Using the Amazon Cognito User Pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies.
This API reference provides information about user pools in Amazon Cognito User Pools.
For more information, see the Amazon Cognito Documentation.
Adds additional user attributes to the user pool schema.
Adds the specified user to the specified group.
Requires developer credentials.
Confirms user registration as an admin without using a confirmation code. Works on any user.
Requires developer credentials.
Creates a new user in the specified user pool.
If MessageAction is not set, the default is to send a welcome message via email or phone (SMS).
This message is based on a template that you configured in your call to or . This template includes your custom sign-up instructions and placeholders for user name and temporary password.
Alternatively, you can call AdminCreateUser with “SUPPRESS” for the MessageAction parameter, and Amazon Cognito will not send any email.
In either case, the user will be in the FORCE_CHANGE_PASSWORD state until they sign in and change their password.
AdminCreateUser requires developer credentials.
Deletes a user as an administrator. Works on any user.
Requires developer credentials.
Deletes the user attributes in a user pool as an administrator. Works on any user.
Requires developer credentials.
Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked DestinationUser ) signs in, they must create a new user account. See .
This action is enabled only for admin access and requires developer credentials.
The ProviderName must match the value specified when creating an IdP for the pool.
To disable a native username + password user, the ProviderName value must be Cognito and the ProviderAttributeName must be Cognito_Subject , with the ProviderAttributeValue being the name that is used in the user pool for the user.
The ProviderAttributeName must always be Cognito_Subject for social identity providers. The ProviderAttributeValue must always be the exact subject that was used when the user was originally linked as a source user.
For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the ProviderAttributeName and ProviderAttributeValue must be the same values that were used for the SourceUser when the identities were originally linked in the call. (If the linking was done with ProviderAttributeName set to Cognito_Subject , the same applies here). However, if the user has already signed in, the ProviderAttributeName must be Cognito_Subject and ProviderAttributeValue must be the subject of the SAML assertion.
Disables the specified user as an administrator. Works on any user.
Requires developer credentials.
Enables the specified user as an administrator. Works on any user.
Requires developer credentials.
Forgets the device, as an administrator.
Requires developer credentials.
Gets the device, as an administrator.
Requires developer credentials.
Gets the specified user by user name in a user pool as an administrator. Works on any user.
Requires developer credentials.
Initiates the authentication flow, as an administrator.
Requires developer credentials.
Links an existing user account in a user pool ( DestinationUser ) to an identity from an external identity provider ( SourceUser ) based on a specified attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not yet been used to sign in, so that the federated user identity can be used to sign in as the existing user account.
For example, if there is an existing user with a username and password, this API links that user to a federated user identity, so that when the federated user identity is used, the user signs in as the existing user account.
Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external identity providers and provider attributes that have been trusted by the application owner.
See also .
This action is enabled only for admin access and requires developer credentials.
Lists devices, as an administrator.
Requires developer credentials.
Lists the groups that the user belongs to.
Requires developer credentials.
Lists a history of user activity and any risks detected as part of Amazon Cognito advanced security.
Removes the specified user from the specified group.
Requires developer credentials.
Resets the specified user's password in a user pool as an administrator. Works on any user.
When a developer calls this API, the current password is invalidated, so it must be changed. If a user tries to sign in after the API is called, the app will get a PasswordResetRequiredException exception back and should direct the user down the flow to reset the password, which is the same as the forgot password flow. In addition, if the user pool has phone verification selected and a verified phone number exists for the user, or if email verification is selected and a verified email exists for the user, calling this API will also result in sending a message to the end user with the code to change their password.
Requires developer credentials.
Responds to an authentication challenge, as an administrator.
Requires developer credentials.
Sets the user's multi-factor authentication (MFA) preference.
Sets all the user settings for a specified user name. Works on any user.
Requires developer credentials.
Provides feedback for an authentication event as to whether it was from a valid user. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.
Updates the device status as an administrator.
Requires developer credentials.
Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user.
For custom attributes, you must prepend the custom: prefix to the attribute name.
In addition to updating user attributes, this API can also be used to mark phone and email as verified.
Requires developer credentials.
Signs out users from all devices, as an administrator.
Requires developer credentials.
Returns a unique generated shared secret key code for the user account. The request takes an access token or a session string, but not both.
Changes the password for a specified user in a user pool.
Confirms tracking of the device. This API call is the call that begins device tracking.
Allows a user to enter a confirmation code to reset a forgotten password.
Confirms registration of a user and handles the existing alias from a previous user.
Creates a new group in the specified user pool.
Requires developer credentials.
Creates an identity provider for a user pool.
Creates a new OAuth2.0 resource server and defines custom scopes in it.
Creates the user import job.
Creates a new Amazon Cognito user pool and sets the password policy for the pool.
Creates the user pool client.
Creates a new domain for a user pool.
Deletes a group. Currently only groups with no members can be deleted.
Requires developer credentials.
Deletes an identity provider for a user pool.
Deletes a resource server.
Allows a user to delete himself or herself.
Deletes the attributes for a user.
Deletes the specified Amazon Cognito user pool.
Allows the developer to delete the user pool client.
Deletes a domain for a user pool.
Gets information about a specific identity provider.
Describes a resource server.
Describes the risk configuration.
Describes the user import job.
Returns the configuration information and metadata of the specified user pool.
Client method for returning the configuration information and metadata of the specified user pool app client.
Gets information about a domain.
Forgets the specified device.
Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the Username parameter, you can use the username or user alias. If a verified phone number exists for the user, the confirmation code is sent to the phone number. Otherwise, if a verified email exists, the confirmation code is sent to the email. If neither a verified phone number nor a verified email exists, InvalidParameterException is thrown. To use the confirmation code for resetting the password, call .
Gets the header information for the .csv file to be used as input for the user import job.
Gets the device.
Gets a group.
Requires developer credentials.
Gets the specified identity provider.
This method takes a user pool ID, and returns the signing certificate.
Gets the UI Customization information for a particular app client's app UI, if there is something set. If nothing is set for the particular client, but there is an existing pool level customization (app clientId will be ALL ), then that is returned. If nothing is present, then an empty shape is returned.
Gets the user attributes and metadata for a user.
Gets the user attribute verification code for the specified attribute name.
Gets the user pool multi-factor authentication (MFA) configuration.
Signs out users from all devices.
Initiates the authentication flow.
Lists the devices.
Lists the groups associated with a user pool.
Requires developer credentials.
Lists information about all identity providers for a user pool.
Lists the resource servers for a user pool.
Lists the tags that are assigned to an Amazon Cognito user pool.
A tag is a label that you can apply to user pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria.
You can use this action up to 10 times per second, per account.
Lists the user import jobs.
Lists the clients that have been created for the specified user pool.
Lists the user pools associated with an AWS account.
Lists the users in the Amazon Cognito user pool.
Lists the users in the specified group.
Requires developer credentials.
Resends the confirmation (for confirmation of registration) to a specific user in the user pool.
Responds to the authentication challenge.
Configures actions on detected risks. To delete the risk configuration for UserPoolId or ClientId , pass null values for all four configuration types.
To enable Amazon Cognito advanced security features, update the user pool to include the UserPoolAddOns key AdvancedSecurityMode .
See .
Sets the UI customization information for a user pool's built-in app UI.
You can specify app UI customization settings for a single client (with a specific clientId ) or for all clients (by setting the clientId to ALL ). If you specify ALL , the default configuration will be used for every client that has no UI customization set previously. If you specify UI customization settings for a particular client, it will no longer fall back to the ALL configuration.
To use this API, your user pool must have a domain associated with it. Otherwise, there is no place to host the app's pages, and the service will throw an error.
Set the user's multi-factor authentication (MFA) method preference.
Set the user pool MFA configuration.
Sets the user settings like multi-factor authentication (MFA). If MFA is to be removed for a particular attribute pass the attribute with code delivery as null. If null list is passed, all MFA options are removed.
Registers the user in the specified user pool and creates a user name, password, and user attributes.
Starts the user import.
Stops the user import job.
Assigns a set of tags to an Amazon Cognito user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
Each tag consists of a key and value, both of which you define. A key is a general category for more specific values. For example, if you have two versions of a user pool, one for testing and another for production, you might assign an Environment tag key to both user pools. The value of this key might be Test for one user pool and Production for the other.
Tags are useful for cost tracking and access control. You can activate your tags so that they appear on the Billing and Cost Management console, where you can track the costs associated with your user pools. In an IAM policy, you can constrain permissions for user pools based on specific tags or tag values.
You can use this action up to 5 times per second, per account. A user pool can have as many as 50 tags.
Removes the specified tags from an Amazon Cognito user pool. You can use this action up to 5 times per second, per account
Provides the feedback for an authentication event whether it was from a valid user or not. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.
Updates the device status.
Updates the specified group with the specified attributes.
Requires developer credentials.
Updates identity provider information for a user pool.
Updates the name and scopes of resource server. All other fields are read-only.
Allows a user to update a specific attribute (one at a time).
Updates the specified user pool with the specified attributes. If you don't provide a value for an attribute, it will be set to the default value. You can get a list of the current user pool settings with .
Updates the specified user pool app client with the specified attributes. If you don't provide a value for an attribute, it will be set to the default value. You can get a list of the current user pool app client settings with .
Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user pool.
You can use this operation to provide the Amazon Resource Name (ARN) of a new certificate to Amazon Cognito. You cannot use it to change the domain for a user pool.
A custom domain is used to host the Amazon Cognito hosted UI, which provides sign-up and sign-in pages for your application. When you set up a custom domain, you provide a certificate that you manage with AWS Certificate Manager (ACM). When necessary, you can use this operation to change the certificate that you applied to your custom domain.
Usually, this is unnecessary following routine certificate renewal with ACM. When you renew your existing certificate in ACM, the ARN for your certificate remains the same, and your custom domain uses the new certificate automatically.
However, if you replace your existing certificate with a new one, ACM gives the new certificate a new ARN. To apply the new certificate to your custom domain, you must provide this ARN to Amazon Cognito.
When you add your new certificate in ACM, you must choose US East (N. Virginia) as the AWS Region.
After you submit your request, Amazon Cognito requires up to 1 hour to distribute your new certificate to your custom domain.
For more information about adding a custom domain to your user pool, see Using Your Own Domain for the Hosted UI .
Use this API to register a user's entered TOTP code and mark the user's software token MFA status as "verified" if successful. The request takes an access token or a session string, but not both.
Verifies the specified user attributes in the user pool.
The AccountTakeoverActionNotifyType data model.
The AccountTakeoverActionType data model.
The AccountTakeoverActionsType data model.
The AccountTakeoverEventActionType data model.
The AccountTakeoverRiskConfigurationType data model.
The AddCustomAttributesRequest data model.
The AddCustomAttributesResponse data model.
The AdminAddUserToGroupRequest data model.
The AdminConfirmSignUpRequest data model.
The AdminConfirmSignUpResponse data model.
