@pulumi/aws-native 1.2.0 → 1.3.0-alpha.1729176871

package/cognito/getLogDeliveryConfiguration.js

@@ -19,7 +19,10 @@ exports.getLogDeliveryConfiguration = getLogDeliveryConfiguration;
  * Resource Type definition for AWS::Cognito::LogDeliveryConfiguration
  */
 function getLogDeliveryConfigurationOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getLogDeliveryConfiguration(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getLogDeliveryConfiguration", {
+        "id": args.id,
+    }, opts);
 }
 exports.getLogDeliveryConfigurationOutput = getLogDeliveryConfigurationOutput;
 //# sourceMappingURL=getLogDeliveryConfiguration.js.map

package/cognito/getLogDeliveryConfiguration.js.map

@@ -1 +1 @@
-{"version":3,"file":"getLogDeliveryConfiguration.js","sourceRoot":"","sources":["../../cognito/getLogDeliveryConfiguration.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAA2B;IAE1G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kEAMC;AAmBD;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAA2B;IACtH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACtF,CAAC;AAFD,8EAEC"}
+{"version":3,"file":"getLogDeliveryConfiguration.js","sourceRoot":"","sources":["../../cognito/getLogDeliveryConfiguration.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAA2B;IAC1G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,kEAKC;AAmBD;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAA2B;IACtH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,gDAAgD,EAAE;QACjF,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,8EAKC"}

package/cognito/getUserPool.d.ts

@@ -12,7 +12,7 @@ export interface GetUserPoolArgs {
 }
 export interface GetUserPoolResult {
     /**
-     * Use this setting to define which verified available method a user can use to recover their password when they call `ForgotPassword` . It allows you to define a preferred method when a user has more than one method available. With this setting, SMS does not qualify for a valid password recovery mechanism if the user also has SMS MFA enabled. In the absence of this setting, Cognito uses the legacy behavior to determine the recovery method where SMS is preferred over email.
+     * The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
      */
     readonly accountRecoverySetting?: outputs.cognito.UserPoolAccountRecoverySetting;
     /**
@@ -23,8 +23,6 @@ export interface GetUserPoolResult {
     readonly adminCreateUserConfig?: outputs.cognito.UserPoolAdminCreateUserConfig;
     /**
      * Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
-     *
-     * > This user pool property cannot be updated.
      */
     readonly aliasAttributes?: string[];
     /**
@@ -56,11 +54,11 @@ export interface GetUserPoolResult {
      */
     readonly emailConfiguration?: outputs.cognito.UserPoolEmailConfiguration;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly emailVerificationMessage?: string;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly emailVerificationSubject?: string;
     /**
@@ -82,7 +80,7 @@ export interface GetUserPoolResult {
      */
     readonly policies?: outputs.cognito.UserPoolPolicies;
     /**
-     * The provider name of the Amazon Cognito user pool, specified as a `String` .
+     * A friendly name for the IdP.
      */
     readonly providerName?: string;
     /**
@@ -90,13 +88,11 @@ export interface GetUserPoolResult {
      */
     readonly providerUrl?: string;
     /**
-     * The schema attributes for the new user pool. These attributes can be standard or custom attributes.
-     *
-     * > During a user pool update, you can add new schema attributes but you cannot modify or delete an existing schema attribute.
+     * An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
      */
     readonly schema?: outputs.cognito.UserPoolSchemaAttribute[];
     /**
-     * A string representing the SMS authentication message.
+     * The contents of the SMS authentication message.
      */
     readonly smsAuthenticationMessage?: string;
     /**
@@ -104,7 +100,7 @@ export interface GetUserPoolResult {
      */
     readonly smsConfiguration?: outputs.cognito.UserPoolSmsConfiguration;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly smsVerificationMessage?: string;
     /**
@@ -134,13 +130,13 @@ export interface GetUserPoolResult {
         [key: string]: string;
     };
     /**
-     * Determines whether email addresses or phone numbers can be specified as user names when a user signs up. Possible values: `phone_number` or `email` .
-     *
-     * This user pool property cannot be updated.
+     * Specifies whether a user can use an email address or phone number as a username when they sign up.
      */
     readonly usernameAttributes?: string[];
     /**
-     * You can choose to set case sensitivity on the username input for the selected sign-in option. For example, when this is set to `False` , users will be able to sign in using either "username" or "Username". This configuration is immutable once it has been set.
+     * Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
+     *
+     * This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
      */
     readonly usernameConfiguration?: outputs.cognito.UserPoolUsernameConfiguration;
     /**

