cdk-lambda-subminute 2.0.462 → 2.0.464

package/node_modules/aws-sdk/apis/datazone-2018-05-10.paginators.json

@@ -12,6 +12,12 @@
       "limit_key": "maxResults",
       "result_key": "items"
     },
+    "ListDataProductRevisions": {
+      "input_token": "nextToken",
+      "output_token": "nextToken",
+      "limit_key": "maxResults",
+      "result_key": "items"
+    },
     "ListDataSourceRunActivities": {
       "input_token": "nextToken",
       "output_token": "nextToken",

package/node_modules/aws-sdk/apis/ecr-2015-09-21.min.json

@@ -873,6 +873,24 @@
         }
       }
     },
+    "GetAccountSetting": {
+      "input": {
+        "type": "structure",
+        "required": [
+          "name"
+        ],
+        "members": {
+          "name": {}
+        }
+      },
+      "output": {
+        "type": "structure",
+        "members": {
+          "name": {},
+          "value": {}
+        }
+      }
+    },
     "GetAuthorizationToken": {
       "input": {
         "type": "structure",
@@ -1038,7 +1056,7 @@
         "members": {
           "registryId": {},
           "scanningConfiguration": {
-            "shape": "S6n"
+            "shape": "S6q"
           }
         }
       }
@@ -1134,6 +1152,26 @@
         }
       }
     },
+    "PutAccountSetting": {
+      "input": {
+        "type": "structure",
+        "required": [
+          "name",
+          "value"
+        ],
+        "members": {
+          "name": {},
+          "value": {}
+        }
+      },
+      "output": {
+        "type": "structure",
+        "members": {
+          "name": {},
+          "value": {}
+        }
+      }
+    },
     "PutImage": {
       "input": {
         "type": "structure",
@@ -1253,7 +1291,7 @@
         "members": {
           "scanType": {},
           "rules": {
-            "shape": "S6p"
+            "shape": "S6s"
           }
         }
       },
@@ -1261,7 +1299,7 @@
         "type": "structure",
         "members": {
           "registryScanningConfiguration": {
-            "shape": "S6n"
+            "shape": "S6q"
           }
         }
       }
@@ -1733,16 +1771,16 @@
         }
       }
     },
-    "S6n": {
+    "S6q": {
       "type": "structure",
       "members": {
         "scanType": {},
         "rules": {
-          "shape": "S6p"
+          "shape": "S6s"
         }
       }
     },
-    "S6p": {
+    "S6s": {
       "type": "list",
       "member": {
         "type": "structure",

package/node_modules/aws-sdk/apis/kinesis-video-webrtc-storage-2018-05-10.min.json

@@ -26,6 +26,23 @@
           "channelArn": {}
         }
       }
+    },
+    "JoinStorageSessionAsViewer": {
+      "http": {
+        "requestUri": "/joinStorageSessionAsViewer",
+        "responseCode": 200
+      },
+      "input": {
+        "type": "structure",
+        "required": [
+          "channelArn",
+          "clientId"
+        ],
+        "members": {
+          "channelArn": {},
+          "clientId": {}
+        }
+      }
     }
   },
   "shapes": {}

package/node_modules/aws-sdk/clients/bedrockagentruntime.d.ts

@@ -37,11 +37,11 @@ declare class BedrockAgentRuntime extends Service {
    */
   invokeAgent(callback?: (err: AWSError, data: BedrockAgentRuntime.Types.InvokeAgentResponse) => void): Request<BedrockAgentRuntime.Types.InvokeAgentResponse, AWSError>;
   /**
-   * Invokes an alias of a flow to run the inputs that you specify and return the output of each node as a stream. If there's an error, the error is returned. For more information, see Test a flow in Amazon Bedrock in the Amazon Bedrock User Guide.
+   * Invokes an alias of a flow to run the inputs that you specify and return the output of each node as a stream. If there's an error, the error is returned. For more information, see Test a flow in Amazon Bedrock in the Amazon Bedrock User Guide.  The CLI doesn't support streaming operations in Amazon Bedrock, including InvokeFlow. 
