the-sett/elm-aws-cognito/4.0.0

NOTE: the latest version is 5.0.0

AWS.CognitoIdentityProvider

Using the Amazon Cognito User Pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies.

This API reference provides information about user pools in Amazon Cognito User Pools.

For more information, see the Amazon Cognito Documentation.

Service definition.

service : Region -> Service

Configuration for this service.

Service endpoints.

addCustomAttributes : AddCustomAttributesRequest -> Request AWSAppError ()

Adds additional user attributes to the user pool schema.

adminAddUserToGroup : AdminAddUserToGroupRequest -> Request AWSAppError ()

Adds the specified user to the specified group.

Requires developer credentials.

adminConfirmSignUp : AdminConfirmSignUpRequest -> Request AWSAppError ()

Confirms user registration as an admin without using a confirmation code. Works on any user.

Requires developer credentials.

AdminCreateUserRequest
-> Request AWSAppError AdminCreateUserResponse

Creates a new user in the specified user pool.

If MessageAction is not set, the default is to send a welcome message via email or phone (SMS).

This message is based on a template that you configured in your call to or . This template includes your custom sign-up instructions and placeholders for user name and temporary password.

Alternatively, you can call AdminCreateUser with “SUPPRESS” for the MessageAction parameter, and Amazon Cognito will not send any email.

In either case, the user will be in the FORCE_CHANGE_PASSWORD state until they sign in and change their password.

AdminCreateUser requires developer credentials.

adminDeleteUser : AdminDeleteUserRequest -> Request AWSAppError ()

Deletes a user as an administrator. Works on any user.

Requires developer credentials.

adminDeleteUserAttributes : AdminDeleteUserAttributesRequest -> Request AWSAppError ()

Deletes the user attributes in a user pool as an administrator. Works on any user.

Requires developer credentials.

adminDisableProviderForUser : AdminDisableProviderForUserRequest -> Request AWSAppError ()

Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked DestinationUser) signs in, they must create a new user account. See .

This action is enabled only for admin access and requires developer credentials.

The ProviderName must match the value specified when creating an IdP for the pool.

To disable a native username + password user, the ProviderName value must be Cognito and the ProviderAttributeName must be Cognito_Subject, with the ProviderAttributeValue being the name that is used in the user pool for the user.

The ProviderAttributeName must always be Cognito_Subject for social identity providers. The ProviderAttributeValue must always be the exact subject that was used when the user was originally linked as a source user.

For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the ProviderAttributeName and ProviderAttributeValue must be the same values that were used for the SourceUser when the identities were originally linked in the call. (If the linking was done with ProviderAttributeName set to Cognito_Subject, the same applies here). However, if the user has already signed in, the ProviderAttributeName must be Cognito_Subject and ProviderAttributeValue must be the subject of the SAML assertion.

adminDisableUser : AdminDisableUserRequest -> Request AWSAppError ()

Disables the specified user as an administrator. Works on any user.

Requires developer credentials.

adminEnableUser : AdminEnableUserRequest -> Request AWSAppError ()

Enables the specified user as an administrator. Works on any user.

Requires developer credentials.

adminForgetDevice : AdminForgetDeviceRequest -> Request AWSAppError ()

Forgets the device, as an administrator.

Requires developer credentials.

AdminGetDeviceRequest
-> Request AWSAppError AdminGetDeviceResponse

Gets the device, as an administrator.

Requires developer credentials.

adminGetUser : AdminGetUserRequest -> Request AWSAppError AdminGetUserResponse

Gets the specified user by user name in a user pool as an administrator. Works on any user.

Requires developer credentials.

AdminInitiateAuthRequest
-> Request AWSAppError AdminInitiateAuthResponse

Initiates the authentication flow, as an administrator.

Requires developer credentials.

adminLinkProviderForUser : AdminLinkProviderForUserRequest -> Request AWSAppError ()

Links an existing user account in a user pool (DestinationUser) to an identity from an external identity provider (SourceUser) based on a specified attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not yet been used to sign in, so that the federated user identity can be used to sign in as the existing user account.

For example, if there is an existing user with a username and password, this API links that user to a federated user identity, so that when the federated user identity is used, the user signs in as the existing user account.

Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external identity providers and provider attributes that have been trusted by the application owner.

See also .

This action is enabled only for admin access and requires developer credentials.

AdminListDevicesRequest
-> Request AWSAppError AdminListDevicesResponse

Lists devices, as an administrator.

Requires developer credentials.

AdminListGroupsForUserRequest
-> Request AWSAppError AdminListGroupsForUserResponse

Lists the groups that the user belongs to.

Requires developer credentials.

AdminListUserAuthEventsRequest
-> Request AWSAppError AdminListUserAuthEventsResponse

Lists a history of user activity and any risks detected as part of Amazon Cognito advanced security.

adminRemoveUserFromGroup : AdminRemoveUserFromGroupRequest -> Request AWSAppError ()

Removes the specified user from the specified group.

Requires developer credentials.

adminResetUserPassword : AdminResetUserPasswordRequest -> Request AWSAppError ()

Resets the specified user's password in a user pool as an administrator. Works on any user.

When a developer calls this API, the current password is invalidated, so it must be changed. If a user tries to sign in after the API is called, the app will get a PasswordResetRequiredException exception back and should direct the user down the flow to reset the password, which is the same as the forgot password flow. In addition, if the user pool has phone verification selected and a verified phone number exists for the user, or if email verification is selected and a verified email exists for the user, calling this API will also result in sending a message to the end user with the code to change their password.

Requires developer credentials.

AdminRespondToAuthChallengeRequest
-> Request AWSAppError AdminRespondToAuthChallengeResponse

Responds to an authentication challenge, as an administrator.

Requires developer credentials.

adminSetUserMfapreference : AdminSetUserMfapreferenceRequest -> Request AWSAppError ()

Sets the user's multi-factor authentication (MFA) preference.

adminSetUserPassword : AdminSetUserPasswordRequest -> Request AWSAppError ()
adminSetUserSettings : AdminSetUserSettingsRequest -> Request AWSAppError ()

Sets all the user settings for a specified user name. Works on any user.

Requires developer credentials.

adminUpdateAuthEventFeedback : AdminUpdateAuthEventFeedbackRequest -> Request AWSAppError ()

Provides feedback for an authentication event as to whether it was from a valid user. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.

adminUpdateDeviceStatus : AdminUpdateDeviceStatusRequest -> Request AWSAppError ()

Updates the device status as an administrator.

Requires developer credentials.

adminUpdateUserAttributes : AdminUpdateUserAttributesRequest -> Request AWSAppError ()

Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user.

For custom attributes, you must prepend the custom: prefix to the attribute name.

In addition to updating user attributes, this API can also be used to mark phone and email as verified.

Requires developer credentials.

adminUserGlobalSignOut : AdminUserGlobalSignOutRequest -> Request AWSAppError ()

Signs out users from all devices, as an administrator.

Requires developer credentials.

AssociateSoftwareTokenRequest
-> Request AWSAppError AssociateSoftwareTokenResponse

Returns a unique generated shared secret key code for the user account. The request takes an access token or a session string, but not both.

changePassword : ChangePasswordRequest -> Request AWSAppError ()

Changes the password for a specified user in a user pool.

confirmDevice : ConfirmDeviceRequest -> Request AWSAppError ConfirmDeviceResponse

Confirms tracking of the device. This API call is the call that begins device tracking.

confirmForgotPassword : ConfirmForgotPasswordRequest -> Request AWSAppError ()

Allows a user to enter a confirmation code to reset a forgotten password.

confirmSignUp : ConfirmSignUpRequest -> Request AWSAppError ()

Confirms registration of a user and handles the existing alias from a previous user.

createGroup : CreateGroupRequest -> Request AWSAppError CreateGroupResponse

Creates a new group in the specified user pool.

Requires developer credentials.

CreateIdentityProviderRequest
-> Request AWSAppError CreateIdentityProviderResponse

Creates an identity provider for a user pool.

CreateResourceServerRequest
-> Request AWSAppError CreateResourceServerResponse

Creates a new OAuth2.0 resource server and defines custom scopes in it.

CreateUserImportJobRequest
-> Request AWSAppError CreateUserImportJobResponse

Creates the user import job.

CreateUserPoolRequest
-> Request AWSAppError CreateUserPoolResponse

Creates a new Amazon Cognito user pool and sets the password policy for the pool.

CreateUserPoolClientRequest
-> Request AWSAppError CreateUserPoolClientResponse

Creates the user pool client.

CreateUserPoolDomainRequest
-> Request AWSAppError CreateUserPoolDomainResponse

Creates a new domain for a user pool.

deleteGroup : DeleteGroupRequest -> Request AWSAppError ()

Deletes a group. Currently only groups with no members can be deleted.

Requires developer credentials.

deleteIdentityProvider : DeleteIdentityProviderRequest -> Request AWSAppError ()

Deletes an identity provider for a user pool.

deleteResourceServer : DeleteResourceServerRequest -> Request AWSAppError ()

Deletes a resource server.

deleteUser : DeleteUserRequest -> Request AWSAppError ()

Allows a user to delete himself or herself.

deleteUserAttributes : DeleteUserAttributesRequest -> Request AWSAppError ()

Deletes the attributes for a user.

deleteUserPool : DeleteUserPoolRequest -> Request AWSAppError ()

Deletes the specified Amazon Cognito user pool.

deleteUserPoolClient : DeleteUserPoolClientRequest -> Request AWSAppError ()

Allows the developer to delete the user pool client.

deleteUserPoolDomain : DeleteUserPoolDomainRequest -> Request AWSAppError ()

Deletes a domain for a user pool.

DescribeIdentityProviderRequest
-> Request AWSAppError DescribeIdentityProviderResponse

Gets information about a specific identity provider.

DescribeResourceServerRequest
-> Request AWSAppError DescribeResourceServerResponse

Describes a resource server.

DescribeRiskConfigurationRequest
-> Request AWSAppError DescribeRiskConfigurationResponse

Describes the risk configuration.

DescribeUserImportJobRequest
-> Request AWSAppError DescribeUserImportJobResponse

Describes the user import job.

