@raindancers/agentl 0.0.0

package/node_modules/@aws-sdk/client-cognito-identity/dist-types/models/models_0.d.ts

@@ -0,0 +1,1039 @@
+import type { AmbiguousRoleResolutionType, ErrorCode, MappingRuleMatchType, RoleMappingType } from "./enums";
+/**
+ * <p>A provider representing an Amazon Cognito user pool and its client ID.</p>
+ * @public
+ */
+export interface CognitoIdentityProvider {
+    /**
+     * <p>The provider name for an Amazon Cognito user pool. For example,
+     *             <code>cognito-idp.us-east-1.amazonaws.com/us-east-1_123456789</code>.</p>
+     * @public
+     */
+    ProviderName?: string | undefined;
+    /**
+     * <p>The client ID for the Amazon Cognito user pool.</p>
+     * @public
+     */
+    ClientId?: string | undefined;
+    /**
+     * <p>TRUE if server-side token validation is enabled for the identity provider’s
+     *          token.</p>
+     *          <p>Once you set <code>ServerSideTokenCheck</code> to TRUE for an identity pool, that
+     *          identity pool will check with the integrated user pools to make sure that the user has not
+     *          been globally signed out or deleted before the identity pool provides an OIDC token or
+     *             Amazon Web Services credentials for the user.</p>
+     *          <p>If the user is signed out or deleted, the identity pool will return a 400 Not
+     *          Authorized error.</p>
+     * @public
+     */
+    ServerSideTokenCheck?: boolean | undefined;
+}
+/**
+ * <p>Input to the CreateIdentityPool action.</p>
+ * @public
+ */
+export interface CreateIdentityPoolInput {
+    /**
+     * <p>A string that you provide.</p>
+     * @public
+     */
+    IdentityPoolName: string | undefined;
+    /**
+     * <p>TRUE if the identity pool supports unauthenticated logins.</p>
+     * @public
+     */
+    AllowUnauthenticatedIdentities: boolean | undefined;
+    /**
+     * <p>Enables or disables the Basic (Classic) authentication flow. For more information, see
+     *             <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html">Identity Pools (Federated Identities) Authentication Flow</a> in the
+     *             <i>Amazon Cognito Developer Guide</i>.</p>
+     * @public
+     */
+    AllowClassicFlow?: boolean | undefined;
+    /**
+     * <p>Optional key:value pairs mapping provider names to provider app IDs.</p>
+     * @public
+     */
+    SupportedLoginProviders?: Record<string, string> | undefined;
+    /**
+     * <p>The "domain" by which Cognito will refer to your users. This name acts as a
+     *          placeholder that allows your backend and the Cognito service to communicate about the
+     *          developer provider. For the <code>DeveloperProviderName</code>, you can use letters as well
+     *          as period (<code>.</code>), underscore (<code>_</code>), and dash
+     *          (<code>-</code>).</p>
+     *          <p>Once you have set a developer provider name, you cannot change it. Please take care
+     *          in setting this parameter.</p>
+     * @public
+     */
+    DeveloperProviderName?: string | undefined;
+    /**
+     * <p>The Amazon Resource Names (ARN) of the OpenID Connect providers.</p>
+     * @public
+     */
+    OpenIdConnectProviderARNs?: string[] | undefined;
+    /**
+     * <p>An array of Amazon Cognito user pools and their client IDs.</p>
+     * @public
+     */
+    CognitoIdentityProviders?: CognitoIdentityProvider[] | undefined;
+    /**
+     * <p>An array of Amazon Resource Names (ARNs) of the SAML provider for your identity
+     *          pool.</p>
+     * @public
+     */
+    SamlProviderARNs?: string[] | undefined;
+    /**
+     * <p>Tags to assign to the identity pool. A tag is a label that you can apply to identity