package/cognito/getUserPool.js

@@ -19,7 +19,10 @@ exports.getUserPool = getUserPool;
  * Definition of AWS::Cognito::UserPool Resource Type
  */
 function getUserPoolOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPool(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPool", {
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolOutput = getUserPoolOutput;
 //# sourceMappingURL=getUserPool.js.map

package/cognito/getUserPool.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPool.js","sourceRoot":"","sources":["../../cognito/getUserPool.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,WAAW,CAAC,IAAqB,EAAE,IAA2B;IAE1E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,EAAE;QAC3D,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kCAMC;AAmJD;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IACtF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACtE,CAAC;AAFD,8CAEC"}
+{"version":3,"file":"getUserPool.js","sourceRoot":"","sources":["../../cognito/getUserPool.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,WAAW,CAAC,IAAqB,EAAE,IAA2B;IAC1E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,EAAE;QAC3D,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,kCAKC;AA+ID;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IACtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,gCAAgC,EAAE;QACjE,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,8CAKC"}

package/cognito/getUserPoolClient.d.ts

@@ -18,9 +18,13 @@ export interface GetUserPoolClientResult {
     /**
      * The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
      *
-     * For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with their access token for 10 hours.
+     * For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with
+     * their access token for 10 hours.
      *
-     * The default time unit for `AccessTokenValidity` in an API request is hours.
+     * The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
+     *
+     * If you don't specify otherwise in the configuration of your app client, your access
+     * tokens are valid for one hour.
      */
     readonly accessTokenValidity?: number;
     /**
@@ -131,7 +135,10 @@ export interface GetUserPoolClientResult {
      *
      * For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.
      *
-     * The default time unit for `IdTokenValidity` in an API request is hours.
+     * The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
+     *
+     * If you don't specify otherwise in the configuration of your app client, your ID
+     * tokens are valid for one hour.
      */
     readonly idTokenValidity?: number;
     /**
@@ -140,7 +147,14 @@ export interface GetUserPoolClientResult {
     readonly logoutUrls?: string[];
     readonly name?: string;
     /**
-     * Use this setting to choose which errors and responses are returned by Cognito APIs during authentication, account confirmation, and password recovery when the user does not exist in the user pool. When set to `ENABLED` and the user does not exist, authentication returns an error indicating either the username or password was incorrect, and account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs will return a `UserNotFoundException` exception if the user does not exist in the user pool.
+     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.
+     *
+     * Valid values include:
+     *
+     * - `ENABLED` - This prevents user existence-related errors.
+     * - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.
+     *
+     * Defaults to `LEGACY` when you don't provide a value.
      */
     readonly preventUserExistenceErrors?: string;
     /**
@@ -152,9 +166,13 @@ export interface GetUserPoolClientResult {
     /**
      * The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
      *
-     * For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session and retrieve new access and ID tokens for 10 days.
+     * For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session
+     * and retrieve new access and ID tokens for 10 days.
+     *
+     * The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.
      *
-     * The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days.
+     * If you don't specify otherwise in the configuration of your app client, your refresh
+     * tokens are valid for 30 days.
      */
     readonly refreshTokenValidity?: number;
     /**

package/cognito/getUserPoolClient.js

@@ -20,7 +20,11 @@ exports.getUserPoolClient = getUserPoolClient;
  * Resource Type definition for AWS::Cognito::UserPoolClient
  */
 function getUserPoolClientOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolClient(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolClient", {
+        "clientId": args.clientId,
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolClientOutput = getUserPoolClientOutput;
 //# sourceMappingURL=getUserPoolClient.js.map

package/cognito/getUserPoolClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolClient.js","sourceRoot":"","sources":["../../cognito/getUserPoolClient.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IAEtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sCAAsC,EAAE;QACjE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,8CAOC;AA6KD;;GAEG;AACH,SAAgB,uBAAuB,CAAC,IAAiC,EAAE,IAA2B;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC5E,CAAC;AAFD,0DAEC"}
+{"version":3,"file":"getUserPoolClient.js","sourceRoot":"","sources":["../../cognito/getUserPoolClient.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IACtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sCAAsC,EAAE;QACjE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,8CAMC;AA+LD;;GAEG;AACH,SAAgB,uBAAuB,CAAC,IAAiC,EAAE,IAA2B;IAClG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,sCAAsC,EAAE;QACvE,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,0DAMC"}

