amazonka-cognito-idp-2.0: Amazon Cognito Identity Provider SDK.
Copyright(c) 2013-2023 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellSafe-Inferred
LanguageHaskell2010

Amazonka.CognitoIdentityProvider.CreateUserPool

Description

Creates a new Amazon Cognito user pool and sets the password policy for the pool.

This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.

If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In <https:docs.aws.amazon.comsnslatestdgsns-sms-sandbox.html sandbox mode> , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.

Synopsis

Creating a Request

data CreateUserPool Source #

Represents the request to create a user pool.

See: newCreateUserPool smart constructor.

Constructors

CreateUserPool' 

Fields

Instances

Instances details
ToJSON CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

ToHeaders CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

ToPath CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

ToQuery CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

AWSRequest CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Associated Types

type AWSResponse CreateUserPool #

Generic CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Associated Types

type Rep CreateUserPool :: Type -> Type #

Read CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Show CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

NFData CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Methods

rnf :: CreateUserPool -> () #

Eq CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Hashable CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

type AWSResponse CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

type Rep CreateUserPool Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

type Rep CreateUserPool = D1 ('MetaData "CreateUserPool" "Amazonka.CognitoIdentityProvider.CreateUserPool" "amazonka-cognito-idp-2.0-D1ERgMvEVPG9z8cOLXdU2" 'False) (C1 ('MetaCons "CreateUserPool'" 'PrefixI 'True) ((((S1 ('MetaSel ('Just "accountRecoverySetting") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe AccountRecoverySettingType)) :*: S1 ('MetaSel ('Just "adminCreateUserConfig") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe AdminCreateUserConfigType))) :*: (S1 ('MetaSel ('Just "aliasAttributes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [AliasAttributeType])) :*: (S1 ('MetaSel ('Just "autoVerifiedAttributes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [VerifiedAttributeType])) :*: S1 ('MetaSel ('Just "deletionProtection") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DeletionProtectionType))))) :*: ((S1 ('MetaSel ('Just "deviceConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe DeviceConfigurationType)) :*: (S1 ('MetaSel ('Just "emailConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe EmailConfigurationType)) :*: S1 ('MetaSel ('Just "emailVerificationMessage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :*: (S1 ('MetaSel ('Just "emailVerificationSubject") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: (S1 ('MetaSel ('Just "lambdaConfig") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe LambdaConfigType)) :*: S1 ('MetaSel ('Just "mfaConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UserPoolMfaType)))))) :*: (((S1 ('MetaSel ('Just "policies") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UserPoolPolicyType)) :*: (S1 ('MetaSel ('Just "schema") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (NonEmpty SchemaAttributeType))) :*: S1 ('MetaSel ('Just "smsAuthenticationMessage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) :*: (S1 ('MetaSel ('Just "smsConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe SmsConfigurationType)) :*: (S1 ('MetaSel ('Just "smsVerificationMessage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "userAttributeUpdateSettings") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UserAttributeUpdateSettingsType))))) :*: ((S1 ('MetaSel ('Just "userPoolAddOns") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UserPoolAddOnsType)) :*: (S1 ('MetaSel ('Just "userPoolTags") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe (HashMap Text Text))) :*: S1 ('MetaSel ('Just "usernameAttributes") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [UsernameAttributeType])))) :*: (S1 ('MetaSel ('Just "usernameConfiguration") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UsernameConfigurationType)) :*: (S1 ('MetaSel ('Just "verificationMessageTemplate") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe VerificationMessageTemplateType)) :*: S1 ('MetaSel ('Just "poolName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))))))

newCreateUserPool Source #

Create a value of CreateUserPool with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

CreateUserPool, createUserPool_accountRecoverySetting - The available verified method a user can use to recover their password when they call ForgotPassword. You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.

CreateUserPool, createUserPool_adminCreateUserConfig - The configuration for AdminCreateUser requests.

CreateUserPool, createUserPool_aliasAttributes - Attributes supported as an alias for this user pool. Possible values: phone_number, email, or preferred_username.

CreateUserPool, createUserPool_autoVerifiedAttributes - The attributes to be auto-verified. Possible values: email, phone_number.

CreateUserPool, createUserPool_deletionProtection - When active, DeletionProtection prevents accidental deletion of your user pool. Before you can delete a user pool that you have protected against deletion, you must deactivate this feature.