+     *          pools to categorize and manage them in different ways, such as by purpose, owner,
+     *          environment, or other criteria.</p>
+     * @public
+     */
+    IdentityPoolTags?: Record<string, string> | undefined;
+}
+/**
+ * <p>An object representing an Amazon Cognito identity pool.</p>
+ * @public
+ */
+export interface IdentityPool {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>A string that you provide.</p>
+     * @public
+     */
+    IdentityPoolName: string | undefined;
+    /**
+     * <p>TRUE if the identity pool supports unauthenticated logins.</p>
+     * @public
+     */
+    AllowUnauthenticatedIdentities: boolean | undefined;
+    /**
+     * <p>Enables or disables the Basic (Classic) authentication flow. For more information, see
+     *             <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html">Identity Pools (Federated Identities) Authentication Flow</a> in the
+     *             <i>Amazon Cognito Developer Guide</i>.</p>
+     * @public
+     */
+    AllowClassicFlow?: boolean | undefined;
+    /**
+     * <p>Optional key:value pairs mapping provider names to provider app IDs.</p>
+     * @public
+     */
+    SupportedLoginProviders?: Record<string, string> | undefined;
+    /**
+     * <p>The "domain" by which Cognito will refer to your users.</p>
+     * @public
+     */
+    DeveloperProviderName?: string | undefined;
+    /**
+     * <p>The ARNs of the OpenID Connect providers.</p>
+     * @public
+     */
+    OpenIdConnectProviderARNs?: string[] | undefined;
+    /**
+     * <p>A list representing an Amazon Cognito user pool and its client ID.</p>
+     * @public
+     */
+    CognitoIdentityProviders?: CognitoIdentityProvider[] | undefined;
+    /**
+     * <p>An array of Amazon Resource Names (ARNs) of the SAML provider for your identity
+     *          pool.</p>
+     * @public
+     */
+    SamlProviderARNs?: string[] | undefined;
+    /**
+     * <p>The tags that are assigned to the identity pool. A tag is a label that you can apply to
+     *          identity pools to categorize and manage them in different ways, such as by purpose, owner,
+     *          environment, or other criteria.</p>
+     * @public
+     */
+    IdentityPoolTags?: Record<string, string> | undefined;
+}
+/**
+ * <p>Input to the <code>DeleteIdentities</code> action.</p>
+ * @public
+ */
+export interface DeleteIdentitiesInput {
+    /**
+     * <p>A list of 1-60 identities that you want to delete.</p>
+     * @public
+     */
+    IdentityIdsToDelete: string[] | undefined;
+}
+/**
+ * <p>An array of UnprocessedIdentityId objects, each of which contains an ErrorCode and
+ *          IdentityId.</p>
+ * @public
+ */
+export interface UnprocessedIdentityId {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>The error code indicating the type of error that occurred.</p>
+     * @public
+     */
+    ErrorCode?: ErrorCode | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>DeleteIdentities</code>
+ *          operation.</p>
+ * @public
+ */
+export interface DeleteIdentitiesResponse {
+    /**
+     * <p>An array of UnprocessedIdentityId objects, each of which contains an ErrorCode and
+     *          IdentityId.</p>
+     * @public
+     */
+    UnprocessedIdentityIds?: UnprocessedIdentityId[] | undefined;
+}
+/**
+ * <p>Input to the DeleteIdentityPool action.</p>
+ * @public
+ */
+export interface DeleteIdentityPoolInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+}
+/**
+ * <p>Input to the <code>DescribeIdentity</code> action.</p>
+ * @public
+ */
+export interface DescribeIdentityInput {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId: string | undefined;
+}
+/**
+ * <p>A description of the identity.</p>
+ * @public
+ */
+export interface IdentityDescription {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>The provider names.</p>