package/cognito/getUserPoolDomain.js

@@ -19,7 +19,10 @@ exports.getUserPoolDomain = getUserPoolDomain;
  * Resource Type definition for AWS::Cognito::UserPoolDomain
  */
 function getUserPoolDomainOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolDomain(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolDomain", {
+        "id": args.id,
+    }, opts);
 }
 exports.getUserPoolDomainOutput = getUserPoolDomainOutput;
 //# sourceMappingURL=getUserPoolDomain.js.map

package/cognito/getUserPoolDomain.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolDomain.js","sourceRoot":"","sources":["../../cognito/getUserPoolDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IAEtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sCAAsC,EAAE;QACjE,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,8CAMC;AAuBD;;GAEG;AACH,SAAgB,uBAAuB,CAAC,IAAiC,EAAE,IAA2B;IAClG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC5E,CAAC;AAFD,0DAEC"}
+{"version":3,"file":"getUserPoolDomain.js","sourceRoot":"","sources":["../../cognito/getUserPoolDomain.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAA2B,EAAE,IAA2B;IACtF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,sCAAsC,EAAE;QACjE,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,8CAKC;AAuBD;;GAEG;AACH,SAAgB,uBAAuB,CAAC,IAAiC,EAAE,IAA2B;IAClG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,sCAAsC,EAAE;QACvE,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,0DAKC"}

package/cognito/getUserPoolGroup.js

@@ -20,7 +20,11 @@ exports.getUserPoolGroup = getUserPoolGroup;
  * Resource Type definition for AWS::Cognito::UserPoolGroup
  */
 function getUserPoolGroupOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolGroup(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolGroup", {
+        "groupName": args.groupName,
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolGroupOutput = getUserPoolGroupOutput;
 //# sourceMappingURL=getUserPoolGroup.js.map

package/cognito/getUserPoolGroup.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolGroup.js","sourceRoot":"","sources":["../../cognito/getUserPoolGroup.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAA2B;IAEpF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE;QAChE,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,4CAOC;AA+BD;;GAEG;AACH,SAAgB,sBAAsB,CAAC,IAAgC,EAAE,IAA2B;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC3E,CAAC;AAFD,wDAEC"}
+{"version":3,"file":"getUserPoolGroup.js","sourceRoot":"","sources":["../../cognito/getUserPoolGroup.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,gBAAgB,CAAC,IAA0B,EAAE,IAA2B;IACpF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE;QAChE,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,4CAMC;AA+BD;;GAEG;AACH,SAAgB,sBAAsB,CAAC,IAAgC,EAAE,IAA2B;IAChG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,qCAAqC,EAAE;QACtE,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,wDAMC"}

package/cognito/getUserPoolIdentityProvider.js

@@ -19,7 +19,10 @@ exports.getUserPoolIdentityProvider = getUserPoolIdentityProvider;
  * Resource Type definition for AWS::Cognito::UserPoolIdentityProvider
  */
 function getUserPoolIdentityProviderOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolIdentityProvider(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolIdentityProvider", {
+        "id": args.id,
+    }, opts);
 }
 exports.getUserPoolIdentityProviderOutput = getUserPoolIdentityProviderOutput;
 //# sourceMappingURL=getUserPoolIdentityProvider.js.map

package/cognito/getUserPoolIdentityProvider.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolIdentityProvider.js","sourceRoot":"","sources":["../../cognito/getUserPoolIdentityProvider.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAA2B;IAE1G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,kEAMC;AA2DD;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAA2B;IACtH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACtF,CAAC;AAFD,8EAEC"}
+{"version":3,"file":"getUserPoolIdentityProvider.js","sourceRoot":"","sources":["../../cognito/getUserPoolIdentityProvider.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,2BAA2B,CAAC,IAAqC,EAAE,IAA2B;IAC1G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gDAAgD,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,kEAKC;AA2DD;;GAEG;AACH,SAAgB,iCAAiC,CAAC,IAA2C,EAAE,IAA2B;IACtH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,gDAAgD,EAAE;QACjF,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,8EAKC"}

