022-05-31)
+
+
+### Features
+
+* **client-cognito-identity-provider:** Amazon Cognito now supports IP Address propagation for all unauthenticated APIs (e.g. SignUp, ForgotPassword). ([d285512](https://github.com/aws/aws-sdk-js-v3/commit/d28551296728adfae6dfbf6d0ea8d6c903f4a059))
+
+
+
+
+
+# [3.100.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.99.0...v3.100.0) (2022-05-26)
+
+**Note:** Version bump only for package @aws-sdk/client-cognito-identity-provider
+
+
+
+
+
 # [3.99.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.98.0...v3.99.0) (2022-05-25)
 
 **Note:** Version bump only for package @aws-sdk/client-cognito-identity-provider

package/dist-cjs/CognitoIdentityProviderClient.js

@@ -5,6 +5,7 @@ const config_resolver_1 = require("@aws-sdk/config-resolver");
 const middleware_content_length_1 = require("@aws-sdk/middleware-content-length");
 const middleware_host_header_1 = require("@aws-sdk/middleware-host-header");
 const middleware_logger_1 = require("@aws-sdk/middleware-logger");
+const middleware_recursion_detection_1 = require("@aws-sdk/middleware-recursion-detection");
 const middleware_retry_1 = require("@aws-sdk/middleware-retry");
 const middleware_signing_1 = require("@aws-sdk/middleware-signing");
 const middleware_user_agent_1 = require("@aws-sdk/middleware-user-agent");
@@ -25,6 +26,7 @@ class CognitoIdentityProviderClient extends smithy_client_1.Client {
         this.middlewareStack.use((0, middleware_content_length_1.getContentLengthPlugin)(this.config));
         this.middlewareStack.use((0, middleware_host_header_1.getHostHeaderPlugin)(this.config));
         this.middlewareStack.use((0, middleware_logger_1.getLoggerPlugin)(this.config));
+        this.middlewareStack.use((0, middleware_recursion_detection_1.getRecursionDetectionPlugin)(this.config));
         this.middlewareStack.use((0, middleware_user_agent_1.getUserAgentPlugin)(this.config));
     }
     destroy() {

package/dist-cjs/protocols/Aws_json1_1.js

@@ -7641,6 +7641,10 @@ const serializeAws_json1_1CreateUserPoolClientRequest = (input, context) => {
         ...(input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName }),
         ...(input.DefaultRedirectURI !== undefined &&
             input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI }),
+        ...(input.EnablePropagateAdditionalUserContextData !== undefined &&
+            input.EnablePropagateAdditionalUserContextData !== null && {
+            EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+        }),
         ...(input.EnableTokenRevocation !== undefined &&
             input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation }),
         ...(input.ExplicitAuthFlows !== undefined &&
@@ -8706,6 +8710,10 @@ const serializeAws_json1_1UpdateUserPoolClientRequest = (input, context) => {
         ...(input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName }),
         ...(input.DefaultRedirectURI !== undefined &&
             input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI }),
+        ...(input.EnablePropagateAdditionalUserContextData !== undefined &&
+            input.EnablePropagateAdditionalUserContextData !== null && {
+            EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+        }),
         ...(input.EnableTokenRevocation !== undefined &&
             input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation }),
         ...(input.ExplicitAuthFlows !== undefined &&
@@ -8821,6 +8829,7 @@ const serializeAws_json1_1UserAttributeUpdateSettingsType = (input, context) =>
 const serializeAws_json1_1UserContextDataType = (input, context) => {
     return {
         ...(input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData }),
+        ...(input.IpAddress !== undefined && input.IpAddress !== null && { IpAddress: input.IpAddress }),
     };
 };
 const serializeAws_json1_1UsernameAttributesListType = (input, context) => {
@@ -10551,6 +10560,7 @@ const deserializeAws_json1_1UserPoolClientType = (output, context) => {
             ? (0, smithy_client_1.expectNonNull)((0, smithy_client_1.parseEpochTimestamp)((0, smithy_client_1.expectNumber)(output.CreationDate)))
             : undefined,
         DefaultRedirectURI: (0, smithy_client_1.expectString)(output.DefaultRedirectURI),
+        EnablePropagateAdditionalUserContextData: (0, smithy_client_1.expectBoolean)(output.EnablePropagateAdditionalUserContextData),
         EnableTokenRevocation: (0, smithy_client_1.expectBoolean)(output.EnableTokenRevocation),
         ExplicitAuthFlows: output.ExplicitAuthFlows !== undefined && output.ExplicitAuthFlows !== null
             ? deserializeAws_json1_1ExplicitAuthFlowsListType(output.ExplicitAuthFlows, context)