DescribeUserPoolRequest
-> Request AWSAppError DescribeUserPoolResponse

Returns the configuration information and metadata of the specified user pool.

DescribeUserPoolClientRequest
-> Request AWSAppError DescribeUserPoolClientResponse

Client method for returning the configuration information and metadata of the specified user pool app client.

DescribeUserPoolDomainRequest
-> Request AWSAppError DescribeUserPoolDomainResponse

Gets information about a domain.

forgetDevice : ForgetDeviceRequest -> Request AWSAppError ()

Forgets the specified device.

ForgotPasswordRequest
-> Request AWSAppError ForgotPasswordResponse

Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the Username parameter, you can use the username or user alias. If a verified phone number exists for the user, the confirmation code is sent to the phone number. Otherwise, if a verified email exists, the confirmation code is sent to the email. If neither a verified phone number nor a verified email exists, InvalidParameterException is thrown. To use the confirmation code for resetting the password, call .

getCsvheader : GetCsvheaderRequest -> Request AWSAppError GetCsvheaderResponse

Gets the header information for the .csv file to be used as input for the user import job.

getDevice : GetDeviceRequest -> Request AWSAppError GetDeviceResponse

Gets the device.

getGroup : GetGroupRequest -> Request AWSAppError GetGroupResponse

Gets a group.

Requires developer credentials.

GetIdentityProviderByIdentifierRequest
-> Request AWSAppError GetIdentityProviderByIdentifierResponse

Gets the specified identity provider.

GetSigningCertificateRequest
-> Request AWSAppError GetSigningCertificateResponse

This method takes a user pool ID, and returns the signing certificate.

GetUicustomizationRequest
-> Request AWSAppError GetUicustomizationResponse

Gets the UI Customization information for a particular app client's app UI, if there is something set. If nothing is set for the particular client, but there is an existing pool level customization (app clientId will be ALL), then that is returned. If nothing is present, then an empty shape is returned.

getUser : GetUserRequest -> Request AWSAppError GetUserResponse

Gets the user attributes and metadata for a user.

GetUserAttributeVerificationCodeRequest
-> Request AWSAppError GetUserAttributeVerificationCodeResponse

Gets the user attribute verification code for the specified attribute name.

GetUserPoolMfaConfigRequest
-> Request AWSAppError GetUserPoolMfaConfigResponse

Gets the user pool multi-factor authentication (MFA) configuration.

globalSignOut : GlobalSignOutRequest -> Request AWSAppError ()

Signs out users from all devices.

initiateAuth : InitiateAuthRequest -> Request AWSAppError InitiateAuthResponse

Initiates the authentication flow.

listDevices : ListDevicesRequest -> Request AWSAppError ListDevicesResponse

Lists the devices.

listGroups : ListGroupsRequest -> Request AWSAppError ListGroupsResponse

Lists the groups associated with a user pool.

Requires developer credentials.

ListIdentityProvidersRequest
-> Request AWSAppError ListIdentityProvidersResponse

Lists information about all identity providers for a user pool.

ListResourceServersRequest
-> Request AWSAppError ListResourceServersResponse

Lists the resource servers for a user pool.

ListTagsForResourceRequest
-> Request AWSAppError ListTagsForResourceResponse

Lists the tags that are assigned to an Amazon Cognito user pool.

A tag is a label that you can apply to user pools to categorize and manage them in different ways, such as by purpose, owner, environment, or other criteria.

You can use this action up to 10 times per second, per account.

ListUserImportJobsRequest
-> Request AWSAppError ListUserImportJobsResponse

Lists the user import jobs.

ListUserPoolClientsRequest
-> Request AWSAppError ListUserPoolClientsResponse

Lists the clients that have been created for the specified user pool.

listUserPools : ListUserPoolsRequest -> Request AWSAppError ListUserPoolsResponse

Lists the user pools associated with an AWS account.

listUsers : ListUsersRequest -> Request AWSAppError ListUsersResponse

Lists the users in the Amazon Cognito user pool.

ListUsersInGroupRequest
-> Request AWSAppError ListUsersInGroupResponse

Lists the users in the specified group.

Requires developer credentials.

ResendConfirmationCodeRequest
-> Request AWSAppError ResendConfirmationCodeResponse

Resends the confirmation (for confirmation of registration) to a specific user in the user pool.

RespondToAuthChallengeRequest
-> Request AWSAppError RespondToAuthChallengeResponse

Responds to the authentication challenge.

SetRiskConfigurationRequest
-> Request AWSAppError SetRiskConfigurationResponse

Configures actions on detected risks. To delete the risk configuration for UserPoolId or ClientId, pass null values for all four configuration types.

To enable Amazon Cognito advanced security features, update the user pool to include the UserPoolAddOns keyAdvancedSecurityMode.

See .

SetUicustomizationRequest
-> Request AWSAppError SetUicustomizationResponse

Sets the UI customization information for a user pool's built-in app UI.

You can specify app UI customization settings for a single client (with a specific clientId) or for all clients (by setting the clientId to ALL). If you specify ALL, the default configuration will be used for every client that has no UI customization set previously. If you specify UI customization settings for a particular client, it will no longer fall back to the ALL configuration.

To use this API, your user pool must have a domain associated with it. Otherwise, there is no place to host the app's pages, and the service will throw an error.

setUserMfapreference : SetUserMfapreferenceRequest -> Request AWSAppError ()

Set the user's multi-factor authentication (MFA) method preference.

SetUserPoolMfaConfigRequest
-> Request AWSAppError SetUserPoolMfaConfigResponse

Set the user pool MFA configuration.

setUserSettings : SetUserSettingsRequest -> Request AWSAppError ()

Sets the user settings like multi-factor authentication (MFA). If MFA is to be removed for a particular attribute pass the attribute with code delivery as null. If null list is passed, all MFA options are removed.

signUp : SignUpRequest -> Request AWSAppError SignUpResponse

Registers the user in the specified user pool and creates a user name, password, and user attributes.

StartUserImportJobRequest
-> Request AWSAppError StartUserImportJobResponse

Starts the user import.

StopUserImportJobRequest
-> Request AWSAppError StopUserImportJobResponse

Stops the user import job.

tagResource : TagResourceRequest -> Request AWSAppError ()

Assigns a set of tags to an Amazon Cognito user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.

Each tag consists of a key and value, both of which you define. A key is a general category for more specific values. For example, if you have two versions of a user pool, one for testing and another for production, you might assign an Environment tag key to both user pools. The value of this key might be Test for one user pool and Production for the other.

Tags are useful for cost tracking and access control. You can activate your tags so that they appear on the Billing and Cost Management console, where you can track the costs associated with your user pools. In an IAM policy, you can constrain permissions for user pools based on specific tags or tag values.

You can use this action up to 5 times per second, per account. A user pool can have as many as 50 tags.

untagResource : UntagResourceRequest -> Request AWSAppError ()

Removes the specified tags from an Amazon Cognito user pool. You can use this action up to 5 times per second, per account

updateAuthEventFeedback : UpdateAuthEventFeedbackRequest -> Request AWSAppError ()

Provides the feedback for an authentication event whether it was from a valid user or not. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.

updateDeviceStatus : UpdateDeviceStatusRequest -> Request AWSAppError ()

Updates the device status.

updateGroup : UpdateGroupRequest -> Request AWSAppError UpdateGroupResponse

Updates the specified group with the specified attributes.

Requires developer credentials.

UpdateIdentityProviderRequest
-> Request AWSAppError UpdateIdentityProviderResponse

Updates identity provider information for a user pool.

UpdateResourceServerRequest
-> Request AWSAppError UpdateResourceServerResponse

Updates the name and scopes of resource server. All other fields are read-only.

UpdateUserAttributesRequest
-> Request AWSAppError UpdateUserAttributesResponse

Allows a user to update a specific attribute (one at a time).

updateUserPool : UpdateUserPoolRequest -> Request AWSAppError ()

Updates the specified user pool with the specified attributes. If you don't provide a value for an attribute, it will be set to the default value. You can get a list of the current user pool settings with .

UpdateUserPoolClientRequest
-> Request AWSAppError UpdateUserPoolClientResponse

Updates the specified user pool app client with the specified attributes. If you don't provide a value for an attribute, it will be set to the default value. You can get a list of the current user pool app client settings with .

UpdateUserPoolDomainRequest
-> Request AWSAppError UpdateUserPoolDomainResponse

Updates the Secure Sockets Layer (SSL) certificate for the custom domain for your user pool.

You can use this operation to provide the Amazon Resource Name (ARN) of a new certificate to Amazon Cognito. You cannot use it to change the domain for a user pool.

A custom domain is used to host the Amazon Cognito hosted UI, which provides sign-up and sign-in pages for your application. When you set up a custom domain, you provide a certificate that you manage with AWS Certificate Manager (ACM). When necessary, you can use this operation to change the certificate that you applied to your custom domain.

Usually, this is unnecessary following routine certificate renewal with ACM. When you renew your existing certificate in ACM, the ARN for your certificate remains the same, and your custom domain uses the new certificate automatically.

However, if you replace your existing certificate with a new one, ACM gives the new certificate a new ARN. To apply the new certificate to your custom domain, you must provide this ARN to Amazon Cognito.

When you add your new certificate in ACM, you must choose US East (N. Virginia) as the AWS Region.

After you submit your request, Amazon Cognito requires up to 1 hour to distribute your new certificate to your custom domain.

For more information about adding a custom domain to your user pool, see Using Your Own Domain for the Hosted UI.

VerifySoftwareTokenRequest
-> Request AWSAppError VerifySoftwareTokenResponse

Use this API to register a user's entered TOTP code and mark the user's software token MFA status as "verified" if successful. The request takes an access token or a session string, but not both.

verifyUserAttribute : VerifyUserAttributeRequest -> Request AWSAppError ()

Verifies the specified user attributes in the user pool.

API data model.

The AccountTakeoverActionNotifyType data model.

, notify : AccountTakeoverActionNotifyType
}

The AccountTakeoverActionType data model.