package/cognito/getUserPoolResourceServer.d.ts

@@ -6,7 +6,9 @@ import * as outputs from "../types/output";
 export declare function getUserPoolResourceServer(args: GetUserPoolResourceServerArgs, opts?: pulumi.InvokeOptions): Promise<GetUserPoolResourceServerResult>;
 export interface GetUserPoolResourceServerArgs {
     /**
-     * A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example: `https://my-weather-api.example.com` .
+     * A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
+     *
+     * Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
      */
     identifier: string;
     /**
@@ -30,7 +32,9 @@ export interface GetUserPoolResourceServerResult {
 export declare function getUserPoolResourceServerOutput(args: GetUserPoolResourceServerOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetUserPoolResourceServerResult>;
 export interface GetUserPoolResourceServerOutputArgs {
     /**
-     * A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example: `https://my-weather-api.example.com` .
+     * A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
+     *
+     * Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
      */
     identifier: pulumi.Input<string>;
     /**

package/cognito/getUserPoolResourceServer.js

@@ -20,7 +20,11 @@ exports.getUserPoolResourceServer = getUserPoolResourceServer;
  * Resource Type definition for AWS::Cognito::UserPoolResourceServer
  */
 function getUserPoolResourceServerOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolResourceServer(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolResourceServer", {
+        "identifier": args.identifier,
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolResourceServerOutput = getUserPoolResourceServerOutput;
 //# sourceMappingURL=getUserPoolResourceServer.js.map

package/cognito/getUserPoolResourceServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolResourceServer.js","sourceRoot":"","sources":["../../cognito/getUserPoolResourceServer.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,yBAAyB,CAAC,IAAmC,EAAE,IAA2B;IAEtG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8CAA8C,EAAE;QACzE,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,8DAOC;AAuBD;;GAEG;AACH,SAAgB,+BAA+B,CAAC,IAAyC,EAAE,IAA2B;IAClH,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACpF,CAAC;AAFD,0EAEC"}
+{"version":3,"file":"getUserPoolResourceServer.js","sourceRoot":"","sources":["../../cognito/getUserPoolResourceServer.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,yBAAyB,CAAC,IAAmC,EAAE,IAA2B;IACtG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8CAA8C,EAAE;QACzE,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,8DAMC;AAyBD;;GAEG;AACH,SAAgB,+BAA+B,CAAC,IAAyC,EAAE,IAA2B;IAClH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,8CAA8C,EAAE;QAC/E,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,0EAMC"}

package/cognito/getUserPoolRiskConfigurationAttachment.d.ts

@@ -6,7 +6,7 @@ import * as outputs from "../types/output";
 export declare function getUserPoolRiskConfigurationAttachment(args: GetUserPoolRiskConfigurationAttachmentArgs, opts?: pulumi.InvokeOptions): Promise<GetUserPoolRiskConfigurationAttachmentResult>;
 export interface GetUserPoolRiskConfigurationAttachmentArgs {
     /**
-     * The app client ID. You can specify the risk configuration for a single client (with a specific ClientId) or for all clients (by setting the ClientId to `ALL` ).
+     * The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
      */
     clientId: string;
     /**
@@ -34,7 +34,7 @@ export interface GetUserPoolRiskConfigurationAttachmentResult {
 export declare function getUserPoolRiskConfigurationAttachmentOutput(args: GetUserPoolRiskConfigurationAttachmentOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetUserPoolRiskConfigurationAttachmentResult>;
 export interface GetUserPoolRiskConfigurationAttachmentOutputArgs {
     /**
-     * The app client ID. You can specify the risk configuration for a single client (with a specific ClientId) or for all clients (by setting the ClientId to `ALL` ).
+     * The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
      */
     clientId: pulumi.Input<string>;
     /**

package/cognito/getUserPoolRiskConfigurationAttachment.js

@@ -20,7 +20,11 @@ exports.getUserPoolRiskConfigurationAttachment = getUserPoolRiskConfigurationAtt
  * Resource Type definition for AWS::Cognito::UserPoolRiskConfigurationAttachment
  */
 function getUserPoolRiskConfigurationAttachmentOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolRiskConfigurationAttachment(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolRiskConfigurationAttachment", {
+        "clientId": args.clientId,
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolRiskConfigurationAttachmentOutput = getUserPoolRiskConfigurationAttachmentOutput;
 //# sourceMappingURL=getUserPoolRiskConfigurationAttachment.js.map