package/dist-es/CognitoIdentityProviderClient.js

@@ -3,6 +3,7 @@ import { resolveEndpointsConfig, resolveRegionConfig, } from "@aws-sdk/config-re
 import { getContentLengthPlugin } from "@aws-sdk/middleware-content-length";
 import { getHostHeaderPlugin, resolveHostHeaderConfig, } from "@aws-sdk/middleware-host-header";
 import { getLoggerPlugin } from "@aws-sdk/middleware-logger";
+import { getRecursionDetectionPlugin } from "@aws-sdk/middleware-recursion-detection";
 import { getRetryPlugin, resolveRetryConfig } from "@aws-sdk/middleware-retry";
 import { resolveAwsAuthConfig } from "@aws-sdk/middleware-signing";
 import { getUserAgentPlugin, resolveUserAgentConfig, } from "@aws-sdk/middleware-user-agent";
@@ -25,6 +26,7 @@ var CognitoIdentityProviderClient = (function (_super) {
         _this.middlewareStack.use(getContentLengthPlugin(_this.config));
         _this.middlewareStack.use(getHostHeaderPlugin(_this.config));
         _this.middlewareStack.use(getLoggerPlugin(_this.config));
+        _this.middlewareStack.use(getRecursionDetectionPlugin(_this.config));
         _this.middlewareStack.use(getUserAgentPlugin(_this.config));
         return _this;
     }

package/dist-es/protocols/Aws_json1_1.js

@@ -9615,7 +9615,7 @@ var serializeAws_json1_1CreateUserImportJobRequest = function (input, context) {
         input.CloudWatchLogsRoleArn !== null && { CloudWatchLogsRoleArn: input.CloudWatchLogsRoleArn })), (input.JobName !== undefined && input.JobName !== null && { JobName: input.JobName })), (input.UserPoolId !== undefined && input.UserPoolId !== null && { UserPoolId: input.UserPoolId }));
 };
 var serializeAws_json1_1CreateUserPoolClientRequest = function (input, context) {
-    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
+    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
         input.AccessTokenValidity !== null && { AccessTokenValidity: input.AccessTokenValidity })), (input.AllowedOAuthFlows !== undefined &&
         input.AllowedOAuthFlows !== null && {
         AllowedOAuthFlows: serializeAws_json1_1OAuthFlowsType(input.AllowedOAuthFlows, context),
@@ -9632,7 +9632,10 @@ var serializeAws_json1_1CreateUserPoolClientRequest = function (input, context)
         input.CallbackURLs !== null && {
         CallbackURLs: serializeAws_json1_1CallbackURLsListType(input.CallbackURLs, context),
     })), (input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName })), (input.DefaultRedirectURI !== undefined &&
-        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnableTokenRevocation !== undefined &&
+        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnablePropagateAdditionalUserContextData !== undefined &&
+        input.EnablePropagateAdditionalUserContextData !== null && {
+        EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+    })), (input.EnableTokenRevocation !== undefined &&
         input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation })), (input.ExplicitAuthFlows !== undefined &&
         input.ExplicitAuthFlows !== null && {
         ExplicitAuthFlows: serializeAws_json1_1ExplicitAuthFlowsListType(input.ExplicitAuthFlows, context),
@@ -10303,7 +10306,7 @@ var serializeAws_json1_1UpdateUserAttributesRequest = function (input, context)
     }));
 };
 var serializeAws_json1_1UpdateUserPoolClientRequest = function (input, context) {
-    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
+    return __assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign(__assign({}, (input.AccessTokenValidity !== undefined &&
         input.AccessTokenValidity !== null && { AccessTokenValidity: input.AccessTokenValidity })), (input.AllowedOAuthFlows !== undefined &&
         input.AllowedOAuthFlows !== null && {
         AllowedOAuthFlows: serializeAws_json1_1OAuthFlowsType(input.AllowedOAuthFlows, context),
@@ -10320,7 +10323,10 @@ var serializeAws_json1_1UpdateUserPoolClientRequest = function (input, context)
         input.CallbackURLs !== null && {
         CallbackURLs: serializeAws_json1_1CallbackURLsListType(input.CallbackURLs, context),
     })), (input.ClientId !== undefined && input.ClientId !== null && { ClientId: input.ClientId })), (input.ClientName !== undefined && input.ClientName !== null && { ClientName: input.ClientName })), (input.DefaultRedirectURI !== undefined &&
-        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnableTokenRevocation !== undefined &&
+        input.DefaultRedirectURI !== null && { DefaultRedirectURI: input.DefaultRedirectURI })), (input.EnablePropagateAdditionalUserContextData !== undefined &&
+        input.EnablePropagateAdditionalUserContextData !== null && {
+        EnablePropagateAdditionalUserContextData: input.EnablePropagateAdditionalUserContextData,
+    })), (input.EnableTokenRevocation !== undefined &&
         input.EnableTokenRevocation !== null && { EnableTokenRevocation: input.EnableTokenRevocation })), (input.ExplicitAuthFlows !== undefined &&
         input.ExplicitAuthFlows !== null && {
         ExplicitAuthFlows: serializeAws_json1_1ExplicitAuthFlowsListType(input.ExplicitAuthFlows, context),
@@ -10397,7 +10403,7 @@ var serializeAws_json1_1UserAttributeUpdateSettingsType = function (input, conte
     }));
 };
 var serializeAws_json1_1UserContextDataType = function (input, context) {
-    return __assign({}, (input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData }));
+    return __assign(__assign({}, (input.EncodedData !== undefined && input.EncodedData !== null && { EncodedData: input.EncodedData })), (input.IpAddress !== undefined && input.IpAddress !== null && { IpAddress: input.IpAddress }));
 };
 var serializeAws_json1_1UsernameAttributesListType = function (input, context) {
     return input
@@ -12101,6 +12107,7 @@ var deserializeAws_json1_1UserPoolClientType = function (output, context) {
             ? __expectNonNull(__parseEpochTimestamp(__expectNumber(output.CreationDate)))
             : undefined,
         DefaultRedirectURI: __expectString(output.DefaultRedirectURI),
+        EnablePropagateAdditionalUserContextData: __expectBoolean(output.EnablePropagateAdditionalUserContextData),
         EnableTokenRevocation: __expectBoolean(output.EnableTokenRevocation),
         ExplicitAuthFlows: output.ExplicitAuthFlows !== undefined && output.ExplicitAuthFlows !== null
             ? deserializeAws_json1_1ExplicitAuthFlowsListType(output.ExplicitAuthFlows, context)