The AdminCreateUserConfigType data model.
The AdminCreateUserRequest data model.
The AdminCreateUserResponse data model.
The AdminDeleteUserAttributesRequest data model.
The AdminDeleteUserAttributesResponse data model.
The AdminDeleteUserRequest data model.
The AdminDisableProviderForUserRequest data model.
The AdminDisableProviderForUserResponse data model.
The AdminDisableUserRequest data model.
The AdminDisableUserResponse data model.
The AdminEnableUserRequest data model.
The AdminEnableUserResponse data model.
The AdminForgetDeviceRequest data model.
The AdminGetDeviceRequest data model.
The AdminGetDeviceResponse data model.
The AdminGetUserRequest data model.
The AdminGetUserResponse data model.
The AdminInitiateAuthRequest data model.
The AdminInitiateAuthResponse data model.
The AdminLinkProviderForUserRequest data model.
The AdminLinkProviderForUserResponse data model.
The AdminListDevicesRequest data model.
The AdminListDevicesResponse data model.
The AdminListGroupsForUserRequest data model.
The AdminListGroupsForUserResponse data model.
The AdminListUserAuthEventsRequest data model.
The AdminListUserAuthEventsResponse data model.
The AdminRemoveUserFromGroupRequest data model.
The AdminResetUserPasswordRequest data model.
The AdminResetUserPasswordResponse data model.
The AdminRespondToAuthChallengeRequest data model.
The AdminRespondToAuthChallengeResponse data model.
The AdminSetUserMfapreferenceRequest data model.
The AdminSetUserMfapreferenceResponse data model.
The AdminSetUserPasswordRequest data model.
The AdminSetUserPasswordResponse data model.
The AdminSetUserSettingsRequest data model.
The AdminSetUserSettingsResponse data model.
The AdminUpdateAuthEventFeedbackRequest data model.
The AdminUpdateAuthEventFeedbackResponse data model.
The AdminUpdateDeviceStatusRequest data model.
The AdminUpdateDeviceStatusResponse data model.
The AdminUpdateUserAttributesRequest data model.
The AdminUpdateUserAttributesResponse data model.
The AdminUserGlobalSignOutRequest data model.
The AdminUserGlobalSignOutResponse data model.
The AdvancedSecurityModeType data model.
The AliasAttributeType data model.
The AliasAttributesListType data model.
The AnalyticsConfigurationType data model.
The AnalyticsMetadataType data model.
The AssociateSoftwareTokenRequest data model.
The AssociateSoftwareTokenResponse data model.
The AttributeDataType data model.
The AttributeListType data model.
The AttributeMappingType data model.
The AttributeNameListType data model.
The AttributeType data model.
The AuthEventType data model.
The AuthEventsType data model.
The AuthFlowType data model.
The AuthParametersType data model.
The AuthenticationResultType data model.
The AwsaccountIdType data model.
The BlockedIprangeListType data model.
The BooleanType data model.
The CallbackUrlsListType data model.
The ChallengeName data model.
The ChallengeNameType data model.
The ChallengeParametersType data model.
The ChallengeResponse data model.
The ChallengeResponseListType data model.
The ChallengeResponseType data model.
The ChallengeResponsesType data model.
The ChangePasswordRequest data model.
The ChangePasswordResponse data model.
The ClientMetadataType data model.
The ClientPermissionListType data model.
The CodeDeliveryDetailsListType data model.
The CodeDeliveryDetailsType data model.
The CompromisedCredentialsActionsType data model.
The CompromisedCredentialsEventActionType data model.
The CompromisedCredentialsRiskConfigurationType data model.
The ConfirmDeviceRequest data model.
The ConfirmDeviceResponse data model.
The ConfirmForgotPasswordRequest data model.
The ConfirmForgotPasswordResponse data model.
The ConfirmSignUpRequest data model.
The ConfirmSignUpResponse data model.
The ContextDataType data model.
The CreateGroupRequest data model.
The CreateGroupResponse data model.
The CreateIdentityProviderRequest data model.
The CreateIdentityProviderResponse data model.
The CreateResourceServerRequest data model.
The CreateResourceServerResponse data model.
The CreateUserImportJobRequest data model.
The CreateUserImportJobResponse data model.
The CreateUserPoolClientRequest data model.
The CreateUserPoolClientResponse data model.
The CreateUserPoolDomainRequest data model.
The CreateUserPoolDomainResponse data model.
The CreateUserPoolRequest data model.
The CreateUserPoolResponse data model.
The Csstype data model.
The CssversionType data model.
The CustomAttributesListType data model.
The CustomDomainConfigType data model.
The DateType data model.
The DefaultEmailOptionType data model.
The DeleteGroupRequest data model.
The DeleteIdentityProviderRequest data model.
The DeleteResourceServerRequest data model.
The DeleteUserAttributesRequest data model.
The DeleteUserAttributesResponse data model.
The DeleteUserPoolClientRequest data model.
The DeleteUserPoolDomainRequest data model.
The DeleteUserPoolDomainResponse data model.
The DeleteUserPoolRequest data model.
The DeleteUserRequest data model.
The DeliveryMediumListType data model.
The DeliveryMediumType data model.
The DescribeIdentityProviderRequest data model.
The DescribeIdentityProviderResponse data model.
The DescribeResourceServerRequest data model.
The DescribeResourceServerResponse data model.
The DescribeRiskConfigurationRequest data model.
The DescribeRiskConfigurationResponse data model.
The DescribeUserImportJobRequest data model.