package/cognito/getUserPoolRiskConfigurationAttachment.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolRiskConfigurationAttachment.js","sourceRoot":"","sources":["../../cognito/getUserPoolRiskConfigurationAttachment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,sCAAsC,CAAC,IAAgD,EAAE,IAA2B;IAEhI,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2DAA2D,EAAE;QACtF,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,wFAOC;AA2BD;;GAEG;AACH,SAAgB,4CAA4C,CAAC,IAAsD,EAAE,IAA2B;IAC5I,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,sCAAsC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AACjG,CAAC;AAFD,oGAEC"}
+{"version":3,"file":"getUserPoolRiskConfigurationAttachment.js","sourceRoot":"","sources":["../../cognito/getUserPoolRiskConfigurationAttachment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,sCAAsC,CAAC,IAAgD,EAAE,IAA2B;IAChI,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,2DAA2D,EAAE;QACtF,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,wFAMC;AA2BD;;GAEG;AACH,SAAgB,4CAA4C,CAAC,IAAsD,EAAE,IAA2B;IAC5I,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,2DAA2D,EAAE;QAC5F,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,oGAMC"}

package/cognito/getUserPoolUiCustomizationAttachment.d.ts

@@ -5,7 +5,7 @@ import * as pulumi from "@pulumi/pulumi";
 export declare function getUserPoolUiCustomizationAttachment(args: GetUserPoolUiCustomizationAttachmentArgs, opts?: pulumi.InvokeOptions): Promise<GetUserPoolUiCustomizationAttachmentResult>;
 export interface GetUserPoolUiCustomizationAttachmentArgs {
     /**
-     * The client ID for the client app. You can specify the UI customization settings for a single client (with a specific clientId) or for all clients (by setting the clientId to `ALL` ).
+     * The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
      */
     clientId: string;
     /**
@@ -25,7 +25,7 @@ export interface GetUserPoolUiCustomizationAttachmentResult {
 export declare function getUserPoolUiCustomizationAttachmentOutput(args: GetUserPoolUiCustomizationAttachmentOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetUserPoolUiCustomizationAttachmentResult>;
 export interface GetUserPoolUiCustomizationAttachmentOutputArgs {
     /**
-     * The client ID for the client app. You can specify the UI customization settings for a single client (with a specific clientId) or for all clients (by setting the clientId to `ALL` ).
+     * The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
      */
     clientId: pulumi.Input<string>;
     /**

package/cognito/getUserPoolUiCustomizationAttachment.js

@@ -20,7 +20,11 @@ exports.getUserPoolUiCustomizationAttachment = getUserPoolUiCustomizationAttachm
  * Resource Type definition for AWS::Cognito::UserPoolUICustomizationAttachment
  */
 function getUserPoolUiCustomizationAttachmentOutput(args, opts) {
-    return pulumi.output(args).apply((a) => getUserPoolUiCustomizationAttachment(a, opts));
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("aws-native:cognito:getUserPoolUiCustomizationAttachment", {
+        "clientId": args.clientId,
+        "userPoolId": args.userPoolId,
+    }, opts);
 }
 exports.getUserPoolUiCustomizationAttachmentOutput = getUserPoolUiCustomizationAttachmentOutput;
 //# sourceMappingURL=getUserPoolUiCustomizationAttachment.js.map

package/cognito/getUserPoolUiCustomizationAttachment.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserPoolUiCustomizationAttachment.js","sourceRoot":"","sources":["../../cognito/getUserPoolUiCustomizationAttachment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,oCAAoC,CAAC,IAA8C,EAAE,IAA2B;IAE5H,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yDAAyD,EAAE;QACpF,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAPD,oFAOC;AAmBD;;GAEG;AACH,SAAgB,0CAA0C,CAAC,IAAoD,EAAE,IAA2B;IACxI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,oCAAoC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAC/F,CAAC;AAFD,gGAEC"}
+{"version":3,"file":"getUserPoolUiCustomizationAttachment.js","sourceRoot":"","sources":["../../cognito/getUserPoolUiCustomizationAttachment.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;GAEG;AACH,SAAgB,oCAAoC,CAAC,IAA8C,EAAE,IAA2B;IAC5H,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yDAAyD,EAAE;QACpF,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,oFAMC;AAmBD;;GAEG;AACH,SAAgB,0CAA0C,CAAC,IAAoD,EAAE,IAA2B;IACxI,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,yDAAyD,EAAE;QAC1F,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,UAAU;KAChC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAND,gGAMC"}