+     * @public
+     */
+    Logins?: string[] | undefined;
+    /**
+     * <p>Date on which the identity was created.</p>
+     * @public
+     */
+    CreationDate?: Date | undefined;
+    /**
+     * <p>Date on which the identity was last modified.</p>
+     * @public
+     */
+    LastModifiedDate?: Date | undefined;
+}
+/**
+ * <p>Input to the DescribeIdentityPool action.</p>
+ * @public
+ */
+export interface DescribeIdentityPoolInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+}
+/**
+ * <p>Input to the <code>GetCredentialsForIdentity</code> action.</p>
+ * @public
+ */
+export interface GetCredentialsForIdentityInput {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId: string | undefined;
+    /**
+     * <p>A set of optional name-value pairs that map provider names to provider tokens. The
+     *          name-value pair will follow the syntax "provider_name":
+     *          "provider_user_identifier".</p>
+     *          <p>Logins should not be specified when trying to get credentials for an unauthenticated
+     *          identity.</p>
+     *          <p>The Logins parameter is required when using identities associated with external
+     *          identity providers such as Facebook. For examples of <code>Logins</code> maps, see the code
+     *          examples in the <a href="https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html">External Identity
+     *             Providers</a> section of the Amazon Cognito Developer Guide.</p>
+     * @public
+     */
+    Logins?: Record<string, string> | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the role to be assumed when multiple roles were
+     *          received in the token from the identity provider. For example, a SAML-based identity
+     *          provider. This parameter is optional for identity providers that do not support role
+     *          customization.</p>
+     * @public
+     */
+    CustomRoleArn?: string | undefined;
+}
+/**
+ * <p>Credentials for the provided identity ID.</p>
+ * @public
+ */
+export interface Credentials {
+    /**
+     * <p>The Access Key portion of the credentials.</p>
+     * @public
+     */
+    AccessKeyId?: string | undefined;
+    /**
+     * <p>The Secret Access Key portion of the credentials</p>
+     * @public
+     */
+    SecretKey?: string | undefined;
+    /**
+     * <p>The Session Token portion of the credentials</p>
+     * @public
+     */
+    SessionToken?: string | undefined;
+    /**
+     * <p>The date at which these credentials will expire.</p>
+     * @public
+     */
+    Expiration?: Date | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>GetCredentialsForIdentity</code>
+ *          operation.</p>
+ * @public
+ */
+export interface GetCredentialsForIdentityResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>Credentials for the provided identity ID.</p>
+     * @public
+     */
+    Credentials?: Credentials | undefined;
+}
+/**
+ * <p>Input to the GetId action.</p>
+ * @public
+ */
+export interface GetIdInput {
+    /**
+     * <p>A standard Amazon Web Services account ID (9+ digits).</p>
+     * @public
+     */
+    AccountId?: string | undefined;
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>A set of optional name-value pairs that map provider names to provider tokens. The
+     *          available provider names for <code>Logins</code> are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Facebook: <code>graph.facebook.com</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Amazon Cognito user pool:
+     *                   <code>cognito-idp.<region>.amazonaws.com/<YOUR_USER_POOL_ID></code>,
+     *                for example, <code>cognito-idp.us-east-1.amazonaws.com/us-east-1_123456789</code>.
