2017/08/11 - Amazon Cognito Identity Provider - 9 new 9 updated api methods
Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked DestinationUser ) signs in, they must create a new user account. See AdminLinkProviderForUser.
This action is enabled only for admin access and requires developer credentials.
The ProviderName must match the value specified when creating an IdP for the pool.
To disable a native username + password user, the ProviderName value must be Cognito and the ProviderAttributeName must be Cognito_Subject , with the ProviderAttributeValue being the name that is used in the user pool for the user.
The ProviderAttributeName must always be Cognito_Subject for social identity providers. The ProviderAttributeValue must always be the exact subject that was used when the user was originally linked as a source user.
For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the ProviderAttributeName and ProviderAttributeValue must be the same values that were used for the SourceUser when the identities were originally linked in the AdminLinkProviderForUser call. (If the linking was done with ProviderAttributeName set to Cognito_Subject , the same applies here). However, if the user has already signed in, the ProviderAttributeName must be Cognito_Subject and ProviderAttributeValue must be the subject of the SAML assertion.
See also: AWS API Documentation
Request Syntax
client.admin_disable_provider_for_user(
UserPoolId='string',
User={
'ProviderName': 'string',
'ProviderAttributeName': 'string',
'ProviderAttributeValue': 'string'
}
)
string
[REQUIRED]
The user pool ID for the user pool.
dict
[REQUIRED]
The user to be disabled.
ProviderName (string) --
The name of the provider, for example, Facebook, Google, or Login with Amazon.
ProviderAttributeName (string) --
The name of the provider attribute to link to, for example, NameID .
ProviderAttributeValue (string) --
The value of the provider attribute to link to, for example, xxxxx_account .
dict
Response Syntax
{}
Response Structure
(dict) --
Gets the UI Customization information for a particular app client's app UI, if there is something set. If nothing is set for the particular client, but there is an existing pool level customization (app clientId will be ALL ), then that is returned. If nothing is present, then an empty shape is returned.
See also: AWS API Documentation
Request Syntax
client.get_ui_customization(
UserPoolId='string',
ClientId='string'
)
string
[REQUIRED]
The user pool ID for the user pool.
string
The client ID for the client app.
dict
Response Syntax
{
'UICustomization': {
'UserPoolId': 'string',
'ClientId': 'string',
'ImageUrl': 'string',
'CSS': 'string',
'CSSVersion': 'string',
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
UICustomization (dict) --
The UI customization information.
UserPoolId (string) --
The user pool ID for the user pool.
ClientId (string) --
The client ID for the client app.
ImageUrl (string) --
The logo image for the UI customization.
CSS (string) --
The CSS values in the UI customization.
CSSVersion (string) --
The CSS version number.
LastModifiedDate (datetime) --
The last-modified date for the UI customization.
CreationDate (datetime) --
The creation date for the UI customization.
Describes a resource server.
See also: AWS API Documentation
Request Syntax
client.describe_resource_server(
UserPoolId='string',
Identifier='string'
)
string
[REQUIRED]
The user pool ID for the user pool that hosts the resource server.
string
[REQUIRED]
The identifier for the resource server
dict
Response Syntax
{
'ResourceServer': {
'UserPoolId': 'string',
'Identifier': 'string',
'Name': 'string',
'Scopes': [
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
}
}
Response Structure
(dict) --
ResourceServer (dict) --
The resource server.
UserPoolId (string) --
The user pool ID for the user pool that hosts the resource server.
Identifier (string) --
The identifier for the resource server.
Name (string) --
The name of the resource server.
Scopes (list) --
A list of scopes that are defined for the resource server.
(dict) --
A resource server scope.
ScopeName (string) --
The name of the scope.
ScopeDescription (string) --
A description of the scope.
Lists the resource servers for a user pool.
See also: AWS API Documentation
Request Syntax
client.list_resource_servers(
UserPoolId='string',
MaxResults=123,
NextToken='string'
)
string
[REQUIRED]
The user pool ID for the user pool.
integer
The maximum number of resource servers to return.
string
A pagination token.
dict
Response Syntax
{
'ResourceServers': [
{
'UserPoolId': 'string',
'Identifier': 'string',
'Name': 'string',
'Scopes': [
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
ResourceServers (list) --
The resource servers.
(dict) --
A container for information about a resource server for a user pool.
UserPoolId (string) --
The user pool ID for the user pool that hosts the resource server.
Identifier (string) --
The identifier for the resource server.
Name (string) --
The name of the resource server.
Scopes (list) --
A list of scopes that are defined for the resource server.
(dict) --
A resource server scope.
ScopeName (string) --
The name of the scope.
ScopeDescription (string) --
A description of the scope.
NextToken (string) --
A pagination token.
Sets the UI customization information for a user pool's built-in app UI.
You can specify app UI customization settings for a single client (with a specific clientId ) or for all clients (by setting the clientId to ALL ). If you specify ALL , the default configuration will be used for every client that has no UI customization set previously. If you specify UI customization settings for a particular client, it will no longer fall back to the ALL configuration.
Note
To use this API, your user pool must have a domain associated with it. Otherwise, there is no place to host the app's pages, and the service will throw an error.
See also: AWS API Documentation
Request Syntax
client.set_ui_customization(
UserPoolId='string',
ClientId='string',
CSS='string',
ImageFile=b'bytes'
)
string
[REQUIRED]
The user pool ID for the user pool.
string
The client ID for the client app.
string
The CSS values in the UI customization.
bytes
The uploaded logo image for the UI customization.
dict
Response Syntax
{
'UICustomization': {
'UserPoolId': 'string',
'ClientId': 'string',
'ImageUrl': 'string',
'CSS': 'string',
'CSSVersion': 'string',
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
UICustomization (dict) --
The UI customization information.
UserPoolId (string) --
The user pool ID for the user pool.
ClientId (string) --
The client ID for the client app.
ImageUrl (string) --
The logo image for the UI customization.
CSS (string) --
The CSS values in the UI customization.
CSSVersion (string) --
The CSS version number.
LastModifiedDate (datetime) --
The last-modified date for the UI customization.
CreationDate (datetime) --
The creation date for the UI customization.
Updates the name and scopes of resource server. All other fields are read-only.
