aws-cdk-lib 2.171.0__py3-none-any.whl → 2.172.0__py3-none-any.whl

aws_cdk/aws_cognito/__init__.py

@@ -21,6 +21,9 @@ This module is part of the [AWS Cloud Development Kit](https://github.com/aws/aw
   * [User Pools](#user-pools)
 
     * [Sign Up](#sign-up)
+
+      * [Code Verification](#code-verification)
+      * [Link Verification](#link-verification)
     * [Sign In](#sign-in)
     * [Attributes](#attributes)
     * [Attribute verification](#attribute-verification)
@@ -698,6 +701,9 @@ Custom authentication protocols can be configured by setting the `custom` proper
 functions for the corresponding user pool [triggers](#lambda-triggers). Learn more at [Custom Authentication
 Flow](https://docs.aws.amazon.com/cognito/latest/developerguide/amazon-cognito-user-pools-authentication-flow.html#amazon-cognito-user-pools-custom-authentication-flow).
 
+Choice-based authentication can be configured by setting the `user` property under `authFlow`. This enables the
+`USER_AUTH` authentication flow. Learn more at [Choice-based authentication](https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flows-selection-sdk.html#authentication-flows-selection-choice).
+
 In addition to these authentication mechanisms, Cognito user pools also support using OAuth 2.0 framework for
 authenticating users. User pool clients can be configured with OAuth 2.0 authorization flows and scopes. Learn more
 about the [OAuth 2.0 authorization framework](https://tools.ietf.org/html/rfc6749) and [Cognito user pool's
@@ -982,6 +988,21 @@ Existing domains can be imported into CDK apps using `UserPoolDomain.fromDomainN
 my_user_pool_domain = cognito.UserPoolDomain.from_domain_name(self, "my-user-pool-domain", "domain-name")
 ```
 
+To get the domain name of the CloudFront distribution associated with the user pool domain, use `cloudFrontEndpoint` method.
+
+```python
+userpool = cognito.UserPool(self, "UserPool")
+domain = userpool.add_domain("Domain",
+    cognito_domain=cognito.CognitoDomainOptions(
+        domain_prefix="my-awesome-app"
+    )
+)
+
+CfnOutput(self, "CloudFrontEndpoint",
+    value=domain.cloud_front_endpoint
+)
+```
+
 ### Deletion protection
 
 Deletion protection can be enabled on a user pool to prevent accidental deletion:
@@ -1499,6 +1520,7 @@ class AttributeMapping:
     name_mapping={
         "admin_user_password": "adminUserPassword",
         "custom": "custom",
+        "user": "user",
         "user_password": "userPassword",
         "user_srp": "userSrp",
     },
@@ -1509,6 +1531,7 @@ class AuthFlow:
         *,
         admin_user_password: typing.Optional[builtins.bool] = None,
         custom: typing.Optional[builtins.bool] = None,
+        user: typing.Optional[builtins.bool] = None,
         user_password: typing.Optional[builtins.bool] = None,
         user_srp: typing.Optional[builtins.bool] = None,
     ) -> None:
@@ -1516,6 +1539,7 @@ class AuthFlow:
 
         :param admin_user_password: Enable admin based user password authentication flow. Default: false
         :param custom: Enable custom authentication flow. Default: false
+        :param user: Enable Choice-based authentication. Default: false
         :param user_password: Enable auth using username & password. Default: false
         :param user_srp: Enable SRP based authentication. Default: false
 
@@ -1536,6 +1560,7 @@ class AuthFlow:
             type_hints = typing.get_type_hints(_typecheckingstub__3dd38e6e4617deee919f37d20a9ae635331043b4cf42c8d31fdbb0d3c29baeda)
             check_type(argname="argument admin_user_password", value=admin_user_password, expected_type=type_hints["admin_user_password"])
             check_type(argname="argument custom", value=custom, expected_type=type_hints["custom"])
+            check_type(argname="argument user", value=user, expected_type=type_hints["user"])
             check_type(argname="argument user_password", value=user_password, expected_type=type_hints["user_password"])
             check_type(argname="argument user_srp", value=user_srp, expected_type=type_hints["user_srp"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -1543,6 +1568,8 @@ class AuthFlow:
             self._values["admin_user_password"] = admin_user_password
         if custom is not None:
             self._values["custom"] = custom
+        if user is not None:
+            self._values["user"] = user
         if user_password is not None:
             self._values["user_password"] = user_password
         if user_srp is not None:
@@ -1566,6 +1593,15 @@ class AuthFlow:
         result = self._values.get("custom")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def user(self) -> typing.Optional[builtins.bool]:
+        '''Enable Choice-based authentication.
+
+        :default: false
+        '''
+        result = self._values.get("user")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def user_password(self) -> typing.Optional[builtins.bool]:
         '''Enable auth using username & password.