package/dist-types/CognitoIdentityProvider.d.ts

@@ -483,15 +483,22 @@ export declare class CognitoIdentityProvider extends CognitoIdentityProviderClie
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     adminUserGlobalSignOut(args: AdminUserGlobalSignOutCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AdminUserGlobalSignOutCommandOutput) => void): void;
     /**
-     * <p>Returns a unique generated shared secret key code for the user account. The request
-     *             takes an access token or a session string, but not both.</p>
+     * <p>Begins setup of time-based one-time password multi-factor authentication (TOTP MFA)
+     *             for a user, with a unique private key that Amazon Cognito generates and returns in the API
+     *             response. You can authorize an <code>AssociateSoftwareToken</code> request with either
+     *             the user's access token, or a session string from a challenge response that you received
+     *             from Amazon Cognito.</p>
      *         <note>
-     *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software
-     *                 token from the user account. If the user doesn't subsequently verify the software
-     *                 token, their account is set up to authenticate without MFA. If MFA config is set to
-     *                 Optional at the user pool level, the user can then log in without MFA. However, if
-     *                 MFA is set to Required for the user pool, the user is asked to set up a new software
-     *                 token MFA during sign-in.</p>
+     *             <p>Amazon Cognito disassociates an existing software token when you verify the new token in a
+     *                     <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html"> VerifySoftwareToken</a> API request. If you don't verify the software
+     *                 token and your user pool doesn't require MFA, the user can then authenticate with
+     *                 user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito
+     *                 generates an <code>MFA_SETUP</code> or <code>SOFTWARE_TOKEN_SETUP</code> challenge
+     *                 each time your user signs. Complete setup with <code>AssociateSoftwareToken</code>
+     *                 and <code>VerifySoftwareToken</code>.</p>
+     *             <p>After you set up software token MFA for your user, Amazon Cognito generates a
+     *                     <code>SOFTWARE_TOKEN_MFA</code> challenge when they authenticate. Respond to
+     *                 this challenge with your user's TOTP.</p>
      *         </note>
      */
     associateSoftwareToken(args: AssociateSoftwareTokenCommandInput, options?: __HttpHandlerOptions): Promise<AssociateSoftwareTokenCommandOutput>;

package/dist-types/commands/AssociateSoftwareTokenCommand.d.ts

@@ -7,15 +7,22 @@ export interface AssociateSoftwareTokenCommandInput extends AssociateSoftwareTok
 export interface AssociateSoftwareTokenCommandOutput extends AssociateSoftwareTokenResponse, __MetadataBearer {
 }
 /**
- * <p>Returns a unique generated shared secret key code for the user account. The request
- *             takes an access token or a session string, but not both.</p>
+ * <p>Begins setup of time-based one-time password multi-factor authentication (TOTP MFA)
+ *             for a user, with a unique private key that Amazon Cognito generates and returns in the API
+ *             response. You can authorize an <code>AssociateSoftwareToken</code> request with either
+ *             the user's access token, or a session string from a challenge response that you received
+ *             from Amazon Cognito.</p>
  *         <note>
- *             <p>Calling AssociateSoftwareToken immediately disassociates the existing software
- *                 token from the user account. If the user doesn't subsequently verify the software
- *                 token, their account is set up to authenticate without MFA. If MFA config is set to
- *                 Optional at the user pool level, the user can then log in without MFA. However, if
- *                 MFA is set to Required for the user pool, the user is asked to set up a new software
- *                 token MFA during sign-in.</p>
+ *             <p>Amazon Cognito disassociates an existing software token when you verify the new token in a
+ *                     <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html"> VerifySoftwareToken</a> API request. If you don't verify the software
+ *                 token and your user pool doesn't require MFA, the user can then authenticate with
+ *                 user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito
+ *                 generates an <code>MFA_SETUP</code> or <code>SOFTWARE_TOKEN_SETUP</code> challenge
+ *                 each time your user signs. Complete setup with <code>AssociateSoftwareToken</code>
+ *                 and <code>VerifySoftwareToken</code>.</p>
+ *             <p>After you set up software token MFA for your user, Amazon Cognito generates a
+ *                     <code>SOFTWARE_TOKEN_MFA</code> challenge when they authenticate. Respond to
+ *                 this challenge with your user's TOTP.</p>
  *         </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/models/models_0.d.ts