+     *             </p>
+     *             </li>
+     *             <li>
+     *                <p>Google: <code>accounts.google.com</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Amazon: <code>www.amazon.com</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Twitter: <code>api.twitter.com</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Digits: <code>www.digits.com</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    Logins?: Record<string, string> | undefined;
+}
+/**
+ * <p>Returned in response to a GetId request.</p>
+ * @public
+ */
+export interface GetIdResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+}
+/**
+ * <p>Input to the <code>GetIdentityPoolRoles</code> action.</p>
+ * @public
+ */
+export interface GetIdentityPoolRolesInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+}
+/**
+ * <p>A rule that maps a claim name, a claim value, and a match type to a role
+ *          ARN.</p>
+ * @public
+ */
+export interface MappingRule {
+    /**
+     * <p>The claim name that must be present in the token, for example, "isAdmin" or
+     *          "paid".</p>
+     * @public
+     */
+    Claim: string | undefined;
+    /**
+     * <p>The match condition that specifies how closely the claim value in the IdP token must
+     *          match <code>Value</code>.</p>
+     * @public
+     */
+    MatchType: MappingRuleMatchType | undefined;
+    /**
+     * <p>A brief string that the claim must match, for example, "paid" or "yes".</p>
+     * @public
+     */
+    Value: string | undefined;
+    /**
+     * <p>The role ARN.</p>
+     * @public
+     */
+    RoleARN: string | undefined;
+}
+/**
+ * <p>A container for rules.</p>
+ * @public
+ */
+export interface RulesConfigurationType {
+    /**
+     * <p>An array of rules. You can specify up to 25 rules per identity provider.</p>
+     *          <p>Rules are evaluated in order. The first one to match specifies the role.</p>
+     * @public
+     */
+    Rules: MappingRule[] | undefined;
+}
+/**
+ * <p>A role mapping.</p>
+ * @public
+ */
+export interface RoleMapping {
+    /**
+     * <p>The role mapping type. Token will use <code>cognito:roles</code> and
+     *             <code>cognito:preferred_role</code> claims from the Cognito identity provider token to
+     *          map groups to roles. Rules will attempt to match claims from the token to map to a
+     *          role.</p>
+     * @public
+     */
+    Type: RoleMappingType | undefined;
+    /**
+     * <p>If you specify Token or Rules as the <code>Type</code>,
+     *             <code>AmbiguousRoleResolution</code> is required.</p>
+     *          <p>Specifies the action to be taken if either no rules match the claim value for the
+     *             <code>Rules</code> type, or there is no <code>cognito:preferred_role</code> claim and
+     *          there are multiple <code>cognito:roles</code> matches for the <code>Token</code>
+     *          type.</p>
+     * @public
+     */
+    AmbiguousRoleResolution?: AmbiguousRoleResolutionType | undefined;
+    /**
+     * <p>The rules to be used for mapping users to roles.</p>
+     *          <p>If you specify Rules as the role mapping type, <code>RulesConfiguration</code> is
+     *          required.</p>
+     * @public
+     */
+    RulesConfiguration?: RulesConfigurationType | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>GetIdentityPoolRoles</code>
+ *          operation.</p>
+ * @public
+ */
+export interface GetIdentityPoolRolesResponse {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * <p>The map of roles associated with this pool. Currently only authenticated and
+     *          unauthenticated roles are supported.</p>
+     * @public
+     */
+    Roles?: Record<string, string> | undefined;
+    /**
+     * <p>How users for a specific identity provider are to mapped to roles. This is a
+     *             String-to-<a>RoleMapping</a> object map. The string identifies the identity
+     *          provider, for example, <code>graph.facebook.com</code> or
+     *             <code>cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id</code>.</p>
+     * @public
+     */
+    RoleMappings?: Record<string, RoleMapping> | undefined;
+}
+/**
+ * <p>Input to the GetOpenIdToken action.</p>
+ * @public
+ */
+export interface GetOpenIdTokenInput {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId: string | undefined;
+    /**
+     * <p>A set of optional name-value pairs that map provider names to provider tokens. When
+     *          using graph.facebook.com and www.amazon.com, supply the access_token returned from the
+     *          provider's authflow. For accounts.google.com, an Amazon Cognito user pool provider, or any
+     *          other OpenID Connect provider, always include the <code>id_token</code>.</p>
+     * @public
+     */
+    Logins?: Record<string, string> | undefined;