package/cognito/userPool.d.ts

@@ -20,7 +20,7 @@ export declare class UserPool extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is UserPool;
     /**
-     * Use this setting to define which verified available method a user can use to recover their password when they call `ForgotPassword` . It allows you to define a preferred method when a user has more than one method available. With this setting, SMS does not qualify for a valid password recovery mechanism if the user also has SMS MFA enabled. In the absence of this setting, Cognito uses the legacy behavior to determine the recovery method where SMS is preferred over email.
+     * The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
      */
     readonly accountRecoverySetting: pulumi.Output<outputs.cognito.UserPoolAccountRecoverySetting | undefined>;
     /**
@@ -31,8 +31,6 @@ export declare class UserPool extends pulumi.CustomResource {
     readonly adminCreateUserConfig: pulumi.Output<outputs.cognito.UserPoolAdminCreateUserConfig | undefined>;
     /**
      * Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
-     *
-     * > This user pool property cannot be updated.
      */
     readonly aliasAttributes: pulumi.Output<string[] | undefined>;
     /**
@@ -64,20 +62,21 @@ export declare class UserPool extends pulumi.CustomResource {
      */
     readonly emailConfiguration: pulumi.Output<outputs.cognito.UserPoolEmailConfiguration | undefined>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly emailVerificationMessage: pulumi.Output<string | undefined>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly emailVerificationSubject: pulumi.Output<string | undefined>;
     /**
-     * Enables MFA on a specified user pool. To disable all MFAs after it has been enabled, set MfaConfiguration to "OFF" and remove EnabledMfas. MFAs can only be all disabled if MfaConfiguration is OFF. Once SMS_MFA is enabled, SMS_MFA can only be disabled by setting MfaConfiguration to "OFF". Can be one of the following values:
+     * Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:
      *
-     * - `SMS_MFA` - Enables SMS MFA for the user pool. SMS_MFA can only be enabled if SMS configuration is provided.
+     * - `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .
      * - `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.
+     * - `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .
      *
-     * Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA`
+     * Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`
      */
     readonly enabledMfas: pulumi.Output<string[] | undefined>;
     /**
@@ -99,7 +98,7 @@ export declare class UserPool extends pulumi.CustomResource {
      */
     readonly policies: pulumi.Output<outputs.cognito.UserPoolPolicies | undefined>;
     /**
-     * The provider name of the Amazon Cognito user pool, specified as a `String` .
+     * A friendly name for the IdP.
      */
     readonly providerName: pulumi.Output<string>;
     /**
@@ -107,13 +106,11 @@ export declare class UserPool extends pulumi.CustomResource {
      */
     readonly providerUrl: pulumi.Output<string>;
     /**
-     * The schema attributes for the new user pool. These attributes can be standard or custom attributes.
-     *
-     * > During a user pool update, you can add new schema attributes but you cannot modify or delete an existing schema attribute.
+     * An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
      */
     readonly schema: pulumi.Output<outputs.cognito.UserPoolSchemaAttribute[] | undefined>;
     /**
-     * A string representing the SMS authentication message.
+     * The contents of the SMS authentication message.
      */
     readonly smsAuthenticationMessage: pulumi.Output<string | undefined>;
     /**
@@ -121,7 +118,7 @@ export declare class UserPool extends pulumi.CustomResource {
      */
     readonly smsConfiguration: pulumi.Output<outputs.cognito.UserPoolSmsConfiguration | undefined>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     readonly smsVerificationMessage: pulumi.Output<string | undefined>;
     /**
@@ -151,13 +148,13 @@ export declare class UserPool extends pulumi.CustomResource {
         [key: string]: string;
     } | undefined>;
     /**
-     * Determines whether email addresses or phone numbers can be specified as user names when a user signs up. Possible values: `phone_number` or `email` .
-     *
-     * This user pool property cannot be updated.
+     * Specifies whether a user can use an email address or phone number as a username when they sign up.
      */
     readonly usernameAttributes: pulumi.Output<string[] | undefined>;
     /**
-     * You can choose to set case sensitivity on the username input for the selected sign-in option. For example, when this is set to `False` , users will be able to sign in using either "username" or "Username". This configuration is immutable once it has been set.
