amazonka-cognito-identity 1.6.1 → 2.0

raw patch · 101 files changed

+8472/−4720 lines, 101 filesdep +case-insensitivedep ~amazonka-coredep ~amazonka-testdep ~basesetup-changedPVP ok

version bump matches the API change (PVP)

Dependencies added: case-insensitive

Dependency ranges changed: amazonka-core, amazonka-test, base

API changes (from Hackage documentation)

Files

• README.md +3/−4
• Setup.hs +0/−2
• amazonka-cognito-identity.cabal +108/−92
• fixture/CreateIdentityPool.yaml +10/−0
• fixture/DeleteIdentities.yaml +10/−0
• fixture/DeleteIdentityPool.yaml +10/−0
• fixture/DescribeIdentity.yaml +10/−0
• fixture/DescribeIdentityPool.yaml +10/−0
• fixture/GetCredentialsForIdentity.yaml +10/−0
• fixture/GetId.yaml +10/−0
• fixture/GetIdentityPoolRoles.yaml +10/−0
• fixture/GetOpenIdToken.yaml +10/−0
• fixture/GetOpenIdTokenForDeveloperIdentity.yaml +10/−0
• fixture/GetPrincipalTagAttributeMap.yaml +10/−0
• fixture/GetPrincipalTagAttributeMapResponse.proto +0/−0
• fixture/ListIdentities.yaml +10/−0
• fixture/ListIdentityPools.yaml +10/−0
• fixture/ListTagsForResource.yaml +10/−0
• fixture/ListTagsForResourceResponse.proto +0/−0
• fixture/LookupDeveloperIdentity.yaml +10/−0
• fixture/MergeDeveloperIdentities.yaml +10/−0
• fixture/SetIdentityPoolRoles.yaml +10/−0
• fixture/SetPrincipalTagAttributeMap.yaml +10/−0
• fixture/SetPrincipalTagAttributeMapResponse.proto +0/−0
• fixture/TagResource.yaml +10/−0
• fixture/TagResourceResponse.proto +0/−0
• fixture/UnlinkDeveloperIdentity.yaml +10/−0
• fixture/UnlinkIdentity.yaml +10/−0
• fixture/UntagResource.yaml +10/−0
• fixture/UntagResourceResponse.proto +0/−0
• fixture/UpdateIdentityPool.yaml +10/−0
• gen/Amazonka/CognitoIdentity.hs +323/−0
• gen/Amazonka/CognitoIdentity/CreateIdentityPool.hs +307/−0
• gen/Amazonka/CognitoIdentity/DeleteIdentities.hs +187/−0
• gen/Amazonka/CognitoIdentity/DeleteIdentityPool.hs +144/−0
• gen/Amazonka/CognitoIdentity/DescribeIdentity.hs +127/−0
• gen/Amazonka/CognitoIdentity/DescribeIdentityPool.hs +137/−0
• gen/Amazonka/CognitoIdentity/GetCredentialsForIdentity.hs +267/−0
• gen/Amazonka/CognitoIdentity/GetId.hs +249/−0
• gen/Amazonka/CognitoIdentity/GetIdentityPoolRoles.hs +216/−0
• gen/Amazonka/CognitoIdentity/GetOpenIdToken.hs +223/−0
• gen/Amazonka/CognitoIdentity/GetOpenIdTokenForDeveloperIdentity.hs +348/−0
• gen/Amazonka/CognitoIdentity/GetPrincipalTagAttributeMap.hs +247/−0
• gen/Amazonka/CognitoIdentity/Lens.hs +300/−0
• gen/Amazonka/CognitoIdentity/ListIdentities.hs +251/−0
• gen/Amazonka/CognitoIdentity/ListIdentityPools.hs +228/−0
• gen/Amazonka/CognitoIdentity/ListTagsForResource.hs +178/−0
• gen/Amazonka/CognitoIdentity/LookupDeveloperIdentity.hs +322/−0
• gen/Amazonka/CognitoIdentity/MergeDeveloperIdentities.hs +276/−0
• gen/Amazonka/CognitoIdentity/SetIdentityPoolRoles.hs +192/−0
• gen/Amazonka/CognitoIdentity/SetPrincipalTagAttributeMap.hs +273/−0
• gen/Amazonka/CognitoIdentity/TagResource.hs +187/−0
• gen/Amazonka/CognitoIdentity/Types.hs +285/−0
• gen/Amazonka/CognitoIdentity/Types/AmbiguousRoleResolutionType.hs +71/−0
• gen/Amazonka/CognitoIdentity/Types/CognitoErrorCode.hs +71/−0
• gen/Amazonka/CognitoIdentity/Types/CognitoIdentityProvider.hs +138/−0
• gen/Amazonka/CognitoIdentity/Types/Credentials.hs +108/−0
• gen/Amazonka/CognitoIdentity/Types/IdentityDescription.hs +109/−0
• gen/Amazonka/CognitoIdentity/Types/IdentityPool.hs +256/−0
• gen/Amazonka/CognitoIdentity/Types/IdentityPoolShortDescription.hs +88/−0
• gen/Amazonka/CognitoIdentity/Types/MappingRule.hs +138/−0
• gen/Amazonka/CognitoIdentity/Types/MappingRuleMatchType.hs +81/−0
• gen/Amazonka/CognitoIdentity/Types/RoleMapping.hs +150/−0
• gen/Amazonka/CognitoIdentity/Types/RoleMappingType.hs +71/−0
• gen/Amazonka/CognitoIdentity/Types/RulesConfigurationType.hs +87/−0
• gen/Amazonka/CognitoIdentity/Types/UnprocessedIdentityId.hs +86/−0
• gen/Amazonka/CognitoIdentity/UnlinkDeveloperIdentity.hs +210/−0
• gen/Amazonka/CognitoIdentity/UnlinkIdentity.hs +173/−0
• gen/Amazonka/CognitoIdentity/UntagResource.hs +172/−0
• gen/Amazonka/CognitoIdentity/UpdateIdentityPool.hs +294/−0
• gen/Amazonka/CognitoIdentity/Waiters.hs +24/−0
• gen/Network/AWS/CognitoIdentity.hs +0/−258
• gen/Network/AWS/CognitoIdentity/CreateIdentityPool.hs +0/−191
• gen/Network/AWS/CognitoIdentity/DeleteIdentities.hs +0/−148
• gen/Network/AWS/CognitoIdentity/DeleteIdentityPool.hs +0/−117
• gen/Network/AWS/CognitoIdentity/DescribeIdentity.hs +0/−104
• gen/Network/AWS/CognitoIdentity/DescribeIdentityPool.hs +0/−110
• gen/Network/AWS/CognitoIdentity/GetCredentialsForIdentity.hs +0/−180
• gen/Network/AWS/CognitoIdentity/GetId.hs +0/−165
• gen/Network/AWS/CognitoIdentity/GetIdentityPoolRoles.hs +0/−168
• gen/Network/AWS/CognitoIdentity/GetOpenIdToken.hs +0/−167
• gen/Network/AWS/CognitoIdentity/GetOpenIdTokenForDeveloperIdentity.hs +0/−201
• gen/Network/AWS/CognitoIdentity/ListIdentities.hs +0/−199
• gen/Network/AWS/CognitoIdentity/ListIdentityPools.hs +0/−167
• gen/Network/AWS/CognitoIdentity/LookupDeveloperIdentity.hs +0/−210
• gen/Network/AWS/CognitoIdentity/MergeDeveloperIdentities.hs +0/−186
• gen/Network/AWS/CognitoIdentity/SetIdentityPoolRoles.hs +0/−139
• gen/Network/AWS/CognitoIdentity/Types.hs +0/−242
• gen/Network/AWS/CognitoIdentity/Types/Product.hs +0/−607
• gen/Network/AWS/CognitoIdentity/Types/Sum.hs +0/−143
• gen/Network/AWS/CognitoIdentity/UnlinkDeveloperIdentity.hs +0/−157
• gen/Network/AWS/CognitoIdentity/UnlinkIdentity.hs +0/−138
• gen/Network/AWS/CognitoIdentity/UpdateIdentityPool.hs +0/−190
• gen/Network/AWS/CognitoIdentity/Waiters.hs +0/−21
• test/Main.hs +11/−9
• test/Test/AWS/CognitoIdentity.hs +0/−26
• test/Test/AWS/CognitoIdentity/Internal.hs +0/−16
• test/Test/AWS/Gen/CognitoIdentity.hs +0/−363
• test/Test/Amazonka/CognitoIdentity.hs +20/−0
• test/Test/Amazonka/CognitoIdentity/Internal.hs +8/−0
• test/Test/Amazonka/Gen/CognitoIdentity.hs +498/−0

@@ -7,9 +7,8 @@   ## Version--`1.6.1`-+ +`2.0` - Derived from API version @2014-06-30@ of the AWS service descriptions, licensed under Apache 2.0.  ## Description @@ -26,7 +25,7 @@ The provided lenses should be compatible with any of the major lens libraries [lens](http://hackage.haskell.org/package/lens) or [lens-family-core](http://hackage.haskell.org/package/lens-family-core). -See [Network.AWS.CognitoIdentity](http://hackage.haskell.org/package/amazonka-cognito-identity/docs/Network-AWS-CognitoIdentity.html)+See [Amazonka.CognitoIdentity](http://hackage.haskell.org/package/amazonka-cognito-identity/docs/Amazonka-CognitoIdentity.html) or [the AWS documentation](https://aws.amazon.com/documentation/) to get started.  

