cognito

package
v1.6.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 4, 2024 License: Apache-2.0 Imports: 8 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type IdentityPool 

type IdentityPool struct {
	pulumi.CustomResourceState

	// Enables the Basic (Classic) authentication flow.
	AllowClassicFlow pulumi.BoolPtrOutput `pulumi:"allowClassicFlow"`
	// Specifies whether the identity pool supports unauthenticated logins.
	AllowUnauthenticatedIdentities pulumi.BoolOutput   `pulumi:"allowUnauthenticatedIdentities"`
	AwsId                          pulumi.StringOutput `pulumi:"awsId"`
	// The events to configure.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.
	CognitoEvents pulumi.AnyOutput `pulumi:"cognitoEvents"`
	// The Amazon Cognito user pools and their client IDs.
	CognitoIdentityProviders IdentityPoolCognitoIdentityProviderArrayOutput `pulumi:"cognitoIdentityProviders"`
	// Configuration options for configuring Amazon Cognito streams.
	CognitoStreams IdentityPoolCognitoStreamsPtrOutput `pulumi:"cognitoStreams"`
	// The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 100
	DeveloperProviderName pulumi.StringPtrOutput `pulumi:"developerProviderName"`
	// The name of your Amazon Cognito identity pool.
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 128
	//
	// *Pattern* : `[\w\s+=,.@-]+`
	IdentityPoolName pulumi.StringPtrOutput `pulumi:"identityPoolName"`
	// An array of key-value pairs to apply to this resource.
	IdentityPoolTags aws.TagArrayOutput `pulumi:"identityPoolTags"`
	// The name of the Amazon Cognito identity pool, returned as a string.
	Name pulumi.StringOutput `pulumi:"name"`
	// The Amazon Resource Names (ARNs) of the OpenID connect providers.
	OpenIdConnectProviderArns pulumi.StringArrayOutput `pulumi:"openIdConnectProviderArns"`
	// The configuration options to be applied to the identity pool.
	PushSync IdentityPoolPushSyncPtrOutput `pulumi:"pushSync"`
	// The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.
	SamlProviderArns pulumi.StringArrayOutput `pulumi:"samlProviderArns"`
	// Key-value pairs that map provider names to provider app IDs.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.
	SupportedLoginProviders pulumi.AnyOutput `pulumi:"supportedLoginProviders"`
}

Resource Type definition for AWS::Cognito::IdentityPool

func GetIdentityPool 

func GetIdentityPool(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IdentityPoolState, opts ...pulumi.ResourceOption) (*IdentityPool, error)

GetIdentityPool gets an existing IdentityPool resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIdentityPool 

func NewIdentityPool(ctx *pulumi.Context,
	name string, args *IdentityPoolArgs, opts ...pulumi.ResourceOption) (*IdentityPool, error)

NewIdentityPool registers a new resource with the given unique name, arguments, and options.

func (*IdentityPool) ElementType 

func (*IdentityPool) ElementType() reflect.Type

func (*IdentityPool) ToIdentityPoolOutput 

func (i *IdentityPool) ToIdentityPoolOutput() IdentityPoolOutput

func (*IdentityPool) ToIdentityPoolOutputWithContext 

func (i *IdentityPool) ToIdentityPoolOutputWithContext(ctx context.Context) IdentityPoolOutput

type IdentityPoolArgs 

type IdentityPoolArgs struct {
	// Enables the Basic (Classic) authentication flow.
	AllowClassicFlow pulumi.BoolPtrInput
	// Specifies whether the identity pool supports unauthenticated logins.
	AllowUnauthenticatedIdentities pulumi.BoolInput
	// The events to configure.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.
	CognitoEvents pulumi.Input
	// The Amazon Cognito user pools and their client IDs.
	CognitoIdentityProviders IdentityPoolCognitoIdentityProviderArrayInput
	// Configuration options for configuring Amazon Cognito streams.
	CognitoStreams IdentityPoolCognitoStreamsPtrInput
	// The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 100
	DeveloperProviderName pulumi.StringPtrInput
	// The name of your Amazon Cognito identity pool.
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 128
	//
	// *Pattern* : `[\w\s+=,.@-]+`
	IdentityPoolName pulumi.StringPtrInput
	// An array of key-value pairs to apply to this resource.
	IdentityPoolTags aws.TagArrayInput
	// The Amazon Resource Names (ARNs) of the OpenID connect providers.
	OpenIdConnectProviderArns pulumi.StringArrayInput
	// The configuration options to be applied to the identity pool.
	PushSync IdentityPoolPushSyncPtrInput
	// The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.
	SamlProviderArns pulumi.StringArrayInput
	// Key-value pairs that map provider names to provider app IDs.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.
	SupportedLoginProviders pulumi.Input
}

The set of arguments for constructing a IdentityPool resource.

func (IdentityPoolArgs) ElementType 

func (IdentityPoolArgs) ElementType() reflect.Type

type IdentityPoolCognitoIdentityProvider 

type IdentityPoolCognitoIdentityProvider struct {
	// The client ID for the Amazon Cognito user pool.
	ClientId string `pulumi:"clientId"`
	// The provider name for an Amazon Cognito user pool. For example: `cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789` .
	ProviderName string `pulumi:"providerName"`
	// TRUE if server-side token validation is enabled for the identity provider’s token.
	//
	// After you set the `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.
	//
	// If the user is signed out or deleted, the identity pool returns a 400 Not Authorized error.
	ServerSideTokenCheck *bool `pulumi:"serverSideTokenCheck"`
}

type IdentityPoolCognitoIdentityProviderArgs 

type IdentityPoolCognitoIdentityProviderArgs struct {
	// The client ID for the Amazon Cognito user pool.
	ClientId pulumi.StringInput `pulumi:"clientId"`
	// The provider name for an Amazon Cognito user pool. For example: `cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789` .
	ProviderName pulumi.StringInput `pulumi:"providerName"`
	// TRUE if server-side token validation is enabled for the identity provider’s token.
	//
	// After you set the `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.
	//
	// If the user is signed out or deleted, the identity pool returns a 400 Not Authorized error.
	ServerSideTokenCheck pulumi.BoolPtrInput `pulumi:"serverSideTokenCheck"`
}

func (IdentityPoolCognitoIdentityProviderArgs) ElementType 

func (IdentityPoolCognitoIdentityProviderArgs) ElementType() reflect.Type

func (IdentityPoolCognitoIdentityProviderArgs) ToIdentityPoolCognitoIdentityProviderOutput 

func (i IdentityPoolCognitoIdentityProviderArgs) ToIdentityPoolCognitoIdentityProviderOutput() IdentityPoolCognitoIdentityProviderOutput

func (IdentityPoolCognitoIdentityProviderArgs) ToIdentityPoolCognitoIdentityProviderOutputWithContext 

func (i IdentityPoolCognitoIdentityProviderArgs) ToIdentityPoolCognitoIdentityProviderOutputWithContext(ctx context.Context) IdentityPoolCognitoIdentityProviderOutput

type IdentityPoolCognitoIdentityProviderArray 

type IdentityPoolCognitoIdentityProviderArray []IdentityPoolCognitoIdentityProviderInput

func (IdentityPoolCognitoIdentityProviderArray) ElementType 

func (IdentityPoolCognitoIdentityProviderArray) ElementType() reflect.Type

func (IdentityPoolCognitoIdentityProviderArray) ToIdentityPoolCognitoIdentityProviderArrayOutput 

func (i IdentityPoolCognitoIdentityProviderArray) ToIdentityPoolCognitoIdentityProviderArrayOutput() IdentityPoolCognitoIdentityProviderArrayOutput

func (IdentityPoolCognitoIdentityProviderArray) ToIdentityPoolCognitoIdentityProviderArrayOutputWithContext 

func (i IdentityPoolCognitoIdentityProviderArray) ToIdentityPoolCognitoIdentityProviderArrayOutputWithContext(ctx context.Context) IdentityPoolCognitoIdentityProviderArrayOutput

type IdentityPoolCognitoIdentityProviderArrayInput 

type IdentityPoolCognitoIdentityProviderArrayInput interface {
	pulumi.Input

	ToIdentityPoolCognitoIdentityProviderArrayOutput() IdentityPoolCognitoIdentityProviderArrayOutput
	ToIdentityPoolCognitoIdentityProviderArrayOutputWithContext(context.Context) IdentityPoolCognitoIdentityProviderArrayOutput
}

IdentityPoolCognitoIdentityProviderArrayInput is an input type that accepts IdentityPoolCognitoIdentityProviderArray and IdentityPoolCognitoIdentityProviderArrayOutput values. You can construct a concrete instance of `IdentityPoolCognitoIdentityProviderArrayInput` via: 

IdentityPoolCognitoIdentityProviderArray{ IdentityPoolCognitoIdentityProviderArgs{...} }

type IdentityPoolCognitoIdentityProviderArrayOutput 

type IdentityPoolCognitoIdentityProviderArrayOutput struct{ *pulumi.OutputState }

func (IdentityPoolCognitoIdentityProviderArrayOutput) ElementType 

func (IdentityPoolCognitoIdentityProviderArrayOutput) ElementType() reflect.Type

func (IdentityPoolCognitoIdentityProviderArrayOutput) Index 

func (o IdentityPoolCognitoIdentityProviderArrayOutput) Index(i pulumi.IntInput) IdentityPoolCognitoIdentityProviderOutput

func (IdentityPoolCognitoIdentityProviderArrayOutput) ToIdentityPoolCognitoIdentityProviderArrayOutput 

func (o IdentityPoolCognitoIdentityProviderArrayOutput) ToIdentityPoolCognitoIdentityProviderArrayOutput() IdentityPoolCognitoIdentityProviderArrayOutput

func (IdentityPoolCognitoIdentityProviderArrayOutput) ToIdentityPoolCognitoIdentityProviderArrayOutputWithContext 

func (o IdentityPoolCognitoIdentityProviderArrayOutput) ToIdentityPoolCognitoIdentityProviderArrayOutputWithContext(ctx context.Context) IdentityPoolCognitoIdentityProviderArrayOutput

type IdentityPoolCognitoIdentityProviderInput 

type IdentityPoolCognitoIdentityProviderInput interface {
	pulumi.Input

	ToIdentityPoolCognitoIdentityProviderOutput() IdentityPoolCognitoIdentityProviderOutput
	ToIdentityPoolCognitoIdentityProviderOutputWithContext(context.Context) IdentityPoolCognitoIdentityProviderOutput
}

IdentityPoolCognitoIdentityProviderInput is an input type that accepts IdentityPoolCognitoIdentityProviderArgs and IdentityPoolCognitoIdentityProviderOutput values. You can construct a concrete instance of `IdentityPoolCognitoIdentityProviderInput` via: 

IdentityPoolCognitoIdentityProviderArgs{...}

type IdentityPoolCognitoIdentityProviderOutput 

type IdentityPoolCognitoIdentityProviderOutput struct{ *pulumi.OutputState }

func (IdentityPoolCognitoIdentityProviderOutput) ClientId 

func (o IdentityPoolCognitoIdentityProviderOutput) ClientId() pulumi.StringOutput

The client ID for the Amazon Cognito user pool.

func (IdentityPoolCognitoIdentityProviderOutput) ElementType 

func (IdentityPoolCognitoIdentityProviderOutput) ElementType() reflect.Type

func (IdentityPoolCognitoIdentityProviderOutput) ProviderName 

func (o IdentityPoolCognitoIdentityProviderOutput) ProviderName() pulumi.StringOutput

The provider name for an Amazon Cognito user pool. For example: `cognito-idp.us-east-2.amazonaws.com/us-east-2_123456789` .

func (IdentityPoolCognitoIdentityProviderOutput) ServerSideTokenCheck 

func (o IdentityPoolCognitoIdentityProviderOutput) ServerSideTokenCheck() pulumi.BoolPtrOutput

TRUE if server-side token validation is enabled for the identity provider’s token.

After you set the `ServerSideTokenCheck` to TRUE for an identity pool, that identity pool checks with the integrated user pools to make sure the user has not been globally signed out or deleted before the identity pool provides an OIDC token or AWS credentials for the user.

If the user is signed out or deleted, the identity pool returns a 400 Not Authorized error.

func (IdentityPoolCognitoIdentityProviderOutput) ToIdentityPoolCognitoIdentityProviderOutput 

func (o IdentityPoolCognitoIdentityProviderOutput) ToIdentityPoolCognitoIdentityProviderOutput() IdentityPoolCognitoIdentityProviderOutput

func (IdentityPoolCognitoIdentityProviderOutput) ToIdentityPoolCognitoIdentityProviderOutputWithContext 

func (o IdentityPoolCognitoIdentityProviderOutput) ToIdentityPoolCognitoIdentityProviderOutputWithContext(ctx context.Context) IdentityPoolCognitoIdentityProviderOutput

type IdentityPoolCognitoStreams 

type IdentityPoolCognitoStreams struct {
	// The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream.
	RoleArn *string `pulumi:"roleArn"`
	// The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool.
	StreamName *string `pulumi:"streamName"`
	// Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` .
	StreamingStatus *string `pulumi:"streamingStatus"`
}

type IdentityPoolCognitoStreamsArgs 

type IdentityPoolCognitoStreamsArgs struct {
	// The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream.
	RoleArn pulumi.StringPtrInput `pulumi:"roleArn"`
	// The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool.
	StreamName pulumi.StringPtrInput `pulumi:"streamName"`
	// Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` .
	StreamingStatus pulumi.StringPtrInput `pulumi:"streamingStatus"`
}

func (IdentityPoolCognitoStreamsArgs) ElementType 

func (IdentityPoolCognitoStreamsArgs) ElementType() reflect.Type

func (IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsOutput 

func (i IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsOutput() IdentityPoolCognitoStreamsOutput

func (IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsOutputWithContext 

func (i IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsOutputWithContext(ctx context.Context) IdentityPoolCognitoStreamsOutput

func (IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsPtrOutput 

func (i IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsPtrOutput() IdentityPoolCognitoStreamsPtrOutput

func (IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsPtrOutputWithContext 

func (i IdentityPoolCognitoStreamsArgs) ToIdentityPoolCognitoStreamsPtrOutputWithContext(ctx context.Context) IdentityPoolCognitoStreamsPtrOutput

type IdentityPoolCognitoStreamsInput 

type IdentityPoolCognitoStreamsInput interface {
	pulumi.Input

	ToIdentityPoolCognitoStreamsOutput() IdentityPoolCognitoStreamsOutput
	ToIdentityPoolCognitoStreamsOutputWithContext(context.Context) IdentityPoolCognitoStreamsOutput
}

IdentityPoolCognitoStreamsInput is an input type that accepts IdentityPoolCognitoStreamsArgs and IdentityPoolCognitoStreamsOutput values. You can construct a concrete instance of `IdentityPoolCognitoStreamsInput` via: 

IdentityPoolCognitoStreamsArgs{...}

type IdentityPoolCognitoStreamsOutput 

type IdentityPoolCognitoStreamsOutput struct{ *pulumi.OutputState }

func (IdentityPoolCognitoStreamsOutput) ElementType 

func (IdentityPoolCognitoStreamsOutput) ElementType() reflect.Type

func (IdentityPoolCognitoStreamsOutput) RoleArn 

func (o IdentityPoolCognitoStreamsOutput) RoleArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream.

func (IdentityPoolCognitoStreamsOutput) StreamName 

func (o IdentityPoolCognitoStreamsOutput) StreamName() pulumi.StringPtrOutput

The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool.

func (IdentityPoolCognitoStreamsOutput) StreamingStatus 

func (o IdentityPoolCognitoStreamsOutput) StreamingStatus() pulumi.StringPtrOutput

Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` .

func (IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsOutput 

func (o IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsOutput() IdentityPoolCognitoStreamsOutput

func (IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsOutputWithContext 

func (o IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsOutputWithContext(ctx context.Context) IdentityPoolCognitoStreamsOutput

func (IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsPtrOutput 

func (o IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsPtrOutput() IdentityPoolCognitoStreamsPtrOutput

func (IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsPtrOutputWithContext 

func (o IdentityPoolCognitoStreamsOutput) ToIdentityPoolCognitoStreamsPtrOutputWithContext(ctx context.Context) IdentityPoolCognitoStreamsPtrOutput

type IdentityPoolCognitoStreamsPtrInput 

type IdentityPoolCognitoStreamsPtrInput interface {
	pulumi.Input

	ToIdentityPoolCognitoStreamsPtrOutput() IdentityPoolCognitoStreamsPtrOutput
	ToIdentityPoolCognitoStreamsPtrOutputWithContext(context.Context) IdentityPoolCognitoStreamsPtrOutput
}

IdentityPoolCognitoStreamsPtrInput is an input type that accepts IdentityPoolCognitoStreamsArgs, IdentityPoolCognitoStreamsPtr and IdentityPoolCognitoStreamsPtrOutput values. You can construct a concrete instance of `IdentityPoolCognitoStreamsPtrInput` via: 

        IdentityPoolCognitoStreamsArgs{...}

or:

        nil

func IdentityPoolCognitoStreamsPtr 

func IdentityPoolCognitoStreamsPtr(v *IdentityPoolCognitoStreamsArgs) IdentityPoolCognitoStreamsPtrInput

type IdentityPoolCognitoStreamsPtrOutput 

type IdentityPoolCognitoStreamsPtrOutput struct{ *pulumi.OutputState }

func (IdentityPoolCognitoStreamsPtrOutput) Elem 

func (o IdentityPoolCognitoStreamsPtrOutput) Elem() IdentityPoolCognitoStreamsOutput

func (IdentityPoolCognitoStreamsPtrOutput) ElementType 

func (IdentityPoolCognitoStreamsPtrOutput) ElementType() reflect.Type

func (IdentityPoolCognitoStreamsPtrOutput) RoleArn 

func (o IdentityPoolCognitoStreamsPtrOutput) RoleArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the role Amazon Cognito can assume to publish to the stream. This role must grant access to Amazon Cognito (cognito-sync) to invoke `PutRecord` on your Amazon Cognito stream.

func (IdentityPoolCognitoStreamsPtrOutput) StreamName 

func (o IdentityPoolCognitoStreamsPtrOutput) StreamName() pulumi.StringPtrOutput

The name of the Amazon Cognito stream to receive updates. This stream must be in the developer's account and in the same Region as the identity pool.

func (IdentityPoolCognitoStreamsPtrOutput) StreamingStatus 

func (o IdentityPoolCognitoStreamsPtrOutput) StreamingStatus() pulumi.StringPtrOutput

Status of the Amazon Cognito streams. Valid values are: `ENABLED` or `DISABLED` .

func (IdentityPoolCognitoStreamsPtrOutput) ToIdentityPoolCognitoStreamsPtrOutput 

func (o IdentityPoolCognitoStreamsPtrOutput) ToIdentityPoolCognitoStreamsPtrOutput() IdentityPoolCognitoStreamsPtrOutput

func (IdentityPoolCognitoStreamsPtrOutput) ToIdentityPoolCognitoStreamsPtrOutputWithContext 

func (o IdentityPoolCognitoStreamsPtrOutput) ToIdentityPoolCognitoStreamsPtrOutputWithContext(ctx context.Context) IdentityPoolCognitoStreamsPtrOutput

type IdentityPoolInput 

type IdentityPoolInput interface {
	pulumi.Input

	ToIdentityPoolOutput() IdentityPoolOutput
	ToIdentityPoolOutputWithContext(ctx context.Context) IdentityPoolOutput
}

type IdentityPoolOutput 

type IdentityPoolOutput struct{ *pulumi.OutputState }

func (IdentityPoolOutput) AllowClassicFlow added in v0.17.0 

func (o IdentityPoolOutput) AllowClassicFlow() pulumi.BoolPtrOutput

Enables the Basic (Classic) authentication flow.

func (IdentityPoolOutput) AllowUnauthenticatedIdentities added in v0.17.0 

func (o IdentityPoolOutput) AllowUnauthenticatedIdentities() pulumi.BoolOutput

Specifies whether the identity pool supports unauthenticated logins.

func (IdentityPoolOutput) AwsId added in v0.99.0 

func (o IdentityPoolOutput) AwsId() pulumi.StringOutput

func (IdentityPoolOutput) CognitoEvents added in v0.17.0 

func (o IdentityPoolOutput) CognitoEvents() pulumi.AnyOutput

The events to configure.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.

func (IdentityPoolOutput) CognitoIdentityProviders added in v0.17.0 

func (o IdentityPoolOutput) CognitoIdentityProviders() IdentityPoolCognitoIdentityProviderArrayOutput

The Amazon Cognito user pools and their client IDs.

func (IdentityPoolOutput) CognitoStreams added in v0.17.0 

func (o IdentityPoolOutput) CognitoStreams() IdentityPoolCognitoStreamsPtrOutput

Configuration options for configuring Amazon Cognito streams.

func (IdentityPoolOutput) DeveloperProviderName added in v0.17.0 

func (o IdentityPoolOutput) DeveloperProviderName() pulumi.StringPtrOutput

The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).

*Minimum length* : 1

*Maximum length* : 100

func (IdentityPoolOutput) ElementType 

func (IdentityPoolOutput) ElementType() reflect.Type

func (IdentityPoolOutput) IdentityPoolName added in v0.17.0 

func (o IdentityPoolOutput) IdentityPoolName() pulumi.StringPtrOutput

The name of your Amazon Cognito identity pool.

*Minimum length* : 1

*Maximum length* : 128

*Pattern* : `[\w\s+=,.@-]+`

func (IdentityPoolOutput) IdentityPoolTags added in v0.81.0 

func (o IdentityPoolOutput) IdentityPoolTags() aws.TagArrayOutput

An array of key-value pairs to apply to this resource.

func (IdentityPoolOutput) Name added in v0.17.0 

func (o IdentityPoolOutput) Name() pulumi.StringOutput

The name of the Amazon Cognito identity pool, returned as a string.

func (IdentityPoolOutput) OpenIdConnectProviderArns added in v0.72.0 

func (o IdentityPoolOutput) OpenIdConnectProviderArns() pulumi.StringArrayOutput

The Amazon Resource Names (ARNs) of the OpenID connect providers.

func (IdentityPoolOutput) PushSync added in v0.17.0 

func (o IdentityPoolOutput) PushSync() IdentityPoolPushSyncPtrOutput

The configuration options to be applied to the identity pool.

func (IdentityPoolOutput) SamlProviderArns added in v0.72.0 

func (o IdentityPoolOutput) SamlProviderArns() pulumi.StringArrayOutput

The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.

func (IdentityPoolOutput) SupportedLoginProviders added in v0.17.0 

func (o IdentityPoolOutput) SupportedLoginProviders() pulumi.AnyOutput

Key-value pairs that map provider names to provider app IDs.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.

func (IdentityPoolOutput) ToIdentityPoolOutput 

func (o IdentityPoolOutput) ToIdentityPoolOutput() IdentityPoolOutput

func (IdentityPoolOutput) ToIdentityPoolOutputWithContext 

func (o IdentityPoolOutput) ToIdentityPoolOutputWithContext(ctx context.Context) IdentityPoolOutput

type IdentityPoolPrincipalTag added in v0.64.0 

type IdentityPoolPrincipalTag struct {
	pulumi.CustomResourceState

	// The identity pool that you want to associate with this principal tag map.
	IdentityPoolId pulumi.StringOutput `pulumi:"identityPoolId"`
	// The identity pool identity provider (IdP) that you want to associate with this principal tag map.
	IdentityProviderName pulumi.StringOutput `pulumi:"identityProviderName"`
	// A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property.
	PrincipalTags pulumi.AnyOutput `pulumi:"principalTags"`
	// Use a default set of mappings between claims and tags for this provider, instead of a custom map.
	UseDefaults pulumi.BoolPtrOutput `pulumi:"useDefaults"`
}

Resource Type definition for AWS::Cognito::IdentityPoolPrincipalTag

func GetIdentityPoolPrincipalTag added in v0.64.0 

func GetIdentityPoolPrincipalTag(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IdentityPoolPrincipalTagState, opts ...pulumi.ResourceOption) (*IdentityPoolPrincipalTag, error)

GetIdentityPoolPrincipalTag gets an existing IdentityPoolPrincipalTag resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIdentityPoolPrincipalTag added in v0.64.0 

func NewIdentityPoolPrincipalTag(ctx *pulumi.Context,
	name string, args *IdentityPoolPrincipalTagArgs, opts ...pulumi.ResourceOption) (*IdentityPoolPrincipalTag, error)

NewIdentityPoolPrincipalTag registers a new resource with the given unique name, arguments, and options.

func (*IdentityPoolPrincipalTag) ElementType added in v0.64.0 

func (*IdentityPoolPrincipalTag) ElementType() reflect.Type

func (*IdentityPoolPrincipalTag) ToIdentityPoolPrincipalTagOutput added in v0.64.0 

func (i *IdentityPoolPrincipalTag) ToIdentityPoolPrincipalTagOutput() IdentityPoolPrincipalTagOutput

func (*IdentityPoolPrincipalTag) ToIdentityPoolPrincipalTagOutputWithContext added in v0.64.0 

func (i *IdentityPoolPrincipalTag) ToIdentityPoolPrincipalTagOutputWithContext(ctx context.Context) IdentityPoolPrincipalTagOutput

type IdentityPoolPrincipalTagArgs added in v0.64.0 

type IdentityPoolPrincipalTagArgs struct {
	// The identity pool that you want to associate with this principal tag map.
	IdentityPoolId pulumi.StringInput
	// The identity pool identity provider (IdP) that you want to associate with this principal tag map.
	IdentityProviderName pulumi.StringInput
	// A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property.
	PrincipalTags pulumi.Input
	// Use a default set of mappings between claims and tags for this provider, instead of a custom map.
	UseDefaults pulumi.BoolPtrInput
}

The set of arguments for constructing a IdentityPoolPrincipalTag resource.

func (IdentityPoolPrincipalTagArgs) ElementType added in v0.64.0 

func (IdentityPoolPrincipalTagArgs) ElementType() reflect.Type

type IdentityPoolPrincipalTagInput added in v0.64.0 

type IdentityPoolPrincipalTagInput interface {
	pulumi.Input

	ToIdentityPoolPrincipalTagOutput() IdentityPoolPrincipalTagOutput
	ToIdentityPoolPrincipalTagOutputWithContext(ctx context.Context) IdentityPoolPrincipalTagOutput
}

type IdentityPoolPrincipalTagOutput added in v0.64.0 

type IdentityPoolPrincipalTagOutput struct{ *pulumi.OutputState }

func (IdentityPoolPrincipalTagOutput) ElementType added in v0.64.0 

func (IdentityPoolPrincipalTagOutput) ElementType() reflect.Type

func (IdentityPoolPrincipalTagOutput) IdentityPoolId added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) IdentityPoolId() pulumi.StringOutput

The identity pool that you want to associate with this principal tag map.

func (IdentityPoolPrincipalTagOutput) IdentityProviderName added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) IdentityProviderName() pulumi.StringOutput

The identity pool identity provider (IdP) that you want to associate with this principal tag map.

func (IdentityPoolPrincipalTagOutput) PrincipalTags added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) PrincipalTags() pulumi.AnyOutput

A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property.

func (IdentityPoolPrincipalTagOutput) ToIdentityPoolPrincipalTagOutput added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) ToIdentityPoolPrincipalTagOutput() IdentityPoolPrincipalTagOutput

func (IdentityPoolPrincipalTagOutput) ToIdentityPoolPrincipalTagOutputWithContext added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) ToIdentityPoolPrincipalTagOutputWithContext(ctx context.Context) IdentityPoolPrincipalTagOutput

func (IdentityPoolPrincipalTagOutput) UseDefaults added in v0.64.0 

func (o IdentityPoolPrincipalTagOutput) UseDefaults() pulumi.BoolPtrOutput

Use a default set of mappings between claims and tags for this provider, instead of a custom map.

type IdentityPoolPrincipalTagState added in v0.64.0 

type IdentityPoolPrincipalTagState struct {
}

func (IdentityPoolPrincipalTagState) ElementType added in v0.64.0 

func (IdentityPoolPrincipalTagState) ElementType() reflect.Type

type IdentityPoolPushSync 

type IdentityPoolPushSync struct {
	// The ARNs of the Amazon SNS platform applications that could be used by clients.
	ApplicationArns []string `pulumi:"applicationArns"`
	// An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer.
	RoleArn *string `pulumi:"roleArn"`
}

type IdentityPoolPushSyncArgs 

type IdentityPoolPushSyncArgs struct {
	// The ARNs of the Amazon SNS platform applications that could be used by clients.
	ApplicationArns pulumi.StringArrayInput `pulumi:"applicationArns"`
	// An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer.
	RoleArn pulumi.StringPtrInput `pulumi:"roleArn"`
}

func (IdentityPoolPushSyncArgs) ElementType 

func (IdentityPoolPushSyncArgs) ElementType() reflect.Type

func (IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncOutput 

func (i IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncOutput() IdentityPoolPushSyncOutput

func (IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncOutputWithContext 

func (i IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncOutputWithContext(ctx context.Context) IdentityPoolPushSyncOutput

func (IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncPtrOutput 

func (i IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncPtrOutput() IdentityPoolPushSyncPtrOutput

func (IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncPtrOutputWithContext 

func (i IdentityPoolPushSyncArgs) ToIdentityPoolPushSyncPtrOutputWithContext(ctx context.Context) IdentityPoolPushSyncPtrOutput

type IdentityPoolPushSyncInput 

type IdentityPoolPushSyncInput interface {
	pulumi.Input

	ToIdentityPoolPushSyncOutput() IdentityPoolPushSyncOutput
	ToIdentityPoolPushSyncOutputWithContext(context.Context) IdentityPoolPushSyncOutput
}

IdentityPoolPushSyncInput is an input type that accepts IdentityPoolPushSyncArgs and IdentityPoolPushSyncOutput values. You can construct a concrete instance of `IdentityPoolPushSyncInput` via: 

IdentityPoolPushSyncArgs{...}

type IdentityPoolPushSyncOutput 

type IdentityPoolPushSyncOutput struct{ *pulumi.OutputState }

func (IdentityPoolPushSyncOutput) ApplicationArns 

func (o IdentityPoolPushSyncOutput) ApplicationArns() pulumi.StringArrayOutput

The ARNs of the Amazon SNS platform applications that could be used by clients.

func (IdentityPoolPushSyncOutput) ElementType 

func (IdentityPoolPushSyncOutput) ElementType() reflect.Type

func (IdentityPoolPushSyncOutput) RoleArn 

func (o IdentityPoolPushSyncOutput) RoleArn() pulumi.StringPtrOutput

An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer.

func (IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncOutput 

func (o IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncOutput() IdentityPoolPushSyncOutput

func (IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncOutputWithContext 

func (o IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncOutputWithContext(ctx context.Context) IdentityPoolPushSyncOutput

func (IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncPtrOutput 

func (o IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncPtrOutput() IdentityPoolPushSyncPtrOutput

func (IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncPtrOutputWithContext 

func (o IdentityPoolPushSyncOutput) ToIdentityPoolPushSyncPtrOutputWithContext(ctx context.Context) IdentityPoolPushSyncPtrOutput

type IdentityPoolPushSyncPtrInput 

type IdentityPoolPushSyncPtrInput interface {
	pulumi.Input

	ToIdentityPoolPushSyncPtrOutput() IdentityPoolPushSyncPtrOutput
	ToIdentityPoolPushSyncPtrOutputWithContext(context.Context) IdentityPoolPushSyncPtrOutput
}

IdentityPoolPushSyncPtrInput is an input type that accepts IdentityPoolPushSyncArgs, IdentityPoolPushSyncPtr and IdentityPoolPushSyncPtrOutput values. You can construct a concrete instance of `IdentityPoolPushSyncPtrInput` via: 

        IdentityPoolPushSyncArgs{...}

or:

        nil

func IdentityPoolPushSyncPtr 

func IdentityPoolPushSyncPtr(v *IdentityPoolPushSyncArgs) IdentityPoolPushSyncPtrInput

type IdentityPoolPushSyncPtrOutput 

type IdentityPoolPushSyncPtrOutput struct{ *pulumi.OutputState }

func (IdentityPoolPushSyncPtrOutput) ApplicationArns 

func (o IdentityPoolPushSyncPtrOutput) ApplicationArns() pulumi.StringArrayOutput

The ARNs of the Amazon SNS platform applications that could be used by clients.

func (IdentityPoolPushSyncPtrOutput) Elem 

func (o IdentityPoolPushSyncPtrOutput) Elem() IdentityPoolPushSyncOutput

func (IdentityPoolPushSyncPtrOutput) ElementType 

func (IdentityPoolPushSyncPtrOutput) ElementType() reflect.Type

func (IdentityPoolPushSyncPtrOutput) RoleArn 

func (o IdentityPoolPushSyncPtrOutput) RoleArn() pulumi.StringPtrOutput

An IAM role configured to allow Amazon Cognito to call Amazon SNS on behalf of the developer.

func (IdentityPoolPushSyncPtrOutput) ToIdentityPoolPushSyncPtrOutput 

func (o IdentityPoolPushSyncPtrOutput) ToIdentityPoolPushSyncPtrOutput() IdentityPoolPushSyncPtrOutput

func (IdentityPoolPushSyncPtrOutput) ToIdentityPoolPushSyncPtrOutputWithContext 

func (o IdentityPoolPushSyncPtrOutput) ToIdentityPoolPushSyncPtrOutputWithContext(ctx context.Context) IdentityPoolPushSyncPtrOutput

type IdentityPoolRoleAttachment 

type IdentityPoolRoleAttachment struct {
	pulumi.CustomResourceState

	// The resource ID.
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// An identity pool ID in the format `REGION:GUID` .
	IdentityPoolId pulumi.StringOutput `pulumi:"identityPoolId"`
	// How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .
	//
	// If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.
	//
	// For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .
	RoleMappings IdentityPoolRoleAttachmentRoleMappingMapOutput `pulumi:"roleMappings"`
	// The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.
	Roles pulumi.StringMapOutput `pulumi:"roles"`
}

Resource Type definition for AWS::Cognito::IdentityPoolRoleAttachment

func GetIdentityPoolRoleAttachment 

func GetIdentityPoolRoleAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *IdentityPoolRoleAttachmentState, opts ...pulumi.ResourceOption) (*IdentityPoolRoleAttachment, error)

GetIdentityPoolRoleAttachment gets an existing IdentityPoolRoleAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewIdentityPoolRoleAttachment 

func NewIdentityPoolRoleAttachment(ctx *pulumi.Context,
	name string, args *IdentityPoolRoleAttachmentArgs, opts ...pulumi.ResourceOption) (*IdentityPoolRoleAttachment, error)

NewIdentityPoolRoleAttachment registers a new resource with the given unique name, arguments, and options.

func (*IdentityPoolRoleAttachment) ElementType 

func (*IdentityPoolRoleAttachment) ElementType() reflect.Type

func (*IdentityPoolRoleAttachment) ToIdentityPoolRoleAttachmentOutput 

func (i *IdentityPoolRoleAttachment) ToIdentityPoolRoleAttachmentOutput() IdentityPoolRoleAttachmentOutput

func (*IdentityPoolRoleAttachment) ToIdentityPoolRoleAttachmentOutputWithContext 

func (i *IdentityPoolRoleAttachment) ToIdentityPoolRoleAttachmentOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentOutput

type IdentityPoolRoleAttachmentArgs 

type IdentityPoolRoleAttachmentArgs struct {
	// An identity pool ID in the format `REGION:GUID` .
	IdentityPoolId pulumi.StringInput
	// How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .
	//
	// If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.
	//
	// For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .
	RoleMappings IdentityPoolRoleAttachmentRoleMappingMapInput
	// The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.
	Roles pulumi.StringMapInput
}

The set of arguments for constructing a IdentityPoolRoleAttachment resource.

func (IdentityPoolRoleAttachmentArgs) ElementType 

func (IdentityPoolRoleAttachmentArgs) ElementType() reflect.Type

type IdentityPoolRoleAttachmentInput 

type IdentityPoolRoleAttachmentInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentOutput() IdentityPoolRoleAttachmentOutput
	ToIdentityPoolRoleAttachmentOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentOutput
}

type IdentityPoolRoleAttachmentMappingRule added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRule struct {
	Claim     string `pulumi:"claim"`
	MatchType string `pulumi:"matchType"`
	RoleArn   string `pulumi:"roleArn"`
	Value     string `pulumi:"value"`
}

type IdentityPoolRoleAttachmentMappingRuleArgs added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleArgs struct {
	Claim     pulumi.StringInput `pulumi:"claim"`
	MatchType pulumi.StringInput `pulumi:"matchType"`
	RoleArn   pulumi.StringInput `pulumi:"roleArn"`
	Value     pulumi.StringInput `pulumi:"value"`
}

func (IdentityPoolRoleAttachmentMappingRuleArgs) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentMappingRuleArgs) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentMappingRuleArgs) ToIdentityPoolRoleAttachmentMappingRuleOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentMappingRuleArgs) ToIdentityPoolRoleAttachmentMappingRuleOutput() IdentityPoolRoleAttachmentMappingRuleOutput

func (IdentityPoolRoleAttachmentMappingRuleArgs) ToIdentityPoolRoleAttachmentMappingRuleOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentMappingRuleArgs) ToIdentityPoolRoleAttachmentMappingRuleOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentMappingRuleOutput

type IdentityPoolRoleAttachmentMappingRuleArray added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleArray []IdentityPoolRoleAttachmentMappingRuleInput

func (IdentityPoolRoleAttachmentMappingRuleArray) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentMappingRuleArray) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentMappingRuleArray) ToIdentityPoolRoleAttachmentMappingRuleArrayOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentMappingRuleArray) ToIdentityPoolRoleAttachmentMappingRuleArrayOutput() IdentityPoolRoleAttachmentMappingRuleArrayOutput

func (IdentityPoolRoleAttachmentMappingRuleArray) ToIdentityPoolRoleAttachmentMappingRuleArrayOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentMappingRuleArray) ToIdentityPoolRoleAttachmentMappingRuleArrayOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentMappingRuleArrayOutput

type IdentityPoolRoleAttachmentMappingRuleArrayInput added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleArrayInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentMappingRuleArrayOutput() IdentityPoolRoleAttachmentMappingRuleArrayOutput
	ToIdentityPoolRoleAttachmentMappingRuleArrayOutputWithContext(context.Context) IdentityPoolRoleAttachmentMappingRuleArrayOutput
}

IdentityPoolRoleAttachmentMappingRuleArrayInput is an input type that accepts IdentityPoolRoleAttachmentMappingRuleArray and IdentityPoolRoleAttachmentMappingRuleArrayOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentMappingRuleArrayInput` via: 

IdentityPoolRoleAttachmentMappingRuleArray{ IdentityPoolRoleAttachmentMappingRuleArgs{...} }

type IdentityPoolRoleAttachmentMappingRuleArrayOutput added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleArrayOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentMappingRuleArrayOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentMappingRuleArrayOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentMappingRuleArrayOutput) Index added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleArrayOutput) Index(i pulumi.IntInput) IdentityPoolRoleAttachmentMappingRuleOutput

func (IdentityPoolRoleAttachmentMappingRuleArrayOutput) ToIdentityPoolRoleAttachmentMappingRuleArrayOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleArrayOutput) ToIdentityPoolRoleAttachmentMappingRuleArrayOutput() IdentityPoolRoleAttachmentMappingRuleArrayOutput

func (IdentityPoolRoleAttachmentMappingRuleArrayOutput) ToIdentityPoolRoleAttachmentMappingRuleArrayOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleArrayOutput) ToIdentityPoolRoleAttachmentMappingRuleArrayOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentMappingRuleArrayOutput

type IdentityPoolRoleAttachmentMappingRuleInput added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentMappingRuleOutput() IdentityPoolRoleAttachmentMappingRuleOutput
	ToIdentityPoolRoleAttachmentMappingRuleOutputWithContext(context.Context) IdentityPoolRoleAttachmentMappingRuleOutput
}

IdentityPoolRoleAttachmentMappingRuleInput is an input type that accepts IdentityPoolRoleAttachmentMappingRuleArgs and IdentityPoolRoleAttachmentMappingRuleOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentMappingRuleInput` via: 

IdentityPoolRoleAttachmentMappingRuleArgs{...}

type IdentityPoolRoleAttachmentMappingRuleOutput added in v0.97.0 

type IdentityPoolRoleAttachmentMappingRuleOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentMappingRuleOutput) Claim added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) Claim() pulumi.StringOutput

func (IdentityPoolRoleAttachmentMappingRuleOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentMappingRuleOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentMappingRuleOutput) MatchType added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) MatchType() pulumi.StringOutput

func (IdentityPoolRoleAttachmentMappingRuleOutput) RoleArn added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) RoleArn() pulumi.StringOutput

func (IdentityPoolRoleAttachmentMappingRuleOutput) ToIdentityPoolRoleAttachmentMappingRuleOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) ToIdentityPoolRoleAttachmentMappingRuleOutput() IdentityPoolRoleAttachmentMappingRuleOutput

func (IdentityPoolRoleAttachmentMappingRuleOutput) ToIdentityPoolRoleAttachmentMappingRuleOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) ToIdentityPoolRoleAttachmentMappingRuleOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentMappingRuleOutput

func (IdentityPoolRoleAttachmentMappingRuleOutput) Value added in v0.97.0 

func (o IdentityPoolRoleAttachmentMappingRuleOutput) Value() pulumi.StringOutput

type IdentityPoolRoleAttachmentOutput 

type IdentityPoolRoleAttachmentOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentOutput) AwsId added in v0.99.0 

func (o IdentityPoolRoleAttachmentOutput) AwsId() pulumi.StringOutput

The resource ID.

func (IdentityPoolRoleAttachmentOutput) ElementType 

func (IdentityPoolRoleAttachmentOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentOutput) IdentityPoolId added in v0.17.0 

func (o IdentityPoolRoleAttachmentOutput) IdentityPoolId() pulumi.StringOutput

An identity pool ID in the format `REGION:GUID` .

func (IdentityPoolRoleAttachmentOutput) RoleMappings added in v0.17.0 

func (o IdentityPoolRoleAttachmentOutput) RoleMappings() IdentityPoolRoleAttachmentRoleMappingMapOutput

How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .

If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.

For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .

func (IdentityPoolRoleAttachmentOutput) Roles added in v0.17.0 

func (o IdentityPoolRoleAttachmentOutput) Roles() pulumi.StringMapOutput

The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.

func (IdentityPoolRoleAttachmentOutput) ToIdentityPoolRoleAttachmentOutput 

func (o IdentityPoolRoleAttachmentOutput) ToIdentityPoolRoleAttachmentOutput() IdentityPoolRoleAttachmentOutput

func (IdentityPoolRoleAttachmentOutput) ToIdentityPoolRoleAttachmentOutputWithContext 

func (o IdentityPoolRoleAttachmentOutput) ToIdentityPoolRoleAttachmentOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentOutput

type IdentityPoolRoleAttachmentRoleMapping added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMapping struct {
	AmbiguousRoleResolution *string                                           `pulumi:"ambiguousRoleResolution"`
	IdentityProvider        *string                                           `pulumi:"identityProvider"`
	RulesConfiguration      *IdentityPoolRoleAttachmentRulesConfigurationType `pulumi:"rulesConfiguration"`
	Type                    string                                            `pulumi:"type"`
}

type IdentityPoolRoleAttachmentRoleMappingArgs added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingArgs struct {
	AmbiguousRoleResolution pulumi.StringPtrInput                                    `pulumi:"ambiguousRoleResolution"`
	IdentityProvider        pulumi.StringPtrInput                                    `pulumi:"identityProvider"`
	RulesConfiguration      IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput `pulumi:"rulesConfiguration"`
	Type                    pulumi.StringInput                                       `pulumi:"type"`
}

func (IdentityPoolRoleAttachmentRoleMappingArgs) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRoleMappingArgs) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRoleMappingArgs) ToIdentityPoolRoleAttachmentRoleMappingOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentRoleMappingArgs) ToIdentityPoolRoleAttachmentRoleMappingOutput() IdentityPoolRoleAttachmentRoleMappingOutput

func (IdentityPoolRoleAttachmentRoleMappingArgs) ToIdentityPoolRoleAttachmentRoleMappingOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentRoleMappingArgs) ToIdentityPoolRoleAttachmentRoleMappingOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRoleMappingOutput

type IdentityPoolRoleAttachmentRoleMappingInput added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentRoleMappingOutput() IdentityPoolRoleAttachmentRoleMappingOutput
	ToIdentityPoolRoleAttachmentRoleMappingOutputWithContext(context.Context) IdentityPoolRoleAttachmentRoleMappingOutput
}

IdentityPoolRoleAttachmentRoleMappingInput is an input type that accepts IdentityPoolRoleAttachmentRoleMappingArgs and IdentityPoolRoleAttachmentRoleMappingOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentRoleMappingInput` via: 

IdentityPoolRoleAttachmentRoleMappingArgs{...}

type IdentityPoolRoleAttachmentRoleMappingMap added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingMap map[string]IdentityPoolRoleAttachmentRoleMappingInput

func (IdentityPoolRoleAttachmentRoleMappingMap) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRoleMappingMap) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRoleMappingMap) ToIdentityPoolRoleAttachmentRoleMappingMapOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentRoleMappingMap) ToIdentityPoolRoleAttachmentRoleMappingMapOutput() IdentityPoolRoleAttachmentRoleMappingMapOutput

func (IdentityPoolRoleAttachmentRoleMappingMap) ToIdentityPoolRoleAttachmentRoleMappingMapOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentRoleMappingMap) ToIdentityPoolRoleAttachmentRoleMappingMapOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRoleMappingMapOutput

type IdentityPoolRoleAttachmentRoleMappingMapInput added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingMapInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentRoleMappingMapOutput() IdentityPoolRoleAttachmentRoleMappingMapOutput
	ToIdentityPoolRoleAttachmentRoleMappingMapOutputWithContext(context.Context) IdentityPoolRoleAttachmentRoleMappingMapOutput
}

IdentityPoolRoleAttachmentRoleMappingMapInput is an input type that accepts IdentityPoolRoleAttachmentRoleMappingMap and IdentityPoolRoleAttachmentRoleMappingMapOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentRoleMappingMapInput` via: 

IdentityPoolRoleAttachmentRoleMappingMap{ "key": IdentityPoolRoleAttachmentRoleMappingArgs{...} }

type IdentityPoolRoleAttachmentRoleMappingMapOutput added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingMapOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentRoleMappingMapOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRoleMappingMapOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRoleMappingMapOutput) MapIndex added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingMapOutput) MapIndex(k pulumi.StringInput) IdentityPoolRoleAttachmentRoleMappingOutput

func (IdentityPoolRoleAttachmentRoleMappingMapOutput) ToIdentityPoolRoleAttachmentRoleMappingMapOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingMapOutput) ToIdentityPoolRoleAttachmentRoleMappingMapOutput() IdentityPoolRoleAttachmentRoleMappingMapOutput

func (IdentityPoolRoleAttachmentRoleMappingMapOutput) ToIdentityPoolRoleAttachmentRoleMappingMapOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingMapOutput) ToIdentityPoolRoleAttachmentRoleMappingMapOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRoleMappingMapOutput

type IdentityPoolRoleAttachmentRoleMappingOutput added in v0.97.0 

type IdentityPoolRoleAttachmentRoleMappingOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentRoleMappingOutput) AmbiguousRoleResolution added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) AmbiguousRoleResolution() pulumi.StringPtrOutput

func (IdentityPoolRoleAttachmentRoleMappingOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRoleMappingOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRoleMappingOutput) IdentityProvider added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) IdentityProvider() pulumi.StringPtrOutput

func (IdentityPoolRoleAttachmentRoleMappingOutput) RulesConfiguration added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) RulesConfiguration() IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

func (IdentityPoolRoleAttachmentRoleMappingOutput) ToIdentityPoolRoleAttachmentRoleMappingOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) ToIdentityPoolRoleAttachmentRoleMappingOutput() IdentityPoolRoleAttachmentRoleMappingOutput

func (IdentityPoolRoleAttachmentRoleMappingOutput) ToIdentityPoolRoleAttachmentRoleMappingOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) ToIdentityPoolRoleAttachmentRoleMappingOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRoleMappingOutput

func (IdentityPoolRoleAttachmentRoleMappingOutput) Type added in v0.97.0 

func (o IdentityPoolRoleAttachmentRoleMappingOutput) Type() pulumi.StringOutput

type IdentityPoolRoleAttachmentRulesConfigurationType added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationType struct {
	Rules []IdentityPoolRoleAttachmentMappingRule `pulumi:"rules"`
}

type IdentityPoolRoleAttachmentRulesConfigurationTypeArgs added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationTypeArgs struct {
	Rules IdentityPoolRoleAttachmentMappingRuleArrayInput `pulumi:"rules"`
}

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutput() IdentityPoolRoleAttachmentRulesConfigurationTypeOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypeOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput added in v0.97.0 

func (i IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput() IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext added in v0.97.0 

func (i IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

type IdentityPoolRoleAttachmentRulesConfigurationTypeInput added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationTypeInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutput() IdentityPoolRoleAttachmentRulesConfigurationTypeOutput
	ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutputWithContext(context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypeOutput
}

IdentityPoolRoleAttachmentRulesConfigurationTypeInput is an input type that accepts IdentityPoolRoleAttachmentRulesConfigurationTypeArgs and IdentityPoolRoleAttachmentRulesConfigurationTypeOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentRulesConfigurationTypeInput` via: 

IdentityPoolRoleAttachmentRulesConfigurationTypeArgs{...}

type IdentityPoolRoleAttachmentRulesConfigurationTypeOutput added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationTypeOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) Rules added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) Rules() IdentityPoolRoleAttachmentMappingRuleArrayOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutput() IdentityPoolRoleAttachmentRulesConfigurationTypeOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypeOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypeOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput() IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypeOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

type IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput interface {
	pulumi.Input

	ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput() IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput
	ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext(context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput
}

IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput is an input type that accepts IdentityPoolRoleAttachmentRulesConfigurationTypeArgs, IdentityPoolRoleAttachmentRulesConfigurationTypePtr and IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput values. You can construct a concrete instance of `IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput` via: 

        IdentityPoolRoleAttachmentRulesConfigurationTypeArgs{...}

or:

        nil

func IdentityPoolRoleAttachmentRulesConfigurationTypePtr added in v0.97.0 

func IdentityPoolRoleAttachmentRulesConfigurationTypePtr(v *IdentityPoolRoleAttachmentRulesConfigurationTypeArgs) IdentityPoolRoleAttachmentRulesConfigurationTypePtrInput

type IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput added in v0.97.0 

type IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) Elem added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) Elem() IdentityPoolRoleAttachmentRulesConfigurationTypeOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ElementType added in v0.97.0 

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ElementType() reflect.Type

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) Rules added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) Rules() IdentityPoolRoleAttachmentMappingRuleArrayOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput() IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

func (IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext added in v0.97.0 

func (o IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput) ToIdentityPoolRoleAttachmentRulesConfigurationTypePtrOutputWithContext(ctx context.Context) IdentityPoolRoleAttachmentRulesConfigurationTypePtrOutput

type IdentityPoolRoleAttachmentState 

type IdentityPoolRoleAttachmentState struct {
}

func (IdentityPoolRoleAttachmentState) ElementType 

func (IdentityPoolRoleAttachmentState) ElementType() reflect.Type

type IdentityPoolState 

type IdentityPoolState struct {
}

func (IdentityPoolState) ElementType 

func (IdentityPoolState) ElementType() reflect.Type

type IdentityPoolTag added in v0.81.0 

type IdentityPoolTag struct {
	// The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Key string `pulumi:"key"`
	// The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
	Value string `pulumi:"value"`
}

A key-value pair to associate with a resource.

type LogDeliveryConfiguration added in v0.80.0 

type LogDeliveryConfiguration struct {
	pulumi.CustomResourceState

	// A user pool ID, for example `us-east-1_EXAMPLE` .
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.
	LogConfigurations LogDeliveryConfigurationLogConfigurationArrayOutput `pulumi:"logConfigurations"`
	// The ID of the user pool where you configured logging.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::LogDeliveryConfiguration

func GetLogDeliveryConfiguration added in v0.80.0 

func GetLogDeliveryConfiguration(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LogDeliveryConfigurationState, opts ...pulumi.ResourceOption) (*LogDeliveryConfiguration, error)

GetLogDeliveryConfiguration gets an existing LogDeliveryConfiguration resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLogDeliveryConfiguration added in v0.80.0 

func NewLogDeliveryConfiguration(ctx *pulumi.Context,
	name string, args *LogDeliveryConfigurationArgs, opts ...pulumi.ResourceOption) (*LogDeliveryConfiguration, error)

NewLogDeliveryConfiguration registers a new resource with the given unique name, arguments, and options.

func (*LogDeliveryConfiguration) ElementType added in v0.80.0 

func (*LogDeliveryConfiguration) ElementType() reflect.Type

func (*LogDeliveryConfiguration) ToLogDeliveryConfigurationOutput added in v0.80.0 

func (i *LogDeliveryConfiguration) ToLogDeliveryConfigurationOutput() LogDeliveryConfigurationOutput

func (*LogDeliveryConfiguration) ToLogDeliveryConfigurationOutputWithContext added in v0.80.0 

func (i *LogDeliveryConfiguration) ToLogDeliveryConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationOutput

type LogDeliveryConfigurationArgs added in v0.80.0 

type LogDeliveryConfigurationArgs struct {
	// A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.
	LogConfigurations LogDeliveryConfigurationLogConfigurationArrayInput
	// The ID of the user pool where you configured logging.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a LogDeliveryConfiguration resource.

func (LogDeliveryConfigurationArgs) ElementType added in v0.80.0 

func (LogDeliveryConfigurationArgs) ElementType() reflect.Type

type LogDeliveryConfigurationCloudWatchLogsConfiguration added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfiguration struct {
	LogGroupArn *string `pulumi:"logGroupArn"`
}

type LogDeliveryConfigurationCloudWatchLogsConfigurationArgs added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfigurationArgs struct {
	LogGroupArn pulumi.StringPtrInput `pulumi:"logGroupArn"`
}

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ElementType added in v0.80.0 

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ElementType() reflect.Type

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutput added in v0.80.0 

func (i LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutputWithContext added in v0.80.0 

func (i LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput added in v0.80.0 

func (i LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext added in v0.80.0 

func (i LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

type LogDeliveryConfigurationCloudWatchLogsConfigurationInput added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfigurationInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationOutput
	ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutputWithContext(context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationOutput
}

LogDeliveryConfigurationCloudWatchLogsConfigurationInput is an input type that accepts LogDeliveryConfigurationCloudWatchLogsConfigurationArgs and LogDeliveryConfigurationCloudWatchLogsConfigurationOutput values. You can construct a concrete instance of `LogDeliveryConfigurationCloudWatchLogsConfigurationInput` via: 

LogDeliveryConfigurationCloudWatchLogsConfigurationArgs{...}

type LogDeliveryConfigurationCloudWatchLogsConfigurationOutput added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfigurationOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ElementType added in v0.80.0 

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) LogGroupArn added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) LogGroupArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutput added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

type LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput
	ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext(context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput
}

LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput is an input type that accepts LogDeliveryConfigurationCloudWatchLogsConfigurationArgs, LogDeliveryConfigurationCloudWatchLogsConfigurationPtr and LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput values. You can construct a concrete instance of `LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput` via: 

        LogDeliveryConfigurationCloudWatchLogsConfigurationArgs{...}

or:

        nil

func LogDeliveryConfigurationCloudWatchLogsConfigurationPtr added in v0.80.0 

func LogDeliveryConfigurationCloudWatchLogsConfigurationPtr(v *LogDeliveryConfigurationCloudWatchLogsConfigurationArgs) LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput

type LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput added in v0.80.0 

type LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) Elem added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) Elem() LogDeliveryConfigurationCloudWatchLogsConfigurationOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ElementType added in v0.80.0 

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) LogGroupArn added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) LogGroupArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput() LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

func (LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput) ToLogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

type LogDeliveryConfigurationFirehoseConfiguration added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfiguration struct {
	StreamArn *string `pulumi:"streamArn"`
}

type LogDeliveryConfigurationFirehoseConfigurationArgs added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfigurationArgs struct {
	StreamArn pulumi.StringPtrInput `pulumi:"streamArn"`
}

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ElementType added in v0.116.0 

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ElementType() reflect.Type

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationOutput added in v0.116.0 

func (i LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationOutput() LogDeliveryConfigurationFirehoseConfigurationOutput

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationOutputWithContext added in v0.116.0 

func (i LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationFirehoseConfigurationOutput

