AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Name | Description | |
---|---|---|
AccountRecoverySettingType |
The data type for |
|
AccountTakeoverActionsType |
Account takeover actions type. |
|
AccountTakeoverActionType |
Account takeover action type. |
|
AccountTakeoverRiskConfigurationType |
Configuration for mitigation actions and notification for different levels of risk detected for a potential account takeover. |
|
AddCustomAttributesRequest |
Container for the parameters to the AddCustomAttributes operation.
Adds additional user attributes to the user pool schema.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AddCustomAttributesResponse |
Represents the response from the server for the request to add custom attributes. |
|
AdminAddUserToGroupRequest |
Container for the parameters to the AdminAddUserToGroup operation.
Adds a user to a group. A user who is in a group can present a preferred-role claim
to an identity pool, and populates a
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminAddUserToGroupResponse |
This is the response object from the AdminAddUserToGroup operation. |
|
AdminConfirmSignUpRequest |
Container for the parameters to the AdminConfirmSignUp operation. This IAM-authenticated API operation provides a code that Amazon Cognito sent to your user when they signed up in your user pool. After your user enters their code, they confirm ownership of the email address or phone number that they provided, and their user account becomes active. Depending on your user pool configuration, your users will receive their confirmation code in an email or SMS message. Local users who signed up in your user pool are the only type of user who can confirm sign-up with a code. Users who federate through an external identity provider (IdP) have already been confirmed by their IdP. Administrator-created users confirm their accounts when they respond to their invitation email message and choose a password. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminConfirmSignUpResponse |
Represents the response from the server for the request to confirm registration. |
|
AdminCreateUserConfigType |
The configuration for creating a new user profile. |
|
AdminCreateUserRequest |
Container for the parameters to the AdminCreateUser operation. Creates a new user in the specified user pool.
If This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. This message is based on a template that you configured in your call to create or update a user pool. This template includes your custom sign-up instructions and placeholders for user name and temporary password.
Alternatively, you can call
In either case, the user will be in the Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminCreateUserResponse |
Represents the response from the server to the request to create the user. |
|
AdminDeleteUserAttributesRequest |
Container for the parameters to the AdminDeleteUserAttributes operation.
Deletes the user attributes in a user pool as an administrator. Works on any user.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminDeleteUserAttributesResponse |
Represents the response received from the server for a request to delete user attributes. |
|
AdminDeleteUserRequest |
Container for the parameters to the AdminDeleteUser operation.
Deletes a user as an administrator. Works on any user.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminDeleteUserResponse |
This is the response object from the AdminDeleteUser operation. |
|
AdminDisableProviderForUserRequest |
Container for the parameters to the AdminDisableProviderForUser operation.
Prevents the user from signing in with the specified external (SAML or social) identity
provider (IdP). If the user that you want to deactivate is a Amazon Cognito user pools
native username + password user, they can't use their password to sign in. If the
user to deactivate is a linked external IdP user, any link between that user and an
existing user is removed. When the external user signs in again, and the user is no
longer attached to the previously linked
The
To deactivate a native username + password user, the
The
For de-linking a SAML identity, there are two scenarios. If the linked identity has
not yet been used to sign in, the Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminDisableProviderForUserResponse |
This is the response object from the AdminDisableProviderForUser operation. |
|
AdminDisableUserRequest |
Container for the parameters to the AdminDisableUser operation.
Deactivates a user and revokes all access tokens for the user. A deactivated user
can't sign in, but still appears in the responses to
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminDisableUserResponse |
Represents the response received from the server to disable the user as an administrator. |
|
AdminEnableUserRequest |
Container for the parameters to the AdminEnableUser operation.
Enables the specified user as an administrator. Works on any user.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminEnableUserResponse |
Represents the response from the server for the request to enable a user as an administrator. |
|
AdminForgetDeviceRequest |
Container for the parameters to the AdminForgetDevice operation.
Forgets the device, as an administrator.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminForgetDeviceResponse |
This is the response object from the AdminForgetDevice operation. |
|
AdminGetDeviceRequest |
Container for the parameters to the AdminGetDevice operation.
Gets the device, as an administrator.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminGetDeviceResponse |
Gets the device response, as an administrator. |
|
AdminGetUserRequest |
Container for the parameters to the AdminGetUser operation.
Gets the specified user by user name in a user pool as an administrator. Works on
any user.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminGetUserResponse |
Represents the response from the server from the request to get the specified user as an administrator. |
|
AdminInitiateAuthRequest |
Container for the parameters to the AdminInitiateAuth operation.
Initiates the authentication flow, as an administrator.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminInitiateAuthResponse |
Initiates the authentication response, as an administrator. |
|
AdminLinkProviderForUserRequest |
Container for the parameters to the AdminLinkProviderForUser operation.
Links an existing user account in a user pool ( For example, if there is an existing user with a username and password, this API links that user to a federated user identity. When the user signs in with a federated user identity, they sign in as the existing user account. The maximum number of federated identities linked to a user is five. Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external IdPs and provider attributes that have been trusted by the application owner. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminLinkProviderForUserResponse |
This is the response object from the AdminLinkProviderForUser operation. |
|
AdminListDevicesRequest |
Container for the parameters to the AdminListDevices operation.
Lists devices, as an administrator.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminListDevicesResponse |
Lists the device's response, as an administrator. |
|
AdminListGroupsForUserRequest |
Container for the parameters to the AdminListGroupsForUser operation.
Lists the groups that a user belongs to.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminListGroupsForUserResponse |
This is the response object from the AdminListGroupsForUser operation. |
|
AdminListUserAuthEventsRequest |
Container for the parameters to the AdminListUserAuthEvents operation.
A history of user activity and any risks detected as part of Amazon Cognito advanced
security.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminListUserAuthEventsResponse |
This is the response object from the AdminListUserAuthEvents operation. |
|
AdminRemoveUserFromGroupRequest |
Container for the parameters to the AdminRemoveUserFromGroup operation.