@@ -1,2 +0,0 @@-import           Distribution.Simple-main = defaultMain

@@ -1,103 +1,119 @@-name:                  amazonka-cognito-identity-version:               1.6.1-synopsis:              Amazon Cognito Identity SDK.-homepage:              https://github.com/brendanhay/amazonka-bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               MPL-2.0-license-file:          LICENSE-author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2018 Brendan Hay-category:              Network, AWS, Cloud, Distributed Computing-build-type:            Simple-cabal-version:         >= 1.10-extra-source-files:    README.md fixture/*.yaml fixture/*.proto src/.gitkeep+cabal-version:      2.2+name:               amazonka-cognito-identity+version:            2.0+synopsis:           Amazon Cognito Identity SDK.+homepage:           https://github.com/brendanhay/amazonka+bug-reports:        https://github.com/brendanhay/amazonka/issues+license:            MPL-2.0+license-file:       LICENSE+author:             Brendan Hay+maintainer:+  Brendan Hay <brendan.g.hay+amazonka@gmail.com>, Jack Kelly <jack@jackkelly.name>++copyright:          Copyright (c) 2013-2023 Brendan Hay+category:           AWS+build-type:         Simple+extra-source-files:+  fixture/*.proto+  fixture/*.yaml+  README.md+  src/.gitkeep+ description:-    The types from this library are intended to be used with-    <http://hackage.haskell.org/package/amazonka amazonka>, which provides-    mechanisms for specifying AuthN/AuthZ information, sending requests,-    and receiving responses.-    .-    Lenses are used for constructing and manipulating types,-    due to the depth of nesting of AWS types and transparency regarding-    de/serialisation into more palatable Haskell values.-    The provided lenses should be compatible with any of the major lens libraries-    such as <http://hackage.haskell.org/package/lens lens> or-    <http://hackage.haskell.org/package/lens-family-core lens-family-core>.-    .-    See "Network.AWS.CognitoIdentity" or <https://aws.amazon.com/documentation/ the AWS documentation>-    to get started.+  Derived from API version @2014-06-30@ of the AWS service descriptions, licensed under Apache 2.0.+  .+  The types from this library are intended to be used with <http://hackage.haskell.org/package/amazonka amazonka>,+  which provides mechanisms for specifying AuthN/AuthZ information, sending requests, and receiving responses.+  .+  It is recommended to use generic lenses or optics from packages such as <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify optional fields and deconstruct responses.+  .+  Generated lenses can be found in "Amazonka.CognitoIdentity.Lens" and are+  suitable for use with a lens package such as <http://hackage.haskell.org/package/lens lens> or <http://hackage.haskell.org/package/lens-family-core lens-family-core>.+  .+  See "Amazonka.CognitoIdentity" and the <https://aws.amazon.com/documentation/ AWS documentation> to get started.  source-repository head-    type:              git-    location:          git://github.com/brendanhay/amazonka.git-    subdir:            amazonka-cognito-identity+  type:     git+  location: git://github.com/brendanhay/amazonka.git+  subdir:   amazonka-cognito-identity  library-    default-language:  Haskell2010-    hs-source-dirs:    src gen--    ghc-options:-        -Wall-        -fwarn-incomplete-uni-patterns-        -fwarn-incomplete-record-updates-        -funbox-strict-fields--    exposed-modules:-          Network.AWS.CognitoIdentity-        , Network.AWS.CognitoIdentity.CreateIdentityPool-        , Network.AWS.CognitoIdentity.DeleteIdentities-        , Network.AWS.CognitoIdentity.DeleteIdentityPool-        , Network.AWS.CognitoIdentity.DescribeIdentity-        , Network.AWS.CognitoIdentity.DescribeIdentityPool-        , Network.AWS.CognitoIdentity.GetCredentialsForIdentity-        , Network.AWS.CognitoIdentity.GetId-        , Network.AWS.CognitoIdentity.GetIdentityPoolRoles-        , Network.AWS.CognitoIdentity.GetOpenIdToken-        , Network.AWS.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity-        , Network.AWS.CognitoIdentity.ListIdentities-        , Network.AWS.CognitoIdentity.ListIdentityPools-        , Network.AWS.CognitoIdentity.LookupDeveloperIdentity-        , Network.AWS.CognitoIdentity.MergeDeveloperIdentities-        , Network.AWS.CognitoIdentity.SetIdentityPoolRoles-        , Network.AWS.CognitoIdentity.Types-        , Network.AWS.CognitoIdentity.UnlinkDeveloperIdentity-        , Network.AWS.CognitoIdentity.UnlinkIdentity-        , Network.AWS.CognitoIdentity.UpdateIdentityPool-        , Network.AWS.CognitoIdentity.Waiters+  default-language: Haskell2010+  hs-source-dirs:   src gen+  ghc-options:+    -Wall -fwarn-incomplete-uni-patterns+    -fwarn-incomplete-record-updates -funbox-strict-fields -    other-modules:-          Network.AWS.CognitoIdentity.Types.Product-        , Network.AWS.CognitoIdentity.Types.Sum+  exposed-modules:+    Amazonka.CognitoIdentity+    Amazonka.CognitoIdentity.CreateIdentityPool+    Amazonka.CognitoIdentity.DeleteIdentities+    Amazonka.CognitoIdentity.DeleteIdentityPool+    Amazonka.CognitoIdentity.DescribeIdentity+    Amazonka.CognitoIdentity.DescribeIdentityPool+    Amazonka.CognitoIdentity.GetCredentialsForIdentity+    Amazonka.CognitoIdentity.GetId+    Amazonka.CognitoIdentity.GetIdentityPoolRoles+    Amazonka.CognitoIdentity.GetOpenIdToken+    Amazonka.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity+    Amazonka.CognitoIdentity.GetPrincipalTagAttributeMap+    Amazonka.CognitoIdentity.Lens+    Amazonka.CognitoIdentity.ListIdentities+    Amazonka.CognitoIdentity.ListIdentityPools+    Amazonka.CognitoIdentity.ListTagsForResource+    Amazonka.CognitoIdentity.LookupDeveloperIdentity+    Amazonka.CognitoIdentity.MergeDeveloperIdentities+    Amazonka.CognitoIdentity.SetIdentityPoolRoles+    Amazonka.CognitoIdentity.SetPrincipalTagAttributeMap+    Amazonka.CognitoIdentity.TagResource+    Amazonka.CognitoIdentity.Types+    Amazonka.CognitoIdentity.Types.AmbiguousRoleResolutionType+    Amazonka.CognitoIdentity.Types.CognitoErrorCode+    Amazonka.CognitoIdentity.Types.CognitoIdentityProvider+    Amazonka.CognitoIdentity.Types.Credentials+    Amazonka.CognitoIdentity.Types.IdentityDescription+    Amazonka.CognitoIdentity.Types.IdentityPool+    Amazonka.CognitoIdentity.Types.IdentityPoolShortDescription+    Amazonka.CognitoIdentity.Types.MappingRule+    Amazonka.CognitoIdentity.Types.MappingRuleMatchType+    Amazonka.CognitoIdentity.Types.RoleMapping+    Amazonka.CognitoIdentity.Types.RoleMappingType+    Amazonka.CognitoIdentity.Types.RulesConfigurationType+    Amazonka.CognitoIdentity.Types.UnprocessedIdentityId+    Amazonka.CognitoIdentity.UnlinkDeveloperIdentity+    Amazonka.CognitoIdentity.UnlinkIdentity+    Amazonka.CognitoIdentity.UntagResource+    Amazonka.CognitoIdentity.UpdateIdentityPool+    Amazonka.CognitoIdentity.Waiters -    build-depends:-          amazonka-core == 1.6.1.*-        , base          >= 4.7     && < 5+  build-depends:+    , amazonka-core  >=2.0  && <2.1+    , base           >=4.12 && <5  test-suite amazonka-cognito-identity-test-    type:              exitcode-stdio-1.0-    default-language:  Haskell2010-    hs-source-dirs:    test-    main-is:           Main.hs--    ghc-options:       -Wall -threaded+  type:             exitcode-stdio-1.0+  default-language: Haskell2010+  hs-source-dirs:   test+  main-is:          Main.hs+  ghc-options:      -Wall -threaded -    -- This section is encoded by the template and any modules added by-    -- hand outside these namespaces will not correctly be added to the-    -- distribution package.-    other-modules:-          Test.AWS.CognitoIdentity-        , Test.AWS.Gen.CognitoIdentity-        , Test.AWS.CognitoIdentity.Internal+  -- This section is encoded by the template and any modules added by+  -- hand outside these namespaces will not correctly be added to the+  -- distribution package.+  other-modules:+    Test.Amazonka.CognitoIdentity+    Test.Amazonka.CognitoIdentity.Internal+    Test.Amazonka.Gen.CognitoIdentity -    build-depends:-          amazonka-core == 1.6.1.*-        , amazonka-test == 1.6.1.*-        , amazonka-cognito-identity-        , base-        , bytestring-        , tasty-        , tasty-hunit-        , text-        , time-        , unordered-containers+  build-depends:+    , amazonka-cognito-identity+    , amazonka-core              >=2.0 && <2.1+    , amazonka-test              >=2.0 && <2.1+    , base+    , bytestring+    , case-insensitive+    , tasty+    , tasty-hunit+    , text+    , time+    , unordered-containers