+}
+/**
+ * <p>Returned in response to a successful GetOpenIdToken request.</p>
+ * @public
+ */
+export interface GetOpenIdTokenResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID. Note that the IdentityId returned may
+     *          not match the one passed on input.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>An OpenID token, valid for 10 minutes.</p>
+     * @public
+     */
+    Token?: string | undefined;
+}
+/**
+ * <p>Input to the <code>GetOpenIdTokenForDeveloperIdentity</code> action.</p>
+ * @public
+ */
+export interface GetOpenIdTokenForDeveloperIdentityInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>A set of optional name-value pairs that map provider names to provider tokens. Each
+     *          name-value pair represents a user from a public provider or developer provider. If the user
+     *          is from a developer provider, the name-value pair will follow the syntax
+     *             <code>"developer_provider_name": "developer_user_identifier"</code>. The developer
+     *          provider is the "domain" by which Cognito will refer to your users; you provided this
+     *          domain while creating/updating the identity pool. The developer user identifier is an
+     *          identifier from your backend that uniquely identifies a user. When you create an identity
+     *          pool, you can specify the supported logins.</p>
+     * @public
+     */
+    Logins: Record<string, string> | undefined;
+    /**
+     * <p>Use this operation to configure attribute mappings for custom providers. </p>
+     * @public
+     */
+    PrincipalTags?: Record<string, string> | undefined;
+    /**
+     * <p>The expiration time of the token, in seconds. You can specify a custom expiration
+     *          time for the token so that you can cache it. If you don't provide an expiration time, the
+     *          token is valid for 15 minutes. You can exchange the token with Amazon STS for temporary
+     *             Amazon Web Services credentials, which are valid for a maximum of one hour. The maximum
+     *          token duration you can set is 24 hours. You should take care in setting the expiration time
+     *          for a token, as there are significant security implications: an attacker could use a leaked
+     *          token to access your Amazon Web Services resources for the token's duration.</p>
+     *          <note>
+     *             <p>Please provide for a small grace period, usually no more than 5 minutes, to
+     *             account for clock skew.</p>
+     *          </note>
+     * @public
+     */
+    TokenDuration?: number | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>GetOpenIdTokenForDeveloperIdentity</code>
+ *          request.</p>
+ * @public
+ */
+export interface GetOpenIdTokenForDeveloperIdentityResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>An OpenID token.</p>
+     * @public
+     */
+    Token?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetPrincipalTagAttributeMapInput {
+    /**
+     * <p>You can use this operation to get the ID of the Identity Pool you setup attribute
+     *          mappings for.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>You can use this operation to get the provider name.</p>
+     * @public
+     */
+    IdentityProviderName: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetPrincipalTagAttributeMapResponse {
+    /**
+     * <p>You can use this operation to get the ID of the Identity Pool you setup attribute
+     *          mappings for.</p>
+     * @public
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * <p>You can use this operation to get the provider name.</p>
+     * @public
+     */
+    IdentityProviderName?: string | undefined;
+    /**
+     * <p>You can use this operation to list </p>
+     * @public
+     */
+    UseDefaults?: boolean | undefined;
+    /**
+     * <p>You can use this operation to add principal tags. The
+     *          <code>PrincipalTags</code>operation enables you to reference user attributes in your
+     *             IAM permissions policy.</p>
+     * @public
+     */
+    PrincipalTags?: Record<string, string> | undefined;
+}
+/**
+ * <p>Input to the ListIdentities action.</p>
+ * @public
+ */
+export interface ListIdentitiesInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>The maximum number of identities to return.</p>
+     * @public
+     */
+    MaxResults: number | undefined;
+    /**
+     * <p>A pagination token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>An optional boolean parameter that allows you to hide disabled identities. If
+     *          omitted, the ListIdentities API will include disabled identities in the response.</p>
+     * @public
+     */
+    HideDisabled?: boolean | undefined;
+}
+/**
+ * <p>The response to a ListIdentities request.</p>