Removes the specified user from the specified group.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminRemoveUserFromGroupResponse |
This is the response object from the AdminRemoveUserFromGroup operation. |
|
AdminResetUserPasswordRequest |
Container for the parameters to the AdminResetUserPassword operation. Resets the specified user's password in a user pool as an administrator. Works on any user. To use this API operation, your user pool must have self-service account recovery configured. Use AdminSetUserPassword if you manage passwords as an administrator. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Deactivates a user's password, requiring them to change it. If a user tries to sign
in after the API is called, Amazon Cognito responds with a Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminResetUserPasswordResponse |
Represents the response from the server to reset a user password as an administrator. |
|
AdminRespondToAuthChallengeRequest |
Container for the parameters to the AdminRespondToAuthChallenge operation.
Some API operations in a user pool generate a challenge, like a prompt for an MFA
code, for device authentication that bypasses MFA, or for a custom authentication
challenge. An For more information about custom authentication challenges, see Custom authentication challenge Lambda triggers. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminRespondToAuthChallengeResponse |
Responds to the authentication challenge, as an administrator. |
|
AdminSetUserMFAPreferenceRequest |
Container for the parameters to the AdminSetUserMFAPreference operation.
The user's multi-factor authentication (MFA) preference, including which MFA options
are activated, and if any are preferred. Only one factor can be set as preferred.
The preferred MFA factor will be used to authenticate a user if multiple factors are
activated. If multiple options are activated and no preference is set, a challenge
to choose an MFA option will be returned during sign-in.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminSetUserMFAPreferenceResponse |
This is the response object from the AdminSetUserMFAPreference operation. |
|
AdminSetUserPasswordRequest |
Container for the parameters to the AdminSetUserPassword operation. Sets the specified user's password in a user pool as an administrator. Works on any user.
The password can be temporary or permanent. If it is temporary, the user status enters
the
Once the user has set a new password, or the password is permanent, the user status
is set to
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminSetUserPasswordResponse |
This is the response object from the AdminSetUserPassword operation. |
|
AdminSetUserSettingsRequest |
Container for the parameters to the AdminSetUserSettings operation.
This action is no longer supported. You can use it to configure only SMS MFA.
You can't use it to configure time-based one-time password (TOTP) software token MFA.
To configure either type of MFA, use AdminSetUserMFAPreference
instead.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminSetUserSettingsResponse |
Represents the response from the server to set user settings as an administrator. |
|
AdminUpdateAuthEventFeedbackRequest |
Container for the parameters to the AdminUpdateAuthEventFeedback operation.
Provides feedback for an authentication event indicating if it was from a valid user.
This feedback is used for improving the risk evaluation decision for the user pool
as part of Amazon Cognito advanced security.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminUpdateAuthEventFeedbackResponse |
This is the response object from the AdminUpdateAuthEventFeedback operation. |
|
AdminUpdateDeviceStatusRequest |
Container for the parameters to the AdminUpdateDeviceStatus operation.
Updates the device status as an administrator.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
AdminUpdateDeviceStatusResponse |
The status response to the request to update the device, as an administrator. |
|
AdminUpdateUserAttributesRequest |
Container for the parameters to the AdminUpdateUserAttributes operation.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user. To delete an attribute from your user, submit the attribute in your API request with a blank value.
For custom attributes, you must prepend the In addition to updating user attributes, this API can also be used to mark phone and email as verified. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminUpdateUserAttributesResponse |
Represents the response from the server for the request to update user attributes as an administrator. |
|
AdminUserGlobalSignOutRequest |
Container for the parameters to the AdminUserGlobalSignOut operation. Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation with your administrative credentials when your user signs out of your app. This results in the following behavior.
Other requests might be valid until your user's token expires. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
AdminUserGlobalSignOutResponse |
The global sign-out response, as an administrator. |
|
AliasExistsException |
This exception is thrown when a user tries to confirm the account with an email address or phone number that has already been supplied as an alias for a different user profile. This exception indicates that an account with this email address or phone already exists in a user pool that you've configured to use email address or phone number as a sign-in alias. |
|
AnalyticsConfigurationType |
The Amazon Pinpoint analytics configuration necessary to collect metrics for a user
pool.
In Regions where Amazon Pinpoint isn't available, user pools only support sending
events to Amazon Pinpoint projects in us-east-1. In Regions where Amazon Pinpoint
is available, user pools support sending events to Amazon Pinpoint projects within
that same Region.
|
|
AnalyticsMetadataType |
An Amazon Pinpoint analytics endpoint. An endpoint uniquely identifies a mobile device, email address, or phone number that can receive messages from Amazon Pinpoint analytics. For more information about Amazon Web Services Regions that can contain Amazon Pinpoint resources for use with Amazon Cognito user pools, see Using Amazon Pinpoint analytics with Amazon Cognito user pools. |
|
AssociateSoftwareTokenRequest |
Container for the parameters to the AssociateSoftwareToken operation.
Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA)
for a user, with a unique private key that Amazon Cognito generates and returns in
the API response. You can authorize an
Amazon Cognito disassociates an existing software token when you verify the new token
in a
VerifySoftwareToken API request. If you don't verify the software token and your
user pool doesn't require MFA, the user can then authenticate with user name and password
credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an
After you set up software token MFA for your user, Amazon Cognito generates a
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
|
|
AssociateSoftwareTokenResponse |
This is the response object from the AssociateSoftwareToken operation. |
|
AttributeType |
Specifies whether the attribute is standard or custom. |
|
AuthenticationResultType |
The authentication result. |
|
AuthEventType |
The authentication event type. |
|
ChallengeResponseType |
The challenge response type. |
|
ChangePasswordRequest |
Container for the parameters to the ChangePassword operation. Changes the password for a specified user in a user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
ChangePasswordResponse |
The response from the server to the change password request. |
|
CloudWatchLogsConfigurationType |
The CloudWatch logging destination of a user pool detailed activity logging configuration. |
|
CodeDeliveryDetailsType |
The delivery details for an email or SMS message that Amazon Cognito sent for authentication or verification. |
|
CodeDeliveryFailureException |
This exception is thrown when a verification code fails to deliver successfully. |
|
CodeMismatchException |
This exception is thrown if the provided code doesn't match what the server was expecting. |
|
CognitoIdentityProviderPaginatorFactory |
Paginators for the CognitoIdentityProvider service |
|
CompromisedCredentialsActionsType |
The compromised credentials actions type. |
|
CompromisedCredentialsRiskConfigurationType |
The compromised credentials risk configuration type. |
|
ConcurrentModificationException |
This exception is thrown if two or more modifications are happening concurrently. |
|
ConfirmDeviceRequest |
Container for the parameters to the ConfirmDevice operation. Confirms tracking of the device. This API call is the call that begins device tracking. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
ConfirmDeviceResponse |
Confirms the device response. |
|
ConfirmForgotPasswordRequest |
Container for the parameters to the ConfirmForgotPassword operation.
Allows a user to enter a confirmation code to reset a forgotten password.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
|
|
ConfirmForgotPasswordResponse |
The response from the server that results from a user's request to retrieve a forgotten password. |
|
ConfirmSignUpRequest |
Container for the parameters to the ConfirmSignUp operation. This public API operation provides a code that Amazon Cognito sent to your user when they signed up in your user pool via the SignUp API operation. After your user enters their code, they confirm ownership of the email address or phone number that they provided, and their user account becomes active. Depending on your user pool configuration, your users will receive their confirmation code in an email or SMS message. Local users who signed up in your user pool are the only type of user who can confirm sign-up with a code. Users who federate through an external identity provider (IdP) have already been confirmed by their IdP. Administrator-created users, users created with the AdminCreateUser API operation, confirm their accounts when they respond to their invitation email message and choose a password. They do not receive a confirmation code. Instead, they receive a temporary password. Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
ConfirmSignUpResponse |
Represents the response from the server for the registration confirmation. |
|
ContextDataType |
Contextual user data type used for evaluating the risk of an unexpected event by Amazon Cognito advanced security. |
|
CreateGroupRequest |
Container for the parameters to the CreateGroup operation.
Creates a new group in the specified user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
CreateGroupResponse |
This is the response object from the CreateGroup operation. |
|
CreateIdentityProviderRequest |
Container for the parameters to the CreateIdentityProvider operation.
Adds a configuration and trust relationship between a third-party identity provider
(IdP) and a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
CreateIdentityProviderResponse |
This is the response object from the CreateIdentityProvider operation. |
|
CreateResourceServerRequest |
Container for the parameters to the CreateResourceServer operation.
Creates a new OAuth2.0 resource server and defines custom scopes within it.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
CreateResourceServerResponse |
This is the response object from the CreateResourceServer operation. |
|
CreateUserImportJobRequest |
Container for the parameters to the CreateUserImportJob operation.
Creates a user import job.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
CreateUserImportJobResponse |
Represents the response from the server to the request to create the user import job. |
|
CreateUserPoolClientRequest |
Container for the parameters to the CreateUserPoolClient operation. Creates the user pool client. When you create a new user pool client, token revocation is automatically activated. For more information about revoking tokens, see RevokeToken. If you don't provide a value for an attribute, Amazon Cognito sets it to its default value. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
CreateUserPoolClientResponse |
Represents the response from the server to create a user pool client. |
|
CreateUserPoolDomainRequest |
Container for the parameters to the CreateUserPoolDomain operation.
Creates a new domain for a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
CreateUserPoolDomainResponse |
This is the response object from the CreateUserPoolDomain operation. |
|
CreateUserPoolRequest |
Container for the parameters to the CreateUserPool operation.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
Creates a new Amazon Cognito user pool and sets the password policy for the pool. If you don't provide a value for an attribute, Amazon Cognito sets it to its default value. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
CreateUserPoolResponse |
Represents the response from the server for the request to create a user pool. |
|
CustomDomainConfigType |
The configuration for a custom domain that hosts the sign-up and sign-in webpages for your application. |
|
CustomEmailLambdaVersionConfigType |
The properties of a custom email sender Lambda trigger. |
|
CustomSMSLambdaVersionConfigType |
The properties of a custom SMS sender Lambda trigger. |
|
DeleteGroupRequest |
Container for the parameters to the DeleteGroup operation. Deletes a group. Calling this action requires developer credentials. |
|
DeleteGroupResponse |
This is the response object from the DeleteGroup operation. |
|
DeleteIdentityProviderRequest |
Container for the parameters to the DeleteIdentityProvider operation. Deletes an IdP for a user pool. |
|
DeleteIdentityProviderResponse |
This is the response object from the DeleteIdentityProvider operation. |
|
DeleteResourceServerRequest |
Container for the parameters to the DeleteResourceServer operation. Deletes a resource server. |
|
DeleteResourceServerResponse |
This is the response object from the DeleteResourceServer operation. |
|
DeleteUserAttributesRequest |
Container for the parameters to the DeleteUserAttributes operation. Deletes the attributes for a user.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
DeleteUserAttributesResponse |
Represents the response from the server to delete user attributes. |
|
DeleteUserPoolClientRequest |
Container for the parameters to the DeleteUserPoolClient operation. Allows the developer to delete the user pool client. |
|
DeleteUserPoolClientResponse |
This is the response object from the DeleteUserPoolClient operation. |
|
DeleteUserPoolDomainRequest |
Container for the parameters to the DeleteUserPoolDomain operation. Deletes a domain for a user pool. |
|
DeleteUserPoolDomainResponse |
This is the response object from the DeleteUserPoolDomain operation. |
|
DeleteUserPoolRequest |
Container for the parameters to the DeleteUserPool operation. Deletes the specified Amazon Cognito user pool. |
|
DeleteUserPoolResponse |
This is the response object from the DeleteUserPool operation. |
|
DeleteUserRequest |
Container for the parameters to the DeleteUser operation. Allows a user to delete their own user profile.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
DeleteUserResponse |
This is the response object from the DeleteUser operation. |
|
DescribeIdentityProviderRequest |
Container for the parameters to the DescribeIdentityProvider operation. Gets information about a specific IdP. |
|
DescribeIdentityProviderResponse |
This is the response object from the DescribeIdentityProvider operation. |
|
DescribeResourceServerRequest |
Container for the parameters to the DescribeResourceServer operation. Describes a resource server. |
|
DescribeResourceServerResponse |
This is the response object from the DescribeResourceServer operation. |
|
DescribeRiskConfigurationRequest |
Container for the parameters to the DescribeRiskConfiguration operation. Describes the risk configuration. |
|
DescribeRiskConfigurationResponse |
This is the response object from the DescribeRiskConfiguration operation. |
|
DescribeUserImportJobRequest |
Container for the parameters to the DescribeUserImportJob operation. Describes the user import job. |
|
DescribeUserImportJobResponse |
Represents the response from the server to the request to describe the user import job. |
|
DescribeUserPoolClientRequest |
Container for the parameters to the DescribeUserPoolClient operation.