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput added in v0.116.0 

func (i LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput() LogDeliveryConfigurationFirehoseConfigurationPtrOutput

func (LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext added in v0.116.0 

func (i LogDeliveryConfigurationFirehoseConfigurationArgs) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationFirehoseConfigurationPtrOutput

type LogDeliveryConfigurationFirehoseConfigurationInput added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfigurationInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationFirehoseConfigurationOutput() LogDeliveryConfigurationFirehoseConfigurationOutput
	ToLogDeliveryConfigurationFirehoseConfigurationOutputWithContext(context.Context) LogDeliveryConfigurationFirehoseConfigurationOutput
}

LogDeliveryConfigurationFirehoseConfigurationInput is an input type that accepts LogDeliveryConfigurationFirehoseConfigurationArgs and LogDeliveryConfigurationFirehoseConfigurationOutput values. You can construct a concrete instance of `LogDeliveryConfigurationFirehoseConfigurationInput` via: 

LogDeliveryConfigurationFirehoseConfigurationArgs{...}

type LogDeliveryConfigurationFirehoseConfigurationOutput added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfigurationOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ElementType added in v0.116.0 

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationFirehoseConfigurationOutput) StreamArn added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationOutput) StreamArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationOutput added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationOutput() LogDeliveryConfigurationFirehoseConfigurationOutput

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationFirehoseConfigurationOutput

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput() LogDeliveryConfigurationFirehoseConfigurationPtrOutput

func (LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationFirehoseConfigurationPtrOutput

type LogDeliveryConfigurationFirehoseConfigurationPtrInput added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfigurationPtrInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput() LogDeliveryConfigurationFirehoseConfigurationPtrOutput
	ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext(context.Context) LogDeliveryConfigurationFirehoseConfigurationPtrOutput
}

LogDeliveryConfigurationFirehoseConfigurationPtrInput is an input type that accepts LogDeliveryConfigurationFirehoseConfigurationArgs, LogDeliveryConfigurationFirehoseConfigurationPtr and LogDeliveryConfigurationFirehoseConfigurationPtrOutput values. You can construct a concrete instance of `LogDeliveryConfigurationFirehoseConfigurationPtrInput` via: 

        LogDeliveryConfigurationFirehoseConfigurationArgs{...}

or:

        nil

func LogDeliveryConfigurationFirehoseConfigurationPtr added in v0.116.0 

func LogDeliveryConfigurationFirehoseConfigurationPtr(v *LogDeliveryConfigurationFirehoseConfigurationArgs) LogDeliveryConfigurationFirehoseConfigurationPtrInput

type LogDeliveryConfigurationFirehoseConfigurationPtrOutput added in v0.116.0 

type LogDeliveryConfigurationFirehoseConfigurationPtrOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) Elem added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationPtrOutput) Elem() LogDeliveryConfigurationFirehoseConfigurationOutput

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ElementType added in v0.116.0 

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) StreamArn added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationPtrOutput) StreamArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutput() LogDeliveryConfigurationFirehoseConfigurationPtrOutput

func (LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationFirehoseConfigurationPtrOutput) ToLogDeliveryConfigurationFirehoseConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationFirehoseConfigurationPtrOutput

type LogDeliveryConfigurationInput added in v0.80.0 

type LogDeliveryConfigurationInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationOutput() LogDeliveryConfigurationOutput
	ToLogDeliveryConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationOutput
}

type LogDeliveryConfigurationLogConfiguration added in v0.80.0 

type LogDeliveryConfigurationLogConfiguration struct {
	CloudWatchLogsConfiguration *LogDeliveryConfigurationCloudWatchLogsConfiguration `pulumi:"cloudWatchLogsConfiguration"`
	EventSource                 *string                                              `pulumi:"eventSource"`
	FirehoseConfiguration       *LogDeliveryConfigurationFirehoseConfiguration       `pulumi:"firehoseConfiguration"`
	LogLevel                    *string                                              `pulumi:"logLevel"`
	S3Configuration             *LogDeliveryConfigurationS3Configuration             `pulumi:"s3Configuration"`
}

type LogDeliveryConfigurationLogConfigurationArgs added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationArgs struct {
	CloudWatchLogsConfiguration LogDeliveryConfigurationCloudWatchLogsConfigurationPtrInput `pulumi:"cloudWatchLogsConfiguration"`
	EventSource                 pulumi.StringPtrInput                                       `pulumi:"eventSource"`
	FirehoseConfiguration       LogDeliveryConfigurationFirehoseConfigurationPtrInput       `pulumi:"firehoseConfiguration"`
	LogLevel                    pulumi.StringPtrInput                                       `pulumi:"logLevel"`
	S3Configuration             LogDeliveryConfigurationS3ConfigurationPtrInput             `pulumi:"s3Configuration"`
}

func (LogDeliveryConfigurationLogConfigurationArgs) ElementType added in v0.80.0 

func (LogDeliveryConfigurationLogConfigurationArgs) ElementType() reflect.Type

func (LogDeliveryConfigurationLogConfigurationArgs) ToLogDeliveryConfigurationLogConfigurationOutput added in v0.80.0 

func (i LogDeliveryConfigurationLogConfigurationArgs) ToLogDeliveryConfigurationLogConfigurationOutput() LogDeliveryConfigurationLogConfigurationOutput

func (LogDeliveryConfigurationLogConfigurationArgs) ToLogDeliveryConfigurationLogConfigurationOutputWithContext added in v0.80.0 

func (i LogDeliveryConfigurationLogConfigurationArgs) ToLogDeliveryConfigurationLogConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationLogConfigurationOutput

type LogDeliveryConfigurationLogConfigurationArray added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationArray []LogDeliveryConfigurationLogConfigurationInput

func (LogDeliveryConfigurationLogConfigurationArray) ElementType added in v0.80.0 

func (LogDeliveryConfigurationLogConfigurationArray) ElementType() reflect.Type

func (LogDeliveryConfigurationLogConfigurationArray) ToLogDeliveryConfigurationLogConfigurationArrayOutput added in v0.80.0 

func (i LogDeliveryConfigurationLogConfigurationArray) ToLogDeliveryConfigurationLogConfigurationArrayOutput() LogDeliveryConfigurationLogConfigurationArrayOutput

func (LogDeliveryConfigurationLogConfigurationArray) ToLogDeliveryConfigurationLogConfigurationArrayOutputWithContext added in v0.80.0 

func (i LogDeliveryConfigurationLogConfigurationArray) ToLogDeliveryConfigurationLogConfigurationArrayOutputWithContext(ctx context.Context) LogDeliveryConfigurationLogConfigurationArrayOutput

type LogDeliveryConfigurationLogConfigurationArrayInput added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationArrayInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationLogConfigurationArrayOutput() LogDeliveryConfigurationLogConfigurationArrayOutput
	ToLogDeliveryConfigurationLogConfigurationArrayOutputWithContext(context.Context) LogDeliveryConfigurationLogConfigurationArrayOutput
}

LogDeliveryConfigurationLogConfigurationArrayInput is an input type that accepts LogDeliveryConfigurationLogConfigurationArray and LogDeliveryConfigurationLogConfigurationArrayOutput values. You can construct a concrete instance of `LogDeliveryConfigurationLogConfigurationArrayInput` via: 

LogDeliveryConfigurationLogConfigurationArray{ LogDeliveryConfigurationLogConfigurationArgs{...} }

type LogDeliveryConfigurationLogConfigurationArrayOutput added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationArrayOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationLogConfigurationArrayOutput) ElementType added in v0.80.0 

func (LogDeliveryConfigurationLogConfigurationArrayOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationLogConfigurationArrayOutput) Index added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationArrayOutput) Index(i pulumi.IntInput) LogDeliveryConfigurationLogConfigurationOutput

func (LogDeliveryConfigurationLogConfigurationArrayOutput) ToLogDeliveryConfigurationLogConfigurationArrayOutput added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationArrayOutput) ToLogDeliveryConfigurationLogConfigurationArrayOutput() LogDeliveryConfigurationLogConfigurationArrayOutput

func (LogDeliveryConfigurationLogConfigurationArrayOutput) ToLogDeliveryConfigurationLogConfigurationArrayOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationArrayOutput) ToLogDeliveryConfigurationLogConfigurationArrayOutputWithContext(ctx context.Context) LogDeliveryConfigurationLogConfigurationArrayOutput

type LogDeliveryConfigurationLogConfigurationInput added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationLogConfigurationOutput() LogDeliveryConfigurationLogConfigurationOutput
	ToLogDeliveryConfigurationLogConfigurationOutputWithContext(context.Context) LogDeliveryConfigurationLogConfigurationOutput
}

LogDeliveryConfigurationLogConfigurationInput is an input type that accepts LogDeliveryConfigurationLogConfigurationArgs and LogDeliveryConfigurationLogConfigurationOutput values. You can construct a concrete instance of `LogDeliveryConfigurationLogConfigurationInput` via: 

LogDeliveryConfigurationLogConfigurationArgs{...}

type LogDeliveryConfigurationLogConfigurationOutput added in v0.80.0 

type LogDeliveryConfigurationLogConfigurationOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationLogConfigurationOutput) CloudWatchLogsConfiguration added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) CloudWatchLogsConfiguration() LogDeliveryConfigurationCloudWatchLogsConfigurationPtrOutput

func (LogDeliveryConfigurationLogConfigurationOutput) ElementType added in v0.80.0 

func (LogDeliveryConfigurationLogConfigurationOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationLogConfigurationOutput) EventSource added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) EventSource() pulumi.StringPtrOutput

func (LogDeliveryConfigurationLogConfigurationOutput) FirehoseConfiguration added in v0.116.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) FirehoseConfiguration() LogDeliveryConfigurationFirehoseConfigurationPtrOutput

func (LogDeliveryConfigurationLogConfigurationOutput) LogLevel added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) LogLevel() pulumi.StringPtrOutput

func (LogDeliveryConfigurationLogConfigurationOutput) S3Configuration added in v0.116.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) S3Configuration() LogDeliveryConfigurationS3ConfigurationPtrOutput

func (LogDeliveryConfigurationLogConfigurationOutput) ToLogDeliveryConfigurationLogConfigurationOutput added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) ToLogDeliveryConfigurationLogConfigurationOutput() LogDeliveryConfigurationLogConfigurationOutput

func (LogDeliveryConfigurationLogConfigurationOutput) ToLogDeliveryConfigurationLogConfigurationOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationLogConfigurationOutput) ToLogDeliveryConfigurationLogConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationLogConfigurationOutput

type LogDeliveryConfigurationOutput added in v0.80.0 

type LogDeliveryConfigurationOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationOutput) AwsId added in v0.99.0 

func (o LogDeliveryConfigurationOutput) AwsId() pulumi.StringOutput

A user pool ID, for example `us-east-1_EXAMPLE` .

func (LogDeliveryConfigurationOutput) ElementType added in v0.80.0 

func (LogDeliveryConfigurationOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationOutput) LogConfigurations added in v0.80.0 

func (o LogDeliveryConfigurationOutput) LogConfigurations() LogDeliveryConfigurationLogConfigurationArrayOutput

A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.

func (LogDeliveryConfigurationOutput) ToLogDeliveryConfigurationOutput added in v0.80.0 

func (o LogDeliveryConfigurationOutput) ToLogDeliveryConfigurationOutput() LogDeliveryConfigurationOutput

func (LogDeliveryConfigurationOutput) ToLogDeliveryConfigurationOutputWithContext added in v0.80.0 

func (o LogDeliveryConfigurationOutput) ToLogDeliveryConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationOutput

func (LogDeliveryConfigurationOutput) UserPoolId added in v0.80.0 

func (o LogDeliveryConfigurationOutput) UserPoolId() pulumi.StringOutput

The ID of the user pool where you configured logging.

type LogDeliveryConfigurationS3Configuration added in v0.116.0 

type LogDeliveryConfigurationS3Configuration struct {
	BucketArn *string `pulumi:"bucketArn"`
}

type LogDeliveryConfigurationS3ConfigurationArgs added in v0.116.0 

type LogDeliveryConfigurationS3ConfigurationArgs struct {
	BucketArn pulumi.StringPtrInput `pulumi:"bucketArn"`
}

func (LogDeliveryConfigurationS3ConfigurationArgs) ElementType added in v0.116.0 

func (LogDeliveryConfigurationS3ConfigurationArgs) ElementType() reflect.Type

func (LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationOutput added in v0.116.0 

func (i LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationOutput() LogDeliveryConfigurationS3ConfigurationOutput

func (LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationOutputWithContext added in v0.116.0 

func (i LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationS3ConfigurationOutput

func (LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationPtrOutput added in v0.116.0 

func (i LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationPtrOutput() LogDeliveryConfigurationS3ConfigurationPtrOutput

func (LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext added in v0.116.0 

func (i LogDeliveryConfigurationS3ConfigurationArgs) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationS3ConfigurationPtrOutput

type LogDeliveryConfigurationS3ConfigurationInput added in v0.116.0 

type LogDeliveryConfigurationS3ConfigurationInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationS3ConfigurationOutput() LogDeliveryConfigurationS3ConfigurationOutput
	ToLogDeliveryConfigurationS3ConfigurationOutputWithContext(context.Context) LogDeliveryConfigurationS3ConfigurationOutput
}

LogDeliveryConfigurationS3ConfigurationInput is an input type that accepts LogDeliveryConfigurationS3ConfigurationArgs and LogDeliveryConfigurationS3ConfigurationOutput values. You can construct a concrete instance of `LogDeliveryConfigurationS3ConfigurationInput` via: 

LogDeliveryConfigurationS3ConfigurationArgs{...}

type LogDeliveryConfigurationS3ConfigurationOutput added in v0.116.0 

type LogDeliveryConfigurationS3ConfigurationOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationS3ConfigurationOutput) BucketArn added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationOutput) BucketArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationS3ConfigurationOutput) ElementType added in v0.116.0 

func (LogDeliveryConfigurationS3ConfigurationOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationOutput added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationOutput() LogDeliveryConfigurationS3ConfigurationOutput

func (LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationOutputWithContext(ctx context.Context) LogDeliveryConfigurationS3ConfigurationOutput

func (LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutput added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutput() LogDeliveryConfigurationS3ConfigurationPtrOutput

func (LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationS3ConfigurationPtrOutput

type LogDeliveryConfigurationS3ConfigurationPtrInput added in v0.116.0 

type LogDeliveryConfigurationS3ConfigurationPtrInput interface {
	pulumi.Input

	ToLogDeliveryConfigurationS3ConfigurationPtrOutput() LogDeliveryConfigurationS3ConfigurationPtrOutput
	ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext(context.Context) LogDeliveryConfigurationS3ConfigurationPtrOutput
}

LogDeliveryConfigurationS3ConfigurationPtrInput is an input type that accepts LogDeliveryConfigurationS3ConfigurationArgs, LogDeliveryConfigurationS3ConfigurationPtr and LogDeliveryConfigurationS3ConfigurationPtrOutput values. You can construct a concrete instance of `LogDeliveryConfigurationS3ConfigurationPtrInput` via: 

        LogDeliveryConfigurationS3ConfigurationArgs{...}

or:

        nil

func LogDeliveryConfigurationS3ConfigurationPtr added in v0.116.0 

func LogDeliveryConfigurationS3ConfigurationPtr(v *LogDeliveryConfigurationS3ConfigurationArgs) LogDeliveryConfigurationS3ConfigurationPtrInput

type LogDeliveryConfigurationS3ConfigurationPtrOutput added in v0.116.0 

type LogDeliveryConfigurationS3ConfigurationPtrOutput struct{ *pulumi.OutputState }

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) BucketArn added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationPtrOutput) BucketArn() pulumi.StringPtrOutput

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) Elem added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationPtrOutput) Elem() LogDeliveryConfigurationS3ConfigurationOutput

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) ElementType added in v0.116.0 

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) ElementType() reflect.Type

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutput added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationPtrOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutput() LogDeliveryConfigurationS3ConfigurationPtrOutput

func (LogDeliveryConfigurationS3ConfigurationPtrOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext added in v0.116.0 

func (o LogDeliveryConfigurationS3ConfigurationPtrOutput) ToLogDeliveryConfigurationS3ConfigurationPtrOutputWithContext(ctx context.Context) LogDeliveryConfigurationS3ConfigurationPtrOutput

type LogDeliveryConfigurationState added in v0.80.0 

type LogDeliveryConfigurationState struct {
}

func (LogDeliveryConfigurationState) ElementType added in v0.80.0 

func (LogDeliveryConfigurationState) ElementType() reflect.Type

type LookupIdentityPoolArgs added in v0.12.0 

type LookupIdentityPoolArgs struct {
	Id string `pulumi:"id"`
}

type LookupIdentityPoolOutputArgs added in v0.12.0 

type LookupIdentityPoolOutputArgs struct {
	Id pulumi.StringInput `pulumi:"id"`
}

func (LookupIdentityPoolOutputArgs) ElementType added in v0.12.0 

func (LookupIdentityPoolOutputArgs) ElementType() reflect.Type

type LookupIdentityPoolPrincipalTagArgs added in v0.64.0 

type LookupIdentityPoolPrincipalTagArgs struct {
	// The identity pool that you want to associate with this principal tag map.
	IdentityPoolId string `pulumi:"identityPoolId"`
	// The identity pool identity provider (IdP) that you want to associate with this principal tag map.
	IdentityProviderName string `pulumi:"identityProviderName"`
}

type LookupIdentityPoolPrincipalTagOutputArgs added in v0.64.0 

type LookupIdentityPoolPrincipalTagOutputArgs struct {
	// The identity pool that you want to associate with this principal tag map.
	IdentityPoolId pulumi.StringInput `pulumi:"identityPoolId"`
	// The identity pool identity provider (IdP) that you want to associate with this principal tag map.
	IdentityProviderName pulumi.StringInput `pulumi:"identityProviderName"`
}

func (LookupIdentityPoolPrincipalTagOutputArgs) ElementType added in v0.64.0 

func (LookupIdentityPoolPrincipalTagOutputArgs) ElementType() reflect.Type

type LookupIdentityPoolPrincipalTagResult added in v0.64.0 

type LookupIdentityPoolPrincipalTagResult struct {
	// A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property.
	PrincipalTags interface{} `pulumi:"principalTags"`
	// Use a default set of mappings between claims and tags for this provider, instead of a custom map.
	UseDefaults *bool `pulumi:"useDefaults"`
}

func LookupIdentityPoolPrincipalTag added in v0.64.0 

func LookupIdentityPoolPrincipalTag(ctx *pulumi.Context, args *LookupIdentityPoolPrincipalTagArgs, opts ...pulumi.InvokeOption) (*LookupIdentityPoolPrincipalTagResult, error)

Resource Type definition for AWS::Cognito::IdentityPoolPrincipalTag

type LookupIdentityPoolPrincipalTagResultOutput added in v0.64.0 

type LookupIdentityPoolPrincipalTagResultOutput struct{ *pulumi.OutputState }

func LookupIdentityPoolPrincipalTagOutput added in v0.64.0 

func LookupIdentityPoolPrincipalTagOutput(ctx *pulumi.Context, args LookupIdentityPoolPrincipalTagOutputArgs, opts ...pulumi.InvokeOption) LookupIdentityPoolPrincipalTagResultOutput

func (LookupIdentityPoolPrincipalTagResultOutput) ElementType added in v0.64.0 

func (LookupIdentityPoolPrincipalTagResultOutput) ElementType() reflect.Type

func (LookupIdentityPoolPrincipalTagResultOutput) PrincipalTags added in v0.64.0 

func (o LookupIdentityPoolPrincipalTagResultOutput) PrincipalTags() pulumi.AnyOutput

A JSON-formatted list of user claims and the principal tags that you want to associate with them. When Amazon Cognito requests credentials, it sets the value of the principal tag to the value of the user's claim.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPoolPrincipalTag` for more information about the expected schema for this property.

func (LookupIdentityPoolPrincipalTagResultOutput) ToLookupIdentityPoolPrincipalTagResultOutput added in v0.64.0 

func (o LookupIdentityPoolPrincipalTagResultOutput) ToLookupIdentityPoolPrincipalTagResultOutput() LookupIdentityPoolPrincipalTagResultOutput

func (LookupIdentityPoolPrincipalTagResultOutput) ToLookupIdentityPoolPrincipalTagResultOutputWithContext added in v0.64.0 

func (o LookupIdentityPoolPrincipalTagResultOutput) ToLookupIdentityPoolPrincipalTagResultOutputWithContext(ctx context.Context) LookupIdentityPoolPrincipalTagResultOutput

func (LookupIdentityPoolPrincipalTagResultOutput) UseDefaults added in v0.64.0 

func (o LookupIdentityPoolPrincipalTagResultOutput) UseDefaults() pulumi.BoolPtrOutput

Use a default set of mappings between claims and tags for this provider, instead of a custom map.

type LookupIdentityPoolResult added in v0.12.0 

type LookupIdentityPoolResult struct {
	// Enables the Basic (Classic) authentication flow.
	AllowClassicFlow *bool `pulumi:"allowClassicFlow"`
	// Specifies whether the identity pool supports unauthenticated logins.
	AllowUnauthenticatedIdentities *bool `pulumi:"allowUnauthenticatedIdentities"`
	// The Amazon Cognito user pools and their client IDs.
	CognitoIdentityProviders []IdentityPoolCognitoIdentityProvider `pulumi:"cognitoIdentityProviders"`
	// The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 100
	DeveloperProviderName *string `pulumi:"developerProviderName"`
	Id                    *string `pulumi:"id"`
	// The name of your Amazon Cognito identity pool.
	//
	// *Minimum length* : 1
	//
	// *Maximum length* : 128
	//
	// *Pattern* : `[\w\s+=,.@-]+`
	IdentityPoolName *string `pulumi:"identityPoolName"`
	// An array of key-value pairs to apply to this resource.
	IdentityPoolTags []aws.Tag `pulumi:"identityPoolTags"`
	// The name of the Amazon Cognito identity pool, returned as a string.
	Name *string `pulumi:"name"`
	// The Amazon Resource Names (ARNs) of the OpenID connect providers.
	OpenIdConnectProviderArns []string `pulumi:"openIdConnectProviderArns"`
	// The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.
	SamlProviderArns []string `pulumi:"samlProviderArns"`
	// Key-value pairs that map provider names to provider app IDs.
	//
	// Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.
	SupportedLoginProviders interface{} `pulumi:"supportedLoginProviders"`
}

func LookupIdentityPool added in v0.12.0 

func LookupIdentityPool(ctx *pulumi.Context, args *LookupIdentityPoolArgs, opts ...pulumi.InvokeOption) (*LookupIdentityPoolResult, error)

Resource Type definition for AWS::Cognito::IdentityPool

type LookupIdentityPoolResultOutput added in v0.12.0 

type LookupIdentityPoolResultOutput struct{ *pulumi.OutputState }

func LookupIdentityPoolOutput added in v0.12.0 

func LookupIdentityPoolOutput(ctx *pulumi.Context, args LookupIdentityPoolOutputArgs, opts ...pulumi.InvokeOption) LookupIdentityPoolResultOutput

func (LookupIdentityPoolResultOutput) AllowClassicFlow added in v0.12.0 

func (o LookupIdentityPoolResultOutput) AllowClassicFlow() pulumi.BoolPtrOutput

Enables the Basic (Classic) authentication flow.

func (LookupIdentityPoolResultOutput) AllowUnauthenticatedIdentities added in v0.12.0 

func (o LookupIdentityPoolResultOutput) AllowUnauthenticatedIdentities() pulumi.BoolPtrOutput

Specifies whether the identity pool supports unauthenticated logins.

func (LookupIdentityPoolResultOutput) CognitoIdentityProviders added in v0.12.0 

func (o LookupIdentityPoolResultOutput) CognitoIdentityProviders() IdentityPoolCognitoIdentityProviderArrayOutput

The Amazon Cognito user pools and their client IDs.

func (LookupIdentityPoolResultOutput) DeveloperProviderName added in v0.12.0 

func (o LookupIdentityPoolResultOutput) DeveloperProviderName() pulumi.StringPtrOutput

The "domain" Amazon Cognito uses when referencing your users. This name acts as a placeholder that allows your backend and the Amazon Cognito service to communicate about the developer provider. For the `DeveloperProviderName` , you can use letters and periods (.), underscores (_), and dashes (-).

*Minimum length* : 1

*Maximum length* : 100

func (LookupIdentityPoolResultOutput) ElementType added in v0.12.0 

func (LookupIdentityPoolResultOutput) ElementType() reflect.Type

func (LookupIdentityPoolResultOutput) Id added in v0.12.0 

func (o LookupIdentityPoolResultOutput) Id() pulumi.StringPtrOutput

func (LookupIdentityPoolResultOutput) IdentityPoolName added in v0.12.0 

func (o LookupIdentityPoolResultOutput) IdentityPoolName() pulumi.StringPtrOutput

The name of your Amazon Cognito identity pool.

*Minimum length* : 1

*Maximum length* : 128

*Pattern* : `[\w\s+=,.@-]+`

func (LookupIdentityPoolResultOutput) IdentityPoolTags added in v0.81.0 

func (o LookupIdentityPoolResultOutput) IdentityPoolTags() aws.TagArrayOutput

An array of key-value pairs to apply to this resource.

func (LookupIdentityPoolResultOutput) Name added in v0.12.0 

func (o LookupIdentityPoolResultOutput) Name() pulumi.StringPtrOutput

The name of the Amazon Cognito identity pool, returned as a string.

func (LookupIdentityPoolResultOutput) OpenIdConnectProviderArns added in v0.72.0 

func (o LookupIdentityPoolResultOutput) OpenIdConnectProviderArns() pulumi.StringArrayOutput

The Amazon Resource Names (ARNs) of the OpenID connect providers.

func (LookupIdentityPoolResultOutput) SamlProviderArns added in v0.72.0 

func (o LookupIdentityPoolResultOutput) SamlProviderArns() pulumi.StringArrayOutput

The Amazon Resource Names (ARNs) of the Security Assertion Markup Language (SAML) providers.

func (LookupIdentityPoolResultOutput) SupportedLoginProviders added in v0.12.0 

func (o LookupIdentityPoolResultOutput) SupportedLoginProviders() pulumi.AnyOutput

Key-value pairs that map provider names to provider app IDs.

Search the [CloudFormation User Guide](https://docs.aws.amazon.com/cloudformation/) for `AWS::Cognito::IdentityPool` for more information about the expected schema for this property.

func (LookupIdentityPoolResultOutput) ToLookupIdentityPoolResultOutput added in v0.12.0 

func (o LookupIdentityPoolResultOutput) ToLookupIdentityPoolResultOutput() LookupIdentityPoolResultOutput

func (LookupIdentityPoolResultOutput) ToLookupIdentityPoolResultOutputWithContext added in v0.12.0 

func (o LookupIdentityPoolResultOutput) ToLookupIdentityPoolResultOutputWithContext(ctx context.Context) LookupIdentityPoolResultOutput

type LookupIdentityPoolRoleAttachmentArgs added in v0.12.0 

type LookupIdentityPoolRoleAttachmentArgs struct {
	// The resource ID.
	Id string `pulumi:"id"`
}

type LookupIdentityPoolRoleAttachmentOutputArgs added in v0.12.0 

type LookupIdentityPoolRoleAttachmentOutputArgs struct {
	// The resource ID.
	Id pulumi.StringInput `pulumi:"id"`
}

func (LookupIdentityPoolRoleAttachmentOutputArgs) ElementType added in v0.12.0 

func (LookupIdentityPoolRoleAttachmentOutputArgs) ElementType() reflect.Type

type LookupIdentityPoolRoleAttachmentResult added in v0.12.0 

type LookupIdentityPoolRoleAttachmentResult struct {
	// The resource ID.
	Id *string `pulumi:"id"`
	// How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .
	//
	// If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.
	//
	// For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .
	RoleMappings map[string]IdentityPoolRoleAttachmentRoleMapping `pulumi:"roleMappings"`
	// The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.
	Roles map[string]string `pulumi:"roles"`
}

func LookupIdentityPoolRoleAttachment added in v0.12.0 

func LookupIdentityPoolRoleAttachment(ctx *pulumi.Context, args *LookupIdentityPoolRoleAttachmentArgs, opts ...pulumi.InvokeOption) (*LookupIdentityPoolRoleAttachmentResult, error)

Resource Type definition for AWS::Cognito::IdentityPoolRoleAttachment

type LookupIdentityPoolRoleAttachmentResultOutput added in v0.12.0 

type LookupIdentityPoolRoleAttachmentResultOutput struct{ *pulumi.OutputState }

func LookupIdentityPoolRoleAttachmentOutput added in v0.12.0 

func LookupIdentityPoolRoleAttachmentOutput(ctx *pulumi.Context, args LookupIdentityPoolRoleAttachmentOutputArgs, opts ...pulumi.InvokeOption) LookupIdentityPoolRoleAttachmentResultOutput

func (LookupIdentityPoolRoleAttachmentResultOutput) ElementType added in v0.12.0 

func (LookupIdentityPoolRoleAttachmentResultOutput) ElementType() reflect.Type

func (LookupIdentityPoolRoleAttachmentResultOutput) Id added in v0.12.0 

func (o LookupIdentityPoolRoleAttachmentResultOutput) Id() pulumi.StringPtrOutput

The resource ID.

func (LookupIdentityPoolRoleAttachmentResultOutput) RoleMappings added in v0.12.0 

func (o LookupIdentityPoolRoleAttachmentResultOutput) RoleMappings() IdentityPoolRoleAttachmentRoleMappingMapOutput

How users for a specific identity provider are mapped to roles. This is a string to the `RoleMapping` object map. The string identifies the identity provider. For example: `graph.facebook.com` or `cognito-idp.us-east-1.amazonaws.com/us-east-1_abcdefghi:app_client_id` .

If the `IdentityProvider` field isn't provided in this object, the string is used as the identity provider name.

For more information, see the [RoleMapping property](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-identitypoolroleattachment-rolemapping.html) .

func (LookupIdentityPoolRoleAttachmentResultOutput) Roles added in v0.12.0 

func (o LookupIdentityPoolRoleAttachmentResultOutput) Roles() pulumi.StringMapOutput

The map of the roles associated with this pool. For a given role, the key is either "authenticated" or "unauthenticated". The value is the role ARN.

func (LookupIdentityPoolRoleAttachmentResultOutput) ToLookupIdentityPoolRoleAttachmentResultOutput added in v0.12.0 

func (o LookupIdentityPoolRoleAttachmentResultOutput) ToLookupIdentityPoolRoleAttachmentResultOutput() LookupIdentityPoolRoleAttachmentResultOutput

func (LookupIdentityPoolRoleAttachmentResultOutput) ToLookupIdentityPoolRoleAttachmentResultOutputWithContext added in v0.12.0 

func (o LookupIdentityPoolRoleAttachmentResultOutput) ToLookupIdentityPoolRoleAttachmentResultOutputWithContext(ctx context.Context) LookupIdentityPoolRoleAttachmentResultOutput

type LookupLogDeliveryConfigurationArgs added in v0.80.0 

type LookupLogDeliveryConfigurationArgs struct {
	// A user pool ID, for example `us-east-1_EXAMPLE` .
	Id string `pulumi:"id"`
}

type LookupLogDeliveryConfigurationOutputArgs added in v0.80.0 

type LookupLogDeliveryConfigurationOutputArgs struct {
	// A user pool ID, for example `us-east-1_EXAMPLE` .
	Id pulumi.StringInput `pulumi:"id"`
}

func (LookupLogDeliveryConfigurationOutputArgs) ElementType added in v0.80.0 

func (LookupLogDeliveryConfigurationOutputArgs) ElementType() reflect.Type

type LookupLogDeliveryConfigurationResult added in v0.80.0 

type LookupLogDeliveryConfigurationResult struct {
	// A user pool ID, for example `us-east-1_EXAMPLE` .
	Id *string `pulumi:"id"`
	// A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.
	LogConfigurations []LogDeliveryConfigurationLogConfiguration `pulumi:"logConfigurations"`
}

func LookupLogDeliveryConfiguration added in v0.80.0 

func LookupLogDeliveryConfiguration(ctx *pulumi.Context, args *LookupLogDeliveryConfigurationArgs, opts ...pulumi.InvokeOption) (*LookupLogDeliveryConfigurationResult, error)

Resource Type definition for AWS::Cognito::LogDeliveryConfiguration

type LookupLogDeliveryConfigurationResultOutput added in v0.80.0 

type LookupLogDeliveryConfigurationResultOutput struct{ *pulumi.OutputState }

func LookupLogDeliveryConfigurationOutput added in v0.80.0 

func LookupLogDeliveryConfigurationOutput(ctx *pulumi.Context, args LookupLogDeliveryConfigurationOutputArgs, opts ...pulumi.InvokeOption) LookupLogDeliveryConfigurationResultOutput

func (LookupLogDeliveryConfigurationResultOutput) ElementType added in v0.80.0 

func (LookupLogDeliveryConfigurationResultOutput) ElementType() reflect.Type

func (LookupLogDeliveryConfigurationResultOutput) Id added in v0.80.0 

func (o LookupLogDeliveryConfigurationResultOutput) Id() pulumi.StringPtrOutput

A user pool ID, for example `us-east-1_EXAMPLE` .

func (LookupLogDeliveryConfigurationResultOutput) LogConfigurations added in v0.80.0 

func (o LookupLogDeliveryConfigurationResultOutput) LogConfigurations() LogDeliveryConfigurationLogConfigurationArrayOutput

A logging destination of a user pool. User pools can have multiple logging destinations for message-delivery and user-activity logs.

func (LookupLogDeliveryConfigurationResultOutput) ToLookupLogDeliveryConfigurationResultOutput added in v0.80.0 

func (o LookupLogDeliveryConfigurationResultOutput) ToLookupLogDeliveryConfigurationResultOutput() LookupLogDeliveryConfigurationResultOutput

func (LookupLogDeliveryConfigurationResultOutput) ToLookupLogDeliveryConfigurationResultOutputWithContext added in v0.80.0 

func (o LookupLogDeliveryConfigurationResultOutput) ToLookupLogDeliveryConfigurationResultOutputWithContext(ctx context.Context) LookupLogDeliveryConfigurationResultOutput

type LookupUserPoolArgs added in v0.12.0 

type LookupUserPoolArgs struct {
	// The ID of the user pool.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolClientArgs added in v0.12.0 

type LookupUserPoolClientArgs struct {
	// The ID of the app client, for example `1example23456789` .
	ClientId string `pulumi:"clientId"`
	// The user pool ID for the user pool where you want to create a user pool client.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolClientOutputArgs added in v0.12.0 

type LookupUserPoolClientOutputArgs struct {
	// The ID of the app client, for example `1example23456789` .
	ClientId pulumi.StringInput `pulumi:"clientId"`
	// The user pool ID for the user pool where you want to create a user pool client.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolClientOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolClientOutputArgs) ElementType() reflect.Type

type LookupUserPoolClientResult added in v0.12.0 

type LookupUserPoolClientResult struct {
	// The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with
	// their access token for 10 hours.
	//
	// The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your access
	// tokens are valid for one hour.
	AccessTokenValidity *int `pulumi:"accessTokenValidity"`
	// The OAuth grant types that you want your app client to generate. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.
	//
	// - **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.
	// - **implicit** - Issue the access token (and, optionally, ID token, based on scopes) directly to your user.
	// - **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user using a combination of the client ID and client secret.
	AllowedOAuthFlows []string `pulumi:"allowedOAuthFlows"`
	// Set to `true` to use OAuth 2.0 features in your user pool app client.
	//
	// `AllowedOAuthFlowsUserPoolClient` must be `true` before you can configure the following features in your app client.
	//
	// - `CallBackURLs` : Callback URLs.
	// - `LogoutURLs` : Sign-out redirect URLs.
	// - `AllowedOAuthScopes` : OAuth 2.0 scopes.
	// - `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.
	//
	// To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` .
	AllowedOAuthFlowsUserPoolClient *bool `pulumi:"allowedOAuthFlowsUserPoolClient"`
	// The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported.
	AllowedOAuthScopes []string `pulumi:"allowedOAuthScopes"`
	// The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.
	//
	// > In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region.
	AnalyticsConfiguration *UserPoolClientAnalyticsConfiguration `pulumi:"analyticsConfiguration"`
	// Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
	AuthSessionValidity *int `pulumi:"authSessionValidity"`
	// A list of allowed redirect (callback) URLs for the IdPs.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// See [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	CallbackUrls []string `pulumi:"callbackUrls"`
	// The ID of the app client, for example `1example23456789` .
	ClientId *string `pulumi:"clientId"`
	// The client name for the user pool client you would like to create.
	ClientName   *string `pulumi:"clientName"`
	ClientSecret *string `pulumi:"clientSecret"`
	// The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// For more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	DefaultRedirectUri *string `pulumi:"defaultRedirectUri"`
	// Activates the propagation of additional user context data. For more information about propagation of user context data, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.
	EnablePropagateAdditionalUserContextData *bool `pulumi:"enablePropagateAdditionalUserContextData"`
	// Activates or deactivates token revocation. For more information about revoking tokens, see [RevokeToken](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html) .
	//
	// If you don't include this parameter, token revocation is automatically activated for the new user pool client.
	EnableTokenRevocation *bool `pulumi:"enableTokenRevocation"`
	// The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.
	//
	// > If you don't specify a value for `ExplicitAuthFlows` , your user client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` .
	//
	// Valid values include:
	//
	// - `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.
	// - `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.
	// - `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.
	// - `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.
	// - `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.
	//
	// In some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,
	// like `ALLOW_USER_SRP_AUTH` .
	ExplicitAuthFlows []string `pulumi:"explicitAuthFlows"`
	// The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.
	//
	// The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your ID
	// tokens are valid for one hour.
	IdTokenValidity *int `pulumi:"idTokenValidity"`
	// A list of allowed logout URLs for the IdPs.
	LogoutUrls []string `pulumi:"logoutUrls"`
	Name       *string  `pulumi:"name"`
	// Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.
	//
	// Valid values include:
	//
	// - `ENABLED` - This prevents user existence-related errors.
	// - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.
	//
	// Defaults to `LEGACY` when you don't provide a value.
	PreventUserExistenceErrors *string `pulumi:"preventUserExistenceErrors"`
	// The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a [GetUser](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html) API request to retrieve and display your user's profile data.
	//
	// When you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.
	ReadAttributes []string `pulumi:"readAttributes"`
	// The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session
	// and retrieve new access and ID tokens for 10 days.
	//
	// The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your refresh
	// tokens are valid for 30 days.
	RefreshTokenValidity *int `pulumi:"refreshTokenValidity"`
	// A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .
	SupportedIdentityProviders []string `pulumi:"supportedIdentityProviders"`
	// The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours.
	TokenValidityUnits *UserPoolClientTokenValidityUnits `pulumi:"tokenValidityUnits"`
	// The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list. An example of this kind of activity is when you present your user with a form to update their profile information and they change their last name. Your app then makes an [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html) API request and sets `family_name` to the new value.
	//
	// When you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.
	//
	// If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .
	WriteAttributes []string `pulumi:"writeAttributes"`
}

func LookupUserPoolClient added in v0.12.0 

func LookupUserPoolClient(ctx *pulumi.Context, args *LookupUserPoolClientArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolClientResult, error)

Resource Type definition for AWS::Cognito::UserPoolClient

type LookupUserPoolClientResultOutput added in v0.12.0 

type LookupUserPoolClientResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolClientOutput added in v0.12.0 

func LookupUserPoolClientOutput(ctx *pulumi.Context, args LookupUserPoolClientOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolClientResultOutput

func (LookupUserPoolClientResultOutput) AccessTokenValidity added in v0.12.0 

func (o LookupUserPoolClientResultOutput) AccessTokenValidity() pulumi.IntPtrOutput

The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with their access token for 10 hours.

The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one hour.

func (LookupUserPoolClientResultOutput) AllowedOAuthFlows added in v0.12.0 

func (o LookupUserPoolClientResultOutput) AllowedOAuthFlows() pulumi.StringArrayOutput

The OAuth grant types that you want your app client to generate. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.

- **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint. - **implicit** - Issue the access token (and, optionally, ID token, based on scopes) directly to your user. - **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user using a combination of the client ID and client secret.

func (LookupUserPoolClientResultOutput) AllowedOAuthFlowsUserPoolClient added in v0.12.0 

func (o LookupUserPoolClientResultOutput) AllowedOAuthFlowsUserPoolClient() pulumi.BoolPtrOutput

Set to `true` to use OAuth 2.0 features in your user pool app client.

`AllowedOAuthFlowsUserPoolClient` must be `true` before you can configure the following features in your app client.

- `CallBackURLs` : Callback URLs. - `LogoutURLs` : Sign-out redirect URLs. - `AllowedOAuthScopes` : OAuth 2.0 scopes. - `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.

To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` .

func (LookupUserPoolClientResultOutput) AllowedOAuthScopes added in v0.12.0 

func (o LookupUserPoolClientResultOutput) AllowedOAuthScopes() pulumi.StringArrayOutput

The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported.

func (LookupUserPoolClientResultOutput) AnalyticsConfiguration added in v0.12.0 

func (o LookupUserPoolClientResultOutput) AnalyticsConfiguration() UserPoolClientAnalyticsConfigurationPtrOutput

The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.

> In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region.

func (LookupUserPoolClientResultOutput) AuthSessionValidity added in v0.38.0 

func (o LookupUserPoolClientResultOutput) AuthSessionValidity() pulumi.IntPtrOutput

Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.

func (LookupUserPoolClientResultOutput) CallbackUrls added in v0.72.0 

func (o LookupUserPoolClientResultOutput) CallbackUrls() pulumi.StringArrayOutput

A list of allowed redirect (callback) URLs for the IdPs.

A redirect URI must:

- Be an absolute URI. - Be registered with the authorization server. - Not include a fragment component.

See [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .

Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.

App callback URLs such as myapp://example are also supported.

func (LookupUserPoolClientResultOutput) ClientId added in v0.83.0 

func (o LookupUserPoolClientResultOutput) ClientId() pulumi.StringPtrOutput

The ID of the app client, for example `1example23456789` .

func (LookupUserPoolClientResultOutput) ClientName added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ClientName() pulumi.StringPtrOutput

The client name for the user pool client you would like to create.

func (LookupUserPoolClientResultOutput) ClientSecret added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ClientSecret() pulumi.StringPtrOutput

func (LookupUserPoolClientResultOutput) DefaultRedirectUri added in v0.72.0 

func (o LookupUserPoolClientResultOutput) DefaultRedirectUri() pulumi.StringPtrOutput

The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.

A redirect URI must:

- Be an absolute URI. - Be registered with the authorization server. - Not include a fragment component.

For more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .

Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.

App callback URLs such as myapp://example are also supported.

func (LookupUserPoolClientResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolClientResultOutput) ElementType() reflect.Type

func (LookupUserPoolClientResultOutput) EnablePropagateAdditionalUserContextData added in v0.17.0 

func (o LookupUserPoolClientResultOutput) EnablePropagateAdditionalUserContextData() pulumi.BoolPtrOutput

Activates the propagation of additional user context data. For more information about propagation of user context data, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.

func (LookupUserPoolClientResultOutput) EnableTokenRevocation added in v0.12.0 

func (o LookupUserPoolClientResultOutput) EnableTokenRevocation() pulumi.BoolPtrOutput

Activates or deactivates token revocation. For more information about revoking tokens, see [RevokeToken](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html) .

If you don't include this parameter, token revocation is automatically activated for the new user pool client.

func (LookupUserPoolClientResultOutput) ExplicitAuthFlows added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ExplicitAuthFlows() pulumi.StringArrayOutput

The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.

> If you don't specify a value for `ExplicitAuthFlows` , your user client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` .

Valid values include:

- `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. - `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication. - `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords. - `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication. - `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.

In some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` , like `ALLOW_USER_SRP_AUTH` .

func (LookupUserPoolClientResultOutput) IdTokenValidity added in v0.12.0 

func (o LookupUserPoolClientResultOutput) IdTokenValidity() pulumi.IntPtrOutput

The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.

The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour.

func (LookupUserPoolClientResultOutput) LogoutUrls added in v0.72.0 

func (o LookupUserPoolClientResultOutput) LogoutUrls() pulumi.StringArrayOutput

A list of allowed logout URLs for the IdPs.

func (LookupUserPoolClientResultOutput) Name added in v0.12.0 

func (o LookupUserPoolClientResultOutput) Name() pulumi.StringPtrOutput

func (LookupUserPoolClientResultOutput) PreventUserExistenceErrors added in v0.12.0 

func (o LookupUserPoolClientResultOutput) PreventUserExistenceErrors() pulumi.StringPtrOutput

Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.

Valid values include:

- `ENABLED` - This prevents user existence-related errors. - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.

Defaults to `LEGACY` when you don't provide a value.

func (LookupUserPoolClientResultOutput) ReadAttributes added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ReadAttributes() pulumi.StringArrayOutput

The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a [GetUser](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html) API request to retrieve and display your user's profile data.

When you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.

func (LookupUserPoolClientResultOutput) RefreshTokenValidity added in v0.12.0 

func (o LookupUserPoolClientResultOutput) RefreshTokenValidity() pulumi.IntPtrOutput

The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session and retrieve new access and ID tokens for 10 days.

The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.

func (LookupUserPoolClientResultOutput) SupportedIdentityProviders added in v0.12.0 

func (o LookupUserPoolClientResultOutput) SupportedIdentityProviders() pulumi.StringArrayOutput

A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .

func (LookupUserPoolClientResultOutput) ToLookupUserPoolClientResultOutput added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ToLookupUserPoolClientResultOutput() LookupUserPoolClientResultOutput

func (LookupUserPoolClientResultOutput) ToLookupUserPoolClientResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolClientResultOutput) ToLookupUserPoolClientResultOutputWithContext(ctx context.Context) LookupUserPoolClientResultOutput

func (LookupUserPoolClientResultOutput) TokenValidityUnits added in v0.12.0 

func (o LookupUserPoolClientResultOutput) TokenValidityUnits() UserPoolClientTokenValidityUnitsPtrOutput

The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours.

func (LookupUserPoolClientResultOutput) WriteAttributes added in v0.12.0 

func (o LookupUserPoolClientResultOutput) WriteAttributes() pulumi.StringArrayOutput

The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list. An example of this kind of activity is when you present your user with a form to update their profile information and they change their last name. Your app then makes an [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html) API request and sets `family_name` to the new value.

When you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.

If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .

type LookupUserPoolDomainArgs added in v0.12.0 

type LookupUserPoolDomainArgs struct {
	// The resource ID.
	Id string `pulumi:"id"`
}

type LookupUserPoolDomainOutputArgs added in v0.12.0 

type LookupUserPoolDomainOutputArgs struct {
	// The resource ID.
	Id pulumi.StringInput `pulumi:"id"`
}

func (LookupUserPoolDomainOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolDomainOutputArgs) ElementType() reflect.Type

type LookupUserPoolDomainResult added in v0.12.0 

type LookupUserPoolDomainResult struct {
	// The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider.
	CloudFrontDistribution *string `pulumi:"cloudFrontDistribution"`
	// The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.
	CustomDomainConfig *UserPoolDomainCustomDomainConfigType `pulumi:"customDomainConfig"`
	// The resource ID.
	Id *string `pulumi:"id"`
}

func LookupUserPoolDomain added in v0.12.0 

func LookupUserPoolDomain(ctx *pulumi.Context, args *LookupUserPoolDomainArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolDomainResult, error)

Resource Type definition for AWS::Cognito::UserPoolDomain

type LookupUserPoolDomainResultOutput added in v0.12.0 

type LookupUserPoolDomainResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolDomainOutput added in v0.12.0 

func LookupUserPoolDomainOutput(ctx *pulumi.Context, args LookupUserPoolDomainOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolDomainResultOutput

func (LookupUserPoolDomainResultOutput) CloudFrontDistribution added in v0.38.0 

func (o LookupUserPoolDomainResultOutput) CloudFrontDistribution() pulumi.StringPtrOutput

The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider.

func (LookupUserPoolDomainResultOutput) CustomDomainConfig added in v0.12.0 

func (o LookupUserPoolDomainResultOutput) CustomDomainConfig() UserPoolDomainCustomDomainConfigTypePtrOutput

The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.

func (LookupUserPoolDomainResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolDomainResultOutput) ElementType() reflect.Type

func (LookupUserPoolDomainResultOutput) Id added in v0.12.0 

func (o LookupUserPoolDomainResultOutput) Id() pulumi.StringPtrOutput

The resource ID.

func (LookupUserPoolDomainResultOutput) ToLookupUserPoolDomainResultOutput added in v0.12.0 

func (o LookupUserPoolDomainResultOutput) ToLookupUserPoolDomainResultOutput() LookupUserPoolDomainResultOutput

func (LookupUserPoolDomainResultOutput) ToLookupUserPoolDomainResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolDomainResultOutput) ToLookupUserPoolDomainResultOutputWithContext(ctx context.Context) LookupUserPoolDomainResultOutput

type LookupUserPoolGroupArgs added in v0.12.0 

type LookupUserPoolGroupArgs struct {
	// The name of the group. Must be unique.
	GroupName string `pulumi:"groupName"`
	// The user pool ID for the user pool.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolGroupOutputArgs added in v0.12.0 

type LookupUserPoolGroupOutputArgs struct {
	// The name of the group. Must be unique.
	GroupName pulumi.StringInput `pulumi:"groupName"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolGroupOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolGroupOutputArgs) ElementType() reflect.Type

type LookupUserPoolGroupResult added in v0.12.0 

type LookupUserPoolGroupResult struct {
	// A string containing the description of the group.
	Description *string `pulumi:"description"`
	// A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.
	//
	// Two groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.
	//
	// The default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .
	Precedence *int `pulumi:"precedence"`
	// The role Amazon Resource Name (ARN) for the group.
	RoleArn *string `pulumi:"roleArn"`
}

func LookupUserPoolGroup added in v0.12.0 

func LookupUserPoolGroup(ctx *pulumi.Context, args *LookupUserPoolGroupArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolGroupResult, error)

Resource Type definition for AWS::Cognito::UserPoolGroup

type LookupUserPoolGroupResultOutput added in v0.12.0 

type LookupUserPoolGroupResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolGroupOutput added in v0.12.0 

func LookupUserPoolGroupOutput(ctx *pulumi.Context, args LookupUserPoolGroupOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolGroupResultOutput

func (LookupUserPoolGroupResultOutput) Description added in v0.12.0 

func (o LookupUserPoolGroupResultOutput) Description() pulumi.StringPtrOutput

A string containing the description of the group.

func (LookupUserPoolGroupResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolGroupResultOutput) ElementType() reflect.Type

func (LookupUserPoolGroupResultOutput) Precedence added in v0.12.0 

func (o LookupUserPoolGroupResultOutput) Precedence() pulumi.IntPtrOutput

A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.

Two groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.

The default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .

func (LookupUserPoolGroupResultOutput) RoleArn added in v0.12.0 

func (o LookupUserPoolGroupResultOutput) RoleArn() pulumi.StringPtrOutput

The role Amazon Resource Name (ARN) for the group.

func (LookupUserPoolGroupResultOutput) ToLookupUserPoolGroupResultOutput added in v0.12.0 

func (o LookupUserPoolGroupResultOutput) ToLookupUserPoolGroupResultOutput() LookupUserPoolGroupResultOutput

func (LookupUserPoolGroupResultOutput) ToLookupUserPoolGroupResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolGroupResultOutput) ToLookupUserPoolGroupResultOutputWithContext(ctx context.Context) LookupUserPoolGroupResultOutput

type LookupUserPoolIdentityProviderArgs added in v0.12.0 

type LookupUserPoolIdentityProviderArgs struct {
	// The IdP name.
	ProviderName string `pulumi:"providerName"`
	// The user pool ID.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolIdentityProviderOutputArgs added in v0.12.0 

type LookupUserPoolIdentityProviderOutputArgs struct {
	// The IdP name.
	ProviderName pulumi.StringInput `pulumi:"providerName"`
	// The user pool ID.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolIdentityProviderOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolIdentityProviderOutputArgs) ElementType() reflect.Type

type LookupUserPoolIdentityProviderResult added in v0.12.0 

type LookupUserPoolIdentityProviderResult struct {
	// A mapping of IdP attributes to standard and custom user pool attributes.
	AttributeMapping map[string]string `pulumi:"attributeMapping"`
	// A list of IdP identifiers.
	IdpIdentifiers []string `pulumi:"idpIdentifiers"`
	// The scopes, URLs, and identifiers for your external identity provider. The following
	// examples describe the provider detail keys for each IdP type. These values and their
	// schema are subject to change. Social IdP `authorize_scopes` values must match
	// the values listed here.
	//
	// - **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .
	//
	// Create or update request: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "attributes_url_add_attributes": "false", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	// - **SAML** - Create or update request with Metadata URL: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// Create or update request with Metadata file: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataFile": "[metadata XML]", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// The value of `MetadataFile` must be the plaintext metadata document with all quote (") characters escaped by backslashes.
	//
	// Describe response: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "ActiveEncryptionCertificate": "[certificate]", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256", "SLORedirectBindingURI": "https://auth.example.com/slo/saml", "SSORedirectBindingURI": "https://auth.example.com/sso/saml" }`
	// - **LoginWithAmazon** - Create or update request: `"ProviderDetails": { "authorize_scopes": "profile postal_code", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret"`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://api.amazon.com/user/profile", "attributes_url_add_attributes": "false", "authorize_scopes": "profile postal_code", "authorize_url": "https://www.amazon.com/ap/oa", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "POST", "token_url": "https://api.amazon.com/auth/o2/token" }`
	// - **Google** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email profile openid", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://people.googleapis.com/v1/people/me?personFields=", "attributes_url_add_attributes": "true", "authorize_scopes": "email profile openid", "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret", "oidc_issuer": "https://accounts.google.com", "token_request_method": "POST", "token_url": "https://www.googleapis.com/oauth2/v4/token" }`
	// - **SignInWithApple** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email name", "client_id": "com.example.cognito", "private_key": "1EXAMPLE", "key_id": "2EXAMPLE", "team_id": "3EXAMPLE" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url_add_attributes": "false", "authorize_scopes": "email name", "authorize_url": "https://appleid.apple.com/auth/authorize", "client_id": "com.example.cognito", "key_id": "1EXAMPLE", "oidc_issuer": "https://appleid.apple.com", "team_id": "2EXAMPLE", "token_request_method": "POST", "token_url": "https://appleid.apple.com/auth/token" }`
	// - **Facebook** - Create or update request: `"ProviderDetails": { "api_version": "v17.0", "authorize_scopes": "public_profile, email", "client_id": "1example23456789", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "api_version": "v17.0", "attributes_url": "https://graph.facebook.com/v17.0/me?fields=", "attributes_url_add_attributes": "true", "authorize_scopes": "public_profile, email", "authorize_url": "https://www.facebook.com/v17.0/dialog/oauth", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "GET", "token_url": "https://graph.facebook.com/v17.0/oauth/access_token" }`
	ProviderDetails map[string]string `pulumi:"providerDetails"`
}

func LookupUserPoolIdentityProvider added in v0.12.0 

func LookupUserPoolIdentityProvider(ctx *pulumi.Context, args *LookupUserPoolIdentityProviderArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolIdentityProviderResult, error)

Resource Type definition for AWS::Cognito::UserPoolIdentityProvider

type LookupUserPoolIdentityProviderResultOutput added in v0.12.0 

type LookupUserPoolIdentityProviderResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolIdentityProviderOutput added in v0.12.0 

func LookupUserPoolIdentityProviderOutput(ctx *pulumi.Context, args LookupUserPoolIdentityProviderOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolIdentityProviderResultOutput

func (LookupUserPoolIdentityProviderResultOutput) AttributeMapping added in v0.12.0 

func (o LookupUserPoolIdentityProviderResultOutput) AttributeMapping() pulumi.StringMapOutput

A mapping of IdP attributes to standard and custom user pool attributes.

func (LookupUserPoolIdentityProviderResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolIdentityProviderResultOutput) ElementType() reflect.Type

func (LookupUserPoolIdentityProviderResultOutput) IdpIdentifiers added in v0.12.0 

func (o LookupUserPoolIdentityProviderResultOutput) IdpIdentifiers() pulumi.StringArrayOutput

A list of IdP identifiers.

func (LookupUserPoolIdentityProviderResultOutput) ProviderDetails added in v0.12.0 

func (o LookupUserPoolIdentityProviderResultOutput) ProviderDetails() pulumi.StringMapOutput

The scopes, URLs, and identifiers for your external identity provider. The following examples describe the provider detail keys for each IdP type. These values and their schema are subject to change. Social IdP `authorize_scopes` values must match the values listed here.

- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .

Create or update request: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`

Describe response: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "attributes_url_add_attributes": "false", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }` - **SAML** - Create or update request with Metadata URL: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256" }`

Create or update request with Metadata file: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataFile": "[metadata XML]", "RequestSigningAlgorithm": "rsa-sha256" }`

The value of `MetadataFile` must be the plaintext metadata document with all quote (") characters escaped by backslashes.

