Amazon Cognito Identity Provider 2016-04-18

AddCustomAttributes

$result = $client->addCustomAttributes([/* ... */]);
$promise = $client->addCustomAttributesAsync([/* ... */]);

Parameter Syntax

$result = $client->addCustomAttributes([
    'CustomAttributes' => [ // REQUIRED
        [
            'AttributeDataType' => 'String|Number|DateTime|Boolean',
            'DeveloperOnlyAttribute' => true || false,
            'Mutable' => true || false,
            'Name' => '<string>',
            'NumberAttributeConstraints' => [
                'MaxValue' => '<string>',
                'MinValue' => '<string>',
            ],
            'Required' => true || false,
            'StringAttributeConstraints' => [
                'MaxLength' => '<string>',
                'MinLength' => '<string>',
            ],
        ],
        // ...
    ],
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserImportInProgressException:

  This exception is thrown when you are trying to modify a user pool while a user import job is in progress for that pool.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminAddUserToGroup

$result = $client->adminAddUserToGroup([/* ... */]);
$promise = $client->adminAddUserToGroupAsync([/* ... */]);

Parameter Syntax

$result = $client->adminAddUserToGroup([
    'GroupName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminConfirmSignUp

$result = $client->adminConfirmSignUp([/* ... */]);
$promise = $client->adminConfirmSignUpAsync([/* ... */]);

Parameter Syntax

$result = $client->adminConfirmSignUp([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyFailedAttemptsException:

  This exception is thrown when the user has made too many failed attempts for a given action (e.g., sign in).

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminCreateUser

$result = $client->adminCreateUser([/* ... */]);
$promise = $client->adminCreateUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminCreateUser([
    'DesiredDeliveryMediums' => ['<string>', ...],
    'ForceAliasCreation' => true || false,
    'MessageAction' => 'RESEND|SUPPRESS',
    'TemporaryPassword' => '<string>',
    'UserAttributes' => [
        [
            'Name' => '<string>', // REQUIRED
            'Value' => '<string>',
        ],
        // ...
    ],
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
    'ValidationData' => [
        [
            'Name' => '<string>', // REQUIRED
            'Value' => '<string>',
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'User' => [
        'Attributes' => [
            [
                'Name' => '<string>',
                'Value' => '<string>',
            ],
            // ...
        ],
        'Enabled' => true || false,
        'MFAOptions' => [
            [
                'AttributeName' => '<string>',
                'DeliveryMedium' => 'SMS|EMAIL',
            ],
            // ...
        ],
        'UserCreateDate' => <DateTime>,
        'UserLastModifiedDate' => <DateTime>,
        'UserStatus' => 'UNCONFIRMED|CONFIRMED|ARCHIVED|COMPROMISED|UNKNOWN|RESET_REQUIRED|FORCE_CHANGE_PASSWORD',
        'Username' => '<string>',
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UsernameExistsException:

  This exception is thrown when Amazon Cognito encounters a user name that already exists in the user pool.

• InvalidPasswordException:

  This exception is thrown when the Amazon Cognito service encounters an invalid password.

• CodeDeliveryFailureException:

  This exception is thrown when a verification code fails to deliver successfully.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• PreconditionNotMetException:

  This exception is thrown when a precondition is not met.

• InvalidSmsRoleAccessPolicyException:

  This exception is returned when the role provided for SMS configuration does not have permission to publish using Amazon SNS.

• InvalidSmsRoleTrustRelationshipException:

  This exception is thrown when the trust relationship is invalid for the role provided for SMS configuration. This can happen if you do not trust cognito-idp.amazonaws.com or the external ID provided in the role does not match what is provided in the SMS configuration for the user pool.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UnsupportedUserStateException:

  The request failed because the user is in an unsupported state.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminDeleteUser

$result = $client->adminDeleteUser([/* ... */]);
$promise = $client->adminDeleteUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminDeleteUser([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminDeleteUserAttributes

$result = $client->adminDeleteUserAttributes([/* ... */]);
$promise = $client->adminDeleteUserAttributesAsync([/* ... */]);

Parameter Syntax

$result = $client->adminDeleteUserAttributes([
    'UserAttributeNames' => ['<string>', ...], // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminDisableProviderForUser

$result = $client->adminDisableProviderForUser([/* ... */]);
$promise = $client->adminDisableProviderForUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminDisableProviderForUser([
    'User' => [ // REQUIRED
        'ProviderAttributeName' => '<string>',
        'ProviderAttributeValue' => '<string>',
        'ProviderName' => '<string>',
    ],
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• AliasExistsException:

  This exception is thrown when a user tries to confirm the account with an email or phone number that has already been supplied as an alias from a different account. This exception tells user that an account with this email or phone already exists.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminDisableUser

$result = $client->adminDisableUser([/* ... */]);
$promise = $client->adminDisableUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminDisableUser([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminEnableUser

$result = $client->adminEnableUser([/* ... */]);
$promise = $client->adminEnableUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminEnableUser([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminForgetDevice

$result = $client->adminForgetDevice([/* ... */]);
$promise = $client->adminForgetDeviceAsync([/* ... */]);

Parameter Syntax

$result = $client->adminForgetDevice([
    'DeviceKey' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminGetDevice

$result = $client->adminGetDevice([/* ... */]);
$promise = $client->adminGetDeviceAsync([/* ... */]);

Parameter Syntax

$result = $client->adminGetDevice([
    'DeviceKey' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Device' => [
        'DeviceAttributes' => [
            [
                'Name' => '<string>',
                'Value' => '<string>',
            ],
            // ...
        ],
        'DeviceCreateDate' => <DateTime>,
        'DeviceKey' => '<string>',
        'DeviceLastAuthenticatedDate' => <DateTime>,
        'DeviceLastModifiedDate' => <DateTime>,
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

AdminGetUser

$result = $client->adminGetUser([/* ... */]);
$promise = $client->adminGetUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminGetUser([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Enabled' => true || false,
    'MFAOptions' => [
        [
            'AttributeName' => '<string>',
            'DeliveryMedium' => 'SMS|EMAIL',
        ],
        // ...
    ],
    'PreferredMfaSetting' => '<string>',
    'UserAttributes' => [
        [
            'Name' => '<string>',
            'Value' => '<string>',
        ],
        // ...
    ],
    'UserCreateDate' => <DateTime>,
    'UserLastModifiedDate' => <DateTime>,
    'UserMFASettingList' => ['<string>', ...],
    'UserStatus' => 'UNCONFIRMED|CONFIRMED|ARCHIVED|COMPROMISED|UNKNOWN|RESET_REQUIRED|FORCE_CHANGE_PASSWORD',
    'Username' => '<string>',
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminInitiateAuth

$result = $client->adminInitiateAuth([/* ... */]);
$promise = $client->adminInitiateAuthAsync([/* ... */]);

Parameter Syntax

$result = $client->adminInitiateAuth([
    'AnalyticsMetadata' => [
        'AnalyticsEndpointId' => '<string>',
    ],
    'AuthFlow' => 'USER_SRP_AUTH|REFRESH_TOKEN_AUTH|REFRESH_TOKEN|CUSTOM_AUTH|ADMIN_NO_SRP_AUTH|USER_PASSWORD_AUTH', // REQUIRED
    'AuthParameters' => ['<string>', ...],
    'ClientId' => '<string>', // REQUIRED
    'ClientMetadata' => ['<string>', ...],
    'ContextData' => [
        'EncodedData' => '<string>',
        'HttpHeaders' => [ // REQUIRED
            [
                'headerName' => '<string>',
                'headerValue' => '<string>',
            ],
            // ...
        ],
        'IpAddress' => '<string>', // REQUIRED
        'ServerName' => '<string>', // REQUIRED
        'ServerPath' => '<string>', // REQUIRED
    ],
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'AuthenticationResult' => [
        'AccessToken' => '<string>',
        'ExpiresIn' => <integer>,
        'IdToken' => '<string>',
        'NewDeviceMetadata' => [
            'DeviceGroupKey' => '<string>',
            'DeviceKey' => '<string>',
        ],
        'RefreshToken' => '<string>',
        'TokenType' => '<string>',
    ],
    'ChallengeName' => 'SMS_MFA|SOFTWARE_TOKEN_MFA|SELECT_MFA_TYPE|MFA_SETUP|PASSWORD_VERIFIER|CUSTOM_CHALLENGE|DEVICE_SRP_AUTH|DEVICE_PASSWORD_VERIFIER|ADMIN_NO_SRP_AUTH|NEW_PASSWORD_REQUIRED',
    'ChallengeParameters' => ['<string>', ...],
    'Session' => '<string>',
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• MFAMethodNotFoundException:

  This exception is thrown when Amazon Cognito cannot find a multi-factor authentication (MFA) method.

• InvalidSmsRoleAccessPolicyException:

  This exception is returned when the role provided for SMS configuration does not have permission to publish using Amazon SNS.

• InvalidSmsRoleTrustRelationshipException:

  This exception is thrown when the trust relationship is invalid for the role provided for SMS configuration. This can happen if you do not trust cognito-idp.amazonaws.com or the external ID provided in the role does not match what is provided in the SMS configuration for the user pool.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

AdminLinkProviderForUser

$result = $client->adminLinkProviderForUser([/* ... */]);
$promise = $client->adminLinkProviderForUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminLinkProviderForUser([
    'DestinationUser' => [ // REQUIRED
        'ProviderAttributeName' => '<string>',
        'ProviderAttributeValue' => '<string>',
        'ProviderName' => '<string>',
    ],
    'SourceUser' => [ // REQUIRED
        'ProviderAttributeName' => '<string>',
        'ProviderAttributeValue' => '<string>',
        'ProviderName' => '<string>',
    ],
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• AliasExistsException:

  This exception is thrown when a user tries to confirm the account with an email or phone number that has already been supplied as an alias from a different account. This exception tells user that an account with this email or phone already exists.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminListDevices

$result = $client->adminListDevices([/* ... */]);
$promise = $client->adminListDevicesAsync([/* ... */]);

Parameter Syntax

$result = $client->adminListDevices([
    'Limit' => <integer>,
    'PaginationToken' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Devices' => [
        [
            'DeviceAttributes' => [
                [
                    'Name' => '<string>',
                    'Value' => '<string>',
                ],
                // ...
            ],
            'DeviceCreateDate' => <DateTime>,
            'DeviceKey' => '<string>',
            'DeviceLastAuthenticatedDate' => <DateTime>,
            'DeviceLastModifiedDate' => <DateTime>,
        ],
        // ...
    ],
    'PaginationToken' => '<string>',
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

AdminListGroupsForUser

$result = $client->adminListGroupsForUser([/* ... */]);
$promise = $client->adminListGroupsForUserAsync([/* ... */]);

Parameter Syntax

$result = $client->adminListGroupsForUser([
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Groups' => [
        [
            'CreationDate' => <DateTime>,
            'Description' => '<string>',
            'GroupName' => '<string>',
            'LastModifiedDate' => <DateTime>,
            'Precedence' => <integer>,
            'RoleArn' => '<string>',
            'UserPoolId' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminListUserAuthEvents

$result = $client->adminListUserAuthEvents([/* ... */]);
$promise = $client->adminListUserAuthEventsAsync([/* ... */]);

Parameter Syntax

$result = $client->adminListUserAuthEvents([
    'MaxResults' => <integer>,
    'NextToken' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'AuthEvents' => [
        [
            'ChallengeResponses' => [
                [
                    'ChallengeName' => 'Password|Mfa',
                    'ChallengeResponse' => 'Success|Failure',
                ],
                // ...
            ],
            'CreationDate' => <DateTime>,
            'EventContextData' => [
                'City' => '<string>',
                'Country' => '<string>',
                'DeviceName' => '<string>',
                'IpAddress' => '<string>',
                'Timezone' => '<string>',
            ],
            'EventFeedback' => [
                'FeedbackDate' => <DateTime>,
                'FeedbackValue' => 'Valid|Invalid',
                'Provider' => '<string>',
            ],
            'EventId' => '<string>',
            'EventResponse' => 'Success|Failure',
            'EventRisk' => [
                'RiskDecision' => 'NoRisk|AccountTakeover|Block',
                'RiskLevel' => 'Low|Medium|High',
            ],
            'EventType' => 'SignIn|SignUp|ForgotPassword',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserPoolAddOnNotEnabledException:

  This exception is thrown when user pool add-ons are not enabled.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminRemoveUserFromGroup

$result = $client->adminRemoveUserFromGroup([/* ... */]);
$promise = $client->adminRemoveUserFromGroupAsync([/* ... */]);

Parameter Syntax

$result = $client->adminRemoveUserFromGroup([
    'GroupName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminResetUserPassword

$result = $client->adminResetUserPassword([/* ... */]);
$promise = $client->adminResetUserPasswordAsync([/* ... */]);

Parameter Syntax

$result = $client->adminResetUserPassword([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InvalidSmsRoleAccessPolicyException:

  This exception is returned when the role provided for SMS configuration does not have permission to publish using Amazon SNS.