Client method for returning the configuration information and metadata of the specified
user pool app client.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
DescribeUserPoolClientResponse |
Represents the response from the server from a request to describe the user pool client. |
|
DescribeUserPoolDomainRequest |
Container for the parameters to the DescribeUserPoolDomain operation. Gets information about a domain. |
|
DescribeUserPoolDomainResponse |
This is the response object from the DescribeUserPoolDomain operation. |
|
DescribeUserPoolRequest |
Container for the parameters to the DescribeUserPool operation.
Returns the configuration information and metadata of the specified user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
DescribeUserPoolResponse |
Represents the response to describe the user pool. |
|
DeviceConfigurationType |
The device-remembering configuration for a user pool. A
DescribeUserPool request returns a null value for this object when the user pool
isn't configured to remember devices. When device remembering is active, you can remember
a user's device with a ConfirmDevice
API request. Additionally. when the property
To sign in with a remembered device, include
When you provide a value for any property of |
|
DeviceSecretVerifierConfigType |
The device verifier against which it is authenticated. |
|
DeviceType |
The device type. |
|
DomainDescriptionType |
A container for information about a domain. |
|
DuplicateProviderException |
This exception is thrown when the provider is already supported by the user pool. |
|
EmailConfigurationType |
The email configuration of your user pool. The email configuration type sets your
preferred sending method, Amazon Web Services Region, and sender for messages from
your user pool.
Amazon Cognito can send email messages with Amazon Simple Email Service resources
in the Amazon Web Services Region where you created your user pool, and in alternate
Regions in some cases. For more information on the supported Regions, see Email
settings for Amazon Cognito user pools.
|
|
EnableSoftwareTokenMFAException |
This exception is thrown when there is a code mismatch and the service fails to configure the software token TOTP multi-factor authentication (MFA). |
|
EventContextDataType |
Specifies the user context data captured at the time of an event request. |
|
EventFeedbackType |
Specifies the event feedback type. |
|
EventRiskType |
The event risk type. |
|
ExpiredCodeException |
This exception is thrown if a code has expired. |
|
ForbiddenException |
This exception is thrown when WAF doesn't allow your request based on a web ACL that's associated with your user pool. |
|
ForgetDeviceRequest |
Container for the parameters to the ForgetDevice operation. Forgets the specified device. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
ForgetDeviceResponse |
This is the response object from the ForgetDevice operation. |
|
ForgotPasswordRequest |
Container for the parameters to the ForgotPassword operation.
Calling this API causes a message to be sent to the end user with a confirmation code
that is required to change the user's password. For the
If neither a verified phone number nor a verified email exists, this API returns To use this API operation, your user pool must have self-service account recovery configured. Use AdminSetUserPassword if you manage passwords as an administrator. Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. |
|
ForgotPasswordResponse |
The response from Amazon Cognito to a request to reset a password. |
|
GetCSVHeaderRequest |
Container for the parameters to the GetCSVHeader operation. Gets the header information for the comma-separated value (CSV) file to be used as input for the user import job. |
|
GetCSVHeaderResponse |
Represents the response from the server to the request to get the header information of the CSV file for the user import job. |
|
GetDeviceRequest |
Container for the parameters to the GetDevice operation. Gets the device. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
GetDeviceResponse |
Gets the device response. |
|
GetGroupRequest |
Container for the parameters to the GetGroup operation. Gets a group. Calling this action requires developer credentials. |
|
GetGroupResponse |
This is the response object from the GetGroup operation. |
|
GetIdentityProviderByIdentifierRequest |
Container for the parameters to the GetIdentityProviderByIdentifier operation. Gets the specified IdP. |
|
GetIdentityProviderByIdentifierResponse |
This is the response object from the GetIdentityProviderByIdentifier operation. |
|
GetLogDeliveryConfigurationRequest |
Container for the parameters to the GetLogDeliveryConfiguration operation. Gets the detailed activity logging configuration for a user pool. |
|
GetLogDeliveryConfigurationResponse |
This is the response object from the GetLogDeliveryConfiguration operation. |
|
GetSigningCertificateRequest |
Container for the parameters to the GetSigningCertificate operation. This method takes a user pool ID, and returns the signing certificate. The issued certificate is valid for 10 years from the date of issue.
Amazon Cognito issues and assigns a new signing certificate annually. This process
returns a new value in the response to |
|
GetSigningCertificateResponse |
Response from Amazon Cognito for a signing certificate request. |
|
GetUICustomizationRequest |
Container for the parameters to the GetUICustomization operation.