The DescribeUserImportJobResponse data model.
The DescribeUserPoolClientRequest data model.
The DescribeUserPoolClientResponse data model.
The DescribeUserPoolDomainRequest data model.
The DescribeUserPoolDomainResponse data model.
The DescribeUserPoolRequest data model.
The DescribeUserPoolResponse data model.
The DeviceConfigurationType data model.
The DeviceListType data model.
The DeviceRememberedStatusType data model.
The DeviceSecretVerifierConfigType data model.
The DeviceType data model.
The DomainDescriptionType data model.
The DomainStatusType data model.
The EmailConfigurationType data model.
The EmailSendingAccountType data model.
The EventContextDataType data model.
The EventFeedbackType data model.
The EventFilterType data model.
The EventFiltersType data model.
The EventResponseType data model.
The EventRiskType data model.
The EventType data model.
The ExplicitAuthFlowsListType data model.
The ExplicitAuthFlowsType data model.
The FeedbackValueType data model.
The ForceAliasCreation data model.
The ForgetDeviceRequest data model.
The ForgotPasswordRequest data model.
The ForgotPasswordResponse data model.
The GenerateSecret data model.
The GetCsvheaderRequest data model.
The GetCsvheaderResponse data model.
The GetDeviceRequest data model.
The GetDeviceResponse data model.
The GetGroupRequest data model.
The GetGroupResponse data model.
The GetIdentityProviderByIdentifierRequest data model.
The GetIdentityProviderByIdentifierResponse data model.
The GetSigningCertificateRequest data model.
The GetSigningCertificateResponse data model.
The GetUicustomizationRequest data model.
The GetUicustomizationResponse data model.
The GetUserAttributeVerificationCodeRequest data model.
The GetUserAttributeVerificationCodeResponse data model.
The GetUserPoolMfaConfigRequest data model.
The GetUserPoolMfaConfigResponse data model.
The GetUserRequest data model.
The GetUserResponse data model.
The GlobalSignOutRequest data model.
The GlobalSignOutResponse data model.
The GroupListType data model.
The GroupType data model.
The HttpHeader data model.
The HttpHeaderList data model.
The IdentityProviderType data model.
The IdentityProviderTypeType data model.
The IdpIdentifiersListType data model.
The ImageFileType data model.
The ImageUrlType data model.
The InitiateAuthRequest data model.
The InitiateAuthResponse data model.
The IntegerType data model.
The LambdaConfigType data model.
The ListDevicesRequest data model.
The ListDevicesResponse data model.
The ListGroupsRequest data model.
The ListGroupsResponse data model.
The ListIdentityProvidersRequest data model.
The ListIdentityProvidersResponse data model.
The ListOfStringTypes data model.
The ListResourceServersRequest data model.
The ListResourceServersResponse data model.
The ListTagsForResourceRequest data model.
The ListTagsForResourceResponse data model.
The ListUserImportJobsRequest data model.
The ListUserImportJobsResponse data model.
The ListUserPoolClientsRequest data model.
The ListUserPoolClientsResponse data model.
The ListUserPoolsRequest data model.
The ListUserPoolsResponse data model.
The ListUsersInGroupRequest data model.
The ListUsersInGroupResponse data model.
The ListUsersRequest data model.
The ListUsersResponse data model.
The LogoutUrlsListType data model.
The LongType data model.
The MessageActionType data model.
The MessageTemplateType data model.
The MfaoptionListType data model.
The MfaoptionType data model.
The NewDeviceMetadataType data model.
The NotifyConfigurationType data model.
The NotifyEmailType data model.
The NumberAttributeConstraintsType data model.
The OauthFlowType data model.
The OauthFlowsType data model.
The PasswordPolicyType data model.
The ProviderDescription data model.
The ProviderDetailsType data model.
The ProviderUserIdentifierType data model.
The ProvidersListType data model.
The ResendConfirmationCodeRequest data model.
The ResendConfirmationCodeResponse data model.
The ResourceServerScopeListType data model.
The ResourceServerScopeType data model.
The ResourceServerType data model.
The ResourceServersListType data model.
The RespondToAuthChallengeRequest data model.
The RespondToAuthChallengeResponse data model.
The RiskConfigurationType data model.
The RiskDecisionType data model.
The RiskExceptionConfigurationType data model.
The RiskLevelType data model.
The SchemaAttributeType data model.
The SchemaAttributesListType data model.
The ScopeListType data model.
The SearchedAttributeNamesListType data model.
The SetRiskConfigurationRequest data model.
The SetRiskConfigurationResponse data model.
The SetUicustomizationRequest data model.
The SetUicustomizationResponse data model.
The SetUserMfapreferenceRequest data model.
The SetUserMfapreferenceResponse data model.
The SetUserPoolMfaConfigRequest data model.
The SetUserPoolMfaConfigResponse data model.
The SetUserSettingsRequest data model.
The SetUserSettingsResponse data model.
The SignUpRequest data model.
The SignUpResponse data model.
The SkippedIprangeListType data model.
The SmsConfigurationType data model.
The SmsMfaConfigType data model.
The SmsmfaSettingsType data model.
The SoftwareTokenMfaConfigType data model.
The SoftwareTokenMfaSettingsType data model.
The StartUserImportJobRequest data model.
The StartUserImportJobResponse data model.
The StatusType data model.
The StopUserImportJobRequest data model.
The StopUserImportJobResponse data model.
The StringAttributeConstraintsType data model.
The StringType data model.
The SupportedIdentityProvidersListType data model.
The TagResourceRequest data model.