@@ -3957,6 +3993,483 @@ class CfnLogDeliveryConfigurationProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556)
+class CfnManagedLoginBranding(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_cognito.CfnManagedLoginBranding",
+):
+    '''Resource Type definition for AWS::Cognito::ManagedLoginBranding.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html
+    :cloudformationResource: AWS::Cognito::ManagedLoginBranding
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_cognito as cognito
+        
+        # settings: Any
+        
+        cfn_managed_login_branding = cognito.CfnManagedLoginBranding(self, "MyCfnManagedLoginBranding",
+            user_pool_id="userPoolId",
+        
+            # the properties below are optional
+            assets=[cognito.CfnManagedLoginBranding.AssetTypeProperty(
+                category="category",
+                color_mode="colorMode",
+                extension="extension",
+        
+                # the properties below are optional
+                bytes="bytes",
+                resource_id="resourceId"
+            )],
+            client_id="clientId",
+            return_merged_resources=False,
+            settings=settings,
+            use_cognito_provided_values=False
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        user_pool_id: builtins.str,
+        assets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union["CfnManagedLoginBranding.AssetTypeProperty", typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        client_id: typing.Optional[builtins.str] = None,
+        return_merged_resources: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        settings: typing.Any = None,
+        use_cognito_provided_values: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param user_pool_id: 
+        :param assets: 
+        :param client_id: 
+        :param return_merged_resources: 
+        :param settings: 
+        :param use_cognito_provided_values: 
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__478f8899894ffccc3f20b06ae18c36beb41bf5c5c9aa65a99dbdbf95ce00be03)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnManagedLoginBrandingProps(
+            user_pool_id=user_pool_id,
+            assets=assets,
+            client_id=client_id,
+            return_merged_resources=return_merged_resources,
+            settings=settings,
+            use_cognito_provided_values=use_cognito_provided_values,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a0d347f9b2c0101529861e949ebe0a802ebc429100648b4c870711c733b50faa)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__1112e058064e524fbe515ff8791467e6949341c6ddd8deb9c33af3658b16d447)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrManagedLoginBrandingId")
+    def attr_managed_login_branding_id(self) -> builtins.str:
+        '''
+        :cloudformationAttribute: ManagedLoginBrandingId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrManagedLoginBrandingId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="userPoolId")
+    def user_pool_id(self) -> builtins.str:
+        return typing.cast(builtins.str, jsii.get(self, "userPoolId"))
+
+    @user_pool_id.setter
+    def user_pool_id(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__73b2532ea6e2300654d7fcc90b2b1fd38f772128b765556475cff8c1be577731)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "userPoolId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="assets")
+    def assets(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnManagedLoginBranding.AssetTypeProperty"]]]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnManagedLoginBranding.AssetTypeProperty"]]]], jsii.get(self, "assets"))
+
+    @assets.setter
+    def assets(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, "CfnManagedLoginBranding.AssetTypeProperty"]]]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fc790275f28767420e82246bd64663082d888a2c93af667d6c769ece2924f786)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "assets", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="clientId")
+    def client_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "clientId"))
+
+    @client_id.setter
+    def client_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a668420e0b3cbceec0ade65febad3505a8186912fb1310c4ecdfbbcd6bac7dc2)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "clientId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="returnMergedResources")
+    def return_merged_resources(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "returnMergedResources"))
+
+    @return_merged_resources.setter
+    def return_merged_resources(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ea8e49ce2efc2678bcbf1fdf919c5bbeac64755b39b20ef47a3f76532c424dfc)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "returnMergedResources", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="settings")
+    def settings(self) -> typing.Any:
+        return typing.cast(typing.Any, jsii.get(self, "settings"))
+
+    @settings.setter
+    def settings(self, value: typing.Any) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f22fe695e1f64d8a038409355220b2e920e04882727bafb532a5728f1ffe677c)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "settings", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="useCognitoProvidedValues")
+    def use_cognito_provided_values(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], jsii.get(self, "useCognitoProvidedValues"))
+
+    @use_cognito_provided_values.setter
+    def use_cognito_provided_values(
+        self,
+        value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__4b61f0689e78fea36c23c402c48085be3f2c198b922507818947333d59445895)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "useCognitoProvidedValues", value) # pyright: ignore[reportArgumentType]
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cognito.CfnManagedLoginBranding.AssetTypeProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "category": "category",
+            "color_mode": "colorMode",
+            "extension": "extension",