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-identity/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-identity.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,323 @@+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- |+-- Module      : Amazonka.CognitoIdentity+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Derived from API version @2014-06-30@ of the AWS service descriptions, licensed under Apache 2.0.+--+-- Amazon Cognito Federated Identities+--+-- Amazon Cognito Federated Identities is a web service that delivers+-- scoped temporary credentials to mobile devices and other untrusted+-- environments. It uniquely identifies a device and supplies the user with+-- a consistent identity over the lifetime of an application.+--+-- Using Amazon Cognito Federated Identities, you can enable authentication+-- with one or more third-party identity providers (Facebook, Google, or+-- Login with Amazon) or an Amazon Cognito user pool, and you can also+-- choose to support unauthenticated access from your app. Cognito delivers+-- a unique identifier for each user and acts as an OpenID token provider+-- trusted by AWS Security Token Service (STS) to access temporary,+-- limited-privilege AWS credentials.+--+-- For a description of the authentication flow from the Amazon Cognito+-- Developer Guide see+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html Authentication Flow>.+--+-- For more information see+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html Amazon Cognito Federated Identities>.+module Amazonka.CognitoIdentity+  ( -- * Service Configuration+    defaultService,++    -- * Errors+    -- $errors++    -- ** ConcurrentModificationException+    _ConcurrentModificationException,++    -- ** DeveloperUserAlreadyRegisteredException+    _DeveloperUserAlreadyRegisteredException,++    -- ** ExternalServiceException+    _ExternalServiceException,++    -- ** InternalErrorException+    _InternalErrorException,++    -- ** InvalidIdentityPoolConfigurationException+    _InvalidIdentityPoolConfigurationException,++    -- ** InvalidParameterException+    _InvalidParameterException,++    -- ** LimitExceededException+    _LimitExceededException,++    -- ** NotAuthorizedException+    _NotAuthorizedException,++    -- ** ResourceConflictException+    _ResourceConflictException,++    -- ** ResourceNotFoundException+    _ResourceNotFoundException,++    -- ** TooManyRequestsException+    _TooManyRequestsException,++    -- * Waiters+    -- $waiters++    -- * Operations+    -- $operations++    -- ** CreateIdentityPool+    CreateIdentityPool (CreateIdentityPool'),+    newCreateIdentityPool,+    IdentityPool (IdentityPool'),+    newIdentityPool,++    -- ** DeleteIdentities+    DeleteIdentities (DeleteIdentities'),+    newDeleteIdentities,+    DeleteIdentitiesResponse (DeleteIdentitiesResponse'),+    newDeleteIdentitiesResponse,++    -- ** DeleteIdentityPool+    DeleteIdentityPool (DeleteIdentityPool'),+    newDeleteIdentityPool,+    DeleteIdentityPoolResponse (DeleteIdentityPoolResponse'),+    newDeleteIdentityPoolResponse,++    -- ** DescribeIdentity+    DescribeIdentity (DescribeIdentity'),+    newDescribeIdentity,+    IdentityDescription (IdentityDescription'),+    newIdentityDescription,++    -- ** DescribeIdentityPool+    DescribeIdentityPool (DescribeIdentityPool'),+    newDescribeIdentityPool,+    IdentityPool (IdentityPool'),+    newIdentityPool,++    -- ** GetCredentialsForIdentity+    GetCredentialsForIdentity (GetCredentialsForIdentity'),+    newGetCredentialsForIdentity,+    GetCredentialsForIdentityResponse (GetCredentialsForIdentityResponse'),+    newGetCredentialsForIdentityResponse,++    -- ** GetId+    GetId (GetId'),+    newGetId,+    GetIdResponse (GetIdResponse'),+    newGetIdResponse,++    -- ** GetIdentityPoolRoles+    GetIdentityPoolRoles (GetIdentityPoolRoles'),+    newGetIdentityPoolRoles,+    GetIdentityPoolRolesResponse (GetIdentityPoolRolesResponse'),+    newGetIdentityPoolRolesResponse,++    -- ** GetOpenIdToken+    GetOpenIdToken (GetOpenIdToken'),+    newGetOpenIdToken,+    GetOpenIdTokenResponse (GetOpenIdTokenResponse'),+    newGetOpenIdTokenResponse,++    -- ** GetOpenIdTokenForDeveloperIdentity+    GetOpenIdTokenForDeveloperIdentity (GetOpenIdTokenForDeveloperIdentity'),+    newGetOpenIdTokenForDeveloperIdentity,+    GetOpenIdTokenForDeveloperIdentityResponse (GetOpenIdTokenForDeveloperIdentityResponse'),+    newGetOpenIdTokenForDeveloperIdentityResponse,++    -- ** GetPrincipalTagAttributeMap+    GetPrincipalTagAttributeMap (GetPrincipalTagAttributeMap'),+    newGetPrincipalTagAttributeMap,+    GetPrincipalTagAttributeMapResponse (GetPrincipalTagAttributeMapResponse'),+    newGetPrincipalTagAttributeMapResponse,++    -- ** ListIdentities+    ListIdentities (ListIdentities'),+    newListIdentities,+    ListIdentitiesResponse (ListIdentitiesResponse'),+    newListIdentitiesResponse,++    -- ** ListIdentityPools (Paginated)+    ListIdentityPools (ListIdentityPools'),+    newListIdentityPools,+    ListIdentityPoolsResponse (ListIdentityPoolsResponse'),+    newListIdentityPoolsResponse,++    -- ** ListTagsForResource+    ListTagsForResource (ListTagsForResource'),+    newListTagsForResource,+    ListTagsForResourceResponse (ListTagsForResourceResponse'),+    newListTagsForResourceResponse,++    -- ** LookupDeveloperIdentity+    LookupDeveloperIdentity (LookupDeveloperIdentity'),+    newLookupDeveloperIdentity,+    LookupDeveloperIdentityResponse (LookupDeveloperIdentityResponse'),+    newLookupDeveloperIdentityResponse,++    -- ** MergeDeveloperIdentities+    MergeDeveloperIdentities (MergeDeveloperIdentities'),+    newMergeDeveloperIdentities,+    MergeDeveloperIdentitiesResponse (MergeDeveloperIdentitiesResponse'),+    newMergeDeveloperIdentitiesResponse,++    -- ** SetIdentityPoolRoles+    SetIdentityPoolRoles (SetIdentityPoolRoles'),+    newSetIdentityPoolRoles,+    SetIdentityPoolRolesResponse (SetIdentityPoolRolesResponse'),+    newSetIdentityPoolRolesResponse,++    -- ** SetPrincipalTagAttributeMap+    SetPrincipalTagAttributeMap (SetPrincipalTagAttributeMap'),+    newSetPrincipalTagAttributeMap,+    SetPrincipalTagAttributeMapResponse (SetPrincipalTagAttributeMapResponse'),+    newSetPrincipalTagAttributeMapResponse,++    -- ** TagResource+    TagResource (TagResource'),+    newTagResource,+    TagResourceResponse (TagResourceResponse'),+    newTagResourceResponse,++    -- ** UnlinkDeveloperIdentity+    UnlinkDeveloperIdentity (UnlinkDeveloperIdentity'),+    newUnlinkDeveloperIdentity,+    UnlinkDeveloperIdentityResponse (UnlinkDeveloperIdentityResponse'),+    newUnlinkDeveloperIdentityResponse,++    -- ** UnlinkIdentity+    UnlinkIdentity (UnlinkIdentity'),+    newUnlinkIdentity,+    UnlinkIdentityResponse (UnlinkIdentityResponse'),+    newUnlinkIdentityResponse,++    -- ** UntagResource+    UntagResource (UntagResource'),+    newUntagResource,+    UntagResourceResponse (UntagResourceResponse'),+    newUntagResourceResponse,++    -- ** UpdateIdentityPool+    UpdateIdentityPool (UpdateIdentityPool'),+    newUpdateIdentityPool,+    IdentityPool (IdentityPool'),+    newIdentityPool,++    -- * Types++    -- ** AmbiguousRoleResolutionType+    AmbiguousRoleResolutionType (..),++    -- ** CognitoErrorCode+    CognitoErrorCode (..),++    -- ** MappingRuleMatchType+    MappingRuleMatchType (..),++    -- ** RoleMappingType+    RoleMappingType (..),++    -- ** CognitoIdentityProvider+    CognitoIdentityProvider (CognitoIdentityProvider'),+    newCognitoIdentityProvider,++    -- ** Credentials+    Credentials (Credentials'),+    newCredentials,++    -- ** IdentityDescription+    IdentityDescription (IdentityDescription'),+    newIdentityDescription,++    -- ** IdentityPool+    IdentityPool (IdentityPool'),+    newIdentityPool,++    -- ** IdentityPoolShortDescription+    IdentityPoolShortDescription (IdentityPoolShortDescription'),+    newIdentityPoolShortDescription,++    -- ** MappingRule+    MappingRule (MappingRule'),+    newMappingRule,++    -- ** RoleMapping+    RoleMapping (RoleMapping'),+    newRoleMapping,++    -- ** RulesConfigurationType+    RulesConfigurationType (RulesConfigurationType'),+    newRulesConfigurationType,++    -- ** UnprocessedIdentityId+    UnprocessedIdentityId (UnprocessedIdentityId'),+    newUnprocessedIdentityId,+  )+where++import Amazonka.CognitoIdentity.CreateIdentityPool+import Amazonka.CognitoIdentity.DeleteIdentities+import Amazonka.CognitoIdentity.DeleteIdentityPool+import Amazonka.CognitoIdentity.DescribeIdentity+import Amazonka.CognitoIdentity.DescribeIdentityPool+import Amazonka.CognitoIdentity.GetCredentialsForIdentity+import Amazonka.CognitoIdentity.GetId+import Amazonka.CognitoIdentity.GetIdentityPoolRoles+import Amazonka.CognitoIdentity.GetOpenIdToken+import Amazonka.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity+import Amazonka.CognitoIdentity.GetPrincipalTagAttributeMap+import Amazonka.CognitoIdentity.Lens+import Amazonka.CognitoIdentity.ListIdentities+import Amazonka.CognitoIdentity.ListIdentityPools+import Amazonka.CognitoIdentity.ListTagsForResource+import Amazonka.CognitoIdentity.LookupDeveloperIdentity+import Amazonka.CognitoIdentity.MergeDeveloperIdentities+import Amazonka.CognitoIdentity.SetIdentityPoolRoles+import Amazonka.CognitoIdentity.SetPrincipalTagAttributeMap+import Amazonka.CognitoIdentity.TagResource+import Amazonka.CognitoIdentity.Types+import Amazonka.CognitoIdentity.UnlinkDeveloperIdentity+import Amazonka.CognitoIdentity.UnlinkIdentity+import Amazonka.CognitoIdentity.UntagResource+import Amazonka.CognitoIdentity.UpdateIdentityPool+import Amazonka.CognitoIdentity.Waiters++-- $errors+-- Error matchers are designed for use with the functions provided by+-- <http://hackage.haskell.org/package/lens/docs/Control-Exception-Lens.html Control.Exception.Lens>.+-- This allows catching (and rethrowing) service specific errors returned+-- by 'CognitoIdentity'.++-- $operations+-- Some AWS operations return results that are incomplete and require subsequent+-- requests in order to obtain the entire result set. The process of sending+-- subsequent requests to continue where a previous request left off is called+-- pagination. For example, the 'ListObjects' operation of Amazon S3 returns up to+-- 1000 objects at a time, and you must send subsequent requests with the+-- appropriate Marker in order to retrieve the next page of results.+--+-- Operations that have an 'AWSPager' instance can transparently perform subsequent+-- requests, correctly setting Markers and other request facets to iterate through+-- the entire result set of a truncated API operation. Operations which support+-- this have an additional note in the documentation.+--+-- Many operations have the ability to filter results on the server side. See the+-- individual operation parameters for details.++-- $waiters+-- Waiters poll by repeatedly sending a request until some remote success condition+-- configured by the 'Wait' specification is fulfilled. The 'Wait' specification+-- determines how many attempts should be made, in addition to delay and retry strategies.