    */
   invokeFlow(params: BedrockAgentRuntime.Types.InvokeFlowRequest, callback?: (err: AWSError, data: BedrockAgentRuntime.Types.InvokeFlowResponse) => void): Request<BedrockAgentRuntime.Types.InvokeFlowResponse, AWSError>;
   /**
-   * Invokes an alias of a flow to run the inputs that you specify and return the output of each node as a stream. If there's an error, the error is returned. For more information, see Test a flow in Amazon Bedrock in the Amazon Bedrock User Guide.
+   * Invokes an alias of a flow to run the inputs that you specify and return the output of each node as a stream. If there's an error, the error is returned. For more information, see Test a flow in Amazon Bedrock in the Amazon Bedrock User Guide.  The CLI doesn't support streaming operations in Amazon Bedrock, including InvokeFlow. 
    */
   invokeFlow(callback?: (err: AWSError, data: BedrockAgentRuntime.Types.InvokeFlowResponse) => void): Request<BedrockAgentRuntime.Types.InvokeFlowResponse, AWSError>;
   /**
@@ -418,42 +418,42 @@ declare namespace BedrockAgentRuntime {
   export type FlowIdentifier = string;
   export interface FlowInput {
     /**
-     * Contains information about an input into the flow.
+     * Contains information about an input into the prompt flow.
      */
     content: FlowInputContent;
     /**
-     * A name for the input of the flow input node.
+     * The name of the flow input node that begins the prompt flow.
      */
     nodeName: NodeName;
     /**
-     * A name for the output of the flow input node.
+     * The name of the output from the flow input node that begins the prompt flow.
      */
     nodeOutputName: NodeOutputName;
   }
   export interface FlowInputContent {
     /**
-     * The input for the flow input node.
+     * The input to send to the prompt flow input node.
      */
     document?: Document;
   }
   export type FlowInputs = FlowInput[];
   export interface FlowOutputContent {
     /**
-     * A name for the output of the flow.
+     * The content in the output.
      */
     document?: Document;
   }
   export interface FlowOutputEvent {
     /**
-     * The output of the node.
+     * The content in the output.
      */
     content: FlowOutputContent;
     /**
-     * The name of the node to which input was provided.
+     * The name of the flow output node that the output is from.
      */
     nodeName: NodeName;
     /**
-     * The type of node to which input was provided.
+     * The type of the node that the output is from.
      */
     nodeType: NodeType;
   }
@@ -773,7 +773,7 @@ declare namespace BedrockAgentRuntime {
      */
     topK?: TopK;
     /**
-     * While generating a response, the model determines the probability of the following token at each point of generation. The value that you set for Top P determines the number of most-likely candidates from which the model chooses the next token in the sequence. For example, if you set topP to 80, the model only selects the next token from the top 80% of the probability distribution of next tokens.
+     * While generating a response, the model determines the probability of the following token at each point of generation. The value that you set for Top P determines the number of most-likely candidates from which the model chooses the next token in the sequence. For example, if you set topP to 0.8, the model only selects the next token from the top 80% of the probability distribution of next tokens.
      */
     topP?: TopP;
   }
@@ -1047,6 +1047,12 @@ declare namespace BedrockAgentRuntime {
     summaryText?: SummaryText;
   }
   export type MemoryType = "SESSION_SUMMARY"|string;
+  export interface Metadata {
+    /**
+     * Contains details of the foundation model usage.
+     */
+    usage?: Usage;
+  }
   export type MimeType = string;
   export interface ModelInvocationInput {
     /**
@@ -1119,6 +1125,20 @@ declare namespace BedrockAgentRuntime {
      */
     queryTransformationConfiguration: QueryTransformationConfiguration;
   }
+  export interface OrchestrationModelInvocationOutput {
+    /**
+     * Contains information about the foundation model output.
+     */
+    metadata?: Metadata;
+    /**
+     * Contains details of the raw response from the foundation model output.
+     */
+    rawResponse?: RawResponse;
+    /**
+     * The unique identifier of the trace.