• InvalidEmailRoleAccessPolicyException:

  This exception is thrown when Amazon Cognito is not allowed to use your email identity. HTTP status code: 400.

• InvalidSmsRoleTrustRelationshipException:

  This exception is thrown when the trust relationship is invalid for the role provided for SMS configuration. This can happen if you do not trust cognito-idp.amazonaws.com or the external ID provided in the role does not match what is provided in the SMS configuration for the user pool.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminRespondToAuthChallenge

$result = $client->adminRespondToAuthChallenge([/* ... */]);
$promise = $client->adminRespondToAuthChallengeAsync([/* ... */]);

Parameter Syntax

$result = $client->adminRespondToAuthChallenge([
    'AnalyticsMetadata' => [
        'AnalyticsEndpointId' => '<string>',
    ],
    'ChallengeName' => 'SMS_MFA|SOFTWARE_TOKEN_MFA|SELECT_MFA_TYPE|MFA_SETUP|PASSWORD_VERIFIER|CUSTOM_CHALLENGE|DEVICE_SRP_AUTH|DEVICE_PASSWORD_VERIFIER|ADMIN_NO_SRP_AUTH|NEW_PASSWORD_REQUIRED', // REQUIRED
    'ChallengeResponses' => ['<string>', ...],
    'ClientId' => '<string>', // REQUIRED
    'ContextData' => [
        'EncodedData' => '<string>',
        'HttpHeaders' => [ // REQUIRED
            [
                'headerName' => '<string>',
                'headerValue' => '<string>',
            ],
            // ...
        ],
        'IpAddress' => '<string>', // REQUIRED
        'ServerName' => '<string>', // REQUIRED
        'ServerPath' => '<string>', // REQUIRED
    ],
    'Session' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'AuthenticationResult' => [
        'AccessToken' => '<string>',
        'ExpiresIn' => <integer>,
        'IdToken' => '<string>',
        'NewDeviceMetadata' => [
            'DeviceGroupKey' => '<string>',
            'DeviceKey' => '<string>',
        ],
        'RefreshToken' => '<string>',
        'TokenType' => '<string>',
    ],
    'ChallengeName' => 'SMS_MFA|SOFTWARE_TOKEN_MFA|SELECT_MFA_TYPE|MFA_SETUP|PASSWORD_VERIFIER|CUSTOM_CHALLENGE|DEVICE_SRP_AUTH|DEVICE_PASSWORD_VERIFIER|ADMIN_NO_SRP_AUTH|NEW_PASSWORD_REQUIRED',
    'ChallengeParameters' => ['<string>', ...],
    'Session' => '<string>',
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• CodeMismatchException:

  This exception is thrown if the provided code does not match what the server was expecting.

• ExpiredCodeException:

  This exception is thrown if a code has expired.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• InvalidPasswordException:

  This exception is thrown when the Amazon Cognito service encounters an invalid password.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

• MFAMethodNotFoundException:

  This exception is thrown when Amazon Cognito cannot find a multi-factor authentication (MFA) method.

• InvalidSmsRoleAccessPolicyException:

  This exception is returned when the role provided for SMS configuration does not have permission to publish using Amazon SNS.

• InvalidSmsRoleTrustRelationshipException:

  This exception is thrown when the trust relationship is invalid for the role provided for SMS configuration. This can happen if you do not trust cognito-idp.amazonaws.com or the external ID provided in the role does not match what is provided in the SMS configuration for the user pool.

• AliasExistsException:

  This exception is thrown when a user tries to confirm the account with an email or phone number that has already been supplied as an alias from a different account. This exception tells user that an account with this email or phone already exists.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• SoftwareTokenMFANotFoundException:

  This exception is thrown when the software token TOTP multi-factor authentication (MFA) is not enabled for the user pool.

AdminSetUserMFAPreference

$result = $client->adminSetUserMFAPreference([/* ... */]);
$promise = $client->adminSetUserMFAPreferenceAsync([/* ... */]);

Parameter Syntax

$result = $client->adminSetUserMFAPreference([
    'SMSMfaSettings' => [
        'Enabled' => true || false,
        'PreferredMfa' => true || false,
    ],
    'SoftwareTokenMfaSettings' => [
        'Enabled' => true || false,
        'PreferredMfa' => true || false,
    ],
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminSetUserSettings

$result = $client->adminSetUserSettings([/* ... */]);
$promise = $client->adminSetUserSettingsAsync([/* ... */]);

Parameter Syntax

$result = $client->adminSetUserSettings([
    'MFAOptions' => [ // REQUIRED
        [
            'AttributeName' => '<string>',
            'DeliveryMedium' => 'SMS|EMAIL',
        ],
        // ...
    ],
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminUpdateAuthEventFeedback

$result = $client->adminUpdateAuthEventFeedback([/* ... */]);
$promise = $client->adminUpdateAuthEventFeedbackAsync([/* ... */]);

Parameter Syntax

$result = $client->adminUpdateAuthEventFeedback([
    'EventId' => '<string>', // REQUIRED
    'FeedbackValue' => 'Valid|Invalid', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserPoolAddOnNotEnabledException:

  This exception is thrown when user pool add-ons are not enabled.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminUpdateDeviceStatus

$result = $client->adminUpdateDeviceStatus([/* ... */]);
$promise = $client->adminUpdateDeviceStatusAsync([/* ... */]);

Parameter Syntax

$result = $client->adminUpdateDeviceStatus([
    'DeviceKey' => '<string>', // REQUIRED
    'DeviceRememberedStatus' => 'remembered|not_remembered',
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminUpdateUserAttributes

$result = $client->adminUpdateUserAttributes([/* ... */]);
$promise = $client->adminUpdateUserAttributesAsync([/* ... */]);

Parameter Syntax

$result = $client->adminUpdateUserAttributes([
    'UserAttributes' => [ // REQUIRED
        [
            'Name' => '<string>', // REQUIRED
            'Value' => '<string>',
        ],
        // ...
    ],
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• AliasExistsException:

  This exception is thrown when a user tries to confirm the account with an email or phone number that has already been supplied as an alias from a different account. This exception tells user that an account with this email or phone already exists.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AdminUserGlobalSignOut

$result = $client->adminUserGlobalSignOut([/* ... */]);
$promise = $client->adminUserGlobalSignOutAsync([/* ... */]);

Parameter Syntax

$result = $client->adminUserGlobalSignOut([
    'UserPoolId' => '<string>', // REQUIRED
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

AssociateSoftwareToken

$result = $client->associateSoftwareToken([/* ... */]);
$promise = $client->associateSoftwareTokenAsync([/* ... */]);

Parameter Syntax

$result = $client->associateSoftwareToken([
    'AccessToken' => '<string>',
    'Session' => '<string>',
]);

Parameter Details

Result Syntax

[
    'SecretCode' => '<string>',
    'Session' => '<string>',
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

• SoftwareTokenMFANotFoundException:

  This exception is thrown when the software token TOTP multi-factor authentication (MFA) is not enabled for the user pool.

ChangePassword

$result = $client->changePassword([/* ... */]);
$promise = $client->changePasswordAsync([/* ... */]);

Parameter Syntax

$result = $client->changePassword([
    'AccessToken' => '<string>', // REQUIRED
    'PreviousPassword' => '<string>', // REQUIRED
    'ProposedPassword' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• InvalidPasswordException:

  This exception is thrown when the Amazon Cognito service encounters an invalid password.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

ConfirmDevice

$result = $client->confirmDevice([/* ... */]);
$promise = $client->confirmDeviceAsync([/* ... */]);

Parameter Syntax

$result = $client->confirmDevice([
    'AccessToken' => '<string>', // REQUIRED
    'DeviceKey' => '<string>', // REQUIRED
    'DeviceName' => '<string>',
    'DeviceSecretVerifierConfig' => [
        'PasswordVerifier' => '<string>',
        'Salt' => '<string>',
    ],
]);

Parameter Details

Result Syntax

[
    'UserConfirmationNecessary' => true || false,
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InvalidPasswordException:

  This exception is thrown when the Amazon Cognito service encounters an invalid password.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• UsernameExistsException:

  This exception is thrown when Amazon Cognito encounters a user name that already exists in the user pool.

• InvalidUserPoolConfigurationException:

  This exception is thrown when the user pool configuration is invalid.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

ConfirmForgotPassword

$result = $client->confirmForgotPassword([/* ... */]);
$promise = $client->confirmForgotPasswordAsync([/* ... */]);

Parameter Syntax

$result = $client->confirmForgotPassword([
    'AnalyticsMetadata' => [
        'AnalyticsEndpointId' => '<string>',
    ],
    'ClientId' => '<string>', // REQUIRED
    'ConfirmationCode' => '<string>', // REQUIRED
    'Password' => '<string>', // REQUIRED
    'SecretHash' => '<string>',
    'UserContextData' => [
        'EncodedData' => '<string>',
    ],
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• InvalidPasswordException:

  This exception is thrown when the Amazon Cognito service encounters an invalid password.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• CodeMismatchException:

  This exception is thrown if the provided code does not match what the server was expecting.

• ExpiredCodeException:

  This exception is thrown if a code has expired.

• TooManyFailedAttemptsException:

  This exception is thrown when the user has made too many failed attempts for a given action (e.g., sign in).

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

ConfirmSignUp

$result = $client->confirmSignUp([/* ... */]);
$promise = $client->confirmSignUpAsync([/* ... */]);

Parameter Syntax

$result = $client->confirmSignUp([
    'AnalyticsMetadata' => [
        'AnalyticsEndpointId' => '<string>',
    ],
    'ClientId' => '<string>', // REQUIRED
    'ConfirmationCode' => '<string>', // REQUIRED
    'ForceAliasCreation' => true || false,
    'SecretHash' => '<string>',
    'UserContextData' => [
        'EncodedData' => '<string>',
    ],
    'Username' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UnexpectedLambdaException:

  This exception is thrown when the Amazon Cognito service encounters an unexpected exception with the AWS Lambda service.

• UserLambdaValidationException:

  This exception is thrown when the Amazon Cognito service encounters a user validation exception with the AWS Lambda service.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyFailedAttemptsException:

  This exception is thrown when the user has made too many failed attempts for a given action (e.g., sign in).

• CodeMismatchException:

  This exception is thrown if the provided code does not match what the server was expecting.

• ExpiredCodeException:

  This exception is thrown if a code has expired.

• InvalidLambdaResponseException:

  This exception is thrown when the Amazon Cognito service encounters an invalid AWS Lambda response.

• AliasExistsException:

  This exception is thrown when a user tries to confirm the account with an email or phone number that has already been supplied as an alias from a different account. This exception tells user that an account with this email or phone already exists.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateGroup

$result = $client->createGroup([/* ... */]);
$promise = $client->createGroupAsync([/* ... */]);

Parameter Syntax

$result = $client->createGroup([
    'Description' => '<string>',
    'GroupName' => '<string>', // REQUIRED
    'Precedence' => <integer>,
    'RoleArn' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Group' => [
        'CreationDate' => <DateTime>,
        'Description' => '<string>',
        'GroupName' => '<string>',
        'LastModifiedDate' => <DateTime>,
        'Precedence' => <integer>,
        'RoleArn' => '<string>',
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• GroupExistsException:

  This exception is thrown when Amazon Cognito encounters a group that already exists in the user pool.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateIdentityProvider

$result = $client->createIdentityProvider([/* ... */]);
$promise = $client->createIdentityProviderAsync([/* ... */]);