+     * Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
+     *
+     * This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
      */
     readonly usernameConfiguration: pulumi.Output<outputs.cognito.UserPoolUsernameConfiguration | undefined>;
     /**
@@ -180,7 +177,7 @@ export declare class UserPool extends pulumi.CustomResource {
  */
 export interface UserPoolArgs {
     /**
-     * Use this setting to define which verified available method a user can use to recover their password when they call `ForgotPassword` . It allows you to define a preferred method when a user has more than one method available. With this setting, SMS does not qualify for a valid password recovery mechanism if the user also has SMS MFA enabled. In the absence of this setting, Cognito uses the legacy behavior to determine the recovery method where SMS is preferred over email.
+     * The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
      */
     accountRecoverySetting?: pulumi.Input<inputs.cognito.UserPoolAccountRecoverySettingArgs>;
     /**
@@ -191,8 +188,6 @@ export interface UserPoolArgs {
     adminCreateUserConfig?: pulumi.Input<inputs.cognito.UserPoolAdminCreateUserConfigArgs>;
     /**
      * Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
-     *
-     * > This user pool property cannot be updated.
      */
     aliasAttributes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
@@ -220,20 +215,21 @@ export interface UserPoolArgs {
      */
     emailConfiguration?: pulumi.Input<inputs.cognito.UserPoolEmailConfigurationArgs>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     emailVerificationMessage?: pulumi.Input<string>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     emailVerificationSubject?: pulumi.Input<string>;
     /**
-     * Enables MFA on a specified user pool. To disable all MFAs after it has been enabled, set MfaConfiguration to "OFF" and remove EnabledMfas. MFAs can only be all disabled if MfaConfiguration is OFF. Once SMS_MFA is enabled, SMS_MFA can only be disabled by setting MfaConfiguration to "OFF". Can be one of the following values:
+     * Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:
      *
-     * - `SMS_MFA` - Enables SMS MFA for the user pool. SMS_MFA can only be enabled if SMS configuration is provided.
+     * - `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .
      * - `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.
+     * - `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .
      *
-     * Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA`
+     * Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`
      */
     enabledMfas?: pulumi.Input<pulumi.Input<string>[]>;
     /**
@@ -255,13 +251,11 @@ export interface UserPoolArgs {
      */
     policies?: pulumi.Input<inputs.cognito.UserPoolPoliciesArgs>;
     /**
-     * The schema attributes for the new user pool. These attributes can be standard or custom attributes.
-     *
-     * > During a user pool update, you can add new schema attributes but you cannot modify or delete an existing schema attribute.
+     * An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
      */
     schema?: pulumi.Input<pulumi.Input<inputs.cognito.UserPoolSchemaAttributeArgs>[]>;
     /**
-     * A string representing the SMS authentication message.
+     * The contents of the SMS authentication message.
      */
     smsAuthenticationMessage?: pulumi.Input<string>;
     /**
@@ -269,7 +263,7 @@ export interface UserPoolArgs {
      */
     smsConfiguration?: pulumi.Input<inputs.cognito.UserPoolSmsConfigurationArgs>;
     /**
-     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html) .
+     * This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
      */
     smsVerificationMessage?: pulumi.Input<string>;
     /**
@@ -295,13 +289,13 @@ export interface UserPoolArgs {
         [key: string]: pulumi.Input<string>;
     }>;
     /**
-     * Determines whether email addresses or phone numbers can be specified as user names when a user signs up. Possible values: `phone_number` or `email` .
-     *
-     * This user pool property cannot be updated.
+     * Specifies whether a user can use an email address or phone number as a username when they sign up.
      */
     usernameAttributes?: pulumi.Input<pulumi.Input<string>[]>;
     /**
-     * You can choose to set case sensitivity on the username input for the selected sign-in option. For example, when this is set to `False` , users will be able to sign in using either "username" or "Username". This configuration is immutable once it has been set.
+     * Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
+     *
+     * This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
      */
     usernameConfiguration?: pulumi.Input<inputs.cognito.UserPoolUsernameConfigurationArgs>;
     /**