+            "bytes": "bytes",
+            "resource_id": "resourceId",
+        },
+    )
+    class AssetTypeProperty:
+        def __init__(
+            self,
+            *,
+            category: builtins.str,
+            color_mode: builtins.str,
+            extension: builtins.str,
+            bytes: typing.Optional[builtins.str] = None,
+            resource_id: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param category: 
+            :param color_mode: 
+            :param extension: 
+            :param bytes: 
+            :param resource_id: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cognito as cognito
+                
+                asset_type_property = cognito.CfnManagedLoginBranding.AssetTypeProperty(
+                    category="category",
+                    color_mode="colorMode",
+                    extension="extension",
+                
+                    # the properties below are optional
+                    bytes="bytes",
+                    resource_id="resourceId"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a8c0b7bdabc4393d484227225be1727f821e164eec56517d614639ac2059509c)
+                check_type(argname="argument category", value=category, expected_type=type_hints["category"])
+                check_type(argname="argument color_mode", value=color_mode, expected_type=type_hints["color_mode"])
+                check_type(argname="argument extension", value=extension, expected_type=type_hints["extension"])
+                check_type(argname="argument bytes", value=bytes, expected_type=type_hints["bytes"])
+                check_type(argname="argument resource_id", value=resource_id, expected_type=type_hints["resource_id"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "category": category,
+                "color_mode": color_mode,
+                "extension": extension,
+            }
+            if bytes is not None:
+                self._values["bytes"] = bytes
+            if resource_id is not None:
+                self._values["resource_id"] = resource_id
+
+        @builtins.property
+        def category(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html#cfn-cognito-managedloginbranding-assettype-category
+            '''
+            result = self._values.get("category")
+            assert result is not None, "Required property 'category' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def color_mode(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html#cfn-cognito-managedloginbranding-assettype-colormode
+            '''
+            result = self._values.get("color_mode")
+            assert result is not None, "Required property 'color_mode' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def extension(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html#cfn-cognito-managedloginbranding-assettype-extension
+            '''
+            result = self._values.get("extension")
+            assert result is not None, "Required property 'extension' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def bytes(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html#cfn-cognito-managedloginbranding-assettype-bytes
+            '''
+            result = self._values.get("bytes")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def resource_id(self) -> typing.Optional[builtins.str]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-managedloginbranding-assettype.html#cfn-cognito-managedloginbranding-assettype-resourceid
+            '''
+            result = self._values.get("resource_id")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "AssetTypeProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_cognito.CfnManagedLoginBrandingProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "user_pool_id": "userPoolId",
+        "assets": "assets",
+        "client_id": "clientId",
+        "return_merged_resources": "returnMergedResources",
+        "settings": "settings",
+        "use_cognito_provided_values": "useCognitoProvidedValues",
+    },
+)
+class CfnManagedLoginBrandingProps:
+    def __init__(
+        self,
+        *,
+        user_pool_id: builtins.str,
+        assets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnManagedLoginBranding.AssetTypeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+        client_id: typing.Optional[builtins.str] = None,
+        return_merged_resources: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+        settings: typing.Any = None,
+        use_cognito_provided_values: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnManagedLoginBranding``.
+
+        :param user_pool_id: 
+        :param assets: 
+        :param client_id: 
+        :param return_merged_resources: 
+        :param settings: 
+        :param use_cognito_provided_values: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_cognito as cognito
+            
+            # settings: Any
+            
+            cfn_managed_login_branding_props = cognito.CfnManagedLoginBrandingProps(
+                user_pool_id="userPoolId",
+            
+                # the properties below are optional
+                assets=[cognito.CfnManagedLoginBranding.AssetTypeProperty(
+                    category="category",
+                    color_mode="colorMode",
+                    extension="extension",
+            
+                    # the properties below are optional
+                    bytes="bytes",
+                    resource_id="resourceId"
+                )],
+                client_id="clientId",
+                return_merged_resources=False,
+                settings=settings,
+                use_cognito_provided_values=False
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__60e207e1aa2ab8ae23b36c3e1ae73765c6f328b13bf0c7b205865e93adc260df)
+            check_type(argname="argument user_pool_id", value=user_pool_id, expected_type=type_hints["user_pool_id"])
+            check_type(argname="argument assets", value=assets, expected_type=type_hints["assets"])