Describe response: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "ActiveEncryptionCertificate": "[certificate]", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256", "SLORedirectBindingURI": "https://auth.example.com/slo/saml", "SSORedirectBindingURI": "https://auth.example.com/sso/saml" }` - **LoginWithAmazon** - Create or update request: `"ProviderDetails": { "authorize_scopes": "profile postal_code", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret"`

Describe response: `"ProviderDetails": { "attributes_url": "https://api.amazon.com/user/profile", "attributes_url_add_attributes": "false", "authorize_scopes": "profile postal_code", "authorize_url": "https://www.amazon.com/ap/oa", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "POST", "token_url": "https://api.amazon.com/auth/o2/token" }` - **Google** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email profile openid", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret" }`

Describe response: `"ProviderDetails": { "attributes_url": "https://people.googleapis.com/v1/people/me?personFields=", "attributes_url_add_attributes": "true", "authorize_scopes": "email profile openid", "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret", "oidc_issuer": "https://accounts.google.com", "token_request_method": "POST", "token_url": "https://www.googleapis.com/oauth2/v4/token" }` - **SignInWithApple** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email name", "client_id": "com.example.cognito", "private_key": "1EXAMPLE", "key_id": "2EXAMPLE", "team_id": "3EXAMPLE" }`

Describe response: `"ProviderDetails": { "attributes_url_add_attributes": "false", "authorize_scopes": "email name", "authorize_url": "https://appleid.apple.com/auth/authorize", "client_id": "com.example.cognito", "key_id": "1EXAMPLE", "oidc_issuer": "https://appleid.apple.com", "team_id": "2EXAMPLE", "token_request_method": "POST", "token_url": "https://appleid.apple.com/auth/token" }` - **Facebook** - Create or update request: `"ProviderDetails": { "api_version": "v17.0", "authorize_scopes": "public_profile, email", "client_id": "1example23456789", "client_secret": "provider-app-client-secret" }`

Describe response: `"ProviderDetails": { "api_version": "v17.0", "attributes_url": "https://graph.facebook.com/v17.0/me?fields=", "attributes_url_add_attributes": "true", "authorize_scopes": "public_profile, email", "authorize_url": "https://www.facebook.com/v17.0/dialog/oauth", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "GET", "token_url": "https://graph.facebook.com/v17.0/oauth/access_token" }`

func (LookupUserPoolIdentityProviderResultOutput) ToLookupUserPoolIdentityProviderResultOutput added in v0.12.0 

func (o LookupUserPoolIdentityProviderResultOutput) ToLookupUserPoolIdentityProviderResultOutput() LookupUserPoolIdentityProviderResultOutput

func (LookupUserPoolIdentityProviderResultOutput) ToLookupUserPoolIdentityProviderResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolIdentityProviderResultOutput) ToLookupUserPoolIdentityProviderResultOutputWithContext(ctx context.Context) LookupUserPoolIdentityProviderResultOutput

type LookupUserPoolOutputArgs added in v0.12.0 

type LookupUserPoolOutputArgs struct {
	// The ID of the user pool.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolOutputArgs) ElementType() reflect.Type

type LookupUserPoolResourceServerArgs added in v0.12.0 

type LookupUserPoolResourceServerArgs struct {
	// A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
	//
	// Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
	Identifier string `pulumi:"identifier"`
	// The user pool ID for the user pool.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolResourceServerOutputArgs added in v0.12.0 

type LookupUserPoolResourceServerOutputArgs struct {
	// A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
	//
	// Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
	Identifier pulumi.StringInput `pulumi:"identifier"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolResourceServerOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolResourceServerOutputArgs) ElementType() reflect.Type

type LookupUserPoolResourceServerResult added in v0.12.0 

type LookupUserPoolResourceServerResult struct {
	// A friendly name for the resource server.
	Name *string `pulumi:"name"`
	// A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .
	Scopes []UserPoolResourceServerResourceServerScopeType `pulumi:"scopes"`
}

func LookupUserPoolResourceServer added in v0.12.0 

func LookupUserPoolResourceServer(ctx *pulumi.Context, args *LookupUserPoolResourceServerArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolResourceServerResult, error)

Resource Type definition for AWS::Cognito::UserPoolResourceServer

type LookupUserPoolResourceServerResultOutput added in v0.12.0 

type LookupUserPoolResourceServerResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolResourceServerOutput added in v0.12.0 

func LookupUserPoolResourceServerOutput(ctx *pulumi.Context, args LookupUserPoolResourceServerOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolResourceServerResultOutput

func (LookupUserPoolResourceServerResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolResourceServerResultOutput) ElementType() reflect.Type

func (LookupUserPoolResourceServerResultOutput) Name added in v0.12.0 

func (o LookupUserPoolResourceServerResultOutput) Name() pulumi.StringPtrOutput

A friendly name for the resource server.

func (LookupUserPoolResourceServerResultOutput) Scopes added in v0.12.0 

func (o LookupUserPoolResourceServerResultOutput) Scopes() UserPoolResourceServerResourceServerScopeTypeArrayOutput

A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .

func (LookupUserPoolResourceServerResultOutput) ToLookupUserPoolResourceServerResultOutput added in v0.12.0 

func (o LookupUserPoolResourceServerResultOutput) ToLookupUserPoolResourceServerResultOutput() LookupUserPoolResourceServerResultOutput

func (LookupUserPoolResourceServerResultOutput) ToLookupUserPoolResourceServerResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolResourceServerResultOutput) ToLookupUserPoolResourceServerResultOutputWithContext(ctx context.Context) LookupUserPoolResourceServerResultOutput

type LookupUserPoolResult added in v0.12.0 

type LookupUserPoolResult struct {
	// The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
	AccountRecoverySetting *UserPoolAccountRecoverySetting `pulumi:"accountRecoverySetting"`
	// The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	AdminCreateUserConfig *UserPoolAdminCreateUserConfig `pulumi:"adminCreateUserConfig"`
	// Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
	AliasAttributes []string `pulumi:"aliasAttributes"`
	// The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` .
	Arn *string `pulumi:"arn"`
	// The attributes to be auto-verified. Possible values: *email* , *phone_number* .
	AutoVerifiedAttributes []string `pulumi:"autoVerifiedAttributes"`
	// When active, `DeletionProtection` prevents accidental deletion of your user
	// pool. Before you can delete a user pool that you have protected against deletion, you
	// must deactivate this feature.
	//
	// When you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.
	DeletionProtection *string `pulumi:"deletionProtection"`
	// The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.
	//
	// > When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature.
	DeviceConfiguration        *UserPoolDeviceConfiguration `pulumi:"deviceConfiguration"`
	EmailAuthenticationMessage *string                      `pulumi:"emailAuthenticationMessage"`
	EmailAuthenticationSubject *string                      `pulumi:"emailAuthenticationSubject"`
	// The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool.
	EmailConfiguration *UserPoolEmailConfiguration `pulumi:"emailConfiguration"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationMessage *string `pulumi:"emailVerificationMessage"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationSubject *string `pulumi:"emailVerificationSubject"`
	// A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.
	LambdaConfig *UserPoolLambdaConfig `pulumi:"lambdaConfig"`
	// The multi-factor authentication (MFA) configuration. Valid values include:
	//
	// - `OFF` MFA won't be used for any users.
	// - `ON` MFA is required for all users to sign in.
	// - `OPTIONAL` MFA will be required only for individual users who have an MFA factor activated.
	MfaConfiguration *string `pulumi:"mfaConfiguration"`
	// A list of user pool policies. Contains the policy that sets password-complexity requirements.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	Policies *UserPoolPolicies `pulumi:"policies"`
	// A friendly name for the IdP.
	ProviderName *string `pulumi:"providerName"`
	// The URL of the provider of the Amazon Cognito user pool, specified as a `String` .
	ProviderUrl *string `pulumi:"providerUrl"`
	// An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
	Schema []UserPoolSchemaAttribute `pulumi:"schema"`
	// The contents of the SMS authentication message.
	SmsAuthenticationMessage *string `pulumi:"smsAuthenticationMessage"`
	// The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account .
	SmsConfiguration *UserPoolSmsConfiguration `pulumi:"smsConfiguration"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	SmsVerificationMessage *string `pulumi:"smsVerificationMessage"`
	// The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,
	// a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
	// more information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) .
	UserAttributeUpdateSettings *UserPoolUserAttributeUpdateSettings `pulumi:"userAttributeUpdateSettings"`
	// User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .
	//
	// For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) .
	UserPoolAddOns *UserPoolAddOns `pulumi:"userPoolAddOns"`
	// The ID of the user pool.
	UserPoolId *string `pulumi:"userPoolId"`
	// A string used to name the user pool.
	UserPoolName *string `pulumi:"userPoolName"`
	// The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
	UserPoolTags map[string]string `pulumi:"userPoolTags"`
	// Specifies whether a user can use an email address or phone number as a username when they sign up.
	UsernameAttributes []string `pulumi:"usernameAttributes"`
	// Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
	//
	// This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
	UsernameConfiguration *UserPoolUsernameConfiguration `pulumi:"usernameConfiguration"`
	// The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.
	//
	// Set the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.
	VerificationMessageTemplate *UserPoolVerificationMessageTemplate `pulumi:"verificationMessageTemplate"`
}

func LookupUserPool added in v0.12.0 

func LookupUserPool(ctx *pulumi.Context, args *LookupUserPoolArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolResult, error)

Definition of AWS::Cognito::UserPool Resource Type

type LookupUserPoolResultOutput added in v0.12.0 

type LookupUserPoolResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolOutput added in v0.12.0 

func LookupUserPoolOutput(ctx *pulumi.Context, args LookupUserPoolOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolResultOutput

func (LookupUserPoolResultOutput) AccountRecoverySetting added in v0.12.0 

func (o LookupUserPoolResultOutput) AccountRecoverySetting() UserPoolAccountRecoverySettingPtrOutput

The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.

func (LookupUserPoolResultOutput) AdminCreateUserConfig added in v0.12.0 

func (o LookupUserPoolResultOutput) AdminCreateUserConfig() UserPoolAdminCreateUserConfigPtrOutput

The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire.

This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .

func (LookupUserPoolResultOutput) AliasAttributes added in v0.12.0 

func (o LookupUserPoolResultOutput) AliasAttributes() pulumi.StringArrayOutput

Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .

func (LookupUserPoolResultOutput) Arn added in v0.12.0 

func (o LookupUserPoolResultOutput) Arn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` .

func (LookupUserPoolResultOutput) AutoVerifiedAttributes added in v0.12.0 

func (o LookupUserPoolResultOutput) AutoVerifiedAttributes() pulumi.StringArrayOutput

The attributes to be auto-verified. Possible values: *email* , *phone_number* .

func (LookupUserPoolResultOutput) DeletionProtection added in v0.40.0 

func (o LookupUserPoolResultOutput) DeletionProtection() pulumi.StringPtrOutput

When active, `DeletionProtection` prevents accidental deletion of your user pool. Before you can delete a user pool that you have protected against deletion, you must deactivate this feature.

When you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.

func (LookupUserPoolResultOutput) DeviceConfiguration added in v0.12.0 

func (o LookupUserPoolResultOutput) DeviceConfiguration() UserPoolDeviceConfigurationPtrOutput

The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.

> When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature.

func (LookupUserPoolResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolResultOutput) ElementType() reflect.Type

func (LookupUserPoolResultOutput) EmailAuthenticationMessage added in v0.125.0 

func (o LookupUserPoolResultOutput) EmailAuthenticationMessage() pulumi.StringPtrOutput

func (LookupUserPoolResultOutput) EmailAuthenticationSubject added in v0.125.0 

func (o LookupUserPoolResultOutput) EmailAuthenticationSubject() pulumi.StringPtrOutput

func (LookupUserPoolResultOutput) EmailConfiguration added in v0.12.0 

func (o LookupUserPoolResultOutput) EmailConfiguration() UserPoolEmailConfigurationPtrOutput

The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool.

func (LookupUserPoolResultOutput) EmailVerificationMessage added in v0.12.0 

func (o LookupUserPoolResultOutput) EmailVerificationMessage() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (LookupUserPoolResultOutput) EmailVerificationSubject added in v0.12.0 

func (o LookupUserPoolResultOutput) EmailVerificationSubject() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (LookupUserPoolResultOutput) LambdaConfig added in v0.12.0 

func (o LookupUserPoolResultOutput) LambdaConfig() UserPoolLambdaConfigPtrOutput

A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.

func (LookupUserPoolResultOutput) MfaConfiguration added in v0.12.0 

func (o LookupUserPoolResultOutput) MfaConfiguration() pulumi.StringPtrOutput

The multi-factor authentication (MFA) configuration. Valid values include:

- `OFF` MFA won't be used for any users. - `ON` MFA is required for all users to sign in. - `OPTIONAL` MFA will be required only for individual users who have an MFA factor activated.

func (LookupUserPoolResultOutput) Policies added in v0.12.0 

func (o LookupUserPoolResultOutput) Policies() UserPoolPoliciesPtrOutput

A list of user pool policies. Contains the policy that sets password-complexity requirements.

This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .

func (LookupUserPoolResultOutput) ProviderName added in v0.12.0 

func (o LookupUserPoolResultOutput) ProviderName() pulumi.StringPtrOutput

A friendly name for the IdP.

func (LookupUserPoolResultOutput) ProviderUrl added in v0.72.0 

func (o LookupUserPoolResultOutput) ProviderUrl() pulumi.StringPtrOutput

The URL of the provider of the Amazon Cognito user pool, specified as a `String` .

func (LookupUserPoolResultOutput) Schema added in v0.12.0 

func (o LookupUserPoolResultOutput) Schema() UserPoolSchemaAttributeArrayOutput

An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.

func (LookupUserPoolResultOutput) SmsAuthenticationMessage added in v0.12.0 

func (o LookupUserPoolResultOutput) SmsAuthenticationMessage() pulumi.StringPtrOutput

The contents of the SMS authentication message.

func (LookupUserPoolResultOutput) SmsConfiguration added in v0.12.0 

func (o LookupUserPoolResultOutput) SmsConfiguration() UserPoolSmsConfigurationPtrOutput

The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account .

func (LookupUserPoolResultOutput) SmsVerificationMessage added in v0.12.0 

func (o LookupUserPoolResultOutput) SmsVerificationMessage() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (LookupUserPoolResultOutput) ToLookupUserPoolResultOutput added in v0.12.0 

func (o LookupUserPoolResultOutput) ToLookupUserPoolResultOutput() LookupUserPoolResultOutput

func (LookupUserPoolResultOutput) ToLookupUserPoolResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolResultOutput) ToLookupUserPoolResultOutputWithContext(ctx context.Context) LookupUserPoolResultOutput

func (LookupUserPoolResultOutput) UserAttributeUpdateSettings added in v0.19.0 

func (o LookupUserPoolResultOutput) UserAttributeUpdateSettings() UserPoolUserAttributeUpdateSettingsPtrOutput

The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` , a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For more information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) .

func (LookupUserPoolResultOutput) UserPoolAddOns added in v0.12.0 

func (o LookupUserPoolResultOutput) UserPoolAddOns() UserPoolAddOnsPtrOutput

User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .

For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) .

func (LookupUserPoolResultOutput) UserPoolId added in v0.82.0 

func (o LookupUserPoolResultOutput) UserPoolId() pulumi.StringPtrOutput

The ID of the user pool.

func (LookupUserPoolResultOutput) UserPoolName added in v0.12.0 

func (o LookupUserPoolResultOutput) UserPoolName() pulumi.StringPtrOutput

A string used to name the user pool.

func (LookupUserPoolResultOutput) UserPoolTags added in v0.12.0 

func (o LookupUserPoolResultOutput) UserPoolTags() pulumi.StringMapOutput

The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.

func (LookupUserPoolResultOutput) UsernameAttributes added in v0.12.0 

func (o LookupUserPoolResultOutput) UsernameAttributes() pulumi.StringArrayOutput

Specifies whether a user can use an email address or phone number as a username when they sign up.

func (LookupUserPoolResultOutput) UsernameConfiguration added in v0.12.0 

func (o LookupUserPoolResultOutput) UsernameConfiguration() UserPoolUsernameConfigurationPtrOutput

Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.

This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .

func (LookupUserPoolResultOutput) VerificationMessageTemplate added in v0.12.0 

func (o LookupUserPoolResultOutput) VerificationMessageTemplate() UserPoolVerificationMessageTemplatePtrOutput

The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.

Set the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.

type LookupUserPoolRiskConfigurationAttachmentArgs added in v0.12.0 

type LookupUserPoolRiskConfigurationAttachmentArgs struct {
	// The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
	ClientId string `pulumi:"clientId"`
	// The ID of the user pool that has the risk configuration applied.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolRiskConfigurationAttachmentOutputArgs added in v0.12.0 

type LookupUserPoolRiskConfigurationAttachmentOutputArgs struct {
	// The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
	ClientId pulumi.StringInput `pulumi:"clientId"`
	// The ID of the user pool that has the risk configuration applied.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolRiskConfigurationAttachmentOutputArgs) ElementType added in v0.12.0 

func (LookupUserPoolRiskConfigurationAttachmentOutputArgs) ElementType() reflect.Type

type LookupUserPoolRiskConfigurationAttachmentResult added in v0.12.0 

type LookupUserPoolRiskConfigurationAttachmentResult struct {
	// The settings for automated responses and notification templates for adaptive authentication with advanced security features.
	AccountTakeoverRiskConfiguration *UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType `pulumi:"accountTakeoverRiskConfiguration"`
	// Settings for compromised-credentials actions and authentication types with advanced security features in full-function `ENFORCED` mode.
	CompromisedCredentialsRiskConfiguration *UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType `pulumi:"compromisedCredentialsRiskConfiguration"`
	// Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.
	RiskExceptionConfiguration *UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType `pulumi:"riskExceptionConfiguration"`
}

func LookupUserPoolRiskConfigurationAttachment added in v0.12.0 

func LookupUserPoolRiskConfigurationAttachment(ctx *pulumi.Context, args *LookupUserPoolRiskConfigurationAttachmentArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolRiskConfigurationAttachmentResult, error)

Resource Type definition for AWS::Cognito::UserPoolRiskConfigurationAttachment

type LookupUserPoolRiskConfigurationAttachmentResultOutput added in v0.12.0 

type LookupUserPoolRiskConfigurationAttachmentResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolRiskConfigurationAttachmentOutput added in v0.12.0 

func LookupUserPoolRiskConfigurationAttachmentOutput(ctx *pulumi.Context, args LookupUserPoolRiskConfigurationAttachmentOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolRiskConfigurationAttachmentResultOutput

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) AccountTakeoverRiskConfiguration added in v0.12.0 

func (o LookupUserPoolRiskConfigurationAttachmentResultOutput) AccountTakeoverRiskConfiguration() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

The settings for automated responses and notification templates for adaptive authentication with advanced security features.

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) CompromisedCredentialsRiskConfiguration added in v0.12.0 

func (o LookupUserPoolRiskConfigurationAttachmentResultOutput) CompromisedCredentialsRiskConfiguration() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

Settings for compromised-credentials actions and authentication types with advanced security features in full-function `ENFORCED` mode.

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) ElementType added in v0.12.0 

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) ElementType() reflect.Type

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) RiskExceptionConfiguration added in v0.12.0 

func (o LookupUserPoolRiskConfigurationAttachmentResultOutput) RiskExceptionConfiguration() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) ToLookupUserPoolRiskConfigurationAttachmentResultOutput added in v0.12.0 

func (o LookupUserPoolRiskConfigurationAttachmentResultOutput) ToLookupUserPoolRiskConfigurationAttachmentResultOutput() LookupUserPoolRiskConfigurationAttachmentResultOutput

func (LookupUserPoolRiskConfigurationAttachmentResultOutput) ToLookupUserPoolRiskConfigurationAttachmentResultOutputWithContext added in v0.12.0 

func (o LookupUserPoolRiskConfigurationAttachmentResultOutput) ToLookupUserPoolRiskConfigurationAttachmentResultOutputWithContext(ctx context.Context) LookupUserPoolRiskConfigurationAttachmentResultOutput

type LookupUserPoolUiCustomizationAttachmentArgs added in v0.72.0 

type LookupUserPoolUiCustomizationAttachmentArgs struct {
	// The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
	ClientId string `pulumi:"clientId"`
	// The user pool ID for the user pool.
	UserPoolId string `pulumi:"userPoolId"`
}

type LookupUserPoolUiCustomizationAttachmentOutputArgs added in v0.72.0 

type LookupUserPoolUiCustomizationAttachmentOutputArgs struct {
	// The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
	ClientId pulumi.StringInput `pulumi:"clientId"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput `pulumi:"userPoolId"`
}

func (LookupUserPoolUiCustomizationAttachmentOutputArgs) ElementType added in v0.72.0 

func (LookupUserPoolUiCustomizationAttachmentOutputArgs) ElementType() reflect.Type

type LookupUserPoolUiCustomizationAttachmentResult added in v0.72.0 

type LookupUserPoolUiCustomizationAttachmentResult struct {
	// The CSS values in the UI customization.
	Css *string `pulumi:"css"`
}

func LookupUserPoolUiCustomizationAttachment added in v0.72.0 

func LookupUserPoolUiCustomizationAttachment(ctx *pulumi.Context, args *LookupUserPoolUiCustomizationAttachmentArgs, opts ...pulumi.InvokeOption) (*LookupUserPoolUiCustomizationAttachmentResult, error)

Resource Type definition for AWS::Cognito::UserPoolUICustomizationAttachment

type LookupUserPoolUiCustomizationAttachmentResultOutput added in v0.72.0 

type LookupUserPoolUiCustomizationAttachmentResultOutput struct{ *pulumi.OutputState }

func LookupUserPoolUiCustomizationAttachmentOutput added in v0.72.0 

func LookupUserPoolUiCustomizationAttachmentOutput(ctx *pulumi.Context, args LookupUserPoolUiCustomizationAttachmentOutputArgs, opts ...pulumi.InvokeOption) LookupUserPoolUiCustomizationAttachmentResultOutput

func (LookupUserPoolUiCustomizationAttachmentResultOutput) Css added in v0.72.0 

func (o LookupUserPoolUiCustomizationAttachmentResultOutput) Css() pulumi.StringPtrOutput

The CSS values in the UI customization.

func (LookupUserPoolUiCustomizationAttachmentResultOutput) ElementType added in v0.72.0 

func (LookupUserPoolUiCustomizationAttachmentResultOutput) ElementType() reflect.Type

func (LookupUserPoolUiCustomizationAttachmentResultOutput) ToLookupUserPoolUiCustomizationAttachmentResultOutput added in v0.72.0 

func (o LookupUserPoolUiCustomizationAttachmentResultOutput) ToLookupUserPoolUiCustomizationAttachmentResultOutput() LookupUserPoolUiCustomizationAttachmentResultOutput

func (LookupUserPoolUiCustomizationAttachmentResultOutput) ToLookupUserPoolUiCustomizationAttachmentResultOutputWithContext added in v0.72.0 

func (o LookupUserPoolUiCustomizationAttachmentResultOutput) ToLookupUserPoolUiCustomizationAttachmentResultOutputWithContext(ctx context.Context) LookupUserPoolUiCustomizationAttachmentResultOutput

type UserPool 

type UserPool struct {
	pulumi.CustomResourceState

	// The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
	AccountRecoverySetting UserPoolAccountRecoverySettingPtrOutput `pulumi:"accountRecoverySetting"`
	// The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	AdminCreateUserConfig UserPoolAdminCreateUserConfigPtrOutput `pulumi:"adminCreateUserConfig"`
	// Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
	AliasAttributes pulumi.StringArrayOutput `pulumi:"aliasAttributes"`
	// The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` .
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The attributes to be auto-verified. Possible values: *email* , *phone_number* .
	AutoVerifiedAttributes pulumi.StringArrayOutput `pulumi:"autoVerifiedAttributes"`
	// When active, `DeletionProtection` prevents accidental deletion of your user
	// pool. Before you can delete a user pool that you have protected against deletion, you
	// must deactivate this feature.
	//
	// When you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.
	DeletionProtection pulumi.StringPtrOutput `pulumi:"deletionProtection"`
	// The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.
	//
	// > When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature.
	DeviceConfiguration        UserPoolDeviceConfigurationPtrOutput `pulumi:"deviceConfiguration"`
	EmailAuthenticationMessage pulumi.StringPtrOutput               `pulumi:"emailAuthenticationMessage"`
	EmailAuthenticationSubject pulumi.StringPtrOutput               `pulumi:"emailAuthenticationSubject"`
	// The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool.
	EmailConfiguration UserPoolEmailConfigurationPtrOutput `pulumi:"emailConfiguration"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationMessage pulumi.StringPtrOutput `pulumi:"emailVerificationMessage"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationSubject pulumi.StringPtrOutput `pulumi:"emailVerificationSubject"`
	// Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:
	//
	// - `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .
	// - `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.
	// - `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .
	//
	// Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`
	EnabledMfas pulumi.StringArrayOutput `pulumi:"enabledMfas"`
	// A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.
	LambdaConfig UserPoolLambdaConfigPtrOutput `pulumi:"lambdaConfig"`
	// The multi-factor authentication (MFA) configuration. Valid values include:
	//
	// - `OFF` MFA won't be used for any users.
	// - `ON` MFA is required for all users to sign in.
	// - `OPTIONAL` MFA will be required only for individual users who have an MFA factor activated.
	MfaConfiguration pulumi.StringPtrOutput `pulumi:"mfaConfiguration"`
	// A list of user pool policies. Contains the policy that sets password-complexity requirements.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	Policies UserPoolPoliciesPtrOutput `pulumi:"policies"`
	// A friendly name for the IdP.
	ProviderName pulumi.StringOutput `pulumi:"providerName"`
	// The URL of the provider of the Amazon Cognito user pool, specified as a `String` .
	ProviderUrl pulumi.StringOutput `pulumi:"providerUrl"`
	// An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
	Schema UserPoolSchemaAttributeArrayOutput `pulumi:"schema"`
	// The contents of the SMS authentication message.
	SmsAuthenticationMessage pulumi.StringPtrOutput `pulumi:"smsAuthenticationMessage"`
	// The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account .
	SmsConfiguration UserPoolSmsConfigurationPtrOutput `pulumi:"smsConfiguration"`
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	SmsVerificationMessage pulumi.StringPtrOutput `pulumi:"smsVerificationMessage"`
	// The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,
	// a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
	// more information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) .
	UserAttributeUpdateSettings UserPoolUserAttributeUpdateSettingsPtrOutput `pulumi:"userAttributeUpdateSettings"`
	// User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .
	//
	// For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) .
	UserPoolAddOns UserPoolAddOnsPtrOutput `pulumi:"userPoolAddOns"`
	// The ID of the user pool.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
	// A string used to name the user pool.
	UserPoolName pulumi.StringPtrOutput `pulumi:"userPoolName"`
	// The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
	UserPoolTags pulumi.StringMapOutput `pulumi:"userPoolTags"`
	// Specifies whether a user can use an email address or phone number as a username when they sign up.
	UsernameAttributes pulumi.StringArrayOutput `pulumi:"usernameAttributes"`
	// Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
	//
	// This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
	UsernameConfiguration UserPoolUsernameConfigurationPtrOutput `pulumi:"usernameConfiguration"`
	// The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.
	//
	// Set the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.
	VerificationMessageTemplate UserPoolVerificationMessageTemplatePtrOutput `pulumi:"verificationMessageTemplate"`
}

Definition of AWS::Cognito::UserPool Resource Type

func GetUserPool 

func GetUserPool(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolState, opts ...pulumi.ResourceOption) (*UserPool, error)

GetUserPool gets an existing UserPool resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPool 

func NewUserPool(ctx *pulumi.Context,
	name string, args *UserPoolArgs, opts ...pulumi.ResourceOption) (*UserPool, error)

NewUserPool registers a new resource with the given unique name, arguments, and options.

func (*UserPool) ElementType 

func (*UserPool) ElementType() reflect.Type

func (*UserPool) ToUserPoolOutput 

func (i *UserPool) ToUserPoolOutput() UserPoolOutput

func (*UserPool) ToUserPoolOutputWithContext 

func (i *UserPool) ToUserPoolOutputWithContext(ctx context.Context) UserPoolOutput

type UserPoolAccountRecoverySetting 

type UserPoolAccountRecoverySetting struct {
	// The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators.
	RecoveryMechanisms []UserPoolRecoveryOption `pulumi:"recoveryMechanisms"`
}

type UserPoolAccountRecoverySettingArgs 

type UserPoolAccountRecoverySettingArgs struct {
	// The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators.
	RecoveryMechanisms UserPoolRecoveryOptionArrayInput `pulumi:"recoveryMechanisms"`
}

func (UserPoolAccountRecoverySettingArgs) ElementType 

func (UserPoolAccountRecoverySettingArgs) ElementType() reflect.Type

func (UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingOutput 

func (i UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingOutput() UserPoolAccountRecoverySettingOutput

func (UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingOutputWithContext 

func (i UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingOutputWithContext(ctx context.Context) UserPoolAccountRecoverySettingOutput

func (UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingPtrOutput 

func (i UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingPtrOutput() UserPoolAccountRecoverySettingPtrOutput

func (UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingPtrOutputWithContext 

func (i UserPoolAccountRecoverySettingArgs) ToUserPoolAccountRecoverySettingPtrOutputWithContext(ctx context.Context) UserPoolAccountRecoverySettingPtrOutput

type UserPoolAccountRecoverySettingInput 

type UserPoolAccountRecoverySettingInput interface {
	pulumi.Input

	ToUserPoolAccountRecoverySettingOutput() UserPoolAccountRecoverySettingOutput
	ToUserPoolAccountRecoverySettingOutputWithContext(context.Context) UserPoolAccountRecoverySettingOutput
}

UserPoolAccountRecoverySettingInput is an input type that accepts UserPoolAccountRecoverySettingArgs and UserPoolAccountRecoverySettingOutput values. You can construct a concrete instance of `UserPoolAccountRecoverySettingInput` via: 

UserPoolAccountRecoverySettingArgs{...}

type UserPoolAccountRecoverySettingOutput 

type UserPoolAccountRecoverySettingOutput struct{ *pulumi.OutputState }

func (UserPoolAccountRecoverySettingOutput) ElementType 

func (UserPoolAccountRecoverySettingOutput) ElementType() reflect.Type

func (UserPoolAccountRecoverySettingOutput) RecoveryMechanisms 

func (o UserPoolAccountRecoverySettingOutput) RecoveryMechanisms() UserPoolRecoveryOptionArrayOutput

The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators.

func (UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingOutput 

func (o UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingOutput() UserPoolAccountRecoverySettingOutput

func (UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingOutputWithContext 

func (o UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingOutputWithContext(ctx context.Context) UserPoolAccountRecoverySettingOutput

func (UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingPtrOutput 

func (o UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingPtrOutput() UserPoolAccountRecoverySettingPtrOutput

func (UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingPtrOutputWithContext 

func (o UserPoolAccountRecoverySettingOutput) ToUserPoolAccountRecoverySettingPtrOutputWithContext(ctx context.Context) UserPoolAccountRecoverySettingPtrOutput

type UserPoolAccountRecoverySettingPtrInput 

type UserPoolAccountRecoverySettingPtrInput interface {
	pulumi.Input

	ToUserPoolAccountRecoverySettingPtrOutput() UserPoolAccountRecoverySettingPtrOutput
	ToUserPoolAccountRecoverySettingPtrOutputWithContext(context.Context) UserPoolAccountRecoverySettingPtrOutput
}

UserPoolAccountRecoverySettingPtrInput is an input type that accepts UserPoolAccountRecoverySettingArgs, UserPoolAccountRecoverySettingPtr and UserPoolAccountRecoverySettingPtrOutput values. You can construct a concrete instance of `UserPoolAccountRecoverySettingPtrInput` via: 

        UserPoolAccountRecoverySettingArgs{...}

or:

        nil

func UserPoolAccountRecoverySettingPtr 

func UserPoolAccountRecoverySettingPtr(v *UserPoolAccountRecoverySettingArgs) UserPoolAccountRecoverySettingPtrInput

type UserPoolAccountRecoverySettingPtrOutput 

type UserPoolAccountRecoverySettingPtrOutput struct{ *pulumi.OutputState }

func (UserPoolAccountRecoverySettingPtrOutput) Elem 

func (o UserPoolAccountRecoverySettingPtrOutput) Elem() UserPoolAccountRecoverySettingOutput

func (UserPoolAccountRecoverySettingPtrOutput) ElementType 

func (UserPoolAccountRecoverySettingPtrOutput) ElementType() reflect.Type

func (UserPoolAccountRecoverySettingPtrOutput) RecoveryMechanisms 

func (o UserPoolAccountRecoverySettingPtrOutput) RecoveryMechanisms() UserPoolRecoveryOptionArrayOutput

The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators.

func (UserPoolAccountRecoverySettingPtrOutput) ToUserPoolAccountRecoverySettingPtrOutput 

func (o UserPoolAccountRecoverySettingPtrOutput) ToUserPoolAccountRecoverySettingPtrOutput() UserPoolAccountRecoverySettingPtrOutput

func (UserPoolAccountRecoverySettingPtrOutput) ToUserPoolAccountRecoverySettingPtrOutputWithContext 

func (o UserPoolAccountRecoverySettingPtrOutput) ToUserPoolAccountRecoverySettingPtrOutputWithContext(ctx context.Context) UserPoolAccountRecoverySettingPtrOutput

type UserPoolAddOns added in v0.2.0 

type UserPoolAddOns struct {
	AdvancedSecurityAdditionalFlows *UserPoolAdvancedSecurityAdditionalFlows `pulumi:"advancedSecurityAdditionalFlows"`
	// The operating mode of advanced security features for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.
	AdvancedSecurityMode *string `pulumi:"advancedSecurityMode"`
}

type UserPoolAddOnsArgs added in v0.2.0 

type UserPoolAddOnsArgs struct {
	AdvancedSecurityAdditionalFlows UserPoolAdvancedSecurityAdditionalFlowsPtrInput `pulumi:"advancedSecurityAdditionalFlows"`
	// The operating mode of advanced security features for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.
	AdvancedSecurityMode pulumi.StringPtrInput `pulumi:"advancedSecurityMode"`
}

func (UserPoolAddOnsArgs) ElementType added in v0.2.0 

func (UserPoolAddOnsArgs) ElementType() reflect.Type

func (UserPoolAddOnsArgs) ToUserPoolAddOnsOutput added in v0.2.0 

func (i UserPoolAddOnsArgs) ToUserPoolAddOnsOutput() UserPoolAddOnsOutput

func (UserPoolAddOnsArgs) ToUserPoolAddOnsOutputWithContext added in v0.2.0 

func (i UserPoolAddOnsArgs) ToUserPoolAddOnsOutputWithContext(ctx context.Context) UserPoolAddOnsOutput

func (UserPoolAddOnsArgs) ToUserPoolAddOnsPtrOutput added in v0.2.0 

func (i UserPoolAddOnsArgs) ToUserPoolAddOnsPtrOutput() UserPoolAddOnsPtrOutput

func (UserPoolAddOnsArgs) ToUserPoolAddOnsPtrOutputWithContext added in v0.2.0 

func (i UserPoolAddOnsArgs) ToUserPoolAddOnsPtrOutputWithContext(ctx context.Context) UserPoolAddOnsPtrOutput

type UserPoolAddOnsInput added in v0.2.0 

type UserPoolAddOnsInput interface {
	pulumi.Input

	ToUserPoolAddOnsOutput() UserPoolAddOnsOutput
	ToUserPoolAddOnsOutputWithContext(context.Context) UserPoolAddOnsOutput
}

UserPoolAddOnsInput is an input type that accepts UserPoolAddOnsArgs and UserPoolAddOnsOutput values. You can construct a concrete instance of `UserPoolAddOnsInput` via: 

UserPoolAddOnsArgs{...}

type UserPoolAddOnsOutput added in v0.2.0 

type UserPoolAddOnsOutput struct{ *pulumi.OutputState }

func (UserPoolAddOnsOutput) AdvancedSecurityAdditionalFlows added in v0.116.0 

func (o UserPoolAddOnsOutput) AdvancedSecurityAdditionalFlows() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

func (UserPoolAddOnsOutput) AdvancedSecurityMode added in v0.2.0 

func (o UserPoolAddOnsOutput) AdvancedSecurityMode() pulumi.StringPtrOutput

The operating mode of advanced security features for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.

func (UserPoolAddOnsOutput) ElementType added in v0.2.0 

func (UserPoolAddOnsOutput) ElementType() reflect.Type

func (UserPoolAddOnsOutput) ToUserPoolAddOnsOutput added in v0.2.0 

func (o UserPoolAddOnsOutput) ToUserPoolAddOnsOutput() UserPoolAddOnsOutput

func (UserPoolAddOnsOutput) ToUserPoolAddOnsOutputWithContext added in v0.2.0 

func (o UserPoolAddOnsOutput) ToUserPoolAddOnsOutputWithContext(ctx context.Context) UserPoolAddOnsOutput

func (UserPoolAddOnsOutput) ToUserPoolAddOnsPtrOutput added in v0.2.0 

func (o UserPoolAddOnsOutput) ToUserPoolAddOnsPtrOutput() UserPoolAddOnsPtrOutput

func (UserPoolAddOnsOutput) ToUserPoolAddOnsPtrOutputWithContext added in v0.2.0 

func (o UserPoolAddOnsOutput) ToUserPoolAddOnsPtrOutputWithContext(ctx context.Context) UserPoolAddOnsPtrOutput

type UserPoolAddOnsPtrInput added in v0.2.0 

type UserPoolAddOnsPtrInput interface {
	pulumi.Input

	ToUserPoolAddOnsPtrOutput() UserPoolAddOnsPtrOutput
	ToUserPoolAddOnsPtrOutputWithContext(context.Context) UserPoolAddOnsPtrOutput
}

UserPoolAddOnsPtrInput is an input type that accepts UserPoolAddOnsArgs, UserPoolAddOnsPtr and UserPoolAddOnsPtrOutput values. You can construct a concrete instance of `UserPoolAddOnsPtrInput` via: 

        UserPoolAddOnsArgs{...}

or:

        nil

func UserPoolAddOnsPtr added in v0.2.0 

func UserPoolAddOnsPtr(v *UserPoolAddOnsArgs) UserPoolAddOnsPtrInput

type UserPoolAddOnsPtrOutput added in v0.2.0 

type UserPoolAddOnsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolAddOnsPtrOutput) AdvancedSecurityAdditionalFlows added in v0.116.0 

func (o UserPoolAddOnsPtrOutput) AdvancedSecurityAdditionalFlows() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

func (UserPoolAddOnsPtrOutput) AdvancedSecurityMode added in v0.2.0 

func (o UserPoolAddOnsPtrOutput) AdvancedSecurityMode() pulumi.StringPtrOutput

The operating mode of advanced security features for standard authentication types in your user pool, including username-password and secure remote password (SRP) authentication.

func (UserPoolAddOnsPtrOutput) Elem added in v0.2.0 

func (o UserPoolAddOnsPtrOutput) Elem() UserPoolAddOnsOutput

func (UserPoolAddOnsPtrOutput) ElementType added in v0.2.0 

func (UserPoolAddOnsPtrOutput) ElementType() reflect.Type

func (UserPoolAddOnsPtrOutput) ToUserPoolAddOnsPtrOutput added in v0.2.0 

func (o UserPoolAddOnsPtrOutput) ToUserPoolAddOnsPtrOutput() UserPoolAddOnsPtrOutput

func (UserPoolAddOnsPtrOutput) ToUserPoolAddOnsPtrOutputWithContext added in v0.2.0 

func (o UserPoolAddOnsPtrOutput) ToUserPoolAddOnsPtrOutputWithContext(ctx context.Context) UserPoolAddOnsPtrOutput

type UserPoolAdminCreateUserConfig 

type UserPoolAdminCreateUserConfig struct {
	// The setting for allowing self-service sign-up. When `true` , only administrators can create new user profiles. When `false` , users can register themselves and create a new user profile with the [SignUp](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html) operation.
	AllowAdminCreateUserOnly *bool `pulumi:"allowAdminCreateUserOnly"`
	// The template for the welcome message to new users.
	//
	// See also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) .
	InviteMessageTemplate *UserPoolInviteMessageTemplate `pulumi:"inviteMessageTemplate"`
	// This parameter is no longer in use. Configure the duration of temporary passwords with the `TemporaryPasswordValidityDays` parameter of [PasswordPolicyType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_PasswordPolicyType.html) . For older user pools that have a `UnusedAccountValidityDays` configuration, that value is effective until you set a value for `TemporaryPasswordValidityDays` .
	//
	// The password expiration limit in days for administrator-created users. When this time expires, the user can't sign in with their temporary password. To reset the account after that time limit, you must call `AdminCreateUser` again, specifying `RESEND` for the `MessageAction` parameter.
	//
	// The default value for this parameter is 7.
	UnusedAccountValidityDays *int `pulumi:"unusedAccountValidityDays"`
}

type UserPoolAdminCreateUserConfigArgs 

type UserPoolAdminCreateUserConfigArgs struct {
	// The setting for allowing self-service sign-up. When `true` , only administrators can create new user profiles. When `false` , users can register themselves and create a new user profile with the [SignUp](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html) operation.
	AllowAdminCreateUserOnly pulumi.BoolPtrInput `pulumi:"allowAdminCreateUserOnly"`
	// The template for the welcome message to new users.
	//
	// See also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) .
	InviteMessageTemplate UserPoolInviteMessageTemplatePtrInput `pulumi:"inviteMessageTemplate"`
	// This parameter is no longer in use. Configure the duration of temporary passwords with the `TemporaryPasswordValidityDays` parameter of [PasswordPolicyType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_PasswordPolicyType.html) . For older user pools that have a `UnusedAccountValidityDays` configuration, that value is effective until you set a value for `TemporaryPasswordValidityDays` .
	//
	// The password expiration limit in days for administrator-created users. When this time expires, the user can't sign in with their temporary password. To reset the account after that time limit, you must call `AdminCreateUser` again, specifying `RESEND` for the `MessageAction` parameter.
	//
	// The default value for this parameter is 7.
	UnusedAccountValidityDays pulumi.IntPtrInput `pulumi:"unusedAccountValidityDays"`
}

func (UserPoolAdminCreateUserConfigArgs) ElementType 

func (UserPoolAdminCreateUserConfigArgs) ElementType() reflect.Type

func (UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigOutput 

func (i UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigOutput() UserPoolAdminCreateUserConfigOutput

func (UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigOutputWithContext 

func (i UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigOutputWithContext(ctx context.Context) UserPoolAdminCreateUserConfigOutput

func (UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigPtrOutput 

func (i UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigPtrOutput() UserPoolAdminCreateUserConfigPtrOutput

func (UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigPtrOutputWithContext 

func (i UserPoolAdminCreateUserConfigArgs) ToUserPoolAdminCreateUserConfigPtrOutputWithContext(ctx context.Context) UserPoolAdminCreateUserConfigPtrOutput

type UserPoolAdminCreateUserConfigInput 

type UserPoolAdminCreateUserConfigInput interface {
	pulumi.Input

	ToUserPoolAdminCreateUserConfigOutput() UserPoolAdminCreateUserConfigOutput
	ToUserPoolAdminCreateUserConfigOutputWithContext(context.Context) UserPoolAdminCreateUserConfigOutput
}

UserPoolAdminCreateUserConfigInput is an input type that accepts UserPoolAdminCreateUserConfigArgs and UserPoolAdminCreateUserConfigOutput values. You can construct a concrete instance of `UserPoolAdminCreateUserConfigInput` via: 

UserPoolAdminCreateUserConfigArgs{...}

type UserPoolAdminCreateUserConfigOutput 

type UserPoolAdminCreateUserConfigOutput struct{ *pulumi.OutputState }

func (UserPoolAdminCreateUserConfigOutput) AllowAdminCreateUserOnly 

func (o UserPoolAdminCreateUserConfigOutput) AllowAdminCreateUserOnly() pulumi.BoolPtrOutput

The setting for allowing self-service sign-up. When `true` , only administrators can create new user profiles. When `false` , users can register themselves and create a new user profile with the [SignUp](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html) operation.

func (UserPoolAdminCreateUserConfigOutput) ElementType 

func (UserPoolAdminCreateUserConfigOutput) ElementType() reflect.Type

func (UserPoolAdminCreateUserConfigOutput) InviteMessageTemplate 

func (o UserPoolAdminCreateUserConfigOutput) InviteMessageTemplate() UserPoolInviteMessageTemplatePtrOutput

The template for the welcome message to new users.

See also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) .

func (UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigOutput 

func (o UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigOutput() UserPoolAdminCreateUserConfigOutput

func (UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigOutputWithContext 

func (o UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigOutputWithContext(ctx context.Context) UserPoolAdminCreateUserConfigOutput

func (UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigPtrOutput 

func (o UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigPtrOutput() UserPoolAdminCreateUserConfigPtrOutput

func (UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigPtrOutputWithContext 

func (o UserPoolAdminCreateUserConfigOutput) ToUserPoolAdminCreateUserConfigPtrOutputWithContext(ctx context.Context) UserPoolAdminCreateUserConfigPtrOutput

func (UserPoolAdminCreateUserConfigOutput) UnusedAccountValidityDays 

func (o UserPoolAdminCreateUserConfigOutput) UnusedAccountValidityDays() pulumi.IntPtrOutput

This parameter is no longer in use. Configure the duration of temporary passwords with the `TemporaryPasswordValidityDays` parameter of [PasswordPolicyType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_PasswordPolicyType.html) . For older user pools that have a `UnusedAccountValidityDays` configuration, that value is effective until you set a value for `TemporaryPasswordValidityDays` .

The password expiration limit in days for administrator-created users. When this time expires, the user can't sign in with their temporary password. To reset the account after that time limit, you must call `AdminCreateUser` again, specifying `RESEND` for the `MessageAction` parameter.

The default value for this parameter is 7.

type UserPoolAdminCreateUserConfigPtrInput 

type UserPoolAdminCreateUserConfigPtrInput interface {
	pulumi.Input

	ToUserPoolAdminCreateUserConfigPtrOutput() UserPoolAdminCreateUserConfigPtrOutput
	ToUserPoolAdminCreateUserConfigPtrOutputWithContext(context.Context) UserPoolAdminCreateUserConfigPtrOutput
}

UserPoolAdminCreateUserConfigPtrInput is an input type that accepts UserPoolAdminCreateUserConfigArgs, UserPoolAdminCreateUserConfigPtr and UserPoolAdminCreateUserConfigPtrOutput values. You can construct a concrete instance of `UserPoolAdminCreateUserConfigPtrInput` via: 

        UserPoolAdminCreateUserConfigArgs{...}

or:

        nil

func UserPoolAdminCreateUserConfigPtr 

func UserPoolAdminCreateUserConfigPtr(v *UserPoolAdminCreateUserConfigArgs) UserPoolAdminCreateUserConfigPtrInput

type UserPoolAdminCreateUserConfigPtrOutput 

type UserPoolAdminCreateUserConfigPtrOutput struct{ *pulumi.OutputState }

func (UserPoolAdminCreateUserConfigPtrOutput) AllowAdminCreateUserOnly 

func (o UserPoolAdminCreateUserConfigPtrOutput) AllowAdminCreateUserOnly() pulumi.BoolPtrOutput

The setting for allowing self-service sign-up. When `true` , only administrators can create new user profiles. When `false` , users can register themselves and create a new user profile with the [SignUp](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html) operation.

func (UserPoolAdminCreateUserConfigPtrOutput) Elem 

func (o UserPoolAdminCreateUserConfigPtrOutput) Elem() UserPoolAdminCreateUserConfigOutput

func (UserPoolAdminCreateUserConfigPtrOutput) ElementType 

func (UserPoolAdminCreateUserConfigPtrOutput) ElementType() reflect.Type

func (UserPoolAdminCreateUserConfigPtrOutput) InviteMessageTemplate 

func (o UserPoolAdminCreateUserConfigPtrOutput) InviteMessageTemplate() UserPoolInviteMessageTemplatePtrOutput

The template for the welcome message to new users.

See also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) .

func (UserPoolAdminCreateUserConfigPtrOutput) ToUserPoolAdminCreateUserConfigPtrOutput 

func (o UserPoolAdminCreateUserConfigPtrOutput) ToUserPoolAdminCreateUserConfigPtrOutput() UserPoolAdminCreateUserConfigPtrOutput

func (UserPoolAdminCreateUserConfigPtrOutput) ToUserPoolAdminCreateUserConfigPtrOutputWithContext 

func (o UserPoolAdminCreateUserConfigPtrOutput) ToUserPoolAdminCreateUserConfigPtrOutputWithContext(ctx context.Context) UserPoolAdminCreateUserConfigPtrOutput

func (UserPoolAdminCreateUserConfigPtrOutput) UnusedAccountValidityDays 

func (o UserPoolAdminCreateUserConfigPtrOutput) UnusedAccountValidityDays() pulumi.IntPtrOutput

This parameter is no longer in use. Configure the duration of temporary passwords with the `TemporaryPasswordValidityDays` parameter of [PasswordPolicyType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_PasswordPolicyType.html) . For older user pools that have a `UnusedAccountValidityDays` configuration, that value is effective until you set a value for `TemporaryPasswordValidityDays` .

The password expiration limit in days for administrator-created users. When this time expires, the user can't sign in with their temporary password. To reset the account after that time limit, you must call `AdminCreateUser` again, specifying `RESEND` for the `MessageAction` parameter.