Parameter Syntax

$result = $client->createIdentityProvider([
    'AttributeMapping' => ['<string>', ...],
    'IdpIdentifiers' => ['<string>', ...],
    'ProviderDetails' => ['<string>', ...], // REQUIRED
    'ProviderName' => '<string>', // REQUIRED
    'ProviderType' => 'SAML|Facebook|Google|LoginWithAmazon|OIDC', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'IdentityProvider' => [
        'AttributeMapping' => ['<string>', ...],
        'CreationDate' => <DateTime>,
        'IdpIdentifiers' => ['<string>', ...],
        'LastModifiedDate' => <DateTime>,
        'ProviderDetails' => ['<string>', ...],
        'ProviderName' => '<string>',
        'ProviderType' => 'SAML|Facebook|Google|LoginWithAmazon|OIDC',
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• DuplicateProviderException:

  This exception is thrown when the provider is already supported by the user pool.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateResourceServer

$result = $client->createResourceServer([/* ... */]);
$promise = $client->createResourceServerAsync([/* ... */]);

Parameter Syntax

$result = $client->createResourceServer([
    'Identifier' => '<string>', // REQUIRED
    'Name' => '<string>', // REQUIRED
    'Scopes' => [
        [
            'ScopeDescription' => '<string>', // REQUIRED
            'ScopeName' => '<string>', // REQUIRED
        ],
        // ...
    ],
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'ResourceServer' => [
        'Identifier' => '<string>',
        'Name' => '<string>',
        'Scopes' => [
            [
                'ScopeDescription' => '<string>',
                'ScopeName' => '<string>',
            ],
            // ...
        ],
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateUserImportJob

$result = $client->createUserImportJob([/* ... */]);
$promise = $client->createUserImportJobAsync([/* ... */]);

Parameter Syntax

$result = $client->createUserImportJob([
    'CloudWatchLogsRoleArn' => '<string>', // REQUIRED
    'JobName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'UserImportJob' => [
        'CloudWatchLogsRoleArn' => '<string>',
        'CompletionDate' => <DateTime>,
        'CompletionMessage' => '<string>',
        'CreationDate' => <DateTime>,
        'FailedUsers' => <integer>,
        'ImportedUsers' => <integer>,
        'JobId' => '<string>',
        'JobName' => '<string>',
        'PreSignedUrl' => '<string>',
        'SkippedUsers' => <integer>,
        'StartDate' => <DateTime>,
        'Status' => 'Created|Pending|InProgress|Stopping|Expired|Stopped|Failed|Succeeded',
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• PreconditionNotMetException:

  This exception is thrown when a precondition is not met.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateUserPool

$result = $client->createUserPool([/* ... */]);
$promise = $client->createUserPoolAsync([/* ... */]);

Parameter Syntax

$result = $client->createUserPool([
    'AdminCreateUserConfig' => [
        'AllowAdminCreateUserOnly' => true || false,
        'InviteMessageTemplate' => [
            'EmailMessage' => '<string>',
            'EmailSubject' => '<string>',
            'SMSMessage' => '<string>',
        ],
        'UnusedAccountValidityDays' => <integer>,
    ],
    'AliasAttributes' => ['<string>', ...],
    'AutoVerifiedAttributes' => ['<string>', ...],
    'DeviceConfiguration' => [
        'ChallengeRequiredOnNewDevice' => true || false,
        'DeviceOnlyRememberedOnUserPrompt' => true || false,
    ],
    'EmailConfiguration' => [
        'ReplyToEmailAddress' => '<string>',
        'SourceArn' => '<string>',
    ],
    'EmailVerificationMessage' => '<string>',
    'EmailVerificationSubject' => '<string>',
    'LambdaConfig' => [
        'CreateAuthChallenge' => '<string>',
        'CustomMessage' => '<string>',
        'DefineAuthChallenge' => '<string>',
        'PostAuthentication' => '<string>',
        'PostConfirmation' => '<string>',
        'PreAuthentication' => '<string>',
        'PreSignUp' => '<string>',
        'PreTokenGeneration' => '<string>',
        'UserMigration' => '<string>',
        'VerifyAuthChallengeResponse' => '<string>',
    ],
    'MfaConfiguration' => 'OFF|ON|OPTIONAL',
    'Policies' => [
        'PasswordPolicy' => [
            'MinimumLength' => <integer>,
            'RequireLowercase' => true || false,
            'RequireNumbers' => true || false,
            'RequireSymbols' => true || false,
            'RequireUppercase' => true || false,
        ],
    ],
    'PoolName' => '<string>', // REQUIRED
    'Schema' => [
        [
            'AttributeDataType' => 'String|Number|DateTime|Boolean',
            'DeveloperOnlyAttribute' => true || false,
            'Mutable' => true || false,
            'Name' => '<string>',
            'NumberAttributeConstraints' => [
                'MaxValue' => '<string>',
                'MinValue' => '<string>',
            ],
            'Required' => true || false,
            'StringAttributeConstraints' => [
                'MaxLength' => '<string>',
                'MinLength' => '<string>',
            ],
        ],
        // ...
    ],
    'SmsAuthenticationMessage' => '<string>',
    'SmsConfiguration' => [
        'ExternalId' => '<string>',
        'SnsCallerArn' => '<string>', // REQUIRED
    ],
    'SmsVerificationMessage' => '<string>',
    'UserPoolAddOns' => [
        'AdvancedSecurityMode' => 'OFF|AUDIT|ENFORCED', // REQUIRED
    ],
    'UserPoolTags' => ['<string>', ...],
    'UsernameAttributes' => ['<string>', ...],
    'VerificationMessageTemplate' => [
        'DefaultEmailOption' => 'CONFIRM_WITH_LINK|CONFIRM_WITH_CODE',
        'EmailMessage' => '<string>',
        'EmailMessageByLink' => '<string>',
        'EmailSubject' => '<string>',
        'EmailSubjectByLink' => '<string>',
        'SmsMessage' => '<string>',
    ],
]);