@@ -0,0 +1,307 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.CreateIdentityPool+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new identity pool. The identity pool is a store of user+-- identity information that is specific to your AWS account. The keys for+-- @SupportedLoginProviders@ are as follows:+--+-- -   Facebook: @graph.facebook.com@+--+-- -   Google: @accounts.google.com@+--+-- -   Amazon: @www.amazon.com@+--+-- -   Twitter: @api.twitter.com@+--+-- -   Digits: @www.digits.com@+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.CreateIdentityPool+  ( -- * Creating a Request+    CreateIdentityPool (..),+    newCreateIdentityPool,++    -- * Request Lenses+    createIdentityPool_allowClassicFlow,+    createIdentityPool_cognitoIdentityProviders,+    createIdentityPool_developerProviderName,+    createIdentityPool_identityPoolTags,+    createIdentityPool_openIdConnectProviderARNs,+    createIdentityPool_samlProviderARNs,+    createIdentityPool_supportedLoginProviders,+    createIdentityPool_identityPoolName,+    createIdentityPool_allowUnauthenticatedIdentities,++    -- * Destructuring the Response+    IdentityPool (..),+    newIdentityPool,++    -- * Response Lenses+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the CreateIdentityPool action.+--+-- /See:/ 'newCreateIdentityPool' smart constructor.+data CreateIdentityPool = CreateIdentityPool'+  { -- | Enables or disables the Basic (Classic) authentication flow. For more+    -- information, see+    -- <https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html Identity Pools (Federated Identities) Authentication Flow>+    -- in the /Amazon Cognito Developer Guide/.+    allowClassicFlow :: Prelude.Maybe Prelude.Bool,+    -- | An array of Amazon Cognito user pools and their client IDs.+    cognitoIdentityProviders :: Prelude.Maybe [CognitoIdentityProvider],+    -- | The \"domain\" by which Cognito will refer to your users. This name acts+    -- as a placeholder that allows your backend and the Cognito service to+    -- communicate about the developer provider. For the+    -- @DeveloperProviderName@, you can use letters as well as period (@.@),+    -- underscore (@_@), and dash (@-@).+    --+    -- Once you have set a developer provider name, you cannot change it.+    -- Please take care in setting this parameter.+    developerProviderName :: Prelude.Maybe Prelude.Text,+    -- | Tags to assign to the identity pool. A tag is a label that you can apply+    -- to identity pools to categorize and manage them in different ways, such+    -- as by purpose, owner, environment, or other criteria.+    identityPoolTags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | The Amazon Resource Names (ARN) of the OpenID Connect providers.+    openIdConnectProviderARNs :: Prelude.Maybe [Prelude.Text],+    -- | An array of Amazon Resource Names (ARNs) of the SAML provider for your+    -- identity pool.+    samlProviderARNs :: Prelude.Maybe [Prelude.Text],+    -- | Optional key:value pairs mapping provider names to provider app IDs.+    supportedLoginProviders :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | A string that you provide.+    identityPoolName :: Prelude.Text,+    -- | TRUE if the identity pool supports unauthenticated logins.+    allowUnauthenticatedIdentities :: Prelude.Bool+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'CreateIdentityPool' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'allowClassicFlow', 'createIdentityPool_allowClassicFlow' - Enables or disables the Basic (Classic) authentication flow. For more+-- information, see+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html Identity Pools (Federated Identities) Authentication Flow>+-- in the /Amazon Cognito Developer Guide/.+--+-- 'cognitoIdentityProviders', 'createIdentityPool_cognitoIdentityProviders' - An array of Amazon Cognito user pools and their client IDs.+--+-- 'developerProviderName', 'createIdentityPool_developerProviderName' - The \"domain\" by which Cognito will refer to your users. This name acts+-- as a placeholder that allows your backend and the Cognito service to+-- communicate about the developer provider. For the+-- @DeveloperProviderName@, you can use letters as well as period (@.@),+-- underscore (@_@), and dash (@-@).+--+-- Once you have set a developer provider name, you cannot change it.+-- Please take care in setting this parameter.+--+-- 'identityPoolTags', 'createIdentityPool_identityPoolTags' - Tags to assign to the identity pool. A tag is a label that you can apply+-- to identity pools to categorize and manage them in different ways, such+-- as by purpose, owner, environment, or other criteria.+--+-- 'openIdConnectProviderARNs', 'createIdentityPool_openIdConnectProviderARNs' - The Amazon Resource Names (ARN) of the OpenID Connect providers.+--+-- 'samlProviderARNs', 'createIdentityPool_samlProviderARNs' - An array of Amazon Resource Names (ARNs) of the SAML provider for your+-- identity pool.+--+-- 'supportedLoginProviders', 'createIdentityPool_supportedLoginProviders' - Optional key:value pairs mapping provider names to provider app IDs.+--+-- 'identityPoolName', 'createIdentityPool_identityPoolName' - A string that you provide.+--+-- 'allowUnauthenticatedIdentities', 'createIdentityPool_allowUnauthenticatedIdentities' - TRUE if the identity pool supports unauthenticated logins.+newCreateIdentityPool ::+  -- | 'identityPoolName'+  Prelude.Text ->+  -- | 'allowUnauthenticatedIdentities'+  Prelude.Bool ->+  CreateIdentityPool+newCreateIdentityPool+  pIdentityPoolName_+  pAllowUnauthenticatedIdentities_ =+    CreateIdentityPool'+      { allowClassicFlow =+          Prelude.Nothing,+        cognitoIdentityProviders = Prelude.Nothing,+        developerProviderName = Prelude.Nothing,+        identityPoolTags = Prelude.Nothing,+        openIdConnectProviderARNs = Prelude.Nothing,+        samlProviderARNs = Prelude.Nothing,+        supportedLoginProviders = Prelude.Nothing,+        identityPoolName = pIdentityPoolName_,+        allowUnauthenticatedIdentities =+          pAllowUnauthenticatedIdentities_+      }++-- | Enables or disables the Basic (Classic) authentication flow. For more+-- information, see+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/authentication-flow.html Identity Pools (Federated Identities) Authentication Flow>+-- in the /Amazon Cognito Developer Guide/.+createIdentityPool_allowClassicFlow :: Lens.Lens' CreateIdentityPool (Prelude.Maybe Prelude.Bool)+createIdentityPool_allowClassicFlow = Lens.lens (\CreateIdentityPool' {allowClassicFlow} -> allowClassicFlow) (\s@CreateIdentityPool' {} a -> s {allowClassicFlow = a} :: CreateIdentityPool)++-- | An array of Amazon Cognito user pools and their client IDs.+createIdentityPool_cognitoIdentityProviders :: Lens.Lens' CreateIdentityPool (Prelude.Maybe [CognitoIdentityProvider])+createIdentityPool_cognitoIdentityProviders = Lens.lens (\CreateIdentityPool' {cognitoIdentityProviders} -> cognitoIdentityProviders) (\s@CreateIdentityPool' {} a -> s {cognitoIdentityProviders = a} :: CreateIdentityPool) Prelude.. Lens.mapping Lens.coerced++-- | The \"domain\" by which Cognito will refer to your users. This name acts+-- as a placeholder that allows your backend and the Cognito service to+-- communicate about the developer provider. For the+-- @DeveloperProviderName@, you can use letters as well as period (@.@),+-- underscore (@_@), and dash (@-@).+--+-- Once you have set a developer provider name, you cannot change it.+-- Please take care in setting this parameter.+createIdentityPool_developerProviderName :: Lens.Lens' CreateIdentityPool (Prelude.Maybe Prelude.Text)+createIdentityPool_developerProviderName = Lens.lens (\CreateIdentityPool' {developerProviderName} -> developerProviderName) (\s@CreateIdentityPool' {} a -> s {developerProviderName = a} :: CreateIdentityPool)++-- | Tags to assign to the identity pool. A tag is a label that you can apply+-- to identity pools to categorize and manage them in different ways, such+-- as by purpose, owner, environment, or other criteria.+createIdentityPool_identityPoolTags :: Lens.Lens' CreateIdentityPool (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+createIdentityPool_identityPoolTags = Lens.lens (\CreateIdentityPool' {identityPoolTags} -> identityPoolTags) (\s@CreateIdentityPool' {} a -> s {identityPoolTags = a} :: CreateIdentityPool) Prelude.. Lens.mapping Lens.coerced++-- | The Amazon Resource Names (ARN) of the OpenID Connect providers.+createIdentityPool_openIdConnectProviderARNs :: Lens.Lens' CreateIdentityPool (Prelude.Maybe [Prelude.Text])+createIdentityPool_openIdConnectProviderARNs = Lens.lens (\CreateIdentityPool' {openIdConnectProviderARNs} -> openIdConnectProviderARNs) (\s@CreateIdentityPool' {} a -> s {openIdConnectProviderARNs = a} :: CreateIdentityPool) Prelude.. Lens.mapping Lens.coerced++-- | An array of Amazon Resource Names (ARNs) of the SAML provider for your+-- identity pool.+createIdentityPool_samlProviderARNs :: Lens.Lens' CreateIdentityPool (Prelude.Maybe [Prelude.Text])+createIdentityPool_samlProviderARNs = Lens.lens (\CreateIdentityPool' {samlProviderARNs} -> samlProviderARNs) (\s@CreateIdentityPool' {} a -> s {samlProviderARNs = a} :: CreateIdentityPool) Prelude.. Lens.mapping Lens.coerced++-- | Optional key:value pairs mapping provider names to provider app IDs.+createIdentityPool_supportedLoginProviders :: Lens.Lens' CreateIdentityPool (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+createIdentityPool_supportedLoginProviders = Lens.lens (\CreateIdentityPool' {supportedLoginProviders} -> supportedLoginProviders) (\s@CreateIdentityPool' {} a -> s {supportedLoginProviders = a} :: CreateIdentityPool) Prelude.. Lens.mapping Lens.coerced++-- | A string that you provide.+createIdentityPool_identityPoolName :: Lens.Lens' CreateIdentityPool Prelude.Text+createIdentityPool_identityPoolName = Lens.lens (\CreateIdentityPool' {identityPoolName} -> identityPoolName) (\s@CreateIdentityPool' {} a -> s {identityPoolName = a} :: CreateIdentityPool)++-- | TRUE if the identity pool supports unauthenticated logins.+createIdentityPool_allowUnauthenticatedIdentities :: Lens.Lens' CreateIdentityPool Prelude.Bool+createIdentityPool_allowUnauthenticatedIdentities = Lens.lens (\CreateIdentityPool' {allowUnauthenticatedIdentities} -> allowUnauthenticatedIdentities) (\s@CreateIdentityPool' {} a -> s {allowUnauthenticatedIdentities = a} :: CreateIdentityPool)++instance Core.AWSRequest CreateIdentityPool where+  type AWSResponse CreateIdentityPool = IdentityPool+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      (\s h x -> Data.eitherParseJSON x)++instance Prelude.Hashable CreateIdentityPool where+  hashWithSalt _salt CreateIdentityPool' {..} =+    _salt+      `Prelude.hashWithSalt` allowClassicFlow+      `Prelude.hashWithSalt` cognitoIdentityProviders+      `Prelude.hashWithSalt` developerProviderName+      `Prelude.hashWithSalt` identityPoolTags+      `Prelude.hashWithSalt` openIdConnectProviderARNs+      `Prelude.hashWithSalt` samlProviderARNs+      `Prelude.hashWithSalt` supportedLoginProviders+      `Prelude.hashWithSalt` identityPoolName+      `Prelude.hashWithSalt` allowUnauthenticatedIdentities++instance Prelude.NFData CreateIdentityPool where+  rnf CreateIdentityPool' {..} =+    Prelude.rnf allowClassicFlow+      `Prelude.seq` Prelude.rnf cognitoIdentityProviders+      `Prelude.seq` Prelude.rnf developerProviderName+      `Prelude.seq` Prelude.rnf identityPoolTags+      `Prelude.seq` Prelude.rnf openIdConnectProviderARNs+      `Prelude.seq` Prelude.rnf samlProviderARNs+      `Prelude.seq` Prelude.rnf supportedLoginProviders+      `Prelude.seq` Prelude.rnf identityPoolName+      `Prelude.seq` Prelude.rnf allowUnauthenticatedIdentities++instance Data.ToHeaders CreateIdentityPool where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.CreateIdentityPool" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON CreateIdentityPool where+  toJSON CreateIdentityPool' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("AllowClassicFlow" Data..=)+              Prelude.<$> allowClassicFlow,+            ("CognitoIdentityProviders" Data..=)+              Prelude.<$> cognitoIdentityProviders,+            ("DeveloperProviderName" Data..=)+              Prelude.<$> developerProviderName,+            ("IdentityPoolTags" Data..=)+              Prelude.<$> identityPoolTags,+            ("OpenIdConnectProviderARNs" Data..=)+              Prelude.<$> openIdConnectProviderARNs,+            ("SamlProviderARNs" Data..=)+              Prelude.<$> samlProviderARNs,+            ("SupportedLoginProviders" Data..=)+              Prelude.<$> supportedLoginProviders,+            Prelude.Just+              ("IdentityPoolName" Data..= identityPoolName),+            Prelude.Just+              ( "AllowUnauthenticatedIdentities"+                  Data..= allowUnauthenticatedIdentities+              )+          ]+      )++instance Data.ToPath CreateIdentityPool where+  toPath = Prelude.const "/"++instance Data.ToQuery CreateIdentityPool where+  toQuery = Prelude.const Prelude.mempty