+     */
+    traceId?: TraceId;
+  }
   export interface OrchestrationTrace {
     /**
      * Contains information pertaining to the action group or knowledge base that is being invoked.
@@ -1128,6 +1148,10 @@ declare namespace BedrockAgentRuntime {
      * The input for the orchestration step.   The type is ORCHESTRATION.   The text contains the prompt.   The inferenceConfiguration, parserMode, and overrideLambda values are set in the PromptOverrideConfiguration object that was set when the agent was created or updated.  
      */
     modelInvocationInput?: ModelInvocationInput;
+    /**
+     * Contains information pertaining to the output from the foundation model that is being invoked.
+     */
+    modelInvocationOutput?: OrchestrationModelInvocationOutput;
     /**
      * Details about the observation (the output of the action group Lambda or knowledge base) made by the agent.
      */
@@ -1271,6 +1295,12 @@ declare namespace BedrockAgentRuntime {
     traceId?: TraceId;
   }
   export type RationaleString = string;
+  export interface RawResponse {
+    /**
+     * The foundation model's raw output content.
+     */
+    content?: String;
+  }
   export interface RepromptResponse {
     /**
      * Specifies what output is prompting the agent to reprompt the input.
@@ -1682,6 +1712,16 @@ declare namespace BedrockAgentRuntime {
     trace?: Trace;
   }
   export type Type = "ACTION_GROUP"|"KNOWLEDGE_BASE"|"FINISH"|"ASK_USER"|"REPROMPT"|string;
+  export interface Usage {
+    /**
+     * Contains information about the input tokens from the foundation model usage.
+     */
+    inputTokens?: Integer;
+    /**
+     * Contains information about the output tokens from the foundation model usage.
+     */
+    outputTokens?: Integer;
+  }
   export interface ValidationException {
     message?: NonBlankString;
   }

package/node_modules/aws-sdk/clients/cognitoidentityserviceprovider.d.ts

@@ -28,11 +28,11 @@ declare class CognitoIdentityServiceProvider extends Service {
    */
   adminAddUserToGroup(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * This IAM-authenticated API operation provides a code that Amazon Cognito sent to your user when they signed up in your user pool. After your user enters their code, they confirm ownership of the email address or phone number that they provided, and their user account becomes active. Depending on your user pool configuration, your users will receive their confirmation code in an email or SMS message. Local users who signed up in your user pool are the only type of user who can confirm sign-up with a code. Users who federate through an external identity provider (IdP) have already been confirmed by their IdP. Administrator-created users confirm their accounts when they respond to their invitation email message and choose a password.  Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.  Learn more     Signing Amazon Web Services API Requests     Using the Amazon Cognito user pools API and user pool endpoints    
+   * This IAM-authenticated API operation confirms user sign-up as an administrator. Unlike ConfirmSignUp, your IAM credentials authorize user account confirmation. No confirmation code is required. This request sets a user account active in a user pool that requires confirmation of new user accounts before they can sign in. You can configure your user pool to not send confirmation codes to new users and instead confirm them with this API operation on the back end.  Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.  Learn more     Signing Amazon Web Services API Requests     Using the Amazon Cognito user pools API and user pool endpoints    
    */
   adminConfirmSignUp(params: CognitoIdentityServiceProvider.Types.AdminConfirmSignUpRequest, callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.AdminConfirmSignUpResponse) => void): Request<CognitoIdentityServiceProvider.Types.AdminConfirmSignUpResponse, AWSError>;
   /**
-   * This IAM-authenticated API operation provides a code that Amazon Cognito sent to your user when they signed up in your user pool. After your user enters their code, they confirm ownership of the email address or phone number that they provided, and their user account becomes active. Depending on your user pool configuration, your users will receive their confirmation code in an email or SMS message. Local users who signed up in your user pool are the only type of user who can confirm sign-up with a code. Users who federate through an external identity provider (IdP) have already been confirmed by their IdP. Administrator-created users confirm their accounts when they respond to their invitation email message and choose a password.  Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.  Learn more     Signing Amazon Web Services API Requests     Using the Amazon Cognito user pools API and user pool endpoints    