+            check_type(argname="argument client_id", value=client_id, expected_type=type_hints["client_id"])
+            check_type(argname="argument return_merged_resources", value=return_merged_resources, expected_type=type_hints["return_merged_resources"])
+            check_type(argname="argument settings", value=settings, expected_type=type_hints["settings"])
+            check_type(argname="argument use_cognito_provided_values", value=use_cognito_provided_values, expected_type=type_hints["use_cognito_provided_values"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "user_pool_id": user_pool_id,
+        }
+        if assets is not None:
+            self._values["assets"] = assets
+        if client_id is not None:
+            self._values["client_id"] = client_id
+        if return_merged_resources is not None:
+            self._values["return_merged_resources"] = return_merged_resources
+        if settings is not None:
+            self._values["settings"] = settings
+        if use_cognito_provided_values is not None:
+            self._values["use_cognito_provided_values"] = use_cognito_provided_values
+
+    @builtins.property
+    def user_pool_id(self) -> builtins.str:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-userpoolid
+        '''
+        result = self._values.get("user_pool_id")
+        assert result is not None, "Required property 'user_pool_id' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def assets(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnManagedLoginBranding.AssetTypeProperty]]]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-assets
+        '''
+        result = self._values.get("assets")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnManagedLoginBranding.AssetTypeProperty]]]], result)
+
+    @builtins.property
+    def client_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-clientid
+        '''
+        result = self._values.get("client_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def return_merged_resources(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-returnmergedresources
+        '''
+        result = self._values.get("return_merged_resources")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    @builtins.property
+    def settings(self) -> typing.Any:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-settings
+        '''
+        result = self._values.get("settings")
+        return typing.cast(typing.Any, result)
+
+    @builtins.property
+    def use_cognito_provided_values(
+        self,
+    ) -> typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-managedloginbranding.html#cfn-cognito-managedloginbranding-usecognitoprovidedvalues
+        '''
+        result = self._values.get("use_cognito_provided_values")
+        return typing.cast(typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnManagedLoginBrandingProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556, _ITaggable_36806126)
 class CfnUserPool(
     _CfnResource_9df397a6,
@@ -4052,6 +4565,9 @@ class CfnUserPool(
                     require_symbols=False,
                     require_uppercase=False,
                     temporary_password_validity_days=123
+                ),
+                sign_in_policy=cognito.CfnUserPool.SignInPolicyProperty(
+                    allowed_first_auth_factors=["allowedFirstAuthFactors"]
                 )
             ),
             schema=[cognito.CfnUserPool.SchemaAttributeProperty(
@@ -4091,6 +4607,7 @@ class CfnUserPool(
             ),
             user_pool_name="userPoolName",
             user_pool_tags=user_pool_tags,
+            user_pool_tier="userPoolTier",
             verification_message_template=cognito.CfnUserPool.VerificationMessageTemplateProperty(
                 default_email_option="defaultEmailOption",
                 email_message="emailMessage",
@@ -4098,7 +4615,9 @@ class CfnUserPool(
                 email_subject="emailSubject",
                 email_subject_by_link="emailSubjectByLink",
                 sms_message="smsMessage"
-            )
+            ),
+            web_authn_relying_party_id="webAuthnRelyingPartyId",
+            web_authn_user_verification="webAuthnUserVerification"
         )
     '''
 
@@ -4132,7 +4651,10 @@ class CfnUserPool(
         user_pool_add_ons: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUserPool.UserPoolAddOnsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         user_pool_name: typing.Optional[builtins.str] = None,
         user_pool_tags: typing.Any = None,
+        user_pool_tier: typing.Optional[builtins.str] = None,
         verification_message_template: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUserPool.VerificationMessageTemplateProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_authn_relying_party_id: typing.Optional[builtins.str] = None,
+        web_authn_user_verification: typing.Optional[builtins.str] = None,
     ) -> None:
         '''
         :param scope: Scope in which this resource is defined.
@@ -4162,7 +4684,10 @@ class CfnUserPool(
         :param user_pool_add_ons: User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to ``AUDIT`` . To configure automatic security responses to risky traffic to your user pool, set to ``ENFORCED`` . For more information, see `Adding advanced security to a user pool <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html>`_ .
         :param user_pool_name: A string used to name the user pool.
         :param user_pool_tags: The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
+        :param user_pool_tier: 
         :param verification_message_template: The template for the verification message that your user pool delivers to users who set an email address or phone number attribute. Set the email message type that corresponds to your ``DefaultEmailOption`` selection. For ``CONFIRM_WITH_LINK`` , specify an ``EmailMessageByLink`` and leave ``EmailMessage`` blank. For ``CONFIRM_WITH_CODE`` , specify an ``EmailMessage`` and leave ``EmailMessageByLink`` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.