@@ -0,0 +1,187 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.DeleteIdentities+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes identities from an identity pool. You can specify a list of 1-60+-- identities that you want to delete.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.DeleteIdentities+  ( -- * Creating a Request+    DeleteIdentities (..),+    newDeleteIdentities,++    -- * Request Lenses+    deleteIdentities_identityIdsToDelete,++    -- * Destructuring the Response+    DeleteIdentitiesResponse (..),+    newDeleteIdentitiesResponse,++    -- * Response Lenses+    deleteIdentitiesResponse_unprocessedIdentityIds,+    deleteIdentitiesResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @DeleteIdentities@ action.+--+-- /See:/ 'newDeleteIdentities' smart constructor.+data DeleteIdentities = DeleteIdentities'+  { -- | A list of 1-60 identities that you want to delete.+    identityIdsToDelete :: Prelude.NonEmpty Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteIdentities' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityIdsToDelete', 'deleteIdentities_identityIdsToDelete' - A list of 1-60 identities that you want to delete.+newDeleteIdentities ::+  -- | 'identityIdsToDelete'+  Prelude.NonEmpty Prelude.Text ->+  DeleteIdentities+newDeleteIdentities pIdentityIdsToDelete_ =+  DeleteIdentities'+    { identityIdsToDelete =+        Lens.coerced Lens.# pIdentityIdsToDelete_+    }++-- | A list of 1-60 identities that you want to delete.+deleteIdentities_identityIdsToDelete :: Lens.Lens' DeleteIdentities (Prelude.NonEmpty Prelude.Text)+deleteIdentities_identityIdsToDelete = Lens.lens (\DeleteIdentities' {identityIdsToDelete} -> identityIdsToDelete) (\s@DeleteIdentities' {} a -> s {identityIdsToDelete = a} :: DeleteIdentities) Prelude.. Lens.coerced++instance Core.AWSRequest DeleteIdentities where+  type+    AWSResponse DeleteIdentities =+      DeleteIdentitiesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          DeleteIdentitiesResponse'+            Prelude.<$> ( x+                            Data..?> "UnprocessedIdentityIds"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable DeleteIdentities where+  hashWithSalt _salt DeleteIdentities' {..} =+    _salt `Prelude.hashWithSalt` identityIdsToDelete++instance Prelude.NFData DeleteIdentities where+  rnf DeleteIdentities' {..} =+    Prelude.rnf identityIdsToDelete++instance Data.ToHeaders DeleteIdentities where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.DeleteIdentities" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DeleteIdentities where+  toJSON DeleteIdentities' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("IdentityIdsToDelete" Data..= identityIdsToDelete)+          ]+      )++instance Data.ToPath DeleteIdentities where+  toPath = Prelude.const "/"++instance Data.ToQuery DeleteIdentities where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful @DeleteIdentities@ operation.+--+-- /See:/ 'newDeleteIdentitiesResponse' smart constructor.+data DeleteIdentitiesResponse = DeleteIdentitiesResponse'+  { -- | An array of UnprocessedIdentityId objects, each of which contains an+    -- ErrorCode and IdentityId.+    unprocessedIdentityIds :: Prelude.Maybe [UnprocessedIdentityId],+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteIdentitiesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'unprocessedIdentityIds', 'deleteIdentitiesResponse_unprocessedIdentityIds' - An array of UnprocessedIdentityId objects, each of which contains an+-- ErrorCode and IdentityId.+--+-- 'httpStatus', 'deleteIdentitiesResponse_httpStatus' - The response's http status code.+newDeleteIdentitiesResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  DeleteIdentitiesResponse+newDeleteIdentitiesResponse pHttpStatus_ =+  DeleteIdentitiesResponse'+    { unprocessedIdentityIds =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | An array of UnprocessedIdentityId objects, each of which contains an+-- ErrorCode and IdentityId.+deleteIdentitiesResponse_unprocessedIdentityIds :: Lens.Lens' DeleteIdentitiesResponse (Prelude.Maybe [UnprocessedIdentityId])+deleteIdentitiesResponse_unprocessedIdentityIds = Lens.lens (\DeleteIdentitiesResponse' {unprocessedIdentityIds} -> unprocessedIdentityIds) (\s@DeleteIdentitiesResponse' {} a -> s {unprocessedIdentityIds = a} :: DeleteIdentitiesResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+deleteIdentitiesResponse_httpStatus :: Lens.Lens' DeleteIdentitiesResponse Prelude.Int+deleteIdentitiesResponse_httpStatus = Lens.lens (\DeleteIdentitiesResponse' {httpStatus} -> httpStatus) (\s@DeleteIdentitiesResponse' {} a -> s {httpStatus = a} :: DeleteIdentitiesResponse)++instance Prelude.NFData DeleteIdentitiesResponse where+  rnf DeleteIdentitiesResponse' {..} =+    Prelude.rnf unprocessedIdentityIds+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,144 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.DeleteIdentityPool+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes an identity pool. Once a pool is deleted, users will not be able+-- to authenticate with the pool.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.DeleteIdentityPool+  ( -- * Creating a Request+    DeleteIdentityPool (..),+    newDeleteIdentityPool,++    -- * Request Lenses+    deleteIdentityPool_identityPoolId,++    -- * Destructuring the Response+    DeleteIdentityPoolResponse (..),+    newDeleteIdentityPoolResponse,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the DeleteIdentityPool action.+--+-- /See:/ 'newDeleteIdentityPool' smart constructor.+data DeleteIdentityPool = DeleteIdentityPool'+  { -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteIdentityPool' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'deleteIdentityPool_identityPoolId' - An identity pool ID in the format REGION:GUID.+newDeleteIdentityPool ::+  -- | 'identityPoolId'+  Prelude.Text ->+  DeleteIdentityPool+newDeleteIdentityPool pIdentityPoolId_ =+  DeleteIdentityPool'+    { identityPoolId =+        pIdentityPoolId_+    }++-- | An identity pool ID in the format REGION:GUID.+deleteIdentityPool_identityPoolId :: Lens.Lens' DeleteIdentityPool Prelude.Text+deleteIdentityPool_identityPoolId = Lens.lens (\DeleteIdentityPool' {identityPoolId} -> identityPoolId) (\s@DeleteIdentityPool' {} a -> s {identityPoolId = a} :: DeleteIdentityPool)++instance Core.AWSRequest DeleteIdentityPool where+  type+    AWSResponse DeleteIdentityPool =+      DeleteIdentityPoolResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull DeleteIdentityPoolResponse'++instance Prelude.Hashable DeleteIdentityPool where+  hashWithSalt _salt DeleteIdentityPool' {..} =+    _salt `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData DeleteIdentityPool where+  rnf DeleteIdentityPool' {..} =+    Prelude.rnf identityPoolId++instance Data.ToHeaders DeleteIdentityPool where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.DeleteIdentityPool" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DeleteIdentityPool where+  toJSON DeleteIdentityPool' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath DeleteIdentityPool where+  toPath = Prelude.const "/"++instance Data.ToQuery DeleteIdentityPool where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newDeleteIdentityPoolResponse' smart constructor.+data DeleteIdentityPoolResponse = DeleteIdentityPoolResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DeleteIdentityPoolResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newDeleteIdentityPoolResponse ::+  DeleteIdentityPoolResponse+newDeleteIdentityPoolResponse =+  DeleteIdentityPoolResponse'++instance Prelude.NFData DeleteIdentityPoolResponse where+  rnf _ = ()