See also: AWS API Documentation
Request Syntax
client.update_resource_server(
UserPoolId='string',
Identifier='string',
Name='string',
Scopes=[
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
)
string
[REQUIRED]
The user pool ID for the user pool.
string
[REQUIRED]
The identifier for the resource server.
string
[REQUIRED]
The name of the resource server.
list
The scope values to be set for the resource server.
(dict) --
A resource server scope.
ScopeName (string) -- [REQUIRED]
The name of the scope.
ScopeDescription (string) -- [REQUIRED]
A description of the scope.
dict
Response Syntax
{
'ResourceServer': {
'UserPoolId': 'string',
'Identifier': 'string',
'Name': 'string',
'Scopes': [
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
}
}
Response Structure
(dict) --
ResourceServer (dict) --
The resource server.
UserPoolId (string) --
The user pool ID for the user pool that hosts the resource server.
Identifier (string) --
The identifier for the resource server.
Name (string) --
The name of the resource server.
Scopes (list) --
A list of scopes that are defined for the resource server.
(dict) --
A resource server scope.
ScopeName (string) --
The name of the scope.
ScopeDescription (string) --
A description of the scope.
Creates a new OAuth2.0 resource server and defines custom scopes in it.
See also: AWS API Documentation
Request Syntax
client.create_resource_server(
UserPoolId='string',
Identifier='string',
Name='string',
Scopes=[
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
)
string
[REQUIRED]
The user pool ID for the user pool.
string
[REQUIRED]
A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example, https://my-weather-api.example.com .
string
[REQUIRED]
A friendly name for the resource server.
list
A list of scopes. Each scope is map, where the keys are name and description .
(dict) --
A resource server scope.
ScopeName (string) -- [REQUIRED]
The name of the scope.
ScopeDescription (string) -- [REQUIRED]
A description of the scope.
dict
Response Syntax
{
'ResourceServer': {
'UserPoolId': 'string',
'Identifier': 'string',
'Name': 'string',
'Scopes': [
{
'ScopeName': 'string',
'ScopeDescription': 'string'
},
]
}
}
Response Structure
(dict) --
ResourceServer (dict) --
The newly created resource server.
UserPoolId (string) --
The user pool ID for the user pool that hosts the resource server.
Identifier (string) --
The identifier for the resource server.
Name (string) --
The name of the resource server.
Scopes (list) --
A list of scopes that are defined for the resource server.
(dict) --
A resource server scope.
ScopeName (string) --
The name of the scope.
ScopeDescription (string) --
A description of the scope.
Links an existing user account in a user pool ( DestinationUser ) to an identity from an external identity provider ( SourceUser ) based on a specified attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not yet been used to sign in, so that the federated user identity can be used to sign in as the existing user account.
For example, if there is an existing user with a username and password, this API links that user to a federated user identity, so that when the federated user identity is used, the user signs in as the existing user account.
Warning
Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external identity providers and provider attributes that have been trusted by the application owner.
See also AdminDisableProviderForUser.
This action is enabled only for admin access and requires developer credentials.
See also: AWS API Documentation
Request Syntax
client.admin_link_provider_for_user(
UserPoolId='string',
DestinationUser={
'ProviderName': 'string',
'ProviderAttributeName': 'string',
'ProviderAttributeValue': 'string'
},
SourceUser={
'ProviderName': 'string',
'ProviderAttributeName': 'string',
'ProviderAttributeValue': 'string'
}
)
string
[REQUIRED]
The user pool ID for the user pool.
dict
[REQUIRED]
The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in.
The ProviderAttributeValue for the DestinationUser must match the username for the user in the user pool. The ProviderAttributeName will always be ignored.
ProviderName (string) --
The name of the provider, for example, Facebook, Google, or Login with Amazon.
ProviderAttributeName (string) --
The name of the provider attribute to link to, for example, NameID .
ProviderAttributeValue (string) --
The value of the provider attribute to link to, for example, xxxxx_account .
dict
[REQUIRED]
An external identity provider account for a user who does not currently exist yet in the user pool. This user must be a federated user (for example, a SAML or Facebook user), not another native user.
If the SourceUser is a federated social identity provider user (Facebook, Google, or Login with Amazon), you must set the ProviderAttributeName to Cognito_Subject . For social identity providers, the ProviderName will be Facebook , Google , or LoginWithAmazon , and Cognito will automatically parse the Facebook, Google, and Login with Amazon tokens for id , sub , and user_id , respectively. The ProviderAttributeValue for the user must be the same value as the id , sub , or user_id value found in the social identity provider token.
For SAML, the ProviderAttributeName can be any value that matches a claim in the SAML assertion. If you wish to link SAML users based on the subject of the SAML assertion, you should map the subject to a claim through the SAML identity provider and submit that claim name as the ProviderAttributeName . If you set ProviderAttributeName to Cognito_Subject , Cognito will automatically parse the default unique identifier found in the subject from the SAML token.
ProviderName (string) --
The name of the provider, for example, Facebook, Google, or Login with Amazon.
ProviderAttributeName (string) --
The name of the provider attribute to link to, for example, NameID .
ProviderAttributeValue (string) --
The value of the provider attribute to link to, for example, xxxxx_account .
dict
Response Syntax
{}
Response Structure
(dict) --
Deletes a resource server.
See also: AWS API Documentation
Request Syntax
client.delete_resource_server(
UserPoolId='string',
Identifier='string'
)
string
[REQUIRED]
The user pool ID for the user pool that hosts the resource server.
string
[REQUIRED]
The identifier for the resource server.
None
{'ProviderType': {'Facebook', 'LoginWithAmazon', 'Google'}}
Response {'IdentityProvider': {'ProviderType': {'Facebook',
'Google',
'LoginWithAmazon'}}}
Creates an identity provider for a user pool.
See also: AWS API Documentation
Request Syntax
client.create_identity_provider(
UserPoolId='string',
ProviderName='string',
ProviderType='SAML'|'Facebook'|'Google'|'LoginWithAmazon',
ProviderDetails={
'string': 'string'
},
AttributeMapping={
'string': 'string'
},
IdpIdentifiers=[
'string',
]
)
string
[REQUIRED]
The user pool ID.
string
[REQUIRED]
The identity provider name.
string
[REQUIRED]
The identity provider type.
dict
[REQUIRED]
The identity provider details, such as MetadataURL and MetadataFile .