{ highAction : Maybe AccountTakeoverActionType
, lowAction : Maybe AccountTakeoverActionType
, mediumAction : Maybe AccountTakeoverActionType
}

The AccountTakeoverActionsType data model.

= AccountTakeoverEventActionTypeBlock
| AccountTakeoverEventActionTypeMfaIfConfigured
| AccountTakeoverEventActionTypeMfaRequired
| AccountTakeoverEventActionTypeNoAction

The AccountTakeoverEventActionType data model.

{ actions : AccountTakeoverActionsType
, notifyConfiguration : Maybe NotifyConfigurationType
}

The AccountTakeoverRiskConfigurationType data model.

{ customAttributes : CustomAttributesListType
, userPoolId : UserPoolIdType
}

The AddCustomAttributesRequest data model.

The AddCustomAttributesResponse data model.

{ groupName : GroupNameType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminAddUserToGroupRequest data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminConfirmSignUpRequest data model.

The AdminConfirmSignUpResponse data model.

{ allowAdminCreateUserOnly : Maybe BooleanType
, inviteMessageTemplate : Maybe MessageTemplateType
, unusedAccountValidityDays :
}

The AdminCreateUserConfigType data model.

{ desiredDeliveryMediums : Maybe DeliveryMediumListType
, forceAliasCreation : Maybe ForceAliasCreation
, messageAction : Maybe MessageActionType
, temporaryPassword : Maybe PasswordType
, userAttributes : Maybe AttributeListType
, userPoolId : UserPoolIdType
, username : UsernameType
, validationData : Maybe AttributeListType
}

The AdminCreateUserRequest data model.

{ user : Maybe UserType }

The AdminCreateUserResponse data model.

The AdminCreateUserUnusedAccountValidityDaysType data model.

{ userAttributeNames : AttributeNameListType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminDeleteUserAttributesRequest data model.

The AdminDeleteUserAttributesResponse data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminDeleteUserRequest data model.

{ user : ProviderUserIdentifierType
, userPoolId : StringType
}

The AdminDisableProviderForUserRequest data model.

The AdminDisableProviderForUserResponse data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminDisableUserRequest data model.

{}

The AdminDisableUserResponse data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminEnableUserRequest data model.

{}

The AdminEnableUserResponse data model.

{ deviceKey : DeviceKeyType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminForgetDeviceRequest data model.

{ deviceKey : DeviceKeyType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminGetDeviceRequest data model.

{ device : DeviceType }

The AdminGetDeviceResponse data model.

type alias AdminGetUserRequest =
{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminGetUserRequest data model.

{ enabled : Maybe BooleanType
, mfaoptions : Maybe MfaoptionListType
, preferredMfaSetting : Maybe StringType
, userAttributes : Maybe AttributeListType
, userCreateDate : Maybe DateType
, userLastModifiedDate : Maybe DateType
, userMfasettingList : Maybe UserMfasettingListType
, userStatus : Maybe UserStatusType
, username : UsernameType
}

The AdminGetUserResponse data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, authFlow : AuthFlowType
, authParameters : Maybe AuthParametersType
, clientId : ClientIdType
, clientMetadata : Maybe ClientMetadataType
, contextData : Maybe ContextDataType
, userPoolId : UserPoolIdType
}

The AdminInitiateAuthRequest data model.

{ authenticationResult : Maybe AuthenticationResultType
, challengeName : Maybe ChallengeNameType
, challengeParameters : Maybe ChallengeParametersType
, session : Maybe SessionType
}

The AdminInitiateAuthResponse data model.

{ destinationUser : ProviderUserIdentifierType
, sourceUser : ProviderUserIdentifierType
, userPoolId : StringType
}

The AdminLinkProviderForUserRequest data model.

The AdminLinkProviderForUserResponse data model.

{ limit : Maybe QueryLimitType
, paginationToken : Maybe SearchPaginationTokenType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminListDevicesRequest data model.

{ devices : Maybe DeviceListType
, paginationToken : Maybe SearchPaginationTokenType
}

The AdminListDevicesResponse data model.

{ limit : Maybe QueryLimitType
, nextToken : Maybe PaginationKey
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminListGroupsForUserRequest data model.

{ groups : Maybe GroupListType
, nextToken : Maybe PaginationKey
}

The AdminListGroupsForUserResponse data model.

{ maxResults : Maybe QueryLimitType
, nextToken : Maybe PaginationKey
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminListUserAuthEventsRequest data model.

{ authEvents : Maybe AuthEventsType
, nextToken : Maybe PaginationKey
}

The AdminListUserAuthEventsResponse data model.

{ groupName : GroupNameType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminRemoveUserFromGroupRequest data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminResetUserPasswordRequest data model.

The AdminResetUserPasswordResponse data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, challengeName : ChallengeNameType
, challengeResponses : Maybe ChallengeResponsesType
, clientId : ClientIdType
, contextData : Maybe ContextDataType
, session : Maybe SessionType
, userPoolId : UserPoolIdType
}

The AdminRespondToAuthChallengeRequest data model.

{ authenticationResult : Maybe AuthenticationResultType
, challengeName : Maybe ChallengeNameType
, challengeParameters : Maybe ChallengeParametersType
, session : Maybe SessionType
}

The AdminRespondToAuthChallengeResponse data model.

{ smsmfaSettings : Maybe SmsmfaSettingsType
, softwareTokenMfaSettings : Maybe SoftwareTokenMfaSettingsType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminSetUserMfapreferenceRequest data model.

The AdminSetUserMfapreferenceResponse data model.

{ password : PasswordType
, permanent : Maybe BooleanType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminSetUserPasswordRequest data model.

The AdminSetUserPasswordResponse data model.

{ mfaoptions : MfaoptionListType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminSetUserSettingsRequest data model.

The AdminSetUserSettingsResponse data model.

{ eventId : EventIdType
, feedbackValue : FeedbackValueType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminUpdateAuthEventFeedbackRequest data model.

The AdminUpdateAuthEventFeedbackResponse data model.

{ deviceKey : DeviceKeyType
, deviceRememberedStatus : Maybe DeviceRememberedStatusType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminUpdateDeviceStatusRequest data model.

The AdminUpdateDeviceStatusResponse data model.

{ userAttributes : AttributeListType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminUpdateUserAttributesRequest data model.

The AdminUpdateUserAttributesResponse data model.

{ userPoolId : UserPoolIdType
, username : UsernameType
}

The AdminUserGlobalSignOutRequest data model.

The AdminUserGlobalSignOutResponse data model.

= AdvancedSecurityModeTypeOff
| AdvancedSecurityModeTypeAudit
| AdvancedSecurityModeTypeEnforced

The AdvancedSecurityModeType data model.

= AliasAttributeTypePhoneNumber
| AliasAttributeTypeEmail
| AliasAttributeTypePreferredUsername

The AliasAttributeType data model.

The AliasAttributesListType data model.

{ applicationId : HexStringType
, externalId : StringType
, roleArn : ArnType
, userDataShared : Maybe BooleanType
}

The AnalyticsConfigurationType data model.

{ analyticsEndpointId : Maybe StringType }

The AnalyticsMetadataType data model.

type ArnType

The ArnType data model.

{ accessToken : Maybe TokenModelType
, session : Maybe SessionType
}

The AssociateSoftwareTokenRequest data model.

{ secretCode : Maybe SecretCodeType
, session : Maybe SessionType
}

The AssociateSoftwareTokenResponse data model.

= AttributeDataTypeString_
| AttributeDataTypeNumber
| AttributeDataTypeDateTime
| AttributeDataTypeBoolean

The AttributeDataType data model.

type alias AttributeListType =
List AttributeType

The AttributeListType data model.

The AttributeMappingKeyType data model.

Dict String AttributeMappingKeyType StringType

The AttributeMappingType data model.

The AttributeNameListType data model.

The AttributeNameType data model.

type alias AttributeType =
, value : Maybe AttributeValueType
}

The AttributeType data model.

The AttributeValueType data model.

type alias AuthEventType =
{ challengeResponses : Maybe ChallengeResponseListType
, creationDate : Maybe DateType
, eventContextData : Maybe EventContextDataType
, eventFeedback : Maybe EventFeedbackType
, eventId : Maybe StringType
, eventResponse : Maybe EventResponseType
, eventRisk : Maybe EventRiskType
, eventType : Maybe EventType
}

The AuthEventType data model.

type alias AuthEventsType =
List AuthEventType

The AuthEventsType data model.

= AuthFlowTypeUserSrpAuth
| AuthFlowTypeRefreshTokenAuth
| AuthFlowTypeRefreshToken
| AuthFlowTypeCustomAuth
| AuthFlowTypeAdminNoSrpAuth
| AuthFlowTypeUserPasswordAuth

The AuthFlowType data model.

type alias AuthParametersType =
Dict StringType StringType

The AuthParametersType data model.

{ accessToken : Maybe TokenModelType
, expiresIn : Maybe IntegerType
, idToken : Maybe TokenModelType
, newDeviceMetadata : Maybe NewDeviceMetadataType
, refreshToken : Maybe TokenModelType
, tokenType : Maybe StringType
}

The AuthenticationResultType data model.

type alias AwsaccountIdType =
String

The AwsaccountIdType data model.

List StringType

The BlockedIprangeListType data model.

type alias BooleanType =
Bool

The BooleanType data model.

The CallbackUrlsListType data model.

= ChallengeNamePassword
| ChallengeNameMfa

The ChallengeName data model.

= ChallengeNameTypeSmsMfa
| ChallengeNameTypeSoftwareTokenMfa
| ChallengeNameTypeSelectMfaType
| ChallengeNameTypeMfaSetup
| ChallengeNameTypePasswordVerifier
| ChallengeNameTypeCustomChallenge
| ChallengeNameTypeDeviceSrpAuth
| ChallengeNameTypeDevicePasswordVerifier
| ChallengeNameTypeAdminNoSrpAuth
| ChallengeNameTypeNewPasswordRequired

The ChallengeNameType data model.

Dict StringType StringType

The ChallengeParametersType data model.

= ChallengeResponseSuccess
| ChallengeResponseFailure

The ChallengeResponse data model.

