Enum values for AccountTakeoverEventActionType.

Enum values for AccountTakeoverEventActionType.

Enum values for AccountTakeoverEventActionType.

Enum values for AccountTakeoverEventActionType.

Enum values for AdvancedSecurityEnabledModeType.

Enum values for AdvancedSecurityEnabledModeType.

Enum values for AdvancedSecurityModeType.

Enum values for AdvancedSecurityModeType.

Enum values for AdvancedSecurityModeType.

Enum values for AliasAttributeType.

Enum values for AliasAttributeType.

Enum values for AliasAttributeType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetCategoryType.

Enum values for AssetExtensionType.

Enum values for AssetExtensionType.

Enum values for AssetExtensionType.

Enum values for AssetExtensionType.

Enum values for AssetExtensionType.

Enum values for AttributeDataType.

Enum values for AttributeDataType.

Enum values for AttributeDataType.

Enum values for AttributeDataType.

Enum values for AuthFactorType.

Enum values for AuthFactorType.

Enum values for AuthFactorType.

Enum values for AuthFactorType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for AuthFlowType.

Enum values for ChallengeName.

Enum values for ChallengeName.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeNameType.

Enum values for ChallengeResponse.

Enum values for ChallengeResponse.

Enum values for ColorSchemeModeType.

Enum values for ColorSchemeModeType.

Enum values for ColorSchemeModeType.

Enum values for CompromisedCredentialsEventActionType.

Enum values for CompromisedCredentialsEventActionType.

Enum values for CustomEmailSenderLambdaVersionType.

Enum values for CustomSMSSenderLambdaVersionType.

Enum values for DefaultEmailOptionType.

Enum values for DefaultEmailOptionType.

Enum values for DeletionProtectionType.

Enum values for DeletionProtectionType.

Enum values for DeliveryMediumType.

Enum values for DeliveryMediumType.

Enum values for DeviceRememberedStatusType.

Enum values for DeviceRememberedStatusType.

Enum values for DomainStatusType.

Enum values for DomainStatusType.

Enum values for DomainStatusType.

Enum values for DomainStatusType.

Enum values for DomainStatusType.

Enum values for EmailSendingAccountType.

Enum values for EmailSendingAccountType.

Enum values for EventFilterType.

Enum values for EventFilterType.

Enum values for EventFilterType.

Enum values for EventResponseType.

Enum values for EventResponseType.

Enum values for EventResponseType.

Enum values for EventSourceName.

Enum values for EventSourceName.

Enum values for EventType.

Enum values for EventType.

Enum values for EventType.

Enum values for EventType.

Enum values for EventType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for ExplicitAuthFlowsType.

Enum values for FeedbackValueType.

Enum values for FeedbackValueType.

Enum values for IdentityProviderTypeType.

Enum values for IdentityProviderTypeType.

Enum values for IdentityProviderTypeType.

Enum values for IdentityProviderTypeType.

Enum values for IdentityProviderTypeType.

Enum values for IdentityProviderTypeType.

Enum values for LogLevel.

Enum values for LogLevel.

Enum values for MessageActionType.

Enum values for MessageActionType.

Enum values for OAuthFlowType.

Enum values for OAuthFlowType.

Enum values for OAuthFlowType.

Enum values for PreTokenGenerationLambdaVersionType.

Enum values for PreTokenGenerationLambdaVersionType.

Enum values for PreTokenGenerationLambdaVersionType.

Enum values for PreventUserExistenceErrorTypes.

Enum values for PreventUserExistenceErrorTypes.

Enum values for RecoveryOptionNameType.

Enum values for RecoveryOptionNameType.

Enum values for RecoveryOptionNameType.

Enum values for RiskDecisionType.

Enum values for RiskDecisionType.

Enum values for RiskDecisionType.

Enum values for RiskLevelType.

Enum values for RiskLevelType.

Enum values for RiskLevelType.

Enum values for StatusType.

Enum values for StatusType.

Enum values for TimeUnitsType.

Enum values for TimeUnitsType.

Enum values for TimeUnitsType.

Enum values for TimeUnitsType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UserImportJobStatusType.

Enum values for UsernameAttributeType.

Enum values for UsernameAttributeType.

Enum values for UserPoolMfaType.

Enum values for UserPoolMfaType.

Enum values for UserPoolMfaType.

Enum values for UserPoolTierType.

Enum values for UserPoolTierType.

Enum values for UserPoolTierType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserStatusType.

Enum values for UserVerificationType.

Enum values for UserVerificationType.

Enum values for VerifiedAttributeType.