The default value for this parameter is 7.

type UserPoolAdvancedSecurityAdditionalFlows added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlows struct {
	CustomAuthMode *string `pulumi:"customAuthMode"`
}

type UserPoolAdvancedSecurityAdditionalFlowsArgs added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlowsArgs struct {
	CustomAuthMode pulumi.StringPtrInput `pulumi:"customAuthMode"`
}

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ElementType added in v0.116.0 

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ElementType() reflect.Type

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsOutput added in v0.116.0 

func (i UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsOutput() UserPoolAdvancedSecurityAdditionalFlowsOutput

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsOutputWithContext added in v0.116.0 

func (i UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsOutputWithContext(ctx context.Context) UserPoolAdvancedSecurityAdditionalFlowsOutput

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput added in v0.116.0 

func (i UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

func (UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext added in v0.116.0 

func (i UserPoolAdvancedSecurityAdditionalFlowsArgs) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext(ctx context.Context) UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

type UserPoolAdvancedSecurityAdditionalFlowsInput added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlowsInput interface {
	pulumi.Input

	ToUserPoolAdvancedSecurityAdditionalFlowsOutput() UserPoolAdvancedSecurityAdditionalFlowsOutput
	ToUserPoolAdvancedSecurityAdditionalFlowsOutputWithContext(context.Context) UserPoolAdvancedSecurityAdditionalFlowsOutput
}

UserPoolAdvancedSecurityAdditionalFlowsInput is an input type that accepts UserPoolAdvancedSecurityAdditionalFlowsArgs and UserPoolAdvancedSecurityAdditionalFlowsOutput values. You can construct a concrete instance of `UserPoolAdvancedSecurityAdditionalFlowsInput` via: 

UserPoolAdvancedSecurityAdditionalFlowsArgs{...}

type UserPoolAdvancedSecurityAdditionalFlowsOutput added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlowsOutput struct{ *pulumi.OutputState }

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) CustomAuthMode added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsOutput) CustomAuthMode() pulumi.StringPtrOutput

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ElementType added in v0.116.0 

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ElementType() reflect.Type

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsOutput added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsOutput() UserPoolAdvancedSecurityAdditionalFlowsOutput

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsOutputWithContext added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsOutputWithContext(ctx context.Context) UserPoolAdvancedSecurityAdditionalFlowsOutput

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

func (UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext(ctx context.Context) UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

type UserPoolAdvancedSecurityAdditionalFlowsPtrInput added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlowsPtrInput interface {
	pulumi.Input

	ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput
	ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext(context.Context) UserPoolAdvancedSecurityAdditionalFlowsPtrOutput
}

UserPoolAdvancedSecurityAdditionalFlowsPtrInput is an input type that accepts UserPoolAdvancedSecurityAdditionalFlowsArgs, UserPoolAdvancedSecurityAdditionalFlowsPtr and UserPoolAdvancedSecurityAdditionalFlowsPtrOutput values. You can construct a concrete instance of `UserPoolAdvancedSecurityAdditionalFlowsPtrInput` via: 

        UserPoolAdvancedSecurityAdditionalFlowsArgs{...}

or:

        nil

func UserPoolAdvancedSecurityAdditionalFlowsPtr added in v0.116.0 

func UserPoolAdvancedSecurityAdditionalFlowsPtr(v *UserPoolAdvancedSecurityAdditionalFlowsArgs) UserPoolAdvancedSecurityAdditionalFlowsPtrInput

type UserPoolAdvancedSecurityAdditionalFlowsPtrOutput added in v0.116.0 

type UserPoolAdvancedSecurityAdditionalFlowsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) CustomAuthMode added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) CustomAuthMode() pulumi.StringPtrOutput

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) Elem added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) Elem() UserPoolAdvancedSecurityAdditionalFlowsOutput

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ElementType added in v0.116.0 

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ElementType() reflect.Type

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutput() UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

func (UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext added in v0.116.0 

func (o UserPoolAdvancedSecurityAdditionalFlowsPtrOutput) ToUserPoolAdvancedSecurityAdditionalFlowsPtrOutputWithContext(ctx context.Context) UserPoolAdvancedSecurityAdditionalFlowsPtrOutput

type UserPoolArgs 

type UserPoolArgs struct {
	// The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.
	AccountRecoverySetting UserPoolAccountRecoverySettingPtrInput
	// The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	AdminCreateUserConfig UserPoolAdminCreateUserConfigPtrInput
	// Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .
	AliasAttributes pulumi.StringArrayInput
	// The attributes to be auto-verified. Possible values: *email* , *phone_number* .
	AutoVerifiedAttributes pulumi.StringArrayInput
	// When active, `DeletionProtection` prevents accidental deletion of your user
	// pool. Before you can delete a user pool that you have protected against deletion, you
	// must deactivate this feature.
	//
	// When you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.
	DeletionProtection pulumi.StringPtrInput
	// The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.
	//
	// > When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature.
	DeviceConfiguration        UserPoolDeviceConfigurationPtrInput
	EmailAuthenticationMessage pulumi.StringPtrInput
	EmailAuthenticationSubject pulumi.StringPtrInput
	// The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool.
	EmailConfiguration UserPoolEmailConfigurationPtrInput
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationMessage pulumi.StringPtrInput
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	EmailVerificationSubject pulumi.StringPtrInput
	// Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:
	//
	// - `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` .
	// - `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool.
	// - `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .
	//
	// Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`
	EnabledMfas pulumi.StringArrayInput
	// A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.
	LambdaConfig UserPoolLambdaConfigPtrInput
	// The multi-factor authentication (MFA) configuration. Valid values include:
	//
	// - `OFF` MFA won't be used for any users.
	// - `ON` MFA is required for all users to sign in.
	// - `OPTIONAL` MFA will be required only for individual users who have an MFA factor activated.
	MfaConfiguration pulumi.StringPtrInput
	// A list of user pool policies. Contains the policy that sets password-complexity requirements.
	//
	// This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .
	Policies UserPoolPoliciesPtrInput
	// An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.
	Schema UserPoolSchemaAttributeArrayInput
	// The contents of the SMS authentication message.
	SmsAuthenticationMessage pulumi.StringPtrInput
	// The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account .
	SmsConfiguration UserPoolSmsConfigurationPtrInput
	// This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .
	SmsVerificationMessage pulumi.StringPtrInput
	// The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` ,
	// a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For
	// more information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) .
	UserAttributeUpdateSettings UserPoolUserAttributeUpdateSettingsPtrInput
	// User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .
	//
	// For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) .
	UserPoolAddOns UserPoolAddOnsPtrInput
	// A string used to name the user pool.
	UserPoolName pulumi.StringPtrInput
	// The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.
	UserPoolTags pulumi.StringMapInput
	// Specifies whether a user can use an email address or phone number as a username when they sign up.
	UsernameAttributes pulumi.StringArrayInput
	// Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.
	//
	// This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .
	UsernameConfiguration UserPoolUsernameConfigurationPtrInput
	// The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.
	//
	// Set the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.
	VerificationMessageTemplate UserPoolVerificationMessageTemplatePtrInput
}

The set of arguments for constructing a UserPool resource.

func (UserPoolArgs) ElementType 

func (UserPoolArgs) ElementType() reflect.Type

type UserPoolClient 

type UserPoolClient struct {
	pulumi.CustomResourceState

	// The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with
	// their access token for 10 hours.
	//
	// The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your access
	// tokens are valid for one hour.
	AccessTokenValidity pulumi.IntPtrOutput `pulumi:"accessTokenValidity"`
	// The OAuth grant types that you want your app client to generate. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.
	//
	// - **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.
	// - **implicit** - Issue the access token (and, optionally, ID token, based on scopes) directly to your user.
	// - **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user using a combination of the client ID and client secret.
	AllowedOAuthFlows pulumi.StringArrayOutput `pulumi:"allowedOAuthFlows"`
	// Set to `true` to use OAuth 2.0 features in your user pool app client.
	//
	// `AllowedOAuthFlowsUserPoolClient` must be `true` before you can configure the following features in your app client.
	//
	// - `CallBackURLs` : Callback URLs.
	// - `LogoutURLs` : Sign-out redirect URLs.
	// - `AllowedOAuthScopes` : OAuth 2.0 scopes.
	// - `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.
	//
	// To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` .
	AllowedOAuthFlowsUserPoolClient pulumi.BoolPtrOutput `pulumi:"allowedOAuthFlowsUserPoolClient"`
	// The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported.
	AllowedOAuthScopes pulumi.StringArrayOutput `pulumi:"allowedOAuthScopes"`
	// The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.
	//
	// > In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region.
	AnalyticsConfiguration UserPoolClientAnalyticsConfigurationPtrOutput `pulumi:"analyticsConfiguration"`
	// Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
	AuthSessionValidity pulumi.IntPtrOutput `pulumi:"authSessionValidity"`
	// A list of allowed redirect (callback) URLs for the IdPs.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// See [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	CallbackUrls pulumi.StringArrayOutput `pulumi:"callbackUrls"`
	// The ID of the app client, for example `1example23456789` .
	ClientId pulumi.StringOutput `pulumi:"clientId"`
	// The client name for the user pool client you would like to create.
	ClientName   pulumi.StringPtrOutput `pulumi:"clientName"`
	ClientSecret pulumi.StringOutput    `pulumi:"clientSecret"`
	// The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// For more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	DefaultRedirectUri pulumi.StringPtrOutput `pulumi:"defaultRedirectUri"`
	// Activates the propagation of additional user context data. For more information about propagation of user context data, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.
	EnablePropagateAdditionalUserContextData pulumi.BoolPtrOutput `pulumi:"enablePropagateAdditionalUserContextData"`
	// Activates or deactivates token revocation. For more information about revoking tokens, see [RevokeToken](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html) .
	//
	// If you don't include this parameter, token revocation is automatically activated for the new user pool client.
	EnableTokenRevocation pulumi.BoolPtrOutput `pulumi:"enableTokenRevocation"`
	// The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.
	//
	// > If you don't specify a value for `ExplicitAuthFlows` , your user client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` .
	//
	// Valid values include:
	//
	// - `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.
	// - `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.
	// - `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.
	// - `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.
	// - `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.
	//
	// In some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,
	// like `ALLOW_USER_SRP_AUTH` .
	ExplicitAuthFlows pulumi.StringArrayOutput `pulumi:"explicitAuthFlows"`
	// Boolean to specify whether you want to generate a secret for the user pool client being created.
	GenerateSecret pulumi.BoolPtrOutput `pulumi:"generateSecret"`
	// The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.
	//
	// The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your ID
	// tokens are valid for one hour.
	IdTokenValidity pulumi.IntPtrOutput `pulumi:"idTokenValidity"`
	// A list of allowed logout URLs for the IdPs.
	LogoutUrls pulumi.StringArrayOutput `pulumi:"logoutUrls"`
	Name       pulumi.StringOutput      `pulumi:"name"`
	// Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.
	//
	// Valid values include:
	//
	// - `ENABLED` - This prevents user existence-related errors.
	// - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.
	//
	// Defaults to `LEGACY` when you don't provide a value.
	PreventUserExistenceErrors pulumi.StringPtrOutput `pulumi:"preventUserExistenceErrors"`
	// The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a [GetUser](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html) API request to retrieve and display your user's profile data.
	//
	// When you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.
	ReadAttributes pulumi.StringArrayOutput `pulumi:"readAttributes"`
	// The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session
	// and retrieve new access and ID tokens for 10 days.
	//
	// The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your refresh
	// tokens are valid for 30 days.
	RefreshTokenValidity pulumi.IntPtrOutput `pulumi:"refreshTokenValidity"`
	// A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .
	SupportedIdentityProviders pulumi.StringArrayOutput `pulumi:"supportedIdentityProviders"`
	// The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours.
	TokenValidityUnits UserPoolClientTokenValidityUnitsPtrOutput `pulumi:"tokenValidityUnits"`
	// The user pool ID for the user pool where you want to create a user pool client.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
	// The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list. An example of this kind of activity is when you present your user with a form to update their profile information and they change their last name. Your app then makes an [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html) API request and sets `family_name` to the new value.
	//
	// When you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.
	//
	// If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .
	WriteAttributes pulumi.StringArrayOutput `pulumi:"writeAttributes"`
}

Resource Type definition for AWS::Cognito::UserPoolClient

func GetUserPoolClient 

func GetUserPoolClient(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolClientState, opts ...pulumi.ResourceOption) (*UserPoolClient, error)

GetUserPoolClient gets an existing UserPoolClient resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolClient 

func NewUserPoolClient(ctx *pulumi.Context,
	name string, args *UserPoolClientArgs, opts ...pulumi.ResourceOption) (*UserPoolClient, error)

NewUserPoolClient registers a new resource with the given unique name, arguments, and options.

func (*UserPoolClient) ElementType 

func (*UserPoolClient) ElementType() reflect.Type

func (*UserPoolClient) ToUserPoolClientOutput 

func (i *UserPoolClient) ToUserPoolClientOutput() UserPoolClientOutput

func (*UserPoolClient) ToUserPoolClientOutputWithContext 

func (i *UserPoolClient) ToUserPoolClientOutputWithContext(ctx context.Context) UserPoolClientOutput

type UserPoolClientAnalyticsConfiguration 

type UserPoolClientAnalyticsConfiguration struct {
	// The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications
	ApplicationArn *string `pulumi:"applicationArn"`
	// Your Amazon Pinpoint project ID.
	ApplicationId *string `pulumi:"applicationId"`
	// The [external ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) of the role that Amazon Cognito assumes to send analytics data to Amazon Pinpoint.
	ExternalId *string `pulumi:"externalId"`
	// The ARN of an AWS Identity and Access Management role that has the permissions required for Amazon Cognito to publish events to Amazon Pinpoint analytics.
	RoleArn *string `pulumi:"roleArn"`
	// If `UserDataShared` is `true` , Amazon Cognito includes user data in the events that it publishes to Amazon Pinpoint analytics.
	UserDataShared *bool `pulumi:"userDataShared"`
}

type UserPoolClientAnalyticsConfigurationArgs 

type UserPoolClientAnalyticsConfigurationArgs struct {
	// The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications
	ApplicationArn pulumi.StringPtrInput `pulumi:"applicationArn"`
	// Your Amazon Pinpoint project ID.
	ApplicationId pulumi.StringPtrInput `pulumi:"applicationId"`
	// The [external ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) of the role that Amazon Cognito assumes to send analytics data to Amazon Pinpoint.
	ExternalId pulumi.StringPtrInput `pulumi:"externalId"`
	// The ARN of an AWS Identity and Access Management role that has the permissions required for Amazon Cognito to publish events to Amazon Pinpoint analytics.
	RoleArn pulumi.StringPtrInput `pulumi:"roleArn"`
	// If `UserDataShared` is `true` , Amazon Cognito includes user data in the events that it publishes to Amazon Pinpoint analytics.
	UserDataShared pulumi.BoolPtrInput `pulumi:"userDataShared"`
}

func (UserPoolClientAnalyticsConfigurationArgs) ElementType 

func (UserPoolClientAnalyticsConfigurationArgs) ElementType() reflect.Type

func (UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationOutput 

func (i UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationOutput() UserPoolClientAnalyticsConfigurationOutput

func (UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationOutputWithContext 

func (i UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationOutputWithContext(ctx context.Context) UserPoolClientAnalyticsConfigurationOutput

func (UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationPtrOutput 

func (i UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationPtrOutput() UserPoolClientAnalyticsConfigurationPtrOutput

func (UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext 

func (i UserPoolClientAnalyticsConfigurationArgs) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolClientAnalyticsConfigurationPtrOutput

type UserPoolClientAnalyticsConfigurationInput 

type UserPoolClientAnalyticsConfigurationInput interface {
	pulumi.Input

	ToUserPoolClientAnalyticsConfigurationOutput() UserPoolClientAnalyticsConfigurationOutput
	ToUserPoolClientAnalyticsConfigurationOutputWithContext(context.Context) UserPoolClientAnalyticsConfigurationOutput
}

UserPoolClientAnalyticsConfigurationInput is an input type that accepts UserPoolClientAnalyticsConfigurationArgs and UserPoolClientAnalyticsConfigurationOutput values. You can construct a concrete instance of `UserPoolClientAnalyticsConfigurationInput` via: 

UserPoolClientAnalyticsConfigurationArgs{...}

type UserPoolClientAnalyticsConfigurationOutput 

type UserPoolClientAnalyticsConfigurationOutput struct{ *pulumi.OutputState }

func (UserPoolClientAnalyticsConfigurationOutput) ApplicationArn 

func (o UserPoolClientAnalyticsConfigurationOutput) ApplicationArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications

func (UserPoolClientAnalyticsConfigurationOutput) ApplicationId 

func (o UserPoolClientAnalyticsConfigurationOutput) ApplicationId() pulumi.StringPtrOutput

Your Amazon Pinpoint project ID.

func (UserPoolClientAnalyticsConfigurationOutput) ElementType 

func (UserPoolClientAnalyticsConfigurationOutput) ElementType() reflect.Type

func (UserPoolClientAnalyticsConfigurationOutput) ExternalId 

func (o UserPoolClientAnalyticsConfigurationOutput) ExternalId() pulumi.StringPtrOutput

The [external ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) of the role that Amazon Cognito assumes to send analytics data to Amazon Pinpoint.

func (UserPoolClientAnalyticsConfigurationOutput) RoleArn 

func (o UserPoolClientAnalyticsConfigurationOutput) RoleArn() pulumi.StringPtrOutput

The ARN of an AWS Identity and Access Management role that has the permissions required for Amazon Cognito to publish events to Amazon Pinpoint analytics.

func (UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationOutput 

func (o UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationOutput() UserPoolClientAnalyticsConfigurationOutput

func (UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationOutputWithContext 

func (o UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationOutputWithContext(ctx context.Context) UserPoolClientAnalyticsConfigurationOutput

func (UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationPtrOutput 

func (o UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationPtrOutput() UserPoolClientAnalyticsConfigurationPtrOutput

func (UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext 

func (o UserPoolClientAnalyticsConfigurationOutput) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolClientAnalyticsConfigurationPtrOutput

func (UserPoolClientAnalyticsConfigurationOutput) UserDataShared 

func (o UserPoolClientAnalyticsConfigurationOutput) UserDataShared() pulumi.BoolPtrOutput

If `UserDataShared` is `true` , Amazon Cognito includes user data in the events that it publishes to Amazon Pinpoint analytics.

type UserPoolClientAnalyticsConfigurationPtrInput 

type UserPoolClientAnalyticsConfigurationPtrInput interface {
	pulumi.Input

	ToUserPoolClientAnalyticsConfigurationPtrOutput() UserPoolClientAnalyticsConfigurationPtrOutput
	ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext(context.Context) UserPoolClientAnalyticsConfigurationPtrOutput
}

UserPoolClientAnalyticsConfigurationPtrInput is an input type that accepts UserPoolClientAnalyticsConfigurationArgs, UserPoolClientAnalyticsConfigurationPtr and UserPoolClientAnalyticsConfigurationPtrOutput values. You can construct a concrete instance of `UserPoolClientAnalyticsConfigurationPtrInput` via: 

        UserPoolClientAnalyticsConfigurationArgs{...}

or:

        nil

func UserPoolClientAnalyticsConfigurationPtr 

func UserPoolClientAnalyticsConfigurationPtr(v *UserPoolClientAnalyticsConfigurationArgs) UserPoolClientAnalyticsConfigurationPtrInput

type UserPoolClientAnalyticsConfigurationPtrOutput 

type UserPoolClientAnalyticsConfigurationPtrOutput struct{ *pulumi.OutputState }

func (UserPoolClientAnalyticsConfigurationPtrOutput) ApplicationArn 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) ApplicationArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications

func (UserPoolClientAnalyticsConfigurationPtrOutput) ApplicationId 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) ApplicationId() pulumi.StringPtrOutput

Your Amazon Pinpoint project ID.

func (UserPoolClientAnalyticsConfigurationPtrOutput) Elem 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) Elem() UserPoolClientAnalyticsConfigurationOutput

func (UserPoolClientAnalyticsConfigurationPtrOutput) ElementType 

func (UserPoolClientAnalyticsConfigurationPtrOutput) ElementType() reflect.Type

func (UserPoolClientAnalyticsConfigurationPtrOutput) ExternalId 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) ExternalId() pulumi.StringPtrOutput

The [external ID](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) of the role that Amazon Cognito assumes to send analytics data to Amazon Pinpoint.

func (UserPoolClientAnalyticsConfigurationPtrOutput) RoleArn 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) RoleArn() pulumi.StringPtrOutput

The ARN of an AWS Identity and Access Management role that has the permissions required for Amazon Cognito to publish events to Amazon Pinpoint analytics.

func (UserPoolClientAnalyticsConfigurationPtrOutput) ToUserPoolClientAnalyticsConfigurationPtrOutput 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) ToUserPoolClientAnalyticsConfigurationPtrOutput() UserPoolClientAnalyticsConfigurationPtrOutput

func (UserPoolClientAnalyticsConfigurationPtrOutput) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) ToUserPoolClientAnalyticsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolClientAnalyticsConfigurationPtrOutput

func (UserPoolClientAnalyticsConfigurationPtrOutput) UserDataShared 

func (o UserPoolClientAnalyticsConfigurationPtrOutput) UserDataShared() pulumi.BoolPtrOutput

If `UserDataShared` is `true` , Amazon Cognito includes user data in the events that it publishes to Amazon Pinpoint analytics.

type UserPoolClientArgs 

type UserPoolClientArgs struct {
	// The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with
	// their access token for 10 hours.
	//
	// The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your access
	// tokens are valid for one hour.
	AccessTokenValidity pulumi.IntPtrInput
	// The OAuth grant types that you want your app client to generate. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.
	//
	// - **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint.
	// - **implicit** - Issue the access token (and, optionally, ID token, based on scopes) directly to your user.
	// - **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user using a combination of the client ID and client secret.
	AllowedOAuthFlows pulumi.StringArrayInput
	// Set to `true` to use OAuth 2.0 features in your user pool app client.
	//
	// `AllowedOAuthFlowsUserPoolClient` must be `true` before you can configure the following features in your app client.
	//
	// - `CallBackURLs` : Callback URLs.
	// - `LogoutURLs` : Sign-out redirect URLs.
	// - `AllowedOAuthScopes` : OAuth 2.0 scopes.
	// - `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.
	//
	// To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` .
	AllowedOAuthFlowsUserPoolClient pulumi.BoolPtrInput
	// The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported.
	AllowedOAuthScopes pulumi.StringArrayInput
	// The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.
	//
	// > In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region.
	AnalyticsConfiguration UserPoolClientAnalyticsConfigurationPtrInput
	// Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.
	AuthSessionValidity pulumi.IntPtrInput
	// A list of allowed redirect (callback) URLs for the IdPs.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// See [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	CallbackUrls pulumi.StringArrayInput
	// The client name for the user pool client you would like to create.
	ClientName pulumi.StringPtrInput
	// The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.
	//
	// A redirect URI must:
	//
	// - Be an absolute URI.
	// - Be registered with the authorization server.
	// - Not include a fragment component.
	//
	// For more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .
	//
	// Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.
	//
	// App callback URLs such as myapp://example are also supported.
	DefaultRedirectUri pulumi.StringPtrInput
	// Activates the propagation of additional user context data. For more information about propagation of user context data, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.
	EnablePropagateAdditionalUserContextData pulumi.BoolPtrInput
	// Activates or deactivates token revocation. For more information about revoking tokens, see [RevokeToken](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html) .
	//
	// If you don't include this parameter, token revocation is automatically activated for the new user pool client.
	EnableTokenRevocation pulumi.BoolPtrInput
	// The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.
	//
	// > If you don't specify a value for `ExplicitAuthFlows` , your user client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` .
	//
	// Valid values include:
	//
	// - `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password.
	// - `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication.
	// - `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords.
	// - `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication.
	// - `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.
	//
	// In some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` ,
	// like `ALLOW_USER_SRP_AUTH` .
	ExplicitAuthFlows pulumi.StringArrayInput
	// Boolean to specify whether you want to generate a secret for the user pool client being created.
	GenerateSecret pulumi.BoolPtrInput
	// The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.
	//
	// The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your ID
	// tokens are valid for one hour.
	IdTokenValidity pulumi.IntPtrInput
	// A list of allowed logout URLs for the IdPs.
	LogoutUrls pulumi.StringArrayInput
	// Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.
	//
	// Valid values include:
	//
	// - `ENABLED` - This prevents user existence-related errors.
	// - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.
	//
	// Defaults to `LEGACY` when you don't provide a value.
	PreventUserExistenceErrors pulumi.StringPtrInput
	// The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a [GetUser](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html) API request to retrieve and display your user's profile data.
	//
	// When you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.
	ReadAttributes pulumi.StringArrayInput
	// The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.
	//
	// For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session
	// and retrieve new access and ID tokens for 10 days.
	//
	// The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.
	//
	// If you don't specify otherwise in the configuration of your app client, your refresh
	// tokens are valid for 30 days.
	RefreshTokenValidity pulumi.IntPtrInput
	// A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .
	SupportedIdentityProviders pulumi.StringArrayInput
	// The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours.
	TokenValidityUnits UserPoolClientTokenValidityUnitsPtrInput
	// The user pool ID for the user pool where you want to create a user pool client.
	UserPoolId pulumi.StringInput
	// The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list. An example of this kind of activity is when you present your user with a form to update their profile information and they change their last name. Your app then makes an [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html) API request and sets `family_name` to the new value.
	//
	// When you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.
	//
	// If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .
	WriteAttributes pulumi.StringArrayInput
}

The set of arguments for constructing a UserPoolClient resource.

func (UserPoolClientArgs) ElementType 

func (UserPoolClientArgs) ElementType() reflect.Type

type UserPoolClientInput 

type UserPoolClientInput interface {
	pulumi.Input

	ToUserPoolClientOutput() UserPoolClientOutput
	ToUserPoolClientOutputWithContext(ctx context.Context) UserPoolClientOutput
}

type UserPoolClientOutput 

type UserPoolClientOutput struct{ *pulumi.OutputState }

func (UserPoolClientOutput) AccessTokenValidity added in v0.17.0 

func (o UserPoolClientOutput) AccessTokenValidity() pulumi.IntPtrOutput

The access token time limit. After this limit expires, your user can't use their access token. To specify the time unit for `AccessTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `AccessTokenValidity` to `10` and `TokenValidityUnits` to `hours` , your user can authorize access with their access token for 10 hours.

The default time unit for `AccessTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your access tokens are valid for one hour.

func (UserPoolClientOutput) AllowedOAuthFlows added in v0.17.0 

func (o UserPoolClientOutput) AllowedOAuthFlows() pulumi.StringArrayOutput

The OAuth grant types that you want your app client to generate. To create an app client that generates client credentials grants, you must add `client_credentials` as the only allowed OAuth flow.

- **code** - Use a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the `/oauth2/token` endpoint. - **implicit** - Issue the access token (and, optionally, ID token, based on scopes) directly to your user. - **client_credentials** - Issue the access token from the `/oauth2/token` endpoint directly to a non-person user using a combination of the client ID and client secret.

func (UserPoolClientOutput) AllowedOAuthFlowsUserPoolClient added in v0.17.0 

func (o UserPoolClientOutput) AllowedOAuthFlowsUserPoolClient() pulumi.BoolPtrOutput

Set to `true` to use OAuth 2.0 features in your user pool app client.

`AllowedOAuthFlowsUserPoolClient` must be `true` before you can configure the following features in your app client.

- `CallBackURLs` : Callback URLs. - `LogoutURLs` : Sign-out redirect URLs. - `AllowedOAuthScopes` : OAuth 2.0 scopes. - `AllowedOAuthFlows` : Support for authorization code, implicit, and client credentials OAuth 2.0 grants.

To use OAuth 2.0 features, configure one of these features in the Amazon Cognito console or set `AllowedOAuthFlowsUserPoolClient` to `true` in a `CreateUserPoolClient` or `UpdateUserPoolClient` API request. If you don't set a value for `AllowedOAuthFlowsUserPoolClient` in a request with the AWS CLI or SDKs, it defaults to `false` .

func (UserPoolClientOutput) AllowedOAuthScopes added in v0.17.0 

func (o UserPoolClientOutput) AllowedOAuthScopes() pulumi.StringArrayOutput

The allowed OAuth scopes. Possible values provided by OAuth are `phone` , `email` , `openid` , and `profile` . Possible values provided by AWS are `aws.cognito.signin.user.admin` . Custom scopes created in Resource Servers are also supported.

func (UserPoolClientOutput) AnalyticsConfiguration added in v0.17.0 

func (o UserPoolClientOutput) AnalyticsConfiguration() UserPoolClientAnalyticsConfigurationPtrOutput

The user pool analytics configuration for collecting metrics and sending them to your Amazon Pinpoint campaign.

> In AWS Regions where Amazon Pinpoint isn't available, user pools only support sending events to Amazon Pinpoint projects in AWS Region us-east-1. In Regions where Amazon Pinpoint is available, user pools support sending events to Amazon Pinpoint projects within that same Region.

func (UserPoolClientOutput) AuthSessionValidity added in v0.38.0 

func (o UserPoolClientOutput) AuthSessionValidity() pulumi.IntPtrOutput

Amazon Cognito creates a session token for each API request in an authentication flow. `AuthSessionValidity` is the duration, in minutes, of that session token. Your user pool native user must respond to each authentication challenge before the session expires.

func (UserPoolClientOutput) CallbackUrls added in v0.72.0 

func (o UserPoolClientOutput) CallbackUrls() pulumi.StringArrayOutput

A list of allowed redirect (callback) URLs for the IdPs.

A redirect URI must:

- Be an absolute URI. - Be registered with the authorization server. - Not include a fragment component.

See [OAuth 2.0 - Redirection Endpoint](https://docs.aws.amazon.com/https://tools.ietf.org/html/rfc6749#section-3.1.2) .

Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.

App callback URLs such as myapp://example are also supported.

func (UserPoolClientOutput) ClientId added in v0.83.0 

func (o UserPoolClientOutput) ClientId() pulumi.StringOutput

The ID of the app client, for example `1example23456789` .

func (UserPoolClientOutput) ClientName added in v0.17.0 

func (o UserPoolClientOutput) ClientName() pulumi.StringPtrOutput

The client name for the user pool client you would like to create.

func (UserPoolClientOutput) ClientSecret added in v0.17.0 

func (o UserPoolClientOutput) ClientSecret() pulumi.StringOutput

func (UserPoolClientOutput) DefaultRedirectUri added in v0.72.0 

func (o UserPoolClientOutput) DefaultRedirectUri() pulumi.StringPtrOutput

The default redirect URI. In app clients with one assigned IdP, replaces `redirect_uri` in authentication requests. Must be in the `CallbackURLs` list.

A redirect URI must:

- Be an absolute URI. - Be registered with the authorization server. - Not include a fragment component.

For more information, see [Default redirect URI](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-client-apps.html#cognito-user-pools-app-idp-settings-about) .

Amazon Cognito requires HTTPS over HTTP except for http://localhost for testing purposes only.

App callback URLs such as myapp://example are also supported.

func (UserPoolClientOutput) ElementType 

func (UserPoolClientOutput) ElementType() reflect.Type

func (UserPoolClientOutput) EnablePropagateAdditionalUserContextData added in v0.17.0 

func (o UserPoolClientOutput) EnablePropagateAdditionalUserContextData() pulumi.BoolPtrOutput

Activates the propagation of additional user context data. For more information about propagation of user context data, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) . If you don’t include this parameter, you can't send device fingerprint information, including source IP address, to Amazon Cognito advanced security. You can only activate `EnablePropagateAdditionalUserContextData` in an app client that has a client secret.

func (UserPoolClientOutput) EnableTokenRevocation added in v0.17.0 

func (o UserPoolClientOutput) EnableTokenRevocation() pulumi.BoolPtrOutput

Activates or deactivates token revocation. For more information about revoking tokens, see [RevokeToken](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html) .

If you don't include this parameter, token revocation is automatically activated for the new user pool client.

func (UserPoolClientOutput) ExplicitAuthFlows added in v0.17.0 

func (o UserPoolClientOutput) ExplicitAuthFlows() pulumi.StringArrayOutput

The authentication flows that you want your user pool client to support. For each app client in your user pool, you can sign in your users with any combination of one or more flows, including with a user name and Secure Remote Password (SRP), a user name and password, or a custom authentication process that you define with Lambda functions.

> If you don't specify a value for `ExplicitAuthFlows` , your user client supports `ALLOW_REFRESH_TOKEN_AUTH` , `ALLOW_USER_SRP_AUTH` , and `ALLOW_CUSTOM_AUTH` .

Valid values include:

- `ALLOW_ADMIN_USER_PASSWORD_AUTH` : Enable admin based user password authentication flow `ADMIN_USER_PASSWORD_AUTH` . This setting replaces the `ADMIN_NO_SRP_AUTH` setting. With this authentication flow, your app passes a user name and password to Amazon Cognito in the request, instead of using the Secure Remote Password (SRP) protocol to securely transmit the password. - `ALLOW_CUSTOM_AUTH` : Enable Lambda trigger based authentication. - `ALLOW_USER_PASSWORD_AUTH` : Enable user password-based authentication. In this flow, Amazon Cognito receives the password in the request instead of using the SRP protocol to verify passwords. - `ALLOW_USER_SRP_AUTH` : Enable SRP-based authentication. - `ALLOW_REFRESH_TOKEN_AUTH` : Enable authflow to refresh tokens.

In some environments, you will see the values `ADMIN_NO_SRP_AUTH` , `CUSTOM_AUTH_FLOW_ONLY` , or `USER_PASSWORD_AUTH` . You can't assign these legacy `ExplicitAuthFlows` values to user pool clients at the same time as values that begin with `ALLOW_` , like `ALLOW_USER_SRP_AUTH` .

func (UserPoolClientOutput) GenerateSecret added in v0.17.0 

func (o UserPoolClientOutput) GenerateSecret() pulumi.BoolPtrOutput

Boolean to specify whether you want to generate a secret for the user pool client being created.

func (UserPoolClientOutput) IdTokenValidity added in v0.17.0 

func (o UserPoolClientOutput) IdTokenValidity() pulumi.IntPtrOutput

The ID token time limit. After this limit expires, your user can't use their ID token. To specify the time unit for `IdTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `IdTokenValidity` as `10` and `TokenValidityUnits` as `hours` , your user can authenticate their session with their ID token for 10 hours.

The default time unit for `IdTokenValidity` in an API request is hours. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your ID tokens are valid for one hour.

func (UserPoolClientOutput) LogoutUrls added in v0.72.0 

func (o UserPoolClientOutput) LogoutUrls() pulumi.StringArrayOutput

A list of allowed logout URLs for the IdPs.

func (UserPoolClientOutput) Name added in v0.17.0 

func (o UserPoolClientOutput) Name() pulumi.StringOutput

func (UserPoolClientOutput) PreventUserExistenceErrors added in v0.17.0 

func (o UserPoolClientOutput) PreventUserExistenceErrors() pulumi.StringPtrOutput

Errors and responses that you want Amazon Cognito APIs to return during authentication, account confirmation, and password recovery when the user doesn't exist in the user pool. When set to `ENABLED` and the user doesn't exist, authentication returns an error indicating either the username or password was incorrect. Account confirmation and password recovery return a response indicating a code was sent to a simulated destination. When set to `LEGACY` , those APIs return a `UserNotFoundException` exception if the user doesn't exist in the user pool.

Valid values include:

- `ENABLED` - This prevents user existence-related errors. - `LEGACY` - This represents the early behavior of Amazon Cognito where user existence related errors aren't prevented.

Defaults to `LEGACY` when you don't provide a value.

func (UserPoolClientOutput) ReadAttributes added in v0.17.0 

func (o UserPoolClientOutput) ReadAttributes() pulumi.StringArrayOutput

The list of user attributes that you want your app client to have read access to. After your user authenticates in your app, their access token authorizes them to read their own attribute value for any attribute in this list. An example of this kind of activity is when your user selects a link to view their profile information. Your app makes a [GetUser](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html) API request to retrieve and display your user's profile data.

When you don't specify the `ReadAttributes` for your app client, your app can read the values of `email_verified` , `phone_number_verified` , and the Standard attributes of your user pool. When your user pool app client has read access to these default attributes, `ReadAttributes` doesn't return any information. Amazon Cognito only populates `ReadAttributes` in the API response if you have specified your own custom set of read attributes.

func (UserPoolClientOutput) RefreshTokenValidity added in v0.17.0 

func (o UserPoolClientOutput) RefreshTokenValidity() pulumi.IntPtrOutput

The refresh token time limit. After this limit expires, your user can't use their refresh token. To specify the time unit for `RefreshTokenValidity` as `seconds` , `minutes` , `hours` , or `days` , set a `TokenValidityUnits` value in your API request.

For example, when you set `RefreshTokenValidity` as `10` and `TokenValidityUnits` as `days` , your user can refresh their session and retrieve new access and ID tokens for 10 days.

The default time unit for `RefreshTokenValidity` in an API request is days. You can't set `RefreshTokenValidity` to 0. If you do, Amazon Cognito overrides the value with the default value of 30 days. *Valid range* is displayed below in seconds.

If you don't specify otherwise in the configuration of your app client, your refresh tokens are valid for 30 days.

func (UserPoolClientOutput) SupportedIdentityProviders added in v0.17.0 

func (o UserPoolClientOutput) SupportedIdentityProviders() pulumi.StringArrayOutput

A list of provider names for the identity providers (IdPs) that are supported on this client. The following are supported: `COGNITO` , `Facebook` , `Google` , `SignInWithApple` , and `LoginWithAmazon` . You can also specify the names that you configured for the SAML and OIDC IdPs in your user pool, for example `MySAMLIdP` or `MyOIDCIdP` .

func (UserPoolClientOutput) ToUserPoolClientOutput 

func (o UserPoolClientOutput) ToUserPoolClientOutput() UserPoolClientOutput

func (UserPoolClientOutput) ToUserPoolClientOutputWithContext 

func (o UserPoolClientOutput) ToUserPoolClientOutputWithContext(ctx context.Context) UserPoolClientOutput

func (UserPoolClientOutput) TokenValidityUnits added in v0.17.0 

func (o UserPoolClientOutput) TokenValidityUnits() UserPoolClientTokenValidityUnitsPtrOutput

The units in which the validity times are represented. The default unit for RefreshToken is days, and default for ID and access tokens are hours.

func (UserPoolClientOutput) UserPoolId added in v0.17.0 

func (o UserPoolClientOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool where you want to create a user pool client.

func (UserPoolClientOutput) WriteAttributes added in v0.17.0 

func (o UserPoolClientOutput) WriteAttributes() pulumi.StringArrayOutput

The list of user attributes that you want your app client to have write access to. After your user authenticates in your app, their access token authorizes them to set or modify their own attribute value for any attribute in this list. An example of this kind of activity is when you present your user with a form to update their profile information and they change their last name. Your app then makes an [UpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html) API request and sets `family_name` to the new value.

When you don't specify the `WriteAttributes` for your app client, your app can write the values of the Standard attributes of your user pool. When your user pool has write access to these default attributes, `WriteAttributes` doesn't return any information. Amazon Cognito only populates `WriteAttributes` in the API response if you have specified your own custom set of write attributes.

If your app client allows users to sign in through an IdP, this array must include all attributes that you have mapped to IdP attributes. Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If your app client does not have write access to a mapped attribute, Amazon Cognito throws an error when it tries to update the attribute. For more information, see [Specifying IdP Attribute Mappings for Your user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .

type UserPoolClientState 

type UserPoolClientState struct {
}

func (UserPoolClientState) ElementType 

func (UserPoolClientState) ElementType() reflect.Type

type UserPoolClientTokenValidityUnits 

type UserPoolClientTokenValidityUnits struct {
	// A time unit for the value that you set in the `AccessTokenValidity` parameter. The default `AccessTokenValidity` time unit is `hours` . `AccessTokenValidity` duration can range from five minutes to one day.
	AccessToken *string `pulumi:"accessToken"`
	// A time unit for the value that you set in the `IdTokenValidity` parameter. The default `IdTokenValidity` time unit is `hours` . `IdTokenValidity` duration can range from five minutes to one day.
	IdToken *string `pulumi:"idToken"`
	// A time unit for the value that you set in the `RefreshTokenValidity` parameter. The default `RefreshTokenValidity` time unit is `days` . `RefreshTokenValidity` duration can range from 60 minutes to 10 years.
	RefreshToken *string `pulumi:"refreshToken"`
}

type UserPoolClientTokenValidityUnitsArgs 

type UserPoolClientTokenValidityUnitsArgs struct {
	// A time unit for the value that you set in the `AccessTokenValidity` parameter. The default `AccessTokenValidity` time unit is `hours` . `AccessTokenValidity` duration can range from five minutes to one day.
	AccessToken pulumi.StringPtrInput `pulumi:"accessToken"`
	// A time unit for the value that you set in the `IdTokenValidity` parameter. The default `IdTokenValidity` time unit is `hours` . `IdTokenValidity` duration can range from five minutes to one day.
	IdToken pulumi.StringPtrInput `pulumi:"idToken"`
	// A time unit for the value that you set in the `RefreshTokenValidity` parameter. The default `RefreshTokenValidity` time unit is `days` . `RefreshTokenValidity` duration can range from 60 minutes to 10 years.
	RefreshToken pulumi.StringPtrInput `pulumi:"refreshToken"`
}

func (UserPoolClientTokenValidityUnitsArgs) ElementType 

func (UserPoolClientTokenValidityUnitsArgs) ElementType() reflect.Type

func (UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsOutput 

func (i UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsOutput() UserPoolClientTokenValidityUnitsOutput

func (UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsOutputWithContext 

func (i UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsOutputWithContext(ctx context.Context) UserPoolClientTokenValidityUnitsOutput

func (UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsPtrOutput 

func (i UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsPtrOutput() UserPoolClientTokenValidityUnitsPtrOutput

func (UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext 

func (i UserPoolClientTokenValidityUnitsArgs) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext(ctx context.Context) UserPoolClientTokenValidityUnitsPtrOutput

type UserPoolClientTokenValidityUnitsInput 

type UserPoolClientTokenValidityUnitsInput interface {
	pulumi.Input

	ToUserPoolClientTokenValidityUnitsOutput() UserPoolClientTokenValidityUnitsOutput
	ToUserPoolClientTokenValidityUnitsOutputWithContext(context.Context) UserPoolClientTokenValidityUnitsOutput
}

UserPoolClientTokenValidityUnitsInput is an input type that accepts UserPoolClientTokenValidityUnitsArgs and UserPoolClientTokenValidityUnitsOutput values. You can construct a concrete instance of `UserPoolClientTokenValidityUnitsInput` via: 

UserPoolClientTokenValidityUnitsArgs{...}

type UserPoolClientTokenValidityUnitsOutput 

type UserPoolClientTokenValidityUnitsOutput struct{ *pulumi.OutputState }

func (UserPoolClientTokenValidityUnitsOutput) AccessToken 

func (o UserPoolClientTokenValidityUnitsOutput) AccessToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `AccessTokenValidity` parameter. The default `AccessTokenValidity` time unit is `hours` . `AccessTokenValidity` duration can range from five minutes to one day.

func (UserPoolClientTokenValidityUnitsOutput) ElementType 

func (UserPoolClientTokenValidityUnitsOutput) ElementType() reflect.Type

func (UserPoolClientTokenValidityUnitsOutput) IdToken 

func (o UserPoolClientTokenValidityUnitsOutput) IdToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `IdTokenValidity` parameter. The default `IdTokenValidity` time unit is `hours` . `IdTokenValidity` duration can range from five minutes to one day.

func (UserPoolClientTokenValidityUnitsOutput) RefreshToken 

func (o UserPoolClientTokenValidityUnitsOutput) RefreshToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `RefreshTokenValidity` parameter. The default `RefreshTokenValidity` time unit is `days` . `RefreshTokenValidity` duration can range from 60 minutes to 10 years.

func (UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsOutput 

func (o UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsOutput() UserPoolClientTokenValidityUnitsOutput

func (UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsOutputWithContext 

func (o UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsOutputWithContext(ctx context.Context) UserPoolClientTokenValidityUnitsOutput

func (UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsPtrOutput 

func (o UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsPtrOutput() UserPoolClientTokenValidityUnitsPtrOutput

func (UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext 

func (o UserPoolClientTokenValidityUnitsOutput) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext(ctx context.Context) UserPoolClientTokenValidityUnitsPtrOutput

type UserPoolClientTokenValidityUnitsPtrInput 

type UserPoolClientTokenValidityUnitsPtrInput interface {
	pulumi.Input

	ToUserPoolClientTokenValidityUnitsPtrOutput() UserPoolClientTokenValidityUnitsPtrOutput
	ToUserPoolClientTokenValidityUnitsPtrOutputWithContext(context.Context) UserPoolClientTokenValidityUnitsPtrOutput
}

UserPoolClientTokenValidityUnitsPtrInput is an input type that accepts UserPoolClientTokenValidityUnitsArgs, UserPoolClientTokenValidityUnitsPtr and UserPoolClientTokenValidityUnitsPtrOutput values. You can construct a concrete instance of `UserPoolClientTokenValidityUnitsPtrInput` via: 

        UserPoolClientTokenValidityUnitsArgs{...}

or:

        nil

func UserPoolClientTokenValidityUnitsPtr 

func UserPoolClientTokenValidityUnitsPtr(v *UserPoolClientTokenValidityUnitsArgs) UserPoolClientTokenValidityUnitsPtrInput

type UserPoolClientTokenValidityUnitsPtrOutput 

type UserPoolClientTokenValidityUnitsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolClientTokenValidityUnitsPtrOutput) AccessToken 

func (o UserPoolClientTokenValidityUnitsPtrOutput) AccessToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `AccessTokenValidity` parameter. The default `AccessTokenValidity` time unit is `hours` . `AccessTokenValidity` duration can range from five minutes to one day.

func (UserPoolClientTokenValidityUnitsPtrOutput) Elem 

func (o UserPoolClientTokenValidityUnitsPtrOutput) Elem() UserPoolClientTokenValidityUnitsOutput

func (UserPoolClientTokenValidityUnitsPtrOutput) ElementType 

func (UserPoolClientTokenValidityUnitsPtrOutput) ElementType() reflect.Type

func (UserPoolClientTokenValidityUnitsPtrOutput) IdToken 

func (o UserPoolClientTokenValidityUnitsPtrOutput) IdToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `IdTokenValidity` parameter. The default `IdTokenValidity` time unit is `hours` . `IdTokenValidity` duration can range from five minutes to one day.

func (UserPoolClientTokenValidityUnitsPtrOutput) RefreshToken 

func (o UserPoolClientTokenValidityUnitsPtrOutput) RefreshToken() pulumi.StringPtrOutput

A time unit for the value that you set in the `RefreshTokenValidity` parameter. The default `RefreshTokenValidity` time unit is `days` . `RefreshTokenValidity` duration can range from 60 minutes to 10 years.

func (UserPoolClientTokenValidityUnitsPtrOutput) ToUserPoolClientTokenValidityUnitsPtrOutput 

func (o UserPoolClientTokenValidityUnitsPtrOutput) ToUserPoolClientTokenValidityUnitsPtrOutput() UserPoolClientTokenValidityUnitsPtrOutput

func (UserPoolClientTokenValidityUnitsPtrOutput) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext 

func (o UserPoolClientTokenValidityUnitsPtrOutput) ToUserPoolClientTokenValidityUnitsPtrOutputWithContext(ctx context.Context) UserPoolClientTokenValidityUnitsPtrOutput

type UserPoolCustomEmailSender 

type UserPoolCustomEmailSender struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	LambdaArn *string `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	//
	// You must use a `LambdaVersion` of `V1_0` with a custom sender function.
	LambdaVersion *string `pulumi:"lambdaVersion"`
}

type UserPoolCustomEmailSenderArgs 

type UserPoolCustomEmailSenderArgs struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	LambdaArn pulumi.StringPtrInput `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	//
	// You must use a `LambdaVersion` of `V1_0` with a custom sender function.
	LambdaVersion pulumi.StringPtrInput `pulumi:"lambdaVersion"`
}

func (UserPoolCustomEmailSenderArgs) ElementType 

func (UserPoolCustomEmailSenderArgs) ElementType() reflect.Type

func (UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderOutput 

func (i UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderOutput() UserPoolCustomEmailSenderOutput

func (UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderOutputWithContext 

func (i UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderOutputWithContext(ctx context.Context) UserPoolCustomEmailSenderOutput

func (UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderPtrOutput 

func (i UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderPtrOutput() UserPoolCustomEmailSenderPtrOutput

func (UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderPtrOutputWithContext 

func (i UserPoolCustomEmailSenderArgs) ToUserPoolCustomEmailSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomEmailSenderPtrOutput

type UserPoolCustomEmailSenderInput 

type UserPoolCustomEmailSenderInput interface {
	pulumi.Input

	ToUserPoolCustomEmailSenderOutput() UserPoolCustomEmailSenderOutput
	ToUserPoolCustomEmailSenderOutputWithContext(context.Context) UserPoolCustomEmailSenderOutput
}

UserPoolCustomEmailSenderInput is an input type that accepts UserPoolCustomEmailSenderArgs and UserPoolCustomEmailSenderOutput values. You can construct a concrete instance of `UserPoolCustomEmailSenderInput` via: 

UserPoolCustomEmailSenderArgs{...}

type UserPoolCustomEmailSenderOutput 

type UserPoolCustomEmailSenderOutput struct{ *pulumi.OutputState }

func (UserPoolCustomEmailSenderOutput) ElementType 

func (UserPoolCustomEmailSenderOutput) ElementType() reflect.Type

func (UserPoolCustomEmailSenderOutput) LambdaArn 

func (o UserPoolCustomEmailSenderOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

func (UserPoolCustomEmailSenderOutput) LambdaVersion 

func (o UserPoolCustomEmailSenderOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

You must use a `LambdaVersion` of `V1_0` with a custom sender function.

func (UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderOutput 

func (o UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderOutput() UserPoolCustomEmailSenderOutput

func (UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderOutputWithContext 

func (o UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderOutputWithContext(ctx context.Context) UserPoolCustomEmailSenderOutput

func (UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderPtrOutput 

func (o UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderPtrOutput() UserPoolCustomEmailSenderPtrOutput

func (UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderPtrOutputWithContext 

func (o UserPoolCustomEmailSenderOutput) ToUserPoolCustomEmailSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomEmailSenderPtrOutput

type UserPoolCustomEmailSenderPtrInput 

type UserPoolCustomEmailSenderPtrInput interface {
	pulumi.Input

	ToUserPoolCustomEmailSenderPtrOutput() UserPoolCustomEmailSenderPtrOutput
	ToUserPoolCustomEmailSenderPtrOutputWithContext(context.Context) UserPoolCustomEmailSenderPtrOutput
}

UserPoolCustomEmailSenderPtrInput is an input type that accepts UserPoolCustomEmailSenderArgs, UserPoolCustomEmailSenderPtr and UserPoolCustomEmailSenderPtrOutput values. You can construct a concrete instance of `UserPoolCustomEmailSenderPtrInput` via: 

        UserPoolCustomEmailSenderArgs{...}

or:

        nil

func UserPoolCustomEmailSenderPtr 

func UserPoolCustomEmailSenderPtr(v *UserPoolCustomEmailSenderArgs) UserPoolCustomEmailSenderPtrInput

type UserPoolCustomEmailSenderPtrOutput 

type UserPoolCustomEmailSenderPtrOutput struct{ *pulumi.OutputState }

func (UserPoolCustomEmailSenderPtrOutput) Elem 

func (o UserPoolCustomEmailSenderPtrOutput) Elem() UserPoolCustomEmailSenderOutput

func (UserPoolCustomEmailSenderPtrOutput) ElementType 

func (UserPoolCustomEmailSenderPtrOutput) ElementType() reflect.Type

func (UserPoolCustomEmailSenderPtrOutput) LambdaArn 

func (o UserPoolCustomEmailSenderPtrOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

func (UserPoolCustomEmailSenderPtrOutput) LambdaVersion 

func (o UserPoolCustomEmailSenderPtrOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

You must use a `LambdaVersion` of `V1_0` with a custom sender function.

func (UserPoolCustomEmailSenderPtrOutput) ToUserPoolCustomEmailSenderPtrOutput 

func (o UserPoolCustomEmailSenderPtrOutput) ToUserPoolCustomEmailSenderPtrOutput() UserPoolCustomEmailSenderPtrOutput

func (UserPoolCustomEmailSenderPtrOutput) ToUserPoolCustomEmailSenderPtrOutputWithContext 

func (o UserPoolCustomEmailSenderPtrOutput) ToUserPoolCustomEmailSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomEmailSenderPtrOutput

type UserPoolCustomSmsSender added in v0.72.0 

type UserPoolCustomSmsSender struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	LambdaArn *string `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	//
	// You must use a `LambdaVersion` of `V1_0` with a custom sender function.
	LambdaVersion *string `pulumi:"lambdaVersion"`
}

type UserPoolCustomSmsSenderArgs added in v0.72.0 

type UserPoolCustomSmsSenderArgs struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	LambdaArn pulumi.StringPtrInput `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	//
	// You must use a `LambdaVersion` of `V1_0` with a custom sender function.
	LambdaVersion pulumi.StringPtrInput `pulumi:"lambdaVersion"`
}

func (UserPoolCustomSmsSenderArgs) ElementType added in v0.72.0 

func (UserPoolCustomSmsSenderArgs) ElementType() reflect.Type

func (UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderOutput added in v0.72.0 

func (i UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderOutput() UserPoolCustomSmsSenderOutput

func (UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderOutputWithContext added in v0.72.0 

func (i UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderOutputWithContext(ctx context.Context) UserPoolCustomSmsSenderOutput

func (UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderPtrOutput added in v0.72.0 

func (i UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderPtrOutput() UserPoolCustomSmsSenderPtrOutput

func (UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderPtrOutputWithContext added in v0.72.0 

func (i UserPoolCustomSmsSenderArgs) ToUserPoolCustomSmsSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomSmsSenderPtrOutput

type UserPoolCustomSmsSenderInput added in v0.72.0 

type UserPoolCustomSmsSenderInput interface {
	pulumi.Input

	ToUserPoolCustomSmsSenderOutput() UserPoolCustomSmsSenderOutput
	ToUserPoolCustomSmsSenderOutputWithContext(context.Context) UserPoolCustomSmsSenderOutput
}

UserPoolCustomSmsSenderInput is an input type that accepts UserPoolCustomSmsSenderArgs and UserPoolCustomSmsSenderOutput values. You can construct a concrete instance of `UserPoolCustomSmsSenderInput` via: 

UserPoolCustomSmsSenderArgs{...}

type UserPoolCustomSmsSenderOutput added in v0.72.0 

type UserPoolCustomSmsSenderOutput struct{ *pulumi.OutputState }

func (UserPoolCustomSmsSenderOutput) ElementType added in v0.72.0 

func (UserPoolCustomSmsSenderOutput) ElementType() reflect.Type

func (UserPoolCustomSmsSenderOutput) LambdaArn added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

func (UserPoolCustomSmsSenderOutput) LambdaVersion added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

You must use a `LambdaVersion` of `V1_0` with a custom sender function.

func (UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderOutput added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderOutput() UserPoolCustomSmsSenderOutput

func (UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderOutputWithContext added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderOutputWithContext(ctx context.Context) UserPoolCustomSmsSenderOutput

func (UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderPtrOutput added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderPtrOutput() UserPoolCustomSmsSenderPtrOutput

func (UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderPtrOutputWithContext added in v0.72.0 

func (o UserPoolCustomSmsSenderOutput) ToUserPoolCustomSmsSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomSmsSenderPtrOutput

type UserPoolCustomSmsSenderPtrInput added in v0.72.0 

type UserPoolCustomSmsSenderPtrInput interface {
	pulumi.Input

	ToUserPoolCustomSmsSenderPtrOutput() UserPoolCustomSmsSenderPtrOutput
	ToUserPoolCustomSmsSenderPtrOutputWithContext(context.Context) UserPoolCustomSmsSenderPtrOutput
}

UserPoolCustomSmsSenderPtrInput is an input type that accepts UserPoolCustomSmsSenderArgs, UserPoolCustomSmsSenderPtr and UserPoolCustomSmsSenderPtrOutput values. You can construct a concrete instance of `UserPoolCustomSmsSenderPtrInput` via: 

        UserPoolCustomSmsSenderArgs{...}

or:

        nil

func UserPoolCustomSmsSenderPtr added in v0.72.0 

func UserPoolCustomSmsSenderPtr(v *UserPoolCustomSmsSenderArgs) UserPoolCustomSmsSenderPtrInput

type UserPoolCustomSmsSenderPtrOutput added in v0.72.0 

type UserPoolCustomSmsSenderPtrOutput struct{ *pulumi.OutputState }

func (UserPoolCustomSmsSenderPtrOutput) Elem added in v0.72.0 

func (o UserPoolCustomSmsSenderPtrOutput) Elem() UserPoolCustomSmsSenderOutput

func (UserPoolCustomSmsSenderPtrOutput) ElementType added in v0.72.0 

func (UserPoolCustomSmsSenderPtrOutput) ElementType() reflect.Type

func (UserPoolCustomSmsSenderPtrOutput) LambdaArn added in v0.72.0 

func (o UserPoolCustomSmsSenderPtrOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

func (UserPoolCustomSmsSenderPtrOutput) LambdaVersion added in v0.72.0 

func (o UserPoolCustomSmsSenderPtrOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

You must use a `LambdaVersion` of `V1_0` with a custom sender function.

func (UserPoolCustomSmsSenderPtrOutput) ToUserPoolCustomSmsSenderPtrOutput added in v0.72.0 

func (o UserPoolCustomSmsSenderPtrOutput) ToUserPoolCustomSmsSenderPtrOutput() UserPoolCustomSmsSenderPtrOutput

func (UserPoolCustomSmsSenderPtrOutput) ToUserPoolCustomSmsSenderPtrOutputWithContext added in v0.72.0 

func (o UserPoolCustomSmsSenderPtrOutput) ToUserPoolCustomSmsSenderPtrOutputWithContext(ctx context.Context) UserPoolCustomSmsSenderPtrOutput

type UserPoolDeviceConfiguration 

type UserPoolDeviceConfiguration struct {
	// When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).
	//
	// > Whether or not `ChallengeRequiredOnNewDevice` is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA.
	ChallengeRequiredOnNewDevice *bool `pulumi:"challengeRequiredOnNewDevice"`
	// When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a [ConfirmDevice](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html) API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an [UpdateDeviceStatus](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html) API request.
	//
	// When `DeviceOnlyRememberedOnUserPrompt` is `false` , Amazon Cognito immediately remembers devices that you register in a `ConfirmDevice` API request.
	DeviceOnlyRememberedOnUserPrompt *bool `pulumi:"deviceOnlyRememberedOnUserPrompt"`
}

type UserPoolDeviceConfigurationArgs 

type UserPoolDeviceConfigurationArgs struct {
	// When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).
	//
	// > Whether or not `ChallengeRequiredOnNewDevice` is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA.
	ChallengeRequiredOnNewDevice pulumi.BoolPtrInput `pulumi:"challengeRequiredOnNewDevice"`
	// When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a [ConfirmDevice](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html) API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an [UpdateDeviceStatus](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html) API request.
	//
	// When `DeviceOnlyRememberedOnUserPrompt` is `false` , Amazon Cognito immediately remembers devices that you register in a `ConfirmDevice` API request.
	DeviceOnlyRememberedOnUserPrompt pulumi.BoolPtrInput `pulumi:"deviceOnlyRememberedOnUserPrompt"`
}

func (UserPoolDeviceConfigurationArgs) ElementType 

func (UserPoolDeviceConfigurationArgs) ElementType() reflect.Type

func (UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationOutput 

func (i UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationOutput() UserPoolDeviceConfigurationOutput

func (UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationOutputWithContext 

func (i UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationOutputWithContext(ctx context.Context) UserPoolDeviceConfigurationOutput

func (UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationPtrOutput 

func (i UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationPtrOutput() UserPoolDeviceConfigurationPtrOutput

func (UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationPtrOutputWithContext 

func (i UserPoolDeviceConfigurationArgs) ToUserPoolDeviceConfigurationPtrOutputWithContext(ctx context.Context) UserPoolDeviceConfigurationPtrOutput

type UserPoolDeviceConfigurationInput 

type UserPoolDeviceConfigurationInput interface {
	pulumi.Input

	ToUserPoolDeviceConfigurationOutput() UserPoolDeviceConfigurationOutput
	ToUserPoolDeviceConfigurationOutputWithContext(context.Context) UserPoolDeviceConfigurationOutput
}

UserPoolDeviceConfigurationInput is an input type that accepts UserPoolDeviceConfigurationArgs and UserPoolDeviceConfigurationOutput values. You can construct a concrete instance of `UserPoolDeviceConfigurationInput` via: 

UserPoolDeviceConfigurationArgs{...}

type UserPoolDeviceConfigurationOutput 

type UserPoolDeviceConfigurationOutput struct{ *pulumi.OutputState }

func (UserPoolDeviceConfigurationOutput) ChallengeRequiredOnNewDevice 

func (o UserPoolDeviceConfigurationOutput) ChallengeRequiredOnNewDevice() pulumi.BoolPtrOutput

When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).

> Whether or not `ChallengeRequiredOnNewDevice` is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA.

func (UserPoolDeviceConfigurationOutput) DeviceOnlyRememberedOnUserPrompt 

func (o UserPoolDeviceConfigurationOutput) DeviceOnlyRememberedOnUserPrompt() pulumi.BoolPtrOutput

When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a [ConfirmDevice](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html) API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an [UpdateDeviceStatus](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html) API request.

When `DeviceOnlyRememberedOnUserPrompt` is `false` , Amazon Cognito immediately remembers devices that you register in a `ConfirmDevice` API request.

func (UserPoolDeviceConfigurationOutput) ElementType 

func (UserPoolDeviceConfigurationOutput) ElementType() reflect.Type

func (UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationOutput 

func (o UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationOutput() UserPoolDeviceConfigurationOutput

func (UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationOutputWithContext 

func (o UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationOutputWithContext(ctx context.Context) UserPoolDeviceConfigurationOutput

func (UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationPtrOutput 

func (o UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationPtrOutput() UserPoolDeviceConfigurationPtrOutput

func (UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationPtrOutputWithContext 

func (o UserPoolDeviceConfigurationOutput) ToUserPoolDeviceConfigurationPtrOutputWithContext(ctx context.Context) UserPoolDeviceConfigurationPtrOutput

type UserPoolDeviceConfigurationPtrInput 

type UserPoolDeviceConfigurationPtrInput interface {
	pulumi.Input

	ToUserPoolDeviceConfigurationPtrOutput() UserPoolDeviceConfigurationPtrOutput
	ToUserPoolDeviceConfigurationPtrOutputWithContext(context.Context) UserPoolDeviceConfigurationPtrOutput
}

UserPoolDeviceConfigurationPtrInput is an input type that accepts UserPoolDeviceConfigurationArgs, UserPoolDeviceConfigurationPtr and UserPoolDeviceConfigurationPtrOutput values. You can construct a concrete instance of `UserPoolDeviceConfigurationPtrInput` via: 

        UserPoolDeviceConfigurationArgs{...}

or:

        nil

func UserPoolDeviceConfigurationPtr 

func UserPoolDeviceConfigurationPtr(v *UserPoolDeviceConfigurationArgs) UserPoolDeviceConfigurationPtrInput

type UserPoolDeviceConfigurationPtrOutput 

type UserPoolDeviceConfigurationPtrOutput struct{ *pulumi.OutputState }

func (UserPoolDeviceConfigurationPtrOutput) ChallengeRequiredOnNewDevice 

func (o UserPoolDeviceConfigurationPtrOutput) ChallengeRequiredOnNewDevice() pulumi.BoolPtrOutput

When true, a remembered device can sign in with device authentication instead of SMS and time-based one-time password (TOTP) factors for multi-factor authentication (MFA).