Parameter Details

Result Syntax

[
    'UserPool' => [
        'AdminCreateUserConfig' => [
            'AllowAdminCreateUserOnly' => true || false,
            'InviteMessageTemplate' => [
                'EmailMessage' => '<string>',
                'EmailSubject' => '<string>',
                'SMSMessage' => '<string>',
            ],
            'UnusedAccountValidityDays' => <integer>,
        ],
        'AliasAttributes' => ['<string>', ...],
        'Arn' => '<string>',
        'AutoVerifiedAttributes' => ['<string>', ...],
        'CreationDate' => <DateTime>,
        'CustomDomain' => '<string>',
        'DeviceConfiguration' => [
            'ChallengeRequiredOnNewDevice' => true || false,
            'DeviceOnlyRememberedOnUserPrompt' => true || false,
        ],
        'Domain' => '<string>',
        'EmailConfiguration' => [
            'ReplyToEmailAddress' => '<string>',
            'SourceArn' => '<string>',
        ],
        'EmailConfigurationFailure' => '<string>',
        'EmailVerificationMessage' => '<string>',
        'EmailVerificationSubject' => '<string>',
        'EstimatedNumberOfUsers' => <integer>,
        'Id' => '<string>',
        'LambdaConfig' => [
            'CreateAuthChallenge' => '<string>',
            'CustomMessage' => '<string>',
            'DefineAuthChallenge' => '<string>',
            'PostAuthentication' => '<string>',
            'PostConfirmation' => '<string>',
            'PreAuthentication' => '<string>',
            'PreSignUp' => '<string>',
            'PreTokenGeneration' => '<string>',
            'UserMigration' => '<string>',
            'VerifyAuthChallengeResponse' => '<string>',
        ],
        'LastModifiedDate' => <DateTime>,
        'MfaConfiguration' => 'OFF|ON|OPTIONAL',
        'Name' => '<string>',
        'Policies' => [
            'PasswordPolicy' => [
                'MinimumLength' => <integer>,
                'RequireLowercase' => true || false,
                'RequireNumbers' => true || false,
                'RequireSymbols' => true || false,
                'RequireUppercase' => true || false,
            ],
        ],
        'SchemaAttributes' => [
            [
                'AttributeDataType' => 'String|Number|DateTime|Boolean',
                'DeveloperOnlyAttribute' => true || false,
                'Mutable' => true || false,
                'Name' => '<string>',
                'NumberAttributeConstraints' => [
                    'MaxValue' => '<string>',
                    'MinValue' => '<string>',
                ],
                'Required' => true || false,
                'StringAttributeConstraints' => [
                    'MaxLength' => '<string>',
                    'MinLength' => '<string>',
                ],
            ],
            // ...
        ],
        'SmsAuthenticationMessage' => '<string>',
        'SmsConfiguration' => [
            'ExternalId' => '<string>',
            'SnsCallerArn' => '<string>',
        ],
        'SmsConfigurationFailure' => '<string>',
        'SmsVerificationMessage' => '<string>',
        'Status' => 'Enabled|Disabled',
        'UserPoolAddOns' => [
            'AdvancedSecurityMode' => 'OFF|AUDIT|ENFORCED',
        ],
        'UserPoolTags' => ['<string>', ...],
        'UsernameAttributes' => ['<string>', ...],
        'VerificationMessageTemplate' => [
            'DefaultEmailOption' => 'CONFIRM_WITH_LINK|CONFIRM_WITH_CODE',
            'EmailMessage' => '<string>',
            'EmailMessageByLink' => '<string>',
            'EmailSubject' => '<string>',
            'EmailSubjectByLink' => '<string>',
            'SmsMessage' => '<string>',
        ],
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• InvalidSmsRoleAccessPolicyException:

  This exception is returned when the role provided for SMS configuration does not have permission to publish using Amazon SNS.

• InvalidSmsRoleTrustRelationshipException:

  This exception is thrown when the trust relationship is invalid for the role provided for SMS configuration. This can happen if you do not trust cognito-idp.amazonaws.com or the external ID provided in the role does not match what is provided in the SMS configuration for the user pool.

• InvalidEmailRoleAccessPolicyException:

  This exception is thrown when Amazon Cognito is not allowed to use your email identity. HTTP status code: 400.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserPoolTaggingException:

  This exception is thrown when a user pool tag cannot be set or updated.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateUserPoolClient

$result = $client->createUserPoolClient([/* ... */]);
$promise = $client->createUserPoolClientAsync([/* ... */]);

Parameter Syntax

$result = $client->createUserPoolClient([
    'AllowedOAuthFlows' => ['<string>', ...],
    'AllowedOAuthFlowsUserPoolClient' => true || false,
    'AllowedOAuthScopes' => ['<string>', ...],
    'AnalyticsConfiguration' => [
        'ApplicationId' => '<string>', // REQUIRED
        'ExternalId' => '<string>', // REQUIRED
        'RoleArn' => '<string>', // REQUIRED
        'UserDataShared' => true || false,
    ],
    'CallbackURLs' => ['<string>', ...],
    'ClientName' => '<string>', // REQUIRED
    'DefaultRedirectURI' => '<string>',
    'ExplicitAuthFlows' => ['<string>', ...],
    'GenerateSecret' => true || false,
    'LogoutURLs' => ['<string>', ...],
    'ReadAttributes' => ['<string>', ...],
    'RefreshTokenValidity' => <integer>,
    'SupportedIdentityProviders' => ['<string>', ...],
    'UserPoolId' => '<string>', // REQUIRED
    'WriteAttributes' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'UserPoolClient' => [
        'AllowedOAuthFlows' => ['<string>', ...],
        'AllowedOAuthFlowsUserPoolClient' => true || false,
        'AllowedOAuthScopes' => ['<string>', ...],
        'AnalyticsConfiguration' => [
            'ApplicationId' => '<string>',
            'ExternalId' => '<string>',
            'RoleArn' => '<string>',
            'UserDataShared' => true || false,
        ],
        'CallbackURLs' => ['<string>', ...],
        'ClientId' => '<string>',
        'ClientName' => '<string>',
        'ClientSecret' => '<string>',
        'CreationDate' => <DateTime>,
        'DefaultRedirectURI' => '<string>',
        'ExplicitAuthFlows' => ['<string>', ...],
        'LastModifiedDate' => <DateTime>,
        'LogoutURLs' => ['<string>', ...],
        'ReadAttributes' => ['<string>', ...],
        'RefreshTokenValidity' => <integer>,
        'SupportedIdentityProviders' => ['<string>', ...],
        'UserPoolId' => '<string>',
        'WriteAttributes' => ['<string>', ...],
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• ScopeDoesNotExistException:

  This exception is thrown when the specified scope does not exist.