The TagResourceResponse data model.
The UicustomizationType data model.
The UntagResourceRequest data model.
The UntagResourceResponse data model.
The UpdateAuthEventFeedbackRequest data model.
The UpdateAuthEventFeedbackResponse data model.
The UpdateDeviceStatusRequest data model.
The UpdateDeviceStatusResponse data model.
The UpdateGroupRequest data model.
The UpdateGroupResponse data model.
The UpdateIdentityProviderRequest data model.
The UpdateIdentityProviderResponse data model.
The UpdateResourceServerRequest data model.
The UpdateResourceServerResponse data model.
The UpdateUserAttributesRequest data model.
The UpdateUserAttributesResponse data model.
The UpdateUserPoolClientRequest data model.
The UpdateUserPoolClientResponse data model.
The UpdateUserPoolDomainRequest data model.
The UpdateUserPoolDomainResponse data model.
The UpdateUserPoolRequest data model.
The UpdateUserPoolResponse data model.
The UserContextDataType data model.
The UserImportJobStatusType data model.
The UserImportJobType data model.
The UserImportJobsListType data model.
The UserMfasettingListType data model.
The UserPoolAddOnsType data model.
The UserPoolClientDescription data model.
The UserPoolClientListType data model.
The UserPoolClientType data model.
The UserPoolDescriptionType data model.
The UserPoolListType data model.
The UserPoolMfaType data model.
The UserPoolPolicyType data model.
The UserPoolTagsListType data model.
The UserPoolTagsType data model.
The UserPoolType data model.
The UserStatusType data model.
The UserType data model.
The UsernameAttributeType data model.
The UsernameAttributesListType data model.
The UsersListType data model.
The VerificationMessageTemplateType data model.
The VerifiedAttributeType data model.
The VerifiedAttributesListType data model.
The VerifySoftwareTokenRequest data model.
The VerifySoftwareTokenResponse data model.
The VerifySoftwareTokenResponseType data model.
The VerifyUserAttributeRequest data model.
The VerifyUserAttributeResponse data model.
The AccountTakeoverEventActionType data model.
The AdminCreateUserUnusedAccountValidityDaysType data model.
The AdvancedSecurityModeType data model.
The AliasAttributeType data model.
The ArnType data model.
The AttributeDataType data model.
The AttributeMappingKeyType data model.
The AttributeNameType data model.
The AttributeValueType data model.
The AuthFlowType data model.
The ChallengeName data model.
The ChallengeNameType data model.
The ChallengeResponse data model.
The ClientIdType data model.
The ClientNameType data model.
The ClientPermissionType data model.
The ClientSecretType data model.
The CompletionMessageType data model.
The CompromisedCredentialsEventActionType data model.
The ConfirmationCodeType data model.
The CustomAttributeNameType data model.
The DefaultEmailOptionType data model.
The DeliveryMediumType data model.
The DescriptionType data model.
The DeviceKeyType data model.
The DeviceNameType data model.
The DeviceRememberedStatusType data model.
The DomainStatusType data model.
The DomainType data model.
The DomainVersionType data model.
The EmailAddressType data model.
The EmailNotificationBodyType data model.
The EmailNotificationSubjectType data model.
The EmailSendingAccountType data model.
The EmailVerificationMessageByLinkType data model.
The EmailVerificationMessageType data model.
The EmailVerificationSubjectByLinkType data model.
The EmailVerificationSubjectType data model.
The EventFilterType data model.
The EventIdType data model.
The EventResponseType data model.
The ExplicitAuthFlowsType data model.
The FeedbackValueType data model.
The GroupNameType data model.
The HexStringType data model.
The IdentityProviderTypeType data model.
The IdpIdentifierType data model.
The ListProvidersLimitType data model.
The ListResourceServersLimitType data model.
The MessageActionType data model.
The OauthFlowType data model.
The PaginationKey data model.
The PaginationKeyType data model.
The PasswordPolicyMinLengthType data model.
The PasswordType data model.
The PoolQueryLimitType data model.
The PreSignedUrlType data model.
The PrecedenceType data model.
The ProviderNameType data model.
The ProviderNameTypeV1 data model.
The QueryLimit data model.
The QueryLimitType data model.
The RedirectUrlType data model.
The RefreshTokenValidityType data model.
The ResourceServerIdentifierType data model.
The ResourceServerNameType data model.
The ResourceServerScopeDescriptionType data model.
The ResourceServerScopeNameType data model.
The RiskDecisionType data model.
The RiskLevelType data model.
The S3BucketType data model.
The ScopeType data model.
The SearchPaginationTokenType data model.
The SecretCodeType data model.
The SecretHashType data model.
The SessionType data model.
The SmsVerificationMessageType data model.
The SoftwareTokenMfauserCodeType data model.
The StatusType data model.
The TagKeysType data model.
The TagValueType data model.
The TemporaryPasswordValidityDaysType data model.
The TokenModelType data model.
The UserFilterType data model.
The UserImportJobIdType data model.
The UserImportJobNameType data model.
The UserImportJobStatusType data model.
The UserPoolIdType data model.
The UserPoolMfaType data model.
The UserPoolNameType data model.
The UserStatusType data model.
The UsernameAttributeType data model.
The UsernameType data model.
The VerifiedAttributeType data model.
The VerifySoftwareTokenResponseType data model.
Codec for AccountTakeoverActionNotifyType.
Codec for AccountTakeoverActionType.
Codec for AccountTakeoverActionsType.
Codec for AccountTakeoverEventActionType.