+        :param web_authn_relying_party_id: 
+        :param web_authn_user_verification: 
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__32d20f28e2758f9a461380e2ed5d06233baf0f45541047ba837f26ebc37ee551)
@@ -4194,7 +4719,10 @@ class CfnUserPool(
             user_pool_add_ons=user_pool_add_ons,
             user_pool_name=user_pool_name,
             user_pool_tags=user_pool_tags,
+            user_pool_tier=user_pool_tier,
             verification_message_template=verification_message_template,
+            web_authn_relying_party_id=web_authn_relying_party_id,
+            web_authn_user_verification=web_authn_user_verification,
         )
 
         jsii.create(self.__class__, self, [scope, id, props])
@@ -4675,6 +5203,18 @@ class CfnUserPool(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "userPoolTagsRaw", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="userPoolTier")
+    def user_pool_tier(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "userPoolTier"))
+
+    @user_pool_tier.setter
+    def user_pool_tier(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__7b34a7e631952732eaf3564630f968b4a1066c2249e1bd77fa5894ac20d552db)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "userPoolTier", value) # pyright: ignore[reportArgumentType]
+
     @builtins.property
     @jsii.member(jsii_name="verificationMessageTemplate")
     def verification_message_template(
@@ -4693,6 +5233,30 @@ class CfnUserPool(
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
         jsii.set(self, "verificationMessageTemplate", value) # pyright: ignore[reportArgumentType]
 
+    @builtins.property
+    @jsii.member(jsii_name="webAuthnRelyingPartyId")
+    def web_authn_relying_party_id(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "webAuthnRelyingPartyId"))
+
+    @web_authn_relying_party_id.setter
+    def web_authn_relying_party_id(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__2a2852b3b820fa8903c8ee86e4c615c763dbc2f40270d7dddb4851a596a4b629)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "webAuthnRelyingPartyId", value) # pyright: ignore[reportArgumentType]
+
+    @builtins.property
+    @jsii.member(jsii_name="webAuthnUserVerification")
+    def web_authn_user_verification(self) -> typing.Optional[builtins.str]:
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "webAuthnUserVerification"))
+
+    @web_authn_user_verification.setter
+    def web_authn_user_verification(self, value: typing.Optional[builtins.str]) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__39e1b7a43a4375c7269c036061949915e9a6e4528f8341df4df0a6b046ac6a11)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "webAuthnUserVerification", value) # pyright: ignore[reportArgumentType]
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cognito.CfnUserPool.AccountRecoverySettingProperty",
         jsii_struct_bases=[],
@@ -5954,19 +6518,24 @@ class CfnUserPool(
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cognito.CfnUserPool.PoliciesProperty",
         jsii_struct_bases=[],
-        name_mapping={"password_policy": "passwordPolicy"},
+        name_mapping={
+            "password_policy": "passwordPolicy",
+            "sign_in_policy": "signInPolicy",
+        },
     )
     class PoliciesProperty:
         def __init__(
             self,
             *,
             password_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUserPool.PasswordPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+            sign_in_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnUserPool.SignInPolicyProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
         ) -> None:
             '''A list of user pool policies. Contains the policy that sets password-complexity requirements.
 
             This data type is a request and response parameter of `CreateUserPool <https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html>`_ and `UpdateUserPool <https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html>`_ , and a response parameter of `DescribeUserPool <https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html>`_ .
 
             :param password_policy: The password policy settings for a user pool, including complexity, history, and length requirements.
+            :param sign_in_policy: 
 
             :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-policies.html
             :exampleMetadata: fixture=_generated
@@ -5986,15 +6555,21 @@ class CfnUserPool(
                         require_symbols=False,
                         require_uppercase=False,
                         temporary_password_validity_days=123
+                    ),
+                    sign_in_policy=cognito.CfnUserPool.SignInPolicyProperty(
+                        allowed_first_auth_factors=["allowedFirstAuthFactors"]
                     )
                 )
             '''
             if __debug__:
                 type_hints = typing.get_type_hints(_typecheckingstub__9a9937f0b75c9ab1976e5dbd8fe12631390f6d478c894cb0164171b2f9dc39c5)
                 check_type(argname="argument password_policy", value=password_policy, expected_type=type_hints["password_policy"])
+                check_type(argname="argument sign_in_policy", value=sign_in_policy, expected_type=type_hints["sign_in_policy"])
             self._values: typing.Dict[builtins.str, typing.Any] = {}
             if password_policy is not None:
                 self._values["password_policy"] = password_policy
+            if sign_in_policy is not None:
+                self._values["sign_in_policy"] = sign_in_policy
 
         @builtins.property
         def password_policy(
@@ -6007,6 +6582,16 @@ class CfnUserPool(
             result = self._values.get("password_policy")
             return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPool.PasswordPolicyProperty"]], result)
 
+        @builtins.property