• InvalidOAuthFlowException:

  This exception is thrown when the specified OAuth flow is invalid.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

CreateUserPoolDomain

$result = $client->createUserPoolDomain([/* ... */]);
$promise = $client->createUserPoolDomainAsync([/* ... */]);

Parameter Syntax

$result = $client->createUserPoolDomain([
    'CustomDomainConfig' => [
        'CertificateArn' => '<string>', // REQUIRED
    ],
    'Domain' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'CloudFrontDomain' => '<string>',
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• LimitExceededException:

  This exception is thrown when a user exceeds the limit for a requested AWS resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteGroup

$result = $client->deleteGroup([/* ... */]);
$promise = $client->deleteGroupAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteGroup([
    'GroupName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteIdentityProvider

$result = $client->deleteIdentityProvider([/* ... */]);
$promise = $client->deleteIdentityProviderAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteIdentityProvider([
    'ProviderName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• UnsupportedIdentityProviderException:

  This exception is thrown when the specified identifier is not supported.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteResourceServer

$result = $client->deleteResourceServer([/* ... */]);
$promise = $client->deleteResourceServerAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteResourceServer([
    'Identifier' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteUser

$result = $client->deleteUser([/* ... */]);
$promise = $client->deleteUserAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteUser([
    'AccessToken' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteUserAttributes

$result = $client->deleteUserAttributes([/* ... */]);
$promise = $client->deleteUserAttributesAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteUserAttributes([
    'AccessToken' => '<string>', // REQUIRED
    'UserAttributeNames' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• PasswordResetRequiredException:

  This exception is thrown when a password reset is required.

• UserNotFoundException:

  This exception is thrown when a user is not found.

• UserNotConfirmedException:

  This exception is thrown when a user is not confirmed successfully.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteUserPool

$result = $client->deleteUserPool([/* ... */]);
$promise = $client->deleteUserPoolAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteUserPool([
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserImportInProgressException:

  This exception is thrown when you are trying to modify a user pool while a user import job is in progress for that pool.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteUserPoolClient

$result = $client->deleteUserPoolClient([/* ... */]);
$promise = $client->deleteUserPoolClientAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteUserPoolClient([
    'ClientId' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DeleteUserPoolDomain

$result = $client->deleteUserPoolDomain([/* ... */]);
$promise = $client->deleteUserPoolDomainAsync([/* ... */]);

Parameter Syntax

$result = $client->deleteUserPoolDomain([
    'Domain' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeIdentityProvider

$result = $client->describeIdentityProvider([/* ... */]);
$promise = $client->describeIdentityProviderAsync([/* ... */]);

Parameter Syntax

$result = $client->describeIdentityProvider([
    'ProviderName' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'IdentityProvider' => [
        'AttributeMapping' => ['<string>', ...],
        'CreationDate' => <DateTime>,
        'IdpIdentifiers' => ['<string>', ...],
        'LastModifiedDate' => <DateTime>,
        'ProviderDetails' => ['<string>', ...],
        'ProviderName' => '<string>',
        'ProviderType' => 'SAML|Facebook|Google|LoginWithAmazon|OIDC',
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeResourceServer

$result = $client->describeResourceServer([/* ... */]);
$promise = $client->describeResourceServerAsync([/* ... */]);

Parameter Syntax

$result = $client->describeResourceServer([
    'Identifier' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'ResourceServer' => [
        'Identifier' => '<string>',
        'Name' => '<string>',
        'Scopes' => [
            [
                'ScopeDescription' => '<string>',
                'ScopeName' => '<string>',
            ],
            // ...
        ],
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeRiskConfiguration

$result = $client->describeRiskConfiguration([/* ... */]);
$promise = $client->describeRiskConfigurationAsync([/* ... */]);

Parameter Syntax

$result = $client->describeRiskConfiguration([
    'ClientId' => '<string>',
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'RiskConfiguration' => [
        'AccountTakeoverRiskConfiguration' => [
            'Actions' => [
                'HighAction' => [
                    'EventAction' => 'BLOCK|MFA_IF_CONFIGURED|MFA_REQUIRED|NO_ACTION',
                    'Notify' => true || false,
                ],
                'LowAction' => [
                    'EventAction' => 'BLOCK|MFA_IF_CONFIGURED|MFA_REQUIRED|NO_ACTION',
                    'Notify' => true || false,
                ],
                'MediumAction' => [
                    'EventAction' => 'BLOCK|MFA_IF_CONFIGURED|MFA_REQUIRED|NO_ACTION',
                    'Notify' => true || false,
                ],
            ],
            'NotifyConfiguration' => [
                'BlockEmail' => [
                    'HtmlBody' => '<string>',
                    'Subject' => '<string>',
                    'TextBody' => '<string>',
                ],
                'From' => '<string>',
                'MfaEmail' => [
                    'HtmlBody' => '<string>',
                    'Subject' => '<string>',
                    'TextBody' => '<string>',
                ],
                'NoActionEmail' => [
                    'HtmlBody' => '<string>',
                    'Subject' => '<string>',
                    'TextBody' => '<string>',
                ],
                'ReplyTo' => '<string>',
                'SourceArn' => '<string>',
            ],
        ],
        'ClientId' => '<string>',
        'CompromisedCredentialsRiskConfiguration' => [
            'Actions' => [
                'EventAction' => 'BLOCK|NO_ACTION',
            ],
            'EventFilter' => ['<string>', ...],
        ],
        'LastModifiedDate' => <DateTime>,
        'RiskExceptionConfiguration' => [
            'BlockedIPRangeList' => ['<string>', ...],
            'SkippedIPRangeList' => ['<string>', ...],
        ],
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserPoolAddOnNotEnabledException:

  This exception is thrown when user pool add-ons are not enabled.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeUserImportJob

$result = $client->describeUserImportJob([/* ... */]);
$promise = $client->describeUserImportJobAsync([/* ... */]);