When you try to delete a protected user pool in a DeleteUserPool API request, Amazon Cognito returns an InvalidParameterException error. To delete a protected user pool, send a new DeleteUserPool request after you deactivate deletion protection in an UpdateUserPool API request.

CreateUserPool, createUserPool_deviceConfiguration - The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.

When you provide a value for any DeviceConfiguration field, you activate the Amazon Cognito device-remembering feature.

CreateUserPool, createUserPool_emailConfiguration - The email configuration of your user pool. The email configuration type sets your preferred sending method, Amazon Web Services Region, and sender for messages from your user pool.

CreateUserPool, createUserPool_emailVerificationMessage - This parameter is no longer used. See VerificationMessageTemplateType.

CreateUserPool, createUserPool_emailVerificationSubject - This parameter is no longer used. See VerificationMessageTemplateType.

CreateUserPool, createUserPool_lambdaConfig - The Lambda trigger configuration information for the new user pool.

In a push model, event sources (such as Amazon S3 and custom applications) need permission to invoke a function. So you must make an extra call to add permission for these event sources to invoke your Lambda function.

For more information on using the Lambda API to add permission, see AddPermission .

For adding permission using the CLI, see add-permission .

CreateUserPool, createUserPool_mfaConfiguration - Specifies MFA configuration details.

CreateUserPool, createUserPool_policies - The policies associated with the new user pool.

$sel:schema:CreateUserPool', createUserPool_schema - An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.

CreateUserPool, createUserPool_smsAuthenticationMessage - A string representing the SMS authentication message.

CreateUserPool, createUserPool_smsConfiguration - The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the Amazon Web Services Region that you want, the Amazon Cognito user pool uses an Identity and Access Management (IAM) role in your Amazon Web Services account.

CreateUserPool, createUserPool_smsVerificationMessage - This parameter is no longer used. See VerificationMessageTemplateType.

CreateUserPool, createUserPool_userAttributeUpdateSettings - The settings for updates to user attributes. These settings include the property AttributesRequireVerificationBeforeUpdate, a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For more information, see Verifying updates to email addresses and phone numbers.

CreateUserPool, createUserPool_userPoolAddOns - Enables advanced security risk detection. Set the key AdvancedSecurityMode to the value "AUDIT".

CreateUserPool, createUserPool_userPoolTags - The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.

CreateUserPool, createUserPool_usernameAttributes - Specifies whether a user can use an email address or phone number as a username when they sign up.

CreateUserPool, createUserPool_usernameConfiguration - Case sensitivity on the username input for the selected sign-in option. For example, when case sensitivity is set to False, users can sign in using either "username" or "Username". This configuration is immutable once it has been set. For more information, see UsernameConfigurationType.

CreateUserPool, createUserPool_verificationMessageTemplate - The template for the verification message that the user sees when the app requests permission to access the user's information.

$sel:poolName:CreateUserPool', createUserPool_poolName - A string used to name the user pool.

Request Lenses

createUserPool_accountRecoverySetting :: Lens' CreateUserPool (Maybe AccountRecoverySettingType) Source #

The available verified method a user can use to recover their password when they call ForgotPassword. You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email.

createUserPool_aliasAttributes :: Lens' CreateUserPool (Maybe [AliasAttributeType]) Source #

Attributes supported as an alias for this user pool. Possible values: phone_number, email, or preferred_username.

createUserPool_autoVerifiedAttributes :: Lens' CreateUserPool (Maybe [VerifiedAttributeType]) Source #

The attributes to be auto-verified. Possible values: email, phone_number.

createUserPool_deletionProtection :: Lens' CreateUserPool (Maybe DeletionProtectionType) Source #

When active, DeletionProtection prevents accidental deletion of your user pool. Before you can delete a user pool that you have protected against deletion, you must deactivate this feature.

When you try to delete a protected user pool in a DeleteUserPool API request, Amazon Cognito returns an InvalidParameterException error. To delete a protected user pool, send a new DeleteUserPool request after you deactivate deletion protection in an UpdateUserPool API request.

createUserPool_deviceConfiguration :: Lens' CreateUserPool (Maybe DeviceConfigurationType) Source #

The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.