Gets the user interface (UI) Customization information for a particular app client's
app UI, if any such information exists for the client. If nothing is set for the particular
client, but there is an existing pool level customization (the app |
|
GetUICustomizationResponse |
This is the response object from the GetUICustomization operation. |
|
GetUserAttributeVerificationCodeRequest |
Container for the parameters to the GetUserAttributeVerificationCode operation. Generates a user attribute verification code for the specified attribute name. Sends a message to a user with a code that they must return in a VerifyUserAttribute request.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. |
|
GetUserAttributeVerificationCodeResponse |
The verification code response returned by the server response to get the user attribute verification code. |
|
GetUserPoolMfaConfigRequest |
Container for the parameters to the GetUserPoolMfaConfig operation. Gets the user pool multi-factor authentication (MFA) configuration. |
|
GetUserPoolMfaConfigResponse |
This is the response object from the GetUserPoolMfaConfig operation. |
|
GetUserRequest |
Container for the parameters to the GetUser operation. Gets the user attributes and metadata for a user.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
GetUserResponse |
Represents the response from the server from the request to get information about the user. |
|
GlobalSignOutRequest |
Container for the parameters to the GlobalSignOut operation. Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation when your user signs out of your app. This results in the following behavior.
Other requests might be valid until your user's token expires.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
GlobalSignOutResponse |
The response to the request to sign out all devices. |
|
GroupExistsException |
This exception is thrown when Amazon Cognito encounters a group that already exists in the user pool. |
|
GroupType |
The group type. |
|
HttpHeader |
The HTTP header. |
|
IdentityProviderType |
A container for information about an IdP. |
|
InitiateAuthRequest |
Container for the parameters to the InitiateAuth operation.
Initiates sign-in for a user in the Amazon Cognito user directory. You can't sign
in a user with a federated IdP with
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
|
|
InitiateAuthResponse |
Initiates the authentication response. |
|
InternalErrorException |
This exception is thrown when Amazon Cognito encounters an internal error. |
|
InvalidEmailRoleAccessPolicyException |
This exception is thrown when Amazon Cognito isn't allowed to use your email identity. HTTP status code: 400. |
|
InvalidLambdaResponseException |
This exception is thrown when Amazon Cognito encounters an invalid Lambda response. |
|
InvalidOAuthFlowException |
This exception is thrown when the specified OAuth flow is not valid. |
|
InvalidParameterException |
This exception is thrown when the Amazon Cognito service encounters an invalid parameter. |
|
InvalidPasswordException |
This exception is thrown when Amazon Cognito encounters an invalid password. |
|
InvalidSmsRoleAccessPolicyException |
This exception is returned when the role provided for SMS configuration doesn't have permission to publish using Amazon SNS. |
|
InvalidSmsRoleTrustRelationshipException |
This exception is thrown when the trust relationship is not valid for the role provided
for SMS configuration. This can happen if you don't trust |
|
InvalidUserPoolConfigurationException |
This exception is thrown when the user pool configuration is not valid. |
|
LambdaConfigType |
Specifies the configuration for Lambda triggers. |
|
LimitExceededException |
This exception is thrown when a user exceeds the limit for a requested Amazon Web Services resource. |
|
ListDevicesRequest |
Container for the parameters to the ListDevices operation. Lists the sign-in devices that Amazon Cognito has registered to the current user. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
ListDevicesResponse |
Represents the response to list devices. |
|
ListGroupsRequest |
Container for the parameters to the ListGroups operation.
Lists the groups associated with a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListGroupsResponse |
This is the response object from the ListGroups operation. |
|
ListIdentityProvidersRequest |
Container for the parameters to the ListIdentityProviders operation.
Lists information about all IdPs for a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListIdentityProvidersResponse |
This is the response object from the ListIdentityProviders operation. |
|
ListResourceServersRequest |
Container for the parameters to the ListResourceServers operation.
Lists the resource servers for a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListResourceServersResponse |
This is the response object from the ListResourceServers operation. |
|
ListTagsForResourceRequest |
Container for the parameters to the ListTagsForResource operation. Lists the tags that are assigned to an Amazon Cognito user pool. A tag is a label that you can apply to user pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria. You can use this action up to 10 times per second, per account. |
|
ListTagsForResourceResponse |
This is the response object from the ListTagsForResource operation. |
|
ListUserImportJobsRequest |
Container for the parameters to the ListUserImportJobs operation.
Lists user import jobs for a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListUserImportJobsResponse |
Represents the response from the server to the request to list the user import jobs. |
|
ListUserPoolClientsRequest |
Container for the parameters to the ListUserPoolClients operation.
Lists the clients that have been created for the specified user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListUserPoolClientsResponse |
Represents the response from the server that lists user pool clients. |
|
ListUserPoolsRequest |
Container for the parameters to the ListUserPools operation.
Lists the user pools associated with an Amazon Web Services account.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListUserPoolsResponse |
Represents the response to list user pools. |
|
ListUsersInGroupRequest |
Container for the parameters to the ListUsersInGroup operation.
Lists the users in the specified group.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListUsersInGroupResponse |
This is the response object from the ListUsersInGroup operation. |
|
ListUsersRequest |
Container for the parameters to the ListUsers operation.