+   * This IAM-authenticated API operation confirms user sign-up as an administrator. Unlike ConfirmSignUp, your IAM credentials authorize user account confirmation. No confirmation code is required. This request sets a user account active in a user pool that requires confirmation of new user accounts before they can sign in. You can configure your user pool to not send confirmation codes to new users and instead confirm them with this API operation on the back end.  Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.  Learn more     Signing Amazon Web Services API Requests     Using the Amazon Cognito user pools API and user pool endpoints    
    */
   adminConfirmSignUp(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.AdminConfirmSignUpResponse) => void): Request<CognitoIdentityServiceProvider.Types.AdminConfirmSignUpResponse, AWSError>;
   /**
@@ -228,11 +228,11 @@ declare class CognitoIdentityServiceProvider extends Service {
    */
   adminUserGlobalSignOut(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.AdminUserGlobalSignOutResponse) => void): Request<CognitoIdentityServiceProvider.Types.AdminUserGlobalSignOutResponse, AWSError>;
   /**
-   * Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA) for a user, with a unique private key that Amazon Cognito generates and returns in the API response. You can authorize an AssociateSoftwareToken request with either the user's access token, or a session string from a challenge response that you received from Amazon Cognito.  Amazon Cognito disassociates an existing software token when you verify the new token in a  VerifySoftwareToken API request. If you don't verify the software token and your user pool doesn't require MFA, the user can then authenticate with user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an MFA_SETUP or SOFTWARE_TOKEN_SETUP challenge each time your user signs. Complete setup with AssociateSoftwareToken and VerifySoftwareToken. After you set up software token MFA for your user, Amazon Cognito generates a SOFTWARE_TOKEN_MFA challenge when they authenticate. Respond to this challenge with your user's TOTP.   Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. 
+   * Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA) for a user, with a unique private key that Amazon Cognito generates and returns in the API response. You can authorize an AssociateSoftwareToken request with either the user's access token, or a session string from a challenge response that you received from Amazon Cognito.  Amazon Cognito disassociates an existing software token when you verify the new token in a  VerifySoftwareToken API request. If you don't verify the software token and your user pool doesn't require MFA, the user can then authenticate with user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an MFA_SETUP or SOFTWARE_TOKEN_SETUP challenge each time your user signs in. Complete setup with AssociateSoftwareToken and VerifySoftwareToken. After you set up software token MFA for your user, Amazon Cognito generates a SOFTWARE_TOKEN_MFA challenge when they authenticate. Respond to this challenge with your user's TOTP.   Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. 
    */
   associateSoftwareToken(params: CognitoIdentityServiceProvider.Types.AssociateSoftwareTokenRequest, callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.AssociateSoftwareTokenResponse) => void): Request<CognitoIdentityServiceProvider.Types.AssociateSoftwareTokenResponse, AWSError>;
   /**
-   * Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA) for a user, with a unique private key that Amazon Cognito generates and returns in the API response. You can authorize an AssociateSoftwareToken request with either the user's access token, or a session string from a challenge response that you received from Amazon Cognito.  Amazon Cognito disassociates an existing software token when you verify the new token in a  VerifySoftwareToken API request. If you don't verify the software token and your user pool doesn't require MFA, the user can then authenticate with user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an MFA_SETUP or SOFTWARE_TOKEN_SETUP challenge each time your user signs. Complete setup with AssociateSoftwareToken and VerifySoftwareToken. After you set up software token MFA for your user, Amazon Cognito generates a SOFTWARE_TOKEN_MFA challenge when they authenticate. Respond to this challenge with your user's TOTP.   Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. 
+   * Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA) for a user, with a unique private key that Amazon Cognito generates and returns in the API response. You can authorize an AssociateSoftwareToken request with either the user's access token, or a session string from a challenge response that you received from Amazon Cognito.  Amazon Cognito disassociates an existing software token when you verify the new token in a  VerifySoftwareToken API request. If you don't verify the software token and your user pool doesn't require MFA, the user can then authenticate with user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an MFA_SETUP or SOFTWARE_TOKEN_SETUP challenge each time your user signs in. Complete setup with AssociateSoftwareToken and VerifySoftwareToken. After you set up software token MFA for your user, Amazon Cognito generates a SOFTWARE_TOKEN_MFA challenge when they authenticate. Respond to this challenge with your user's TOTP.   Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. 