List ChallengeResponseType

The ChallengeResponseListType data model.

{ challengeName : Maybe ChallengeName
, challengeResponse : Maybe ChallengeResponse
}

The ChallengeResponseType data model.

Dict StringType StringType

The ChallengeResponsesType data model.

{ accessToken : TokenModelType
, previousPassword : PasswordType
, proposedPassword : PasswordType
}

The ChangePasswordRequest data model.

{}

The ChangePasswordResponse data model.

The ClientIdType data model.

type alias ClientMetadataType =
Dict StringType StringType

The ClientMetadataType data model.

The ClientNameType data model.

The ClientPermissionListType data model.

The ClientPermissionType data model.

The ClientSecretType data model.

List CodeDeliveryDetailsType

The CodeDeliveryDetailsListType data model.

{ attributeName : Maybe AttributeNameType
, deliveryMedium : Maybe DeliveryMediumType
, destination : Maybe StringType
}

The CodeDeliveryDetailsType data model.

The CompletionMessageType data model.

The CompromisedCredentialsActionsType data model.

= CompromisedCredentialsEventActionTypeBlock
| CompromisedCredentialsEventActionTypeNoAction

The CompromisedCredentialsEventActionType data model.

{ actions : CompromisedCredentialsActionsType
, eventFilter : Maybe EventFiltersType
}

The CompromisedCredentialsRiskConfigurationType data model.

{ accessToken : TokenModelType
, deviceKey : DeviceKeyType
, deviceName : Maybe DeviceNameType
, deviceSecretVerifierConfig :
Maybe DeviceSecretVerifierConfigType
}

The ConfirmDeviceRequest data model.

{ userConfirmationNecessary : Maybe BooleanType }

The ConfirmDeviceResponse data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, clientId : ClientIdType
, confirmationCode : ConfirmationCodeType
, password : PasswordType
, secretHash : Maybe SecretHashType
, userContextData : Maybe UserContextDataType
, username : UsernameType
}

The ConfirmForgotPasswordRequest data model.

The ConfirmForgotPasswordResponse data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, clientId : ClientIdType
, confirmationCode : ConfirmationCodeType
, forceAliasCreation : Maybe ForceAliasCreation
, secretHash : Maybe SecretHashType
, userContextData : Maybe UserContextDataType
, username : UsernameType
}

The ConfirmSignUpRequest data model.

{}

The ConfirmSignUpResponse data model.

The ConfirmationCodeType data model.

type alias ContextDataType =
{ encodedData : Maybe StringType
, httpHeaders : HttpHeaderList
, ipAddress : StringType
, serverName : StringType
, serverPath : StringType
}

The ContextDataType data model.

type alias CreateGroupRequest =
{ description : Maybe DescriptionType
, groupName : GroupNameType
, precedence : Maybe PrecedenceType
, roleArn : Maybe ArnType
, userPoolId : UserPoolIdType
}

The CreateGroupRequest data model.

type alias CreateGroupResponse =
{ group : Maybe GroupType }

The CreateGroupResponse data model.

{ attributeMapping : Maybe AttributeMappingType
, idpIdentifiers : Maybe IdpIdentifiersListType
, providerDetails : ProviderDetailsType
, providerName : ProviderNameTypeV1
, providerType : IdentityProviderTypeType
, userPoolId : UserPoolIdType
}

The CreateIdentityProviderRequest data model.

{ identityProvider : IdentityProviderType }

The CreateIdentityProviderResponse data model.

, scopes : Maybe ResourceServerScopeListType
, userPoolId : UserPoolIdType
}

The CreateResourceServerRequest data model.

{ resourceServer : ResourceServerType }

The CreateResourceServerResponse data model.

{ cloudWatchLogsRoleArn : ArnType
, userPoolId : UserPoolIdType
}

The CreateUserImportJobRequest data model.

{ userImportJob : Maybe UserImportJobType }

The CreateUserImportJobResponse data model.

{ allowedOauthFlows : Maybe OauthFlowsType
, allowedOauthFlowsUserPoolClient : Maybe BooleanType
, allowedOauthScopes : Maybe ScopeListType
, analyticsConfiguration : Maybe AnalyticsConfigurationType
, callbackUrls : Maybe CallbackUrlsListType
, clientName : ClientNameType
, defaultRedirectUri : Maybe RedirectUrlType
, explicitAuthFlows : Maybe ExplicitAuthFlowsListType
, generateSecret : Maybe GenerateSecret
, logoutUrls : Maybe LogoutUrlsListType
, readAttributes : Maybe ClientPermissionListType
, refreshTokenValidity : Maybe RefreshTokenValidityType
, supportedIdentityProviders :
Maybe SupportedIdentityProvidersListType
, userPoolId : UserPoolIdType
, writeAttributes : Maybe ClientPermissionListType
}

The CreateUserPoolClientRequest data model.

{ userPoolClient : Maybe UserPoolClientType }

The CreateUserPoolClientResponse data model.

{ customDomainConfig : Maybe CustomDomainConfigType
, domain : DomainType
, userPoolId : UserPoolIdType
}

The CreateUserPoolDomainRequest data model.

{ cloudFrontDomain : Maybe DomainType }

The CreateUserPoolDomainResponse data model.

{ adminCreateUserConfig : Maybe AdminCreateUserConfigType
, aliasAttributes : Maybe AliasAttributesListType
, autoVerifiedAttributes : Maybe VerifiedAttributesListType
, deviceConfiguration : Maybe DeviceConfigurationType
, emailConfiguration : Maybe EmailConfigurationType
, emailVerificationMessage : Maybe EmailVerificationMessageType
, emailVerificationSubject : Maybe EmailVerificationSubjectType
, lambdaConfig : Maybe LambdaConfigType
, mfaConfiguration : Maybe UserPoolMfaType
, policies : Maybe UserPoolPolicyType
, poolName : UserPoolNameType
, schema : Maybe SchemaAttributesListType
, smsAuthenticationMessage : Maybe SmsVerificationMessageType
, smsConfiguration : Maybe SmsConfigurationType
, smsVerificationMessage : Maybe SmsVerificationMessageType
, userPoolAddOns : Maybe UserPoolAddOnsType
, userPoolTags : Maybe UserPoolTagsType
, usernameAttributes : Maybe UsernameAttributesListType
, verificationMessageTemplate :
Maybe VerificationMessageTemplateType
}

The CreateUserPoolRequest data model.

{ userPool : Maybe UserPoolType }

The CreateUserPoolResponse data model.

type alias Csstype =
String

The Csstype data model.

type alias CssversionType =
String

The CssversionType data model.

The CustomAttributeNameType data model.

List SchemaAttributeType

The CustomAttributesListType data model.

{ certificateArn : ArnType }

The CustomDomainConfigType data model.

type alias DateType =
String

The DateType data model.

= DefaultEmailOptionTypeConfirmWithLink
| DefaultEmailOptionTypeConfirmWithCode

The DefaultEmailOptionType data model.

type alias DeleteGroupRequest =
{ groupName : GroupNameType
, userPoolId : UserPoolIdType
}

The DeleteGroupRequest data model.

{ providerName : ProviderNameType
, userPoolId : UserPoolIdType
}

The DeleteIdentityProviderRequest data model.

, userPoolId : UserPoolIdType
}

The DeleteResourceServerRequest data model.

{ accessToken : TokenModelType
, userAttributeNames : AttributeNameListType
}

The DeleteUserAttributesRequest data model.

The DeleteUserAttributesResponse data model.

{ clientId : ClientIdType
, userPoolId : UserPoolIdType
}

The DeleteUserPoolClientRequest data model.

{ domain : DomainType
, userPoolId : UserPoolIdType
}

The DeleteUserPoolDomainRequest data model.

The DeleteUserPoolDomainResponse data model.

{ userPoolId : UserPoolIdType }

The DeleteUserPoolRequest data model.

type alias DeleteUserRequest =
{ accessToken : TokenModelType }

The DeleteUserRequest data model.

The DeliveryMediumListType data model.

= DeliveryMediumTypeSms
| DeliveryMediumTypeEmail

The DeliveryMediumType data model.

{ providerName : ProviderNameType
, userPoolId : UserPoolIdType
}

The DescribeIdentityProviderRequest data model.

{ identityProvider : IdentityProviderType }

The DescribeIdentityProviderResponse data model.

The DescribeResourceServerRequest data model.

{ resourceServer : ResourceServerType }

The DescribeResourceServerResponse data model.

{ clientId : Maybe ClientIdType
, userPoolId : UserPoolIdType
}

The DescribeRiskConfigurationRequest data model.

{ riskConfiguration : RiskConfigurationType }

The DescribeRiskConfigurationResponse data model.

, userPoolId : UserPoolIdType
}

The DescribeUserImportJobRequest data model.

{ userImportJob : Maybe UserImportJobType }

The DescribeUserImportJobResponse data model.

{ clientId : ClientIdType
, userPoolId : UserPoolIdType
}

The DescribeUserPoolClientRequest data model.

{ userPoolClient : Maybe UserPoolClientType }

The DescribeUserPoolClientResponse data model.

{ domain : DomainType }

The DescribeUserPoolDomainRequest data model.

{ domainDescription : Maybe DomainDescriptionType }

The DescribeUserPoolDomainResponse data model.

{ userPoolId : UserPoolIdType }

The DescribeUserPoolRequest data model.

{ userPool : Maybe UserPoolType }

The DescribeUserPoolResponse data model.

The DescriptionType data model.

{ challengeRequiredOnNewDevice : Maybe BooleanType
, deviceOnlyRememberedOnUserPrompt : Maybe BooleanType
}

The DeviceConfigurationType data model.

The DeviceKeyType data model.

type alias DeviceListType =
List DeviceType

The DeviceListType data model.

The DeviceNameType data model.

= DeviceRememberedStatusTypeRemembered
| DeviceRememberedStatusTypeNotRemembered

The DeviceRememberedStatusType data model.