+ * @public
+ */
+export interface ListIdentitiesResponse {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * <p>An object containing a set of identities and associated mappings.</p>
+     * @public
+     */
+    Identities?: IdentityDescription[] | undefined;
+    /**
+     * <p>A pagination token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Input to the ListIdentityPools action.</p>
+ * @public
+ */
+export interface ListIdentityPoolsInput {
+    /**
+     * <p>The maximum number of identities to return.</p>
+     * @public
+     */
+    MaxResults: number | undefined;
+    /**
+     * <p>A pagination token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>A description of the identity pool.</p>
+ * @public
+ */
+export interface IdentityPoolShortDescription {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * <p>A string that you provide.</p>
+     * @public
+     */
+    IdentityPoolName?: string | undefined;
+}
+/**
+ * <p>The result of a successful ListIdentityPools action.</p>
+ * @public
+ */
+export interface ListIdentityPoolsResponse {
+    /**
+     * <p>The identity pools returned by the ListIdentityPools action.</p>
+     * @public
+     */
+    IdentityPools?: IdentityPoolShortDescription[] | undefined;
+    /**
+     * <p>A pagination token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsForResourceInput {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the identity pool that the tags are assigned
+     *          to.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsForResourceResponse {
+    /**
+     * <p>The tags that are assigned to the identity pool.</p>
+     * @public
+     */
+    Tags?: Record<string, string> | undefined;
+}
+/**
+ * <p>Input to the <code>LookupDeveloperIdentityInput</code> action.</p>
+ * @public
+ */
+export interface LookupDeveloperIdentityInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>A unique ID used by your backend authentication process to identify a user.
+     *          Typically, a developer identity provider would issue many developer user identifiers, in
+     *          keeping with the number of users.</p>
+     * @public
+     */
+    DeveloperUserIdentifier?: string | undefined;
+    /**
+     * <p>The maximum number of identities to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>A pagination token. The first call you make will have <code>NextToken</code> set to
+     *          null. After that the service will return <code>NextToken</code> values as needed. For
+     *          example, let's say you make a request with <code>MaxResults</code> set to 10, and there are
+     *          20 matches in the database. The service will return a pagination token as a part of the
+     *          response. This token can be used to call the API again and get results starting from the
+     *          11th match.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>LookupDeveloperIdentity</code>
+ *          action.</p>
+ * @public
+ */
+export interface LookupDeveloperIdentityResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+    /**
+     * <p>This is the list of developer user identifiers associated with an identity ID.
+     *          Cognito supports the association of multiple developer user identifiers with an identity
+     *          ID.</p>
+     * @public
+     */
+    DeveloperUserIdentifierList?: string[] | undefined;
+    /**
+     * <p>A pagination token. The first call you make will have <code>NextToken</code> set to
+     *          null. After that the service will return <code>NextToken</code> values as needed. For
+     *          example, let's say you make a request with <code>MaxResults</code> set to 10, and there are
+     *          20 matches in the database. The service will return a pagination token as a part of the
+     *          response. This token can be used to call the API again and get results starting from the
+     *          11th match.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Input to the <code>MergeDeveloperIdentities</code> action.</p>
+ * @public
+ */
+export interface MergeDeveloperIdentitiesInput {
+    /**
+     * <p>User identifier for the source user. The value should be a
+     *             <code>DeveloperUserIdentifier</code>.</p>
+     * @public
+     */
+    SourceUserIdentifier: string | undefined;
+    /**
+     * <p>User identifier for the destination user. The value should be a
+     *             <code>DeveloperUserIdentifier</code>.</p>
+     * @public
+     */
+    DestinationUserIdentifier: string | undefined;
+    /**
+     * <p>The "domain" by which Cognito will refer to your users. This is a (pseudo) domain
+     *          name that you provide while creating an identity pool. This name acts as a placeholder that
+     *          allows your backend and the Cognito service to communicate about the developer provider.