    */
   associateSoftwareToken(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.AssociateSoftwareTokenResponse) => void): Request<CognitoIdentityServiceProvider.Types.AssociateSoftwareTokenResponse, AWSError>;
   /**
@@ -492,11 +492,11 @@ declare class CognitoIdentityServiceProvider extends Service {
    */
   getIdentityProviderByIdentifier(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.GetIdentityProviderByIdentifierResponse) => void): Request<CognitoIdentityServiceProvider.Types.GetIdentityProviderByIdentifierResponse, AWSError>;
   /**
-   * Gets the detailed activity logging configuration for a user pool.
+   * Gets the logging configuration of a user pool.
    */
   getLogDeliveryConfiguration(params: CognitoIdentityServiceProvider.Types.GetLogDeliveryConfigurationRequest, callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.GetLogDeliveryConfigurationResponse) => void): Request<CognitoIdentityServiceProvider.Types.GetLogDeliveryConfigurationResponse, AWSError>;
   /**
-   * Gets the detailed activity logging configuration for a user pool.
+   * Gets the logging configuration of a user pool.
    */
   getLogDeliveryConfiguration(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.GetLogDeliveryConfigurationResponse) => void): Request<CognitoIdentityServiceProvider.Types.GetLogDeliveryConfigurationResponse, AWSError>;
   /**
@@ -660,11 +660,11 @@ declare class CognitoIdentityServiceProvider extends Service {
    */
   revokeToken(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.RevokeTokenResponse) => void): Request<CognitoIdentityServiceProvider.Types.RevokeTokenResponse, AWSError>;
   /**
-   * Sets up or modifies the detailed activity logging configuration of a user pool.
+   * Sets up or modifies the logging configuration of a user pool. User pools can export user notification logs and advanced security features user activity logs.
    */
   setLogDeliveryConfiguration(params: CognitoIdentityServiceProvider.Types.SetLogDeliveryConfigurationRequest, callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.SetLogDeliveryConfigurationResponse) => void): Request<CognitoIdentityServiceProvider.Types.SetLogDeliveryConfigurationResponse, AWSError>;
   /**
-   * Sets up or modifies the detailed activity logging configuration of a user pool.
+   * Sets up or modifies the logging configuration of a user pool. User pools can export user notification logs and advanced security features user activity logs.
    */
   setLogDeliveryConfiguration(callback?: (err: AWSError, data: CognitoIdentityServiceProvider.Types.SetLogDeliveryConfigurationResponse) => void): Request<CognitoIdentityServiceProvider.Types.SetLogDeliveryConfigurationResponse, AWSError>;
   /**
@@ -1997,7 +1997,7 @@ declare namespace CognitoIdentityServiceProvider {
      */
     AnalyticsConfiguration?: AnalyticsConfigurationType;
     /**
-     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.  
+     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.   Defaults to LEGACY when you don't provide a value.
      */
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
     /**
@@ -2522,11 +2522,17 @@ declare namespace CognitoIdentityServiceProvider {
      */
     CompromisedCredentialsDetected?: WrappedBooleanType;
   }
-  export type EventSourceName = "userNotification"|string;
+  export type EventSourceName = "userNotification"|"userAuthEvents"|string;
   export type EventType = "SignIn"|"SignUp"|"ForgotPassword"|"PasswordChange"|"ResendCode"|string;
   export type ExplicitAuthFlowsListType = ExplicitAuthFlowsType[];
   export type ExplicitAuthFlowsType = "ADMIN_NO_SRP_AUTH"|"CUSTOM_AUTH_FLOW_ONLY"|"USER_PASSWORD_AUTH"|"ALLOW_ADMIN_USER_PASSWORD_AUTH"|"ALLOW_CUSTOM_AUTH"|"ALLOW_USER_PASSWORD_AUTH"|"ALLOW_USER_SRP_AUTH"|"ALLOW_REFRESH_TOKEN_AUTH"|string;
   export type FeedbackValueType = "Valid"|"Invalid"|string;
+  export interface FirehoseConfigurationType {
+    /**
+     * The ARN of an Amazon Data Firehose stream that's the destination for advanced security features log export.