@@ -0,0 +1,127 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.DescribeIdentity+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns metadata related to the given identity, including when the+-- identity was created and any associated linked logins.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.DescribeIdentity+  ( -- * Creating a Request+    DescribeIdentity (..),+    newDescribeIdentity,++    -- * Request Lenses+    describeIdentity_identityId,++    -- * Destructuring the Response+    IdentityDescription (..),+    newIdentityDescription,++    -- * Response Lenses+    identityDescription_creationDate,+    identityDescription_identityId,+    identityDescription_lastModifiedDate,+    identityDescription_logins,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @DescribeIdentity@ action.+--+-- /See:/ 'newDescribeIdentity' smart constructor.+data DescribeIdentity = DescribeIdentity'+  { -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeIdentity' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'describeIdentity_identityId' - A unique identifier in the format REGION:GUID.+newDescribeIdentity ::+  -- | 'identityId'+  Prelude.Text ->+  DescribeIdentity+newDescribeIdentity pIdentityId_ =+  DescribeIdentity' {identityId = pIdentityId_}++-- | A unique identifier in the format REGION:GUID.+describeIdentity_identityId :: Lens.Lens' DescribeIdentity Prelude.Text+describeIdentity_identityId = Lens.lens (\DescribeIdentity' {identityId} -> identityId) (\s@DescribeIdentity' {} a -> s {identityId = a} :: DescribeIdentity)++instance Core.AWSRequest DescribeIdentity where+  type+    AWSResponse DescribeIdentity =+      IdentityDescription+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      (\s h x -> Data.eitherParseJSON x)++instance Prelude.Hashable DescribeIdentity where+  hashWithSalt _salt DescribeIdentity' {..} =+    _salt `Prelude.hashWithSalt` identityId++instance Prelude.NFData DescribeIdentity where+  rnf DescribeIdentity' {..} = Prelude.rnf identityId++instance Data.ToHeaders DescribeIdentity where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.DescribeIdentity" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DescribeIdentity where+  toJSON DescribeIdentity' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("IdentityId" Data..= identityId)]+      )++instance Data.ToPath DescribeIdentity where+  toPath = Prelude.const "/"++instance Data.ToQuery DescribeIdentity where+  toQuery = Prelude.const Prelude.mempty

@@ -0,0 +1,137 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.DescribeIdentityPool+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Gets details about a particular identity pool, including the pool name,+-- ID description, creation date, and current number of users.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.DescribeIdentityPool+  ( -- * Creating a Request+    DescribeIdentityPool (..),+    newDescribeIdentityPool,++    -- * Request Lenses+    describeIdentityPool_identityPoolId,++    -- * Destructuring the Response+    IdentityPool (..),+    newIdentityPool,++    -- * Response Lenses+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the DescribeIdentityPool action.+--+-- /See:/ 'newDescribeIdentityPool' smart constructor.+data DescribeIdentityPool = DescribeIdentityPool'+  { -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'DescribeIdentityPool' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'describeIdentityPool_identityPoolId' - An identity pool ID in the format REGION:GUID.+newDescribeIdentityPool ::+  -- | 'identityPoolId'+  Prelude.Text ->+  DescribeIdentityPool+newDescribeIdentityPool pIdentityPoolId_ =+  DescribeIdentityPool'+    { identityPoolId =+        pIdentityPoolId_+    }++-- | An identity pool ID in the format REGION:GUID.+describeIdentityPool_identityPoolId :: Lens.Lens' DescribeIdentityPool Prelude.Text+describeIdentityPool_identityPoolId = Lens.lens (\DescribeIdentityPool' {identityPoolId} -> identityPoolId) (\s@DescribeIdentityPool' {} a -> s {identityPoolId = a} :: DescribeIdentityPool)++instance Core.AWSRequest DescribeIdentityPool where+  type AWSResponse DescribeIdentityPool = IdentityPool+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      (\s h x -> Data.eitherParseJSON x)++instance Prelude.Hashable DescribeIdentityPool where+  hashWithSalt _salt DescribeIdentityPool' {..} =+    _salt `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData DescribeIdentityPool where+  rnf DescribeIdentityPool' {..} =+    Prelude.rnf identityPoolId++instance Data.ToHeaders DescribeIdentityPool where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.DescribeIdentityPool" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON DescribeIdentityPool where+  toJSON DescribeIdentityPool' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath DescribeIdentityPool where+  toPath = Prelude.const "/"++instance Data.ToQuery DescribeIdentityPool where+  toQuery = Prelude.const Prelude.mempty