Enum values for VerifiedAttributeType.

Enum values for VerifySoftwareTokenResponseType.

Enum values for VerifySoftwareTokenResponseType.

The settings for user message delivery in forgot-password operations.

A list of account-takeover actions for each level of risk that Amazon Cognito might assess with threat protection features.

The automated response to a risk level for adaptive authentication in full-function, or ENFORCED , mode.

The settings for automated responses and notification templates for adaptive authentication with threat protection features.

The settings for administrator creation of users in a user pool.

Threat protection configuration options for additional authentication types in your user pool, including custom authentication.

This exception is thrown when a user tries to confirm the account with an email address or phone number that has already been supplied as an alias for a different user profile.

The settings for Amazon Pinpoint analytics configuration.

Information that your application adds to authentication requests.

An image file from a managed login branding style in a user pool.

The name and value of a user attribute.

The object that your application receives after authentication.

One authentication event that Amazon Cognito logged in a user pool with threat protection active.

The responses to the challenge that you received in the previous request.

Configuration for the CloudWatch log group destination of user pool detailed activity logging, or of user activity log export with threat protection.

The delivery details for an email or SMS message that Amazon Cognito sent for authentication or verification.

This exception is thrown when a verification code fails to deliver successfully.

This exception is thrown if the provided code doesn't match what the server was expecting.

Settings for user pool actions when Amazon Cognito detects compromised credentials with threat protection in full-function ENFORCED mode.

Settings for compromised-credentials actions and authentication-event sources with threat protection in full-function ENFORCED mode.

This exception is thrown if two or more modifications are happening concurrently.

Contextual user data used for evaluating the risk of an authentication event by user pool threat protection.

The configuration for a hosted UI custom domain.

The properties of a custom email sender Lambda trigger.

The properties of a custom SMS sender Lambda trigger.

The device-remembering configuration for a user pool.

This exception is thrown when a user attempts to confirm a device with a device key that already exists.

A Secure Remote Password (SRP) value that your application generates when you register a user's device.

Information about a user's device that they've registered for device SRP authentication in your application.

A container for information about the user pool domain associated with the hosted UI and OAuth endpoints.

This exception is thrown when the provider is already supported by the user pool.

The email configuration of your user pool.

Sets or shows configuration for user pool email message MFA and sign-in with one-time passwords (OTPs).

User preferences for multi-factor authentication with email messages.

This exception is thrown when there is a code mismatch and the service fails to configure the software token TOTP multi-factor authentication (MFA).

The context data that your application submitted in an authentication request with threat protection, as displayed in an AdminListUserAuthEvents response.

The feedback that your application submitted to a threat protection event log, as displayed in an AdminListUserAuthEvents response.

The risk evaluation by adaptive authentication, as displayed in an AdminListUserAuthEvents response.

This exception is thrown if a code has expired.

This exception is thrown when a feature you attempted to configure isn't available in your current feature plan.

Configuration for the Amazon Data Firehose stream destination of user activity log export with threat protection.

This exception is thrown when WAF doesn't allow your request based on a web ACL that's associated with your user pool.

This exception is thrown when Amazon Cognito encounters a group that already exists in the user pool.

A user pool group.

The HTTP header in the ContextData parameter.

A user pool identity provider (IdP).

This exception is thrown when Amazon Cognito encounters an internal error.

This exception is thrown when Amazon Cognito isn't allowed to use your email identity.

This exception is thrown when Amazon Cognito encounters an invalid Lambda response.

This exception is thrown when the specified OAuth flow is not valid.

This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

This exception is thrown when Amazon Cognito encounters an invalid password.

This exception is returned when the role provided for SMS configuration doesn't have permission to publish using Amazon SNS.

This exception is thrown when the trust relationship is not valid for the role provided for SMS configuration.

This exception is thrown when the user pool configuration is not valid.

A collection of user pool Lambda triggers.

This exception is thrown when a user exceeds the limit for a requested Amazon Web Services resource.

The configuration of user event logs to an external Amazon Web Services service like Amazon Data Firehose, Amazon S3, or Amazon CloudWatch Logs.

The logging parameters of a user pool, as returned in the response to a GetLogDeliveryConfiguration request.

This exception is thrown when you attempt to apply a managed login branding style to an app client that already has an assigned style.

A managed login branding style that's assigned to a user pool app client.

The message template structure.

This exception is thrown when Amazon Cognito can't find a multi-factor authentication (MFA) method.

This data type is no longer supported.

Information that your user pool responds with in AuthenticationResult when you configure it to remember devices and a user signs in with an unrecognized device.