+     */
+    StreamArn?: ArnType;
+  }
   export type ForceAliasCreation = boolean;
   export interface ForgetDeviceRequest {
     /**
@@ -2637,13 +2643,13 @@ declare namespace CognitoIdentityServiceProvider {
   }
   export interface GetLogDeliveryConfigurationRequest {
     /**
-     * The ID of the user pool where you want to view detailed activity logging configuration.
+     * The ID of the user pool that has the logging configuration that you want to view.
      */
     UserPoolId: UserPoolIdType;
   }
   export interface GetLogDeliveryConfigurationResponse {
     /**
-     * The detailed activity logging configuration of the requested user pool.
+     * The logging configuration of the requested user pool.
      */
     LogDeliveryConfiguration?: LogDeliveryConfigurationType;
   }
@@ -3180,29 +3186,37 @@ declare namespace CognitoIdentityServiceProvider {
   export type LogConfigurationListType = LogConfigurationType[];
   export interface LogConfigurationType {
     /**
-     * The errorlevel selection of logs that a user pool sends for detailed activity logging.
+     * The errorlevel selection of logs that a user pool sends for detailed activity logging. To send userNotification activity with information about message delivery, choose ERROR with CloudWatchLogsConfiguration. To send userAuthEvents activity with user logs from advanced security features, choose INFO with one of CloudWatchLogsConfiguration, FirehoseConfiguration, or S3Configuration.
      */
     LogLevel: LogLevel;
     /**
-     * The source of events that your user pool sends for detailed activity logging.
+     * The source of events that your user pool sends for logging. To send error-level logs about user notification activity, set to userNotification. To send info-level logs about advanced security features user activity, set to userAuthEvents.
      */
     EventSource: EventSourceName;
     /**
-     * The CloudWatch logging destination of a user pool.
+     * The CloudWatch log group destination of user pool detailed activity logs, or of user activity log export with advanced security features.
      */
     CloudWatchLogsConfiguration?: CloudWatchLogsConfigurationType;
+    /**
+     * The Amazon S3 bucket destination of user activity log export with advanced security features. To activate this setting,  advanced security features must be active in your user pool.
+     */
+    S3Configuration?: S3ConfigurationType;
+    /**
+     * The Amazon Data Firehose stream destination of user activity log export with advanced security features. To activate this setting,  advanced security features must be active in your user pool.
+     */
+    FirehoseConfiguration?: FirehoseConfigurationType;
   }
   export interface LogDeliveryConfigurationType {
     /**
-     * The ID of the user pool where you configured detailed activity logging.
+     * The ID of the user pool where you configured logging.
      */
     UserPoolId: UserPoolIdType;
     /**
-     * The detailed activity logging destination of a user pool.
+     * A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.
      */
     LogConfigurations: LogConfigurationListType;
   }
-  export type LogLevel = "ERROR"|string;
+  export type LogLevel = "ERROR"|"INFO"|string;
   export type LogoutURLsListType = RedirectUrlType[];
   export type LongType = number;
   export type MFAOptionListType = MFAOptionType[];
@@ -3295,6 +3309,7 @@ declare namespace CognitoIdentityServiceProvider {
   export type OAuthFlowsType = OAuthFlowType[];
   export type PaginationKey = string;
   export type PaginationKeyType = string;
+  export type PasswordHistorySizeType = number;
   export type PasswordPolicyMinLengthType = number;
   export interface PasswordPolicyType {
     /**
@@ -3317,6 +3332,10 @@ declare namespace CognitoIdentityServiceProvider {
      * In the password policy that you have set, refers to whether you have required users to use at least one symbol in their password.