(string) --
(string) --
dict
A mapping of identity provider attributes to standard and custom user pool attributes.
(string) --
(string) --
list
A list of identity provider identifiers.
(string) --
dict
Response Syntax
{
'IdentityProvider': {
'UserPoolId': 'string',
'ProviderName': 'string',
'ProviderType': 'SAML'|'Facebook'|'Google'|'LoginWithAmazon',
'ProviderDetails': {
'string': 'string'
},
'AttributeMapping': {
'string': 'string'
},
'IdpIdentifiers': [
'string',
],
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
IdentityProvider (dict) --
The newly created identity provider object.
UserPoolId (string) --
The user pool ID.
ProviderName (string) --
The identity provider name.
ProviderType (string) --
The identity provider type.
ProviderDetails (dict) --
The identity provider details, such as MetadataURL and MetadataFile .
(string) --
(string) --
AttributeMapping (dict) --
A mapping of identity provider attributes to standard and custom user pool attributes.
(string) --
(string) --
IdpIdentifiers (list) --
A list of identity provider identifiers.
(string) --
LastModifiedDate (datetime) --
The date the identity provider was last modified.
CreationDate (datetime) --
The date the identity provider was created.
{'VerificationMessageTemplate': {'DefaultEmailOption': 'CONFIRM_WITH_LINK | '
'CONFIRM_WITH_CODE',
'EmailMessage': 'string',
'EmailMessageByLink': 'string',
'EmailSubject': 'string',
'EmailSubjectByLink': 'string',
'SmsMessage': 'string'}}
Response {'UserPool': {'VerificationMessageTemplate': {'DefaultEmailOption': 'CONFIRM_WITH_LINK '
'| '
'CONFIRM_WITH_CODE',
'EmailMessage': 'string',
'EmailMessageByLink': 'string',
'EmailSubject': 'string',
'EmailSubjectByLink': 'string',
'SmsMessage': 'string'}}}
Creates a new Amazon Cognito user pool and sets the password policy for the pool.
See also: AWS API Documentation
Request Syntax
client.create_user_pool(
PoolName='string',
Policies={
'PasswordPolicy': {
'MinimumLength': 123,
'RequireUppercase': True|False,
'RequireLowercase': True|False,
'RequireNumbers': True|False,
'RequireSymbols': True|False
}
},
LambdaConfig={
'PreSignUp': 'string',
'CustomMessage': 'string',
'PostConfirmation': 'string',
'PreAuthentication': 'string',
'PostAuthentication': 'string',
'DefineAuthChallenge': 'string',
'CreateAuthChallenge': 'string',
'VerifyAuthChallengeResponse': 'string'
},
AutoVerifiedAttributes=[
'phone_number'|'email',
],
AliasAttributes=[
'phone_number'|'email'|'preferred_username',
],
UsernameAttributes=[
'phone_number'|'email',
],
SmsVerificationMessage='string',
EmailVerificationMessage='string',
EmailVerificationSubject='string',
VerificationMessageTemplate={
'SmsMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string',
'EmailMessageByLink': 'string',
'EmailSubjectByLink': 'string',
'DefaultEmailOption': 'CONFIRM_WITH_LINK'|'CONFIRM_WITH_CODE'
},
SmsAuthenticationMessage='string',
MfaConfiguration='OFF'|'ON'|'OPTIONAL',
DeviceConfiguration={
'ChallengeRequiredOnNewDevice': True|False,
'DeviceOnlyRememberedOnUserPrompt': True|False
},
EmailConfiguration={
'SourceArn': 'string',
'ReplyToEmailAddress': 'string'
},
SmsConfiguration={
'SnsCallerArn': 'string',
'ExternalId': 'string'
},
UserPoolTags={
'string': 'string'
},
AdminCreateUserConfig={
'AllowAdminCreateUserOnly': True|False,
'UnusedAccountValidityDays': 123,
'InviteMessageTemplate': {
'SMSMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string'
}
},
Schema=[
{
'Name': 'string',
'AttributeDataType': 'String'|'Number'|'DateTime'|'Boolean',
'DeveloperOnlyAttribute': True|False,
'Mutable': True|False,
'Required': True|False,
'NumberAttributeConstraints': {
'MinValue': 'string',
'MaxValue': 'string'
},
'StringAttributeConstraints': {
'MinLength': 'string',
'MaxLength': 'string'
}
},
]
)
string
[REQUIRED]
A string used to name the user pool.
dict
The policies associated with the new user pool.
PasswordPolicy (dict) --
A container for information about the user pool password policy.
MinimumLength (integer) --
The minimum length of the password policy that you have set. Cannot be less than 6.
RequireUppercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one uppercase letter in their password.
RequireLowercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one lowercase letter in their password.
RequireNumbers (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one number in their password.
RequireSymbols (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one symbol in their password.
dict
The Lambda trigger configuration information for the new user pool.
PreSignUp (string) --
A pre-registration AWS Lambda trigger.
CustomMessage (string) --
A custom Message AWS Lambda trigger.
PostConfirmation (string) --
A post-confirmation AWS Lambda trigger.
PreAuthentication (string) --
A pre-authentication AWS Lambda trigger.
PostAuthentication (string) --
A post-authentication AWS Lambda trigger.
DefineAuthChallenge (string) --
Defines the authentication challenge.
CreateAuthChallenge (string) --
Creates an authentication challenge.
VerifyAuthChallengeResponse (string) --
Verifies the authentication challenge response.
list
The attributes to be auto-verified. Possible values: email , phone_number .
(string) --
list
Attributes supported as an alias for this user pool. Possible values: phone_number , email , or preferred_username .
(string) --
list
Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.
(string) --
string
A string representing the SMS verification message.
string
A string representing the email verification message.
string
A string representing the email verification subject.
dict
The template for the verification message that the user sees when the app requests permission to access the user's information.
SmsMessage (string) --
The SMS message template.
EmailMessage (string) --
The email message template.
EmailSubject (string) --
The subject line for the email message template.
EmailMessageByLink (string) --
The email message template for sending a confirmation link to the user.
EmailSubjectByLink (string) --
The subject line for the email message template for sending a confirmation link to the user.