@@ -467,9 +467,7 @@ export interface AdminConfirmSignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminConfirmSignUpRequest {
     /**
@@ -712,9 +710,7 @@ export interface AdminCreateUserRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminCreateUserRequest {
     /**
@@ -1081,8 +1077,8 @@ export declare namespace AdminDisableProviderForUserResponse {
 }
 /**
  * <p>This exception is thrown when a user tries to confirm the account with an email
- *             address or phone number that has already been supplied as an alias from a different
- *             account. This exception indicates that an account with this email address or phone
+ *             address or phone number that has already been supplied as an alias for a different
+ *             user profile. This exception indicates that an account with this email address or phone
  *             already exists in a user pool that you've configured to use email address or phone
  *             number as a sign-in alias.</p>
  */
@@ -1408,7 +1404,7 @@ export declare namespace HttpHeader {
  */
 export interface ContextDataType {
     /**
-     * <p>Source IP address of your user.</p>
+     * <p>The source IP address of your user's device.</p>
      */
     IpAddress: string | undefined;
     /**
@@ -1424,8 +1420,8 @@ export interface ContextDataType {
      */
     HttpHeaders: HttpHeader[] | undefined;
     /**
-     * <p>Encoded data containing device fingerprinting details collected using the Amazon Cognito
-     *             context data collection library.</p>
+     * <p>Encoded device-fingerprint details that your app collected with the Amazon Cognito
+     *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      */
     EncodedData?: string;
 }
@@ -1530,9 +1526,7 @@ export interface AdminInitiateAuthRequest {
      *             </li>
      *          </ul>
      */
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -1603,17 +1597,16 @@ export interface AdminInitiateAuthRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     /**
      * <p>The analytics metadata for collecting Amazon Pinpoint metrics for
      *                 <code>AdminInitiateAuth</code> calls.</p>
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     ContextData?: ContextDataType;
 }
@@ -1801,9 +1794,7 @@ export interface AdminInitiateAuthResponse {
      *                 <code>AdminRespondToAuthChallenge</code> API <code>ChallengeResponses</code>, the
      *                 <code>USERNAME</code> attribute can't be an alias.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result of the authentication response. This is only returned if the caller doesn't
      *             need to pass another challenge. If the caller does need to pass another challenge before
@@ -2111,7 +2102,7 @@ export declare namespace ChallengeResponseType {
  */
 export interface EventContextDataType {
     /**
-     * <p>The user's IP address.</p>
+     * <p>The source IP address of your user's device.</p>
      */
     IpAddress?: string;
     /**
@@ -2348,9 +2339,7 @@ export interface AdminResetUserPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminResetUserPasswordRequest {
     /**
@@ -2457,9 +2446,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *                 <code>USERNAMEUSER_ID_FOR_SRP</code> attribute. This happens even if you specified
      *             an alias in your call to <code>AdminInitiateAuth</code>.</p>
      */
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     /**
      * <p>The session that should be passed both ways in challenge-response calls to the
      *             service. If an <code>InitiateAuth</code> or <code>RespondToAuthChallenge</code> API call
@@ -2474,8 +2461,9 @@ export interface AdminRespondToAuthChallengeRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     ContextData?: ContextDataType;
     /**
@@ -2540,9 +2528,7 @@ export interface AdminRespondToAuthChallengeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminRespondToAuthChallengeRequest {
     /**
@@ -2568,9 +2554,7 @@ export interface AdminRespondToAuthChallengeResponse {
     /**
      * <p>The challenge parameters. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html">AdminInitiateAuth</a>.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result returned by the server in response to the authentication request.</p>
      */
@@ -2910,9 +2894,7 @@ export interface AdminUpdateUserAttributesRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminUpdateUserAttributesRequest {
     /**
@@ -3164,14 +3146,18 @@ export declare namespace ConfirmDeviceResponse {
     const filterSensitiveLog: (obj: ConfirmDeviceResponse) => any;
 }
 /**
- * <p>Information that your app generates about a user's <code>AdminInitiateAuth</code> or
- *                 <code>AdminRespondToAuthChallenge</code> session. Amazon Cognito advanced security features
- *             calculate risk levels for user sessions based on this context data.</p>
+ * <p>Contextual data, such as the user's device fingerprint, IP address, or location, used
+ *             for evaluating the risk of an unexpected event by Amazon Cognito advanced
+ *         security.</p>
  */
 export interface UserContextDataType {
     /**
-     * <p>Contextual data, such as the user's device fingerprint, IP address, or location, used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>The source IP address of your user's device.</p>
+     */
+    IpAddress?: string;
+    /**
+     * <p>Encoded device-fingerprint details that your app collected with the Amazon Cognito
+     *             context data collection library. For more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
      */
     EncodedData?: string;
 }
@@ -3214,8 +3200,9 @@ export interface ConfirmForgotPasswordRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -3253,9 +3240,7 @@ export interface ConfirmForgotPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmForgotPasswordRequest {
     /**
@@ -3311,8 +3296,9 @@ export interface ConfirmSignUpRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -3350,9 +3336,7 @@ export interface ConfirmSignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmSignUpRequest {
     /**
@@ -3574,15 +3558,11 @@ export interface CreateIdentityProviderRequest {
      *             </li>
      *          </ul>
      */
-    ProviderDetails: {
-        [key: string]: string;
-    } | undefined;
+    ProviderDetails: Record<string, string> | undefined;
     /**
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -3730,15 +3710,11 @@ export interface IdentityProviderType {
      *             </li>
      *          </ul>
      */
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     /**
      * <p>A mapping of IdP attributes to standard and custom user pool attributes.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -4394,7 +4370,10 @@ export declare namespace SmsConfigurationType {
     const filterSensitiveLog: (obj: SmsConfigurationType) => any;
 }
 /**
- * <p>The settings for updates to user attributes.</p>
+ * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+ * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+ * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+ * Verifying updates to to email addresses and phone numbers</a>.</p>
  */
 export interface UserAttributeUpdateSettingsType {
     /**
@@ -4587,7 +4566,10 @@ export interface CreateUserPoolRequest {
      */
     MfaConfiguration?: UserPoolMfaType | string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -4612,9 +4594,7 @@ export interface CreateUserPoolRequest {
      *             to categorize and manage user pools in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      */
@@ -4726,7 +4706,10 @@ export interface UserPoolType {
      */
     SmsAuthenticationMessage?: string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -4776,9 +4759,7 @@ export interface UserPoolType {
      *             user pools to categorize and manage them in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The reason why the SMS configuration can't send the messages to your users.</p>
      *         <p>This message might include comma-separated values to describe why your SMS
@@ -4910,18 +4891,22 @@ export declare enum TimeUnitsType {
  */
 export interface TokenValidityUnitsType {
     /**