{ passwordVerifier : Maybe StringType
, salt : Maybe StringType
}

The DeviceSecretVerifierConfigType data model.

type alias DeviceType =
{ deviceAttributes : Maybe AttributeListType
, deviceCreateDate : Maybe DateType
, deviceKey : Maybe DeviceKeyType
, deviceLastAuthenticatedDate : Maybe DateType
, deviceLastModifiedDate : Maybe DateType
}

The DeviceType data model.

{ awsaccountId : Maybe AwsaccountIdType
, cloudFrontDistribution : Maybe StringType
, customDomainConfig : Maybe CustomDomainConfigType
, domain : Maybe DomainType
, s3Bucket : Maybe S3BucketType
, status : Maybe DomainStatusType
, userPoolId : Maybe UserPoolIdType
, version : Maybe DomainVersionType
}

The DomainDescriptionType data model.

= DomainStatusTypeCreating
| DomainStatusTypeDeleting
| DomainStatusTypeUpdating
| DomainStatusTypeActive
| DomainStatusTypeFailed

The DomainStatusType data model.

The DomainType data model.

The DomainVersionType data model.

The EmailAddressType data model.

{ emailSendingAccount : Maybe EmailSendingAccountType
, replyToEmailAddress : Maybe EmailAddressType
, sourceArn : Maybe ArnType
}

The EmailConfigurationType data model.

The EmailNotificationBodyType data model.

The EmailNotificationSubjectType data model.

= EmailSendingAccountTypeCognitoDefault
| EmailSendingAccountTypeDeveloper

The EmailSendingAccountType data model.

The EmailVerificationMessageByLinkType data model.

The EmailVerificationMessageType data model.

The EmailVerificationSubjectByLinkType data model.

The EmailVerificationSubjectType data model.

{ city : Maybe StringType
, country : Maybe StringType
, deviceName : Maybe StringType
, ipAddress : Maybe StringType
, timezone : Maybe StringType
}

The EventContextDataType data model.

type alias EventFeedbackType =
{ feedbackDate : Maybe DateType
, feedbackValue : FeedbackValueType
, provider : StringType
}

The EventFeedbackType data model.

= EventFilterTypeSignIn
| EventFilterTypePasswordChange
| EventFilterTypeSignUp

The EventFilterType data model.

The EventFiltersType data model.

The EventIdType data model.

= EventResponseTypeSuccess
| EventResponseTypeFailure

The EventResponseType data model.

type alias EventRiskType =
{ riskDecision : Maybe RiskDecisionType
, riskLevel : Maybe RiskLevelType
}

The EventRiskType data model.

= EventTypeSignIn
| EventTypeSignUp
| EventTypeForgotPassword

The EventType data model.

The ExplicitAuthFlowsListType data model.

= ExplicitAuthFlowsTypeAdminNoSrpAuth
| ExplicitAuthFlowsTypeCustomAuthFlowOnly
| ExplicitAuthFlowsTypeUserPasswordAuth

The ExplicitAuthFlowsType data model.

= FeedbackValueTypeValid
| FeedbackValueTypeInvalid

The FeedbackValueType data model.

type alias ForceAliasCreation =
Bool

The ForceAliasCreation data model.

type alias ForgetDeviceRequest =
{ accessToken : Maybe TokenModelType
, deviceKey : DeviceKeyType
}

The ForgetDeviceRequest data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, clientId : ClientIdType
, secretHash : Maybe SecretHashType
, userContextData : Maybe UserContextDataType
, username : UsernameType
}

The ForgotPasswordRequest data model.

{ codeDeliveryDetails : Maybe CodeDeliveryDetailsType }

The ForgotPasswordResponse data model.

type alias GenerateSecret =
Bool

The GenerateSecret data model.

type alias GetCsvheaderRequest =
{ userPoolId : UserPoolIdType }

The GetCsvheaderRequest data model.

{ csvheader : Maybe ListOfStringTypes
, userPoolId : Maybe UserPoolIdType
}

The GetCsvheaderResponse data model.

type alias GetDeviceRequest =
{ accessToken : Maybe TokenModelType
, deviceKey : DeviceKeyType
}

The GetDeviceRequest data model.

type alias GetDeviceResponse =
{ device : DeviceType }

The GetDeviceResponse data model.

type alias GetGroupRequest =
{ groupName : GroupNameType
, userPoolId : UserPoolIdType
}

The GetGroupRequest data model.

type alias GetGroupResponse =
{ group : Maybe GroupType }

The GetGroupResponse data model.

{ idpIdentifier : IdpIdentifierType
, userPoolId : UserPoolIdType
}

The GetIdentityProviderByIdentifierRequest data model.

{ identityProvider : IdentityProviderType }

The GetIdentityProviderByIdentifierResponse data model.

{ userPoolId : UserPoolIdType }

The GetSigningCertificateRequest data model.

{ certificate : Maybe StringType }

The GetSigningCertificateResponse data model.

{ clientId : Maybe ClientIdType
, userPoolId : UserPoolIdType
}

The GetUicustomizationRequest data model.

{ uicustomization : UicustomizationType }

The GetUicustomizationResponse data model.

{ accessToken : TokenModelType
, attributeName : AttributeNameType
}

The GetUserAttributeVerificationCodeRequest data model.

{ codeDeliveryDetails : Maybe CodeDeliveryDetailsType }

The GetUserAttributeVerificationCodeResponse data model.

{ userPoolId : UserPoolIdType }

The GetUserPoolMfaConfigRequest data model.

{ mfaConfiguration : Maybe UserPoolMfaType
, smsMfaConfiguration : Maybe SmsMfaConfigType
, softwareTokenMfaConfiguration :
Maybe SoftwareTokenMfaConfigType
}

The GetUserPoolMfaConfigResponse data model.

type alias GetUserRequest =
{ accessToken : TokenModelType }

The GetUserRequest data model.

type alias GetUserResponse =
{ mfaoptions : Maybe MfaoptionListType
, preferredMfaSetting : Maybe StringType
, userAttributes : AttributeListType
, userMfasettingList : Maybe UserMfasettingListType
, username : UsernameType
}

The GetUserResponse data model.

{ accessToken : TokenModelType }

The GlobalSignOutRequest data model.

{}

The GlobalSignOutResponse data model.

type alias GroupListType =
List GroupType

The GroupListType data model.

The GroupNameType data model.

type alias GroupType =
{ creationDate : Maybe DateType
, description : Maybe DescriptionType
, groupName : Maybe GroupNameType
, lastModifiedDate : Maybe DateType
, precedence : Maybe PrecedenceType
, roleArn : Maybe ArnType
, userPoolId : Maybe UserPoolIdType
}

The GroupType data model.

The HexStringType data model.

type alias HttpHeader =
{ headerName : Maybe StringType
, headerValue : Maybe StringType
}

The HttpHeader data model.

type alias HttpHeaderList =
List HttpHeader

The HttpHeaderList data model.

{ attributeMapping : Maybe AttributeMappingType
, creationDate : Maybe DateType
, idpIdentifiers : Maybe IdpIdentifiersListType
, lastModifiedDate : Maybe DateType
, providerDetails : Maybe ProviderDetailsType
, providerName : Maybe ProviderNameType
, providerType : Maybe IdentityProviderTypeType
, userPoolId : Maybe UserPoolIdType
}

The IdentityProviderType data model.

= IdentityProviderTypeTypeSaml
| IdentityProviderTypeTypeFacebook
| IdentityProviderTypeTypeGoogle
| IdentityProviderTypeTypeLoginWithAmazon
| IdentityProviderTypeTypeOidc

The IdentityProviderTypeType data model.

The IdpIdentifierType data model.

The IdpIdentifiersListType data model.

type alias ImageFileType =
String

The ImageFileType data model.

type alias ImageUrlType =
String

The ImageUrlType data model.

type alias InitiateAuthRequest =
{ analyticsMetadata : Maybe AnalyticsMetadataType
, authFlow : AuthFlowType
, authParameters : Maybe AuthParametersType
, clientId : ClientIdType
, clientMetadata : Maybe ClientMetadataType
, userContextData : Maybe UserContextDataType
}

The InitiateAuthRequest data model.

{ authenticationResult : Maybe AuthenticationResultType
, challengeName : Maybe ChallengeNameType
, challengeParameters : Maybe ChallengeParametersType
, session : Maybe SessionType
}

The InitiateAuthResponse data model.

type alias IntegerType =
Int

The IntegerType data model.

type alias LambdaConfigType =
{ createAuthChallenge : Maybe ArnType
, customMessage : Maybe ArnType
, defineAuthChallenge : Maybe ArnType
, postAuthentication : Maybe ArnType
, postConfirmation : Maybe ArnType
, preAuthentication : Maybe ArnType
, preSignUp : Maybe ArnType
, preTokenGeneration : Maybe ArnType
, userMigration : Maybe ArnType
, verifyAuthChallengeResponse : Maybe ArnType
}

The LambdaConfigType data model.

type alias ListDevicesRequest =
{ accessToken : TokenModelType
, limit : Maybe QueryLimitType
, paginationToken : Maybe SearchPaginationTokenType
}

The ListDevicesRequest data model.

type alias ListDevicesResponse =
{ devices : Maybe DeviceListType
, paginationToken : Maybe SearchPaginationTokenType
}

The ListDevicesResponse data model.

type alias ListGroupsRequest =
{ limit : Maybe QueryLimitType
, nextToken : Maybe PaginationKey
, userPoolId : UserPoolIdType
}

The ListGroupsRequest data model.

type alias ListGroupsResponse =
{ groups : Maybe GroupListType
, nextToken : Maybe PaginationKey
}

The ListGroupsResponse data model.

{ maxResults : Maybe ListProvidersLimitType
, nextToken : Maybe PaginationKeyType
, userPoolId : UserPoolIdType
}

The ListIdentityProvidersRequest data model.

{ nextToken : Maybe PaginationKeyType
, providers : ProvidersListType
}

The ListIdentityProvidersResponse data model.

type alias ListOfStringTypes =
List StringType

The ListOfStringTypes data model.

The ListProvidersLimitType data model.

The ListResourceServersLimitType data model.