DefaultEmailOption (string) --
The default email option.
string
A string representing the SMS authentication message.
string
Specifies MFA configuration details.
dict
The device configuration.
ChallengeRequiredOnNewDevice (boolean) --
Indicates whether a challenge is required on a new device. Only applicable to a new device.
DeviceOnlyRememberedOnUserPrompt (boolean) --
If true, a device is only remembered on user prompt.
dict
The email configuration.
SourceArn (string) --
The Amazon Resource Name (ARN) of the email source.
ReplyToEmailAddress (string) --
The REPLY-TO email address.
dict
The SMS configuration.
SnsCallerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) caller.
ExternalId (string) --
The external ID.
dict
The cost allocation tags for the user pool. For more information, see Adding Cost Allocation Tags to Your User Pool
(string) --
(string) --
dict
The configuration for AdminCreateUser requests.
AllowAdminCreateUserOnly (boolean) --
Set to True if only the administrator is allowed to create user profiles. Set to False if users can sign themselves up via an app.
UnusedAccountValidityDays (integer) --
The user account expiration limit, in days, after which the account is no longer usable. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter. The default value for this parameter is 7.
InviteMessageTemplate (dict) --
The message template to be used for the welcome message to new users.
SMSMessage (string) --
The message template for SMS messages.
EmailMessage (string) --
The message template for email messages.
EmailSubject (string) --
The subject line for email messages.
list
An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
(dict) --
Contains information about the schema attribute.
Name (string) --
A schema attribute of the name type.
AttributeDataType (string) --
The attribute data type.
DeveloperOnlyAttribute (boolean) --
Specifies whether the attribute type is developer only.
Mutable (boolean) --
Specifies whether the attribute can be changed once it has been created.
Required (boolean) --
Specifies whether a user pool attribute is required. If the attribute is required and the user does not provide a value, registration or sign-in will fail.
NumberAttributeConstraints (dict) --
Specifies the constraints for an attribute of the number type.
MinValue (string) --
The minimum value of an attribute that is of the number data type.
MaxValue (string) --
The maximum value of an attribute that is of the number data type.
StringAttributeConstraints (dict) --
Specifies the constraints for an attribute of the string type.
MinLength (string) --
The minimum length of an attribute value of the string type.
MaxLength (string) --
The maximum length of an attribute value of the string type.
dict
Response Syntax
{
'UserPool': {
'Id': 'string',
'Name': 'string',
'Policies': {
'PasswordPolicy': {
'MinimumLength': 123,
'RequireUppercase': True|False,
'RequireLowercase': True|False,
'RequireNumbers': True|False,
'RequireSymbols': True|False
}
},
'LambdaConfig': {
'PreSignUp': 'string',
'CustomMessage': 'string',
'PostConfirmation': 'string',
'PreAuthentication': 'string',
'PostAuthentication': 'string',
'DefineAuthChallenge': 'string',
'CreateAuthChallenge': 'string',
'VerifyAuthChallengeResponse': 'string'
},
'Status': 'Enabled'|'Disabled',
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1),
'SchemaAttributes': [
{
'Name': 'string',
'AttributeDataType': 'String'|'Number'|'DateTime'|'Boolean',
'DeveloperOnlyAttribute': True|False,
'Mutable': True|False,
'Required': True|False,
'NumberAttributeConstraints': {
'MinValue': 'string',
'MaxValue': 'string'
},
'StringAttributeConstraints': {
'MinLength': 'string',
'MaxLength': 'string'
}
},
],
'AutoVerifiedAttributes': [
'phone_number'|'email',
],
'AliasAttributes': [
'phone_number'|'email'|'preferred_username',
],
'UsernameAttributes': [
'phone_number'|'email',
],
'SmsVerificationMessage': 'string',
'EmailVerificationMessage': 'string',
'EmailVerificationSubject': 'string',
'VerificationMessageTemplate': {
'SmsMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string',
'EmailMessageByLink': 'string',
'EmailSubjectByLink': 'string',
'DefaultEmailOption': 'CONFIRM_WITH_LINK'|'CONFIRM_WITH_CODE'
},
'SmsAuthenticationMessage': 'string',
'MfaConfiguration': 'OFF'|'ON'|'OPTIONAL',
'DeviceConfiguration': {
'ChallengeRequiredOnNewDevice': True|False,
'DeviceOnlyRememberedOnUserPrompt': True|False
},
'EstimatedNumberOfUsers': 123,
'EmailConfiguration': {
'SourceArn': 'string',
'ReplyToEmailAddress': 'string'
},
'SmsConfiguration': {
'SnsCallerArn': 'string',
'ExternalId': 'string'
},
'UserPoolTags': {
'string': 'string'
},
'SmsConfigurationFailure': 'string',
'EmailConfigurationFailure': 'string',
'AdminCreateUserConfig': {
'AllowAdminCreateUserOnly': True|False,
'UnusedAccountValidityDays': 123,
'InviteMessageTemplate': {
'SMSMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string'
}
}
}
}
Response Structure
(dict) --
Represents the response from the server for the request to create a user pool.
UserPool (dict) --
A container for the user pool details.
Id (string) --
The ID of the user pool.
Name (string) --
The name of the user pool.
Policies (dict) --
A container for the policies associated with a user pool.
PasswordPolicy (dict) --
A container for information about the user pool password policy.
MinimumLength (integer) --
The minimum length of the password policy that you have set. Cannot be less than 6.
RequireUppercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one uppercase letter in their password.
RequireLowercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one lowercase letter in their password.
RequireNumbers (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one number in their password.
RequireSymbols (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one symbol in their password.
LambdaConfig (dict) --
A container for the AWS Lambda triggers associated with a user pool.
PreSignUp (string) --
A pre-registration AWS Lambda trigger.
CustomMessage (string) --
A custom Message AWS Lambda trigger.
PostConfirmation (string) --
A post-confirmation AWS Lambda trigger.
PreAuthentication (string) --
A pre-authentication AWS Lambda trigger.
PostAuthentication (string) --
A post-authentication AWS Lambda trigger.
DefineAuthChallenge (string) --
Defines the authentication challenge.
CreateAuthChallenge (string) --
Creates an authentication challenge.
VerifyAuthChallengeResponse (string) --
Verifies the authentication challenge response.
Status (string) --
The status of a user pool.