Codec for AccountTakeoverRiskConfigurationType.
Codec for AddCustomAttributesRequest.
Codec for AddCustomAttributesResponse.
Codec for AdminAddUserToGroupRequest.
Codec for AdminConfirmSignUpRequest.
Codec for AdminConfirmSignUpResponse.
Codec for AdminCreateUserConfigType.
Codec for AdminCreateUserRequest.
Codec for AdminCreateUserResponse.
Codec for AdminCreateUserUnusedAccountValidityDaysType.
Codec for AdminDeleteUserAttributesRequest.
Codec for AdminDeleteUserAttributesResponse.
Codec for AdminDeleteUserRequest.
Codec for AdminDisableProviderForUserRequest.
Codec for AdminDisableProviderForUserResponse.
Codec for AdminDisableUserRequest.
Codec for AdminDisableUserResponse.
Codec for AdminEnableUserRequest.
Codec for AdminEnableUserResponse.
Codec for AdminForgetDeviceRequest.
Codec for AdminGetDeviceRequest.
Codec for AdminGetDeviceResponse.
Codec for AdminGetUserRequest.
Codec for AdminGetUserResponse.
Codec for AdminInitiateAuthRequest.
Codec for AdminInitiateAuthResponse.
Codec for AdminLinkProviderForUserRequest.
Codec for AdminLinkProviderForUserResponse.
Codec for AdminListDevicesRequest.
Codec for AdminListDevicesResponse.
Codec for AdminListGroupsForUserRequest.
Codec for AdminListGroupsForUserResponse.
Codec for AdminListUserAuthEventsRequest.
Codec for AdminListUserAuthEventsResponse.
Codec for AdminRemoveUserFromGroupRequest.
Codec for AdminResetUserPasswordRequest.
Codec for AdminResetUserPasswordResponse.
Codec for AdminRespondToAuthChallengeRequest.
Codec for AdminRespondToAuthChallengeResponse.
Codec for AdminSetUserMfapreferenceRequest.
Codec for AdminSetUserMfapreferenceResponse.
Codec for AdminSetUserPasswordRequest.
Codec for AdminSetUserPasswordResponse.
Codec for AdminSetUserSettingsRequest.
Codec for AdminSetUserSettingsResponse.
Codec for AdminUpdateAuthEventFeedbackRequest.
Codec for AdminUpdateAuthEventFeedbackResponse.
Codec for AdminUpdateDeviceStatusRequest.
Codec for AdminUpdateDeviceStatusResponse.
Codec for AdminUpdateUserAttributesRequest.
Codec for AdminUpdateUserAttributesResponse.
Codec for AdminUserGlobalSignOutRequest.
Codec for AdminUserGlobalSignOutResponse.
Codec for AdvancedSecurityModeType.
Codec for AliasAttributeType.
Codec for AliasAttributesListType.
Codec for AnalyticsConfigurationType.
Codec for AnalyticsMetadataType.
Codec for ArnType.
Codec for AssociateSoftwareTokenRequest.
Codec for AssociateSoftwareTokenResponse.
Codec for AttributeDataType.
Codec for AttributeListType.
Codec for AttributeMappingKeyType.
Codec for AttributeMappingType.
Codec for AttributeNameListType.
Codec for AttributeNameType.
Codec for AttributeType.
Codec for AttributeValueType.
Codec for AuthEventType.
Codec for AuthEventsType.
Codec for AuthFlowType.
Codec for AuthParametersType.
Codec for AuthenticationResultType.
Codec for AwsaccountIdType.
Codec for BlockedIprangeListType.
Codec for BooleanType.
Codec for CallbackUrlsListType.
Codec for ChallengeName.
Codec for ChallengeNameType.
Codec for ChallengeParametersType.
Codec for ChallengeResponse.
Codec for ChallengeResponseListType.
Codec for ChallengeResponseType.
Codec for ChallengeResponsesType.
Codec for ChangePasswordRequest.
Codec for ChangePasswordResponse.
Codec for ClientIdType.
Codec for ClientMetadataType.
Codec for ClientNameType.
Codec for ClientPermissionListType.
Codec for ClientPermissionType.
Codec for ClientSecretType.
Codec for CodeDeliveryDetailsListType.
Codec for CodeDeliveryDetailsType.
Codec for CompletionMessageType.
Codec for CompromisedCredentialsActionsType.
Codec for CompromisedCredentialsEventActionType.
Codec for CompromisedCredentialsRiskConfigurationType.
Codec for ConfirmDeviceRequest.
Codec for ConfirmDeviceResponse.
Codec for ConfirmForgotPasswordRequest.
Codec for ConfirmForgotPasswordResponse.
Codec for ConfirmSignUpRequest.
Codec for ConfirmSignUpResponse.
Codec for ConfirmationCodeType.
Codec for ContextDataType.
Codec for CreateGroupRequest.
Codec for CreateGroupResponse.
Codec for CreateIdentityProviderRequest.
Codec for CreateIdentityProviderResponse.
Codec for CreateResourceServerRequest.
Codec for CreateResourceServerResponse.
Codec for CreateUserImportJobRequest.
Codec for CreateUserImportJobResponse.
Codec for CreateUserPoolClientRequest.
Codec for CreateUserPoolClientResponse.
Codec for CreateUserPoolDomainRequest.
Codec for CreateUserPoolDomainResponse.
Codec for CreateUserPoolRequest.
Codec for CreateUserPoolResponse.
Codec for Csstype.
Codec for CssversionType.
Codec for CustomAttributeNameType.