@@ -0,0 +1,267 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetCredentialsForIdentity+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns credentials for the provided identity ID. Any provided logins+-- will be validated against supported login providers. If the token is for+-- cognito-identity.amazonaws.com, it will be passed through to AWS+-- Security Token Service with the appropriate role for the token.+--+-- This is a public API. You do not need any credentials to call this API.+module Amazonka.CognitoIdentity.GetCredentialsForIdentity+  ( -- * Creating a Request+    GetCredentialsForIdentity (..),+    newGetCredentialsForIdentity,++    -- * Request Lenses+    getCredentialsForIdentity_customRoleArn,+    getCredentialsForIdentity_logins,+    getCredentialsForIdentity_identityId,++    -- * Destructuring the Response+    GetCredentialsForIdentityResponse (..),+    newGetCredentialsForIdentityResponse,++    -- * Response Lenses+    getCredentialsForIdentityResponse_credentials,+    getCredentialsForIdentityResponse_identityId,+    getCredentialsForIdentityResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @GetCredentialsForIdentity@ action.+--+-- /See:/ 'newGetCredentialsForIdentity' smart constructor.+data GetCredentialsForIdentity = GetCredentialsForIdentity'+  { -- | The Amazon Resource Name (ARN) of the role to be assumed when multiple+    -- roles were received in the token from the identity provider. For+    -- example, a SAML-based identity provider. This parameter is optional for+    -- identity providers that do not support role customization.+    customRoleArn :: Prelude.Maybe Prelude.Text,+    -- | A set of optional name-value pairs that map provider names to provider+    -- tokens. The name-value pair will follow the syntax \"provider_name\":+    -- \"provider_user_identifier\".+    --+    -- Logins should not be specified when trying to get credentials for an+    -- unauthenticated identity.+    --+    -- The Logins parameter is required when using identities associated with+    -- external identity providers such as Facebook. For examples of @Logins@+    -- maps, see the code examples in the+    -- <https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html External Identity Providers>+    -- section of the Amazon Cognito Developer Guide.+    logins :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetCredentialsForIdentity' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'customRoleArn', 'getCredentialsForIdentity_customRoleArn' - The Amazon Resource Name (ARN) of the role to be assumed when multiple+-- roles were received in the token from the identity provider. For+-- example, a SAML-based identity provider. This parameter is optional for+-- identity providers that do not support role customization.+--+-- 'logins', 'getCredentialsForIdentity_logins' - A set of optional name-value pairs that map provider names to provider+-- tokens. The name-value pair will follow the syntax \"provider_name\":+-- \"provider_user_identifier\".+--+-- Logins should not be specified when trying to get credentials for an+-- unauthenticated identity.+--+-- The Logins parameter is required when using identities associated with+-- external identity providers such as Facebook. For examples of @Logins@+-- maps, see the code examples in the+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html External Identity Providers>+-- section of the Amazon Cognito Developer Guide.+--+-- 'identityId', 'getCredentialsForIdentity_identityId' - A unique identifier in the format REGION:GUID.+newGetCredentialsForIdentity ::+  -- | 'identityId'+  Prelude.Text ->+  GetCredentialsForIdentity+newGetCredentialsForIdentity pIdentityId_ =+  GetCredentialsForIdentity'+    { customRoleArn =+        Prelude.Nothing,+      logins = Prelude.Nothing,+      identityId = pIdentityId_+    }++-- | The Amazon Resource Name (ARN) of the role to be assumed when multiple+-- roles were received in the token from the identity provider. For+-- example, a SAML-based identity provider. This parameter is optional for+-- identity providers that do not support role customization.+getCredentialsForIdentity_customRoleArn :: Lens.Lens' GetCredentialsForIdentity (Prelude.Maybe Prelude.Text)+getCredentialsForIdentity_customRoleArn = Lens.lens (\GetCredentialsForIdentity' {customRoleArn} -> customRoleArn) (\s@GetCredentialsForIdentity' {} a -> s {customRoleArn = a} :: GetCredentialsForIdentity)++-- | A set of optional name-value pairs that map provider names to provider+-- tokens. The name-value pair will follow the syntax \"provider_name\":+-- \"provider_user_identifier\".+--+-- Logins should not be specified when trying to get credentials for an+-- unauthenticated identity.+--+-- The Logins parameter is required when using identities associated with+-- external identity providers such as Facebook. For examples of @Logins@+-- maps, see the code examples in the+-- <https://docs.aws.amazon.com/cognito/latest/developerguide/external-identity-providers.html External Identity Providers>+-- section of the Amazon Cognito Developer Guide.+getCredentialsForIdentity_logins :: Lens.Lens' GetCredentialsForIdentity (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getCredentialsForIdentity_logins = Lens.lens (\GetCredentialsForIdentity' {logins} -> logins) (\s@GetCredentialsForIdentity' {} a -> s {logins = a} :: GetCredentialsForIdentity) Prelude.. Lens.mapping Lens.coerced++-- | A unique identifier in the format REGION:GUID.+getCredentialsForIdentity_identityId :: Lens.Lens' GetCredentialsForIdentity Prelude.Text+getCredentialsForIdentity_identityId = Lens.lens (\GetCredentialsForIdentity' {identityId} -> identityId) (\s@GetCredentialsForIdentity' {} a -> s {identityId = a} :: GetCredentialsForIdentity)++instance Core.AWSRequest GetCredentialsForIdentity where+  type+    AWSResponse GetCredentialsForIdentity =+      GetCredentialsForIdentityResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetCredentialsForIdentityResponse'+            Prelude.<$> (x Data..?> "Credentials")+            Prelude.<*> (x Data..?> "IdentityId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetCredentialsForIdentity where+  hashWithSalt _salt GetCredentialsForIdentity' {..} =+    _salt+      `Prelude.hashWithSalt` customRoleArn+      `Prelude.hashWithSalt` logins+      `Prelude.hashWithSalt` identityId++instance Prelude.NFData GetCredentialsForIdentity where+  rnf GetCredentialsForIdentity' {..} =+    Prelude.rnf customRoleArn+      `Prelude.seq` Prelude.rnf logins+      `Prelude.seq` Prelude.rnf identityId++instance Data.ToHeaders GetCredentialsForIdentity where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetCredentialsForIdentity" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetCredentialsForIdentity where+  toJSON GetCredentialsForIdentity' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("CustomRoleArn" Data..=) Prelude.<$> customRoleArn,+            ("Logins" Data..=) Prelude.<$> logins,+            Prelude.Just ("IdentityId" Data..= identityId)+          ]+      )++instance Data.ToPath GetCredentialsForIdentity where+  toPath = Prelude.const "/"++instance Data.ToQuery GetCredentialsForIdentity where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful @GetCredentialsForIdentity@+-- operation.+--+-- /See:/ 'newGetCredentialsForIdentityResponse' smart constructor.+data GetCredentialsForIdentityResponse = GetCredentialsForIdentityResponse'+  { -- | Credentials for the provided identity ID.+    credentials :: Prelude.Maybe Credentials,+    -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetCredentialsForIdentityResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'credentials', 'getCredentialsForIdentityResponse_credentials' - Credentials for the provided identity ID.+--+-- 'identityId', 'getCredentialsForIdentityResponse_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'httpStatus', 'getCredentialsForIdentityResponse_httpStatus' - The response's http status code.+newGetCredentialsForIdentityResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetCredentialsForIdentityResponse+newGetCredentialsForIdentityResponse pHttpStatus_ =+  GetCredentialsForIdentityResponse'+    { credentials =+        Prelude.Nothing,+      identityId = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | Credentials for the provided identity ID.+getCredentialsForIdentityResponse_credentials :: Lens.Lens' GetCredentialsForIdentityResponse (Prelude.Maybe Credentials)+getCredentialsForIdentityResponse_credentials = Lens.lens (\GetCredentialsForIdentityResponse' {credentials} -> credentials) (\s@GetCredentialsForIdentityResponse' {} a -> s {credentials = a} :: GetCredentialsForIdentityResponse)++-- | A unique identifier in the format REGION:GUID.+getCredentialsForIdentityResponse_identityId :: Lens.Lens' GetCredentialsForIdentityResponse (Prelude.Maybe Prelude.Text)+getCredentialsForIdentityResponse_identityId = Lens.lens (\GetCredentialsForIdentityResponse' {identityId} -> identityId) (\s@GetCredentialsForIdentityResponse' {} a -> s {identityId = a} :: GetCredentialsForIdentityResponse)++-- | The response's http status code.+getCredentialsForIdentityResponse_httpStatus :: Lens.Lens' GetCredentialsForIdentityResponse Prelude.Int+getCredentialsForIdentityResponse_httpStatus = Lens.lens (\GetCredentialsForIdentityResponse' {httpStatus} -> httpStatus) (\s@GetCredentialsForIdentityResponse' {} a -> s {httpStatus = a} :: GetCredentialsForIdentityResponse)++instance+  Prelude.NFData+    GetCredentialsForIdentityResponse+  where+  rnf GetCredentialsForIdentityResponse' {..} =+    Prelude.rnf credentials+      `Prelude.seq` Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,249 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetId+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Generates (or retrieves) a Cognito ID. Supplying multiple logins will+-- create an implicit linked account.+--+-- This is a public API. You do not need any credentials to call this API.+module Amazonka.CognitoIdentity.GetId+  ( -- * Creating a Request+    GetId (..),+    newGetId,++    -- * Request Lenses+    getId_accountId,+    getId_logins,+    getId_identityPoolId,++    -- * Destructuring the Response+    GetIdResponse (..),+    newGetIdResponse,++    -- * Response Lenses+    getIdResponse_identityId,+    getIdResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the GetId action.+--+-- /See:/ 'newGetId' smart constructor.+data GetId = GetId'+  { -- | A standard AWS account ID (9+ digits).+    accountId :: Prelude.Maybe Prelude.Text,+    -- | A set of optional name-value pairs that map provider names to provider+    -- tokens. The available provider names for @Logins@ are as follows:+    --+    -- -   Facebook: @graph.facebook.com@+    --+    -- -   Amazon Cognito user pool:+    --     @cognito-idp.\<region>.amazonaws.com\/\<YOUR_USER_POOL_ID>@, for+    --     example, @cognito-idp.us-east-1.amazonaws.com\/us-east-1_123456789@.+    --+    -- -   Google: @accounts.google.com@+    --+    -- -   Amazon: @www.amazon.com@+    --+    -- -   Twitter: @api.twitter.com@+    --+    -- -   Digits: @www.digits.com@+    logins :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetId' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'accountId', 'getId_accountId' - A standard AWS account ID (9+ digits).+--+-- 'logins', 'getId_logins' - A set of optional name-value pairs that map provider names to provider+-- tokens. The available provider names for @Logins@ are as follows:+--+-- -   Facebook: @graph.facebook.com@+--+-- -   Amazon Cognito user pool:+--     @cognito-idp.\<region>.amazonaws.com\/\<YOUR_USER_POOL_ID>@, for+--     example, @cognito-idp.us-east-1.amazonaws.com\/us-east-1_123456789@.+--+-- -   Google: @accounts.google.com@+--+-- -   Amazon: @www.amazon.com@+--+-- -   Twitter: @api.twitter.com@+--+-- -   Digits: @www.digits.com@+--+-- 'identityPoolId', 'getId_identityPoolId' - An identity pool ID in the format REGION:GUID.+newGetId ::+  -- | 'identityPoolId'+  Prelude.Text ->+  GetId+newGetId pIdentityPoolId_ =+  GetId'+    { accountId = Prelude.Nothing,+      logins = Prelude.Nothing,+      identityPoolId = pIdentityPoolId_+    }++-- | A standard AWS account ID (9+ digits).+getId_accountId :: Lens.Lens' GetId (Prelude.Maybe Prelude.Text)+getId_accountId = Lens.lens (\GetId' {accountId} -> accountId) (\s@GetId' {} a -> s {accountId = a} :: GetId)++-- | A set of optional name-value pairs that map provider names to provider+-- tokens. The available provider names for @Logins@ are as follows:+--+-- -   Facebook: @graph.facebook.com@+--+-- -   Amazon Cognito user pool:+--     @cognito-idp.\<region>.amazonaws.com\/\<YOUR_USER_POOL_ID>@, for+--     example, @cognito-idp.us-east-1.amazonaws.com\/us-east-1_123456789@.+--+-- -   Google: @accounts.google.com@+--+-- -   Amazon: @www.amazon.com@+--+-- -   Twitter: @api.twitter.com@+--+-- -   Digits: @www.digits.com@+getId_logins :: Lens.Lens' GetId (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getId_logins = Lens.lens (\GetId' {logins} -> logins) (\s@GetId' {} a -> s {logins = a} :: GetId) Prelude.. Lens.mapping Lens.coerced++-- | An identity pool ID in the format REGION:GUID.+getId_identityPoolId :: Lens.Lens' GetId Prelude.Text+getId_identityPoolId = Lens.lens (\GetId' {identityPoolId} -> identityPoolId) (\s@GetId' {} a -> s {identityPoolId = a} :: GetId)++instance Core.AWSRequest GetId where+  type AWSResponse GetId = GetIdResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetIdResponse'+            Prelude.<$> (x Data..?> "IdentityId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetId where+  hashWithSalt _salt GetId' {..} =+    _salt+      `Prelude.hashWithSalt` accountId+      `Prelude.hashWithSalt` logins+      `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData GetId where+  rnf GetId' {..