Lists users and their basic details in a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
ListUsersResponse |
The response from the request to list users. |
|
LogConfigurationType |
The logging parameters of a user pool. |
|
LogDeliveryConfigurationType |
The logging parameters of a user pool. |
|
MessageTemplateType |
The message template structure. |
|
MFAMethodNotFoundException |
This exception is thrown when Amazon Cognito can't find a multi-factor authentication (MFA) method. |
|
MFAOptionType |
This data type is no longer supported. Applies only to SMS multi-factor authentication (MFA) configurations. Does not apply to time-based one-time password (TOTP) software token MFA configurations. |
|
NewDeviceMetadataType |
The new device metadata type. |
|
NotAuthorizedException |
This exception is thrown when a user isn't authorized. |
|
NotifyConfigurationType |
The notify configuration type. |
|
NotifyEmailType |
The notify email type. |
|
NumberAttributeConstraintsType |
The minimum and maximum values of an attribute that is of the number data type. |
|
PasswordPolicyType |
The password policy type. |
|
PasswordResetRequiredException |
This exception is thrown when a password reset is required. |
|
PreconditionNotMetException |
This exception is thrown when a precondition is not met. |
|
PreTokenGenerationVersionConfigType |
The properties of a pre token generation Lambda trigger. |
|
ProviderDescription |
A container for IdP details. |
|
ProviderUserIdentifierType |
A container for information about an IdP for a user pool. |
|
RecoveryOptionType |
A map containing a priority as a key, and recovery method name as a value. |
|
ResendConfirmationCodeRequest |
Container for the parameters to the ResendConfirmationCode operation.
Resends the confirmation (for confirmation of registration) to a specific user in
the user pool.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
|
|
ResendConfirmationCodeResponse |
The response from the server when Amazon Cognito makes the request to resend a confirmation code. |
|
ResourceNotFoundException |
This exception is thrown when the Amazon Cognito service can't find the requested resource. |
|
ResourceServerScopeType |
A resource server scope. |
|
ResourceServerType |
A container for information about a resource server for a user pool. |
|
RespondToAuthChallengeRequest |
Container for the parameters to the RespondToAuthChallenge operation.
Some API operations in a user pool generate a challenge, like a prompt for an MFA
code, for device authentication that bypasses MFA, or for a custom authentication
challenge. A For more information about custom authentication challenges, see Custom authentication challenge Lambda triggers. Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. |
|
RespondToAuthChallengeResponse |
The response to respond to the authentication challenge. |
|
RevokeTokenRequest |
Container for the parameters to the RevokeToken operation.
Revokes all of the access tokens generated by, and at the same time as, the specified
refresh token. After a token is revoked, you can't use the revoked token to access
Amazon Cognito user APIs, or to authorize access to your resource server.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
|
|
RevokeTokenResponse |
This is the response object from the RevokeToken operation. |
|
RiskConfigurationType |
The risk configuration type. |
|
RiskExceptionConfigurationType |
The type of the configuration to override the risk decision. |
|
SchemaAttributeType |
A list of the user attributes and their properties in your user pool. The attribute
schema contains standard attributes, custom attributes with a Developer-only attributes are a legacy feature of user pools, are read-only to all app clients. You can create and update developer-only attributes only with IAM-authenticated API operations. Use app client read/write permissions instead. |
|
ScopeDoesNotExistException |
This exception is thrown when the specified scope doesn't exist. |
|
SetLogDeliveryConfigurationRequest |
Container for the parameters to the SetLogDeliveryConfiguration operation. Sets up or modifies the detailed activity logging configuration of a user pool. |
|
SetLogDeliveryConfigurationResponse |
This is the response object from the SetLogDeliveryConfiguration operation. |
|
SetRiskConfigurationRequest |
Container for the parameters to the SetRiskConfiguration operation.
Configures actions on detected risks. To delete the risk configuration for
To activate Amazon Cognito advanced security features, update the user pool to include
the |
|
SetRiskConfigurationResponse |
This is the response object from the SetRiskConfiguration operation. |
|
SetUICustomizationRequest |
Container for the parameters to the SetUICustomization operation. Sets the user interface (UI) customization information for a user pool's built-in app UI.
You can specify app UI customization settings for a single client (with a specific
To use this API, your user pool must have a domain associated with it. Otherwise, there is no place to host the app's pages, and the service will throw an error. |
|
SetUICustomizationResponse |
This is the response object from the SetUICustomization operation. |
|
SetUserMFAPreferenceRequest |
Container for the parameters to the SetUserMFAPreference operation. Set the user's multi-factor authentication (MFA) method preference, including which MFA factors are activated and if any are preferred. Only one factor can be set as preferred. The preferred MFA factor will be used to authenticate a user if multiple factors are activated. If multiple options are activated and no preference is set, a challenge to choose an MFA option will be returned during sign-in. If an MFA type is activated for a user, the user will be prompted for MFA during all sign-in attempts unless device tracking is turned on and the device has been trusted. If you want MFA to be applied selectively based on the assessed risk level of sign-in attempts, deactivate MFA for users and turn on Adaptive Authentication for the user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
SetUserMFAPreferenceResponse |
This is the response object from the SetUserMFAPreference operation. |
|
SetUserPoolMfaConfigRequest |
Container for the parameters to the SetUserPoolMfaConfig operation.
Sets the user pool multi-factor authentication (MFA) configuration.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
|
|
SetUserPoolMfaConfigResponse |
This is the response object from the SetUserPoolMfaConfig operation. |
|
SetUserSettingsRequest |
Container for the parameters to the SetUserSettings operation. This action is no longer supported. You can use it to configure only SMS MFA. You can't use it to configure time-based one-time password (TOTP) software token MFA. To configure either type of MFA, use SetUserMFAPreference instead.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
SetUserSettingsResponse |
The response from the server for a set user settings request. |
|
SignUpRequest |
Container for the parameters to the SignUp operation.