LastModifiedDate (datetime) --
The date the user pool was last modified.
CreationDate (datetime) --
The date the user pool was created.
SchemaAttributes (list) --
A container with the schema attributes of a user pool.
(dict) --
Contains information about the schema attribute.
Name (string) --
A schema attribute of the name type.
AttributeDataType (string) --
The attribute data type.
DeveloperOnlyAttribute (boolean) --
Specifies whether the attribute type is developer only.
Mutable (boolean) --
Specifies whether the attribute can be changed once it has been created.
Required (boolean) --
Specifies whether a user pool attribute is required. If the attribute is required and the user does not provide a value, registration or sign-in will fail.
NumberAttributeConstraints (dict) --
Specifies the constraints for an attribute of the number type.
MinValue (string) --
The minimum value of an attribute that is of the number data type.
MaxValue (string) --
The maximum value of an attribute that is of the number data type.
StringAttributeConstraints (dict) --
Specifies the constraints for an attribute of the string type.
MinLength (string) --
The minimum length of an attribute value of the string type.
MaxLength (string) --
The maximum length of an attribute value of the string type.
AutoVerifiedAttributes (list) --
Specifies the attributes that are auto-verified in a user pool.
(string) --
AliasAttributes (list) --
Specifies the attributes that are aliased in a user pool.
(string) --
UsernameAttributes (list) --
Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.
(string) --
SmsVerificationMessage (string) --
The contents of the SMS verification message.
EmailVerificationMessage (string) --
The contents of the email verification message.
EmailVerificationSubject (string) --
The subject of the email verification message.
VerificationMessageTemplate (dict) --
The template for verification messages.
SmsMessage (string) --
The SMS message template.
EmailMessage (string) --
The email message template.
EmailSubject (string) --
The subject line for the email message template.
EmailMessageByLink (string) --
The email message template for sending a confirmation link to the user.
EmailSubjectByLink (string) --
The subject line for the email message template for sending a confirmation link to the user.
DefaultEmailOption (string) --
The default email option.
SmsAuthenticationMessage (string) --
The contents of the SMS authentication message.
MfaConfiguration (string) --
Can be one of the following values:
OFF - MFA tokens are not required and cannot be specified during user registration.
ON - MFA tokens are required for all user registrations. You can only specify required when you are initially creating a user pool.
OPTIONAL - Users have the option when registering to create an MFA token.
DeviceConfiguration (dict) --
The device configuration.
ChallengeRequiredOnNewDevice (boolean) --
Indicates whether a challenge is required on a new device. Only applicable to a new device.
DeviceOnlyRememberedOnUserPrompt (boolean) --
If true, a device is only remembered on user prompt.
EstimatedNumberOfUsers (integer) --
A number estimating the size of the user pool.
EmailConfiguration (dict) --
The email configuration.
SourceArn (string) --
The Amazon Resource Name (ARN) of the email source.
ReplyToEmailAddress (string) --
The REPLY-TO email address.
SmsConfiguration (dict) --
The SMS configuration.
SnsCallerArn (string) --
The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) caller.
ExternalId (string) --
The external ID.
UserPoolTags (dict) --
The cost allocation tags for the user pool. For more information, see Adding Cost Allocation Tags to Your User Pool
(string) --
(string) --
SmsConfigurationFailure (string) --
The reason why the SMS configuration cannot send the messages to your users.
EmailConfigurationFailure (string) --
The reason why the email configuration cannot send the messages to your users.
AdminCreateUserConfig (dict) --
The configuration for AdminCreateUser requests.
AllowAdminCreateUserOnly (boolean) --
Set to True if only the administrator is allowed to create user profiles. Set to False if users can sign themselves up via an app.
UnusedAccountValidityDays (integer) --
The user account expiration limit, in days, after which the account is no longer usable. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter. The default value for this parameter is 7.
InviteMessageTemplate (dict) --
The message template to be used for the welcome message to new users.
SMSMessage (string) --
The message template for SMS messages.
EmailMessage (string) --
The message template for email messages.
EmailSubject (string) --
The subject line for email messages.
{'IdentityProvider': {'ProviderType': {'Facebook',
'Google',
'LoginWithAmazon'}}}
Gets information about a specific identity provider.
See also: AWS API Documentation
Request Syntax
client.describe_identity_provider(
UserPoolId='string',
ProviderName='string'
)
string
[REQUIRED]
The user pool ID.
string
[REQUIRED]
The identity provider name.
dict
Response Syntax
{
'IdentityProvider': {
'UserPoolId': 'string',
'ProviderName': 'string',
'ProviderType': 'SAML'|'Facebook'|'Google'|'LoginWithAmazon',
'ProviderDetails': {
'string': 'string'
},
'AttributeMapping': {
'string': 'string'
},
'IdpIdentifiers': [
'string',
],
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
IdentityProvider (dict) --
The identity provider that was deleted.
UserPoolId (string) --
The user pool ID.
ProviderName (string) --
The identity provider name.
ProviderType (string) --
The identity provider type.
ProviderDetails (dict) --
The identity provider details, such as MetadataURL and MetadataFile .
(string) --
(string) --
AttributeMapping (dict) --
A mapping of identity provider attributes to standard and custom user pool attributes.
(string) --
(string) --
IdpIdentifiers (list) --
A list of identity provider identifiers.
(string) --
LastModifiedDate (datetime) --
The date the identity provider was last modified.
CreationDate (datetime) --
The date the identity provider was created.
{'UserPool': {'VerificationMessageTemplate': {'DefaultEmailOption': 'CONFIRM_WITH_LINK '
'| '
'CONFIRM_WITH_CODE',
'EmailMessage': 'string',
'EmailMessageByLink': 'string',
'EmailSubject': 'string',
'EmailSubjectByLink': 'string',
'SmsMessage': 'string'}}}
Returns the configuration information and metadata of the specified user pool.