+        def sign_in_policy(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPool.SignInPolicyProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-policies.html#cfn-cognito-userpool-policies-signinpolicy
+            '''
+            result = self._values.get("sign_in_policy")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnUserPool.SignInPolicyProperty"]], result)
+
         def __eq__(self, rhs: typing.Any) -> builtins.bool:
             return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -6359,6 +6944,61 @@ class CfnUserPool(
                 k + "=" + repr(v) for k, v in self._values.items()
             )
 
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_cognito.CfnUserPool.SignInPolicyProperty",
+        jsii_struct_bases=[],
+        name_mapping={"allowed_first_auth_factors": "allowedFirstAuthFactors"},
+    )
+    class SignInPolicyProperty:
+        def __init__(
+            self,
+            *,
+            allowed_first_auth_factors: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''
+            :param allowed_first_auth_factors: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-signinpolicy.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_cognito as cognito
+                
+                sign_in_policy_property = cognito.CfnUserPool.SignInPolicyProperty(
+                    allowed_first_auth_factors=["allowedFirstAuthFactors"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__71f41ee8011d666621169ad6aeb915855a76a5e105809ce7914229f99c53dd8d)
+                check_type(argname="argument allowed_first_auth_factors", value=allowed_first_auth_factors, expected_type=type_hints["allowed_first_auth_factors"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if allowed_first_auth_factors is not None:
+                self._values["allowed_first_auth_factors"] = allowed_first_auth_factors
+
+        @builtins.property
+        def allowed_first_auth_factors(
+            self,
+        ) -> typing.Optional[typing.List[builtins.str]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-signinpolicy.html#cfn-cognito-userpool-signinpolicy-allowedfirstauthfactors
+            '''
+            result = self._values.get("allowed_first_auth_factors")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "SignInPolicyProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
     @jsii.data_type(
         jsii_type="aws-cdk-lib.aws_cognito.CfnUserPool.SmsConfigurationProperty",
         jsii_struct_bases=[],
@@ -9254,7 +9894,10 @@ class CfnUserPoolIdentityProviderProps:
         "user_pool_add_ons": "userPoolAddOns",
         "user_pool_name": "userPoolName",
         "user_pool_tags": "userPoolTags",
+        "user_pool_tier": "userPoolTier",
         "verification_message_template": "verificationMessageTemplate",
+        "web_authn_relying_party_id": "webAuthnRelyingPartyId",
+        "web_authn_user_verification": "webAuthnUserVerification",
     },
 )
 class CfnUserPoolProps:
@@ -9286,7 +9929,10 @@ class CfnUserPoolProps:
         user_pool_add_ons: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.UserPoolAddOnsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
         user_pool_name: typing.Optional[builtins.str] = None,
         user_pool_tags: typing.Any = None,
+        user_pool_tier: typing.Optional[builtins.str] = None,
         verification_message_template: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.VerificationMessageTemplateProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        web_authn_relying_party_id: typing.Optional[builtins.str] = None,
+        web_authn_user_verification: typing.Optional[builtins.str] = None,
     ) -> None:
         '''Properties for defining a ``CfnUserPool``.
 
@@ -9315,7 +9961,10 @@ class CfnUserPoolProps:
         :param user_pool_add_ons: User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to ``AUDIT`` . To configure automatic security responses to risky traffic to your user pool, set to ``ENFORCED`` . For more information, see `Adding advanced security to a user pool <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html>`_ .
         :param user_pool_name: A string used to name the user pool.
         :param user_pool_tags: The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
+        :param user_pool_tier: 
         :param verification_message_template: The template for the verification message that your user pool delivers to users who set an email address or phone number attribute. Set the email message type that corresponds to your ``DefaultEmailOption`` selection. For ``CONFIRM_WITH_LINK`` , specify an ``EmailMessageByLink`` and leave ``EmailMessage`` blank. For ``CONFIRM_WITH_CODE`` , specify an ``EmailMessage`` and leave ``EmailMessageByLink`` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.
+        :param web_authn_relying_party_id: 
+        :param web_authn_user_verification: 
 
         :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html
         :exampleMetadata: fixture=_generated
@@ -9398,6 +10047,9 @@ class CfnUserPoolProps:
                         require_symbols=False,
                         require_uppercase=False,
                         temporary_password_validity_days=123
+                    ),
+                    sign_in_policy=cognito.CfnUserPool.SignInPolicyProperty(
+                        allowed_first_auth_factors=["allowedFirstAuthFactors"]
                     )
                 ),
                 schema=[cognito.CfnUserPool.SchemaAttributeProperty(
@@ -9437,6 +10089,7 @@ class CfnUserPoolProps:
                 ),
                 user_pool_name="userPoolName",
                 user_pool_tags=user_pool_tags,
+                user_pool_tier="userPoolTier",
                 verification_message_template=cognito.CfnUserPool.VerificationMessageTemplateProperty(
                     default_email_option="defaultEmailOption",
                     email_message="emailMessage",