      */
     RequireSymbols?: BooleanType;
+    /**
+     * The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of n previous passwords, where n is the value of PasswordHistorySize. Password history isn't enforced and isn't displayed in DescribeUserPool responses when you set this value to 0 or don't provide it. To activate this setting,  advanced security features must be active in your user pool.
+     */
+    PasswordHistorySize?: PasswordHistorySizeType;
     /**
      * The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to 7. If you submit a value of 0, Amazon Cognito treats it as a null value and sets TemporaryPasswordValidityDays to its default value.  When you set TemporaryPasswordValidityDays for a user pool, you can no longer set a value for the legacy UnusedAccountValidityDays parameter in that user pool. 
      */
@@ -3560,7 +3579,14 @@ declare namespace CognitoIdentityServiceProvider {
     SkippedIPRangeList?: SkippedIPRangeListType;
   }
   export type RiskLevelType = "Low"|"Medium"|"High"|string;
+  export type S3ArnType = string;
   export type S3BucketType = string;
+  export interface S3ConfigurationType {
+    /**
+     * The ARN of an Amazon S3 bucket that's the destination for advanced security features log export.
+     */
+    BucketArn?: S3ArnType;
+  }
   export type SESConfigurationSet = string;
   export interface SMSMfaSettingsType {
     /**
@@ -3612,11 +3638,11 @@ declare namespace CognitoIdentityServiceProvider {
   export type SessionType = string;
   export interface SetLogDeliveryConfigurationRequest {
     /**
-     * The ID of the user pool where you want to configure detailed activity logging .
+     * The ID of the user pool where you want to configure logging.
      */
     UserPoolId: UserPoolIdType;
     /**
-     * A collection of all of the detailed activity logging configurations for a user pool.
+     * A collection of the logging configurations for a user pool.
      */
     LogConfigurations: LogConfigurationListType;
   }
@@ -3786,7 +3812,7 @@ declare namespace CognitoIdentityServiceProvider {
      */
     CodeDeliveryDetails?: CodeDeliveryDetailsType;
     /**
-     * The UUID of the authenticated user. This isn't the same as username.
+     * The 128-bit ID of the authenticated user. This isn't the same as username.
      */
     UserSub: StringType;
   }
@@ -4165,7 +4191,7 @@ declare namespace CognitoIdentityServiceProvider {
      */
     AnalyticsConfiguration?: AnalyticsConfigurationType;
     /**
-     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.  
+     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.   Defaults to LEGACY when you don't provide a value.
      */
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
     /**
@@ -4470,7 +4496,7 @@ declare namespace CognitoIdentityServiceProvider {
      */
     AnalyticsConfiguration?: AnalyticsConfigurationType;
     /**
-     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the old behavior of Amazon Cognito where user existence related errors aren't prevented.  
+     * Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to ENABLED and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to LEGACY, those APIs return a UserNotFoundException exception if the user doesn't exist in the user pool. Valid values include:    ENABLED - This prevents user existence-related errors.    LEGACY - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.   Defaults to LEGACY when you don't provide a value.
      */
     PreventUserExistenceErrors?: PreventUserExistenceErrorTypes;
     /**

package/node_modules/aws-sdk/clients/costoptimizationhub.d.ts

@@ -52,11 +52,11 @@ declare class CostOptimizationHub extends Service {
    */
   listRecommendations(callback?: (err: AWSError, data: CostOptimizationHub.Types.ListRecommendationsResponse) => void): Request<CostOptimizationHub.Types.ListRecommendationsResponse, AWSError>;
   /**
-   * Updates the enrollment (opt in and opt out) status of an account to the Cost Optimization Hub service. If the account is a management account of an organization, this action can also be used to enroll member accounts of the organization. You must have the appropriate permissions to opt in to Cost Optimization Hub and to view its recommendations. When you opt in, Cost Optimization Hub automatically creates a service-linked role in your account to access its data.