-     * <p> A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             AccessTokenValidity, defaulting to hours.</p>
+     * <p> A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the <code>AccessTokenValidity</code>
+     *             parameter. The default <code>AccessTokenValidity</code> time unit is hours.</p>
      */
     AccessToken?: TimeUnitsType | string;
     /**
-     * <p>A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             IdTokenValidity, defaulting to hours.</p>
+     * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the <code>IdTokenValidity</code>
+     *             parameter. The default <code>IdTokenValidity</code> time unit is hours.</p>
      */
     IdToken?: TimeUnitsType | string;
     /**
-     * <p>A time unit in “seconds”, “minutes”, “hours”, or “days” for the value in
-     *             RefreshTokenValidity, defaulting to days.</p>
+     * <p>A time unit of <code>seconds</code>, <code>minutes</code>, <code>hours</code>, or
+     *                 <code>days</code> for the value that you set in the
+     *                 <code>RefreshTokenValidity</code> parameter. The default
+     *                 <code>RefreshTokenValidity</code> time unit is days.</p>
      */
     RefreshToken?: TimeUnitsType | string;
 }
@@ -5177,6 +5162,15 @@ export interface CreateUserPoolClientRequest {
      *             the new user pool client.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>Activates the propagation of additional user context data. For more information about
+     *             propagation of user context data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"> Adding advanced security to a user pool</a>. If you don’t include this
+     *             parameter, you can't send device fingerprint information, including source IP address,
+     *             to Amazon Cognito advanced security. You can only activate
+     *                 <code>EnablePropagateAdditionalUserContextData</code> in an app client that has a
+     *             client secret.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace CreateUserPoolClientRequest {
     /**
@@ -5427,6 +5421,24 @@ export interface UserPoolClientType {
      *             information about revoking tokens, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>When <code>EnablePropagateAdditionalUserContextData</code> is true, Amazon Cognito accepts an
+     *                 <code>IpAddress</code> value that you send in the <code>UserContextData</code>
+     *             parameter. The <code>UserContextData</code> parameter sends information to Amazon Cognito
+     *             advanced security for risk analysis. You can send <code>UserContextData</code> when you
+     *             sign in Amazon Cognito native users with the <code>InitiateAuth</code> and
+     *                 <code>RespondToAuthChallenge</code> API operations.</p>
+     *         <p>When <code>EnablePropagateAdditionalUserContextData</code> is false, you can't send
+     *             your user's source IP address to Amazon Cognito advanced security with unauthenticated API
+     *             operations. <code>EnablePropagateAdditionalUserContextData</code> doesn't affect whether
+     *             you can send a source IP address in a <code>ContextData</code> parameter with the
+     *             authenticated API operations <code>AdminInitiateAuth</code> and
+     *                 <code>AdminRespondToAuthChallenge</code>.</p>
+     *         <p>You can only activate <code>EnablePropagateAdditionalUserContextData</code> in an app
+     *             client that has a client secret. For more information about propagation of user context
+     *             data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-adaptive-authentication.html#user-pool-settings-adaptive-authentication-device-fingerprint">Adding user device and session data to API requests</a>.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UserPoolClientType {
     /**
@@ -6097,8 +6109,9 @@ export interface ForgotPasswordRequest {
      */
     SecretHash?: string;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -6148,9 +6161,7 @@ export interface ForgotPasswordRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ForgotPasswordRequest {
     /**
@@ -6183,8 +6194,7 @@ export declare namespace CodeDeliveryDetailsType {
     const filterSensitiveLog: (obj: CodeDeliveryDetailsType) => any;
 }
 /**
- * <p>Represents the response from the server regarding the request to reset a
- *             password.</p>
+ * <p>The response from Amazon Cognito to a request to reset a password.</p>
  */
 export interface ForgotPasswordResponse {
     /**
@@ -6528,9 +6538,7 @@ export interface GetUserAttributeVerificationCodeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace GetUserAttributeVerificationCodeRequest {
     /**
@@ -6745,9 +6753,7 @@ export interface InitiateAuthRequest {
      *             </li>
      *          </ul>
      */
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     /**
      * <p>A map of custom key-value pairs that you can provide as input for certain custom
      *             workflows that this action triggers.</p>
@@ -6818,9 +6824,7 @@ export interface InitiateAuthRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     /**
      * <p>The app client ID.</p>
      */
@@ -6831,8 +6835,9 @@ export interface InitiateAuthRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
 }
@@ -6933,9 +6938,7 @@ export interface InitiateAuthResponse {
      *         <p>All challenges require <code>USERNAME</code> and <code>SECRET_HASH</code> (if
      *             applicable).</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result of the authentication response. This result is only returned if the caller
      *             doesn't need to pass another challenge. If the caller does need to pass another
@@ -7146,9 +7149,7 @@ export interface ListTagsForResourceResponse {
     /**
      * <p>The tags that are assigned to the user pool.</p>
      */
-    Tags?: {
-        [key: string]: string;
-    };
+    Tags?: Record<string, string>;
 }
 export declare namespace ListTagsForResourceResponse {
     /**
@@ -7546,8 +7547,9 @@ export interface ResendConfirmationCodeRequest {
      */
     SecretHash?: string;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -7595,9 +7597,7 @@ export interface ResendConfirmationCodeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ResendConfirmationCodeRequest {
     /**
@@ -7711,17 +7711,16 @@ export interface RespondToAuthChallengeRequest {
      *             </li>
      *          </ul>
      */
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     /**
      * <p>The Amazon Pinpoint analytics metadata that contributes to your metrics for
      *                 <code>RespondToAuthChallenge</code> calls.</p>
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -7763,9 +7762,7 @@ export interface RespondToAuthChallengeRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace RespondToAuthChallengeRequest {
     /**
@@ -7791,9 +7788,7 @@ export interface RespondToAuthChallengeResponse {
     /**
      * <p>The challenge parameters. For more information, see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html">InitiateAuth</a>.</p>
      */
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     /**
      * <p>The result returned by the server in response to the request to respond to the
      *             authentication challenge.</p>
@@ -8125,8 +8120,9 @@ export interface SignUpRequest {
      */
     AnalyticsMetadata?: AnalyticsMetadataType;
     /**
-     * <p>Contextual data such as the user's device fingerprint, IP address, or location used
-     *             for evaluating the risk of an unexpected event by Amazon Cognito advanced security.</p>
+     * <p>Contextual data about your user session, such as the device fingerprint, IP address, or location. Amazon Cognito advanced
+     * security evaluates the risk of an authentication event based on the context that your app generates and passes to Amazon Cognito
+     * when it makes API requests.</p>
      */
     UserContextData?: UserContextDataType;
     /**
@@ -8165,9 +8161,7 @@ export interface SignUpRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace SignUpRequest {
     /**