@@ -9444,7 +10097,9 @@ class CfnUserPoolProps:
                     email_subject="emailSubject",
                     email_subject_by_link="emailSubjectByLink",
                     sms_message="smsMessage"
-                )
+                ),
+                web_authn_relying_party_id="webAuthnRelyingPartyId",
+                web_authn_user_verification="webAuthnUserVerification"
             )
         '''
         if __debug__:
@@ -9474,7 +10129,10 @@ class CfnUserPoolProps:
             check_type(argname="argument user_pool_add_ons", value=user_pool_add_ons, expected_type=type_hints["user_pool_add_ons"])
             check_type(argname="argument user_pool_name", value=user_pool_name, expected_type=type_hints["user_pool_name"])
             check_type(argname="argument user_pool_tags", value=user_pool_tags, expected_type=type_hints["user_pool_tags"])
+            check_type(argname="argument user_pool_tier", value=user_pool_tier, expected_type=type_hints["user_pool_tier"])
             check_type(argname="argument verification_message_template", value=verification_message_template, expected_type=type_hints["verification_message_template"])
+            check_type(argname="argument web_authn_relying_party_id", value=web_authn_relying_party_id, expected_type=type_hints["web_authn_relying_party_id"])
+            check_type(argname="argument web_authn_user_verification", value=web_authn_user_verification, expected_type=type_hints["web_authn_user_verification"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if account_recovery_setting is not None:
             self._values["account_recovery_setting"] = account_recovery_setting
@@ -9526,8 +10184,14 @@ class CfnUserPoolProps:
             self._values["user_pool_name"] = user_pool_name
         if user_pool_tags is not None:
             self._values["user_pool_tags"] = user_pool_tags
+        if user_pool_tier is not None:
+            self._values["user_pool_tier"] = user_pool_tier
         if verification_message_template is not None:
             self._values["verification_message_template"] = verification_message_template
+        if web_authn_relying_party_id is not None:
+            self._values["web_authn_relying_party_id"] = web_authn_relying_party_id
+        if web_authn_user_verification is not None:
+            self._values["web_authn_user_verification"] = web_authn_user_verification
 
     @builtins.property
     def account_recovery_setting(
@@ -9836,6 +10500,14 @@ class CfnUserPoolProps:
         result = self._values.get("user_pool_tags")
         return typing.cast(typing.Any, result)
 
+    @builtins.property
+    def user_pool_tier(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-userpooltier
+        '''
+        result = self._values.get("user_pool_tier")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def verification_message_template(
         self,
@@ -9849,6 +10521,22 @@ class CfnUserPoolProps:
         result = self._values.get("verification_message_template")
         return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnUserPool.VerificationMessageTemplateProperty]], result)
 
+    @builtins.property
+    def web_authn_relying_party_id(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-webauthnrelyingpartyid
+        '''
+        result = self._values.get("web_authn_relying_party_id")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def web_authn_user_verification(self) -> typing.Optional[builtins.str]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html#cfn-cognito-userpool-webauthnuserverification
+        '''
+        result = self._values.get("web_authn_user_verification")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -17730,9 +18418,22 @@ class UserPoolDomain(
     @builtins.property
     @jsii.member(jsii_name="cloudFrontDomainName")
     def cloud_front_domain_name(self) -> builtins.str:
-        '''The domain name of the CloudFront distribution associated with the user pool domain.'''
+        '''(deprecated) The domain name of the CloudFront distribution associated with the user pool domain.
+
+        This method creates a custom resource internally to get the CloudFront domain name.
+
+        :deprecated: use ``cloudFrontEndpoint`` method instead.
+
+        :stability: deprecated
+        '''
         return typing.cast(builtins.str, jsii.get(self, "cloudFrontDomainName"))
 
+    @builtins.property
+    @jsii.member(jsii_name="cloudFrontEndpoint")
+    def cloud_front_endpoint(self) -> builtins.str:
+        '''The domain name of the CloudFront distribution associated with the user pool domain.'''
+        return typing.cast(builtins.str, jsii.get(self, "cloudFrontEndpoint"))
+
     @builtins.property
     @jsii.member(jsii_name="domainName")
     def domain_name(self) -> builtins.str:
@@ -21994,6 +22695,8 @@ __all__ = [
     "CfnIdentityPoolRoleAttachmentProps",
     "CfnLogDeliveryConfiguration",
     "CfnLogDeliveryConfigurationProps",
+    "CfnManagedLoginBranding",
+    "CfnManagedLoginBrandingProps",
     "CfnUserPool",
     "CfnUserPoolClient",
     "CfnUserPoolClientProps",
@@ -22126,6 +22829,7 @@ def _typecheckingstub__3dd38e6e4617deee919f37d20a9ae635331043b4cf42c8d31fdbb0d3c
     *,
     admin_user_password: typing.Optional[builtins.bool] = None,
     custom: typing.Optional[builtins.bool] = None,
+    user: typing.Optional[builtins.bool] = None,
     user_password: typing.Optional[builtins.bool] = None,
     user_srp: typing.Optional[builtins.bool] = None,
 ) -> None:
@@ -22504,6 +23208,91 @@ def _typecheckingstub__585789fa8816c3e4ed9b3aa9967435c1474787f750de3db35983f11ef
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__478f8899894ffccc3f20b06ae18c36beb41bf5c5c9aa65a99dbdbf95ce00be03(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    user_pool_id: builtins.str,