+   * Updates the enrollment (opt in and opt out) status of an account to the Cost Optimization Hub service. If the account is a management account or delegated administrator of an organization, this action can also be used to enroll member accounts of the organization. You must have the appropriate permissions to opt in to Cost Optimization Hub and to view its recommendations. When you opt in, Cost Optimization Hub automatically creates a service-linked role in your account to access its data.
    */
   updateEnrollmentStatus(params: CostOptimizationHub.Types.UpdateEnrollmentStatusRequest, callback?: (err: AWSError, data: CostOptimizationHub.Types.UpdateEnrollmentStatusResponse) => void): Request<CostOptimizationHub.Types.UpdateEnrollmentStatusResponse, AWSError>;
   /**
-   * Updates the enrollment (opt in and opt out) status of an account to the Cost Optimization Hub service. If the account is a management account of an organization, this action can also be used to enroll member accounts of the organization. You must have the appropriate permissions to opt in to Cost Optimization Hub and to view its recommendations. When you opt in, Cost Optimization Hub automatically creates a service-linked role in your account to access its data.
+   * Updates the enrollment (opt in and opt out) status of an account to the Cost Optimization Hub service. If the account is a management account or delegated administrator of an organization, this action can also be used to enroll member accounts of the organization. You must have the appropriate permissions to opt in to Cost Optimization Hub and to view its recommendations. When you opt in, Cost Optimization Hub automatically creates a service-linked role in your account to access its data.
    */
   updateEnrollmentStatus(callback?: (err: AWSError, data: CostOptimizationHub.Types.UpdateEnrollmentStatusResponse) => void): Request<CostOptimizationHub.Types.UpdateEnrollmentStatusResponse, AWSError>;
   /**
@@ -627,7 +627,7 @@ declare namespace CostOptimizationHub {
      */
     items?: AccountEnrollmentStatuses;
     /**
-     * The enrollment status of all member accounts in the organization if the account is the management account.
+     * The enrollment status of all member accounts in the organization if the account is the management account or delegated administrator.
      */
     includeMemberAccounts?: Boolean;
     /**
@@ -642,9 +642,13 @@ declare namespace CostOptimizationHub {
      */
     groupBy: String;
     /**
-     * The maximum number of recommendations that are returned for the request.
+     * The maximum number of recommendations to be returned for the request.
      */
     maxResults?: ListRecommendationSummariesRequestMaxResultsInteger;
+    /**
+     * Additional metrics to be returned for the request. The only valid value is savingsPercentage.
+     */
+    metrics?: SummaryMetricsList;
     /**
      * The token to retrieve the next set of results.
      */
@@ -657,7 +661,7 @@ declare namespace CostOptimizationHub {
      */
     estimatedTotalDedupedSavings?: Double;
     /**
-     * List of all savings recommendations.
+     * A list of all savings recommendations.
      */
     items?: RecommendationSummariesList;
     /**
@@ -668,6 +672,10 @@ declare namespace CostOptimizationHub {
      * The currency code used for the recommendation.
      */
     currencyCode?: String;
+    /**
+     * The results or descriptions for the additional metrics, based on whether the metrics were or were not requested.
+     */
+    metrics?: SummaryMetricsResult;
     /**
      * The token to retrieve the next set of results.
      */
@@ -1249,6 +1257,14 @@ declare namespace CostOptimizationHub {
     sizeInGb?: Double;
   }
   export type String = string;
+  export type SummaryMetrics = "SavingsPercentage"|string;
+  export type SummaryMetricsList = SummaryMetrics[];
+  export interface SummaryMetricsResult {
+    /**
+     * The savings percentage based on your Amazon Web Services spend over the past 30 days.  Savings percentage is only supported when filtering by Region, account ID, or tags. 
+     */
+    savingsPercentage?: String;
+  }
   export interface Tag {
     /**
      * The key that's associated with the tag.
@@ -1267,7 +1283,7 @@ declare namespace CostOptimizationHub {
      */
     status: EnrollmentStatus;
     /**
-     * Indicates whether to enroll member accounts of the organization if the account is the management account.
+     * Indicates whether to enroll member accounts of the organization if the account is the management account or delegated administrator.
      */
     includeMemberAccounts?: Boolean;
   }