See also: AWS API Documentation
Request Syntax
client.describe_user_pool(
UserPoolId='string'
)
string
[REQUIRED]
The user pool ID for the user pool you want to describe.
dict
Response Syntax
{
'UserPool': {
'Id': 'string',
'Name': 'string',
'Policies': {
'PasswordPolicy': {
'MinimumLength': 123,
'RequireUppercase': True|False,
'RequireLowercase': True|False,
'RequireNumbers': True|False,
'RequireSymbols': True|False
}
},
'LambdaConfig': {
'PreSignUp': 'string',
'CustomMessage': 'string',
'PostConfirmation': 'string',
'PreAuthentication': 'string',
'PostAuthentication': 'string',
'DefineAuthChallenge': 'string',
'CreateAuthChallenge': 'string',
'VerifyAuthChallengeResponse': 'string'
},
'Status': 'Enabled'|'Disabled',
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1),
'SchemaAttributes': [
{
'Name': 'string',
'AttributeDataType': 'String'|'Number'|'DateTime'|'Boolean',
'DeveloperOnlyAttribute': True|False,
'Mutable': True|False,
'Required': True|False,
'NumberAttributeConstraints': {
'MinValue': 'string',
'MaxValue': 'string'
},
'StringAttributeConstraints': {
'MinLength': 'string',
'MaxLength': 'string'
}
},
],
'AutoVerifiedAttributes': [
'phone_number'|'email',
],
'AliasAttributes': [
'phone_number'|'email'|'preferred_username',
],
'UsernameAttributes': [
'phone_number'|'email',
],
'SmsVerificationMessage': 'string',
'EmailVerificationMessage': 'string',
'EmailVerificationSubject': 'string',
'VerificationMessageTemplate': {
'SmsMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string',
'EmailMessageByLink': 'string',
'EmailSubjectByLink': 'string',
'DefaultEmailOption': 'CONFIRM_WITH_LINK'|'CONFIRM_WITH_CODE'
},
'SmsAuthenticationMessage': 'string',
'MfaConfiguration': 'OFF'|'ON'|'OPTIONAL',
'DeviceConfiguration': {
'ChallengeRequiredOnNewDevice': True|False,
'DeviceOnlyRememberedOnUserPrompt': True|False
},
'EstimatedNumberOfUsers': 123,
'EmailConfiguration': {
'SourceArn': 'string',
'ReplyToEmailAddress': 'string'
},
'SmsConfiguration': {
'SnsCallerArn': 'string',
'ExternalId': 'string'
},
'UserPoolTags': {
'string': 'string'
},
'SmsConfigurationFailure': 'string',
'EmailConfigurationFailure': 'string',
'AdminCreateUserConfig': {
'AllowAdminCreateUserOnly': True|False,
'UnusedAccountValidityDays': 123,
'InviteMessageTemplate': {
'SMSMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string'
}
}
}
}
Response Structure
(dict) --
Represents the response to describe the user pool.
UserPool (dict) --
The container of metadata returned by the server to describe the pool.
Id (string) --
The ID of the user pool.
Name (string) --
The name of the user pool.
Policies (dict) --
A container for the policies associated with a user pool.
PasswordPolicy (dict) --
A container for information about the user pool password policy.
MinimumLength (integer) --
The minimum length of the password policy that you have set. Cannot be less than 6.
RequireUppercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one uppercase letter in their password.
RequireLowercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one lowercase letter in their password.
RequireNumbers (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one number in their password.
RequireSymbols (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one symbol in their password.
LambdaConfig (dict) --
A container for the AWS Lambda triggers associated with a user pool.
PreSignUp (string) --
A pre-registration AWS Lambda trigger.
CustomMessage (string) --
A custom Message AWS Lambda trigger.
PostConfirmation (string) --
A post-confirmation AWS Lambda trigger.
PreAuthentication (string) --
A pre-authentication AWS Lambda trigger.
PostAuthentication (string) --
A post-authentication AWS Lambda trigger.
DefineAuthChallenge (string) --
Defines the authentication challenge.
CreateAuthChallenge (string) --
Creates an authentication challenge.
VerifyAuthChallengeResponse (string) --
Verifies the authentication challenge response.
Status (string) --
The status of a user pool.
LastModifiedDate (datetime) --
The date the user pool was last modified.
CreationDate (datetime) --
The date the user pool was created.
SchemaAttributes (list) --
A container with the schema attributes of a user pool.
(dict) --
Contains information about the schema attribute.
Name (string) --
A schema attribute of the name type.
AttributeDataType (string) --
The attribute data type.
DeveloperOnlyAttribute (boolean) --
Specifies whether the attribute type is developer only.
Mutable (boolean) --
Specifies whether the attribute can be changed once it has been created.
Required (boolean) --
Specifies whether a user pool attribute is required. If the attribute is required and the user does not provide a value, registration or sign-in will fail.
NumberAttributeConstraints (dict) --
Specifies the constraints for an attribute of the number type.
MinValue (string) --
The minimum value of an attribute that is of the number data type.
MaxValue (string) --
The maximum value of an attribute that is of the number data type.
StringAttributeConstraints (dict) --
Specifies the constraints for an attribute of the string type.
MinLength (string) --
The minimum length of an attribute value of the string type.
MaxLength (string) --
The maximum length of an attribute value of the string type.
AutoVerifiedAttributes (list) --
Specifies the attributes that are auto-verified in a user pool.
(string) --
AliasAttributes (list) --
Specifies the attributes that are aliased in a user pool.
(string) --
UsernameAttributes (list) --
Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.
(string) --
SmsVerificationMessage (string) --
The contents of the SMS verification message.
EmailVerificationMessage (string) --
The contents of the email verification message.
EmailVerificationSubject (string) --
The subject of the email verification message.
VerificationMessageTemplate (dict) --
The template for verification messages.
SmsMessage (string) --
The SMS message template.
EmailMessage (string) --
The email message template.
EmailSubject (string) --
The subject line for the email message template.
EmailMessageByLink (string) --
The email message template for sending a confirmation link to the user.
EmailSubjectByLink (string) --
The subject line for the email message template for sending a confirmation link to the user.
DefaultEmailOption (string) --
The default email option.
SmsAuthenticationMessage (string) --
The contents of the SMS authentication message.
MfaConfiguration (string) --
Can be one of the following values:
OFF - MFA tokens are not required and cannot be specified during user registration.
ON - MFA tokens are required for all user registrations. You can only specify required when you are initially creating a user pool.
OPTIONAL - Users have the option when registering to create an MFA token.
DeviceConfiguration (dict) --
The device configuration.
ChallengeRequiredOnNewDevice (boolean) --
Indicates whether a challenge is required on a new device. Only applicable to a new device.