{ maxResults : Maybe ListResourceServersLimitType
, nextToken : Maybe PaginationKeyType
, userPoolId : UserPoolIdType
}

The ListResourceServersRequest data model.

{ nextToken : Maybe PaginationKeyType
, resourceServers : ResourceServersListType
}

The ListResourceServersResponse data model.

{ resourceArn : ArnType }

The ListTagsForResourceRequest data model.

{ tags : Maybe UserPoolTagsType }

The ListTagsForResourceResponse data model.

{ maxResults : PoolQueryLimitType
, paginationToken : Maybe PaginationKeyType
, userPoolId : UserPoolIdType
}

The ListUserImportJobsRequest data model.

{ paginationToken : Maybe PaginationKeyType
, userImportJobs : Maybe UserImportJobsListType
}

The ListUserImportJobsResponse data model.

{ maxResults : Maybe QueryLimit
, nextToken : Maybe PaginationKey
, userPoolId : UserPoolIdType
}

The ListUserPoolClientsRequest data model.

{ nextToken : Maybe PaginationKey
, userPoolClients : Maybe UserPoolClientListType
}

The ListUserPoolClientsResponse data model.

{ maxResults : PoolQueryLimitType
, nextToken : Maybe PaginationKeyType
}

The ListUserPoolsRequest data model.

{ nextToken : Maybe PaginationKeyType
, userPools : Maybe UserPoolListType
}

The ListUserPoolsResponse data model.

{ groupName : GroupNameType
, limit : Maybe QueryLimitType
, nextToken : Maybe PaginationKey
, userPoolId : UserPoolIdType
}

The ListUsersInGroupRequest data model.

{ nextToken : Maybe PaginationKey
, users : Maybe UsersListType
}

The ListUsersInGroupResponse data model.

type alias ListUsersRequest =
{ attributesToGet : Maybe SearchedAttributeNamesListType
, filter : Maybe UserFilterType
, limit : Maybe QueryLimitType
, paginationToken : Maybe SearchPaginationTokenType
, userPoolId : UserPoolIdType
}

The ListUsersRequest data model.

type alias ListUsersResponse =
{ paginationToken : Maybe SearchPaginationTokenType
, users : Maybe UsersListType
}

The ListUsersResponse data model.

The LogoutUrlsListType data model.

type alias LongType =
Int

The LongType data model.

= MessageActionTypeResend
| MessageActionTypeSuppress

The MessageActionType data model.

type alias MessageTemplateType =
{ emailMessage : Maybe EmailVerificationMessageType
, emailSubject : Maybe EmailVerificationSubjectType
, smsmessage : Maybe SmsVerificationMessageType
}

The MessageTemplateType data model.

type alias MfaoptionListType =
List MfaoptionType

The MfaoptionListType data model.

type alias MfaoptionType =
{ attributeName : Maybe AttributeNameType
, deliveryMedium : Maybe DeliveryMediumType
}

The MfaoptionType data model.

{ deviceGroupKey : Maybe StringType
, deviceKey : Maybe DeviceKeyType
}

The NewDeviceMetadataType data model.

{ blockEmail : Maybe NotifyEmailType
, from : Maybe StringType
, mfaEmail : Maybe NotifyEmailType
, noActionEmail : Maybe NotifyEmailType
, replyTo : Maybe StringType
, sourceArn : ArnType
}

The NotifyConfigurationType data model.

type alias NotifyEmailType =
{ htmlBody : Maybe EmailNotificationBodyType
, textBody : Maybe EmailNotificationBodyType
}

The NotifyEmailType data model.

{ maxValue : Maybe StringType
, minValue : Maybe StringType
}

The NumberAttributeConstraintsType data model.

= OauthFlowTypeCode
| OauthFlowTypeImplicit
| OauthFlowTypeClientCredentials

The OauthFlowType data model.

type alias OauthFlowsType =

The OauthFlowsType data model.

The PaginationKey data model.

The PaginationKeyType data model.

The PasswordPolicyMinLengthType data model.

type alias PasswordPolicyType =
{ minimumLength : Maybe PasswordPolicyMinLengthType
, requireLowercase : Maybe BooleanType
, requireNumbers : Maybe BooleanType
, requireSymbols : Maybe BooleanType
, requireUppercase : Maybe BooleanType
, temporaryPasswordValidityDays :
}

The PasswordPolicyType data model.

The PasswordType data model.

The PoolQueryLimitType data model.

The PreSignedUrlType data model.

The PrecedenceType data model.

type alias ProviderDescription =
{ creationDate : Maybe DateType
, lastModifiedDate : Maybe DateType
, providerName : Maybe ProviderNameType
, providerType : Maybe IdentityProviderTypeType
}

The ProviderDescription data model.

type alias ProviderDetailsType =
Dict StringType StringType

The ProviderDetailsType data model.

The ProviderNameType data model.

The ProviderNameTypeV1 data model.

{ providerAttributeName : Maybe StringType
, providerAttributeValue : Maybe StringType
, providerName : Maybe ProviderNameType
}

The ProviderUserIdentifierType data model.

type alias ProvidersListType =
List ProviderDescription

The ProvidersListType data model.

The QueryLimit data model.

The QueryLimitType data model.

The RedirectUrlType data model.

The RefreshTokenValidityType data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, clientId : ClientIdType
, secretHash : Maybe SecretHashType
, userContextData : Maybe UserContextDataType
, username : UsernameType
}

The ResendConfirmationCodeRequest data model.

{ codeDeliveryDetails : Maybe CodeDeliveryDetailsType }

The ResendConfirmationCodeResponse data model.

The ResourceServerIdentifierType data model.

The ResourceServerNameType data model.

The ResourceServerScopeDescriptionType data model.

List ResourceServerScopeType

The ResourceServerScopeListType data model.

The ResourceServerScopeNameType data model.

The ResourceServerScopeType data model.

type alias ResourceServerType =
{ identifier : Maybe ResourceServerIdentifierType
, name : Maybe ResourceServerNameType
, scopes : Maybe ResourceServerScopeListType
, userPoolId : Maybe UserPoolIdType
}

The ResourceServerType data model.

List ResourceServerType

The ResourceServersListType data model.

{ analyticsMetadata : Maybe AnalyticsMetadataType
, challengeName : ChallengeNameType
, challengeResponses : Maybe ChallengeResponsesType
, clientId : ClientIdType
, session : Maybe SessionType
, userContextData : Maybe UserContextDataType
}

The RespondToAuthChallengeRequest data model.

{ authenticationResult : Maybe AuthenticationResultType
, challengeName : Maybe ChallengeNameType
, challengeParameters : Maybe ChallengeParametersType
, session : Maybe SessionType
}

The RespondToAuthChallengeResponse data model.

{ accountTakeoverRiskConfiguration :
Maybe AccountTakeoverRiskConfigurationType
, clientId : Maybe ClientIdType
, compromisedCredentialsRiskConfiguration :
Maybe CompromisedCredentialsRiskConfigurationType
, lastModifiedDate : Maybe DateType
, riskExceptionConfiguration :
Maybe RiskExceptionConfigurationType
, userPoolId : Maybe UserPoolIdType
}

The RiskConfigurationType data model.

= RiskDecisionTypeNoRisk
| RiskDecisionTypeAccountTakeover
| RiskDecisionTypeBlock

The RiskDecisionType data model.

{ blockedIprangeList : Maybe BlockedIprangeListType
, skippedIprangeList : Maybe SkippedIprangeListType
}

The RiskExceptionConfigurationType data model.

= RiskLevelTypeLow
| RiskLevelTypeMedium
| RiskLevelTypeHigh

The RiskLevelType data model.

The S3BucketType data model.

type alias SchemaAttributeType =
{ attributeDataType : Maybe AttributeDataType
, developerOnlyAttribute : Maybe BooleanType
, mutable : Maybe BooleanType
, name : Maybe CustomAttributeNameType
, numberAttributeConstraints :
Maybe NumberAttributeConstraintsType
, required : Maybe BooleanType
, stringAttributeConstraints :
Maybe StringAttributeConstraintsType
}

The SchemaAttributeType data model.

List SchemaAttributeType

The SchemaAttributesListType data model.

type alias ScopeListType =
List ScopeType

The ScopeListType data model.

The ScopeType data model.

The SearchPaginationTokenType data model.

The SearchedAttributeNamesListType data model.

The SecretCodeType data model.

The SecretHashType data model.

The SessionType data model.

{ accountTakeoverRiskConfiguration :
Maybe AccountTakeoverRiskConfigurationType
, clientId : Maybe ClientIdType
, compromisedCredentialsRiskConfiguration :
Maybe CompromisedCredentialsRiskConfigurationType
, riskExceptionConfiguration :
Maybe RiskExceptionConfigurationType
, userPoolId : UserPoolIdType
}

The SetRiskConfigurationRequest data model.

{ riskConfiguration : RiskConfigurationType }

The SetRiskConfigurationResponse data model.

{ css : Maybe Csstype
, clientId : Maybe ClientIdType
, imageFile : Maybe ImageFileType
, userPoolId : UserPoolIdType
}

The SetUicustomizationRequest data model.

{ uicustomization : UicustomizationType }

The SetUicustomizationResponse data model.

{ accessToken : TokenModelType
, smsmfaSettings : Maybe SmsmfaSettingsType
, softwareTokenMfaSettings : Maybe SoftwareTokenMfaSettingsType
}

The SetUserMfapreferenceRequest data model.

The SetUserMfapreferenceResponse data model.

{ mfaConfiguration : Maybe UserPoolMfaType
, smsMfaConfiguration : Maybe SmsMfaConfigType
, softwareTokenMfaConfiguration :
Maybe SoftwareTokenMfaConfigType
, userPoolId : UserPoolIdType
}

The SetUserPoolMfaConfigRequest data model.

{ mfaConfiguration : Maybe UserPoolMfaType
, smsMfaConfiguration : Maybe SmsMfaConfigType
, softwareTokenMfaConfiguration :
Maybe SoftwareTokenMfaConfigType
}

The SetUserPoolMfaConfigResponse data model.

{ accessToken : TokenModelType
, mfaoptions : MfaoptionListType
}

The SetUserSettingsRequest data model.