> Whether or not `ChallengeRequiredOnNewDevice` is true, users who sign in with devices that have not been confirmed or remembered must still provide a second factor in a user pool that requires MFA.

func (UserPoolDeviceConfigurationPtrOutput) DeviceOnlyRememberedOnUserPrompt 

func (o UserPoolDeviceConfigurationPtrOutput) DeviceOnlyRememberedOnUserPrompt() pulumi.BoolPtrOutput

When true, Amazon Cognito doesn't automatically remember a user's device when your app sends a [ConfirmDevice](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html) API request. In your app, create a prompt for your user to choose whether they want to remember their device. Return the user's choice in an [UpdateDeviceStatus](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html) API request.

When `DeviceOnlyRememberedOnUserPrompt` is `false` , Amazon Cognito immediately remembers devices that you register in a `ConfirmDevice` API request.

func (UserPoolDeviceConfigurationPtrOutput) Elem 

func (o UserPoolDeviceConfigurationPtrOutput) Elem() UserPoolDeviceConfigurationOutput

func (UserPoolDeviceConfigurationPtrOutput) ElementType 

func (UserPoolDeviceConfigurationPtrOutput) ElementType() reflect.Type

func (UserPoolDeviceConfigurationPtrOutput) ToUserPoolDeviceConfigurationPtrOutput 

func (o UserPoolDeviceConfigurationPtrOutput) ToUserPoolDeviceConfigurationPtrOutput() UserPoolDeviceConfigurationPtrOutput

func (UserPoolDeviceConfigurationPtrOutput) ToUserPoolDeviceConfigurationPtrOutputWithContext 

func (o UserPoolDeviceConfigurationPtrOutput) ToUserPoolDeviceConfigurationPtrOutputWithContext(ctx context.Context) UserPoolDeviceConfigurationPtrOutput

type UserPoolDomain 

type UserPoolDomain struct {
	pulumi.CustomResourceState

	// The resource ID.
	AwsId pulumi.StringOutput `pulumi:"awsId"`
	// The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider.
	CloudFrontDistribution pulumi.StringOutput `pulumi:"cloudFrontDistribution"`
	// The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.
	CustomDomainConfig UserPoolDomainCustomDomainConfigTypePtrOutput `pulumi:"customDomainConfig"`
	// The domain name for the custom domain that hosts the sign-up and sign-in pages for your application. One example might be `auth.example.com` .
	//
	// This string can include only lowercase letters, numbers, and hyphens. Don't use a hyphen for the first or last character. Use periods to separate subdomain names.
	Domain pulumi.StringOutput `pulumi:"domain"`
	// The ID of the user pool that is associated with the custom domain whose certificate you're updating.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolDomain

func GetUserPoolDomain 

func GetUserPoolDomain(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolDomainState, opts ...pulumi.ResourceOption) (*UserPoolDomain, error)

GetUserPoolDomain gets an existing UserPoolDomain resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolDomain 

func NewUserPoolDomain(ctx *pulumi.Context,
	name string, args *UserPoolDomainArgs, opts ...pulumi.ResourceOption) (*UserPoolDomain, error)

NewUserPoolDomain registers a new resource with the given unique name, arguments, and options.

func (*UserPoolDomain) ElementType 

func (*UserPoolDomain) ElementType() reflect.Type

func (*UserPoolDomain) ToUserPoolDomainOutput 

func (i *UserPoolDomain) ToUserPoolDomainOutput() UserPoolDomainOutput

func (*UserPoolDomain) ToUserPoolDomainOutputWithContext 

func (i *UserPoolDomain) ToUserPoolDomainOutputWithContext(ctx context.Context) UserPoolDomainOutput

type UserPoolDomainArgs 

type UserPoolDomainArgs struct {
	// The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.
	CustomDomainConfig UserPoolDomainCustomDomainConfigTypePtrInput
	// The domain name for the custom domain that hosts the sign-up and sign-in pages for your application. One example might be `auth.example.com` .
	//
	// This string can include only lowercase letters, numbers, and hyphens. Don't use a hyphen for the first or last character. Use periods to separate subdomain names.
	Domain pulumi.StringInput
	// The ID of the user pool that is associated with the custom domain whose certificate you're updating.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolDomain resource.

func (UserPoolDomainArgs) ElementType 

func (UserPoolDomainArgs) ElementType() reflect.Type

type UserPoolDomainCustomDomainConfigType 

type UserPoolDomainCustomDomainConfigType struct {
	// The Amazon Resource Name (ARN) of an AWS Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.
	CertificateArn *string `pulumi:"certificateArn"`
}

type UserPoolDomainCustomDomainConfigTypeArgs 

type UserPoolDomainCustomDomainConfigTypeArgs struct {
	// The Amazon Resource Name (ARN) of an AWS Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.
	CertificateArn pulumi.StringPtrInput `pulumi:"certificateArn"`
}

func (UserPoolDomainCustomDomainConfigTypeArgs) ElementType 

func (UserPoolDomainCustomDomainConfigTypeArgs) ElementType() reflect.Type

func (UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypeOutput 

func (i UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypeOutput() UserPoolDomainCustomDomainConfigTypeOutput

func (UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypeOutputWithContext 

func (i UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypeOutputWithContext(ctx context.Context) UserPoolDomainCustomDomainConfigTypeOutput

func (UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypePtrOutput 

func (i UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypePtrOutput() UserPoolDomainCustomDomainConfigTypePtrOutput

func (UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext 

func (i UserPoolDomainCustomDomainConfigTypeArgs) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext(ctx context.Context) UserPoolDomainCustomDomainConfigTypePtrOutput

type UserPoolDomainCustomDomainConfigTypeInput 

type UserPoolDomainCustomDomainConfigTypeInput interface {
	pulumi.Input

	ToUserPoolDomainCustomDomainConfigTypeOutput() UserPoolDomainCustomDomainConfigTypeOutput
	ToUserPoolDomainCustomDomainConfigTypeOutputWithContext(context.Context) UserPoolDomainCustomDomainConfigTypeOutput
}

UserPoolDomainCustomDomainConfigTypeInput is an input type that accepts UserPoolDomainCustomDomainConfigTypeArgs and UserPoolDomainCustomDomainConfigTypeOutput values. You can construct a concrete instance of `UserPoolDomainCustomDomainConfigTypeInput` via: 

UserPoolDomainCustomDomainConfigTypeArgs{...}

type UserPoolDomainCustomDomainConfigTypeOutput 

type UserPoolDomainCustomDomainConfigTypeOutput struct{ *pulumi.OutputState }

func (UserPoolDomainCustomDomainConfigTypeOutput) CertificateArn 

func (o UserPoolDomainCustomDomainConfigTypeOutput) CertificateArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of an AWS Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.

func (UserPoolDomainCustomDomainConfigTypeOutput) ElementType 

func (UserPoolDomainCustomDomainConfigTypeOutput) ElementType() reflect.Type

func (UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypeOutput 

func (o UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypeOutput() UserPoolDomainCustomDomainConfigTypeOutput

func (UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypeOutputWithContext 

func (o UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypeOutputWithContext(ctx context.Context) UserPoolDomainCustomDomainConfigTypeOutput

func (UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutput 

func (o UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutput() UserPoolDomainCustomDomainConfigTypePtrOutput

func (UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext 

func (o UserPoolDomainCustomDomainConfigTypeOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext(ctx context.Context) UserPoolDomainCustomDomainConfigTypePtrOutput

type UserPoolDomainCustomDomainConfigTypePtrInput 

type UserPoolDomainCustomDomainConfigTypePtrInput interface {
	pulumi.Input

	ToUserPoolDomainCustomDomainConfigTypePtrOutput() UserPoolDomainCustomDomainConfigTypePtrOutput
	ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext(context.Context) UserPoolDomainCustomDomainConfigTypePtrOutput
}

UserPoolDomainCustomDomainConfigTypePtrInput is an input type that accepts UserPoolDomainCustomDomainConfigTypeArgs, UserPoolDomainCustomDomainConfigTypePtr and UserPoolDomainCustomDomainConfigTypePtrOutput values. You can construct a concrete instance of `UserPoolDomainCustomDomainConfigTypePtrInput` via: 

        UserPoolDomainCustomDomainConfigTypeArgs{...}

or:

        nil

func UserPoolDomainCustomDomainConfigTypePtr 

func UserPoolDomainCustomDomainConfigTypePtr(v *UserPoolDomainCustomDomainConfigTypeArgs) UserPoolDomainCustomDomainConfigTypePtrInput

type UserPoolDomainCustomDomainConfigTypePtrOutput 

type UserPoolDomainCustomDomainConfigTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolDomainCustomDomainConfigTypePtrOutput) CertificateArn 

func (o UserPoolDomainCustomDomainConfigTypePtrOutput) CertificateArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of an AWS Certificate Manager SSL certificate. You use this certificate for the subdomain of your custom domain.

func (UserPoolDomainCustomDomainConfigTypePtrOutput) Elem 

func (o UserPoolDomainCustomDomainConfigTypePtrOutput) Elem() UserPoolDomainCustomDomainConfigTypeOutput

func (UserPoolDomainCustomDomainConfigTypePtrOutput) ElementType 

func (UserPoolDomainCustomDomainConfigTypePtrOutput) ElementType() reflect.Type

func (UserPoolDomainCustomDomainConfigTypePtrOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutput 

func (o UserPoolDomainCustomDomainConfigTypePtrOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutput() UserPoolDomainCustomDomainConfigTypePtrOutput

func (UserPoolDomainCustomDomainConfigTypePtrOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext 

func (o UserPoolDomainCustomDomainConfigTypePtrOutput) ToUserPoolDomainCustomDomainConfigTypePtrOutputWithContext(ctx context.Context) UserPoolDomainCustomDomainConfigTypePtrOutput

type UserPoolDomainInput 

type UserPoolDomainInput interface {
	pulumi.Input

	ToUserPoolDomainOutput() UserPoolDomainOutput
	ToUserPoolDomainOutputWithContext(ctx context.Context) UserPoolDomainOutput
}

type UserPoolDomainOutput 

type UserPoolDomainOutput struct{ *pulumi.OutputState }

func (UserPoolDomainOutput) AwsId added in v0.99.0 

func (o UserPoolDomainOutput) AwsId() pulumi.StringOutput

The resource ID.

func (UserPoolDomainOutput) CloudFrontDistribution added in v0.38.0 

func (o UserPoolDomainOutput) CloudFrontDistribution() pulumi.StringOutput

The Amazon CloudFront endpoint that you use as the target of the alias that you set up with your Domain Name Service (DNS) provider.

func (UserPoolDomainOutput) CustomDomainConfig added in v0.17.0 

func (o UserPoolDomainOutput) CustomDomainConfig() UserPoolDomainCustomDomainConfigTypePtrOutput

The configuration for a custom domain that hosts the sign-up and sign-in pages for your application. Use this object to specify an SSL certificate that is managed by ACM.

func (UserPoolDomainOutput) Domain added in v0.17.0 

func (o UserPoolDomainOutput) Domain() pulumi.StringOutput

The domain name for the custom domain that hosts the sign-up and sign-in pages for your application. One example might be `auth.example.com` .

This string can include only lowercase letters, numbers, and hyphens. Don't use a hyphen for the first or last character. Use periods to separate subdomain names.

func (UserPoolDomainOutput) ElementType 

func (UserPoolDomainOutput) ElementType() reflect.Type

func (UserPoolDomainOutput) ToUserPoolDomainOutput 

func (o UserPoolDomainOutput) ToUserPoolDomainOutput() UserPoolDomainOutput

func (UserPoolDomainOutput) ToUserPoolDomainOutputWithContext 

func (o UserPoolDomainOutput) ToUserPoolDomainOutputWithContext(ctx context.Context) UserPoolDomainOutput

func (UserPoolDomainOutput) UserPoolId added in v0.17.0 

func (o UserPoolDomainOutput) UserPoolId() pulumi.StringOutput

The ID of the user pool that is associated with the custom domain whose certificate you're updating.

type UserPoolDomainState 

type UserPoolDomainState struct {
}

func (UserPoolDomainState) ElementType 

func (UserPoolDomainState) ElementType() reflect.Type

type UserPoolEmailConfiguration 

type UserPoolEmailConfiguration struct {
	// The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
	//
	// - **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch
	// - **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.
	ConfigurationSet *string `pulumi:"configurationSet"`
	// Specifies whether Amazon Cognito uses its built-in functionality to send your users email messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following values:
	//
	// - **COGNITO_DEFAULT** - When Amazon Cognito emails your users, it uses its built-in email functionality. When you use the default option, Amazon Cognito allows only a limited number of emails each day for your user pool. For typical production environments, the default email limit is less than the required delivery volume. To achieve a higher delivery volume, specify DEVELOPER to use your Amazon SES email configuration.
	//
	// To look up the email delivery limit for the default option, see [Limits](https://docs.aws.amazon.com/cognito/latest/developerguide/limits.html) in the *Amazon Cognito Developer Guide* .
	//
	// The default FROM address is `no-reply@verificationemail.com` . To customize the FROM address, provide the Amazon Resource Name (ARN) of an Amazon SES verified email address for the `SourceArn` parameter.
	// - **DEVELOPER** - When Amazon Cognito emails your users, it uses your Amazon SES configuration. Amazon Cognito calls Amazon SES on your behalf to send email from your verified email address. When you use this option, the email delivery limits are the same limits that apply to your Amazon SES verified email address in your AWS account .
	//
	// If you use this option, provide the ARN of an Amazon SES verified email address for the `SourceArn` parameter.
	//
	// Before Amazon Cognito can email your users, it requires additional permissions to call Amazon SES on your behalf. When you update your user pool with this option, Amazon Cognito creates a *service-linked role* , which is a type of role in your AWS account . This role contains the permissions that allow you to access Amazon SES and send email messages from your email address. For more information about the service-linked role that Amazon Cognito creates, see [Using Service-Linked Roles for Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/using-service-linked-roles.html) in the *Amazon Cognito Developer Guide* .
	EmailSendingAccount *string `pulumi:"emailSendingAccount"`
	// Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.
	From *string `pulumi:"from"`
	// The destination to which the receiver of the email should reply.
	ReplyToEmailAddress *string `pulumi:"replyToEmailAddress"`
	// The ARN of a verified email address or an address from a verified domain in Amazon SES. You can set a `SourceArn` email from a verified domain only with an API request. You can set a verified email address, but not an address in a verified domain, in the Amazon Cognito console. Amazon Cognito uses the email address that you provide in one of the following ways, depending on the value that you specify for the `EmailSendingAccount` parameter:
	//
	// - If you specify `COGNITO_DEFAULT` , Amazon Cognito uses this address as the custom FROM address when it emails your users using its built-in email account.
	// - If you specify `DEVELOPER` , Amazon Cognito emails your users with this address by calling Amazon SES on your behalf.
	//
	// The Region value of the `SourceArn` parameter must indicate a supported AWS Region of your user pool. Typically, the Region in the `SourceArn` and the user pool Region are the same. For more information, see [Amazon SES email configuration regions](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-developer-region-mapping) in the [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) .
	SourceArn *string `pulumi:"sourceArn"`
}

type UserPoolEmailConfigurationArgs 

type UserPoolEmailConfigurationArgs struct {
	// The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
	//
	// - **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch
	// - **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.
	ConfigurationSet pulumi.StringPtrInput `pulumi:"configurationSet"`
	// Specifies whether Amazon Cognito uses its built-in functionality to send your users email messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following values:
	//
	// - **COGNITO_DEFAULT** - When Amazon Cognito emails your users, it uses its built-in email functionality. When you use the default option, Amazon Cognito allows only a limited number of emails each day for your user pool. For typical production environments, the default email limit is less than the required delivery volume. To achieve a higher delivery volume, specify DEVELOPER to use your Amazon SES email configuration.
	//
	// To look up the email delivery limit for the default option, see [Limits](https://docs.aws.amazon.com/cognito/latest/developerguide/limits.html) in the *Amazon Cognito Developer Guide* .
	//
	// The default FROM address is `no-reply@verificationemail.com` . To customize the FROM address, provide the Amazon Resource Name (ARN) of an Amazon SES verified email address for the `SourceArn` parameter.
	// - **DEVELOPER** - When Amazon Cognito emails your users, it uses your Amazon SES configuration. Amazon Cognito calls Amazon SES on your behalf to send email from your verified email address. When you use this option, the email delivery limits are the same limits that apply to your Amazon SES verified email address in your AWS account .
	//
	// If you use this option, provide the ARN of an Amazon SES verified email address for the `SourceArn` parameter.
	//
	// Before Amazon Cognito can email your users, it requires additional permissions to call Amazon SES on your behalf. When you update your user pool with this option, Amazon Cognito creates a *service-linked role* , which is a type of role in your AWS account . This role contains the permissions that allow you to access Amazon SES and send email messages from your email address. For more information about the service-linked role that Amazon Cognito creates, see [Using Service-Linked Roles for Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/using-service-linked-roles.html) in the *Amazon Cognito Developer Guide* .
	EmailSendingAccount pulumi.StringPtrInput `pulumi:"emailSendingAccount"`
	// Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.
	From pulumi.StringPtrInput `pulumi:"from"`
	// The destination to which the receiver of the email should reply.
	ReplyToEmailAddress pulumi.StringPtrInput `pulumi:"replyToEmailAddress"`
	// The ARN of a verified email address or an address from a verified domain in Amazon SES. You can set a `SourceArn` email from a verified domain only with an API request. You can set a verified email address, but not an address in a verified domain, in the Amazon Cognito console. Amazon Cognito uses the email address that you provide in one of the following ways, depending on the value that you specify for the `EmailSendingAccount` parameter:
	//
	// - If you specify `COGNITO_DEFAULT` , Amazon Cognito uses this address as the custom FROM address when it emails your users using its built-in email account.
	// - If you specify `DEVELOPER` , Amazon Cognito emails your users with this address by calling Amazon SES on your behalf.
	//
	// The Region value of the `SourceArn` parameter must indicate a supported AWS Region of your user pool. Typically, the Region in the `SourceArn` and the user pool Region are the same. For more information, see [Amazon SES email configuration regions](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-developer-region-mapping) in the [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) .
	SourceArn pulumi.StringPtrInput `pulumi:"sourceArn"`
}

func (UserPoolEmailConfigurationArgs) ElementType 

func (UserPoolEmailConfigurationArgs) ElementType() reflect.Type

func (UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationOutput 

func (i UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationOutput() UserPoolEmailConfigurationOutput

func (UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationOutputWithContext 

func (i UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationOutputWithContext(ctx context.Context) UserPoolEmailConfigurationOutput

func (UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationPtrOutput 

func (i UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationPtrOutput() UserPoolEmailConfigurationPtrOutput

func (UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationPtrOutputWithContext 

func (i UserPoolEmailConfigurationArgs) ToUserPoolEmailConfigurationPtrOutputWithContext(ctx context.Context) UserPoolEmailConfigurationPtrOutput

type UserPoolEmailConfigurationInput 

type UserPoolEmailConfigurationInput interface {
	pulumi.Input

	ToUserPoolEmailConfigurationOutput() UserPoolEmailConfigurationOutput
	ToUserPoolEmailConfigurationOutputWithContext(context.Context) UserPoolEmailConfigurationOutput
}

UserPoolEmailConfigurationInput is an input type that accepts UserPoolEmailConfigurationArgs and UserPoolEmailConfigurationOutput values. You can construct a concrete instance of `UserPoolEmailConfigurationInput` via: 

UserPoolEmailConfigurationArgs{...}

type UserPoolEmailConfigurationOutput 

type UserPoolEmailConfigurationOutput struct{ *pulumi.OutputState }

func (UserPoolEmailConfigurationOutput) ConfigurationSet 

func (o UserPoolEmailConfigurationOutput) ConfigurationSet() pulumi.StringPtrOutput

The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:

- **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch - **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.

func (UserPoolEmailConfigurationOutput) ElementType 

func (UserPoolEmailConfigurationOutput) ElementType() reflect.Type

func (UserPoolEmailConfigurationOutput) EmailSendingAccount 

func (o UserPoolEmailConfigurationOutput) EmailSendingAccount() pulumi.StringPtrOutput

Specifies whether Amazon Cognito uses its built-in functionality to send your users email messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following values:

- **COGNITO_DEFAULT** - When Amazon Cognito emails your users, it uses its built-in email functionality. When you use the default option, Amazon Cognito allows only a limited number of emails each day for your user pool. For typical production environments, the default email limit is less than the required delivery volume. To achieve a higher delivery volume, specify DEVELOPER to use your Amazon SES email configuration.

To look up the email delivery limit for the default option, see [Limits](https://docs.aws.amazon.com/cognito/latest/developerguide/limits.html) in the *Amazon Cognito Developer Guide* .

The default FROM address is `no-reply@verificationemail.com` . To customize the FROM address, provide the Amazon Resource Name (ARN) of an Amazon SES verified email address for the `SourceArn` parameter. - **DEVELOPER** - When Amazon Cognito emails your users, it uses your Amazon SES configuration. Amazon Cognito calls Amazon SES on your behalf to send email from your verified email address. When you use this option, the email delivery limits are the same limits that apply to your Amazon SES verified email address in your AWS account .

If you use this option, provide the ARN of an Amazon SES verified email address for the `SourceArn` parameter.

Before Amazon Cognito can email your users, it requires additional permissions to call Amazon SES on your behalf. When you update your user pool with this option, Amazon Cognito creates a *service-linked role* , which is a type of role in your AWS account . This role contains the permissions that allow you to access Amazon SES and send email messages from your email address. For more information about the service-linked role that Amazon Cognito creates, see [Using Service-Linked Roles for Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/using-service-linked-roles.html) in the *Amazon Cognito Developer Guide* .

func (UserPoolEmailConfigurationOutput) From 

func (o UserPoolEmailConfigurationOutput) From() pulumi.StringPtrOutput

Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.

func (UserPoolEmailConfigurationOutput) ReplyToEmailAddress 

func (o UserPoolEmailConfigurationOutput) ReplyToEmailAddress() pulumi.StringPtrOutput

The destination to which the receiver of the email should reply.

func (UserPoolEmailConfigurationOutput) SourceArn 

func (o UserPoolEmailConfigurationOutput) SourceArn() pulumi.StringPtrOutput

The ARN of a verified email address or an address from a verified domain in Amazon SES. You can set a `SourceArn` email from a verified domain only with an API request. You can set a verified email address, but not an address in a verified domain, in the Amazon Cognito console. Amazon Cognito uses the email address that you provide in one of the following ways, depending on the value that you specify for the `EmailSendingAccount` parameter:

- If you specify `COGNITO_DEFAULT` , Amazon Cognito uses this address as the custom FROM address when it emails your users using its built-in email account. - If you specify `DEVELOPER` , Amazon Cognito emails your users with this address by calling Amazon SES on your behalf.

The Region value of the `SourceArn` parameter must indicate a supported AWS Region of your user pool. Typically, the Region in the `SourceArn` and the user pool Region are the same. For more information, see [Amazon SES email configuration regions](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-developer-region-mapping) in the [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) .

func (UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationOutput 

func (o UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationOutput() UserPoolEmailConfigurationOutput

func (UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationOutputWithContext 

func (o UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationOutputWithContext(ctx context.Context) UserPoolEmailConfigurationOutput

func (UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationPtrOutput 

func (o UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationPtrOutput() UserPoolEmailConfigurationPtrOutput

func (UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationPtrOutputWithContext 

func (o UserPoolEmailConfigurationOutput) ToUserPoolEmailConfigurationPtrOutputWithContext(ctx context.Context) UserPoolEmailConfigurationPtrOutput

type UserPoolEmailConfigurationPtrInput 

type UserPoolEmailConfigurationPtrInput interface {
	pulumi.Input

	ToUserPoolEmailConfigurationPtrOutput() UserPoolEmailConfigurationPtrOutput
	ToUserPoolEmailConfigurationPtrOutputWithContext(context.Context) UserPoolEmailConfigurationPtrOutput
}

UserPoolEmailConfigurationPtrInput is an input type that accepts UserPoolEmailConfigurationArgs, UserPoolEmailConfigurationPtr and UserPoolEmailConfigurationPtrOutput values. You can construct a concrete instance of `UserPoolEmailConfigurationPtrInput` via: 

        UserPoolEmailConfigurationArgs{...}

or:

        nil

func UserPoolEmailConfigurationPtr 

func UserPoolEmailConfigurationPtr(v *UserPoolEmailConfigurationArgs) UserPoolEmailConfigurationPtrInput

type UserPoolEmailConfigurationPtrOutput 

type UserPoolEmailConfigurationPtrOutput struct{ *pulumi.OutputState }

func (UserPoolEmailConfigurationPtrOutput) ConfigurationSet 

func (o UserPoolEmailConfigurationPtrOutput) ConfigurationSet() pulumi.StringPtrOutput

The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:

- **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch - **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.

func (UserPoolEmailConfigurationPtrOutput) Elem 

func (o UserPoolEmailConfigurationPtrOutput) Elem() UserPoolEmailConfigurationOutput

func (UserPoolEmailConfigurationPtrOutput) ElementType 

func (UserPoolEmailConfigurationPtrOutput) ElementType() reflect.Type

func (UserPoolEmailConfigurationPtrOutput) EmailSendingAccount 

func (o UserPoolEmailConfigurationPtrOutput) EmailSendingAccount() pulumi.StringPtrOutput

Specifies whether Amazon Cognito uses its built-in functionality to send your users email messages, or uses your Amazon Simple Email Service email configuration. Specify one of the following values:

- **COGNITO_DEFAULT** - When Amazon Cognito emails your users, it uses its built-in email functionality. When you use the default option, Amazon Cognito allows only a limited number of emails each day for your user pool. For typical production environments, the default email limit is less than the required delivery volume. To achieve a higher delivery volume, specify DEVELOPER to use your Amazon SES email configuration.

To look up the email delivery limit for the default option, see [Limits](https://docs.aws.amazon.com/cognito/latest/developerguide/limits.html) in the *Amazon Cognito Developer Guide* .

The default FROM address is `no-reply@verificationemail.com` . To customize the FROM address, provide the Amazon Resource Name (ARN) of an Amazon SES verified email address for the `SourceArn` parameter. - **DEVELOPER** - When Amazon Cognito emails your users, it uses your Amazon SES configuration. Amazon Cognito calls Amazon SES on your behalf to send email from your verified email address. When you use this option, the email delivery limits are the same limits that apply to your Amazon SES verified email address in your AWS account .

If you use this option, provide the ARN of an Amazon SES verified email address for the `SourceArn` parameter.

Before Amazon Cognito can email your users, it requires additional permissions to call Amazon SES on your behalf. When you update your user pool with this option, Amazon Cognito creates a *service-linked role* , which is a type of role in your AWS account . This role contains the permissions that allow you to access Amazon SES and send email messages from your email address. For more information about the service-linked role that Amazon Cognito creates, see [Using Service-Linked Roles for Amazon Cognito](https://docs.aws.amazon.com/cognito/latest/developerguide/using-service-linked-roles.html) in the *Amazon Cognito Developer Guide* .

func (UserPoolEmailConfigurationPtrOutput) From 

func (o UserPoolEmailConfigurationPtrOutput) From() pulumi.StringPtrOutput

Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.

func (UserPoolEmailConfigurationPtrOutput) ReplyToEmailAddress 

func (o UserPoolEmailConfigurationPtrOutput) ReplyToEmailAddress() pulumi.StringPtrOutput

The destination to which the receiver of the email should reply.

func (UserPoolEmailConfigurationPtrOutput) SourceArn 

func (o UserPoolEmailConfigurationPtrOutput) SourceArn() pulumi.StringPtrOutput

The ARN of a verified email address or an address from a verified domain in Amazon SES. You can set a `SourceArn` email from a verified domain only with an API request. You can set a verified email address, but not an address in a verified domain, in the Amazon Cognito console. Amazon Cognito uses the email address that you provide in one of the following ways, depending on the value that you specify for the `EmailSendingAccount` parameter:

- If you specify `COGNITO_DEFAULT` , Amazon Cognito uses this address as the custom FROM address when it emails your users using its built-in email account. - If you specify `DEVELOPER` , Amazon Cognito emails your users with this address by calling Amazon SES on your behalf.

The Region value of the `SourceArn` parameter must indicate a supported AWS Region of your user pool. Typically, the Region in the `SourceArn` and the user pool Region are the same. For more information, see [Amazon SES email configuration regions](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-email.html#user-pool-email-developer-region-mapping) in the [Amazon Cognito Developer Guide](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html) .

func (UserPoolEmailConfigurationPtrOutput) ToUserPoolEmailConfigurationPtrOutput 

func (o UserPoolEmailConfigurationPtrOutput) ToUserPoolEmailConfigurationPtrOutput() UserPoolEmailConfigurationPtrOutput

func (UserPoolEmailConfigurationPtrOutput) ToUserPoolEmailConfigurationPtrOutputWithContext 

func (o UserPoolEmailConfigurationPtrOutput) ToUserPoolEmailConfigurationPtrOutputWithContext(ctx context.Context) UserPoolEmailConfigurationPtrOutput

type UserPoolGroup 

type UserPoolGroup struct {
	pulumi.CustomResourceState

	// A string containing the description of the group.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The name of the group. Must be unique.
	GroupName pulumi.StringPtrOutput `pulumi:"groupName"`
	// A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.
	//
	// Two groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.
	//
	// The default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .
	Precedence pulumi.IntPtrOutput `pulumi:"precedence"`
	// The role Amazon Resource Name (ARN) for the group.
	RoleArn pulumi.StringPtrOutput `pulumi:"roleArn"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolGroup

func GetUserPoolGroup 

func GetUserPoolGroup(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolGroupState, opts ...pulumi.ResourceOption) (*UserPoolGroup, error)

GetUserPoolGroup gets an existing UserPoolGroup resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolGroup 

func NewUserPoolGroup(ctx *pulumi.Context,
	name string, args *UserPoolGroupArgs, opts ...pulumi.ResourceOption) (*UserPoolGroup, error)

NewUserPoolGroup registers a new resource with the given unique name, arguments, and options.

func (*UserPoolGroup) ElementType 

func (*UserPoolGroup) ElementType() reflect.Type

func (*UserPoolGroup) ToUserPoolGroupOutput 

func (i *UserPoolGroup) ToUserPoolGroupOutput() UserPoolGroupOutput

func (*UserPoolGroup) ToUserPoolGroupOutputWithContext 

func (i *UserPoolGroup) ToUserPoolGroupOutputWithContext(ctx context.Context) UserPoolGroupOutput

type UserPoolGroupArgs 

type UserPoolGroupArgs struct {
	// A string containing the description of the group.
	Description pulumi.StringPtrInput
	// The name of the group. Must be unique.
	GroupName pulumi.StringPtrInput
	// A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.
	//
	// Two groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.
	//
	// The default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .
	Precedence pulumi.IntPtrInput
	// The role Amazon Resource Name (ARN) for the group.
	RoleArn pulumi.StringPtrInput
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolGroup resource.

func (UserPoolGroupArgs) ElementType 

func (UserPoolGroupArgs) ElementType() reflect.Type

type UserPoolGroupInput 

type UserPoolGroupInput interface {
	pulumi.Input

	ToUserPoolGroupOutput() UserPoolGroupOutput
	ToUserPoolGroupOutputWithContext(ctx context.Context) UserPoolGroupOutput
}

type UserPoolGroupOutput 

type UserPoolGroupOutput struct{ *pulumi.OutputState }

func (UserPoolGroupOutput) Description added in v0.17.0 

func (o UserPoolGroupOutput) Description() pulumi.StringPtrOutput

A string containing the description of the group.

func (UserPoolGroupOutput) ElementType 

func (UserPoolGroupOutput) ElementType() reflect.Type

func (UserPoolGroupOutput) GroupName added in v0.17.0 

func (o UserPoolGroupOutput) GroupName() pulumi.StringPtrOutput

The name of the group. Must be unique.

func (UserPoolGroupOutput) Precedence added in v0.17.0 

func (o UserPoolGroupOutput) Precedence() pulumi.IntPtrOutput

A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower `Precedence` values take precedence over groups with higher or null `Precedence` values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the `cognito:roles` and `cognito:preferred_role` claims.

Two groups can have the same `Precedence` value. If this happens, neither group takes precedence over the other. If two groups with the same `Precedence` have the same role ARN, that role is used in the `cognito:preferred_role` claim in tokens for users in each group. If the two groups have different role ARNs, the `cognito:preferred_role` claim isn't set in users' tokens.

The default `Precedence` value is null. The maximum `Precedence` value is `2^31-1` .

func (UserPoolGroupOutput) RoleArn added in v0.17.0 

func (o UserPoolGroupOutput) RoleArn() pulumi.StringPtrOutput

The role Amazon Resource Name (ARN) for the group.

func (UserPoolGroupOutput) ToUserPoolGroupOutput 

func (o UserPoolGroupOutput) ToUserPoolGroupOutput() UserPoolGroupOutput

func (UserPoolGroupOutput) ToUserPoolGroupOutputWithContext 

func (o UserPoolGroupOutput) ToUserPoolGroupOutputWithContext(ctx context.Context) UserPoolGroupOutput

func (UserPoolGroupOutput) UserPoolId added in v0.17.0 

func (o UserPoolGroupOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool.

type UserPoolGroupState 

type UserPoolGroupState struct {
}

func (UserPoolGroupState) ElementType 

func (UserPoolGroupState) ElementType() reflect.Type

type UserPoolIdentityProvider 

type UserPoolIdentityProvider struct {
	pulumi.CustomResourceState

	// A mapping of IdP attributes to standard and custom user pool attributes.
	AttributeMapping pulumi.StringMapOutput `pulumi:"attributeMapping"`
	// A list of IdP identifiers.
	IdpIdentifiers pulumi.StringArrayOutput `pulumi:"idpIdentifiers"`
	// The scopes, URLs, and identifiers for your external identity provider. The following
	// examples describe the provider detail keys for each IdP type. These values and their
	// schema are subject to change. Social IdP `authorize_scopes` values must match
	// the values listed here.
	//
	// - **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .
	//
	// Create or update request: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "attributes_url_add_attributes": "false", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	// - **SAML** - Create or update request with Metadata URL: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// Create or update request with Metadata file: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataFile": "[metadata XML]", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// The value of `MetadataFile` must be the plaintext metadata document with all quote (") characters escaped by backslashes.
	//
	// Describe response: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "ActiveEncryptionCertificate": "[certificate]", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256", "SLORedirectBindingURI": "https://auth.example.com/slo/saml", "SSORedirectBindingURI": "https://auth.example.com/sso/saml" }`
	// - **LoginWithAmazon** - Create or update request: `"ProviderDetails": { "authorize_scopes": "profile postal_code", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret"`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://api.amazon.com/user/profile", "attributes_url_add_attributes": "false", "authorize_scopes": "profile postal_code", "authorize_url": "https://www.amazon.com/ap/oa", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "POST", "token_url": "https://api.amazon.com/auth/o2/token" }`
	// - **Google** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email profile openid", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://people.googleapis.com/v1/people/me?personFields=", "attributes_url_add_attributes": "true", "authorize_scopes": "email profile openid", "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret", "oidc_issuer": "https://accounts.google.com", "token_request_method": "POST", "token_url": "https://www.googleapis.com/oauth2/v4/token" }`
	// - **SignInWithApple** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email name", "client_id": "com.example.cognito", "private_key": "1EXAMPLE", "key_id": "2EXAMPLE", "team_id": "3EXAMPLE" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url_add_attributes": "false", "authorize_scopes": "email name", "authorize_url": "https://appleid.apple.com/auth/authorize", "client_id": "com.example.cognito", "key_id": "1EXAMPLE", "oidc_issuer": "https://appleid.apple.com", "team_id": "2EXAMPLE", "token_request_method": "POST", "token_url": "https://appleid.apple.com/auth/token" }`
	// - **Facebook** - Create or update request: `"ProviderDetails": { "api_version": "v17.0", "authorize_scopes": "public_profile, email", "client_id": "1example23456789", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "api_version": "v17.0", "attributes_url": "https://graph.facebook.com/v17.0/me?fields=", "attributes_url_add_attributes": "true", "authorize_scopes": "public_profile, email", "authorize_url": "https://www.facebook.com/v17.0/dialog/oauth", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "GET", "token_url": "https://graph.facebook.com/v17.0/oauth/access_token" }`
	ProviderDetails pulumi.StringMapOutput `pulumi:"providerDetails"`
	// The IdP name.
	ProviderName pulumi.StringOutput `pulumi:"providerName"`
	// The IdP type.
	ProviderType pulumi.StringOutput `pulumi:"providerType"`
	// The user pool ID.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolIdentityProvider

func GetUserPoolIdentityProvider 

func GetUserPoolIdentityProvider(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolIdentityProviderState, opts ...pulumi.ResourceOption) (*UserPoolIdentityProvider, error)

GetUserPoolIdentityProvider gets an existing UserPoolIdentityProvider resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolIdentityProvider 

func NewUserPoolIdentityProvider(ctx *pulumi.Context,
	name string, args *UserPoolIdentityProviderArgs, opts ...pulumi.ResourceOption) (*UserPoolIdentityProvider, error)

NewUserPoolIdentityProvider registers a new resource with the given unique name, arguments, and options.

func (*UserPoolIdentityProvider) ElementType 

func (*UserPoolIdentityProvider) ElementType() reflect.Type

func (*UserPoolIdentityProvider) ToUserPoolIdentityProviderOutput 

func (i *UserPoolIdentityProvider) ToUserPoolIdentityProviderOutput() UserPoolIdentityProviderOutput

func (*UserPoolIdentityProvider) ToUserPoolIdentityProviderOutputWithContext 

func (i *UserPoolIdentityProvider) ToUserPoolIdentityProviderOutputWithContext(ctx context.Context) UserPoolIdentityProviderOutput

type UserPoolIdentityProviderArgs 

type UserPoolIdentityProviderArgs struct {
	// A mapping of IdP attributes to standard and custom user pool attributes.
	AttributeMapping pulumi.StringMapInput
	// A list of IdP identifiers.
	IdpIdentifiers pulumi.StringArrayInput
	// The scopes, URLs, and identifiers for your external identity provider. The following
	// examples describe the provider detail keys for each IdP type. These values and their
	// schema are subject to change. Social IdP `authorize_scopes` values must match
	// the values listed here.
	//
	// - **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .
	//
	// Create or update request: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "attributes_url_add_attributes": "false", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`
	// - **SAML** - Create or update request with Metadata URL: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// Create or update request with Metadata file: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataFile": "[metadata XML]", "RequestSigningAlgorithm": "rsa-sha256" }`
	//
	// The value of `MetadataFile` must be the plaintext metadata document with all quote (") characters escaped by backslashes.
	//
	// Describe response: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "ActiveEncryptionCertificate": "[certificate]", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256", "SLORedirectBindingURI": "https://auth.example.com/slo/saml", "SSORedirectBindingURI": "https://auth.example.com/sso/saml" }`
	// - **LoginWithAmazon** - Create or update request: `"ProviderDetails": { "authorize_scopes": "profile postal_code", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret"`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://api.amazon.com/user/profile", "attributes_url_add_attributes": "false", "authorize_scopes": "profile postal_code", "authorize_url": "https://www.amazon.com/ap/oa", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "POST", "token_url": "https://api.amazon.com/auth/o2/token" }`
	// - **Google** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email profile openid", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url": "https://people.googleapis.com/v1/people/me?personFields=", "attributes_url_add_attributes": "true", "authorize_scopes": "email profile openid", "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret", "oidc_issuer": "https://accounts.google.com", "token_request_method": "POST", "token_url": "https://www.googleapis.com/oauth2/v4/token" }`
	// - **SignInWithApple** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email name", "client_id": "com.example.cognito", "private_key": "1EXAMPLE", "key_id": "2EXAMPLE", "team_id": "3EXAMPLE" }`
	//
	// Describe response: `"ProviderDetails": { "attributes_url_add_attributes": "false", "authorize_scopes": "email name", "authorize_url": "https://appleid.apple.com/auth/authorize", "client_id": "com.example.cognito", "key_id": "1EXAMPLE", "oidc_issuer": "https://appleid.apple.com", "team_id": "2EXAMPLE", "token_request_method": "POST", "token_url": "https://appleid.apple.com/auth/token" }`
	// - **Facebook** - Create or update request: `"ProviderDetails": { "api_version": "v17.0", "authorize_scopes": "public_profile, email", "client_id": "1example23456789", "client_secret": "provider-app-client-secret" }`
	//
	// Describe response: `"ProviderDetails": { "api_version": "v17.0", "attributes_url": "https://graph.facebook.com/v17.0/me?fields=", "attributes_url_add_attributes": "true", "authorize_scopes": "public_profile, email", "authorize_url": "https://www.facebook.com/v17.0/dialog/oauth", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "GET", "token_url": "https://graph.facebook.com/v17.0/oauth/access_token" }`
	ProviderDetails pulumi.StringMapInput
	// The IdP name.
	ProviderName pulumi.StringPtrInput
	// The IdP type.
	ProviderType pulumi.StringInput
	// The user pool ID.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolIdentityProvider resource.

func (UserPoolIdentityProviderArgs) ElementType 

func (UserPoolIdentityProviderArgs) ElementType() reflect.Type

type UserPoolIdentityProviderInput 

type UserPoolIdentityProviderInput interface {
	pulumi.Input

	ToUserPoolIdentityProviderOutput() UserPoolIdentityProviderOutput
	ToUserPoolIdentityProviderOutputWithContext(ctx context.Context) UserPoolIdentityProviderOutput
}

type UserPoolIdentityProviderOutput 

type UserPoolIdentityProviderOutput struct{ *pulumi.OutputState }

func (UserPoolIdentityProviderOutput) AttributeMapping added in v0.17.0 

func (o UserPoolIdentityProviderOutput) AttributeMapping() pulumi.StringMapOutput

A mapping of IdP attributes to standard and custom user pool attributes.

func (UserPoolIdentityProviderOutput) ElementType 

func (UserPoolIdentityProviderOutput) ElementType() reflect.Type

func (UserPoolIdentityProviderOutput) IdpIdentifiers added in v0.17.0 

func (o UserPoolIdentityProviderOutput) IdpIdentifiers() pulumi.StringArrayOutput

A list of IdP identifiers.

func (UserPoolIdentityProviderOutput) ProviderDetails added in v0.17.0 

func (o UserPoolIdentityProviderOutput) ProviderDetails() pulumi.StringMapOutput

The scopes, URLs, and identifiers for your external identity provider. The following examples describe the provider detail keys for each IdP type. These values and their schema are subject to change. Social IdP `authorize_scopes` values must match the values listed here.

- **OpenID Connect (OIDC)** - Amazon Cognito accepts the following elements when it can't discover endpoint URLs from `oidc_issuer` : `attributes_url` , `authorize_url` , `jwks_uri` , `token_url` .

Create or update request: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }`

Describe response: `"ProviderDetails": { "attributes_request_method": "GET", "attributes_url": "https://auth.example.com/userInfo", "attributes_url_add_attributes": "false", "authorize_scopes": "openid profile email", "authorize_url": "https://auth.example.com/authorize", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "jwks_uri": "https://auth.example.com/.well-known/jwks.json", "oidc_issuer": "https://auth.example.com", "token_url": "https://example.com/token" }` - **SAML** - Create or update request with Metadata URL: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256" }`

Create or update request with Metadata file: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "MetadataFile": "[metadata XML]", "RequestSigningAlgorithm": "rsa-sha256" }`

The value of `MetadataFile` must be the plaintext metadata document with all quote (") characters escaped by backslashes.

Describe response: `"ProviderDetails": { "IDPInit": "true", "IDPSignout": "true", "EncryptedResponses" : "true", "ActiveEncryptionCertificate": "[certificate]", "MetadataURL": "https://auth.example.com/sso/saml/metadata", "RequestSigningAlgorithm": "rsa-sha256", "SLORedirectBindingURI": "https://auth.example.com/slo/saml", "SSORedirectBindingURI": "https://auth.example.com/sso/saml" }` - **LoginWithAmazon** - Create or update request: `"ProviderDetails": { "authorize_scopes": "profile postal_code", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret"`

Describe response: `"ProviderDetails": { "attributes_url": "https://api.amazon.com/user/profile", "attributes_url_add_attributes": "false", "authorize_scopes": "profile postal_code", "authorize_url": "https://www.amazon.com/ap/oa", "client_id": "amzn1.application-oa2-client.1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "POST", "token_url": "https://api.amazon.com/auth/o2/token" }` - **Google** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email profile openid", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret" }`

Describe response: `"ProviderDetails": { "attributes_url": "https://people.googleapis.com/v1/people/me?personFields=", "attributes_url_add_attributes": "true", "authorize_scopes": "email profile openid", "authorize_url": "https://accounts.google.com/o/oauth2/v2/auth", "client_id": "1example23456789.apps.googleusercontent.com", "client_secret": "provider-app-client-secret", "oidc_issuer": "https://accounts.google.com", "token_request_method": "POST", "token_url": "https://www.googleapis.com/oauth2/v4/token" }` - **SignInWithApple** - Create or update request: `"ProviderDetails": { "authorize_scopes": "email name", "client_id": "com.example.cognito", "private_key": "1EXAMPLE", "key_id": "2EXAMPLE", "team_id": "3EXAMPLE" }`

Describe response: `"ProviderDetails": { "attributes_url_add_attributes": "false", "authorize_scopes": "email name", "authorize_url": "https://appleid.apple.com/auth/authorize", "client_id": "com.example.cognito", "key_id": "1EXAMPLE", "oidc_issuer": "https://appleid.apple.com", "team_id": "2EXAMPLE", "token_request_method": "POST", "token_url": "https://appleid.apple.com/auth/token" }` - **Facebook** - Create or update request: `"ProviderDetails": { "api_version": "v17.0", "authorize_scopes": "public_profile, email", "client_id": "1example23456789", "client_secret": "provider-app-client-secret" }`

Describe response: `"ProviderDetails": { "api_version": "v17.0", "attributes_url": "https://graph.facebook.com/v17.0/me?fields=", "attributes_url_add_attributes": "true", "authorize_scopes": "public_profile, email", "authorize_url": "https://www.facebook.com/v17.0/dialog/oauth", "client_id": "1example23456789", "client_secret": "provider-app-client-secret", "token_request_method": "GET", "token_url": "https://graph.facebook.com/v17.0/oauth/access_token" }`

func (UserPoolIdentityProviderOutput) ProviderName added in v0.17.0 

func (o UserPoolIdentityProviderOutput) ProviderName() pulumi.StringOutput

The IdP name.

func (UserPoolIdentityProviderOutput) ProviderType added in v0.17.0 

func (o UserPoolIdentityProviderOutput) ProviderType() pulumi.StringOutput

The IdP type.

func (UserPoolIdentityProviderOutput) ToUserPoolIdentityProviderOutput 

func (o UserPoolIdentityProviderOutput) ToUserPoolIdentityProviderOutput() UserPoolIdentityProviderOutput

func (UserPoolIdentityProviderOutput) ToUserPoolIdentityProviderOutputWithContext 

func (o UserPoolIdentityProviderOutput) ToUserPoolIdentityProviderOutputWithContext(ctx context.Context) UserPoolIdentityProviderOutput

func (UserPoolIdentityProviderOutput) UserPoolId added in v0.17.0 

func (o UserPoolIdentityProviderOutput) UserPoolId() pulumi.StringOutput

The user pool ID.

type UserPoolIdentityProviderState 

type UserPoolIdentityProviderState struct {
}

func (UserPoolIdentityProviderState) ElementType 

func (UserPoolIdentityProviderState) ElementType() reflect.Type

type UserPoolInput 

type UserPoolInput interface {
	pulumi.Input

	ToUserPoolOutput() UserPoolOutput
	ToUserPoolOutputWithContext(ctx context.Context) UserPoolOutput
}

type UserPoolInviteMessageTemplate 

type UserPoolInviteMessageTemplate struct {
	// The message template for email messages. EmailMessage is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.
	EmailMessage *string `pulumi:"emailMessage"`
	// The subject line for email messages. EmailSubject is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.
	EmailSubject *string `pulumi:"emailSubject"`
	// The message template for SMS messages.
	SmsMessage *string `pulumi:"smsMessage"`
}

type UserPoolInviteMessageTemplateArgs 

type UserPoolInviteMessageTemplateArgs struct {
	// The message template for email messages. EmailMessage is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.
	EmailMessage pulumi.StringPtrInput `pulumi:"emailMessage"`
	// The subject line for email messages. EmailSubject is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.
	EmailSubject pulumi.StringPtrInput `pulumi:"emailSubject"`
	// The message template for SMS messages.
	SmsMessage pulumi.StringPtrInput `pulumi:"smsMessage"`
}

func (UserPoolInviteMessageTemplateArgs) ElementType 

func (UserPoolInviteMessageTemplateArgs) ElementType() reflect.Type

func (UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplateOutput 

func (i UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplateOutput() UserPoolInviteMessageTemplateOutput

func (UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplateOutputWithContext 

func (i UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplateOutputWithContext(ctx context.Context) UserPoolInviteMessageTemplateOutput

func (UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplatePtrOutput 

func (i UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplatePtrOutput() UserPoolInviteMessageTemplatePtrOutput

func (UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplatePtrOutputWithContext 

func (i UserPoolInviteMessageTemplateArgs) ToUserPoolInviteMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolInviteMessageTemplatePtrOutput

type UserPoolInviteMessageTemplateInput 

type UserPoolInviteMessageTemplateInput interface {
	pulumi.Input

	ToUserPoolInviteMessageTemplateOutput() UserPoolInviteMessageTemplateOutput
	ToUserPoolInviteMessageTemplateOutputWithContext(context.Context) UserPoolInviteMessageTemplateOutput
}

UserPoolInviteMessageTemplateInput is an input type that accepts UserPoolInviteMessageTemplateArgs and UserPoolInviteMessageTemplateOutput values. You can construct a concrete instance of `UserPoolInviteMessageTemplateInput` via: 

UserPoolInviteMessageTemplateArgs{...}

type UserPoolInviteMessageTemplateOutput 

type UserPoolInviteMessageTemplateOutput struct{ *pulumi.OutputState }

func (UserPoolInviteMessageTemplateOutput) ElementType 

func (UserPoolInviteMessageTemplateOutput) ElementType() reflect.Type

func (UserPoolInviteMessageTemplateOutput) EmailMessage 

func (o UserPoolInviteMessageTemplateOutput) EmailMessage() pulumi.StringPtrOutput

The message template for email messages. EmailMessage is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.

func (UserPoolInviteMessageTemplateOutput) EmailSubject 

func (o UserPoolInviteMessageTemplateOutput) EmailSubject() pulumi.StringPtrOutput

The subject line for email messages. EmailSubject is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.

func (UserPoolInviteMessageTemplateOutput) SmsMessage added in v0.72.0 

func (o UserPoolInviteMessageTemplateOutput) SmsMessage() pulumi.StringPtrOutput

The message template for SMS messages.

func (UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplateOutput 

func (o UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplateOutput() UserPoolInviteMessageTemplateOutput

func (UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplateOutputWithContext 

func (o UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplateOutputWithContext(ctx context.Context) UserPoolInviteMessageTemplateOutput

func (UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplatePtrOutput 

func (o UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplatePtrOutput() UserPoolInviteMessageTemplatePtrOutput

func (UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplatePtrOutputWithContext 

func (o UserPoolInviteMessageTemplateOutput) ToUserPoolInviteMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolInviteMessageTemplatePtrOutput

type UserPoolInviteMessageTemplatePtrInput 

type UserPoolInviteMessageTemplatePtrInput interface {
	pulumi.Input

	ToUserPoolInviteMessageTemplatePtrOutput() UserPoolInviteMessageTemplatePtrOutput
	ToUserPoolInviteMessageTemplatePtrOutputWithContext(context.Context) UserPoolInviteMessageTemplatePtrOutput
}

UserPoolInviteMessageTemplatePtrInput is an input type that accepts UserPoolInviteMessageTemplateArgs, UserPoolInviteMessageTemplatePtr and UserPoolInviteMessageTemplatePtrOutput values. You can construct a concrete instance of `UserPoolInviteMessageTemplatePtrInput` via: 

        UserPoolInviteMessageTemplateArgs{...}

or:

        nil

func UserPoolInviteMessageTemplatePtr 

func UserPoolInviteMessageTemplatePtr(v *UserPoolInviteMessageTemplateArgs) UserPoolInviteMessageTemplatePtrInput

type UserPoolInviteMessageTemplatePtrOutput 

type UserPoolInviteMessageTemplatePtrOutput struct{ *pulumi.OutputState }

func (UserPoolInviteMessageTemplatePtrOutput) Elem 

func (o UserPoolInviteMessageTemplatePtrOutput) Elem() UserPoolInviteMessageTemplateOutput

func (UserPoolInviteMessageTemplatePtrOutput) ElementType 

func (UserPoolInviteMessageTemplatePtrOutput) ElementType() reflect.Type

func (UserPoolInviteMessageTemplatePtrOutput) EmailMessage 

func (o UserPoolInviteMessageTemplatePtrOutput) EmailMessage() pulumi.StringPtrOutput

The message template for email messages. EmailMessage is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.

func (UserPoolInviteMessageTemplatePtrOutput) EmailSubject 

func (o UserPoolInviteMessageTemplatePtrOutput) EmailSubject() pulumi.StringPtrOutput

The subject line for email messages. EmailSubject is allowed only if [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is DEVELOPER.

func (UserPoolInviteMessageTemplatePtrOutput) SmsMessage added in v0.72.0 

func (o UserPoolInviteMessageTemplatePtrOutput) SmsMessage() pulumi.StringPtrOutput

The message template for SMS messages.

func (UserPoolInviteMessageTemplatePtrOutput) ToUserPoolInviteMessageTemplatePtrOutput 

func (o UserPoolInviteMessageTemplatePtrOutput) ToUserPoolInviteMessageTemplatePtrOutput() UserPoolInviteMessageTemplatePtrOutput

func (UserPoolInviteMessageTemplatePtrOutput) ToUserPoolInviteMessageTemplatePtrOutputWithContext 

func (o UserPoolInviteMessageTemplatePtrOutput) ToUserPoolInviteMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolInviteMessageTemplatePtrOutput

type UserPoolLambdaConfig 

type UserPoolLambdaConfig struct {
	// The configuration of a create auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	CreateAuthChallenge *string `pulumi:"createAuthChallenge"`
	// The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic.
	CustomEmailSender *UserPoolCustomEmailSender `pulumi:"customEmailSender"`
	// A custom message Lambda trigger. This trigger is an opportunity to customize all SMS and email messages from your user pool. When a custom message trigger is active, your user pool routes all messages to a Lambda function that returns a runtime-customized message subject and body for your user pool to deliver to a user.
	CustomMessage *string `pulumi:"customMessage"`
	// The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic.
	CustomSmsSender *UserPoolCustomSmsSender `pulumi:"customSmsSender"`
	// The configuration of a define auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	DefineAuthChallenge *string `pulumi:"defineAuthChallenge"`
	// The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers.
	KmsKeyId *string `pulumi:"kmsKeyId"`
	// The configuration of a [post authentication Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html) in a user pool. This trigger can take custom actions after a user signs in.
	PostAuthentication *string `pulumi:"postAuthentication"`
	// The configuration of a [post confirmation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html) in a user pool. This trigger can take custom actions after a user confirms their user account and their email address or phone number.
	PostConfirmation *string `pulumi:"postConfirmation"`
	// The configuration of a [pre authentication trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-authentication.html) in a user pool. This trigger can evaluate and modify user sign-in events.
	PreAuthentication *string `pulumi:"preAuthentication"`
	// The configuration of a [pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) in a user pool. This trigger evaluates new users and can bypass confirmation, [link a federated user profile](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html) , or block sign-up requests.
	PreSignUp *string `pulumi:"preSignUp"`
	// The legacy configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool.
	//
	// Set this parameter for legacy purposes. If you also set an ARN in `PreTokenGenerationConfig` , its value must be identical to `PreTokenGeneration` . For new instances of pre token generation triggers, set the `LambdaArn` of `PreTokenGenerationConfig` .
	PreTokenGeneration *string `pulumi:"preTokenGeneration"`
	// The detailed configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool. If you also set an ARN in `PreTokenGeneration` , its value must be identical to `PreTokenGenerationConfig` .
	PreTokenGenerationConfig *UserPoolPreTokenGenerationConfig `pulumi:"preTokenGenerationConfig"`
	// The configuration of a [migrate user Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-migrate-user.html) in a user pool. This trigger can create user profiles when users sign in or attempt to reset their password with credentials that don't exist yet.
	UserMigration *string `pulumi:"userMigration"`
	// The configuration of a verify auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	VerifyAuthChallengeResponse *string `pulumi:"verifyAuthChallengeResponse"`
}

type UserPoolLambdaConfigArgs 

type UserPoolLambdaConfigArgs struct {
	// The configuration of a create auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	CreateAuthChallenge pulumi.StringPtrInput `pulumi:"createAuthChallenge"`
	// The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic.
	CustomEmailSender UserPoolCustomEmailSenderPtrInput `pulumi:"customEmailSender"`
	// A custom message Lambda trigger. This trigger is an opportunity to customize all SMS and email messages from your user pool. When a custom message trigger is active, your user pool routes all messages to a Lambda function that returns a runtime-customized message subject and body for your user pool to deliver to a user.
	CustomMessage pulumi.StringPtrInput `pulumi:"customMessage"`
	// The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic.
	CustomSmsSender UserPoolCustomSmsSenderPtrInput `pulumi:"customSmsSender"`
	// The configuration of a define auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	DefineAuthChallenge pulumi.StringPtrInput `pulumi:"defineAuthChallenge"`
	// The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers.
	KmsKeyId pulumi.StringPtrInput `pulumi:"kmsKeyId"`
	// The configuration of a [post authentication Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html) in a user pool. This trigger can take custom actions after a user signs in.
	PostAuthentication pulumi.StringPtrInput `pulumi:"postAuthentication"`
	// The configuration of a [post confirmation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html) in a user pool. This trigger can take custom actions after a user confirms their user account and their email address or phone number.
	PostConfirmation pulumi.StringPtrInput `pulumi:"postConfirmation"`
	// The configuration of a [pre authentication trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-authentication.html) in a user pool. This trigger can evaluate and modify user sign-in events.
	PreAuthentication pulumi.StringPtrInput `pulumi:"preAuthentication"`
	// The configuration of a [pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) in a user pool. This trigger evaluates new users and can bypass confirmation, [link a federated user profile](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html) , or block sign-up requests.
	PreSignUp pulumi.StringPtrInput `pulumi:"preSignUp"`
	// The legacy configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool.
	//
	// Set this parameter for legacy purposes. If you also set an ARN in `PreTokenGenerationConfig` , its value must be identical to `PreTokenGeneration` . For new instances of pre token generation triggers, set the `LambdaArn` of `PreTokenGenerationConfig` .
	PreTokenGeneration pulumi.StringPtrInput `pulumi:"preTokenGeneration"`
	// The detailed configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool. If you also set an ARN in `PreTokenGeneration` , its value must be identical to `PreTokenGenerationConfig` .
	PreTokenGenerationConfig UserPoolPreTokenGenerationConfigPtrInput `pulumi:"preTokenGenerationConfig"`
	// The configuration of a [migrate user Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-migrate-user.html) in a user pool. This trigger can create user profiles when users sign in or attempt to reset their password with credentials that don't exist yet.
	UserMigration pulumi.StringPtrInput `pulumi:"userMigration"`
	// The configuration of a verify auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .
	VerifyAuthChallengeResponse pulumi.StringPtrInput `pulumi:"verifyAuthChallengeResponse"`
}

func (UserPoolLambdaConfigArgs) ElementType 

func (UserPoolLambdaConfigArgs) ElementType() reflect.Type

func (UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigOutput 

func (i UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigOutput() UserPoolLambdaConfigOutput

func (UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigOutputWithContext 

func (i UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigOutputWithContext(ctx context.Context) UserPoolLambdaConfigOutput

func (UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigPtrOutput 

func (i UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigPtrOutput() UserPoolLambdaConfigPtrOutput

func (UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigPtrOutputWithContext 

func (i UserPoolLambdaConfigArgs) ToUserPoolLambdaConfigPtrOutputWithContext(ctx context.Context) UserPoolLambdaConfigPtrOutput

type UserPoolLambdaConfigInput 

type UserPoolLambdaConfigInput interface {
	pulumi.Input

	ToUserPoolLambdaConfigOutput() UserPoolLambdaConfigOutput
	ToUserPoolLambdaConfigOutputWithContext(context.Context) UserPoolLambdaConfigOutput
}

UserPoolLambdaConfigInput is an input type that accepts UserPoolLambdaConfigArgs and UserPoolLambdaConfigOutput values. You can construct a concrete instance of `UserPoolLambdaConfigInput` via: 

UserPoolLambdaConfigArgs{...}

type UserPoolLambdaConfigOutput 

type UserPoolLambdaConfigOutput struct{ *pulumi.OutputState }

func (UserPoolLambdaConfigOutput) CreateAuthChallenge 

func (o UserPoolLambdaConfigOutput) CreateAuthChallenge() pulumi.StringPtrOutput

The configuration of a create auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

func (UserPoolLambdaConfigOutput) CustomEmailSender 

func (o UserPoolLambdaConfigOutput) CustomEmailSender() UserPoolCustomEmailSenderPtrOutput

The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic.

func (UserPoolLambdaConfigOutput) CustomMessage 

func (o UserPoolLambdaConfigOutput) CustomMessage() pulumi.StringPtrOutput

A custom message Lambda trigger. This trigger is an opportunity to customize all SMS and email messages from your user pool. When a custom message trigger is active, your user pool routes all messages to a Lambda function that returns a runtime-customized message subject and body for your user pool to deliver to a user.

func (UserPoolLambdaConfigOutput) CustomSmsSender added in v0.72.0 

func (o UserPoolLambdaConfigOutput) CustomSmsSender() UserPoolCustomSmsSenderPtrOutput

The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic.

func (UserPoolLambdaConfigOutput) DefineAuthChallenge 

func (o UserPoolLambdaConfigOutput) DefineAuthChallenge() pulumi.StringPtrOutput

The configuration of a define auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

func (UserPoolLambdaConfigOutput) ElementType 

func (UserPoolLambdaConfigOutput) ElementType() reflect.Type

func (UserPoolLambdaConfigOutput) KmsKeyId added in v0.72.0 

func (o UserPoolLambdaConfigOutput) KmsKeyId() pulumi.StringPtrOutput

The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers.

func (UserPoolLambdaConfigOutput) PostAuthentication 

func (o UserPoolLambdaConfigOutput) PostAuthentication() pulumi.StringPtrOutput

The configuration of a [post authentication Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html) in a user pool. This trigger can take custom actions after a user signs in.

func (UserPoolLambdaConfigOutput) PostConfirmation 

func (o UserPoolLambdaConfigOutput) PostConfirmation() pulumi.StringPtrOutput

The configuration of a [post confirmation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html) in a user pool. This trigger can take custom actions after a user confirms their user account and their email address or phone number.

func (UserPoolLambdaConfigOutput) PreAuthentication 

func (o UserPoolLambdaConfigOutput) PreAuthentication() pulumi.StringPtrOutput

The configuration of a [pre authentication trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-authentication.html) in a user pool. This trigger can evaluate and modify user sign-in events.

func (UserPoolLambdaConfigOutput) PreSignUp 

func (o UserPoolLambdaConfigOutput) PreSignUp() pulumi.StringPtrOutput

The configuration of a [pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) in a user pool. This trigger evaluates new users and can bypass confirmation, [link a federated user profile](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html) , or block sign-up requests.

func (UserPoolLambdaConfigOutput) PreTokenGeneration 

func (o UserPoolLambdaConfigOutput) PreTokenGeneration() pulumi.StringPtrOutput

The legacy configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool.