DeviceOnlyRememberedOnUserPrompt (boolean) --
If true, a device is only remembered on user prompt.
EstimatedNumberOfUsers (integer) --
A number estimating the size of the user pool.
EmailConfiguration (dict) --
The email configuration.
SourceArn (string) --
The Amazon Resource Name (ARN) of the email source.
ReplyToEmailAddress (string) --
The REPLY-TO email address.
SmsConfiguration (dict) --
The SMS configuration.
SnsCallerArn (string) --
The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) caller.
ExternalId (string) --
The external ID.
UserPoolTags (dict) --
The cost allocation tags for the user pool. For more information, see Adding Cost Allocation Tags to Your User Pool
(string) --
(string) --
SmsConfigurationFailure (string) --
The reason why the SMS configuration cannot send the messages to your users.
EmailConfigurationFailure (string) --
The reason why the email configuration cannot send the messages to your users.
AdminCreateUserConfig (dict) --
The configuration for AdminCreateUser requests.
AllowAdminCreateUserOnly (boolean) --
Set to True if only the administrator is allowed to create user profiles. Set to False if users can sign themselves up via an app.
UnusedAccountValidityDays (integer) --
The user account expiration limit, in days, after which the account is no longer usable. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter. The default value for this parameter is 7.
InviteMessageTemplate (dict) --
The message template to be used for the welcome message to new users.
SMSMessage (string) --
The message template for SMS messages.
EmailMessage (string) --
The message template for email messages.
EmailSubject (string) --
The subject line for email messages.
{'DomainDescription': {'Status': {'FAILED'}}}
Gets information about a domain.
See also: AWS API Documentation
Request Syntax
client.describe_user_pool_domain(
Domain='string'
)
string
[REQUIRED]
The domain string.
dict
Response Syntax
{
'DomainDescription': {
'UserPoolId': 'string',
'AWSAccountId': 'string',
'Domain': 'string',
'S3Bucket': 'string',
'CloudFrontDistribution': 'string',
'Version': 'string',
'Status': 'CREATING'|'DELETING'|'UPDATING'|'ACTIVE'|'FAILED'
}
}
Response Structure
(dict) --
DomainDescription (dict) --
A domain description object containing information about the domain.
UserPoolId (string) --
The user pool ID.
AWSAccountId (string) --
The AWS account ID for the user pool owner.
Domain (string) --
The domain string.
S3Bucket (string) --
The S3 bucket where the static files for this domain are stored.
CloudFrontDistribution (string) --
The ARN of the CloudFront distribution.
Version (string) --
The app version.
Status (string) --
The domain status.
{'IdentityProvider': {'ProviderType': {'Facebook',
'Google',
'LoginWithAmazon'}}}
Gets the specified identity provider.
See also: AWS API Documentation
Request Syntax
client.get_identity_provider_by_identifier(
UserPoolId='string',
IdpIdentifier='string'
)
string
[REQUIRED]
The user pool ID.
string
[REQUIRED]
The identity provider ID.
dict
Response Syntax
{
'IdentityProvider': {
'UserPoolId': 'string',
'ProviderName': 'string',
'ProviderType': 'SAML'|'Facebook'|'Google'|'LoginWithAmazon',
'ProviderDetails': {
'string': 'string'
},
'AttributeMapping': {
'string': 'string'
},
'IdpIdentifiers': [
'string',
],
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
IdentityProvider (dict) --
The identity provider object.
UserPoolId (string) --
The user pool ID.
ProviderName (string) --
The identity provider name.
ProviderType (string) --
The identity provider type.
ProviderDetails (dict) --
The identity provider details, such as MetadataURL and MetadataFile .
(string) --
(string) --
AttributeMapping (dict) --
A mapping of identity provider attributes to standard and custom user pool attributes.
(string) --
(string) --
IdpIdentifiers (list) --
A list of identity provider identifiers.
(string) --
LastModifiedDate (datetime) --
The date the identity provider was last modified.
CreationDate (datetime) --
The date the identity provider was created.
{'Providers': {'ProviderType': {'Facebook', 'LoginWithAmazon', 'Google'}}}
Lists information about all identity providers for a user pool.
See also: AWS API Documentation
Request Syntax
client.list_identity_providers(
UserPoolId='string',
MaxResults=123,
NextToken='string'
)
string
[REQUIRED]
The user pool ID.
integer
The maximum number of identity providers to return.
string
A pagination token.
dict
Response Syntax
{
'Providers': [
{
'ProviderName': 'string',
'ProviderType': 'SAML'|'Facebook'|'Google'|'LoginWithAmazon',
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
Providers (list) --
A list of identity provider objects.
(dict) --
A container for identity provider details.
ProviderName (string) --
The identity provider name.
ProviderType (string) --
The identity provider type.
LastModifiedDate (datetime) --
The date the provider was last modified.
CreationDate (datetime) --
The date the provider was added to the user pool.
NextToken (string) --
A pagination token.
{'IdentityProvider': {'ProviderType': {'Facebook',
'Google',
'LoginWithAmazon'}}}
Updates identity provider information for a user pool.
See also: AWS API Documentation
Request Syntax
client.update_identity_provider(
UserPoolId='string',
ProviderName='string',
ProviderDetails={
'string': 'string'
},
AttributeMapping={
'string': 'string'
},
IdpIdentifiers=[
'string',
]
)
string
[REQUIRED]
The user pool ID.
string
[REQUIRED]
The identity provider name.
dict
The identity provider details to be updated, such as MetadataURL and MetadataFile .
(string) --
(string) --
dict
The identity provider attribute mapping to be changed.
(string) --
(string) --
list
A list of identity provider identifiers.
(string) --
dict
Response Syntax
{
'IdentityProvider': {
'UserPoolId': 'string',
'ProviderName': 'string',
'ProviderType': 'SAML'|'Facebook'|'Google'|'LoginWithAmazon',
'ProviderDetails': {
'string': 'string'
},
'AttributeMapping': {
'string': 'string'
},
'IdpIdentifiers': [
'string',
],
'LastModifiedDate': datetime(2015, 1, 1),
'CreationDate': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
IdentityProvider (dict) --
The identity provider object.
UserPoolId (string) --
The user pool ID.