Codec for CustomAttributesListType.
Codec for CustomDomainConfigType.
Codec for DateType.
Codec for DefaultEmailOptionType.
Codec for DeleteGroupRequest.
Codec for DeleteIdentityProviderRequest.
Codec for DeleteResourceServerRequest.
Codec for DeleteUserAttributesRequest.
Codec for DeleteUserAttributesResponse.
Codec for DeleteUserPoolClientRequest.
Codec for DeleteUserPoolDomainRequest.
Codec for DeleteUserPoolDomainResponse.
Codec for DeleteUserPoolRequest.
Codec for DeleteUserRequest.
Codec for DeliveryMediumListType.
Codec for DeliveryMediumType.
Codec for DescribeIdentityProviderRequest.
Codec for DescribeIdentityProviderResponse.
Codec for DescribeResourceServerRequest.
Codec for DescribeResourceServerResponse.
Codec for DescribeRiskConfigurationRequest.
Codec for DescribeRiskConfigurationResponse.
Codec for DescribeUserImportJobRequest.
Codec for DescribeUserImportJobResponse.
Codec for DescribeUserPoolClientRequest.
Codec for DescribeUserPoolClientResponse.
Codec for DescribeUserPoolDomainRequest.
Codec for DescribeUserPoolDomainResponse.
Codec for DescribeUserPoolRequest.
Codec for DescribeUserPoolResponse.
Codec for DescriptionType.
Codec for DeviceConfigurationType.
Codec for DeviceKeyType.
Codec for DeviceListType.
Codec for DeviceNameType.
Codec for DeviceRememberedStatusType.
Codec for DeviceSecretVerifierConfigType.
Codec for DeviceType.
Codec for DomainDescriptionType.
Codec for DomainStatusType.
Codec for DomainType.
Codec for DomainVersionType.
Codec for EmailAddressType.
Codec for EmailConfigurationType.
Codec for EmailNotificationBodyType.
Codec for EmailNotificationSubjectType.
Codec for EmailSendingAccountType.
Codec for EmailVerificationMessageByLinkType.
Codec for EmailVerificationMessageType.
Codec for EmailVerificationSubjectByLinkType.
Codec for EmailVerificationSubjectType.
Codec for EventContextDataType.
Codec for EventFeedbackType.
Codec for EventFilterType.
Codec for EventFiltersType.
Codec for EventIdType.
Codec for EventResponseType.
Codec for EventRiskType.
Codec for EventType.
Codec for ExplicitAuthFlowsListType.
Codec for ExplicitAuthFlowsType.
Codec for FeedbackValueType.
Codec for ForceAliasCreation.
Codec for ForgetDeviceRequest.
Codec for ForgotPasswordRequest.
Codec for ForgotPasswordResponse.
Codec for GenerateSecret.
Codec for GetCsvheaderRequest.
Codec for GetCsvheaderResponse.
Codec for GetDeviceRequest.
Codec for GetDeviceResponse.
Codec for GetGroupRequest.
Codec for GetGroupResponse.
Codec for GetIdentityProviderByIdentifierRequest.
Codec for GetIdentityProviderByIdentifierResponse.
Codec for GetSigningCertificateRequest.
Codec for GetSigningCertificateResponse.
Codec for GetUicustomizationRequest.
Codec for GetUicustomizationResponse.
Codec for GetUserAttributeVerificationCodeRequest.
Codec for GetUserAttributeVerificationCodeResponse.
Codec for GetUserPoolMfaConfigRequest.
Codec for GetUserPoolMfaConfigResponse.
Codec for GetUserRequest.
Codec for GetUserResponse.
Codec for GlobalSignOutRequest.
Codec for GlobalSignOutResponse.
Codec for GroupListType.
Codec for GroupNameType.
Codec for GroupType.
Codec for HexStringType.
Codec for HttpHeader.
Codec for HttpHeaderList.
Codec for IdentityProviderType.
Codec for IdentityProviderTypeType.
Codec for IdpIdentifierType.
Codec for IdpIdentifiersListType.
Codec for ImageFileType.
Codec for ImageUrlType.
Codec for InitiateAuthRequest.
Codec for InitiateAuthResponse.
Codec for IntegerType.
Codec for LambdaConfigType.
Codec for ListDevicesRequest.
Codec for ListDevicesResponse.
Codec for ListGroupsRequest.
Codec for ListGroupsResponse.
Codec for ListIdentityProvidersRequest.
Codec for ListIdentityProvidersResponse.
Codec for ListOfStringTypes.
Codec for ListProvidersLimitType.
Codec for ListResourceServersLimitType.
Codec for ListResourceServersRequest.
Codec for ListResourceServersResponse.
Codec for ListTagsForResourceRequest.
Codec for ListTagsForResourceResponse.
Codec for ListUserImportJobsRequest.
Codec for ListUserImportJobsResponse.
Codec for ListUserPoolClientsRequest.
Codec for ListUserPoolClientsResponse.
Codec for ListUserPoolsRequest.
Codec for ListUserPoolsResponse.
Codec for ListUsersInGroupRequest.
Codec for ListUsersInGroupResponse.
Codec for ListUsersRequest.
Codec for ListUsersResponse.
Codec for LogoutUrlsListType.
Codec for LongType.
Codec for MessageActionType.
Codec for MessageTemplateType.
Codec for MfaoptionListType.
Codec for MfaoptionType.
Codec for NewDeviceMetadataType.
Codec for NotifyConfigurationType.
Codec for NotifyEmailType.
Codec for NumberAttributeConstraintsType.