{}

The SetUserSettingsResponse data model.

type alias SignUpRequest =
{ analyticsMetadata : Maybe AnalyticsMetadataType
, clientId : ClientIdType
, password : PasswordType
, secretHash : Maybe SecretHashType
, userAttributes : Maybe AttributeListType
, userContextData : Maybe UserContextDataType
, username : UsernameType
, validationData : Maybe AttributeListType
}

The SignUpRequest data model.

type alias SignUpResponse =
{ codeDeliveryDetails : Maybe CodeDeliveryDetailsType
, userConfirmed : BooleanType
, userSub : StringType
}

The SignUpResponse data model.

List StringType

The SkippedIprangeListType data model.

{ externalId : Maybe StringType
, snsCallerArn : ArnType
}

The SmsConfigurationType data model.

type alias SmsMfaConfigType =
{ smsAuthenticationMessage : Maybe SmsVerificationMessageType
, smsConfiguration : Maybe SmsConfigurationType
}

The SmsMfaConfigType data model.

The SmsVerificationMessageType data model.

type alias SmsmfaSettingsType =
{ enabled : Maybe BooleanType
, preferredMfa : Maybe BooleanType
}

The SmsmfaSettingsType data model.

{ enabled : Maybe BooleanType }

The SoftwareTokenMfaConfigType data model.

{ enabled : Maybe BooleanType
, preferredMfa : Maybe BooleanType
}

The SoftwareTokenMfaSettingsType data model.

The SoftwareTokenMfauserCodeType data model.

, userPoolId : UserPoolIdType
}

The StartUserImportJobRequest data model.

{ userImportJob : Maybe UserImportJobType }

The StartUserImportJobResponse data model.

= StatusTypeEnabled
| StatusTypeDisabled

The StatusType data model.

, userPoolId : UserPoolIdType
}

The StopUserImportJobRequest data model.

{ userImportJob : Maybe UserImportJobType }

The StopUserImportJobResponse data model.

{ maxLength : Maybe StringType
, minLength : Maybe StringType
}

The StringAttributeConstraintsType data model.

type alias StringType =
String

The StringType data model.

The SupportedIdentityProvidersListType data model.

The TagKeysType data model.

type alias TagResourceRequest =
{ resourceArn : ArnType
, tags : Maybe UserPoolTagsType
}

The TagResourceRequest data model.

type alias TagResourceResponse =
{}

The TagResourceResponse data model.

The TagValueType data model.

The TemporaryPasswordValidityDaysType data model.

The TokenModelType data model.

type alias UicustomizationType =
{ css : Maybe Csstype
, cssversion : Maybe CssversionType
, clientId : Maybe ClientIdType
, creationDate : Maybe DateType
, imageUrl : Maybe ImageUrlType
, lastModifiedDate : Maybe DateType
, userPoolId : Maybe UserPoolIdType
}

The UicustomizationType data model.

{ resourceArn : ArnType
, tagKeys : Maybe UserPoolTagsListType
}

The UntagResourceRequest data model.

{}

The UntagResourceResponse data model.

{ eventId : EventIdType
, feedbackToken : TokenModelType
, feedbackValue : FeedbackValueType
, userPoolId : UserPoolIdType
, username : UsernameType
}

The UpdateAuthEventFeedbackRequest data model.

The UpdateAuthEventFeedbackResponse data model.

{ accessToken : TokenModelType
, deviceKey : DeviceKeyType
, deviceRememberedStatus : Maybe DeviceRememberedStatusType
}

The UpdateDeviceStatusRequest data model.

The UpdateDeviceStatusResponse data model.

type alias UpdateGroupRequest =
{ description : Maybe DescriptionType
, groupName : GroupNameType
, precedence : Maybe PrecedenceType
, roleArn : Maybe ArnType
, userPoolId : UserPoolIdType
}

The UpdateGroupRequest data model.

type alias UpdateGroupResponse =
{ group : Maybe GroupType }

The UpdateGroupResponse data model.

{ attributeMapping : Maybe AttributeMappingType
, idpIdentifiers : Maybe IdpIdentifiersListType
, providerDetails : Maybe ProviderDetailsType
, providerName : ProviderNameType
, userPoolId : UserPoolIdType
}

The UpdateIdentityProviderRequest data model.

{ identityProvider : IdentityProviderType }

The UpdateIdentityProviderResponse data model.

, scopes : Maybe ResourceServerScopeListType
, userPoolId : UserPoolIdType
}

The UpdateResourceServerRequest data model.

{ resourceServer : ResourceServerType }

The UpdateResourceServerResponse data model.

{ accessToken : TokenModelType
, userAttributes : AttributeListType
}

The UpdateUserAttributesRequest data model.

{ codeDeliveryDetailsList : Maybe CodeDeliveryDetailsListType }

The UpdateUserAttributesResponse data model.

{ allowedOauthFlows : Maybe OauthFlowsType
, allowedOauthFlowsUserPoolClient : Maybe BooleanType
, allowedOauthScopes : Maybe ScopeListType
, analyticsConfiguration : Maybe AnalyticsConfigurationType
, callbackUrls : Maybe CallbackUrlsListType
, clientId : ClientIdType
, clientName : Maybe ClientNameType
, defaultRedirectUri : Maybe RedirectUrlType
, explicitAuthFlows : Maybe ExplicitAuthFlowsListType
, logoutUrls : Maybe LogoutUrlsListType
, readAttributes : Maybe ClientPermissionListType
, refreshTokenValidity : Maybe RefreshTokenValidityType
, supportedIdentityProviders :
Maybe SupportedIdentityProvidersListType
, userPoolId : UserPoolIdType
, writeAttributes : Maybe ClientPermissionListType
}

The UpdateUserPoolClientRequest data model.

{ userPoolClient : Maybe UserPoolClientType }

The UpdateUserPoolClientResponse data model.

{ customDomainConfig : CustomDomainConfigType
, domain : DomainType
, userPoolId : UserPoolIdType
}

The UpdateUserPoolDomainRequest data model.

{ cloudFrontDomain : Maybe DomainType }

The UpdateUserPoolDomainResponse data model.

{ adminCreateUserConfig : Maybe AdminCreateUserConfigType
, autoVerifiedAttributes : Maybe VerifiedAttributesListType
, deviceConfiguration : Maybe DeviceConfigurationType
, emailConfiguration : Maybe EmailConfigurationType
, emailVerificationMessage : Maybe EmailVerificationMessageType
, emailVerificationSubject : Maybe EmailVerificationSubjectType
, lambdaConfig : Maybe LambdaConfigType
, mfaConfiguration : Maybe UserPoolMfaType
, policies : Maybe UserPoolPolicyType
, smsAuthenticationMessage : Maybe SmsVerificationMessageType
, smsConfiguration : Maybe SmsConfigurationType
, smsVerificationMessage : Maybe SmsVerificationMessageType
, userPoolAddOns : Maybe UserPoolAddOnsType
, userPoolId : UserPoolIdType
, userPoolTags : Maybe UserPoolTagsType
, verificationMessageTemplate :
Maybe VerificationMessageTemplateType
}

The UpdateUserPoolRequest data model.

{}

The UpdateUserPoolResponse data model.

type alias UserContextDataType =
{ encodedData : Maybe StringType }

The UserContextDataType data model.

The UserFilterType data model.

The UserImportJobIdType data model.

The UserImportJobNameType data model.

= UserImportJobStatusTypeCreated
| UserImportJobStatusTypePending
| UserImportJobStatusTypeInProgress
| UserImportJobStatusTypeStopping
| UserImportJobStatusTypeExpired
| UserImportJobStatusTypeStopped
| UserImportJobStatusTypeFailed
| UserImportJobStatusTypeSucceeded

The UserImportJobStatusType data model.

type alias UserImportJobType =
{ cloudWatchLogsRoleArn : Maybe ArnType
, completionDate : Maybe DateType
, completionMessage : Maybe CompletionMessageType
, creationDate : Maybe DateType
, failedUsers : Maybe LongType
, importedUsers : Maybe LongType
, jobId : Maybe UserImportJobIdType
, jobName : Maybe UserImportJobNameType
, preSignedUrl : Maybe PreSignedUrlType
, skippedUsers : Maybe LongType
, startDate : Maybe DateType
, status : Maybe UserImportJobStatusType
, userPoolId : Maybe UserPoolIdType
}

The UserImportJobType data model.

List UserImportJobType

The UserImportJobsListType data model.

List StringType

The UserMfasettingListType data model.

type alias UserPoolAddOnsType =
{ advancedSecurityMode : AdvancedSecurityModeType }

The UserPoolAddOnsType data model.

{ clientId : Maybe ClientIdType
, clientName : Maybe ClientNameType
, userPoolId : Maybe UserPoolIdType
}

The UserPoolClientDescription data model.

List UserPoolClientDescription

The UserPoolClientListType data model.

type alias UserPoolClientType =
{ allowedOauthFlows : Maybe OauthFlowsType
, allowedOauthFlowsUserPoolClient : Maybe BooleanType
, allowedOauthScopes : Maybe ScopeListType
, analyticsConfiguration : Maybe AnalyticsConfigurationType
, callbackUrls : Maybe CallbackUrlsListType
, clientId : Maybe ClientIdType
, clientName : Maybe ClientNameType
, clientSecret : Maybe ClientSecretType
, creationDate : Maybe DateType
, defaultRedirectUri : Maybe RedirectUrlType
, explicitAuthFlows : Maybe ExplicitAuthFlowsListType
, lastModifiedDate : Maybe DateType
, logoutUrls : Maybe LogoutUrlsListType
, readAttributes : Maybe ClientPermissionListType
, refreshTokenValidity : Maybe RefreshTokenValidityType
, supportedIdentityProviders :
Maybe SupportedIdentityProvidersListType
, userPoolId : Maybe UserPoolIdType
, writeAttributes : Maybe ClientPermissionListType
}

The UserPoolClientType data model.

{ creationDate : Maybe DateType
, id : Maybe UserPoolIdType
, lambdaConfig : Maybe LambdaConfigType
, lastModifiedDate : Maybe DateType
, name : Maybe UserPoolNameType
, status : Maybe StatusType
}

The UserPoolDescriptionType data model.