+    assets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnManagedLoginBranding.AssetTypeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    client_id: typing.Optional[builtins.str] = None,
+    return_merged_resources: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    settings: typing.Any = None,
+    use_cognito_provided_values: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a0d347f9b2c0101529861e949ebe0a802ebc429100648b4c870711c733b50faa(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__1112e058064e524fbe515ff8791467e6949341c6ddd8deb9c33af3658b16d447(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__73b2532ea6e2300654d7fcc90b2b1fd38f772128b765556475cff8c1be577731(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__fc790275f28767420e82246bd64663082d888a2c93af667d6c769ece2924f786(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.List[typing.Union[_IResolvable_da3f097b, CfnManagedLoginBranding.AssetTypeProperty]]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a668420e0b3cbceec0ade65febad3505a8186912fb1310c4ecdfbbcd6bac7dc2(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ea8e49ce2efc2678bcbf1fdf919c5bbeac64755b39b20ef47a3f76532c424dfc(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f22fe695e1f64d8a038409355220b2e920e04882727bafb532a5728f1ffe677c(
+    value: typing.Any,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4b61f0689e78fea36c23c402c48085be3f2c198b922507818947333d59445895(
+    value: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a8c0b7bdabc4393d484227225be1727f821e164eec56517d614639ac2059509c(
+    *,
+    category: builtins.str,
+    color_mode: builtins.str,
+    extension: builtins.str,
+    bytes: typing.Optional[builtins.str] = None,
+    resource_id: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__60e207e1aa2ab8ae23b36c3e1ae73765c6f328b13bf0c7b205865e93adc260df(
+    *,
+    user_pool_id: builtins.str,
+    assets: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnManagedLoginBranding.AssetTypeProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
+    client_id: typing.Optional[builtins.str] = None,
+    return_merged_resources: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+    settings: typing.Any = None,
+    use_cognito_provided_values: typing.Optional[typing.Union[builtins.bool, _IResolvable_da3f097b]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__32d20f28e2758f9a461380e2ed5d06233baf0f45541047ba837f26ebc37ee551(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,
@@ -22533,7 +23322,10 @@ def _typecheckingstub__32d20f28e2758f9a461380e2ed5d06233baf0f45541047ba837f26ebc
     user_pool_add_ons: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.UserPoolAddOnsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     user_pool_name: typing.Optional[builtins.str] = None,
     user_pool_tags: typing.Any = None,
+    user_pool_tier: typing.Optional[builtins.str] = None,
     verification_message_template: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.VerificationMessageTemplateProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_authn_relying_party_id: typing.Optional[builtins.str] = None,
+    web_authn_user_verification: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -22700,12 +23492,30 @@ def _typecheckingstub__c0ac7e31445bc4b1c75709a8cde084565899b188ecd5ed75a434afb3f
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__7b34a7e631952732eaf3564630f968b4a1066c2249e1bd77fa5894ac20d552db(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__9163d1ccc0cf294430031f1b8b5289192a6e048b52e8181e9ca8707780aac888(
     value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnUserPool.VerificationMessageTemplateProperty]],
 ) -> None:
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__2a2852b3b820fa8903c8ee86e4c615c763dbc2f40270d7dddb4851a596a4b629(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__39e1b7a43a4375c7269c036061949915e9a6e4528f8341df4df0a6b046ac6a11(
+    value: typing.Optional[builtins.str],
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__79c7f36a6b9a834beef59493981fd8b3c56dae29d4d3d36bb9b0a65305ebd4ce(
     *,
     recovery_mechanisms: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Sequence[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.RecoveryOptionProperty, typing.Dict[builtins.str, typing.Any]]]]]] = None,
@@ -22817,6 +23627,7 @@ def _typecheckingstub__388245a445a407251a06f0f49f236a6b0a76ff7177f23a1d5cd9d4ffa
 def _typecheckingstub__9a9937f0b75c9ab1976e5dbd8fe12631390f6d478c894cb0164171b2f9dc39c5(
     *,
     password_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.PasswordPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    sign_in_policy: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.SignInPolicyProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -22850,6 +23661,13 @@ def _typecheckingstub__9814951786a68c04c05f6bdb7eb01a34fa749e2fb6491b5414b8e8e27
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__71f41ee8011d666621169ad6aeb915855a76a5e105809ce7914229f99c53dd8d(
+    *,
+    allowed_first_auth_factors: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__7bdd79abbed6d1c2a56f92beb7e51f5c19f5fdeac49af18d379dda0e31605f6e(
     *,
     external_id: typing.Optional[builtins.str] = None,
@@ -23347,7 +24165,10 @@ def _typecheckingstub__00bbdbd31eb8d7342ce9883d0851b853acf61f6b243c0aa4323c025da
     user_pool_add_ons: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.UserPoolAddOnsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
     user_pool_name: typing.Optional[builtins.str] = None,
     user_pool_tags: typing.Any = None,
+    user_pool_tier: typing.Optional[builtins.str] = None,
     verification_message_template: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnUserPool.VerificationMessageTemplateProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    web_authn_relying_party_id: typing.Optional[builtins.str] = None,
+    web_authn_user_verification: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
     pass