package/dist-types/models/models_1.d.ts

@@ -79,9 +79,7 @@ export interface TagResourceRequest {
     /**
      * <p>The tags to assign to the user pool.</p>
      */
-    Tags: {
-        [key: string]: string;
-    } | undefined;
+    Tags: Record<string, string> | undefined;
 }
 export declare namespace TagResourceRequest {
     /**
@@ -248,15 +246,11 @@ export interface UpdateIdentityProviderRequest {
      * <p>The IdP details to be updated, such as <code>MetadataURL</code> and
      *                 <code>MetadataFile</code>.</p>
      */
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     /**
      * <p>The IdP attribute mapping to be changed.</p>
      */
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     /**
      * <p>A list of IdP identifiers.</p>
      */
@@ -371,9 +365,7 @@ export interface UpdateUserAttributesRequest {
      *             </ul>
      *         </note>
      */
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace UpdateUserAttributesRequest {
     /**
@@ -440,7 +432,10 @@ export interface UpdateUserPoolRequest {
      */
     SmsAuthenticationMessage?: string;
     /**
-     * <p></p>
+     * <p>The settings for updates to user attributes. These settings include the property <code>AttributesRequireVerificationBeforeUpdate</code>,
+     * a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
+     * more information, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates">
+     * Verifying updates to to email addresses and phone numbers</a>.</p>
      */
     UserAttributeUpdateSettings?: UserAttributeUpdateSettingsType;
     /**
@@ -488,9 +483,7 @@ export interface UpdateUserPoolRequest {
      *             to categorize and manage user pools in different ways, such as by purpose, owner,
      *             environment, or other criteria.</p>
      */
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     /**
      * <p>The configuration for <code>AdminCreateUser</code> requests.</p>
      */
@@ -759,6 +752,15 @@ export interface UpdateUserPoolClientRequest {
      *             see <a href="https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html">RevokeToken</a>.</p>
      */
     EnableTokenRevocation?: boolean;
+    /**
+     * <p>Activates the propagation of additional user context data. For more information about
+     *             propagation of user context data, see <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html"> Adding advanced security to a user pool</a>. If you don’t include this
+     *             parameter, you can't send device fingerprint information, including source IP address,
+     *             to Amazon Cognito advanced security. You can only activate
+     *                 <code>EnablePropagateAdditionalUserContextData</code> in an app client that has a
+     *             client secret.</p>
+     */
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UpdateUserPoolClientRequest {
     /**