Codec for OauthFlowType.
Codec for OauthFlowsType.
Codec for PaginationKey.
Codec for PaginationKeyType.
Codec for PasswordPolicyMinLengthType.
Codec for PasswordPolicyType.
Codec for PasswordType.
Codec for PoolQueryLimitType.
Codec for PreSignedUrlType.
Codec for PrecedenceType.
Codec for ProviderDescription.
Codec for ProviderDetailsType.
Codec for ProviderNameType.
Codec for ProviderNameTypeV1.
Codec for ProviderUserIdentifierType.
Codec for ProvidersListType.
Codec for QueryLimit.
Codec for QueryLimitType.
Codec for RedirectUrlType.
Codec for RefreshTokenValidityType.
Codec for ResendConfirmationCodeRequest.
Codec for ResendConfirmationCodeResponse.
Codec for ResourceServerIdentifierType.
Codec for ResourceServerNameType.
Codec for ResourceServerScopeDescriptionType.
Codec for ResourceServerScopeListType.
Codec for ResourceServerScopeNameType.
Codec for ResourceServerScopeType.
Codec for ResourceServerType.
Codec for ResourceServersListType.
Codec for RespondToAuthChallengeRequest.
Codec for RespondToAuthChallengeResponse.
Codec for RiskConfigurationType.
Codec for RiskDecisionType.
Codec for RiskExceptionConfigurationType.
Codec for RiskLevelType.
Codec for S3BucketType.
Codec for SchemaAttributeType.
Codec for SchemaAttributesListType.
Codec for ScopeListType.
Codec for ScopeType.
Codec for SearchPaginationTokenType.
Codec for SearchedAttributeNamesListType.
Codec for SecretCodeType.
Codec for SecretHashType.
Codec for SessionType.
Codec for SetRiskConfigurationRequest.
Codec for SetRiskConfigurationResponse.
Codec for SetUicustomizationRequest.
Codec for SetUicustomizationResponse.
Codec for SetUserMfapreferenceRequest.
Codec for SetUserMfapreferenceResponse.
Codec for SetUserPoolMfaConfigRequest.
Codec for SetUserPoolMfaConfigResponse.
Codec for SetUserSettingsRequest.
Codec for SetUserSettingsResponse.
Codec for SignUpRequest.
Codec for SignUpResponse.
Codec for SkippedIprangeListType.
Codec for SmsConfigurationType.
Codec for SmsMfaConfigType.
Codec for SmsVerificationMessageType.
Codec for SmsmfaSettingsType.
Codec for SoftwareTokenMfaConfigType.
Codec for SoftwareTokenMfaSettingsType.
Codec for SoftwareTokenMfauserCodeType.
Codec for StartUserImportJobRequest.
Codec for StartUserImportJobResponse.
Codec for StatusType.
Codec for StopUserImportJobRequest.
Codec for StopUserImportJobResponse.
Codec for StringAttributeConstraintsType.
Codec for StringType.
Codec for SupportedIdentityProvidersListType.
Codec for TagKeysType.
Codec for TagResourceRequest.
Codec for TagResourceResponse.
Codec for TagValueType.
Codec for TemporaryPasswordValidityDaysType.
Codec for TokenModelType.
Codec for UicustomizationType.
Codec for UntagResourceRequest.
Codec for UntagResourceResponse.
Codec for UpdateAuthEventFeedbackRequest.
Codec for UpdateAuthEventFeedbackResponse.
Codec for UpdateDeviceStatusRequest.
Codec for UpdateDeviceStatusResponse.
Codec for UpdateGroupRequest.
Codec for UpdateGroupResponse.
Codec for UpdateIdentityProviderRequest.
Codec for UpdateIdentityProviderResponse.
Codec for UpdateResourceServerRequest.
Codec for UpdateResourceServerResponse.
Codec for UpdateUserAttributesRequest.
Codec for UpdateUserAttributesResponse.
Codec for UpdateUserPoolClientRequest.
Codec for UpdateUserPoolClientResponse.
Codec for UpdateUserPoolDomainRequest.
Codec for UpdateUserPoolDomainResponse.
Codec for UpdateUserPoolRequest.
Codec for UpdateUserPoolResponse.
Codec for UserContextDataType.
Codec for UserFilterType.
Codec for UserImportJobIdType.
Codec for UserImportJobNameType.
Codec for UserImportJobStatusType.
Codec for UserImportJobType.
Codec for UserImportJobsListType.
Codec for UserMfasettingListType.
Codec for UserPoolAddOnsType.
Codec for UserPoolClientDescription.
Codec for UserPoolClientListType.
Codec for UserPoolClientType.
Codec for UserPoolDescriptionType.
Codec for UserPoolIdType.
Codec for UserPoolListType.
Codec for UserPoolMfaType.
Codec for UserPoolNameType.
Codec for UserPoolPolicyType.
Codec for UserPoolTagsListType.
Codec for UserPoolTagsType.
Codec for UserPoolType.
Codec for UserStatusType.
Codec for UserType.
Codec for UsernameAttributeType.
Codec for UsernameAttributesListType.
Codec for UsernameType.
Codec for UsersListType.
Codec for VerificationMessageTemplateType.
Codec for VerifiedAttributeType.
Codec for VerifiedAttributesListType.
Codec for VerifySoftwareTokenRequest.
Codec for VerifySoftwareTokenResponse.
Codec for VerifySoftwareTokenResponseType.
Codec for VerifyUserAttributeRequest.
Codec for VerifyUserAttributeResponse.
Configuration for this service.