The UserPoolIdType data model.

type alias UserPoolListType =
List UserPoolDescriptionType

The UserPoolListType data model.

= UserPoolMfaTypeOff
| UserPoolMfaTypeOn
| UserPoolMfaTypeOptional

The UserPoolMfaType data model.

The UserPoolNameType data model.

type alias UserPoolPolicyType =
{ passwordPolicy : Maybe PasswordPolicyType }

The UserPoolPolicyType data model.

The UserPoolTagsListType data model.

type alias UserPoolTagsType =

The UserPoolTagsType data model.

type alias UserPoolType =
{ adminCreateUserConfig : Maybe AdminCreateUserConfigType
, aliasAttributes : Maybe AliasAttributesListType
, arn : Maybe ArnType
, autoVerifiedAttributes : Maybe VerifiedAttributesListType
, creationDate : Maybe DateType
, customDomain : Maybe DomainType
, deviceConfiguration : Maybe DeviceConfigurationType
, domain : Maybe DomainType
, emailConfiguration : Maybe EmailConfigurationType
, emailConfigurationFailure : Maybe StringType
, emailVerificationMessage : Maybe EmailVerificationMessageType
, emailVerificationSubject : Maybe EmailVerificationSubjectType
, estimatedNumberOfUsers : Maybe IntegerType
, id : Maybe UserPoolIdType
, lambdaConfig : Maybe LambdaConfigType
, lastModifiedDate : Maybe DateType
, mfaConfiguration : Maybe UserPoolMfaType
, name : Maybe UserPoolNameType
, policies : Maybe UserPoolPolicyType
, schemaAttributes : Maybe SchemaAttributesListType
, smsAuthenticationMessage : Maybe SmsVerificationMessageType
, smsConfiguration : Maybe SmsConfigurationType
, smsConfigurationFailure : Maybe StringType
, smsVerificationMessage : Maybe SmsVerificationMessageType
, status : Maybe StatusType
, userPoolAddOns : Maybe UserPoolAddOnsType
, userPoolTags : Maybe UserPoolTagsType
, usernameAttributes : Maybe UsernameAttributesListType
, verificationMessageTemplate :
Maybe VerificationMessageTemplateType
}

The UserPoolType data model.

= UserStatusTypeUnconfirmed
| UserStatusTypeConfirmed
| UserStatusTypeArchived
| UserStatusTypeCompromised
| UserStatusTypeUnknown
| UserStatusTypeResetRequired
| UserStatusTypeForceChangePassword

The UserStatusType data model.

type alias UserType =
{ attributes : Maybe AttributeListType
, enabled : Maybe BooleanType
, mfaoptions : Maybe MfaoptionListType
, userCreateDate : Maybe DateType
, userLastModifiedDate : Maybe DateType
, userStatus : Maybe UserStatusType
, username : Maybe UsernameType
}

The UserType data model.

= UsernameAttributeTypePhoneNumber
| UsernameAttributeTypeEmail

The UsernameAttributeType data model.

The UsernameAttributesListType data model.

The UsernameType data model.

type alias UsersListType =
List UserType

The UsersListType data model.

{ defaultEmailOption : Maybe DefaultEmailOptionType
, emailMessage : Maybe EmailVerificationMessageType
, emailMessageByLink : Maybe EmailVerificationMessageByLinkType
, emailSubject : Maybe EmailVerificationSubjectType
, emailSubjectByLink : Maybe EmailVerificationSubjectByLinkType
, smsMessage : Maybe SmsVerificationMessageType
}

The VerificationMessageTemplateType data model.

= VerifiedAttributeTypePhoneNumber
| VerifiedAttributeTypeEmail

The VerifiedAttributeType data model.

The VerifiedAttributesListType data model.

{ accessToken : Maybe TokenModelType
, friendlyDeviceName : Maybe StringType
, session : Maybe SessionType
}

The VerifySoftwareTokenRequest data model.

{ session : Maybe SessionType
}

The VerifySoftwareTokenResponse data model.

= VerifySoftwareTokenResponseTypeSuccess
| VerifySoftwareTokenResponseTypeError

The VerifySoftwareTokenResponseType data model.

{ accessToken : TokenModelType
, attributeName : AttributeNameType
}

The VerifyUserAttributeRequest data model.

The VerifyUserAttributeResponse data model.

The AccountTakeoverEventActionType data model.

The AdminCreateUserUnusedAccountValidityDaysType data model.

The AdvancedSecurityModeType data model.

The AliasAttributeType data model.

arnType : Refined String ArnType StringError

The ArnType data model.

The AttributeDataType data model.

The AttributeMappingKeyType data model.

attributeNameType : Refined String AttributeNameType StringError

The AttributeNameType data model.

attributeValueType : Refined String AttributeValueType StringError

The AttributeValueType data model.

The AuthFlowType data model.

The ChallengeName data model.

The ChallengeNameType data model.

The ChallengeResponse data model.

clientIdType : Refined String ClientIdType StringError

The ClientIdType data model.

clientNameType : Refined String ClientNameType StringError

The ClientNameType data model.

clientPermissionType : Refined String ClientPermissionType StringError

The ClientPermissionType data model.

clientSecretType : Refined String ClientSecretType StringError

The ClientSecretType data model.

completionMessageType : Refined String CompletionMessageType StringError

The CompletionMessageType data model.

The CompromisedCredentialsEventActionType data model.

confirmationCodeType : Refined String ConfirmationCodeType StringError

The ConfirmationCodeType data model.

The CustomAttributeNameType data model.

The DefaultEmailOptionType data model.

The DeliveryMediumType data model.

descriptionType : Refined String DescriptionType StringError

The DescriptionType data model.

deviceKeyType : Refined String DeviceKeyType StringError

The DeviceKeyType data model.

deviceNameType : Refined String DeviceNameType StringError

The DeviceNameType data model.

The DeviceRememberedStatusType data model.

The DomainStatusType data model.

domainType : Refined String DomainType StringError

The DomainType data model.

domainVersionType : Refined String DomainVersionType StringError

The DomainVersionType data model.

emailAddressType : Refined String EmailAddressType StringError

The EmailAddressType data model.

The EmailNotificationBodyType data model.

The EmailNotificationSubjectType data model.

The EmailSendingAccountType data model.

The EmailVerificationMessageByLinkType data model.

The EmailVerificationMessageType data model.

The EmailVerificationSubjectByLinkType data model.

The EmailVerificationSubjectType data model.

The EventFilterType data model.

eventIdType : Refined String EventIdType StringError

The EventIdType data model.

The EventResponseType data model.

The EventType data model.

The ExplicitAuthFlowsType data model.

The FeedbackValueType data model.

groupNameType : Refined String GroupNameType StringError

The GroupNameType data model.

hexStringType : Refined String HexStringType StringError

The HexStringType data model.

The IdentityProviderTypeType data model.

idpIdentifierType : Refined String IdpIdentifierType StringError

The IdpIdentifierType data model.

The ListProvidersLimitType data model.

The ListResourceServersLimitType data model.

The MessageActionType data model.

The OauthFlowType data model.

paginationKey : Refined String PaginationKey StringError

The PaginationKey data model.

paginationKeyType : Refined String PaginationKeyType StringError

The PaginationKeyType data model.

The PasswordPolicyMinLengthType data model.

passwordType : Refined String PasswordType StringError

The PasswordType data model.

poolQueryLimitType : Refined Int PoolQueryLimitType IntError

The PoolQueryLimitType data model.

preSignedUrlType : Refined String PreSignedUrlType StringError

The PreSignedUrlType data model.

precedenceType : Refined Int PrecedenceType IntError

The PrecedenceType data model.

providerNameType : Refined String ProviderNameType StringError

The ProviderNameType data model.

providerNameTypeV1 : Refined String ProviderNameTypeV1 StringError

The ProviderNameTypeV1 data model.

queryLimit : Refined Int QueryLimit IntError

The QueryLimit data model.

queryLimitType : Refined Int QueryLimitType IntError

The QueryLimitType data model.

redirectUrlType : Refined String RedirectUrlType StringError

The RedirectUrlType data model.

The RefreshTokenValidityType data model.

The ResourceServerIdentifierType data model.

resourceServerNameType : Refined String ResourceServerNameType StringError

The ResourceServerNameType data model.

The ResourceServerScopeDescriptionType data model.

The ResourceServerScopeNameType data model.

The RiskDecisionType data model.

The RiskLevelType data model.

s3BucketType : Refined String S3BucketType StringError

The S3BucketType data model.

scopeType : Refined String ScopeType StringError

The ScopeType data model.

The SearchPaginationTokenType data model.

secretCodeType : Refined String SecretCodeType StringError

The SecretCodeType data model.

secretHashType : Refined String SecretHashType StringError

The SecretHashType data model.

sessionType : Refined String SessionType StringError

The SessionType data model.

The SmsVerificationMessageType data model.

The SoftwareTokenMfauserCodeType data model.

The StatusType data model.

tagKeysType : Refined String TagKeysType StringError

The TagKeysType data model.

tagValueType : Refined String TagValueType StringError

The TagValueType data model.

The TemporaryPasswordValidityDaysType data model.

tokenModelType : Refined String TokenModelType StringError

The TokenModelType data model.

userFilterType : Refined String UserFilterType StringError

The UserFilterType data model.

userImportJobIdType : Refined String UserImportJobIdType StringError

The UserImportJobIdType data model.

userImportJobNameType : Refined String UserImportJobNameType StringError

The UserImportJobNameType data model.

The UserImportJobStatusType data model.

userPoolIdType : Refined String UserPoolIdType StringError

The UserPoolIdType data model.

The UserPoolMfaType data model.

userPoolNameType : Refined String UserPoolNameType StringError

The UserPoolNameType data model.

The UserStatusType data model.

The UsernameAttributeType data model.

usernameType : Refined String UsernameType StringError

The UsernameType data model.

The VerifiedAttributeType data model.

The VerifySoftwareTokenResponseType data model.