ProviderName (string) --
The identity provider name.
ProviderType (string) --
The identity provider type.
ProviderDetails (dict) --
The identity provider details, such as MetadataURL and MetadataFile .
(string) --
(string) --
AttributeMapping (dict) --
A mapping of identity provider attributes to standard and custom user pool attributes.
(string) --
(string) --
IdpIdentifiers (list) --
A list of identity provider identifiers.
(string) --
LastModifiedDate (datetime) --
The date the identity provider was last modified.
CreationDate (datetime) --
The date the identity provider was created.
{'VerificationMessageTemplate': {'DefaultEmailOption': 'CONFIRM_WITH_LINK | '
'CONFIRM_WITH_CODE',
'EmailMessage': 'string',
'EmailMessageByLink': 'string',
'EmailSubject': 'string',
'EmailSubjectByLink': 'string',
'SmsMessage': 'string'}}
Updates the specified user pool with the specified attributes.
See also: AWS API Documentation
Request Syntax
client.update_user_pool(
UserPoolId='string',
Policies={
'PasswordPolicy': {
'MinimumLength': 123,
'RequireUppercase': True|False,
'RequireLowercase': True|False,
'RequireNumbers': True|False,
'RequireSymbols': True|False
}
},
LambdaConfig={
'PreSignUp': 'string',
'CustomMessage': 'string',
'PostConfirmation': 'string',
'PreAuthentication': 'string',
'PostAuthentication': 'string',
'DefineAuthChallenge': 'string',
'CreateAuthChallenge': 'string',
'VerifyAuthChallengeResponse': 'string'
},
AutoVerifiedAttributes=[
'phone_number'|'email',
],
SmsVerificationMessage='string',
EmailVerificationMessage='string',
EmailVerificationSubject='string',
VerificationMessageTemplate={
'SmsMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string',
'EmailMessageByLink': 'string',
'EmailSubjectByLink': 'string',
'DefaultEmailOption': 'CONFIRM_WITH_LINK'|'CONFIRM_WITH_CODE'
},
SmsAuthenticationMessage='string',
MfaConfiguration='OFF'|'ON'|'OPTIONAL',
DeviceConfiguration={
'ChallengeRequiredOnNewDevice': True|False,
'DeviceOnlyRememberedOnUserPrompt': True|False
},
EmailConfiguration={
'SourceArn': 'string',
'ReplyToEmailAddress': 'string'
},
SmsConfiguration={
'SnsCallerArn': 'string',
'ExternalId': 'string'
},
UserPoolTags={
'string': 'string'
},
AdminCreateUserConfig={
'AllowAdminCreateUserOnly': True|False,
'UnusedAccountValidityDays': 123,
'InviteMessageTemplate': {
'SMSMessage': 'string',
'EmailMessage': 'string',
'EmailSubject': 'string'
}
}
)
string
[REQUIRED]
The user pool ID for the user pool you want to update.
dict
A container with the policies you wish to update in a user pool.
PasswordPolicy (dict) --
A container for information about the user pool password policy.
MinimumLength (integer) --
The minimum length of the password policy that you have set. Cannot be less than 6.
RequireUppercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one uppercase letter in their password.
RequireLowercase (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one lowercase letter in their password.
RequireNumbers (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one number in their password.
RequireSymbols (boolean) --
In the password policy that you have set, refers to whether you have required users to use at least one symbol in their password.
dict
The AWS Lambda configuration information from the request to update the user pool.
PreSignUp (string) --
A pre-registration AWS Lambda trigger.
CustomMessage (string) --
A custom Message AWS Lambda trigger.
PostConfirmation (string) --
A post-confirmation AWS Lambda trigger.
PreAuthentication (string) --
A pre-authentication AWS Lambda trigger.
PostAuthentication (string) --
A post-authentication AWS Lambda trigger.
DefineAuthChallenge (string) --
Defines the authentication challenge.
CreateAuthChallenge (string) --
Creates an authentication challenge.
VerifyAuthChallengeResponse (string) --
Verifies the authentication challenge response.
list
The attributes that are automatically verified when the Amazon Cognito service makes a request to update user pools.
(string) --
string
A container with information about the SMS verification message.
string
The contents of the email verification message.
string
The subject of the email verification message.
dict
The template for verification messages.
SmsMessage (string) --
The SMS message template.
EmailMessage (string) --
The email message template.
EmailSubject (string) --
The subject line for the email message template.
EmailMessageByLink (string) --
The email message template for sending a confirmation link to the user.
EmailSubjectByLink (string) --
The subject line for the email message template for sending a confirmation link to the user.
DefaultEmailOption (string) --
The default email option.
string
The contents of the SMS authentication message.
string
Can be one of the following values:
OFF - MFA tokens are not required and cannot be specified during user registration.
ON - MFA tokens are required for all user registrations. You can only specify required when you are initially creating a user pool.
OPTIONAL - Users have the option when registering to create an MFA token.
dict
Device configuration.
ChallengeRequiredOnNewDevice (boolean) --
Indicates whether a challenge is required on a new device. Only applicable to a new device.
DeviceOnlyRememberedOnUserPrompt (boolean) --
If true, a device is only remembered on user prompt.
dict
Email configuration.
SourceArn (string) --
The Amazon Resource Name (ARN) of the email source.
ReplyToEmailAddress (string) --
The REPLY-TO email address.
dict
SMS configuration.
SnsCallerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) caller.
ExternalId (string) --
The external ID.
dict
The cost allocation tags for the user pool. For more information, see Adding Cost Allocation Tags to Your User Pool
(string) --
(string) --
dict
The configuration for AdminCreateUser requests.
AllowAdminCreateUserOnly (boolean) --
Set to True if only the administrator is allowed to create user profiles. Set to False if users can sign themselves up via an app.
UnusedAccountValidityDays (integer) --
The user account expiration limit, in days, after which the account is no longer usable. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter. The default value for this parameter is 7.
InviteMessageTemplate (dict) --
The message template to be used for the welcome message to new users.
SMSMessage (string) --
The message template for SMS messages.
EmailMessage (string) --
The message template for email messages.
EmailSubject (string) --
The subject line for email messages.
dict
Response Syntax
{}
Response Structure
(dict) --
Represents the response from the server when you make a request to update the user pool.