Set this parameter for legacy purposes. If you also set an ARN in `PreTokenGenerationConfig` , its value must be identical to `PreTokenGeneration` . For new instances of pre token generation triggers, set the `LambdaArn` of `PreTokenGenerationConfig` .

func (UserPoolLambdaConfigOutput) PreTokenGenerationConfig added in v0.93.0 

func (o UserPoolLambdaConfigOutput) PreTokenGenerationConfig() UserPoolPreTokenGenerationConfigPtrOutput

The detailed configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool. If you also set an ARN in `PreTokenGeneration` , its value must be identical to `PreTokenGenerationConfig` .

func (UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigOutput 

func (o UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigOutput() UserPoolLambdaConfigOutput

func (UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigOutputWithContext 

func (o UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigOutputWithContext(ctx context.Context) UserPoolLambdaConfigOutput

func (UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigPtrOutput 

func (o UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigPtrOutput() UserPoolLambdaConfigPtrOutput

func (UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigPtrOutputWithContext 

func (o UserPoolLambdaConfigOutput) ToUserPoolLambdaConfigPtrOutputWithContext(ctx context.Context) UserPoolLambdaConfigPtrOutput

func (UserPoolLambdaConfigOutput) UserMigration 

func (o UserPoolLambdaConfigOutput) UserMigration() pulumi.StringPtrOutput

The configuration of a [migrate user Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-migrate-user.html) in a user pool. This trigger can create user profiles when users sign in or attempt to reset their password with credentials that don't exist yet.

func (UserPoolLambdaConfigOutput) VerifyAuthChallengeResponse 

func (o UserPoolLambdaConfigOutput) VerifyAuthChallengeResponse() pulumi.StringPtrOutput

The configuration of a verify auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

type UserPoolLambdaConfigPtrInput 

type UserPoolLambdaConfigPtrInput interface {
	pulumi.Input

	ToUserPoolLambdaConfigPtrOutput() UserPoolLambdaConfigPtrOutput
	ToUserPoolLambdaConfigPtrOutputWithContext(context.Context) UserPoolLambdaConfigPtrOutput
}

UserPoolLambdaConfigPtrInput is an input type that accepts UserPoolLambdaConfigArgs, UserPoolLambdaConfigPtr and UserPoolLambdaConfigPtrOutput values. You can construct a concrete instance of `UserPoolLambdaConfigPtrInput` via: 

        UserPoolLambdaConfigArgs{...}

or:

        nil

func UserPoolLambdaConfigPtr 

func UserPoolLambdaConfigPtr(v *UserPoolLambdaConfigArgs) UserPoolLambdaConfigPtrInput

type UserPoolLambdaConfigPtrOutput 

type UserPoolLambdaConfigPtrOutput struct{ *pulumi.OutputState }

func (UserPoolLambdaConfigPtrOutput) CreateAuthChallenge 

func (o UserPoolLambdaConfigPtrOutput) CreateAuthChallenge() pulumi.StringPtrOutput

The configuration of a create auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

func (UserPoolLambdaConfigPtrOutput) CustomEmailSender 

func (o UserPoolLambdaConfigPtrOutput) CustomEmailSender() UserPoolCustomEmailSenderPtrOutput

The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic.

func (UserPoolLambdaConfigPtrOutput) CustomMessage 

func (o UserPoolLambdaConfigPtrOutput) CustomMessage() pulumi.StringPtrOutput

A custom message Lambda trigger. This trigger is an opportunity to customize all SMS and email messages from your user pool. When a custom message trigger is active, your user pool routes all messages to a Lambda function that returns a runtime-customized message subject and body for your user pool to deliver to a user.

func (UserPoolLambdaConfigPtrOutput) CustomSmsSender added in v0.72.0 

func (o UserPoolLambdaConfigPtrOutput) CustomSmsSender() UserPoolCustomSmsSenderPtrOutput

The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic.

func (UserPoolLambdaConfigPtrOutput) DefineAuthChallenge 

func (o UserPoolLambdaConfigPtrOutput) DefineAuthChallenge() pulumi.StringPtrOutput

The configuration of a define auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

func (UserPoolLambdaConfigPtrOutput) Elem 

func (o UserPoolLambdaConfigPtrOutput) Elem() UserPoolLambdaConfigOutput

func (UserPoolLambdaConfigPtrOutput) ElementType 

func (UserPoolLambdaConfigPtrOutput) ElementType() reflect.Type

func (UserPoolLambdaConfigPtrOutput) KmsKeyId added in v0.72.0 

func (o UserPoolLambdaConfigPtrOutput) KmsKeyId() pulumi.StringPtrOutput

The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers.

func (UserPoolLambdaConfigPtrOutput) PostAuthentication 

func (o UserPoolLambdaConfigPtrOutput) PostAuthentication() pulumi.StringPtrOutput

The configuration of a [post authentication Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-authentication.html) in a user pool. This trigger can take custom actions after a user signs in.

func (UserPoolLambdaConfigPtrOutput) PostConfirmation 

func (o UserPoolLambdaConfigPtrOutput) PostConfirmation() pulumi.StringPtrOutput

The configuration of a [post confirmation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-post-confirmation.html) in a user pool. This trigger can take custom actions after a user confirms their user account and their email address or phone number.

func (UserPoolLambdaConfigPtrOutput) PreAuthentication 

func (o UserPoolLambdaConfigPtrOutput) PreAuthentication() pulumi.StringPtrOutput

The configuration of a [pre authentication trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-authentication.html) in a user pool. This trigger can evaluate and modify user sign-in events.

func (UserPoolLambdaConfigPtrOutput) PreSignUp 

func (o UserPoolLambdaConfigPtrOutput) PreSignUp() pulumi.StringPtrOutput

The configuration of a [pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) in a user pool. This trigger evaluates new users and can bypass confirmation, [link a federated user profile](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-identity-federation-consolidate-users.html) , or block sign-up requests.

func (UserPoolLambdaConfigPtrOutput) PreTokenGeneration 

func (o UserPoolLambdaConfigPtrOutput) PreTokenGeneration() pulumi.StringPtrOutput

The legacy configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool.

Set this parameter for legacy purposes. If you also set an ARN in `PreTokenGenerationConfig` , its value must be identical to `PreTokenGeneration` . For new instances of pre token generation triggers, set the `LambdaArn` of `PreTokenGenerationConfig` .

func (UserPoolLambdaConfigPtrOutput) PreTokenGenerationConfig added in v0.93.0 

func (o UserPoolLambdaConfigPtrOutput) PreTokenGenerationConfig() UserPoolPreTokenGenerationConfigPtrOutput

The detailed configuration of a [pre token generation Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-token-generation.html) in a user pool. If you also set an ARN in `PreTokenGeneration` , its value must be identical to `PreTokenGenerationConfig` .

func (UserPoolLambdaConfigPtrOutput) ToUserPoolLambdaConfigPtrOutput 

func (o UserPoolLambdaConfigPtrOutput) ToUserPoolLambdaConfigPtrOutput() UserPoolLambdaConfigPtrOutput

func (UserPoolLambdaConfigPtrOutput) ToUserPoolLambdaConfigPtrOutputWithContext 

func (o UserPoolLambdaConfigPtrOutput) ToUserPoolLambdaConfigPtrOutputWithContext(ctx context.Context) UserPoolLambdaConfigPtrOutput

func (UserPoolLambdaConfigPtrOutput) UserMigration 

func (o UserPoolLambdaConfigPtrOutput) UserMigration() pulumi.StringPtrOutput

The configuration of a [migrate user Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-migrate-user.html) in a user pool. This trigger can create user profiles when users sign in or attempt to reset their password with credentials that don't exist yet.

func (UserPoolLambdaConfigPtrOutput) VerifyAuthChallengeResponse 

func (o UserPoolLambdaConfigPtrOutput) VerifyAuthChallengeResponse() pulumi.StringPtrOutput

The configuration of a verify auth challenge Lambda trigger, one of three triggers in the sequence of the [custom authentication challenge triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-challenge.html) .

type UserPoolNumberAttributeConstraints 

type UserPoolNumberAttributeConstraints struct {
	// The maximum length of a number attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.
	MaxValue *string `pulumi:"maxValue"`
	// The minimum value of an attribute that is of the number data type.
	MinValue *string `pulumi:"minValue"`
}

type UserPoolNumberAttributeConstraintsArgs 

type UserPoolNumberAttributeConstraintsArgs struct {
	// The maximum length of a number attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.
	MaxValue pulumi.StringPtrInput `pulumi:"maxValue"`
	// The minimum value of an attribute that is of the number data type.
	MinValue pulumi.StringPtrInput `pulumi:"minValue"`
}

func (UserPoolNumberAttributeConstraintsArgs) ElementType 

func (UserPoolNumberAttributeConstraintsArgs) ElementType() reflect.Type

func (UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsOutput 

func (i UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsOutput() UserPoolNumberAttributeConstraintsOutput

func (UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsOutputWithContext 

func (i UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsOutputWithContext(ctx context.Context) UserPoolNumberAttributeConstraintsOutput

func (UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsPtrOutput 

func (i UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsPtrOutput() UserPoolNumberAttributeConstraintsPtrOutput

func (UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext 

func (i UserPoolNumberAttributeConstraintsArgs) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolNumberAttributeConstraintsPtrOutput

type UserPoolNumberAttributeConstraintsInput 

type UserPoolNumberAttributeConstraintsInput interface {
	pulumi.Input

	ToUserPoolNumberAttributeConstraintsOutput() UserPoolNumberAttributeConstraintsOutput
	ToUserPoolNumberAttributeConstraintsOutputWithContext(context.Context) UserPoolNumberAttributeConstraintsOutput
}

UserPoolNumberAttributeConstraintsInput is an input type that accepts UserPoolNumberAttributeConstraintsArgs and UserPoolNumberAttributeConstraintsOutput values. You can construct a concrete instance of `UserPoolNumberAttributeConstraintsInput` via: 

UserPoolNumberAttributeConstraintsArgs{...}

type UserPoolNumberAttributeConstraintsOutput 

type UserPoolNumberAttributeConstraintsOutput struct{ *pulumi.OutputState }

func (UserPoolNumberAttributeConstraintsOutput) ElementType 

func (UserPoolNumberAttributeConstraintsOutput) ElementType() reflect.Type

func (UserPoolNumberAttributeConstraintsOutput) MaxValue 

func (o UserPoolNumberAttributeConstraintsOutput) MaxValue() pulumi.StringPtrOutput

The maximum length of a number attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.

func (UserPoolNumberAttributeConstraintsOutput) MinValue 

func (o UserPoolNumberAttributeConstraintsOutput) MinValue() pulumi.StringPtrOutput

The minimum value of an attribute that is of the number data type.

func (UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsOutput 

func (o UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsOutput() UserPoolNumberAttributeConstraintsOutput

func (UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsOutputWithContext 

func (o UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsOutputWithContext(ctx context.Context) UserPoolNumberAttributeConstraintsOutput

func (UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsPtrOutput 

func (o UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsPtrOutput() UserPoolNumberAttributeConstraintsPtrOutput

func (UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext 

func (o UserPoolNumberAttributeConstraintsOutput) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolNumberAttributeConstraintsPtrOutput

type UserPoolNumberAttributeConstraintsPtrInput 

type UserPoolNumberAttributeConstraintsPtrInput interface {
	pulumi.Input

	ToUserPoolNumberAttributeConstraintsPtrOutput() UserPoolNumberAttributeConstraintsPtrOutput
	ToUserPoolNumberAttributeConstraintsPtrOutputWithContext(context.Context) UserPoolNumberAttributeConstraintsPtrOutput
}

UserPoolNumberAttributeConstraintsPtrInput is an input type that accepts UserPoolNumberAttributeConstraintsArgs, UserPoolNumberAttributeConstraintsPtr and UserPoolNumberAttributeConstraintsPtrOutput values. You can construct a concrete instance of `UserPoolNumberAttributeConstraintsPtrInput` via: 

        UserPoolNumberAttributeConstraintsArgs{...}

or:

        nil

func UserPoolNumberAttributeConstraintsPtr 

func UserPoolNumberAttributeConstraintsPtr(v *UserPoolNumberAttributeConstraintsArgs) UserPoolNumberAttributeConstraintsPtrInput

type UserPoolNumberAttributeConstraintsPtrOutput 

type UserPoolNumberAttributeConstraintsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolNumberAttributeConstraintsPtrOutput) Elem 

func (o UserPoolNumberAttributeConstraintsPtrOutput) Elem() UserPoolNumberAttributeConstraintsOutput

func (UserPoolNumberAttributeConstraintsPtrOutput) ElementType 

func (UserPoolNumberAttributeConstraintsPtrOutput) ElementType() reflect.Type

func (UserPoolNumberAttributeConstraintsPtrOutput) MaxValue 

func (o UserPoolNumberAttributeConstraintsPtrOutput) MaxValue() pulumi.StringPtrOutput

The maximum length of a number attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.

func (UserPoolNumberAttributeConstraintsPtrOutput) MinValue 

func (o UserPoolNumberAttributeConstraintsPtrOutput) MinValue() pulumi.StringPtrOutput

The minimum value of an attribute that is of the number data type.

func (UserPoolNumberAttributeConstraintsPtrOutput) ToUserPoolNumberAttributeConstraintsPtrOutput 

func (o UserPoolNumberAttributeConstraintsPtrOutput) ToUserPoolNumberAttributeConstraintsPtrOutput() UserPoolNumberAttributeConstraintsPtrOutput

func (UserPoolNumberAttributeConstraintsPtrOutput) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext 

func (o UserPoolNumberAttributeConstraintsPtrOutput) ToUserPoolNumberAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolNumberAttributeConstraintsPtrOutput

type UserPoolOutput 

type UserPoolOutput struct{ *pulumi.OutputState }

func (UserPoolOutput) AccountRecoverySetting added in v0.17.0 

func (o UserPoolOutput) AccountRecoverySetting() UserPoolAccountRecoverySettingPtrOutput

The available verified method a user can use to recover their password when they call `ForgotPassword` . You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.

func (UserPoolOutput) AdminCreateUserConfig added in v0.17.0 

func (o UserPoolOutput) AdminCreateUserConfig() UserPoolAdminCreateUserConfigPtrOutput

The settings for administrator creation of users in a user pool. Contains settings for allowing user sign-up, customizing invitation messages to new users, and the amount of time before temporary passwords expire.

This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .

func (UserPoolOutput) AliasAttributes added in v0.17.0 

func (o UserPoolOutput) AliasAttributes() pulumi.StringArrayOutput

Attributes supported as an alias for this user pool. Possible values: *phone_number* , *email* , or *preferred_username* .

func (UserPoolOutput) Arn added in v0.17.0 

func (o UserPoolOutput) Arn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the user pool, such as `arn:aws:cognito-idp:us-east-1:123412341234:userpool/us-east-1_123412341` .

func (UserPoolOutput) AutoVerifiedAttributes added in v0.17.0 

func (o UserPoolOutput) AutoVerifiedAttributes() pulumi.StringArrayOutput

The attributes to be auto-verified. Possible values: *email* , *phone_number* .

func (UserPoolOutput) DeletionProtection added in v0.40.0 

func (o UserPoolOutput) DeletionProtection() pulumi.StringPtrOutput

When active, `DeletionProtection` prevents accidental deletion of your user pool. Before you can delete a user pool that you have protected against deletion, you must deactivate this feature.

When you try to delete a protected user pool in a `DeleteUserPool` API request, Amazon Cognito returns an `InvalidParameterException` error. To delete a protected user pool, send a new `DeleteUserPool` request after you deactivate deletion protection in an `UpdateUserPool` API request.

func (UserPoolOutput) DeviceConfiguration added in v0.17.0 

func (o UserPoolOutput) DeviceConfiguration() UserPoolDeviceConfigurationPtrOutput

The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.

> When you provide a value for any `DeviceConfiguration` field, you activate the Amazon Cognito device-remembering feature.

func (UserPoolOutput) ElementType 

func (UserPoolOutput) ElementType() reflect.Type

func (UserPoolOutput) EmailAuthenticationMessage added in v0.125.0 

func (o UserPoolOutput) EmailAuthenticationMessage() pulumi.StringPtrOutput

func (UserPoolOutput) EmailAuthenticationSubject added in v0.125.0 

func (o UserPoolOutput) EmailAuthenticationSubject() pulumi.StringPtrOutput

func (UserPoolOutput) EmailConfiguration added in v0.17.0 

func (o UserPoolOutput) EmailConfiguration() UserPoolEmailConfigurationPtrOutput

The email configuration of your user pool. The email configuration type sets your preferred sending method, AWS Region, and sender for messages from your user pool.

func (UserPoolOutput) EmailVerificationMessage added in v0.17.0 

func (o UserPoolOutput) EmailVerificationMessage() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (UserPoolOutput) EmailVerificationSubject added in v0.17.0 

func (o UserPoolOutput) EmailVerificationSubject() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (UserPoolOutput) EnabledMfas added in v0.17.0 

func (o UserPoolOutput) EnabledMfas() pulumi.StringArrayOutput

Set enabled MFA options on a specified user pool. To disable all MFAs after it has been enabled, set `MfaConfiguration` to `OFF` and remove EnabledMfas. MFAs can only be all disabled if `MfaConfiguration` is `OFF` . After you enable `SMS_MFA` , you can only disable it by setting `MfaConfiguration` to `OFF` . Can be one of the following values:

- `SMS_MFA` - Enables MFA with SMS for the user pool. To select this option, you must also provide values for `SmsConfiguration` . - `SOFTWARE_TOKEN_MFA` - Enables software token MFA for the user pool. - `EMAIL_OTP` - Enables MFA with email for the user pool. To select this option, you must provide values for `EmailConfiguration` and within those, set `EmailSendingAccount` to `DEVELOPER` .

Allowed values: `SMS_MFA` | `SOFTWARE_TOKEN_MFA` | `EMAIL_OTP`

func (UserPoolOutput) LambdaConfig added in v0.17.0 

func (o UserPoolOutput) LambdaConfig() UserPoolLambdaConfigPtrOutput

A collection of user pool Lambda triggers. Amazon Cognito invokes triggers at several possible stages of authentication operations. Triggers can modify the outcome of the operations that invoked them.

func (UserPoolOutput) MfaConfiguration added in v0.17.0 

func (o UserPoolOutput) MfaConfiguration() pulumi.StringPtrOutput

The multi-factor authentication (MFA) configuration. Valid values include:

- `OFF` MFA won't be used for any users. - `ON` MFA is required for all users to sign in. - `OPTIONAL` MFA will be required only for individual users who have an MFA factor activated.

func (UserPoolOutput) Policies added in v0.17.0 

func (o UserPoolOutput) Policies() UserPoolPoliciesPtrOutput

A list of user pool policies. Contains the policy that sets password-complexity requirements.

This data type is a request and response parameter of [CreateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html) and [UpdateUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html) , and a response parameter of [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) .

func (UserPoolOutput) ProviderName added in v0.17.0 

func (o UserPoolOutput) ProviderName() pulumi.StringOutput

A friendly name for the IdP.

func (UserPoolOutput) ProviderUrl added in v0.72.0 

func (o UserPoolOutput) ProviderUrl() pulumi.StringOutput

The URL of the provider of the Amazon Cognito user pool, specified as a `String` .

func (UserPoolOutput) Schema added in v0.17.0 

func (o UserPoolOutput) Schema() UserPoolSchemaAttributeArrayOutput

An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.

func (UserPoolOutput) SmsAuthenticationMessage added in v0.17.0 

func (o UserPoolOutput) SmsAuthenticationMessage() pulumi.StringPtrOutput

The contents of the SMS authentication message.

func (UserPoolOutput) SmsConfiguration added in v0.17.0 

func (o UserPoolOutput) SmsConfiguration() UserPoolSmsConfigurationPtrOutput

The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your AWS account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the AWS Region that you want, the Amazon Cognito user pool uses an AWS Identity and Access Management (IAM) role in your AWS account .

func (UserPoolOutput) SmsVerificationMessage added in v0.17.0 

func (o UserPoolOutput) SmsVerificationMessage() pulumi.StringPtrOutput

This parameter is no longer used. See [VerificationMessageTemplateType](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cognito-userpool-verificationmessagetemplate.html) .

func (UserPoolOutput) ToUserPoolOutput 

func (o UserPoolOutput) ToUserPoolOutput() UserPoolOutput

func (UserPoolOutput) ToUserPoolOutputWithContext 

func (o UserPoolOutput) ToUserPoolOutputWithContext(ctx context.Context) UserPoolOutput

func (UserPoolOutput) UserAttributeUpdateSettings added in v0.19.0 

func (o UserPoolOutput) UserAttributeUpdateSettings() UserPoolUserAttributeUpdateSettingsPtrOutput

The settings for updates to user attributes. These settings include the property `AttributesRequireVerificationBeforeUpdate` , a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For more information, see [Verifying updates to email addresses and phone numbers](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates) .

func (UserPoolOutput) UserPoolAddOns added in v0.17.0 

func (o UserPoolOutput) UserPoolAddOns() UserPoolAddOnsPtrOutput

User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to `AUDIT` . To configure automatic security responses to risky traffic to your user pool, set to `ENFORCED` .

For more information, see [Adding advanced security to a user pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) .

func (UserPoolOutput) UserPoolId added in v0.82.0 

func (o UserPoolOutput) UserPoolId() pulumi.StringOutput

The ID of the user pool.

func (UserPoolOutput) UserPoolName added in v0.17.0 

func (o UserPoolOutput) UserPoolName() pulumi.StringPtrOutput

A string used to name the user pool.

func (UserPoolOutput) UserPoolTags added in v0.17.0 

func (o UserPoolOutput) UserPoolTags() pulumi.StringMapOutput

The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.

func (UserPoolOutput) UsernameAttributes added in v0.17.0 

func (o UserPoolOutput) UsernameAttributes() pulumi.StringArrayOutput

Specifies whether a user can use an email address or phone number as a username when they sign up.

func (UserPoolOutput) UsernameConfiguration added in v0.17.0 

func (o UserPoolOutput) UsernameConfiguration() UserPoolUsernameConfigurationPtrOutput

Case sensitivity on the username input for the selected sign-in option. When case sensitivity is set to `False` (case insensitive), users can sign in with any combination of capital and lowercase letters. For example, `username` , `USERNAME` , or `UserName` , or for email, `email@example.com` or `EMaiL@eXamplE.Com` . For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, Amazon Cognito treats any variation in case as the same user, and prevents a case variation from being assigned to the same attribute for a different user.

This configuration is immutable after you set it. For more information, see [UsernameConfigurationType](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html) .

func (UserPoolOutput) VerificationMessageTemplate added in v0.17.0 

func (o UserPoolOutput) VerificationMessageTemplate() UserPoolVerificationMessageTemplatePtrOutput

The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.

Set the email message type that corresponds to your `DefaultEmailOption` selection. For `CONFIRM_WITH_LINK` , specify an `EmailMessageByLink` and leave `EmailMessage` blank. For `CONFIRM_WITH_CODE` , specify an `EmailMessage` and leave `EmailMessageByLink` blank. When you supply both parameters with either choice, Amazon Cognito returns an error.

type UserPoolPasswordPolicy 

type UserPoolPasswordPolicy struct {
	// The minimum length of the password in the policy that you have set. This value can't be less than 6.
	MinimumLength *int `pulumi:"minimumLength"`
	// The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .
	//
	// Password history isn't enforced and isn't displayed in [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) responses when you set this value to `0` or don't provide it. To activate this setting, [advanced security features](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be active in your user pool.
	PasswordHistorySize *int `pulumi:"passwordHistorySize"`
	// The requirement in a password policy that users must include at least one lowercase letter in their password.
	RequireLowercase *bool `pulumi:"requireLowercase"`
	// The requirement in a password policy that users must include at least one number in their password.
	RequireNumbers *bool `pulumi:"requireNumbers"`
	// The requirement in a password policy that users must include at least one symbol in their password.
	RequireSymbols *bool `pulumi:"requireSymbols"`
	// The requirement in a password policy that users must include at least one uppercase letter in their password.
	RequireUppercase *bool `pulumi:"requireUppercase"`
	// The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.
	//
	// > When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool.
	TemporaryPasswordValidityDays *int `pulumi:"temporaryPasswordValidityDays"`
}

type UserPoolPasswordPolicyArgs 

type UserPoolPasswordPolicyArgs struct {
	// The minimum length of the password in the policy that you have set. This value can't be less than 6.
	MinimumLength pulumi.IntPtrInput `pulumi:"minimumLength"`
	// The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .
	//
	// Password history isn't enforced and isn't displayed in [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) responses when you set this value to `0` or don't provide it. To activate this setting, [advanced security features](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be active in your user pool.
	PasswordHistorySize pulumi.IntPtrInput `pulumi:"passwordHistorySize"`
	// The requirement in a password policy that users must include at least one lowercase letter in their password.
	RequireLowercase pulumi.BoolPtrInput `pulumi:"requireLowercase"`
	// The requirement in a password policy that users must include at least one number in their password.
	RequireNumbers pulumi.BoolPtrInput `pulumi:"requireNumbers"`
	// The requirement in a password policy that users must include at least one symbol in their password.
	RequireSymbols pulumi.BoolPtrInput `pulumi:"requireSymbols"`
	// The requirement in a password policy that users must include at least one uppercase letter in their password.
	RequireUppercase pulumi.BoolPtrInput `pulumi:"requireUppercase"`
	// The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.
	//
	// > When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool.
	TemporaryPasswordValidityDays pulumi.IntPtrInput `pulumi:"temporaryPasswordValidityDays"`
}

func (UserPoolPasswordPolicyArgs) ElementType 

func (UserPoolPasswordPolicyArgs) ElementType() reflect.Type

func (UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyOutput 

func (i UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyOutput() UserPoolPasswordPolicyOutput

func (UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyOutputWithContext 

func (i UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyOutputWithContext(ctx context.Context) UserPoolPasswordPolicyOutput

func (UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyPtrOutput 

func (i UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyPtrOutput() UserPoolPasswordPolicyPtrOutput

func (UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyPtrOutputWithContext 

func (i UserPoolPasswordPolicyArgs) ToUserPoolPasswordPolicyPtrOutputWithContext(ctx context.Context) UserPoolPasswordPolicyPtrOutput

type UserPoolPasswordPolicyInput 

type UserPoolPasswordPolicyInput interface {
	pulumi.Input

	ToUserPoolPasswordPolicyOutput() UserPoolPasswordPolicyOutput
	ToUserPoolPasswordPolicyOutputWithContext(context.Context) UserPoolPasswordPolicyOutput
}

UserPoolPasswordPolicyInput is an input type that accepts UserPoolPasswordPolicyArgs and UserPoolPasswordPolicyOutput values. You can construct a concrete instance of `UserPoolPasswordPolicyInput` via: 

UserPoolPasswordPolicyArgs{...}

type UserPoolPasswordPolicyOutput 

type UserPoolPasswordPolicyOutput struct{ *pulumi.OutputState }

func (UserPoolPasswordPolicyOutput) ElementType 

func (UserPoolPasswordPolicyOutput) ElementType() reflect.Type

func (UserPoolPasswordPolicyOutput) MinimumLength 

func (o UserPoolPasswordPolicyOutput) MinimumLength() pulumi.IntPtrOutput

The minimum length of the password in the policy that you have set. This value can't be less than 6.

func (UserPoolPasswordPolicyOutput) PasswordHistorySize added in v0.116.0 

func (o UserPoolPasswordPolicyOutput) PasswordHistorySize() pulumi.IntPtrOutput

The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .

Password history isn't enforced and isn't displayed in [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) responses when you set this value to `0` or don't provide it. To activate this setting, [advanced security features](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be active in your user pool.

func (UserPoolPasswordPolicyOutput) RequireLowercase 

func (o UserPoolPasswordPolicyOutput) RequireLowercase() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one lowercase letter in their password.

func (UserPoolPasswordPolicyOutput) RequireNumbers 

func (o UserPoolPasswordPolicyOutput) RequireNumbers() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one number in their password.

func (UserPoolPasswordPolicyOutput) RequireSymbols 

func (o UserPoolPasswordPolicyOutput) RequireSymbols() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one symbol in their password.

func (UserPoolPasswordPolicyOutput) RequireUppercase 

func (o UserPoolPasswordPolicyOutput) RequireUppercase() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one uppercase letter in their password.

func (UserPoolPasswordPolicyOutput) TemporaryPasswordValidityDays 

func (o UserPoolPasswordPolicyOutput) TemporaryPasswordValidityDays() pulumi.IntPtrOutput

The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.

> When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool.

func (UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyOutput 

func (o UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyOutput() UserPoolPasswordPolicyOutput

func (UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyOutputWithContext 

func (o UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyOutputWithContext(ctx context.Context) UserPoolPasswordPolicyOutput

func (UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyPtrOutput 

func (o UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyPtrOutput() UserPoolPasswordPolicyPtrOutput

func (UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyPtrOutputWithContext 

func (o UserPoolPasswordPolicyOutput) ToUserPoolPasswordPolicyPtrOutputWithContext(ctx context.Context) UserPoolPasswordPolicyPtrOutput

type UserPoolPasswordPolicyPtrInput 

type UserPoolPasswordPolicyPtrInput interface {
	pulumi.Input

	ToUserPoolPasswordPolicyPtrOutput() UserPoolPasswordPolicyPtrOutput
	ToUserPoolPasswordPolicyPtrOutputWithContext(context.Context) UserPoolPasswordPolicyPtrOutput
}

UserPoolPasswordPolicyPtrInput is an input type that accepts UserPoolPasswordPolicyArgs, UserPoolPasswordPolicyPtr and UserPoolPasswordPolicyPtrOutput values. You can construct a concrete instance of `UserPoolPasswordPolicyPtrInput` via: 

        UserPoolPasswordPolicyArgs{...}

or:

        nil

func UserPoolPasswordPolicyPtr 

func UserPoolPasswordPolicyPtr(v *UserPoolPasswordPolicyArgs) UserPoolPasswordPolicyPtrInput

type UserPoolPasswordPolicyPtrOutput 

type UserPoolPasswordPolicyPtrOutput struct{ *pulumi.OutputState }

func (UserPoolPasswordPolicyPtrOutput) Elem 

func (o UserPoolPasswordPolicyPtrOutput) Elem() UserPoolPasswordPolicyOutput

func (UserPoolPasswordPolicyPtrOutput) ElementType 

func (UserPoolPasswordPolicyPtrOutput) ElementType() reflect.Type

func (UserPoolPasswordPolicyPtrOutput) MinimumLength 

func (o UserPoolPasswordPolicyPtrOutput) MinimumLength() pulumi.IntPtrOutput

The minimum length of the password in the policy that you have set. This value can't be less than 6.

func (UserPoolPasswordPolicyPtrOutput) PasswordHistorySize added in v0.116.0 

func (o UserPoolPasswordPolicyPtrOutput) PasswordHistorySize() pulumi.IntPtrOutput

The number of previous passwords that you want Amazon Cognito to restrict each user from reusing. Users can't set a password that matches any of `n` previous passwords, where `n` is the value of `PasswordHistorySize` .

Password history isn't enforced and isn't displayed in [DescribeUserPool](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html) responses when you set this value to `0` or don't provide it. To activate this setting, [advanced security features](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html) must be active in your user pool.

func (UserPoolPasswordPolicyPtrOutput) RequireLowercase 

func (o UserPoolPasswordPolicyPtrOutput) RequireLowercase() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one lowercase letter in their password.

func (UserPoolPasswordPolicyPtrOutput) RequireNumbers 

func (o UserPoolPasswordPolicyPtrOutput) RequireNumbers() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one number in their password.

func (UserPoolPasswordPolicyPtrOutput) RequireSymbols 

func (o UserPoolPasswordPolicyPtrOutput) RequireSymbols() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one symbol in their password.

func (UserPoolPasswordPolicyPtrOutput) RequireUppercase 

func (o UserPoolPasswordPolicyPtrOutput) RequireUppercase() pulumi.BoolPtrOutput

The requirement in a password policy that users must include at least one uppercase letter in their password.

func (UserPoolPasswordPolicyPtrOutput) TemporaryPasswordValidityDays 

func (o UserPoolPasswordPolicyPtrOutput) TemporaryPasswordValidityDays() pulumi.IntPtrOutput

The number of days a temporary password is valid in the password policy. If the user doesn't sign in during this time, an administrator must reset their password. Defaults to `7` . If you submit a value of `0` , Amazon Cognito treats it as a null value and sets `TemporaryPasswordValidityDays` to its default value.

> When you set `TemporaryPasswordValidityDays` for a user pool, you can no longer set a value for the legacy `UnusedAccountValidityDays` parameter in that user pool.

func (UserPoolPasswordPolicyPtrOutput) ToUserPoolPasswordPolicyPtrOutput 

func (o UserPoolPasswordPolicyPtrOutput) ToUserPoolPasswordPolicyPtrOutput() UserPoolPasswordPolicyPtrOutput

func (UserPoolPasswordPolicyPtrOutput) ToUserPoolPasswordPolicyPtrOutputWithContext 

func (o UserPoolPasswordPolicyPtrOutput) ToUserPoolPasswordPolicyPtrOutputWithContext(ctx context.Context) UserPoolPasswordPolicyPtrOutput

type UserPoolPolicies 

type UserPoolPolicies struct {
	// The password policy settings for a user pool, including complexity, history, and length requirements.
	PasswordPolicy *UserPoolPasswordPolicy `pulumi:"passwordPolicy"`
}

type UserPoolPoliciesArgs 

type UserPoolPoliciesArgs struct {
	// The password policy settings for a user pool, including complexity, history, and length requirements.
	PasswordPolicy UserPoolPasswordPolicyPtrInput `pulumi:"passwordPolicy"`
}

func (UserPoolPoliciesArgs) ElementType 

func (UserPoolPoliciesArgs) ElementType() reflect.Type

func (UserPoolPoliciesArgs) ToUserPoolPoliciesOutput 

func (i UserPoolPoliciesArgs) ToUserPoolPoliciesOutput() UserPoolPoliciesOutput

func (UserPoolPoliciesArgs) ToUserPoolPoliciesOutputWithContext 

func (i UserPoolPoliciesArgs) ToUserPoolPoliciesOutputWithContext(ctx context.Context) UserPoolPoliciesOutput

func (UserPoolPoliciesArgs) ToUserPoolPoliciesPtrOutput 

func (i UserPoolPoliciesArgs) ToUserPoolPoliciesPtrOutput() UserPoolPoliciesPtrOutput

func (UserPoolPoliciesArgs) ToUserPoolPoliciesPtrOutputWithContext 

func (i UserPoolPoliciesArgs) ToUserPoolPoliciesPtrOutputWithContext(ctx context.Context) UserPoolPoliciesPtrOutput

type UserPoolPoliciesInput 

type UserPoolPoliciesInput interface {
	pulumi.Input

	ToUserPoolPoliciesOutput() UserPoolPoliciesOutput
	ToUserPoolPoliciesOutputWithContext(context.Context) UserPoolPoliciesOutput
}

UserPoolPoliciesInput is an input type that accepts UserPoolPoliciesArgs and UserPoolPoliciesOutput values. You can construct a concrete instance of `UserPoolPoliciesInput` via: 

UserPoolPoliciesArgs{...}

type UserPoolPoliciesOutput 

type UserPoolPoliciesOutput struct{ *pulumi.OutputState }

func (UserPoolPoliciesOutput) ElementType 

func (UserPoolPoliciesOutput) ElementType() reflect.Type

func (UserPoolPoliciesOutput) PasswordPolicy 

func (o UserPoolPoliciesOutput) PasswordPolicy() UserPoolPasswordPolicyPtrOutput

The password policy settings for a user pool, including complexity, history, and length requirements.

func (UserPoolPoliciesOutput) ToUserPoolPoliciesOutput 

func (o UserPoolPoliciesOutput) ToUserPoolPoliciesOutput() UserPoolPoliciesOutput

func (UserPoolPoliciesOutput) ToUserPoolPoliciesOutputWithContext 

func (o UserPoolPoliciesOutput) ToUserPoolPoliciesOutputWithContext(ctx context.Context) UserPoolPoliciesOutput

func (UserPoolPoliciesOutput) ToUserPoolPoliciesPtrOutput 

func (o UserPoolPoliciesOutput) ToUserPoolPoliciesPtrOutput() UserPoolPoliciesPtrOutput

func (UserPoolPoliciesOutput) ToUserPoolPoliciesPtrOutputWithContext 

func (o UserPoolPoliciesOutput) ToUserPoolPoliciesPtrOutputWithContext(ctx context.Context) UserPoolPoliciesPtrOutput

type UserPoolPoliciesPtrInput 

type UserPoolPoliciesPtrInput interface {
	pulumi.Input

	ToUserPoolPoliciesPtrOutput() UserPoolPoliciesPtrOutput
	ToUserPoolPoliciesPtrOutputWithContext(context.Context) UserPoolPoliciesPtrOutput
}

UserPoolPoliciesPtrInput is an input type that accepts UserPoolPoliciesArgs, UserPoolPoliciesPtr and UserPoolPoliciesPtrOutput values. You can construct a concrete instance of `UserPoolPoliciesPtrInput` via: 

        UserPoolPoliciesArgs{...}

or:

        nil

func UserPoolPoliciesPtr 

func UserPoolPoliciesPtr(v *UserPoolPoliciesArgs) UserPoolPoliciesPtrInput

type UserPoolPoliciesPtrOutput 

type UserPoolPoliciesPtrOutput struct{ *pulumi.OutputState }

func (UserPoolPoliciesPtrOutput) Elem 

func (o UserPoolPoliciesPtrOutput) Elem() UserPoolPoliciesOutput

func (UserPoolPoliciesPtrOutput) ElementType 

func (UserPoolPoliciesPtrOutput) ElementType() reflect.Type

func (UserPoolPoliciesPtrOutput) PasswordPolicy 

func (o UserPoolPoliciesPtrOutput) PasswordPolicy() UserPoolPasswordPolicyPtrOutput

The password policy settings for a user pool, including complexity, history, and length requirements.

func (UserPoolPoliciesPtrOutput) ToUserPoolPoliciesPtrOutput 

func (o UserPoolPoliciesPtrOutput) ToUserPoolPoliciesPtrOutput() UserPoolPoliciesPtrOutput

func (UserPoolPoliciesPtrOutput) ToUserPoolPoliciesPtrOutputWithContext 

func (o UserPoolPoliciesPtrOutput) ToUserPoolPoliciesPtrOutputWithContext(ctx context.Context) UserPoolPoliciesPtrOutput

type UserPoolPreTokenGenerationConfig added in v0.93.0 

type UserPoolPreTokenGenerationConfig struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	//
	// This parameter and the `PreTokenGeneration` property of `LambdaConfig` have the same value. For new instances of pre token generation triggers, set `LambdaArn` .
	LambdaArn *string `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	LambdaVersion *string `pulumi:"lambdaVersion"`
}

type UserPoolPreTokenGenerationConfigArgs added in v0.93.0 

type UserPoolPreTokenGenerationConfigArgs struct {
	// The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
	//
	// This parameter and the `PreTokenGeneration` property of `LambdaConfig` have the same value. For new instances of pre token generation triggers, set `LambdaArn` .
	LambdaArn pulumi.StringPtrInput `pulumi:"lambdaArn"`
	// The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
	LambdaVersion pulumi.StringPtrInput `pulumi:"lambdaVersion"`
}

func (UserPoolPreTokenGenerationConfigArgs) ElementType added in v0.93.0 

func (UserPoolPreTokenGenerationConfigArgs) ElementType() reflect.Type

func (UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigOutput added in v0.93.0 

func (i UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigOutput() UserPoolPreTokenGenerationConfigOutput

func (UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigOutputWithContext added in v0.93.0 

func (i UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigOutputWithContext(ctx context.Context) UserPoolPreTokenGenerationConfigOutput

func (UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigPtrOutput added in v0.93.0 

func (i UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigPtrOutput() UserPoolPreTokenGenerationConfigPtrOutput

func (UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext added in v0.93.0 

func (i UserPoolPreTokenGenerationConfigArgs) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext(ctx context.Context) UserPoolPreTokenGenerationConfigPtrOutput

type UserPoolPreTokenGenerationConfigInput added in v0.93.0 

type UserPoolPreTokenGenerationConfigInput interface {
	pulumi.Input

	ToUserPoolPreTokenGenerationConfigOutput() UserPoolPreTokenGenerationConfigOutput
	ToUserPoolPreTokenGenerationConfigOutputWithContext(context.Context) UserPoolPreTokenGenerationConfigOutput
}

UserPoolPreTokenGenerationConfigInput is an input type that accepts UserPoolPreTokenGenerationConfigArgs and UserPoolPreTokenGenerationConfigOutput values. You can construct a concrete instance of `UserPoolPreTokenGenerationConfigInput` via: 

UserPoolPreTokenGenerationConfigArgs{...}

type UserPoolPreTokenGenerationConfigOutput added in v0.93.0 

type UserPoolPreTokenGenerationConfigOutput struct{ *pulumi.OutputState }

func (UserPoolPreTokenGenerationConfigOutput) ElementType added in v0.93.0 

func (UserPoolPreTokenGenerationConfigOutput) ElementType() reflect.Type

func (UserPoolPreTokenGenerationConfigOutput) LambdaArn added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

This parameter and the `PreTokenGeneration` property of `LambdaConfig` have the same value. For new instances of pre token generation triggers, set `LambdaArn` .

func (UserPoolPreTokenGenerationConfigOutput) LambdaVersion added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

func (UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigOutput added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigOutput() UserPoolPreTokenGenerationConfigOutput

func (UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigOutputWithContext added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigOutputWithContext(ctx context.Context) UserPoolPreTokenGenerationConfigOutput

func (UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigPtrOutput added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigPtrOutput() UserPoolPreTokenGenerationConfigPtrOutput

func (UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigOutput) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext(ctx context.Context) UserPoolPreTokenGenerationConfigPtrOutput

type UserPoolPreTokenGenerationConfigPtrInput added in v0.93.0 

type UserPoolPreTokenGenerationConfigPtrInput interface {
	pulumi.Input

	ToUserPoolPreTokenGenerationConfigPtrOutput() UserPoolPreTokenGenerationConfigPtrOutput
	ToUserPoolPreTokenGenerationConfigPtrOutputWithContext(context.Context) UserPoolPreTokenGenerationConfigPtrOutput
}

UserPoolPreTokenGenerationConfigPtrInput is an input type that accepts UserPoolPreTokenGenerationConfigArgs, UserPoolPreTokenGenerationConfigPtr and UserPoolPreTokenGenerationConfigPtrOutput values. You can construct a concrete instance of `UserPoolPreTokenGenerationConfigPtrInput` via: 

        UserPoolPreTokenGenerationConfigArgs{...}

or:

        nil

func UserPoolPreTokenGenerationConfigPtr added in v0.93.0 

func UserPoolPreTokenGenerationConfigPtr(v *UserPoolPreTokenGenerationConfigArgs) UserPoolPreTokenGenerationConfigPtrInput

type UserPoolPreTokenGenerationConfigPtrOutput added in v0.93.0 

type UserPoolPreTokenGenerationConfigPtrOutput struct{ *pulumi.OutputState }

func (UserPoolPreTokenGenerationConfigPtrOutput) Elem added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigPtrOutput) Elem() UserPoolPreTokenGenerationConfigOutput

func (UserPoolPreTokenGenerationConfigPtrOutput) ElementType added in v0.93.0 

func (UserPoolPreTokenGenerationConfigPtrOutput) ElementType() reflect.Type

func (UserPoolPreTokenGenerationConfigPtrOutput) LambdaArn added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigPtrOutput) LambdaArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.

This parameter and the `PreTokenGeneration` property of `LambdaConfig` have the same value. For new instances of pre token generation triggers, set `LambdaArn` .

func (UserPoolPreTokenGenerationConfigPtrOutput) LambdaVersion added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigPtrOutput) LambdaVersion() pulumi.StringPtrOutput

The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.

func (UserPoolPreTokenGenerationConfigPtrOutput) ToUserPoolPreTokenGenerationConfigPtrOutput added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigPtrOutput) ToUserPoolPreTokenGenerationConfigPtrOutput() UserPoolPreTokenGenerationConfigPtrOutput

func (UserPoolPreTokenGenerationConfigPtrOutput) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext added in v0.93.0 

func (o UserPoolPreTokenGenerationConfigPtrOutput) ToUserPoolPreTokenGenerationConfigPtrOutputWithContext(ctx context.Context) UserPoolPreTokenGenerationConfigPtrOutput

type UserPoolRecoveryOption 

type UserPoolRecoveryOption struct {
	// The recovery method that this object sets a recovery option for.
	Name *string `pulumi:"name"`
	// Your priority preference for using the specified attribute in account recovery. The highest priority is `1` .
	Priority *int `pulumi:"priority"`
}

type UserPoolRecoveryOptionArgs 

type UserPoolRecoveryOptionArgs struct {
	// The recovery method that this object sets a recovery option for.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Your priority preference for using the specified attribute in account recovery. The highest priority is `1` .
	Priority pulumi.IntPtrInput `pulumi:"priority"`
}

func (UserPoolRecoveryOptionArgs) ElementType 

func (UserPoolRecoveryOptionArgs) ElementType() reflect.Type

func (UserPoolRecoveryOptionArgs) ToUserPoolRecoveryOptionOutput 

func (i UserPoolRecoveryOptionArgs) ToUserPoolRecoveryOptionOutput() UserPoolRecoveryOptionOutput

func (UserPoolRecoveryOptionArgs) ToUserPoolRecoveryOptionOutputWithContext 

func (i UserPoolRecoveryOptionArgs) ToUserPoolRecoveryOptionOutputWithContext(ctx context.Context) UserPoolRecoveryOptionOutput

type UserPoolRecoveryOptionArray 

type UserPoolRecoveryOptionArray []UserPoolRecoveryOptionInput

func (UserPoolRecoveryOptionArray) ElementType 

func (UserPoolRecoveryOptionArray) ElementType() reflect.Type

func (UserPoolRecoveryOptionArray) ToUserPoolRecoveryOptionArrayOutput 

func (i UserPoolRecoveryOptionArray) ToUserPoolRecoveryOptionArrayOutput() UserPoolRecoveryOptionArrayOutput

func (UserPoolRecoveryOptionArray) ToUserPoolRecoveryOptionArrayOutputWithContext 

func (i UserPoolRecoveryOptionArray) ToUserPoolRecoveryOptionArrayOutputWithContext(ctx context.Context) UserPoolRecoveryOptionArrayOutput

type UserPoolRecoveryOptionArrayInput 

type UserPoolRecoveryOptionArrayInput interface {
	pulumi.Input

	ToUserPoolRecoveryOptionArrayOutput() UserPoolRecoveryOptionArrayOutput
	ToUserPoolRecoveryOptionArrayOutputWithContext(context.Context) UserPoolRecoveryOptionArrayOutput
}

UserPoolRecoveryOptionArrayInput is an input type that accepts UserPoolRecoveryOptionArray and UserPoolRecoveryOptionArrayOutput values. You can construct a concrete instance of `UserPoolRecoveryOptionArrayInput` via: 

UserPoolRecoveryOptionArray{ UserPoolRecoveryOptionArgs{...} }

type UserPoolRecoveryOptionArrayOutput 

type UserPoolRecoveryOptionArrayOutput struct{ *pulumi.OutputState }

func (UserPoolRecoveryOptionArrayOutput) ElementType 

func (UserPoolRecoveryOptionArrayOutput) ElementType() reflect.Type

func (UserPoolRecoveryOptionArrayOutput) Index 

func (o UserPoolRecoveryOptionArrayOutput) Index(i pulumi.IntInput) UserPoolRecoveryOptionOutput

func (UserPoolRecoveryOptionArrayOutput) ToUserPoolRecoveryOptionArrayOutput 

func (o UserPoolRecoveryOptionArrayOutput) ToUserPoolRecoveryOptionArrayOutput() UserPoolRecoveryOptionArrayOutput

func (UserPoolRecoveryOptionArrayOutput) ToUserPoolRecoveryOptionArrayOutputWithContext 

func (o UserPoolRecoveryOptionArrayOutput) ToUserPoolRecoveryOptionArrayOutputWithContext(ctx context.Context) UserPoolRecoveryOptionArrayOutput

type UserPoolRecoveryOptionInput 

type UserPoolRecoveryOptionInput interface {
	pulumi.Input

	ToUserPoolRecoveryOptionOutput() UserPoolRecoveryOptionOutput
	ToUserPoolRecoveryOptionOutputWithContext(context.Context) UserPoolRecoveryOptionOutput
}

UserPoolRecoveryOptionInput is an input type that accepts UserPoolRecoveryOptionArgs and UserPoolRecoveryOptionOutput values. You can construct a concrete instance of `UserPoolRecoveryOptionInput` via: 

UserPoolRecoveryOptionArgs{...}

type UserPoolRecoveryOptionOutput 

type UserPoolRecoveryOptionOutput struct{ *pulumi.OutputState }

func (UserPoolRecoveryOptionOutput) ElementType 

func (UserPoolRecoveryOptionOutput) ElementType() reflect.Type

func (UserPoolRecoveryOptionOutput) Name 

func (o UserPoolRecoveryOptionOutput) Name() pulumi.StringPtrOutput

The recovery method that this object sets a recovery option for.

func (UserPoolRecoveryOptionOutput) Priority 

func (o UserPoolRecoveryOptionOutput) Priority() pulumi.IntPtrOutput

Your priority preference for using the specified attribute in account recovery. The highest priority is `1` .

func (UserPoolRecoveryOptionOutput) ToUserPoolRecoveryOptionOutput 

func (o UserPoolRecoveryOptionOutput) ToUserPoolRecoveryOptionOutput() UserPoolRecoveryOptionOutput

func (UserPoolRecoveryOptionOutput) ToUserPoolRecoveryOptionOutputWithContext 

func (o UserPoolRecoveryOptionOutput) ToUserPoolRecoveryOptionOutputWithContext(ctx context.Context) UserPoolRecoveryOptionOutput

type UserPoolResourceServer 

type UserPoolResourceServer struct {
	pulumi.CustomResourceState

	// A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
	//
	// Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
	Identifier pulumi.StringOutput `pulumi:"identifier"`
	// A friendly name for the resource server.
	Name pulumi.StringOutput `pulumi:"name"`
	// A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .
	Scopes UserPoolResourceServerResourceServerScopeTypeArrayOutput `pulumi:"scopes"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolResourceServer

func GetUserPoolResourceServer 

func GetUserPoolResourceServer(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolResourceServerState, opts ...pulumi.ResourceOption) (*UserPoolResourceServer, error)

GetUserPoolResourceServer gets an existing UserPoolResourceServer resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolResourceServer 

func NewUserPoolResourceServer(ctx *pulumi.Context,
	name string, args *UserPoolResourceServerArgs, opts ...pulumi.ResourceOption) (*UserPoolResourceServer, error)

NewUserPoolResourceServer registers a new resource with the given unique name, arguments, and options.

func (*UserPoolResourceServer) ElementType 

func (*UserPoolResourceServer) ElementType() reflect.Type

func (*UserPoolResourceServer) ToUserPoolResourceServerOutput 

func (i *UserPoolResourceServer) ToUserPoolResourceServerOutput() UserPoolResourceServerOutput

func (*UserPoolResourceServer) ToUserPoolResourceServerOutputWithContext 

func (i *UserPoolResourceServer) ToUserPoolResourceServerOutputWithContext(ctx context.Context) UserPoolResourceServerOutput

type UserPoolResourceServerArgs 

type UserPoolResourceServerArgs struct {
	// A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.
	//
	// Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.
	Identifier pulumi.StringInput
	// A friendly name for the resource server.
	Name pulumi.StringPtrInput
	// A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .
	Scopes UserPoolResourceServerResourceServerScopeTypeArrayInput
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolResourceServer resource.

func (UserPoolResourceServerArgs) ElementType 

func (UserPoolResourceServerArgs) ElementType() reflect.Type

type UserPoolResourceServerInput 

type UserPoolResourceServerInput interface {
	pulumi.Input

	ToUserPoolResourceServerOutput() UserPoolResourceServerOutput
	ToUserPoolResourceServerOutputWithContext(ctx context.Context) UserPoolResourceServerOutput
}

type UserPoolResourceServerOutput 

type UserPoolResourceServerOutput struct{ *pulumi.OutputState }

func (UserPoolResourceServerOutput) ElementType 

func (UserPoolResourceServerOutput) ElementType() reflect.Type

func (UserPoolResourceServerOutput) Identifier added in v0.17.0 

func (o UserPoolResourceServerOutput) Identifier() pulumi.StringOutput

A unique resource server identifier for the resource server. The identifier can be an API friendly name like `solar-system-data` . You can also set an API URL like `https://solar-system-data-api.example.com` as your identifier.