package/dist-types/ts3.4/models/models_0.d.ts

@@ -233,9 +233,7 @@ export interface AdminConfirmSignUpRequest {
     
     Username: string | undefined;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminConfirmSignUpRequest {
     
@@ -321,9 +319,7 @@ export interface AdminCreateUserRequest {
     
     DesiredDeliveryMediums?: (DeliveryMediumType | string)[];
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminCreateUserRequest {
     
@@ -707,13 +703,9 @@ export interface AdminInitiateAuthRequest {
     
     AuthFlow: AuthFlowType | string | undefined;
     
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     
     AnalyticsMetadata?: AnalyticsMetadataType;
     
@@ -772,9 +764,7 @@ export interface AdminInitiateAuthResponse {
     
     Session?: string;
     
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     
     AuthenticationResult?: AuthenticationResultType;
 }
@@ -1050,9 +1040,7 @@ export interface AdminResetUserPasswordRequest {
     
     Username: string | undefined;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminResetUserPasswordRequest {
     
@@ -1081,9 +1069,7 @@ export interface AdminRespondToAuthChallengeRequest {
     
     ChallengeName: ChallengeNameType | string | undefined;
     
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     
     Session?: string;
     
@@ -1091,9 +1077,7 @@ export interface AdminRespondToAuthChallengeRequest {
     
     ContextData?: ContextDataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminRespondToAuthChallengeRequest {
     
@@ -1106,9 +1090,7 @@ export interface AdminRespondToAuthChallengeResponse {
     
     Session?: string;
     
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     
     AuthenticationResult?: AuthenticationResultType;
 }
@@ -1274,9 +1256,7 @@ export interface AdminUpdateUserAttributesRequest {
     
     UserAttributes: AttributeType[] | undefined;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace AdminUpdateUserAttributesRequest {
     
@@ -1423,6 +1403,8 @@ export declare namespace ConfirmDeviceResponse {
 
 export interface UserContextDataType {
     
+    IpAddress?: string;
+    
     EncodedData?: string;
 }
 export declare namespace UserContextDataType {
@@ -1446,9 +1428,7 @@ export interface ConfirmForgotPasswordRequest {
     
     UserContextData?: UserContextDataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmForgotPasswordRequest {
     
@@ -1478,9 +1458,7 @@ export interface ConfirmSignUpRequest {
     
     UserContextData?: UserContextDataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ConfirmSignUpRequest {
     
@@ -1540,13 +1518,9 @@ export interface CreateIdentityProviderRequest {
     
     ProviderType: IdentityProviderTypeType | string | undefined;
     
-    ProviderDetails: {
-        [key: string]: string;
-    } | undefined;
+    ProviderDetails: Record<string, string> | undefined;
     
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     
     IdpIdentifiers?: string[];
 }
@@ -1563,13 +1537,9 @@ export interface IdentityProviderType {
     
     ProviderType?: IdentityProviderTypeType | string;
     
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     
     IdpIdentifiers?: string[];
     
@@ -1937,9 +1907,7 @@ export interface CreateUserPoolRequest {
     
     SmsConfiguration?: SmsConfigurationType;
     
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     
     AdminCreateUserConfig?: AdminCreateUserConfigType;
     
@@ -2006,9 +1974,7 @@ export interface UserPoolType {
     
     SmsConfiguration?: SmsConfigurationType;
     
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     
     SmsConfigurationFailure?: string;
     
@@ -2128,6 +2094,8 @@ export interface CreateUserPoolClientRequest {
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes | string;
     
     EnableTokenRevocation?: boolean;
+    
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace CreateUserPoolClientRequest {
     
@@ -2181,6 +2149,8 @@ export interface UserPoolClientType {
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes | string;
     
     EnableTokenRevocation?: boolean;
+    
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UserPoolClientType {
     
@@ -2579,9 +2549,7 @@ export interface ForgotPasswordRequest {
     
     AnalyticsMetadata?: AnalyticsMetadataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ForgotPasswordRequest {
     