When you provide a value for any DeviceConfiguration field, you activate the Amazon Cognito device-remembering feature.

createUserPool_emailConfiguration :: Lens' CreateUserPool (Maybe EmailConfigurationType) Source #

The email configuration of your user pool. The email configuration type sets your preferred sending method, Amazon Web Services Region, and sender for messages from your user pool.

createUserPool_lambdaConfig :: Lens' CreateUserPool (Maybe LambdaConfigType) Source #

The Lambda trigger configuration information for the new user pool.

In a push model, event sources (such as Amazon S3 and custom applications) need permission to invoke a function. So you must make an extra call to add permission for these event sources to invoke your Lambda function.

For more information on using the Lambda API to add permission, see AddPermission .

For adding permission using the CLI, see add-permission .

createUserPool_policies :: Lens' CreateUserPool (Maybe UserPoolPolicyType) Source #

The policies associated with the new user pool.

createUserPool_schema :: Lens' CreateUserPool (Maybe (NonEmpty SchemaAttributeType)) Source #

An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.

createUserPool_smsAuthenticationMessage :: Lens' CreateUserPool (Maybe Text) Source #

A string representing the SMS authentication message.

createUserPool_smsConfiguration :: Lens' CreateUserPool (Maybe SmsConfigurationType) Source #

The SMS configuration with the settings that your Amazon Cognito user pool must use to send an SMS message from your Amazon Web Services account through Amazon Simple Notification Service. To send SMS messages with Amazon SNS in the Amazon Web Services Region that you want, the Amazon Cognito user pool uses an Identity and Access Management (IAM) role in your Amazon Web Services account.

createUserPool_userAttributeUpdateSettings :: Lens' CreateUserPool (Maybe UserAttributeUpdateSettingsType) Source #

The settings for updates to user attributes. These settings include the property AttributesRequireVerificationBeforeUpdate, a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For more information, see Verifying updates to email addresses and phone numbers.

createUserPool_userPoolAddOns :: Lens' CreateUserPool (Maybe UserPoolAddOnsType) Source #

Enables advanced security risk detection. Set the key AdvancedSecurityMode to the value "AUDIT".

createUserPool_userPoolTags :: Lens' CreateUserPool (Maybe (HashMap Text Text)) Source #

The tag keys and values to assign to the user pool. A tag is a label that you can use to categorize and manage user pools in different ways, such as by purpose, owner, environment, or other criteria.

createUserPool_usernameAttributes :: Lens' CreateUserPool (Maybe [UsernameAttributeType]) Source #

Specifies whether a user can use an email address or phone number as a username when they sign up.

createUserPool_usernameConfiguration :: Lens' CreateUserPool (Maybe UsernameConfigurationType) Source #

Case sensitivity on the username input for the selected sign-in option. For example, when case sensitivity is set to False, users can sign in using either "username" or "Username". This configuration is immutable once it has been set. For more information, see UsernameConfigurationType.

createUserPool_verificationMessageTemplate :: Lens' CreateUserPool (Maybe VerificationMessageTemplateType) Source #

The template for the verification message that the user sees when the app requests permission to access the user's information.

createUserPool_poolName :: Lens' CreateUserPool Text Source #

A string used to name the user pool.

Destructuring the Response

data CreateUserPoolResponse Source #

Represents the response from the server for the request to create a user pool.

See: newCreateUserPoolResponse smart constructor.

Constructors

CreateUserPoolResponse' 

Fields

Instances

Instances details
Generic CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Associated Types

type Rep CreateUserPoolResponse :: Type -> Type #

Read CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Show CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

NFData CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

Methods

rnf :: CreateUserPoolResponse -> () #

Eq CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

type Rep CreateUserPoolResponse Source # 
Instance details

Defined in Amazonka.CognitoIdentityProvider.CreateUserPool

type Rep CreateUserPoolResponse = D1 ('MetaData "CreateUserPoolResponse" "Amazonka.CognitoIdentityProvider.CreateUserPool" "amazonka-cognito-idp-2.0-D1ERgMvEVPG9z8cOLXdU2" 'False) (C1 ('MetaCons "CreateUserPoolResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "userPool") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe UserPoolType)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newCreateUserPoolResponse Source #

Create a value of CreateUserPoolResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:userPool:CreateUserPoolResponse', createUserPoolResponse_userPool - A container for the user pool details.

$sel:httpStatus:CreateUserPoolResponse', createUserPoolResponse_httpStatus - The response's http status code.

Response Lenses