Amazon Cognito represents scopes in the access token in the format `$resource-server-identifier/$scope` . Longer scope-identifier strings increase the size of your access tokens.

func (UserPoolResourceServerOutput) Name added in v0.17.0 

func (o UserPoolResourceServerOutput) Name() pulumi.StringOutput

A friendly name for the resource server.

func (UserPoolResourceServerOutput) Scopes added in v0.17.0 

func (o UserPoolResourceServerOutput) Scopes() UserPoolResourceServerResourceServerScopeTypeArrayOutput

A list of scopes. Each scope is a map with keys `ScopeName` and `ScopeDescription` .

func (UserPoolResourceServerOutput) ToUserPoolResourceServerOutput 

func (o UserPoolResourceServerOutput) ToUserPoolResourceServerOutput() UserPoolResourceServerOutput

func (UserPoolResourceServerOutput) ToUserPoolResourceServerOutputWithContext 

func (o UserPoolResourceServerOutput) ToUserPoolResourceServerOutputWithContext(ctx context.Context) UserPoolResourceServerOutput

func (UserPoolResourceServerOutput) UserPoolId added in v0.17.0 

func (o UserPoolResourceServerOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool.

type UserPoolResourceServerResourceServerScopeType 

type UserPoolResourceServerResourceServerScopeType struct {
	// A friendly description of a custom scope.
	ScopeDescription string `pulumi:"scopeDescription"`
	// The name of the scope. Amazon Cognito renders custom scopes in the format `resourceServerIdentifier/ScopeName` . For example, if this parameter is `exampleScope` in the resource server with the identifier `exampleResourceServer` , you request and receive the scope `exampleResourceServer/exampleScope` .
	ScopeName string `pulumi:"scopeName"`
}

type UserPoolResourceServerResourceServerScopeTypeArgs 

type UserPoolResourceServerResourceServerScopeTypeArgs struct {
	// A friendly description of a custom scope.
	ScopeDescription pulumi.StringInput `pulumi:"scopeDescription"`
	// The name of the scope. Amazon Cognito renders custom scopes in the format `resourceServerIdentifier/ScopeName` . For example, if this parameter is `exampleScope` in the resource server with the identifier `exampleResourceServer` , you request and receive the scope `exampleResourceServer/exampleScope` .
	ScopeName pulumi.StringInput `pulumi:"scopeName"`
}

func (UserPoolResourceServerResourceServerScopeTypeArgs) ElementType 

func (UserPoolResourceServerResourceServerScopeTypeArgs) ElementType() reflect.Type

func (UserPoolResourceServerResourceServerScopeTypeArgs) ToUserPoolResourceServerResourceServerScopeTypeOutput 

func (i UserPoolResourceServerResourceServerScopeTypeArgs) ToUserPoolResourceServerResourceServerScopeTypeOutput() UserPoolResourceServerResourceServerScopeTypeOutput

func (UserPoolResourceServerResourceServerScopeTypeArgs) ToUserPoolResourceServerResourceServerScopeTypeOutputWithContext 

func (i UserPoolResourceServerResourceServerScopeTypeArgs) ToUserPoolResourceServerResourceServerScopeTypeOutputWithContext(ctx context.Context) UserPoolResourceServerResourceServerScopeTypeOutput

type UserPoolResourceServerResourceServerScopeTypeArray 

type UserPoolResourceServerResourceServerScopeTypeArray []UserPoolResourceServerResourceServerScopeTypeInput

func (UserPoolResourceServerResourceServerScopeTypeArray) ElementType 

func (UserPoolResourceServerResourceServerScopeTypeArray) ElementType() reflect.Type

func (UserPoolResourceServerResourceServerScopeTypeArray) ToUserPoolResourceServerResourceServerScopeTypeArrayOutput 

func (i UserPoolResourceServerResourceServerScopeTypeArray) ToUserPoolResourceServerResourceServerScopeTypeArrayOutput() UserPoolResourceServerResourceServerScopeTypeArrayOutput

func (UserPoolResourceServerResourceServerScopeTypeArray) ToUserPoolResourceServerResourceServerScopeTypeArrayOutputWithContext 

func (i UserPoolResourceServerResourceServerScopeTypeArray) ToUserPoolResourceServerResourceServerScopeTypeArrayOutputWithContext(ctx context.Context) UserPoolResourceServerResourceServerScopeTypeArrayOutput

type UserPoolResourceServerResourceServerScopeTypeArrayInput 

type UserPoolResourceServerResourceServerScopeTypeArrayInput interface {
	pulumi.Input

	ToUserPoolResourceServerResourceServerScopeTypeArrayOutput() UserPoolResourceServerResourceServerScopeTypeArrayOutput
	ToUserPoolResourceServerResourceServerScopeTypeArrayOutputWithContext(context.Context) UserPoolResourceServerResourceServerScopeTypeArrayOutput
}

UserPoolResourceServerResourceServerScopeTypeArrayInput is an input type that accepts UserPoolResourceServerResourceServerScopeTypeArray and UserPoolResourceServerResourceServerScopeTypeArrayOutput values. You can construct a concrete instance of `UserPoolResourceServerResourceServerScopeTypeArrayInput` via: 

UserPoolResourceServerResourceServerScopeTypeArray{ UserPoolResourceServerResourceServerScopeTypeArgs{...} }

type UserPoolResourceServerResourceServerScopeTypeArrayOutput 

type UserPoolResourceServerResourceServerScopeTypeArrayOutput struct{ *pulumi.OutputState }

func (UserPoolResourceServerResourceServerScopeTypeArrayOutput) ElementType 

func (UserPoolResourceServerResourceServerScopeTypeArrayOutput) ElementType() reflect.Type

func (UserPoolResourceServerResourceServerScopeTypeArrayOutput) Index 

func (o UserPoolResourceServerResourceServerScopeTypeArrayOutput) Index(i pulumi.IntInput) UserPoolResourceServerResourceServerScopeTypeOutput

func (UserPoolResourceServerResourceServerScopeTypeArrayOutput) ToUserPoolResourceServerResourceServerScopeTypeArrayOutput 

func (o UserPoolResourceServerResourceServerScopeTypeArrayOutput) ToUserPoolResourceServerResourceServerScopeTypeArrayOutput() UserPoolResourceServerResourceServerScopeTypeArrayOutput

func (UserPoolResourceServerResourceServerScopeTypeArrayOutput) ToUserPoolResourceServerResourceServerScopeTypeArrayOutputWithContext 

func (o UserPoolResourceServerResourceServerScopeTypeArrayOutput) ToUserPoolResourceServerResourceServerScopeTypeArrayOutputWithContext(ctx context.Context) UserPoolResourceServerResourceServerScopeTypeArrayOutput

type UserPoolResourceServerResourceServerScopeTypeInput 

type UserPoolResourceServerResourceServerScopeTypeInput interface {
	pulumi.Input

	ToUserPoolResourceServerResourceServerScopeTypeOutput() UserPoolResourceServerResourceServerScopeTypeOutput
	ToUserPoolResourceServerResourceServerScopeTypeOutputWithContext(context.Context) UserPoolResourceServerResourceServerScopeTypeOutput
}

UserPoolResourceServerResourceServerScopeTypeInput is an input type that accepts UserPoolResourceServerResourceServerScopeTypeArgs and UserPoolResourceServerResourceServerScopeTypeOutput values. You can construct a concrete instance of `UserPoolResourceServerResourceServerScopeTypeInput` via: 

UserPoolResourceServerResourceServerScopeTypeArgs{...}

type UserPoolResourceServerResourceServerScopeTypeOutput 

type UserPoolResourceServerResourceServerScopeTypeOutput struct{ *pulumi.OutputState }

func (UserPoolResourceServerResourceServerScopeTypeOutput) ElementType 

func (UserPoolResourceServerResourceServerScopeTypeOutput) ElementType() reflect.Type

func (UserPoolResourceServerResourceServerScopeTypeOutput) ScopeDescription 

func (o UserPoolResourceServerResourceServerScopeTypeOutput) ScopeDescription() pulumi.StringOutput

A friendly description of a custom scope.

func (UserPoolResourceServerResourceServerScopeTypeOutput) ScopeName 

func (o UserPoolResourceServerResourceServerScopeTypeOutput) ScopeName() pulumi.StringOutput

The name of the scope. Amazon Cognito renders custom scopes in the format `resourceServerIdentifier/ScopeName` . For example, if this parameter is `exampleScope` in the resource server with the identifier `exampleResourceServer` , you request and receive the scope `exampleResourceServer/exampleScope` .

func (UserPoolResourceServerResourceServerScopeTypeOutput) ToUserPoolResourceServerResourceServerScopeTypeOutput 

func (o UserPoolResourceServerResourceServerScopeTypeOutput) ToUserPoolResourceServerResourceServerScopeTypeOutput() UserPoolResourceServerResourceServerScopeTypeOutput

func (UserPoolResourceServerResourceServerScopeTypeOutput) ToUserPoolResourceServerResourceServerScopeTypeOutputWithContext 

func (o UserPoolResourceServerResourceServerScopeTypeOutput) ToUserPoolResourceServerResourceServerScopeTypeOutputWithContext(ctx context.Context) UserPoolResourceServerResourceServerScopeTypeOutput

type UserPoolResourceServerState 

type UserPoolResourceServerState struct {
}

func (UserPoolResourceServerState) ElementType 

func (UserPoolResourceServerState) ElementType() reflect.Type

type UserPoolRiskConfigurationAttachment 

type UserPoolRiskConfigurationAttachment struct {
	pulumi.CustomResourceState

	// The settings for automated responses and notification templates for adaptive authentication with advanced security features.
	AccountTakeoverRiskConfiguration UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput `pulumi:"accountTakeoverRiskConfiguration"`
	// The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
	ClientId pulumi.StringOutput `pulumi:"clientId"`
	// Settings for compromised-credentials actions and authentication types with advanced security features in full-function `ENFORCED` mode.
	CompromisedCredentialsRiskConfiguration UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput `pulumi:"compromisedCredentialsRiskConfiguration"`
	// Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.
	RiskExceptionConfiguration UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput `pulumi:"riskExceptionConfiguration"`
	// The ID of the user pool that has the risk configuration applied.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolRiskConfigurationAttachment

func GetUserPoolRiskConfigurationAttachment 

func GetUserPoolRiskConfigurationAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolRiskConfigurationAttachmentState, opts ...pulumi.ResourceOption) (*UserPoolRiskConfigurationAttachment, error)

GetUserPoolRiskConfigurationAttachment gets an existing UserPoolRiskConfigurationAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolRiskConfigurationAttachment 

func NewUserPoolRiskConfigurationAttachment(ctx *pulumi.Context,
	name string, args *UserPoolRiskConfigurationAttachmentArgs, opts ...pulumi.ResourceOption) (*UserPoolRiskConfigurationAttachment, error)

NewUserPoolRiskConfigurationAttachment registers a new resource with the given unique name, arguments, and options.

func (*UserPoolRiskConfigurationAttachment) ElementType 

func (*UserPoolRiskConfigurationAttachment) ElementType() reflect.Type

func (*UserPoolRiskConfigurationAttachment) ToUserPoolRiskConfigurationAttachmentOutput 

func (i *UserPoolRiskConfigurationAttachment) ToUserPoolRiskConfigurationAttachmentOutput() UserPoolRiskConfigurationAttachmentOutput

func (*UserPoolRiskConfigurationAttachment) ToUserPoolRiskConfigurationAttachmentOutputWithContext 

func (i *UserPoolRiskConfigurationAttachment) ToUserPoolRiskConfigurationAttachmentOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionType 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionType struct {
	// The action to take for the attempted account takeover action for the associated risk level. Valid values are as follows:
	//
	// - `BLOCK` : Block the request.
	// - `MFA_IF_CONFIGURED` : Present an MFA challenge if possible. MFA is possible if the user pool has active MFA methods that the user can set up. For example, if the user pool only supports SMS message MFA but the user doesn't have a phone number attribute, MFA setup isn't possible. If MFA setup isn't possible, allow the request.
	// - `MFA_REQUIRED` : Present an MFA challenge if possible. Block the request if a user hasn't set up MFA. To sign in with required MFA, users must have an email address or phone number attribute, or a registered TOTP factor.
	// - `NO_ACTION` : Take no action. Permit sign-in.
	EventAction string `pulumi:"eventAction"`
	// Determines whether Amazon Cognito sends a user a notification message when your user pools assesses a user's session at the associated risk level.
	Notify bool `pulumi:"notify"`
}

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs struct {
	// The action to take for the attempted account takeover action for the associated risk level. Valid values are as follows:
	//
	// - `BLOCK` : Block the request.
	// - `MFA_IF_CONFIGURED` : Present an MFA challenge if possible. MFA is possible if the user pool has active MFA methods that the user can set up. For example, if the user pool only supports SMS message MFA but the user doesn't have a phone number attribute, MFA setup isn't possible. If MFA setup isn't possible, allow the request.
	// - `MFA_REQUIRED` : Present an MFA challenge if possible. Block the request if a user hasn't set up MFA. To sign in with required MFA, users must have an email address or phone number attribute, or a registered TOTP factor.
	// - `NO_ACTION` : Take no action. Permit sign-in.
	EventAction pulumi.StringInput `pulumi:"eventAction"`
	// Determines whether Amazon Cognito sends a user a notification message when your user pools assesses a user's session at the associated risk level.
	Notify pulumi.BoolInput `pulumi:"notify"`
}

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs and UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeInput` via: 

UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs{...}

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) EventAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) EventAction() pulumi.StringOutput

The action to take for the attempted account takeover action for the associated risk level. Valid values are as follows:

- `BLOCK` : Block the request. - `MFA_IF_CONFIGURED` : Present an MFA challenge if possible. MFA is possible if the user pool has active MFA methods that the user can set up. For example, if the user pool only supports SMS message MFA but the user doesn't have a phone number attribute, MFA setup isn't possible. If MFA setup isn't possible, allow the request. - `MFA_REQUIRED` : Present an MFA challenge if possible. Block the request if a user hasn't set up MFA. To sign in with required MFA, users must have an email address or phone number attribute, or a registered TOTP factor. - `NO_ACTION` : Take no action. Permit sign-in.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) Notify 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) Notify() pulumi.BoolOutput

Determines whether Amazon Cognito sends a user a notification message when your user pools assesses a user's session at the associated risk level.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs, UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtr and UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtr 

func UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtr(v *UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeArgs) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) EventAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) EventAction() pulumi.StringPtrOutput

The action to take for the attempted account takeover action for the associated risk level. Valid values are as follows:

- `BLOCK` : Block the request. - `MFA_IF_CONFIGURED` : Present an MFA challenge if possible. MFA is possible if the user pool has active MFA methods that the user can set up. For example, if the user pool only supports SMS message MFA but the user doesn't have a phone number attribute, MFA setup isn't possible. If MFA setup isn't possible, allow the request. - `MFA_REQUIRED` : Present an MFA challenge if possible. Block the request if a user hasn't set up MFA. To sign in with required MFA, users must have an email address or phone number attribute, or a registered TOTP factor. - `NO_ACTION` : Take no action. Permit sign-in.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) Notify 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) Notify() pulumi.BoolPtrOutput

Determines whether Amazon Cognito sends a user a notification message when your user pools assesses a user's session at the associated risk level.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsType 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsType struct {
	// The action that you assign to a high-risk assessment by advanced security features.
	HighAction *UserPoolRiskConfigurationAttachmentAccountTakeoverActionType `pulumi:"highAction"`
	// The action that you assign to a low-risk assessment by advanced security features.
	LowAction *UserPoolRiskConfigurationAttachmentAccountTakeoverActionType `pulumi:"lowAction"`
	// The action that you assign to a medium-risk assessment by advanced security features.
	MediumAction *UserPoolRiskConfigurationAttachmentAccountTakeoverActionType `pulumi:"mediumAction"`
}

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs struct {
	// The action that you assign to a high-risk assessment by advanced security features.
	HighAction UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput `pulumi:"highAction"`
	// The action that you assign to a low-risk assessment by advanced security features.
	LowAction UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput `pulumi:"lowAction"`
	// The action that you assign to a medium-risk assessment by advanced security features.
	MediumAction UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrInput `pulumi:"mediumAction"`
}

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs and UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeInput` via: 

UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs{...}

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) HighAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) HighAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a high-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) LowAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) LowAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a low-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) MediumAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) MediumAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a medium-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs, UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtr and UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtr 

func UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtr(v *UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeArgs) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrInput

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) HighAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) HighAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a high-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) LowAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) LowAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a low-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) MediumAction 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) MediumAction() UserPoolRiskConfigurationAttachmentAccountTakeoverActionTypePtrOutput

The action that you assign to a medium-risk assessment by advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationType struct {
	// A list of account-takeover actions for each level of risk that Amazon Cognito might assess with advanced security features.
	Actions UserPoolRiskConfigurationAttachmentAccountTakeoverActionsType `pulumi:"actions"`
	// The settings for composing and sending an email message when advanced security features assesses a risk level with adaptive authentication. When you choose to notify users in `AccountTakeoverRiskConfiguration` , Amazon Cognito sends an email message using the method and template that you set with this data type.
	NotifyConfiguration *UserPoolRiskConfigurationAttachmentNotifyConfigurationType `pulumi:"notifyConfiguration"`
}

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs struct {
	// A list of account-takeover actions for each level of risk that Amazon Cognito might assess with advanced security features.
	Actions UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeInput `pulumi:"actions"`
	// The settings for composing and sending an email message when advanced security features assesses a risk level with adaptive authentication. When you choose to notify users in `AccountTakeoverRiskConfiguration` , Amazon Cognito sends an email message using the method and template that you set with this data type.
	NotifyConfiguration UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput `pulumi:"notifyConfiguration"`
}

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs and UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeInput` via: 

UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs{...}

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) Actions 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) Actions() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypeOutput

A list of account-takeover actions for each level of risk that Amazon Cognito might assess with advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) NotifyConfiguration 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) NotifyConfiguration() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

The settings for composing and sending an email message when advanced security features assesses a risk level with adaptive authentication. When you choose to notify users in `AccountTakeoverRiskConfiguration` , Amazon Cognito sends an email message using the method and template that you set with this data type.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput
}

UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs, UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtr and UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtr 

func UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtr(v *UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeArgs) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput 

type UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) Actions 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) Actions() UserPoolRiskConfigurationAttachmentAccountTakeoverActionsTypePtrOutput

A list of account-takeover actions for each level of risk that Amazon Cognito might assess with advanced security features.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) NotifyConfiguration 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) NotifyConfiguration() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

The settings for composing and sending an email message when advanced security features assesses a risk level with adaptive authentication. When you choose to notify users in `AccountTakeoverRiskConfiguration` , Amazon Cognito sends an email message using the method and template that you set with this data type.

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentArgs 

type UserPoolRiskConfigurationAttachmentArgs struct {
	// The settings for automated responses and notification templates for adaptive authentication with advanced security features.
	AccountTakeoverRiskConfiguration UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrInput
	// The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.
	ClientId pulumi.StringInput
	// Settings for compromised-credentials actions and authentication types with advanced security features in full-function `ENFORCED` mode.
	CompromisedCredentialsRiskConfiguration UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput
	// Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.
	RiskExceptionConfiguration UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput
	// The ID of the user pool that has the risk configuration applied.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolRiskConfigurationAttachment resource.

func (UserPoolRiskConfigurationAttachmentArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentArgs) ElementType() reflect.Type

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsType 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsType struct {
	// The action that Amazon Cognito takes when it detects compromised credentials.
	EventAction string `pulumi:"eventAction"`
}

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs struct {
	// The action that Amazon Cognito takes when it detects compromised credentials.
	EventAction pulumi.StringInput `pulumi:"eventAction"`
}

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeInput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput
	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput
}

UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs and UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeInput` via: 

UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs{...}

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) EventAction 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) EventAction() pulumi.StringOutput

The action that Amazon Cognito takes when it detects compromised credentials.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrInput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput
}

UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs, UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtr and UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtr 

func UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtr(v *UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeArgs) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrInput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) EventAction 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) EventAction() pulumi.StringPtrOutput

The action that Amazon Cognito takes when it detects compromised credentials.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationType struct {
	// Settings for the actions that you want your user pool to take when Amazon Cognito detects compromised credentials.
	Actions UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsType `pulumi:"actions"`
	// Settings for the sign-in activity where you want to configure compromised-credentials actions. Defaults to all events.
	EventFilter []string `pulumi:"eventFilter"`
}

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs struct {
	// Settings for the actions that you want your user pool to take when Amazon Cognito detects compromised credentials.
	Actions UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeInput `pulumi:"actions"`
	// Settings for the sign-in activity where you want to configure compromised-credentials actions. Defaults to all events.
	EventFilter pulumi.StringArrayInput `pulumi:"eventFilter"`
}

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeInput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput
	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput
}

UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs and UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeInput` via: 

UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs{...}

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) Actions 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) Actions() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypeOutput

Settings for the actions that you want your user pool to take when Amazon Cognito detects compromised credentials.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) EventFilter 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) EventFilter() pulumi.StringArrayOutput

Settings for the sign-in activity where you want to configure compromised-credentials actions. Defaults to all events.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput
}

UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs, UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtr and UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtr 

func UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtr(v *UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeArgs) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrInput

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput 

type UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) Actions 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) Actions() UserPoolRiskConfigurationAttachmentCompromisedCredentialsActionsTypePtrOutput

Settings for the actions that you want your user pool to take when Amazon Cognito detects compromised credentials.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) EventFilter 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) EventFilter() pulumi.StringArrayOutput

Settings for the sign-in activity where you want to configure compromised-credentials actions. Defaults to all events.

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentInput 

type UserPoolRiskConfigurationAttachmentInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentOutput() UserPoolRiskConfigurationAttachmentOutput
	ToUserPoolRiskConfigurationAttachmentOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentOutput
}

type UserPoolRiskConfigurationAttachmentNotifyConfigurationType 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationType struct {
	// The template for the email message that your user pool sends when a detected risk event is blocked.
	BlockEmail *UserPoolRiskConfigurationAttachmentNotifyEmailType `pulumi:"blockEmail"`
	// The email address that sends the email message. The address must be either individually verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES.
	From *string `pulumi:"from"`
	// The template for the email message that your user pool sends when MFA is challenged in response to a detected risk.
	MfaEmail *UserPoolRiskConfigurationAttachmentNotifyEmailType `pulumi:"mfaEmail"`
	// The template for the email message that your user pool sends when no action is taken in response to a detected risk.
	NoActionEmail *UserPoolRiskConfigurationAttachmentNotifyEmailType `pulumi:"noActionEmail"`
	// The reply-to email address of an email template.
	ReplyTo *string `pulumi:"replyTo"`
	// The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the `From` parameter.
	SourceArn string `pulumi:"sourceArn"`
}

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs struct {
	// The template for the email message that your user pool sends when a detected risk event is blocked.
	BlockEmail UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput `pulumi:"blockEmail"`
	// The email address that sends the email message. The address must be either individually verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES.
	From pulumi.StringPtrInput `pulumi:"from"`
	// The template for the email message that your user pool sends when MFA is challenged in response to a detected risk.
	MfaEmail UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput `pulumi:"mfaEmail"`
	// The template for the email message that your user pool sends when no action is taken in response to a detected risk.
	NoActionEmail UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput `pulumi:"noActionEmail"`
	// The reply-to email address of an email template.
	ReplyTo pulumi.StringPtrInput `pulumi:"replyTo"`
	// The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the `From` parameter.
	SourceArn pulumi.StringInput `pulumi:"sourceArn"`
}

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput 

func (i UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeInput 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput
	ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput
}

UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs and UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeInput` via: 

UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs{...}

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) BlockEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) BlockEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when a detected risk event is blocked.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) From 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) From() pulumi.StringPtrOutput

The email address that sends the email message. The address must be either individually verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) MfaEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) MfaEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when MFA is challenged in response to a detected risk.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) NoActionEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) NoActionEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when no action is taken in response to a detected risk.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ReplyTo 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ReplyTo() pulumi.StringPtrOutput

The reply-to email address of an email template.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) SourceArn 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) SourceArn() pulumi.StringOutput

The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the `From` parameter.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput
}

UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs, UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtr and UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtr 

func UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtr(v *UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeArgs) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrInput

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput 

type UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) BlockEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) BlockEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when a detected risk event is blocked.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) From 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) From() pulumi.StringPtrOutput

The email address that sends the email message. The address must be either individually verified with Amazon Simple Email Service, or from a domain that has been verified with Amazon SES.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) MfaEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) MfaEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when MFA is challenged in response to a detected risk.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) NoActionEmail 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) NoActionEmail() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

The template for the email message that your user pool sends when no action is taken in response to a detected risk.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ReplyTo 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ReplyTo() pulumi.StringPtrOutput

The reply-to email address of an email template.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) SourceArn 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) SourceArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the identity that is associated with the sending authorization policy. This identity permits Amazon Cognito to send for the email address specified in the `From` parameter.

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentNotifyEmailType 

type UserPoolRiskConfigurationAttachmentNotifyEmailType struct {
	// The body of an email notification formatted in HTML. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.
	HtmlBody *string `pulumi:"htmlBody"`
	// The subject of the threat protection email notification.
	Subject string `pulumi:"subject"`
	// The body of an email notification formatted in plaintext. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.
	TextBody *string `pulumi:"textBody"`
}

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs 

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs struct {
	// The body of an email notification formatted in HTML. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.
	HtmlBody pulumi.StringPtrInput `pulumi:"htmlBody"`
	// The subject of the threat protection email notification.
	Subject pulumi.StringInput `pulumi:"subject"`
	// The body of an email notification formatted in plaintext. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.
	TextBody pulumi.StringPtrInput `pulumi:"textBody"`
}

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput 

func (i UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeInput 

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput
	ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput
}

UserPoolRiskConfigurationAttachmentNotifyEmailTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs and UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentNotifyEmailTypeInput` via: 

UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs{...}

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput 

type UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) HtmlBody 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) HtmlBody() pulumi.StringPtrOutput

The body of an email notification formatted in HTML. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) Subject 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) Subject() pulumi.StringOutput

The subject of the threat protection email notification.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) TextBody 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) TextBody() pulumi.StringPtrOutput

The body of an email notification formatted in plaintext. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

type UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput 

type UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput
}

UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs, UserPoolRiskConfigurationAttachmentNotifyEmailTypePtr and UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentNotifyEmailTypePtr 

func UserPoolRiskConfigurationAttachmentNotifyEmailTypePtr(v *UserPoolRiskConfigurationAttachmentNotifyEmailTypeArgs) UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrInput

type UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput 

type UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentNotifyEmailTypeOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) HtmlBody 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) HtmlBody() pulumi.StringPtrOutput

The body of an email notification formatted in HTML. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) Subject 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) Subject() pulumi.StringPtrOutput

The subject of the threat protection email notification.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) TextBody 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) TextBody() pulumi.StringPtrOutput

The body of an email notification formatted in plaintext. Choose an `HtmlBody` or a `TextBody` to send an HTML-formatted or plaintext message, respectively.

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput() UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

func (UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput) ToUserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentNotifyEmailTypePtrOutput

type UserPoolRiskConfigurationAttachmentOutput 

type UserPoolRiskConfigurationAttachmentOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentOutput) AccountTakeoverRiskConfiguration added in v0.17.0 

func (o UserPoolRiskConfigurationAttachmentOutput) AccountTakeoverRiskConfiguration() UserPoolRiskConfigurationAttachmentAccountTakeoverRiskConfigurationTypePtrOutput

The settings for automated responses and notification templates for adaptive authentication with advanced security features.

func (UserPoolRiskConfigurationAttachmentOutput) ClientId added in v0.17.0 

func (o UserPoolRiskConfigurationAttachmentOutput) ClientId() pulumi.StringOutput

The app client where this configuration is applied. When this parameter isn't present, the risk configuration applies to all user pool app clients that don't have client-level settings.

func (UserPoolRiskConfigurationAttachmentOutput) CompromisedCredentialsRiskConfiguration added in v0.17.0 

func (o UserPoolRiskConfigurationAttachmentOutput) CompromisedCredentialsRiskConfiguration() UserPoolRiskConfigurationAttachmentCompromisedCredentialsRiskConfigurationTypePtrOutput

Settings for compromised-credentials actions and authentication types with advanced security features in full-function `ENFORCED` mode.

func (UserPoolRiskConfigurationAttachmentOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentOutput) RiskExceptionConfiguration added in v0.17.0 

func (o UserPoolRiskConfigurationAttachmentOutput) RiskExceptionConfiguration() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.

func (UserPoolRiskConfigurationAttachmentOutput) ToUserPoolRiskConfigurationAttachmentOutput 

func (o UserPoolRiskConfigurationAttachmentOutput) ToUserPoolRiskConfigurationAttachmentOutput() UserPoolRiskConfigurationAttachmentOutput

func (UserPoolRiskConfigurationAttachmentOutput) ToUserPoolRiskConfigurationAttachmentOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentOutput) ToUserPoolRiskConfigurationAttachmentOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentOutput

func (UserPoolRiskConfigurationAttachmentOutput) UserPoolId added in v0.17.0 

func (o UserPoolRiskConfigurationAttachmentOutput) UserPoolId() pulumi.StringOutput

The ID of the user pool that has the risk configuration applied.

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationType struct {
	// An always-block IP address list. Overrides the risk decision and always blocks authentication requests. This parameter is displayed and set in CIDR notation.
	BlockedIpRangeList []string `pulumi:"blockedIpRangeList"`
	// An always-allow IP address list. Risk detection isn't performed on the IP addresses in this range list. This parameter is displayed and set in CIDR notation.
	SkippedIpRangeList []string `pulumi:"skippedIpRangeList"`
}

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs struct {
	// An always-block IP address list. Overrides the risk decision and always blocks authentication requests. This parameter is displayed and set in CIDR notation.
	BlockedIpRangeList pulumi.StringArrayInput `pulumi:"blockedIpRangeList"`
	// An always-allow IP address list. Risk detection isn't performed on the IP addresses in this range list. This parameter is displayed and set in CIDR notation.
	SkippedIpRangeList pulumi.StringArrayInput `pulumi:"skippedIpRangeList"`
}

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ElementType 

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput 

func (i UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput 

func (i UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext 

func (i UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeInput 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput
	ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput
}

UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeInput is an input type that accepts UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs and UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeInput` via: 

UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs{...}

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) BlockedIpRangeList added in v0.72.0 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) BlockedIpRangeList() pulumi.StringArrayOutput

An always-block IP address list. Overrides the risk decision and always blocks authentication requests. This parameter is displayed and set in CIDR notation.

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) SkippedIpRangeList added in v0.72.0 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) SkippedIpRangeList() pulumi.StringArrayOutput

An always-allow IP address list. Risk detection isn't performed on the IP addresses in this range list. This parameter is displayed and set in CIDR notation.

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput interface {
	pulumi.Input

	ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput
	ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext(context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput
}

UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput is an input type that accepts UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs, UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtr and UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput values. You can construct a concrete instance of `UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput` via: 

        UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs{...}

or:

        nil

func UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtr 

func UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtr(v *UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeArgs) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrInput

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput 

type UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput struct{ *pulumi.OutputState }

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) BlockedIpRangeList added in v0.72.0 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) BlockedIpRangeList() pulumi.StringArrayOutput

An always-block IP address list. Overrides the risk decision and always blocks authentication requests. This parameter is displayed and set in CIDR notation.

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) Elem 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) Elem() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypeOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ElementType 

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ElementType() reflect.Type

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) SkippedIpRangeList added in v0.72.0 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) SkippedIpRangeList() pulumi.StringArrayOutput

An always-allow IP address list. Risk detection isn't performed on the IP addresses in this range list. This parameter is displayed and set in CIDR notation.

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput() UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

func (UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext 

func (o UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput) ToUserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutputWithContext(ctx context.Context) UserPoolRiskConfigurationAttachmentRiskExceptionConfigurationTypePtrOutput

type UserPoolRiskConfigurationAttachmentState 

type UserPoolRiskConfigurationAttachmentState struct {
}

func (UserPoolRiskConfigurationAttachmentState) ElementType 

func (UserPoolRiskConfigurationAttachmentState) ElementType() reflect.Type

type UserPoolSchemaAttribute 

type UserPoolSchemaAttribute struct {
	// The data format of the values for your attribute. When you choose an `AttributeDataType` , Amazon Cognito validates the input against the data type. A custom attribute value in your user's ID token is always a string, for example `"custom:isMember" : "true"` or `"custom:YearsAsMember" : "12"` .
	AttributeDataType *string `pulumi:"attributeDataType"`
	// > You should use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` .
	//
	// Specifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users won't be able to modify this attribute using their access token. For example, `DeveloperOnlyAttribute` can be modified using AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes.
	DeveloperOnlyAttribute *bool `pulumi:"developerOnlyAttribute"`
	// Specifies whether the value of the attribute can be changed.
	//
	// Any user pool attribute whose value you map from an IdP attribute must be mutable, with a parameter value of `true` . Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If an attribute is immutable, Amazon Cognito throws an error when it attempts to update the attribute. For more information, see [Specifying Identity Provider Attribute Mappings for Your User Pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .
	Mutable *bool `pulumi:"mutable"`
	// The name of your user pool attribute. When you create or update a user pool, adding a schema attribute creates a custom or developer-only attribute. When you add an attribute with a `Name` value of `MyAttribute` , Amazon Cognito creates the custom attribute `custom:MyAttribute` . When `DeveloperOnlyAttribute` is `true` , Amazon Cognito creates your attribute as `dev:MyAttribute` . In an operation that describes a user pool, Amazon Cognito returns this value as `value` for standard attributes, `custom:value` for custom attributes, and `dev:value` for developer-only attributes..
	Name *string `pulumi:"name"`
	// Specifies the constraints for an attribute of the number type.
	NumberAttributeConstraints *UserPoolNumberAttributeConstraints `pulumi:"numberAttributeConstraints"`
	// Specifies whether a user pool attribute is required. If the attribute is required and the user doesn't provide a value, registration or sign-in will fail.
	Required *bool `pulumi:"required"`
	// Specifies the constraints for an attribute of the string type.
	StringAttributeConstraints *UserPoolStringAttributeConstraints `pulumi:"stringAttributeConstraints"`
}

type UserPoolSchemaAttributeArgs 

type UserPoolSchemaAttributeArgs struct {
	// The data format of the values for your attribute. When you choose an `AttributeDataType` , Amazon Cognito validates the input against the data type. A custom attribute value in your user's ID token is always a string, for example `"custom:isMember" : "true"` or `"custom:YearsAsMember" : "12"` .
	AttributeDataType pulumi.StringPtrInput `pulumi:"attributeDataType"`
	// > You should use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` .
	//
	// Specifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users won't be able to modify this attribute using their access token. For example, `DeveloperOnlyAttribute` can be modified using AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes.
	DeveloperOnlyAttribute pulumi.BoolPtrInput `pulumi:"developerOnlyAttribute"`
	// Specifies whether the value of the attribute can be changed.
	//
	// Any user pool attribute whose value you map from an IdP attribute must be mutable, with a parameter value of `true` . Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If an attribute is immutable, Amazon Cognito throws an error when it attempts to update the attribute. For more information, see [Specifying Identity Provider Attribute Mappings for Your User Pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .
	Mutable pulumi.BoolPtrInput `pulumi:"mutable"`
	// The name of your user pool attribute. When you create or update a user pool, adding a schema attribute creates a custom or developer-only attribute. When you add an attribute with a `Name` value of `MyAttribute` , Amazon Cognito creates the custom attribute `custom:MyAttribute` . When `DeveloperOnlyAttribute` is `true` , Amazon Cognito creates your attribute as `dev:MyAttribute` . In an operation that describes a user pool, Amazon Cognito returns this value as `value` for standard attributes, `custom:value` for custom attributes, and `dev:value` for developer-only attributes..
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Specifies the constraints for an attribute of the number type.
	NumberAttributeConstraints UserPoolNumberAttributeConstraintsPtrInput `pulumi:"numberAttributeConstraints"`
	// Specifies whether a user pool attribute is required. If the attribute is required and the user doesn't provide a value, registration or sign-in will fail.
	Required pulumi.BoolPtrInput `pulumi:"required"`
	// Specifies the constraints for an attribute of the string type.
	StringAttributeConstraints UserPoolStringAttributeConstraintsPtrInput `pulumi:"stringAttributeConstraints"`
}

func (UserPoolSchemaAttributeArgs) ElementType 

func (UserPoolSchemaAttributeArgs) ElementType() reflect.Type

func (UserPoolSchemaAttributeArgs) ToUserPoolSchemaAttributeOutput 

func (i UserPoolSchemaAttributeArgs) ToUserPoolSchemaAttributeOutput() UserPoolSchemaAttributeOutput

func (UserPoolSchemaAttributeArgs) ToUserPoolSchemaAttributeOutputWithContext 

func (i UserPoolSchemaAttributeArgs) ToUserPoolSchemaAttributeOutputWithContext(ctx context.Context) UserPoolSchemaAttributeOutput

type UserPoolSchemaAttributeArray 

type UserPoolSchemaAttributeArray []UserPoolSchemaAttributeInput

func (UserPoolSchemaAttributeArray) ElementType 

func (UserPoolSchemaAttributeArray) ElementType() reflect.Type

func (UserPoolSchemaAttributeArray) ToUserPoolSchemaAttributeArrayOutput 

func (i UserPoolSchemaAttributeArray) ToUserPoolSchemaAttributeArrayOutput() UserPoolSchemaAttributeArrayOutput

func (UserPoolSchemaAttributeArray) ToUserPoolSchemaAttributeArrayOutputWithContext 

func (i UserPoolSchemaAttributeArray) ToUserPoolSchemaAttributeArrayOutputWithContext(ctx context.Context) UserPoolSchemaAttributeArrayOutput

type UserPoolSchemaAttributeArrayInput 

type UserPoolSchemaAttributeArrayInput interface {
	pulumi.Input

	ToUserPoolSchemaAttributeArrayOutput() UserPoolSchemaAttributeArrayOutput
	ToUserPoolSchemaAttributeArrayOutputWithContext(context.Context) UserPoolSchemaAttributeArrayOutput
}

UserPoolSchemaAttributeArrayInput is an input type that accepts UserPoolSchemaAttributeArray and UserPoolSchemaAttributeArrayOutput values. You can construct a concrete instance of `UserPoolSchemaAttributeArrayInput` via: 

UserPoolSchemaAttributeArray{ UserPoolSchemaAttributeArgs{...} }

type UserPoolSchemaAttributeArrayOutput 

type UserPoolSchemaAttributeArrayOutput struct{ *pulumi.OutputState }

func (UserPoolSchemaAttributeArrayOutput) ElementType 

func (UserPoolSchemaAttributeArrayOutput) ElementType() reflect.Type

func (UserPoolSchemaAttributeArrayOutput) Index 

func (o UserPoolSchemaAttributeArrayOutput) Index(i pulumi.IntInput) UserPoolSchemaAttributeOutput

func (UserPoolSchemaAttributeArrayOutput) ToUserPoolSchemaAttributeArrayOutput 

func (o UserPoolSchemaAttributeArrayOutput) ToUserPoolSchemaAttributeArrayOutput() UserPoolSchemaAttributeArrayOutput

func (UserPoolSchemaAttributeArrayOutput) ToUserPoolSchemaAttributeArrayOutputWithContext 

func (o UserPoolSchemaAttributeArrayOutput) ToUserPoolSchemaAttributeArrayOutputWithContext(ctx context.Context) UserPoolSchemaAttributeArrayOutput

type UserPoolSchemaAttributeInput 

type UserPoolSchemaAttributeInput interface {
	pulumi.Input

	ToUserPoolSchemaAttributeOutput() UserPoolSchemaAttributeOutput
	ToUserPoolSchemaAttributeOutputWithContext(context.Context) UserPoolSchemaAttributeOutput
}

UserPoolSchemaAttributeInput is an input type that accepts UserPoolSchemaAttributeArgs and UserPoolSchemaAttributeOutput values. You can construct a concrete instance of `UserPoolSchemaAttributeInput` via: 

UserPoolSchemaAttributeArgs{...}

type UserPoolSchemaAttributeOutput 

type UserPoolSchemaAttributeOutput struct{ *pulumi.OutputState }

func (UserPoolSchemaAttributeOutput) AttributeDataType 

func (o UserPoolSchemaAttributeOutput) AttributeDataType() pulumi.StringPtrOutput

The data format of the values for your attribute. When you choose an `AttributeDataType` , Amazon Cognito validates the input against the data type. A custom attribute value in your user's ID token is always a string, for example `"custom:isMember" : "true"` or `"custom:YearsAsMember" : "12"` .

func (UserPoolSchemaAttributeOutput) DeveloperOnlyAttribute 

func (o UserPoolSchemaAttributeOutput) DeveloperOnlyAttribute() pulumi.BoolPtrOutput

> You should use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` .

Specifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users won't be able to modify this attribute using their access token. For example, `DeveloperOnlyAttribute` can be modified using AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes.

func (UserPoolSchemaAttributeOutput) ElementType 

func (UserPoolSchemaAttributeOutput) ElementType() reflect.Type

func (UserPoolSchemaAttributeOutput) Mutable 

func (o UserPoolSchemaAttributeOutput) Mutable() pulumi.BoolPtrOutput

Specifies whether the value of the attribute can be changed.

Any user pool attribute whose value you map from an IdP attribute must be mutable, with a parameter value of `true` . Amazon Cognito updates mapped attributes when users sign in to your application through an IdP. If an attribute is immutable, Amazon Cognito throws an error when it attempts to update the attribute. For more information, see [Specifying Identity Provider Attribute Mappings for Your User Pool](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html) .

func (UserPoolSchemaAttributeOutput) Name 

func (o UserPoolSchemaAttributeOutput) Name() pulumi.StringPtrOutput

The name of your user pool attribute. When you create or update a user pool, adding a schema attribute creates a custom or developer-only attribute. When you add an attribute with a `Name` value of `MyAttribute` , Amazon Cognito creates the custom attribute `custom:MyAttribute` . When `DeveloperOnlyAttribute` is `true` , Amazon Cognito creates your attribute as `dev:MyAttribute` . In an operation that describes a user pool, Amazon Cognito returns this value as `value` for standard attributes, `custom:value` for custom attributes, and `dev:value` for developer-only attributes..

func (UserPoolSchemaAttributeOutput) NumberAttributeConstraints 

func (o UserPoolSchemaAttributeOutput) NumberAttributeConstraints() UserPoolNumberAttributeConstraintsPtrOutput

Specifies the constraints for an attribute of the number type.

func (UserPoolSchemaAttributeOutput) Required 

func (o UserPoolSchemaAttributeOutput) Required() pulumi.BoolPtrOutput

Specifies whether a user pool attribute is required. If the attribute is required and the user doesn't provide a value, registration or sign-in will fail.

func (UserPoolSchemaAttributeOutput) StringAttributeConstraints 

func (o UserPoolSchemaAttributeOutput) StringAttributeConstraints() UserPoolStringAttributeConstraintsPtrOutput

Specifies the constraints for an attribute of the string type.

func (UserPoolSchemaAttributeOutput) ToUserPoolSchemaAttributeOutput 

func (o UserPoolSchemaAttributeOutput) ToUserPoolSchemaAttributeOutput() UserPoolSchemaAttributeOutput

func (UserPoolSchemaAttributeOutput) ToUserPoolSchemaAttributeOutputWithContext 

func (o UserPoolSchemaAttributeOutput) ToUserPoolSchemaAttributeOutputWithContext(ctx context.Context) UserPoolSchemaAttributeOutput

type UserPoolSmsConfiguration 

type UserPoolSmsConfiguration struct {
	// The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .
	//
	// For more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .
	ExternalId *string `pulumi:"externalId"`
	// The Amazon Resource Name (ARN) of the Amazon SNS caller. This is the ARN of the IAM role in your AWS account that Amazon Cognito will use to send SMS messages. SMS messages are subject to a [spending limit](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html) .
	SnsCallerArn *string `pulumi:"snsCallerArn"`
	// The AWS Region to use with Amazon SNS integration. You can choose the same Region as your user pool, or a supported *Legacy Amazon SNS alternate Region* .
	//
	// Amazon Cognito resources in the Asia Pacific (Seoul) AWS Region must use your Amazon SNS configuration in the Asia Pacific (Tokyo) Region. For more information, see [SMS message settings for Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) .
	SnsRegion *string `pulumi:"snsRegion"`
}

type UserPoolSmsConfigurationArgs 

type UserPoolSmsConfigurationArgs struct {
	// The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .
	//
	// For more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .
	ExternalId pulumi.StringPtrInput `pulumi:"externalId"`
	// The Amazon Resource Name (ARN) of the Amazon SNS caller. This is the ARN of the IAM role in your AWS account that Amazon Cognito will use to send SMS messages. SMS messages are subject to a [spending limit](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html) .
	SnsCallerArn pulumi.StringPtrInput `pulumi:"snsCallerArn"`
	// The AWS Region to use with Amazon SNS integration. You can choose the same Region as your user pool, or a supported *Legacy Amazon SNS alternate Region* .
	//
	// Amazon Cognito resources in the Asia Pacific (Seoul) AWS Region must use your Amazon SNS configuration in the Asia Pacific (Tokyo) Region. For more information, see [SMS message settings for Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) .
	SnsRegion pulumi.StringPtrInput `pulumi:"snsRegion"`
}

func (UserPoolSmsConfigurationArgs) ElementType 

func (UserPoolSmsConfigurationArgs) ElementType() reflect.Type

func (UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationOutput 

func (i UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationOutput() UserPoolSmsConfigurationOutput

func (UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationOutputWithContext 

func (i UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationOutputWithContext(ctx context.Context) UserPoolSmsConfigurationOutput

func (UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationPtrOutput 

func (i UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationPtrOutput() UserPoolSmsConfigurationPtrOutput

func (UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationPtrOutputWithContext 

func (i UserPoolSmsConfigurationArgs) ToUserPoolSmsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolSmsConfigurationPtrOutput

type UserPoolSmsConfigurationInput 

type UserPoolSmsConfigurationInput interface {
	pulumi.Input

	ToUserPoolSmsConfigurationOutput() UserPoolSmsConfigurationOutput
	ToUserPoolSmsConfigurationOutputWithContext(context.Context) UserPoolSmsConfigurationOutput
}

UserPoolSmsConfigurationInput is an input type that accepts UserPoolSmsConfigurationArgs and UserPoolSmsConfigurationOutput values. You can construct a concrete instance of `UserPoolSmsConfigurationInput` via: 

UserPoolSmsConfigurationArgs{...}

type UserPoolSmsConfigurationOutput 

type UserPoolSmsConfigurationOutput struct{ *pulumi.OutputState }

func (UserPoolSmsConfigurationOutput) ElementType 

func (UserPoolSmsConfigurationOutput) ElementType() reflect.Type

func (UserPoolSmsConfigurationOutput) ExternalId 

func (o UserPoolSmsConfigurationOutput) ExternalId() pulumi.StringPtrOutput

The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .

For more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .

func (UserPoolSmsConfigurationOutput) SnsCallerArn 

func (o UserPoolSmsConfigurationOutput) SnsCallerArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the Amazon SNS caller. This is the ARN of the IAM role in your AWS account that Amazon Cognito will use to send SMS messages. SMS messages are subject to a [spending limit](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html) .

func (UserPoolSmsConfigurationOutput) SnsRegion added in v0.12.0 

func (o UserPoolSmsConfigurationOutput) SnsRegion() pulumi.StringPtrOutput

The AWS Region to use with Amazon SNS integration. You can choose the same Region as your user pool, or a supported *Legacy Amazon SNS alternate Region* .

Amazon Cognito resources in the Asia Pacific (Seoul) AWS Region must use your Amazon SNS configuration in the Asia Pacific (Tokyo) Region. For more information, see [SMS message settings for Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) .

func (UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationOutput 

func (o UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationOutput() UserPoolSmsConfigurationOutput

func (UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationOutputWithContext 

func (o UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationOutputWithContext(ctx context.Context) UserPoolSmsConfigurationOutput

func (UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationPtrOutput 

func (o UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationPtrOutput() UserPoolSmsConfigurationPtrOutput

func (UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationPtrOutputWithContext 

func (o UserPoolSmsConfigurationOutput) ToUserPoolSmsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolSmsConfigurationPtrOutput

type UserPoolSmsConfigurationPtrInput 

type UserPoolSmsConfigurationPtrInput interface {
	pulumi.Input

	ToUserPoolSmsConfigurationPtrOutput() UserPoolSmsConfigurationPtrOutput
	ToUserPoolSmsConfigurationPtrOutputWithContext(context.Context) UserPoolSmsConfigurationPtrOutput
}

UserPoolSmsConfigurationPtrInput is an input type that accepts UserPoolSmsConfigurationArgs, UserPoolSmsConfigurationPtr and UserPoolSmsConfigurationPtrOutput values. You can construct a concrete instance of `UserPoolSmsConfigurationPtrInput` via: 

        UserPoolSmsConfigurationArgs{...}

or:

        nil

func UserPoolSmsConfigurationPtr 

func UserPoolSmsConfigurationPtr(v *UserPoolSmsConfigurationArgs) UserPoolSmsConfigurationPtrInput

type UserPoolSmsConfigurationPtrOutput 

type UserPoolSmsConfigurationPtrOutput struct{ *pulumi.OutputState }

func (UserPoolSmsConfigurationPtrOutput) Elem 

func (o UserPoolSmsConfigurationPtrOutput) Elem() UserPoolSmsConfigurationOutput

func (UserPoolSmsConfigurationPtrOutput) ElementType 

func (UserPoolSmsConfigurationPtrOutput) ElementType() reflect.Type

func (UserPoolSmsConfigurationPtrOutput) ExternalId 

func (o UserPoolSmsConfigurationPtrOutput) ExternalId() pulumi.StringPtrOutput

The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .

For more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .

func (UserPoolSmsConfigurationPtrOutput) SnsCallerArn 

func (o UserPoolSmsConfigurationPtrOutput) SnsCallerArn() pulumi.StringPtrOutput

The Amazon Resource Name (ARN) of the Amazon SNS caller. This is the ARN of the IAM role in your AWS account that Amazon Cognito will use to send SMS messages. SMS messages are subject to a [spending limit](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html) .

func (UserPoolSmsConfigurationPtrOutput) SnsRegion added in v0.12.0 

func (o UserPoolSmsConfigurationPtrOutput) SnsRegion() pulumi.StringPtrOutput

The AWS Region to use with Amazon SNS integration. You can choose the same Region as your user pool, or a supported *Legacy Amazon SNS alternate Region* .