+     *          For the <code>DeveloperProviderName</code>, you can use letters as well as period (.),
+     *          underscore (_), and dash (-).</p>
+     * @public
+     */
+    DeveloperProviderName: string | undefined;
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+}
+/**
+ * <p>Returned in response to a successful <code>MergeDeveloperIdentities</code>
+ *          action.</p>
+ * @public
+ */
+export interface MergeDeveloperIdentitiesResponse {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId?: string | undefined;
+}
+/**
+ * <p>Input to the <code>SetIdentityPoolRoles</code> action.</p>
+ * @public
+ */
+export interface SetIdentityPoolRolesInput {
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>The map of roles associated with this pool. For a given role, the key will be either
+     *          "authenticated" or "unauthenticated" and the value will be the Role ARN.</p>
+     * @public
+     */
+    Roles: Record<string, string> | undefined;
+    /**
+     * <p>How users for a specific identity provider are to mapped to roles. This is a string
+     *          to <a>RoleMapping</a> object map. The string identifies the identity provider,
+     *          for example, <code>graph.facebook.com</code> or
+     *             <code>cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id</code>.</p>
+     *          <p>Up to 25 rules can be specified per identity provider.</p>
+     * @public
+     */
+    RoleMappings?: Record<string, RoleMapping> | undefined;
+}
+/**
+ * @public
+ */
+export interface SetPrincipalTagAttributeMapInput {
+    /**
+     * <p>The ID of the Identity Pool you want to set attribute mappings for.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>The provider name you want to use for attribute mappings.</p>
+     * @public
+     */
+    IdentityProviderName: string | undefined;
+    /**
+     * <p>You can use this operation to use default (username and clientID) attribute
+     *          mappings.</p>
+     * @public
+     */
+    UseDefaults?: boolean | undefined;
+    /**
+     * <p>You can use this operation to add principal tags.</p>
+     * @public
+     */
+    PrincipalTags?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface SetPrincipalTagAttributeMapResponse {
+    /**
+     * <p>The ID of the Identity Pool you want to set attribute mappings for.</p>
+     * @public
+     */
+    IdentityPoolId?: string | undefined;
+    /**
+     * <p>The provider name you want to use for attribute mappings.</p>
+     * @public
+     */
+    IdentityProviderName?: string | undefined;
+    /**
+     * <p>You can use this operation to select default (username and clientID) attribute
+     *          mappings.</p>
+     * @public
+     */
+    UseDefaults?: boolean | undefined;
+    /**
+     * <p>You can use this operation to add principal tags. The
+     *          <code>PrincipalTags</code>operation enables you to reference user attributes in your
+     *             IAM permissions policy.</p>
+     * @public
+     */
+    PrincipalTags?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface TagResourceInput {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the identity pool.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The tags to assign to the identity pool.</p>
+     * @public
+     */
+    Tags: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface TagResourceResponse {
+}
+/**
+ * <p>Input to the <code>UnlinkDeveloperIdentity</code> action.</p>
+ * @public
+ */
+export interface UnlinkDeveloperIdentityInput {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId: string | undefined;
+    /**
+     * <p>An identity pool ID in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityPoolId: string | undefined;
+    /**
+     * <p>The "domain" by which Cognito will refer to your users.</p>
+     * @public
+     */
+    DeveloperProviderName: string | undefined;
+    /**
+     * <p>A unique ID used by your backend authentication process to identify a user.</p>
+     * @public
+     */
+    DeveloperUserIdentifier: string | undefined;
+}
+/**
+ * <p>Input to the UnlinkIdentity action.</p>
+ * @public
+ */
+export interface UnlinkIdentityInput {
+    /**
+     * <p>A unique identifier in the format REGION:GUID.</p>
+     * @public
+     */
+    IdentityId: string | undefined;
+    /**
+     * <p>A set of optional name-value pairs that map provider names to provider
+     *          tokens.</p>
+     * @public
+     */
+    Logins: Record<string, string> | undefined;
+    /**
+     * <p>Provider names to unlink from this identity.</p>
+     * @public
+     */
+    LoginsToRemove: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagResourceInput {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the identity pool.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The keys of the tags to remove from the user pool.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagResourceResponse {
+}