Registers the user in the specified user pool and creates a user name, password, and
user attributes.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
|
|
SignUpResponse |
The response from the server for a registration request. |
|
SmsConfigurationType |
The SMS configuration type is the settings that your Amazon Cognito user pool must use to send an SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the Amazon Web Services Region that you want, the Amazon Cognito user pool uses an Identity and Access Management (IAM) role in your Amazon Web Services account. |
|
SmsMfaConfigType |
The SMS text message multi-factor authentication (MFA) configuration type. |
|
SMSMfaSettingsType |
The type used for enabling SMS multi-factor authentication (MFA) at the user level. Phone numbers don't need to be verified to be used for SMS MFA. If an MFA type is activated for a user, the user will be prompted for MFA during all sign-in attempts, unless device tracking is turned on and the device has been trusted. If you would like MFA to be applied selectively based on the assessed risk level of sign-in attempts, deactivate MFA for users and turn on Adaptive Authentication for the user pool. |
|
SoftwareTokenMfaConfigType |
The type used for enabling software token MFA at the user pool level. |
|
SoftwareTokenMFANotFoundException |
This exception is thrown when the software token time-based one-time password (TOTP) multi-factor authentication (MFA) isn't activated for the user pool. |
|
SoftwareTokenMfaSettingsType |
The type used for enabling software token MFA at the user level. If an MFA type is activated for a user, the user will be prompted for MFA during all sign-in attempts, unless device tracking is turned on and the device has been trusted. If you want MFA to be applied selectively based on the assessed risk level of sign-in attempts, deactivate MFA for users and turn on Adaptive Authentication for the user pool. |
|
StartUserImportJobRequest |
Container for the parameters to the StartUserImportJob operation. Starts the user import. |
|
StartUserImportJobResponse |
Represents the response from the server to the request to start the user import job. |
|
StopUserImportJobRequest |
Container for the parameters to the StopUserImportJob operation. Stops the user import job. |
|
StopUserImportJobResponse |
Represents the response from the server to the request to stop the user import job. |
|
StringAttributeConstraintsType |
The constraints associated with a string attribute. |
|
TagResourceRequest |
Container for the parameters to the TagResource operation. Assigns a set of tags to an Amazon Cognito user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
Each tag consists of a key and value, both of which you define. A key is a general
category for more specific values. For example, if you have two versions of a user
pool, one for testing and another for production, you might assign an Tags are useful for cost tracking and access control. You can activate your tags so that they appear on the Billing and Cost Management console, where you can track the costs associated with your user pools. In an Identity and Access Management policy, you can constrain permissions for user pools based on specific tags or tag values. You can use this action up to 5 times per second, per account. A user pool can have as many as 50 tags. |
|
TagResourceResponse |
This is the response object from the TagResource operation. |
|
TokenValidityUnitsType |
The data type TokenValidityUnits specifies the time units you use when you set the duration of ID, access, and refresh tokens. |
|
TooManyFailedAttemptsException |
This exception is thrown when the user has made too many failed attempts for a given action, such as sign-in. |
|
TooManyRequestsException |
This exception is thrown when the user has made too many requests for a given operation. |
|
UICustomizationType |
A container for the UI customization information for a user pool's built-in app UI. |
|
UnauthorizedException |
Exception that is thrown when the request isn't authorized. This can happen due to an invalid access token in the request. |
|
UnexpectedLambdaException |
This exception is thrown when Amazon Cognito encounters an unexpected exception with Lambda. |
|
UnsupportedIdentityProviderException |
This exception is thrown when the specified identifier isn't supported. |
|
UnsupportedOperationException |
Exception that is thrown when you attempt to perform an operation that isn't enabled for the user pool client. |
|
UnsupportedTokenTypeException |
Exception that is thrown when an unsupported token is passed to an operation. |
|
UnsupportedUserStateException |
The request failed because the user is in an unsupported state. |
|
UntagResourceRequest |
Container for the parameters to the UntagResource operation. Removes the specified tags from an Amazon Cognito user pool. You can use this action up to 5 times per second, per account. |
|
UntagResourceResponse |
This is the response object from the UntagResource operation. |
|
UpdateAuthEventFeedbackRequest |
Container for the parameters to the UpdateAuthEventFeedback operation.
Provides the feedback for an authentication event, whether it was from a valid user
or not. This feedback is used for improving the risk evaluation decision for the user
pool as part of Amazon Cognito advanced security.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
|
|
UpdateAuthEventFeedbackResponse |
This is the response object from the UpdateAuthEventFeedback operation. |
|
UpdateDeviceStatusRequest |
Container for the parameters to the UpdateDeviceStatus operation. Updates the device status. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
UpdateDeviceStatusResponse |
The response to the request to update the device status. |
|
UpdateGroupRequest |
Container for the parameters to the UpdateGroup operation.
Updates the specified group with the specified attributes.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
UpdateGroupResponse |
This is the response object from the UpdateGroup operation. |
|
UpdateIdentityProviderRequest |
Container for the parameters to the UpdateIdentityProvider operation.
Updates IdP information for a user pool.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
UpdateIdentityProviderResponse |
This is the response object from the UpdateIdentityProvider operation. |
|
UpdateResourceServerRequest |
Container for the parameters to the UpdateResourceServer operation.
Updates the name and scopes of resource server. All other fields are read-only.
If you don't provide a value for an attribute, it is set to the default value.
Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you must use IAM credentials to authorize
requests, and you must grant yourself the corresponding IAM permission in a policy.
Learn more |
|
UpdateResourceServerResponse |
This is the response object from the UpdateResourceServer operation. |
|
UpdateUserAttributesRequest |
Container for the parameters to the UpdateUserAttributes operation.
With this operation, your users can update one or more of their attributes with their
own credentials. You authorize this API request with the user's access token. To delete
an attribute from your user, submit the attribute in your API request with a blank
value. Custom attribute values in this request must include the
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in. If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode, you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide. |
|
UpdateUserAttributesResponse |
Represents the response from the server for the request to update user attributes. |
|
UpdateUserPoolClientRequest |
Container for the parameters to the UpdateUserPoolClient operation.
Updates the specified user pool app client with the specified attributes. You can
get a list of the current user pool app client settings using DescribeUserPoolClient.
If you don't provide a value for an attribute, Amazon Cognito sets it to its default
value.