Amazon Cognito resources in the Asia Pacific (Seoul) AWS Region must use your Amazon SNS configuration in the Asia Pacific (Tokyo) Region. For more information, see [SMS message settings for Amazon Cognito user pools](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-sms-settings.html) .

func (UserPoolSmsConfigurationPtrOutput) ToUserPoolSmsConfigurationPtrOutput 

func (o UserPoolSmsConfigurationPtrOutput) ToUserPoolSmsConfigurationPtrOutput() UserPoolSmsConfigurationPtrOutput

func (UserPoolSmsConfigurationPtrOutput) ToUserPoolSmsConfigurationPtrOutputWithContext 

func (o UserPoolSmsConfigurationPtrOutput) ToUserPoolSmsConfigurationPtrOutputWithContext(ctx context.Context) UserPoolSmsConfigurationPtrOutput

type UserPoolState 

type UserPoolState struct {
}

func (UserPoolState) ElementType 

func (UserPoolState) ElementType() reflect.Type

type UserPoolStringAttributeConstraints 

type UserPoolStringAttributeConstraints struct {
	// The maximum length of a string attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.
	MaxLength *string `pulumi:"maxLength"`
	// The minimum length of a string attribute value.
	MinLength *string `pulumi:"minLength"`
}

type UserPoolStringAttributeConstraintsArgs 

type UserPoolStringAttributeConstraintsArgs struct {
	// The maximum length of a string attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.
	MaxLength pulumi.StringPtrInput `pulumi:"maxLength"`
	// The minimum length of a string attribute value.
	MinLength pulumi.StringPtrInput `pulumi:"minLength"`
}

func (UserPoolStringAttributeConstraintsArgs) ElementType 

func (UserPoolStringAttributeConstraintsArgs) ElementType() reflect.Type

func (UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsOutput 

func (i UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsOutput() UserPoolStringAttributeConstraintsOutput

func (UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsOutputWithContext 

func (i UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsOutputWithContext(ctx context.Context) UserPoolStringAttributeConstraintsOutput

func (UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsPtrOutput 

func (i UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsPtrOutput() UserPoolStringAttributeConstraintsPtrOutput

func (UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsPtrOutputWithContext 

func (i UserPoolStringAttributeConstraintsArgs) ToUserPoolStringAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolStringAttributeConstraintsPtrOutput

type UserPoolStringAttributeConstraintsInput 

type UserPoolStringAttributeConstraintsInput interface {
	pulumi.Input

	ToUserPoolStringAttributeConstraintsOutput() UserPoolStringAttributeConstraintsOutput
	ToUserPoolStringAttributeConstraintsOutputWithContext(context.Context) UserPoolStringAttributeConstraintsOutput
}

UserPoolStringAttributeConstraintsInput is an input type that accepts UserPoolStringAttributeConstraintsArgs and UserPoolStringAttributeConstraintsOutput values. You can construct a concrete instance of `UserPoolStringAttributeConstraintsInput` via: 

UserPoolStringAttributeConstraintsArgs{...}

type UserPoolStringAttributeConstraintsOutput 

type UserPoolStringAttributeConstraintsOutput struct{ *pulumi.OutputState }

func (UserPoolStringAttributeConstraintsOutput) ElementType 

func (UserPoolStringAttributeConstraintsOutput) ElementType() reflect.Type

func (UserPoolStringAttributeConstraintsOutput) MaxLength 

func (o UserPoolStringAttributeConstraintsOutput) MaxLength() pulumi.StringPtrOutput

The maximum length of a string attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.

func (UserPoolStringAttributeConstraintsOutput) MinLength 

func (o UserPoolStringAttributeConstraintsOutput) MinLength() pulumi.StringPtrOutput

The minimum length of a string attribute value.

func (UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsOutput 

func (o UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsOutput() UserPoolStringAttributeConstraintsOutput

func (UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsOutputWithContext 

func (o UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsOutputWithContext(ctx context.Context) UserPoolStringAttributeConstraintsOutput

func (UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsPtrOutput 

func (o UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsPtrOutput() UserPoolStringAttributeConstraintsPtrOutput

func (UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsPtrOutputWithContext 

func (o UserPoolStringAttributeConstraintsOutput) ToUserPoolStringAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolStringAttributeConstraintsPtrOutput

type UserPoolStringAttributeConstraintsPtrInput 

type UserPoolStringAttributeConstraintsPtrInput interface {
	pulumi.Input

	ToUserPoolStringAttributeConstraintsPtrOutput() UserPoolStringAttributeConstraintsPtrOutput
	ToUserPoolStringAttributeConstraintsPtrOutputWithContext(context.Context) UserPoolStringAttributeConstraintsPtrOutput
}

UserPoolStringAttributeConstraintsPtrInput is an input type that accepts UserPoolStringAttributeConstraintsArgs, UserPoolStringAttributeConstraintsPtr and UserPoolStringAttributeConstraintsPtrOutput values. You can construct a concrete instance of `UserPoolStringAttributeConstraintsPtrInput` via: 

        UserPoolStringAttributeConstraintsArgs{...}

or:

        nil

func UserPoolStringAttributeConstraintsPtr 

func UserPoolStringAttributeConstraintsPtr(v *UserPoolStringAttributeConstraintsArgs) UserPoolStringAttributeConstraintsPtrInput

type UserPoolStringAttributeConstraintsPtrOutput 

type UserPoolStringAttributeConstraintsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolStringAttributeConstraintsPtrOutput) Elem 

func (o UserPoolStringAttributeConstraintsPtrOutput) Elem() UserPoolStringAttributeConstraintsOutput

func (UserPoolStringAttributeConstraintsPtrOutput) ElementType 

func (UserPoolStringAttributeConstraintsPtrOutput) ElementType() reflect.Type

func (UserPoolStringAttributeConstraintsPtrOutput) MaxLength 

func (o UserPoolStringAttributeConstraintsPtrOutput) MaxLength() pulumi.StringPtrOutput

The maximum length of a string attribute value. Must be a number less than or equal to `2^1023` , represented as a string with a length of 131072 characters or fewer.

func (UserPoolStringAttributeConstraintsPtrOutput) MinLength 

func (o UserPoolStringAttributeConstraintsPtrOutput) MinLength() pulumi.StringPtrOutput

The minimum length of a string attribute value.

func (UserPoolStringAttributeConstraintsPtrOutput) ToUserPoolStringAttributeConstraintsPtrOutput 

func (o UserPoolStringAttributeConstraintsPtrOutput) ToUserPoolStringAttributeConstraintsPtrOutput() UserPoolStringAttributeConstraintsPtrOutput

func (UserPoolStringAttributeConstraintsPtrOutput) ToUserPoolStringAttributeConstraintsPtrOutputWithContext 

func (o UserPoolStringAttributeConstraintsPtrOutput) ToUserPoolStringAttributeConstraintsPtrOutputWithContext(ctx context.Context) UserPoolStringAttributeConstraintsPtrOutput

type UserPoolUiCustomizationAttachment added in v0.72.0 

type UserPoolUiCustomizationAttachment struct {
	pulumi.CustomResourceState

	// The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
	ClientId pulumi.StringOutput `pulumi:"clientId"`
	// The CSS values in the UI customization.
	Css pulumi.StringPtrOutput `pulumi:"css"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
}

Resource Type definition for AWS::Cognito::UserPoolUICustomizationAttachment

func GetUserPoolUiCustomizationAttachment added in v0.72.0 

func GetUserPoolUiCustomizationAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolUiCustomizationAttachmentState, opts ...pulumi.ResourceOption) (*UserPoolUiCustomizationAttachment, error)

GetUserPoolUiCustomizationAttachment gets an existing UserPoolUiCustomizationAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolUiCustomizationAttachment added in v0.72.0 

func NewUserPoolUiCustomizationAttachment(ctx *pulumi.Context,
	name string, args *UserPoolUiCustomizationAttachmentArgs, opts ...pulumi.ResourceOption) (*UserPoolUiCustomizationAttachment, error)

NewUserPoolUiCustomizationAttachment registers a new resource with the given unique name, arguments, and options.

func (*UserPoolUiCustomizationAttachment) ElementType added in v0.72.0 

func (*UserPoolUiCustomizationAttachment) ElementType() reflect.Type

func (*UserPoolUiCustomizationAttachment) ToUserPoolUiCustomizationAttachmentOutput added in v0.72.0 

func (i *UserPoolUiCustomizationAttachment) ToUserPoolUiCustomizationAttachmentOutput() UserPoolUiCustomizationAttachmentOutput

func (*UserPoolUiCustomizationAttachment) ToUserPoolUiCustomizationAttachmentOutputWithContext added in v0.72.0 

func (i *UserPoolUiCustomizationAttachment) ToUserPoolUiCustomizationAttachmentOutputWithContext(ctx context.Context) UserPoolUiCustomizationAttachmentOutput

type UserPoolUiCustomizationAttachmentArgs added in v0.72.0 

type UserPoolUiCustomizationAttachmentArgs struct {
	// The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..
	ClientId pulumi.StringInput
	// The CSS values in the UI customization.
	Css pulumi.StringPtrInput
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput
}

The set of arguments for constructing a UserPoolUiCustomizationAttachment resource.

func (UserPoolUiCustomizationAttachmentArgs) ElementType added in v0.72.0 

func (UserPoolUiCustomizationAttachmentArgs) ElementType() reflect.Type

type UserPoolUiCustomizationAttachmentInput added in v0.72.0 

type UserPoolUiCustomizationAttachmentInput interface {
	pulumi.Input

	ToUserPoolUiCustomizationAttachmentOutput() UserPoolUiCustomizationAttachmentOutput
	ToUserPoolUiCustomizationAttachmentOutputWithContext(ctx context.Context) UserPoolUiCustomizationAttachmentOutput
}

type UserPoolUiCustomizationAttachmentOutput added in v0.72.0 

type UserPoolUiCustomizationAttachmentOutput struct{ *pulumi.OutputState }

func (UserPoolUiCustomizationAttachmentOutput) ClientId added in v0.72.0 

func (o UserPoolUiCustomizationAttachmentOutput) ClientId() pulumi.StringOutput

The app client ID for your UI customization. When this value isn't present, the customization applies to all user pool app clients that don't have client-level settings..

func (UserPoolUiCustomizationAttachmentOutput) Css added in v0.72.0 

func (o UserPoolUiCustomizationAttachmentOutput) Css() pulumi.StringPtrOutput

The CSS values in the UI customization.

func (UserPoolUiCustomizationAttachmentOutput) ElementType added in v0.72.0 

func (UserPoolUiCustomizationAttachmentOutput) ElementType() reflect.Type

func (UserPoolUiCustomizationAttachmentOutput) ToUserPoolUiCustomizationAttachmentOutput added in v0.72.0 

func (o UserPoolUiCustomizationAttachmentOutput) ToUserPoolUiCustomizationAttachmentOutput() UserPoolUiCustomizationAttachmentOutput

func (UserPoolUiCustomizationAttachmentOutput) ToUserPoolUiCustomizationAttachmentOutputWithContext added in v0.72.0 

func (o UserPoolUiCustomizationAttachmentOutput) ToUserPoolUiCustomizationAttachmentOutputWithContext(ctx context.Context) UserPoolUiCustomizationAttachmentOutput

func (UserPoolUiCustomizationAttachmentOutput) UserPoolId added in v0.72.0 

func (o UserPoolUiCustomizationAttachmentOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool.

type UserPoolUiCustomizationAttachmentState added in v0.72.0 

type UserPoolUiCustomizationAttachmentState struct {
}

func (UserPoolUiCustomizationAttachmentState) ElementType added in v0.72.0 

func (UserPoolUiCustomizationAttachmentState) ElementType() reflect.Type

type UserPoolUser 

type UserPoolUser struct {
	pulumi.CustomResourceState

	// A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
	//
	// You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.
	//
	// For more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .
	//
	// > When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:
	// > - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.
	// > - Validate the ClientMetadata value.
	// > - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information.
	ClientMetadata pulumi.StringMapOutput `pulumi:"clientMetadata"`
	// Specify `"EMAIL"` if email will be used to send the welcome message. Specify `"SMS"` if the phone number will be used. The default value is `"SMS"` . You can specify more than one value.
	DesiredDeliveryMediums pulumi.StringArrayOutput `pulumi:"desiredDeliveryMediums"`
	// This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.
	//
	// If this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.
	//
	// If this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .
	ForceAliasCreation pulumi.BoolPtrOutput `pulumi:"forceAliasCreation"`
	// Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.
	MessageAction pulumi.StringPtrOutput `pulumi:"messageAction"`
	// An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than `Username` . However, any attributes that you specify as required (when creating a user pool or in the *Attributes* tab of the console) either you should supply (in your call to `AdminCreateUser` ) or the user should supply (when they sign up in response to your welcome message).
	//
	// For custom attributes, you must prepend the `custom:` prefix to the attribute name.
	//
	// To send a message inviting the user to sign up, you must specify the user's email address or phone number. You can do this in your call to AdminCreateUser or in the *Users* tab of the Amazon Cognito console for managing your user pools.
	//
	// In your call to `AdminCreateUser` , you can set the `email_verified` attribute to `True` , and you can set the `phone_number_verified` attribute to `True` . You can also do this by calling [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) .
	//
	// - *email* : The email address of the user to whom the message that contains the code and username will be sent. Required if the `email_verified` attribute is set to `True` , or if `"EMAIL"` is specified in the `DesiredDeliveryMediums` parameter.
	// - *phone_number* : The phone number of the user to whom the message that contains the code and username will be sent. Required if the `phone_number_verified` attribute is set to `True` , or if `"SMS"` is specified in the `DesiredDeliveryMediums` parameter.
	UserAttributes UserPoolUserAttributeTypeArrayOutput `pulumi:"userAttributes"`
	// The user pool ID for the user pool where the user will be created.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
	// The value that you want to set as the username sign-in attribute. The following conditions apply to the username parameter.
	//
	// - The username can't be a duplicate of another username in the same user pool.
	// - You can't change the value of a username after you create it.
	// - You can only provide a value if usernames are a valid sign-in attribute for your user pool. If your user pool only supports phone numbers or email addresses as sign-in attributes, Amazon Cognito automatically generates a username value. For more information, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) .
	Username pulumi.StringPtrOutput `pulumi:"username"`
	// Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda trigger. This set of key-value pairs are for custom validation of information that you collect from your users but don't need to retain.
	//
	// Your Lambda function can analyze this additional data and act on it. Your function might perform external API operations like logging user attributes and validation data to Amazon CloudWatch Logs. Validation data might also affect the response that your function returns to Amazon Cognito, like automatically confirming the user if they sign up from within your network.
	//
	// For more information about the pre sign-up Lambda trigger, see [Pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) .
	ValidationData UserPoolUserAttributeTypeArrayOutput `pulumi:"validationData"`
}

Resource Type definition for AWS::Cognito::UserPoolUser

func GetUserPoolUser 

func GetUserPoolUser(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolUserState, opts ...pulumi.ResourceOption) (*UserPoolUser, error)

GetUserPoolUser gets an existing UserPoolUser resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolUser 

func NewUserPoolUser(ctx *pulumi.Context,
	name string, args *UserPoolUserArgs, opts ...pulumi.ResourceOption) (*UserPoolUser, error)

NewUserPoolUser registers a new resource with the given unique name, arguments, and options.

func (*UserPoolUser) ElementType 

func (*UserPoolUser) ElementType() reflect.Type

func (*UserPoolUser) ToUserPoolUserOutput 

func (i *UserPoolUser) ToUserPoolUserOutput() UserPoolUserOutput

func (*UserPoolUser) ToUserPoolUserOutputWithContext 

func (i *UserPoolUser) ToUserPoolUserOutputWithContext(ctx context.Context) UserPoolUserOutput

type UserPoolUserArgs 

type UserPoolUserArgs struct {
	// A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.
	//
	// You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.
	//
	// For more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .
	//
	// > When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:
	// > - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose.
	// > - Validate the ClientMetadata value.
	// > - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information.
	ClientMetadata pulumi.StringMapInput
	// Specify `"EMAIL"` if email will be used to send the welcome message. Specify `"SMS"` if the phone number will be used. The default value is `"SMS"` . You can specify more than one value.
	DesiredDeliveryMediums pulumi.StringArrayInput
	// This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.
	//
	// If this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.
	//
	// If this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .
	ForceAliasCreation pulumi.BoolPtrInput
	// Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.
	MessageAction pulumi.StringPtrInput
	// An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than `Username` . However, any attributes that you specify as required (when creating a user pool or in the *Attributes* tab of the console) either you should supply (in your call to `AdminCreateUser` ) or the user should supply (when they sign up in response to your welcome message).
	//
	// For custom attributes, you must prepend the `custom:` prefix to the attribute name.
	//
	// To send a message inviting the user to sign up, you must specify the user's email address or phone number. You can do this in your call to AdminCreateUser or in the *Users* tab of the Amazon Cognito console for managing your user pools.
	//
	// In your call to `AdminCreateUser` , you can set the `email_verified` attribute to `True` , and you can set the `phone_number_verified` attribute to `True` . You can also do this by calling [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) .
	//
	// - *email* : The email address of the user to whom the message that contains the code and username will be sent. Required if the `email_verified` attribute is set to `True` , or if `"EMAIL"` is specified in the `DesiredDeliveryMediums` parameter.
	// - *phone_number* : The phone number of the user to whom the message that contains the code and username will be sent. Required if the `phone_number_verified` attribute is set to `True` , or if `"SMS"` is specified in the `DesiredDeliveryMediums` parameter.
	UserAttributes UserPoolUserAttributeTypeArrayInput
	// The user pool ID for the user pool where the user will be created.
	UserPoolId pulumi.StringInput
	// The value that you want to set as the username sign-in attribute. The following conditions apply to the username parameter.
	//
	// - The username can't be a duplicate of another username in the same user pool.
	// - You can't change the value of a username after you create it.
	// - You can only provide a value if usernames are a valid sign-in attribute for your user pool. If your user pool only supports phone numbers or email addresses as sign-in attributes, Amazon Cognito automatically generates a username value. For more information, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) .
	Username pulumi.StringPtrInput
	// Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda trigger. This set of key-value pairs are for custom validation of information that you collect from your users but don't need to retain.
	//
	// Your Lambda function can analyze this additional data and act on it. Your function might perform external API operations like logging user attributes and validation data to Amazon CloudWatch Logs. Validation data might also affect the response that your function returns to Amazon Cognito, like automatically confirming the user if they sign up from within your network.
	//
	// For more information about the pre sign-up Lambda trigger, see [Pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) .
	ValidationData UserPoolUserAttributeTypeArrayInput
}

The set of arguments for constructing a UserPoolUser resource.

func (UserPoolUserArgs) ElementType 

func (UserPoolUserArgs) ElementType() reflect.Type

type UserPoolUserAttributeType 

type UserPoolUserAttributeType struct {
	// The name of the attribute.
	Name *string `pulumi:"name"`
	// The value of the attribute.
	Value *string `pulumi:"value"`
}

type UserPoolUserAttributeTypeArgs 

type UserPoolUserAttributeTypeArgs struct {
	// The name of the attribute.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// The value of the attribute.
	Value pulumi.StringPtrInput `pulumi:"value"`
}

func (UserPoolUserAttributeTypeArgs) ElementType 

func (UserPoolUserAttributeTypeArgs) ElementType() reflect.Type

func (UserPoolUserAttributeTypeArgs) ToUserPoolUserAttributeTypeOutput 

func (i UserPoolUserAttributeTypeArgs) ToUserPoolUserAttributeTypeOutput() UserPoolUserAttributeTypeOutput

func (UserPoolUserAttributeTypeArgs) ToUserPoolUserAttributeTypeOutputWithContext 

func (i UserPoolUserAttributeTypeArgs) ToUserPoolUserAttributeTypeOutputWithContext(ctx context.Context) UserPoolUserAttributeTypeOutput

type UserPoolUserAttributeTypeArray 

type UserPoolUserAttributeTypeArray []UserPoolUserAttributeTypeInput

func (UserPoolUserAttributeTypeArray) ElementType 

func (UserPoolUserAttributeTypeArray) ElementType() reflect.Type

func (UserPoolUserAttributeTypeArray) ToUserPoolUserAttributeTypeArrayOutput 

func (i UserPoolUserAttributeTypeArray) ToUserPoolUserAttributeTypeArrayOutput() UserPoolUserAttributeTypeArrayOutput

func (UserPoolUserAttributeTypeArray) ToUserPoolUserAttributeTypeArrayOutputWithContext 

func (i UserPoolUserAttributeTypeArray) ToUserPoolUserAttributeTypeArrayOutputWithContext(ctx context.Context) UserPoolUserAttributeTypeArrayOutput

type UserPoolUserAttributeTypeArrayInput 

type UserPoolUserAttributeTypeArrayInput interface {
	pulumi.Input

	ToUserPoolUserAttributeTypeArrayOutput() UserPoolUserAttributeTypeArrayOutput
	ToUserPoolUserAttributeTypeArrayOutputWithContext(context.Context) UserPoolUserAttributeTypeArrayOutput
}

UserPoolUserAttributeTypeArrayInput is an input type that accepts UserPoolUserAttributeTypeArray and UserPoolUserAttributeTypeArrayOutput values. You can construct a concrete instance of `UserPoolUserAttributeTypeArrayInput` via: 

UserPoolUserAttributeTypeArray{ UserPoolUserAttributeTypeArgs{...} }

type UserPoolUserAttributeTypeArrayOutput 

type UserPoolUserAttributeTypeArrayOutput struct{ *pulumi.OutputState }

func (UserPoolUserAttributeTypeArrayOutput) ElementType 

func (UserPoolUserAttributeTypeArrayOutput) ElementType() reflect.Type

func (UserPoolUserAttributeTypeArrayOutput) Index 

func (o UserPoolUserAttributeTypeArrayOutput) Index(i pulumi.IntInput) UserPoolUserAttributeTypeOutput

func (UserPoolUserAttributeTypeArrayOutput) ToUserPoolUserAttributeTypeArrayOutput 

func (o UserPoolUserAttributeTypeArrayOutput) ToUserPoolUserAttributeTypeArrayOutput() UserPoolUserAttributeTypeArrayOutput

func (UserPoolUserAttributeTypeArrayOutput) ToUserPoolUserAttributeTypeArrayOutputWithContext 

func (o UserPoolUserAttributeTypeArrayOutput) ToUserPoolUserAttributeTypeArrayOutputWithContext(ctx context.Context) UserPoolUserAttributeTypeArrayOutput

type UserPoolUserAttributeTypeInput 

type UserPoolUserAttributeTypeInput interface {
	pulumi.Input

	ToUserPoolUserAttributeTypeOutput() UserPoolUserAttributeTypeOutput
	ToUserPoolUserAttributeTypeOutputWithContext(context.Context) UserPoolUserAttributeTypeOutput
}

UserPoolUserAttributeTypeInput is an input type that accepts UserPoolUserAttributeTypeArgs and UserPoolUserAttributeTypeOutput values. You can construct a concrete instance of `UserPoolUserAttributeTypeInput` via: 

UserPoolUserAttributeTypeArgs{...}

type UserPoolUserAttributeTypeOutput 

type UserPoolUserAttributeTypeOutput struct{ *pulumi.OutputState }

func (UserPoolUserAttributeTypeOutput) ElementType 

func (UserPoolUserAttributeTypeOutput) ElementType() reflect.Type

func (UserPoolUserAttributeTypeOutput) Name 

func (o UserPoolUserAttributeTypeOutput) Name() pulumi.StringPtrOutput

The name of the attribute.

func (UserPoolUserAttributeTypeOutput) ToUserPoolUserAttributeTypeOutput 

func (o UserPoolUserAttributeTypeOutput) ToUserPoolUserAttributeTypeOutput() UserPoolUserAttributeTypeOutput

func (UserPoolUserAttributeTypeOutput) ToUserPoolUserAttributeTypeOutputWithContext 

func (o UserPoolUserAttributeTypeOutput) ToUserPoolUserAttributeTypeOutputWithContext(ctx context.Context) UserPoolUserAttributeTypeOutput

func (UserPoolUserAttributeTypeOutput) Value 

func (o UserPoolUserAttributeTypeOutput) Value() pulumi.StringPtrOutput

The value of the attribute.

type UserPoolUserAttributeUpdateSettings added in v0.19.0 

type UserPoolUserAttributeUpdateSettings struct {
	// Requires that your user verifies their email address, phone number, or both before Amazon Cognito updates the value of that attribute. When you update a user attribute that has this option activated, Amazon Cognito sends a verification message to the new phone number or email address. Amazon Cognito doesn’t change the value of the attribute until your user responds to the verification message and confirms the new value.
	//
	// You can verify an updated email address or phone number with a [VerifyUserAttribute](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html) API request. You can also call the [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) API and set `email_verified` or `phone_number_verified` to true.
	//
	// When `AttributesRequireVerificationBeforeUpdate` is false, your user pool doesn't require that your users verify attribute changes before Amazon Cognito updates them. In a user pool where `AttributesRequireVerificationBeforeUpdate` is false, API operations that change attribute values can immediately update a user’s `email` or `phone_number` attribute.
	AttributesRequireVerificationBeforeUpdate []string `pulumi:"attributesRequireVerificationBeforeUpdate"`
}

type UserPoolUserAttributeUpdateSettingsArgs added in v0.19.0 

type UserPoolUserAttributeUpdateSettingsArgs struct {
	// Requires that your user verifies their email address, phone number, or both before Amazon Cognito updates the value of that attribute. When you update a user attribute that has this option activated, Amazon Cognito sends a verification message to the new phone number or email address. Amazon Cognito doesn’t change the value of the attribute until your user responds to the verification message and confirms the new value.
	//
	// You can verify an updated email address or phone number with a [VerifyUserAttribute](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html) API request. You can also call the [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) API and set `email_verified` or `phone_number_verified` to true.
	//
	// When `AttributesRequireVerificationBeforeUpdate` is false, your user pool doesn't require that your users verify attribute changes before Amazon Cognito updates them. In a user pool where `AttributesRequireVerificationBeforeUpdate` is false, API operations that change attribute values can immediately update a user’s `email` or `phone_number` attribute.
	AttributesRequireVerificationBeforeUpdate pulumi.StringArrayInput `pulumi:"attributesRequireVerificationBeforeUpdate"`
}

func (UserPoolUserAttributeUpdateSettingsArgs) ElementType added in v0.19.0 

func (UserPoolUserAttributeUpdateSettingsArgs) ElementType() reflect.Type

func (UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsOutput added in v0.19.0 

func (i UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsOutput() UserPoolUserAttributeUpdateSettingsOutput

func (UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsOutputWithContext added in v0.19.0 

func (i UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsOutputWithContext(ctx context.Context) UserPoolUserAttributeUpdateSettingsOutput

func (UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsPtrOutput added in v0.19.0 

func (i UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsPtrOutput() UserPoolUserAttributeUpdateSettingsPtrOutput

func (UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext added in v0.19.0 

func (i UserPoolUserAttributeUpdateSettingsArgs) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext(ctx context.Context) UserPoolUserAttributeUpdateSettingsPtrOutput

type UserPoolUserAttributeUpdateSettingsInput added in v0.19.0 

type UserPoolUserAttributeUpdateSettingsInput interface {
	pulumi.Input

	ToUserPoolUserAttributeUpdateSettingsOutput() UserPoolUserAttributeUpdateSettingsOutput
	ToUserPoolUserAttributeUpdateSettingsOutputWithContext(context.Context) UserPoolUserAttributeUpdateSettingsOutput
}

UserPoolUserAttributeUpdateSettingsInput is an input type that accepts UserPoolUserAttributeUpdateSettingsArgs and UserPoolUserAttributeUpdateSettingsOutput values. You can construct a concrete instance of `UserPoolUserAttributeUpdateSettingsInput` via: 

UserPoolUserAttributeUpdateSettingsArgs{...}

type UserPoolUserAttributeUpdateSettingsOutput added in v0.19.0 

type UserPoolUserAttributeUpdateSettingsOutput struct{ *pulumi.OutputState }

func (UserPoolUserAttributeUpdateSettingsOutput) AttributesRequireVerificationBeforeUpdate added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsOutput) AttributesRequireVerificationBeforeUpdate() pulumi.StringArrayOutput

Requires that your user verifies their email address, phone number, or both before Amazon Cognito updates the value of that attribute. When you update a user attribute that has this option activated, Amazon Cognito sends a verification message to the new phone number or email address. Amazon Cognito doesn’t change the value of the attribute until your user responds to the verification message and confirms the new value.

You can verify an updated email address or phone number with a [VerifyUserAttribute](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html) API request. You can also call the [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) API and set `email_verified` or `phone_number_verified` to true.

When `AttributesRequireVerificationBeforeUpdate` is false, your user pool doesn't require that your users verify attribute changes before Amazon Cognito updates them. In a user pool where `AttributesRequireVerificationBeforeUpdate` is false, API operations that change attribute values can immediately update a user’s `email` or `phone_number` attribute.

func (UserPoolUserAttributeUpdateSettingsOutput) ElementType added in v0.19.0 

func (UserPoolUserAttributeUpdateSettingsOutput) ElementType() reflect.Type

func (UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsOutput added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsOutput() UserPoolUserAttributeUpdateSettingsOutput

func (UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsOutputWithContext added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsOutputWithContext(ctx context.Context) UserPoolUserAttributeUpdateSettingsOutput

func (UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutput added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutput() UserPoolUserAttributeUpdateSettingsPtrOutput

func (UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext(ctx context.Context) UserPoolUserAttributeUpdateSettingsPtrOutput

type UserPoolUserAttributeUpdateSettingsPtrInput added in v0.19.0 

type UserPoolUserAttributeUpdateSettingsPtrInput interface {
	pulumi.Input

	ToUserPoolUserAttributeUpdateSettingsPtrOutput() UserPoolUserAttributeUpdateSettingsPtrOutput
	ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext(context.Context) UserPoolUserAttributeUpdateSettingsPtrOutput
}

UserPoolUserAttributeUpdateSettingsPtrInput is an input type that accepts UserPoolUserAttributeUpdateSettingsArgs, UserPoolUserAttributeUpdateSettingsPtr and UserPoolUserAttributeUpdateSettingsPtrOutput values. You can construct a concrete instance of `UserPoolUserAttributeUpdateSettingsPtrInput` via: 

        UserPoolUserAttributeUpdateSettingsArgs{...}

or:

        nil

func UserPoolUserAttributeUpdateSettingsPtr added in v0.19.0 

func UserPoolUserAttributeUpdateSettingsPtr(v *UserPoolUserAttributeUpdateSettingsArgs) UserPoolUserAttributeUpdateSettingsPtrInput

type UserPoolUserAttributeUpdateSettingsPtrOutput added in v0.19.0 

type UserPoolUserAttributeUpdateSettingsPtrOutput struct{ *pulumi.OutputState }

func (UserPoolUserAttributeUpdateSettingsPtrOutput) AttributesRequireVerificationBeforeUpdate added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsPtrOutput) AttributesRequireVerificationBeforeUpdate() pulumi.StringArrayOutput

Requires that your user verifies their email address, phone number, or both before Amazon Cognito updates the value of that attribute. When you update a user attribute that has this option activated, Amazon Cognito sends a verification message to the new phone number or email address. Amazon Cognito doesn’t change the value of the attribute until your user responds to the verification message and confirms the new value.

You can verify an updated email address or phone number with a [VerifyUserAttribute](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html) API request. You can also call the [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) API and set `email_verified` or `phone_number_verified` to true.

When `AttributesRequireVerificationBeforeUpdate` is false, your user pool doesn't require that your users verify attribute changes before Amazon Cognito updates them. In a user pool where `AttributesRequireVerificationBeforeUpdate` is false, API operations that change attribute values can immediately update a user’s `email` or `phone_number` attribute.

func (UserPoolUserAttributeUpdateSettingsPtrOutput) Elem added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsPtrOutput) Elem() UserPoolUserAttributeUpdateSettingsOutput

func (UserPoolUserAttributeUpdateSettingsPtrOutput) ElementType added in v0.19.0 

func (UserPoolUserAttributeUpdateSettingsPtrOutput) ElementType() reflect.Type

func (UserPoolUserAttributeUpdateSettingsPtrOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutput added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsPtrOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutput() UserPoolUserAttributeUpdateSettingsPtrOutput

func (UserPoolUserAttributeUpdateSettingsPtrOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext added in v0.19.0 

func (o UserPoolUserAttributeUpdateSettingsPtrOutput) ToUserPoolUserAttributeUpdateSettingsPtrOutputWithContext(ctx context.Context) UserPoolUserAttributeUpdateSettingsPtrOutput

type UserPoolUserInput 

type UserPoolUserInput interface {
	pulumi.Input

	ToUserPoolUserOutput() UserPoolUserOutput
	ToUserPoolUserOutputWithContext(ctx context.Context) UserPoolUserOutput
}

type UserPoolUserOutput 

type UserPoolUserOutput struct{ *pulumi.OutputState }

func (UserPoolUserOutput) ClientMetadata added in v0.17.0 

func (o UserPoolUserOutput) ClientMetadata() pulumi.StringMapOutput

A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.

You create custom workflows by assigning AWS Lambda functions to user pool triggers. When you use the AdminCreateUser API action, Amazon Cognito invokes the function that is assigned to the *pre sign-up* trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. This payload contains a `clientMetadata` attribute, which provides the data that you assigned to the ClientMetadata parameter in your AdminCreateUser request. In your function code in AWS Lambda , you can process the `clientMetadata` value to enhance your workflow for your specific needs.

For more information, see [Customizing user pool Workflows with Lambda Triggers](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools-working-with-aws-lambda-triggers.html) in the *Amazon Cognito Developer Guide* .

> When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following: > - Store the ClientMetadata value. This data is available only to AWS Lambda triggers that are assigned to a user pool to support custom workflows. If your user pool configuration doesn't include triggers, the ClientMetadata parameter serves no purpose. > - Validate the ClientMetadata value. > - Encrypt the ClientMetadata value. Don't use Amazon Cognito to provide sensitive information.

func (UserPoolUserOutput) DesiredDeliveryMediums added in v0.17.0 

func (o UserPoolUserOutput) DesiredDeliveryMediums() pulumi.StringArrayOutput

Specify `"EMAIL"` if email will be used to send the welcome message. Specify `"SMS"` if the phone number will be used. The default value is `"SMS"` . You can specify more than one value.

func (UserPoolUserOutput) ElementType 

func (UserPoolUserOutput) ElementType() reflect.Type

func (UserPoolUserOutput) ForceAliasCreation added in v0.17.0 

func (o UserPoolUserOutput) ForceAliasCreation() pulumi.BoolPtrOutput

This parameter is used only if the `phone_number_verified` or `email_verified` attribute is set to `True` . Otherwise, it is ignored.

If this parameter is set to `True` and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias.

If this parameter is set to `False` , the API throws an `AliasExistsException` error if the alias already exists. The default value is `False` .

func (UserPoolUserOutput) MessageAction added in v0.17.0 

func (o UserPoolUserOutput) MessageAction() pulumi.StringPtrOutput

Set to `RESEND` to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to `SUPPRESS` to suppress sending the message. You can specify only one value.

func (UserPoolUserOutput) ToUserPoolUserOutput 

func (o UserPoolUserOutput) ToUserPoolUserOutput() UserPoolUserOutput

func (UserPoolUserOutput) ToUserPoolUserOutputWithContext 

func (o UserPoolUserOutput) ToUserPoolUserOutputWithContext(ctx context.Context) UserPoolUserOutput

func (UserPoolUserOutput) UserAttributes added in v0.17.0 

func (o UserPoolUserOutput) UserAttributes() UserPoolUserAttributeTypeArrayOutput

An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than `Username` . However, any attributes that you specify as required (when creating a user pool or in the *Attributes* tab of the console) either you should supply (in your call to `AdminCreateUser` ) or the user should supply (when they sign up in response to your welcome message).

For custom attributes, you must prepend the `custom:` prefix to the attribute name.

To send a message inviting the user to sign up, you must specify the user's email address or phone number. You can do this in your call to AdminCreateUser or in the *Users* tab of the Amazon Cognito console for managing your user pools.

In your call to `AdminCreateUser` , you can set the `email_verified` attribute to `True` , and you can set the `phone_number_verified` attribute to `True` . You can also do this by calling [AdminUpdateUserAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html) .

- *email* : The email address of the user to whom the message that contains the code and username will be sent. Required if the `email_verified` attribute is set to `True` , or if `"EMAIL"` is specified in the `DesiredDeliveryMediums` parameter. - *phone_number* : The phone number of the user to whom the message that contains the code and username will be sent. Required if the `phone_number_verified` attribute is set to `True` , or if `"SMS"` is specified in the `DesiredDeliveryMediums` parameter.

func (UserPoolUserOutput) UserPoolId added in v0.17.0 

func (o UserPoolUserOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool where the user will be created.

func (UserPoolUserOutput) Username added in v0.17.0 

func (o UserPoolUserOutput) Username() pulumi.StringPtrOutput

The value that you want to set as the username sign-in attribute. The following conditions apply to the username parameter.

- The username can't be a duplicate of another username in the same user pool. - You can't change the value of a username after you create it. - You can only provide a value if usernames are a valid sign-in attribute for your user pool. If your user pool only supports phone numbers or email addresses as sign-in attributes, Amazon Cognito automatically generates a username value. For more information, see [Customizing sign-in attributes](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html#user-pool-settings-aliases) .

func (UserPoolUserOutput) ValidationData added in v0.17.0 

func (o UserPoolUserOutput) ValidationData() UserPoolUserAttributeTypeArrayOutput

Temporary user attributes that contribute to the outcomes of your pre sign-up Lambda trigger. This set of key-value pairs are for custom validation of information that you collect from your users but don't need to retain.

Your Lambda function can analyze this additional data and act on it. Your function might perform external API operations like logging user attributes and validation data to Amazon CloudWatch Logs. Validation data might also affect the response that your function returns to Amazon Cognito, like automatically confirming the user if they sign up from within your network.

For more information about the pre sign-up Lambda trigger, see [Pre sign-up Lambda trigger](https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-lambda-pre-sign-up.html) .

type UserPoolUserState 

type UserPoolUserState struct {
}

func (UserPoolUserState) ElementType 

func (UserPoolUserState) ElementType() reflect.Type

type UserPoolUserToGroupAttachment 

type UserPoolUserToGroupAttachment struct {
	pulumi.CustomResourceState

	// The name of the group that you want to add your user to.
	GroupName pulumi.StringOutput `pulumi:"groupName"`
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringOutput `pulumi:"userPoolId"`
	// The user's username.
	Username pulumi.StringOutput `pulumi:"username"`
}

Resource Type definition for AWS::Cognito::UserPoolUserToGroupAttachment

func GetUserPoolUserToGroupAttachment 

func GetUserPoolUserToGroupAttachment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *UserPoolUserToGroupAttachmentState, opts ...pulumi.ResourceOption) (*UserPoolUserToGroupAttachment, error)

GetUserPoolUserToGroupAttachment gets an existing UserPoolUserToGroupAttachment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewUserPoolUserToGroupAttachment 

func NewUserPoolUserToGroupAttachment(ctx *pulumi.Context,
	name string, args *UserPoolUserToGroupAttachmentArgs, opts ...pulumi.ResourceOption) (*UserPoolUserToGroupAttachment, error)

NewUserPoolUserToGroupAttachment registers a new resource with the given unique name, arguments, and options.

func (*UserPoolUserToGroupAttachment) ElementType 

func (*UserPoolUserToGroupAttachment) ElementType() reflect.Type

func (*UserPoolUserToGroupAttachment) ToUserPoolUserToGroupAttachmentOutput 

func (i *UserPoolUserToGroupAttachment) ToUserPoolUserToGroupAttachmentOutput() UserPoolUserToGroupAttachmentOutput

func (*UserPoolUserToGroupAttachment) ToUserPoolUserToGroupAttachmentOutputWithContext 

func (i *UserPoolUserToGroupAttachment) ToUserPoolUserToGroupAttachmentOutputWithContext(ctx context.Context) UserPoolUserToGroupAttachmentOutput

type UserPoolUserToGroupAttachmentArgs 

type UserPoolUserToGroupAttachmentArgs struct {
	// The name of the group that you want to add your user to.
	GroupName pulumi.StringInput
	// The user pool ID for the user pool.
	UserPoolId pulumi.StringInput
	// The user's username.
	Username pulumi.StringInput
}

The set of arguments for constructing a UserPoolUserToGroupAttachment resource.

func (UserPoolUserToGroupAttachmentArgs) ElementType 

func (UserPoolUserToGroupAttachmentArgs) ElementType() reflect.Type

type UserPoolUserToGroupAttachmentInput 

type UserPoolUserToGroupAttachmentInput interface {
	pulumi.Input

	ToUserPoolUserToGroupAttachmentOutput() UserPoolUserToGroupAttachmentOutput
	ToUserPoolUserToGroupAttachmentOutputWithContext(ctx context.Context) UserPoolUserToGroupAttachmentOutput
}

type UserPoolUserToGroupAttachmentOutput 

type UserPoolUserToGroupAttachmentOutput struct{ *pulumi.OutputState }

func (UserPoolUserToGroupAttachmentOutput) ElementType 

func (UserPoolUserToGroupAttachmentOutput) ElementType() reflect.Type

func (UserPoolUserToGroupAttachmentOutput) GroupName added in v0.17.0 

func (o UserPoolUserToGroupAttachmentOutput) GroupName() pulumi.StringOutput

The name of the group that you want to add your user to.

func (UserPoolUserToGroupAttachmentOutput) ToUserPoolUserToGroupAttachmentOutput 

func (o UserPoolUserToGroupAttachmentOutput) ToUserPoolUserToGroupAttachmentOutput() UserPoolUserToGroupAttachmentOutput

func (UserPoolUserToGroupAttachmentOutput) ToUserPoolUserToGroupAttachmentOutputWithContext 

func (o UserPoolUserToGroupAttachmentOutput) ToUserPoolUserToGroupAttachmentOutputWithContext(ctx context.Context) UserPoolUserToGroupAttachmentOutput

func (UserPoolUserToGroupAttachmentOutput) UserPoolId added in v0.17.0 

func (o UserPoolUserToGroupAttachmentOutput) UserPoolId() pulumi.StringOutput

The user pool ID for the user pool.

func (UserPoolUserToGroupAttachmentOutput) Username added in v0.17.0 

func (o UserPoolUserToGroupAttachmentOutput) Username() pulumi.StringOutput

The user's username.

type UserPoolUserToGroupAttachmentState 

type UserPoolUserToGroupAttachmentState struct {
}

func (UserPoolUserToGroupAttachmentState) ElementType 

func (UserPoolUserToGroupAttachmentState) ElementType() reflect.Type

type UserPoolUsernameConfiguration 

type UserPoolUsernameConfiguration struct {
	// Specifies whether user name case sensitivity will be applied for all users in the user pool through Amazon Cognito APIs. For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name.
	//
	// Valid values include:
	//
	// - **true** - Enables case sensitivity for all username input. When this option is set to `true` , users must sign in using the exact capitalization of their given username, such as "UserName". This is the default value.
	// - **false** - Enables case insensitivity for all username input. For example, when this option is set to `false` , users can sign in using `username` , `USERNAME` , or `UserName` . This option also enables both `preferred_username` and `email` alias to be case insensitive, in addition to the `username` attribute.
	CaseSensitive *bool `pulumi:"caseSensitive"`
}

type UserPoolUsernameConfigurationArgs 

type UserPoolUsernameConfigurationArgs struct {
	// Specifies whether user name case sensitivity will be applied for all users in the user pool through Amazon Cognito APIs. For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name.
	//
	// Valid values include:
	//
	// - **true** - Enables case sensitivity for all username input. When this option is set to `true` , users must sign in using the exact capitalization of their given username, such as "UserName". This is the default value.
	// - **false** - Enables case insensitivity for all username input. For example, when this option is set to `false` , users can sign in using `username` , `USERNAME` , or `UserName` . This option also enables both `preferred_username` and `email` alias to be case insensitive, in addition to the `username` attribute.
	CaseSensitive pulumi.BoolPtrInput `pulumi:"caseSensitive"`
}

func (UserPoolUsernameConfigurationArgs) ElementType 

func (UserPoolUsernameConfigurationArgs) ElementType() reflect.Type

func (UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationOutput 

func (i UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationOutput() UserPoolUsernameConfigurationOutput

func (UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationOutputWithContext 

func (i UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationOutputWithContext(ctx context.Context) UserPoolUsernameConfigurationOutput

func (UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationPtrOutput 

func (i UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationPtrOutput() UserPoolUsernameConfigurationPtrOutput

func (UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationPtrOutputWithContext 

func (i UserPoolUsernameConfigurationArgs) ToUserPoolUsernameConfigurationPtrOutputWithContext(ctx context.Context) UserPoolUsernameConfigurationPtrOutput

type UserPoolUsernameConfigurationInput 

type UserPoolUsernameConfigurationInput interface {
	pulumi.Input

	ToUserPoolUsernameConfigurationOutput() UserPoolUsernameConfigurationOutput
	ToUserPoolUsernameConfigurationOutputWithContext(context.Context) UserPoolUsernameConfigurationOutput
}

UserPoolUsernameConfigurationInput is an input type that accepts UserPoolUsernameConfigurationArgs and UserPoolUsernameConfigurationOutput values. You can construct a concrete instance of `UserPoolUsernameConfigurationInput` via: 

UserPoolUsernameConfigurationArgs{...}

type UserPoolUsernameConfigurationOutput 

type UserPoolUsernameConfigurationOutput struct{ *pulumi.OutputState }

func (UserPoolUsernameConfigurationOutput) CaseSensitive 

func (o UserPoolUsernameConfigurationOutput) CaseSensitive() pulumi.BoolPtrOutput

Specifies whether user name case sensitivity will be applied for all users in the user pool through Amazon Cognito APIs. For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name.

Valid values include:

- **true** - Enables case sensitivity for all username input. When this option is set to `true` , users must sign in using the exact capitalization of their given username, such as "UserName". This is the default value. - **false** - Enables case insensitivity for all username input. For example, when this option is set to `false` , users can sign in using `username` , `USERNAME` , or `UserName` . This option also enables both `preferred_username` and `email` alias to be case insensitive, in addition to the `username` attribute.

func (UserPoolUsernameConfigurationOutput) ElementType 

func (UserPoolUsernameConfigurationOutput) ElementType() reflect.Type

func (UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationOutput 

func (o UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationOutput() UserPoolUsernameConfigurationOutput

func (UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationOutputWithContext 

func (o UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationOutputWithContext(ctx context.Context) UserPoolUsernameConfigurationOutput

func (UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationPtrOutput 

func (o UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationPtrOutput() UserPoolUsernameConfigurationPtrOutput

func (UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationPtrOutputWithContext 

func (o UserPoolUsernameConfigurationOutput) ToUserPoolUsernameConfigurationPtrOutputWithContext(ctx context.Context) UserPoolUsernameConfigurationPtrOutput

type UserPoolUsernameConfigurationPtrInput 

type UserPoolUsernameConfigurationPtrInput interface {
	pulumi.Input

	ToUserPoolUsernameConfigurationPtrOutput() UserPoolUsernameConfigurationPtrOutput
	ToUserPoolUsernameConfigurationPtrOutputWithContext(context.Context) UserPoolUsernameConfigurationPtrOutput
}

UserPoolUsernameConfigurationPtrInput is an input type that accepts UserPoolUsernameConfigurationArgs, UserPoolUsernameConfigurationPtr and UserPoolUsernameConfigurationPtrOutput values. You can construct a concrete instance of `UserPoolUsernameConfigurationPtrInput` via: 

        UserPoolUsernameConfigurationArgs{...}

or:

        nil

func UserPoolUsernameConfigurationPtr 

func UserPoolUsernameConfigurationPtr(v *UserPoolUsernameConfigurationArgs) UserPoolUsernameConfigurationPtrInput

type UserPoolUsernameConfigurationPtrOutput 

type UserPoolUsernameConfigurationPtrOutput struct{ *pulumi.OutputState }

func (UserPoolUsernameConfigurationPtrOutput) CaseSensitive 

func (o UserPoolUsernameConfigurationPtrOutput) CaseSensitive() pulumi.BoolPtrOutput

Specifies whether user name case sensitivity will be applied for all users in the user pool through Amazon Cognito APIs. For most use cases, set case sensitivity to `False` (case insensitive) as a best practice. When usernames and email addresses are case insensitive, users can sign in as the same user when they enter a different capitalization of their user name.

Valid values include:

- **true** - Enables case sensitivity for all username input. When this option is set to `true` , users must sign in using the exact capitalization of their given username, such as "UserName". This is the default value. - **false** - Enables case insensitivity for all username input. For example, when this option is set to `false` , users can sign in using `username` , `USERNAME` , or `UserName` . This option also enables both `preferred_username` and `email` alias to be case insensitive, in addition to the `username` attribute.

func (UserPoolUsernameConfigurationPtrOutput) Elem 

func (o UserPoolUsernameConfigurationPtrOutput) Elem() UserPoolUsernameConfigurationOutput

func (UserPoolUsernameConfigurationPtrOutput) ElementType 

func (UserPoolUsernameConfigurationPtrOutput) ElementType() reflect.Type

func (UserPoolUsernameConfigurationPtrOutput) ToUserPoolUsernameConfigurationPtrOutput 

func (o UserPoolUsernameConfigurationPtrOutput) ToUserPoolUsernameConfigurationPtrOutput() UserPoolUsernameConfigurationPtrOutput

func (UserPoolUsernameConfigurationPtrOutput) ToUserPoolUsernameConfigurationPtrOutputWithContext 

func (o UserPoolUsernameConfigurationPtrOutput) ToUserPoolUsernameConfigurationPtrOutputWithContext(ctx context.Context) UserPoolUsernameConfigurationPtrOutput

type UserPoolVerificationMessageTemplate 

type UserPoolVerificationMessageTemplate struct {
	// The configuration of verification emails to contain a clickable link or a verification code.
	//
	// For link, your template body must contain link text in the format `{##Click here##}` . "Click here" in the example is a customizable string. For code, your template body must contain a code placeholder in the format `{####}` .
	DefaultEmailOption *string `pulumi:"defaultEmailOption"`
	// The template for email messages that Amazon Cognito sends to your users. You can set an `EmailMessage` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailMessage *string `pulumi:"emailMessage"`
	// The email message template for sending a confirmation link to the user. You can set an `EmailMessageByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailMessageByLink *string `pulumi:"emailMessageByLink"`
	// The subject line for the email message template. You can set an `EmailSubject` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailSubject *string `pulumi:"emailSubject"`
	// The subject line for the email message template for sending a confirmation link to the user. You can set an `EmailSubjectByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailSubjectByLink *string `pulumi:"emailSubjectByLink"`
	// The template for SMS messages that Amazon Cognito sends to your users.
	SmsMessage *string `pulumi:"smsMessage"`
}

type UserPoolVerificationMessageTemplateArgs 

type UserPoolVerificationMessageTemplateArgs struct {
	// The configuration of verification emails to contain a clickable link or a verification code.
	//
	// For link, your template body must contain link text in the format `{##Click here##}` . "Click here" in the example is a customizable string. For code, your template body must contain a code placeholder in the format `{####}` .
	DefaultEmailOption pulumi.StringPtrInput `pulumi:"defaultEmailOption"`
	// The template for email messages that Amazon Cognito sends to your users. You can set an `EmailMessage` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailMessage pulumi.StringPtrInput `pulumi:"emailMessage"`
	// The email message template for sending a confirmation link to the user. You can set an `EmailMessageByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailMessageByLink pulumi.StringPtrInput `pulumi:"emailMessageByLink"`
	// The subject line for the email message template. You can set an `EmailSubject` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailSubject pulumi.StringPtrInput `pulumi:"emailSubject"`
	// The subject line for the email message template for sending a confirmation link to the user. You can set an `EmailSubjectByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.
	EmailSubjectByLink pulumi.StringPtrInput `pulumi:"emailSubjectByLink"`
	// The template for SMS messages that Amazon Cognito sends to your users.
	SmsMessage pulumi.StringPtrInput `pulumi:"smsMessage"`
}

func (UserPoolVerificationMessageTemplateArgs) ElementType 

func (UserPoolVerificationMessageTemplateArgs) ElementType() reflect.Type

func (UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplateOutput 

func (i UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplateOutput() UserPoolVerificationMessageTemplateOutput

func (UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplateOutputWithContext 

func (i UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplateOutputWithContext(ctx context.Context) UserPoolVerificationMessageTemplateOutput

func (UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplatePtrOutput 

func (i UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplatePtrOutput() UserPoolVerificationMessageTemplatePtrOutput

func (UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplatePtrOutputWithContext 

func (i UserPoolVerificationMessageTemplateArgs) ToUserPoolVerificationMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolVerificationMessageTemplatePtrOutput

type UserPoolVerificationMessageTemplateInput 

type UserPoolVerificationMessageTemplateInput interface {
	pulumi.Input

	ToUserPoolVerificationMessageTemplateOutput() UserPoolVerificationMessageTemplateOutput
	ToUserPoolVerificationMessageTemplateOutputWithContext(context.Context) UserPoolVerificationMessageTemplateOutput
}

UserPoolVerificationMessageTemplateInput is an input type that accepts UserPoolVerificationMessageTemplateArgs and UserPoolVerificationMessageTemplateOutput values. You can construct a concrete instance of `UserPoolVerificationMessageTemplateInput` via: 

UserPoolVerificationMessageTemplateArgs{...}

type UserPoolVerificationMessageTemplateOutput 

type UserPoolVerificationMessageTemplateOutput struct{ *pulumi.OutputState }

func (UserPoolVerificationMessageTemplateOutput) DefaultEmailOption 

func (o UserPoolVerificationMessageTemplateOutput) DefaultEmailOption() pulumi.StringPtrOutput

The configuration of verification emails to contain a clickable link or a verification code.

For link, your template body must contain link text in the format `{##Click here##}` . "Click here" in the example is a customizable string. For code, your template body must contain a code placeholder in the format `{####}` .

func (UserPoolVerificationMessageTemplateOutput) ElementType 

func (UserPoolVerificationMessageTemplateOutput) ElementType() reflect.Type

func (UserPoolVerificationMessageTemplateOutput) EmailMessage 

func (o UserPoolVerificationMessageTemplateOutput) EmailMessage() pulumi.StringPtrOutput

The template for email messages that Amazon Cognito sends to your users. You can set an `EmailMessage` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration. 

func (o UserPoolVerificationMessageTemplateOutput) EmailMessageByLink() pulumi.StringPtrOutput

The email message template for sending a confirmation link to the user. You can set an `EmailMessageByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.

func (UserPoolVerificationMessageTemplateOutput) EmailSubject 

func (o UserPoolVerificationMessageTemplateOutput) EmailSubject() pulumi.StringPtrOutput

The subject line for the email message template. You can set an `EmailSubject` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration. 

func (o UserPoolVerificationMessageTemplateOutput) EmailSubjectByLink() pulumi.StringPtrOutput

The subject line for the email message template for sending a confirmation link to the user. You can set an `EmailSubjectByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.

func (UserPoolVerificationMessageTemplateOutput) SmsMessage 

func (o UserPoolVerificationMessageTemplateOutput) SmsMessage() pulumi.StringPtrOutput

The template for SMS messages that Amazon Cognito sends to your users.

func (UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplateOutput 

func (o UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplateOutput() UserPoolVerificationMessageTemplateOutput

func (UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplateOutputWithContext 

func (o UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplateOutputWithContext(ctx context.Context) UserPoolVerificationMessageTemplateOutput

func (UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplatePtrOutput 

func (o UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplatePtrOutput() UserPoolVerificationMessageTemplatePtrOutput

func (UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplatePtrOutputWithContext 

func (o UserPoolVerificationMessageTemplateOutput) ToUserPoolVerificationMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolVerificationMessageTemplatePtrOutput

type UserPoolVerificationMessageTemplatePtrInput 

type UserPoolVerificationMessageTemplatePtrInput interface {
	pulumi.Input

	ToUserPoolVerificationMessageTemplatePtrOutput() UserPoolVerificationMessageTemplatePtrOutput
	ToUserPoolVerificationMessageTemplatePtrOutputWithContext(context.Context) UserPoolVerificationMessageTemplatePtrOutput
}

UserPoolVerificationMessageTemplatePtrInput is an input type that accepts UserPoolVerificationMessageTemplateArgs, UserPoolVerificationMessageTemplatePtr and UserPoolVerificationMessageTemplatePtrOutput values. You can construct a concrete instance of `UserPoolVerificationMessageTemplatePtrInput` via: 

        UserPoolVerificationMessageTemplateArgs{...}

or:

        nil

func UserPoolVerificationMessageTemplatePtr 

func UserPoolVerificationMessageTemplatePtr(v *UserPoolVerificationMessageTemplateArgs) UserPoolVerificationMessageTemplatePtrInput

type UserPoolVerificationMessageTemplatePtrOutput 

type UserPoolVerificationMessageTemplatePtrOutput struct{ *pulumi.OutputState }

func (UserPoolVerificationMessageTemplatePtrOutput) DefaultEmailOption 

func (o UserPoolVerificationMessageTemplatePtrOutput) DefaultEmailOption() pulumi.StringPtrOutput

The configuration of verification emails to contain a clickable link or a verification code.

For link, your template body must contain link text in the format `{##Click here##}` . "Click here" in the example is a customizable string. For code, your template body must contain a code placeholder in the format `{####}` .

func (UserPoolVerificationMessageTemplatePtrOutput) Elem 

func (o UserPoolVerificationMessageTemplatePtrOutput) Elem() UserPoolVerificationMessageTemplateOutput

func (UserPoolVerificationMessageTemplatePtrOutput) ElementType 

func (UserPoolVerificationMessageTemplatePtrOutput) ElementType() reflect.Type

func (UserPoolVerificationMessageTemplatePtrOutput) EmailMessage 

func (o UserPoolVerificationMessageTemplatePtrOutput) EmailMessage() pulumi.StringPtrOutput

The template for email messages that Amazon Cognito sends to your users. You can set an `EmailMessage` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration. 

func (o UserPoolVerificationMessageTemplatePtrOutput) EmailMessageByLink() pulumi.StringPtrOutput

The email message template for sending a confirmation link to the user. You can set an `EmailMessageByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.

func (UserPoolVerificationMessageTemplatePtrOutput) EmailSubject 

func (o UserPoolVerificationMessageTemplatePtrOutput) EmailSubject() pulumi.StringPtrOutput

The subject line for the email message template. You can set an `EmailSubject` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration. 

func (o UserPoolVerificationMessageTemplatePtrOutput) EmailSubjectByLink() pulumi.StringPtrOutput

The subject line for the email message template for sending a confirmation link to the user. You can set an `EmailSubjectByLink` template only if the value of [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` . When your [EmailSendingAccount](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_EmailConfigurationType.html#CognitoUserPools-Type-EmailConfigurationType-EmailSendingAccount) is `DEVELOPER` , your user pool sends email messages with your own Amazon SES configuration.

func (UserPoolVerificationMessageTemplatePtrOutput) SmsMessage 

func (o UserPoolVerificationMessageTemplatePtrOutput) SmsMessage() pulumi.StringPtrOutput

The template for SMS messages that Amazon Cognito sends to your users.

func (UserPoolVerificationMessageTemplatePtrOutput) ToUserPoolVerificationMessageTemplatePtrOutput 

func (o UserPoolVerificationMessageTemplatePtrOutput) ToUserPoolVerificationMessageTemplatePtrOutput() UserPoolVerificationMessageTemplatePtrOutput

func (UserPoolVerificationMessageTemplatePtrOutput) ToUserPoolVerificationMessageTemplatePtrOutputWithContext 

func (o UserPoolVerificationMessageTemplatePtrOutput) ToUserPoolVerificationMessageTemplatePtrOutputWithContext(ctx context.Context) UserPoolVerificationMessageTemplatePtrOutput

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.