Parameter Syntax

$result = $client->describeUserImportJob([
    'JobId' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'UserImportJob' => [
        'CloudWatchLogsRoleArn' => '<string>',
        'CompletionDate' => <DateTime>,
        'CompletionMessage' => '<string>',
        'CreationDate' => <DateTime>,
        'FailedUsers' => <integer>,
        'ImportedUsers' => <integer>,
        'JobId' => '<string>',
        'JobName' => '<string>',
        'PreSignedUrl' => '<string>',
        'SkippedUsers' => <integer>,
        'StartDate' => <DateTime>,
        'Status' => 'Created|Pending|InProgress|Stopping|Expired|Stopped|Failed|Succeeded',
        'UserPoolId' => '<string>',
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeUserPool

$result = $client->describeUserPool([/* ... */]);
$promise = $client->describeUserPoolAsync([/* ... */]);

Parameter Syntax

$result = $client->describeUserPool([
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'UserPool' => [
        'AdminCreateUserConfig' => [
            'AllowAdminCreateUserOnly' => true || false,
            'InviteMessageTemplate' => [
                'EmailMessage' => '<string>',
                'EmailSubject' => '<string>',
                'SMSMessage' => '<string>',
            ],
            'UnusedAccountValidityDays' => <integer>,
        ],
        'AliasAttributes' => ['<string>', ...],
        'Arn' => '<string>',
        'AutoVerifiedAttributes' => ['<string>', ...],
        'CreationDate' => <DateTime>,
        'CustomDomain' => '<string>',
        'DeviceConfiguration' => [
            'ChallengeRequiredOnNewDevice' => true || false,
            'DeviceOnlyRememberedOnUserPrompt' => true || false,
        ],
        'Domain' => '<string>',
        'EmailConfiguration' => [
            'ReplyToEmailAddress' => '<string>',
            'SourceArn' => '<string>',
        ],
        'EmailConfigurationFailure' => '<string>',
        'EmailVerificationMessage' => '<string>',
        'EmailVerificationSubject' => '<string>',
        'EstimatedNumberOfUsers' => <integer>,
        'Id' => '<string>',
        'LambdaConfig' => [
            'CreateAuthChallenge' => '<string>',
            'CustomMessage' => '<string>',
            'DefineAuthChallenge' => '<string>',
            'PostAuthentication' => '<string>',
            'PostConfirmation' => '<string>',
            'PreAuthentication' => '<string>',
            'PreSignUp' => '<string>',
            'PreTokenGeneration' => '<string>',
            'UserMigration' => '<string>',
            'VerifyAuthChallengeResponse' => '<string>',
        ],
        'LastModifiedDate' => <DateTime>,
        'MfaConfiguration' => 'OFF|ON|OPTIONAL',
        'Name' => '<string>',
        'Policies' => [
            'PasswordPolicy' => [
                'MinimumLength' => <integer>,
                'RequireLowercase' => true || false,
                'RequireNumbers' => true || false,
                'RequireSymbols' => true || false,
                'RequireUppercase' => true || false,
            ],
        ],
        'SchemaAttributes' => [
            [
                'AttributeDataType' => 'String|Number|DateTime|Boolean',
                'DeveloperOnlyAttribute' => true || false,
                'Mutable' => true || false,
                'Name' => '<string>',
                'NumberAttributeConstraints' => [
                    'MaxValue' => '<string>',
                    'MinValue' => '<string>',
                ],
                'Required' => true || false,
                'StringAttributeConstraints' => [
                    'MaxLength' => '<string>',
                    'MinLength' => '<string>',
                ],
            ],
            // ...
        ],
        'SmsAuthenticationMessage' => '<string>',
        'SmsConfiguration' => [
            'ExternalId' => '<string>',
            'SnsCallerArn' => '<string>',
        ],
        'SmsConfigurationFailure' => '<string>',
        'SmsVerificationMessage' => '<string>',
        'Status' => 'Enabled|Disabled',
        'UserPoolAddOns' => [
            'AdvancedSecurityMode' => 'OFF|AUDIT|ENFORCED',
        ],
        'UserPoolTags' => ['<string>', ...],
        'UsernameAttributes' => ['<string>', ...],
        'VerificationMessageTemplate' => [
            'DefaultEmailOption' => 'CONFIRM_WITH_LINK|CONFIRM_WITH_CODE',
            'EmailMessage' => '<string>',
            'EmailMessageByLink' => '<string>',
            'EmailSubject' => '<string>',
            'EmailSubjectByLink' => '<string>',
            'SmsMessage' => '<string>',
        ],
    ],
]

Result Details

Errors

• ResourceNotFoundException:

  This exception is thrown when the Amazon Cognito service cannot find the requested resource.

• InvalidParameterException:

  This exception is thrown when the Amazon Cognito service encounters an invalid parameter.

• TooManyRequestsException:

  This exception is thrown when the user has made too many requests for a given operation.

• NotAuthorizedException:

  This exception is thrown when a user is not authorized.

• UserPoolTaggingException:

  This exception is thrown when a user pool tag cannot be set or updated.

• InternalErrorException:

  This exception is thrown when Amazon Cognito encounters an internal error.

DescribeUserPoolClient

$result = $client->describeUserPoolClient([/* ... */]);
$promise = $client->describeUserPoolClientAsync([/* ... */]);

Parameter Syntax

$result = $client->describeUserPoolClient([
    'ClientId' => '<string>', // REQUIRED
    'UserPoolId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'UserPoolClient' => [
        'AllowedOAuthFlows' => ['<string>', ...],
        'AllowedOAuthFlowsUserPoolClient' => true || false,
        'AllowedOAuthScopes' => ['<string>', ...],
        'AnalyticsConfiguration' => [
            'ApplicationId' => '<string>',
            'ExternalId' => '<string>',
            'RoleArn' => '<string>',
            'UserDataShared' => true || false,
        ],
        'CallbackURLs' => ['<string>', ...],
        'ClientId' => '<string>',
        'ClientName' => '<string>',
        'ClientSecret' => '<string>',
        'CreationDate' => <DateTime>,
        'DefaultRedirectURI' => '<string>',
        'ExplicitAuthFlows' => ['<string>', ...],
        'LastModifiedDate' => <DateTime>,
        'LogoutURLs' => ['<string>', ...],
        'ReadAttributes' => ['<string>', ...],
        'RefreshTokenValidity' => <integer>,
        'SupportedIdentityProviders' => ['<string>', ...],
        'UserPoolId' => '<string>',
        'WriteAttributes' => ['<string>', ...],
    ],
]

Result Details