You can also use this operation to enable token revocation for user pool clients. For more information about revoking tokens, see RevokeToken. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
UpdateUserPoolClientResponse |
Represents the response from the server to the request to update the user pool client. |
|
UpdateUserPoolDomainRequest |
Container for the parameters to the UpdateUserPoolDomain operation. Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user pool. You can use this operation to provide the Amazon Resource Name (ARN) of a new certificate to Amazon Cognito. You can't use it to change the domain for a user pool. A custom domain is used to host the Amazon Cognito hosted UI, which provides sign-up and sign-in pages for your application. When you set up a custom domain, you provide a certificate that you manage with Certificate Manager (ACM). When necessary, you can use this operation to change the certificate that you applied to your custom domain. Usually, this is unnecessary following routine certificate renewal with ACM. When you renew your existing certificate in ACM, the ARN for your certificate remains the same, and your custom domain uses the new certificate automatically. However, if you replace your existing certificate with a new one, ACM gives the new certificate a new ARN. To apply the new certificate to your custom domain, you must provide this ARN to Amazon Cognito. When you add your new certificate in ACM, you must choose US East (N. Virginia) as the Amazon Web Services Region. After you submit your request, Amazon Cognito requires up to 1 hour to distribute your new certificate to your custom domain. For more information about adding a custom domain to your user pool, see Using Your Own Domain for the Hosted UI. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
UpdateUserPoolDomainResponse |
The UpdateUserPoolDomain response output. |
|
UpdateUserPoolRequest |
Container for the parameters to the UpdateUserPool operation.
This action might generate an SMS text message. Starting June 1, 2021, US telecom
carriers require you to register an origination phone number before you can send SMS
messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you
must register a phone number with Amazon
Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise,
Amazon Cognito users who must receive SMS messages might not be able to sign up, activate
their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web
Service, Amazon Simple Notification Service might place your account in the SMS sandbox.
In sandbox
mode, you can send messages only to verified phone numbers. After you test
your app while in the sandbox environment, you can move out of the sandbox and into
production. For more information, see
SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer
Guide.
Updates the specified user pool with the specified attributes. You can get a list of the current user pool settings using DescribeUserPool. If you don't provide a value for an attribute, Amazon Cognito sets it to its default value. Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy. Learn more |
|
UpdateUserPoolResponse |
Represents the response from the server when you make a request to update the user pool. |
|
UserAttributeUpdateSettingsType |
The settings for updates to user attributes. These settings include the property |
|
UserContextDataType |
Contextual data, such as the user's device fingerprint, IP address, or location, used for evaluating the risk of an unexpected event by Amazon Cognito advanced security. |
|
UserImportInProgressException |
This exception is thrown when you're trying to modify a user pool while a user import job is in progress for that pool. |
|
UserImportJobType |
The user import job type. |
|
UserLambdaValidationException |
This exception is thrown when the Amazon Cognito service encounters a user validation exception with the Lambda service. |
|
UsernameConfigurationType |
The username configuration type. |
|
UsernameExistsException |
This exception is thrown when Amazon Cognito encounters a user name that already exists in the user pool. |
|
UserNotConfirmedException |
This exception is thrown when a user isn't confirmed successfully. |
|
UserNotFoundException |
This exception is thrown when a user isn't found. |
|
UserPoolAddOnNotEnabledException |
This exception is thrown when user pool add-ons aren't enabled. |
|
UserPoolAddOnsType |
User pool add-ons. Contains settings for activation of advanced security features.
To log user security information but take no action, set to For more information, see Adding advanced security to a user pool. |
|
UserPoolClientDescription |
The description of the user pool client. |
|
UserPoolClientType |
Contains information about a user pool client. |
|
UserPoolDescriptionType |
A user pool description. |
|
UserPoolPolicyType |
The policy associated with a user pool. |
|
UserPoolTaggingException |
This exception is thrown when a user pool tag can't be set or updated. |
|
UserPoolType |
A container for information about the user pool. |
|
UserType |
A user profile in a Amazon Cognito user pool. |
|
VerificationMessageTemplateType |
The template for verification messages. |
|
VerifySoftwareTokenRequest |
Container for the parameters to the VerifySoftwareToken operation.
Use this API to register a user's entered time-based one-time password (TOTP) code
and mark the user's software token MFA status as "verified" if successful. The request
takes an access token or a session string, but not both.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests
for this API operation. For this operation, you can't use IAM credentials to authorize
requests, and you can't grant IAM permissions in policies. For more information about
authorization models in Amazon Cognito, see Using
the Amazon Cognito user pools API and user pool endpoints.
|
|
VerifySoftwareTokenResponse |
This is the response object from the VerifySoftwareToken operation. |
|
VerifyUserAttributeRequest |
Container for the parameters to the VerifyUserAttribute operation. Verifies the specified user attributes in the user pool. If your user pool requires verification before Amazon Cognito updates the attribute value, VerifyUserAttribute updates the affected attribute to its pending value. For more information, see UserAttributeUpdateSettingsType.
Authorize this action with a signed-in user's access token. It must include the scope
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints. |
|
VerifyUserAttributeResponse |
A container representing the response from the server from the request to verify user attributes. |
Name | Description | |
---|---|---|
IAdminListGroupsForUserPaginator |
Paginator for the AdminListGroupsForUser operation |
|
IAdminListUserAuthEventsPaginator |
Paginator for the AdminListUserAuthEvents operation |
|
ICognitoIdentityProviderPaginatorFactory |
Paginators for the CognitoIdentityProvider service |
|
IListGroupsPaginator |
Paginator for the ListGroups operation |
|
IListIdentityProvidersPaginator |
Paginator for the ListIdentityProviders operation |
|
IListResourceServersPaginator |
Paginator for the ListResourceServers operation |
|
IListUserPoolClientsPaginator |
Paginator for the ListUserPoolClients operation |
|
IListUserPoolsPaginator |
Paginator for the ListUserPools operation |
|
IListUsersInGroupPaginator |
Paginator for the ListUsersInGroup operation |
|
IListUsersPaginator |
Paginator for the ListUsers operation |