@@ -2775,9 +2743,7 @@ export interface GetUserAttributeVerificationCodeRequest {
     
     AttributeName: string | undefined;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace GetUserAttributeVerificationCodeRequest {
     
@@ -2853,13 +2819,9 @@ export interface InitiateAuthRequest {
     
     AuthFlow: AuthFlowType | string | undefined;
     
-    AuthParameters?: {
-        [key: string]: string;
-    };
+    AuthParameters?: Record<string, string>;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
     
     ClientId: string | undefined;
     
@@ -2878,9 +2840,7 @@ export interface InitiateAuthResponse {
     
     Session?: string;
     
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     
     AuthenticationResult?: AuthenticationResultType;
 }
@@ -3003,9 +2963,7 @@ export declare namespace ListTagsForResourceRequest {
 }
 export interface ListTagsForResourceResponse {
     
-    Tags?: {
-        [key: string]: string;
-    };
+    Tags?: Record<string, string>;
 }
 export declare namespace ListTagsForResourceResponse {
     
@@ -3178,9 +3136,7 @@ export interface ResendConfirmationCodeRequest {
     
     AnalyticsMetadata?: AnalyticsMetadataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace ResendConfirmationCodeRequest {
     
@@ -3204,17 +3160,13 @@ export interface RespondToAuthChallengeRequest {
     
     Session?: string;
     
-    ChallengeResponses?: {
-        [key: string]: string;
-    };
+    ChallengeResponses?: Record<string, string>;
     
     AnalyticsMetadata?: AnalyticsMetadataType;
     
     UserContextData?: UserContextDataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace RespondToAuthChallengeRequest {
     
@@ -3227,9 +3179,7 @@ export interface RespondToAuthChallengeResponse {
     
     Session?: string;
     
-    ChallengeParameters?: {
-        [key: string]: string;
-    };
+    ChallengeParameters?: Record<string, string>;
     
     AuthenticationResult?: AuthenticationResultType;
 }
@@ -3403,9 +3353,7 @@ export interface SignUpRequest {
     
     UserContextData?: UserContextDataType;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace SignUpRequest {
     

package/dist-types/ts3.4/models/models_1.d.ts

@@ -45,9 +45,7 @@ export interface TagResourceRequest {
     
     ResourceArn: string | undefined;
     
-    Tags: {
-        [key: string]: string;
-    } | undefined;
+    Tags: Record<string, string> | undefined;
 }
 export declare namespace TagResourceRequest {
     
@@ -147,13 +145,9 @@ export interface UpdateIdentityProviderRequest {
     
     ProviderName: string | undefined;
     
-    ProviderDetails?: {
-        [key: string]: string;
-    };
+    ProviderDetails?: Record<string, string>;
     
-    AttributeMapping?: {
-        [key: string]: string;
-    };
+    AttributeMapping?: Record<string, string>;
     
     IdpIdentifiers?: string[];
 }
@@ -198,9 +192,7 @@ export interface UpdateUserAttributesRequest {
     
     AccessToken: string | undefined;
     
-    ClientMetadata?: {
-        [key: string]: string;
-    };
+    ClientMetadata?: Record<string, string>;
 }
 export declare namespace UpdateUserAttributesRequest {
     
@@ -246,9 +238,7 @@ export interface UpdateUserPoolRequest {
     
     SmsConfiguration?: SmsConfigurationType;
     
-    UserPoolTags?: {
-        [key: string]: string;
-    };
+    UserPoolTags?: Record<string, string>;
     
     AdminCreateUserConfig?: AdminCreateUserConfigType;
     
@@ -309,6 +299,8 @@ export interface UpdateUserPoolClientRequest {
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes | string;
     
     EnableTokenRevocation?: boolean;
+    
+    EnablePropagateAdditionalUserContextData?: boolean;
 }
 export declare namespace UpdateUserPoolClientRequest {
     

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-cognito-identity-provider",
   "description": "AWS SDK for JavaScript Cognito Identity Provider Client for Node.js, Browser and React Native",
-  "version": "3.99.0",
+  "version": "3.105.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -18,15 +18,16 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "2.0.0",
     "@aws-crypto/sha256-js": "2.0.0",
-    "@aws-sdk/client-sts": "3.99.0",
+    "@aws-sdk/client-sts": "3.105.0",
     "@aws-sdk/config-resolver": "3.80.0",
-    "@aws-sdk/credential-provider-node": "3.99.0",
+    "@aws-sdk/credential-provider-node": "3.105.0",
     "@aws-sdk/fetch-http-handler": "3.78.0",
     "@aws-sdk/hash-node": "3.78.0",
     "@aws-sdk/invalid-dependency": "3.78.0",
     "@aws-sdk/middleware-content-length": "3.78.0",
     "@aws-sdk/middleware-host-header": "3.78.0",
     "@aws-sdk/middleware-logger": "3.78.0",
+    "@aws-sdk/middleware-recursion-detection": "3.105.0",
     "@aws-sdk/middleware-retry": "3.80.0",
     "@aws-sdk/middleware-serde": "3.78.0",
     "@aws-sdk/middleware-signing": "3.78.0",