This exception is thrown when a user isn't authorized.

The configuration for Amazon SES email messages that threat protection sends to a user when your adaptive authentication automated response has a Notify action.

The template for email messages that threat protection sends to a user when your threat protection automated response has a Notify action.

The minimum and maximum values of an attribute that is of the number type, for example custom:age .

The message returned when a user's new password matches a previous password and doesn't comply with the password-history policy.

The password policy settings for a user pool, including complexity, history, and length requirements.

This exception is thrown when a password reset is required.

This exception is thrown when a precondition is not met.

The properties of a pre token generation Lambda trigger.

The details of a user pool identity provider (IdP), including name and type.

The characteristics of a source or destination user for linking a federated user profile to a local user profile.

A recovery option for a user.

This exception is thrown when the Amazon Cognito service can't find the requested resource.

One custom scope associated with a user pool resource server.

The details of a resource server configuration and associated custom scopes in a user pool.

The settings of risk configuration for threat protection with threat protection in a user pool.

Exceptions to the risk evaluation configuration, including always-allow and always-block IP address ranges.

Configuration for the Amazon S3 bucket destination of user activity log export with threat protection.

A list of the user attributes and their properties in your user pool.

This exception is thrown when the specified scope doesn't exist.

The policy for allowed types of authentication in a user pool.

User pool configuration for delivery of SMS messages with Amazon Simple Notification Service.

The configuration of multi-factor authentication (MFA) with SMS messages in a user pool.

A user's preference for using SMS message multi-factor authentication (MFA).

Settings for time-based one-time password (TOTP) multi-factor authentication (MFA) in a user pool.

This exception is thrown when the software token time-based one-time password (TOTP) multi-factor authentication (MFA) isn't activated for the user pool.

A user's preference for using time-based one-time password (TOTP) multi-factor authentication (MFA).

The minimum and maximum length values of an attribute that is of the string type, for example custom:department .

This exception is thrown when you've attempted to change your feature plan but the operation isn't permitted.

The time units that, with IdTokenValidity , AccessTokenValidity , and RefreshTokenValidity , set and display the duration of ID, access, and refresh tokens for an app client.

This exception is thrown when the user has made too many failed attempts for a given action, such as sign-in.

This exception is thrown when the user has made too many requests for a given operation.

A container for the UI customization information for the hosted UI in a user pool.

Exception that is thrown when the request isn't authorized.

This exception is thrown when Amazon Cognito encounters an unexpected exception with Lambda.

This exception is thrown when the specified identifier isn't supported.

Exception that is thrown when you attempt to perform an operation that isn't enabled for the user pool client.

Exception that is thrown when an unsupported token is passed to an operation.

The request failed because the user is in an unsupported state.

The settings for updates to user attributes.

Contextual data, such as the user's device fingerprint, IP address, or location, used for evaluating the risk of an unexpected event by Amazon Cognito threat protection.

This exception is thrown when you're trying to modify a user pool while a user import job is in progress for that pool.

A user import job in a user pool.

This exception is thrown when the Amazon Cognito service encounters a user validation exception with the Lambda service.

The configuration of a user pool for username case sensitivity.

This exception is thrown when Amazon Cognito encounters a user name that already exists in the user pool.

This exception is thrown when a user isn't confirmed successfully.

This exception is thrown when a user isn't found.

This exception is thrown when user pool add-ons aren't enabled.

Contains settings for activation of threat protection, including the operating mode and additional authentication types.

A short description of a user pool app client.

The configuration of a user pool client.

A short description of a user pool.

A list of user pool policies.

This exception is thrown when a user pool tag can't be set or updated.

The configuration of a user pool.

A user profile in a Amazon Cognito user pool.

The template for the verification message that your user pool delivers to users who set an email address or phone number attribute.

This exception is thrown when the challenge from StartWebAuthn registration has expired.

This exception is thrown when the access token is for a different client than the one in the original StartWebAuthnRegistration request.

This exception is thrown when a user pool doesn't have a configured relying party id or a user pool domain.

Settings for authentication (MFA) with passkey, or webauthN, biometric and security-key devices in a user pool.

The details of a passkey, or webauthN, biometric or security-key authentication factor for a user.

This exception is thrown when a user presents passkey credentials from an unsupported device or provider.

This exception is thrown when the passkey feature isn't enabled for the user pool.

This exception is thrown when the passkey credential's registration origin does not align with the user pool relying party id.

This exception is thrown when the given passkey credential is associated with a different relying party ID than the user pool relying party ID.