} =+    Prelude.rnf accountId+      `Prelude.seq` Prelude.rnf logins+      `Prelude.seq` Prelude.rnf identityPoolId++instance Data.ToHeaders GetId where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetId" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetId where+  toJSON GetId' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("AccountId" Data..=) Prelude.<$> accountId,+            ("Logins" Data..=) Prelude.<$> logins,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath GetId where+  toPath = Prelude.const "/"++instance Data.ToQuery GetId where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a GetId request.+--+-- /See:/ 'newGetIdResponse' smart constructor.+data GetIdResponse = GetIdResponse'+  { -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetIdResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'getIdResponse_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'httpStatus', 'getIdResponse_httpStatus' - The response's http status code.+newGetIdResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetIdResponse+newGetIdResponse pHttpStatus_ =+  GetIdResponse'+    { identityId = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A unique identifier in the format REGION:GUID.+getIdResponse_identityId :: Lens.Lens' GetIdResponse (Prelude.Maybe Prelude.Text)+getIdResponse_identityId = Lens.lens (\GetIdResponse' {identityId} -> identityId) (\s@GetIdResponse' {} a -> s {identityId = a} :: GetIdResponse)++-- | The response's http status code.+getIdResponse_httpStatus :: Lens.Lens' GetIdResponse Prelude.Int+getIdResponse_httpStatus = Lens.lens (\GetIdResponse' {httpStatus} -> httpStatus) (\s@GetIdResponse' {} a -> s {httpStatus = a} :: GetIdResponse)++instance Prelude.NFData GetIdResponse where+  rnf GetIdResponse' {..} =+    Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,216 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetIdentityPoolRoles+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Gets the roles for an identity pool.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.GetIdentityPoolRoles+  ( -- * Creating a Request+    GetIdentityPoolRoles (..),+    newGetIdentityPoolRoles,++    -- * Request Lenses+    getIdentityPoolRoles_identityPoolId,++    -- * Destructuring the Response+    GetIdentityPoolRolesResponse (..),+    newGetIdentityPoolRolesResponse,++    -- * Response Lenses+    getIdentityPoolRolesResponse_identityPoolId,+    getIdentityPoolRolesResponse_roleMappings,+    getIdentityPoolRolesResponse_roles,+    getIdentityPoolRolesResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @GetIdentityPoolRoles@ action.+--+-- /See:/ 'newGetIdentityPoolRoles' smart constructor.+data GetIdentityPoolRoles = GetIdentityPoolRoles'+  { -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetIdentityPoolRoles' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'getIdentityPoolRoles_identityPoolId' - An identity pool ID in the format REGION:GUID.+newGetIdentityPoolRoles ::+  -- | 'identityPoolId'+  Prelude.Text ->+  GetIdentityPoolRoles+newGetIdentityPoolRoles pIdentityPoolId_ =+  GetIdentityPoolRoles'+    { identityPoolId =+        pIdentityPoolId_+    }++-- | An identity pool ID in the format REGION:GUID.+getIdentityPoolRoles_identityPoolId :: Lens.Lens' GetIdentityPoolRoles Prelude.Text+getIdentityPoolRoles_identityPoolId = Lens.lens (\GetIdentityPoolRoles' {identityPoolId} -> identityPoolId) (\s@GetIdentityPoolRoles' {} a -> s {identityPoolId = a} :: GetIdentityPoolRoles)++instance Core.AWSRequest GetIdentityPoolRoles where+  type+    AWSResponse GetIdentityPoolRoles =+      GetIdentityPoolRolesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetIdentityPoolRolesResponse'+            Prelude.<$> (x Data..?> "IdentityPoolId")+            Prelude.<*> (x Data..?> "RoleMappings" Core..!@ Prelude.mempty)+            Prelude.<*> (x Data..?> "Roles" Core..!@ Prelude.mempty)+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetIdentityPoolRoles where+  hashWithSalt _salt GetIdentityPoolRoles' {..} =+    _salt `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData GetIdentityPoolRoles where+  rnf GetIdentityPoolRoles' {..} =+    Prelude.rnf identityPoolId++instance Data.ToHeaders GetIdentityPoolRoles where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetIdentityPoolRoles" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetIdentityPoolRoles where+  toJSON GetIdentityPoolRoles' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath GetIdentityPoolRoles where+  toPath = Prelude.const "/"++instance Data.ToQuery GetIdentityPoolRoles where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful @GetIdentityPoolRoles@ operation.+--+-- /See:/ 'newGetIdentityPoolRolesResponse' smart constructor.+data GetIdentityPoolRolesResponse = GetIdentityPoolRolesResponse'+  { -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Maybe Prelude.Text,+    -- | How users for a specific identity provider are to mapped to roles. This+    -- is a String-to-RoleMapping object map. The string identifies the+    -- identity provider, for example, \"graph.facebook.com\" or+    -- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+    roleMappings :: Prelude.Maybe (Prelude.HashMap Prelude.Text RoleMapping),+    -- | The map of roles associated with this pool. Currently only authenticated+    -- and unauthenticated roles are supported.+    roles :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetIdentityPoolRolesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'getIdentityPoolRolesResponse_identityPoolId' - An identity pool ID in the format REGION:GUID.+--+-- 'roleMappings', 'getIdentityPoolRolesResponse_roleMappings' - How users for a specific identity provider are to mapped to roles. This+-- is a String-to-RoleMapping object map. The string identifies the+-- identity provider, for example, \"graph.facebook.com\" or+-- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+--+-- 'roles', 'getIdentityPoolRolesResponse_roles' - The map of roles associated with this pool. Currently only authenticated+-- and unauthenticated roles are supported.+--+-- 'httpStatus', 'getIdentityPoolRolesResponse_httpStatus' - The response's http status code.+newGetIdentityPoolRolesResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetIdentityPoolRolesResponse+newGetIdentityPoolRolesResponse pHttpStatus_ =+  GetIdentityPoolRolesResponse'+    { identityPoolId =+        Prelude.Nothing,+      roleMappings = Prelude.Nothing,+      roles = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | An identity pool ID in the format REGION:GUID.+getIdentityPoolRolesResponse_identityPoolId :: Lens.Lens' GetIdentityPoolRolesResponse (Prelude.Maybe Prelude.Text)+getIdentityPoolRolesResponse_identityPoolId = Lens.lens (\GetIdentityPoolRolesResponse' {identityPoolId} -> identityPoolId) (\s@GetIdentityPoolRolesResponse' {} a -> s {identityPoolId = a} :: GetIdentityPoolRolesResponse)++-- | How users for a specific identity provider are to mapped to roles. This+-- is a String-to-RoleMapping object map. The string identifies the+-- identity provider, for example, \"graph.facebook.com\" or+-- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+getIdentityPoolRolesResponse_roleMappings :: Lens.Lens' GetIdentityPoolRolesResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text RoleMapping))+getIdentityPoolRolesResponse_roleMappings = Lens.lens (\GetIdentityPoolRolesResponse' {roleMappings} -> roleMappings) (\s@GetIdentityPoolRolesResponse' {} a -> s {roleMappings = a} :: GetIdentityPoolRolesResponse) Prelude.. Lens.mapping Lens.coerced++-- | The map of roles associated with this pool. Currently only authenticated+-- and unauthenticated roles are supported.+getIdentityPoolRolesResponse_roles :: Lens.Lens' GetIdentityPoolRolesResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getIdentityPoolRolesResponse_roles = Lens.lens (\GetIdentityPoolRolesResponse' {roles} -> roles) (\s@GetIdentityPoolRolesResponse' {} a -> s {roles = a} :: GetIdentityPoolRolesResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+getIdentityPoolRolesResponse_httpStatus :: Lens.Lens' GetIdentityPoolRolesResponse Prelude.Int+getIdentityPoolRolesResponse_httpStatus = Lens.lens (\GetIdentityPoolRolesResponse' {httpStatus} -> httpStatus) (\s@GetIdentityPoolRolesResponse' {} a -> s {httpStatus = a} :: GetIdentityPoolRolesResponse)++instance Prelude.NFData GetIdentityPoolRolesResponse where+  rnf GetIdentityPoolRolesResponse' {..} =+    Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf roleMappings+      `Prelude.seq` Prelude.rnf roles+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,223 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetOpenIdToken+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Gets an OpenID token, using a known Cognito ID. This known Cognito ID is+-- returned by GetId. You can optionally add additional logins for the+-- identity. Supplying multiple logins creates an implicit link.+--+-- The OpenID token is valid for 10 minutes.+--+-- This is a public API. You do not need any credentials to call this API.+module Amazonka.CognitoIdentity.GetOpenIdToken+  ( -- * Creating a Request+    GetOpenIdToken (..),+    newGetOpenIdToken,++    -- * Request Lenses+    getOpenIdToken_logins,+    getOpenIdToken_identityId,++    -- * Destructuring the Response+    GetOpenIdTokenResponse (..),+    newGetOpenIdTokenResponse,++    -- * Response Lenses+    getOpenIdTokenResponse_identityId,+    getOpenIdTokenResponse_token,+    getOpenIdTokenResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the GetOpenIdToken action.+--+-- /See:/ 'newGetOpenIdToken' smart constructor.+data GetOpenIdToken = GetOpenIdToken'+  { -- | A set of optional name-value pairs that map provider names to provider+    -- tokens. When using graph.facebook.com and www.amazon.com, supply the+    -- access_token returned from the provider\'s authflow. For+    -- accounts.google.com, an Amazon Cognito user pool provider, or any other+    -- OpenID Connect provider, always include the @id_token@.+    logins :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetOpenIdToken' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'logins', 'getOpenIdToken_logins' - A set of optional name-value pairs that map provider names to provider+-- tokens. When using graph.facebook.com and www.amazon.com, supply the+-- access_token returned from the provider\'s authflow. For+-- accounts.google.com, an Amazon Cognito user pool provider, or any other+-- OpenID Connect provider, always include the @id_token@.+--+-- 'identityId', 'getOpenIdToken_identityId' - A unique identifier in the format REGION:GUID.+newGetOpenIdToken ::+  -- | 'identityId'+  Prelude.Text ->+  GetOpenIdToken+newGetOpenIdToken pIdentityId_ =+  GetOpenIdToken'+    { logins = Prelude.Nothing,+      identityId = pIdentityId_+    }++-- | A set of optional name-value pairs that map provider names to provider+-- tokens. When using graph.facebook.com and www.amazon.com, supply the+-- access_token returned from the provider\'s authflow. For+-- accounts.google.com, an Amazon Cognito user pool provider, or any other+-- OpenID Connect provider, always include the @id_token@.+getOpenIdToken_logins :: Lens.Lens' GetOpenIdToken (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getOpenIdToken_logins = Lens.lens (\GetOpenIdToken' {logins} -> logins) (\s@GetOpenIdToken' {} a -> s {logins = a} :: GetOpenIdToken) Prelude.. Lens.mapping Lens.coerced++-- | A unique identifier in the format REGION:GUID.+getOpenIdToken_identityId :: Lens.Lens' GetOpenIdToken Prelude.Text+getOpenIdToken_identityId = Lens.lens (\GetOpenIdToken' {identityId} -> identityId) (\s@GetOpenIdToken' {} a -> s {identityId = a} :: GetOpenIdToken)++instance Core.AWSRequest GetOpenIdToken where+  type+    AWSResponse GetOpenIdToken =+      GetOpenIdTokenResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetOpenIdTokenResponse'+            Prelude.<$> (x Data..?> "IdentityId")+            Prelude.<*> (x Data..?> "Token")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetOpenIdToken where+  hashWithSalt _salt GetOpenIdToken' {..} =+    _salt+      `Prelude.hashWithSalt` logins+      `Prelude.hashWithSalt` identityId++instance Prelude.NFData GetOpenIdToken where+  rnf GetOpenIdToken' {..} =+    Prelude.rnf logins+      `Prelude.seq` Prelude.rnf identityId++instance Data.ToHeaders GetOpenIdToken where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetOpenIdToken" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetOpenIdToken where+  toJSON GetOpenIdToken' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("Logins" Data..=) Prelude.<$> logins,+            Prelude.Just ("IdentityId" Data..= identityId)+          ]+      )++instance Data.ToPath GetOpenIdToken where+  toPath = Prelude.const "/"++instance Data.ToQuery GetOpenIdToken where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful GetOpenIdToken request.+--+-- /See:/ 'newGetOpenIdTokenResponse' smart constructor.+data GetOpenIdTokenResponse = GetOpenIdTokenResponse'+  { -- | A unique identifier in the format REGION:GUID. Note that the IdentityId+    -- returned may not match the one passed on input.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | An OpenID token, valid for 10 minutes.+    token :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetOpenIdTokenResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'getOpenIdTokenResponse_identityId' - A unique identifier in the format REGION:GUID. Note that the IdentityId+-- returned may not match the one passed on input.+--+-- 'token', 'getOpenIdTokenResponse_token' - An OpenID token, valid for 10 minutes.+--+-- 'httpStatus', 'getOpenIdTokenResponse_httpStatus' - The response's http status code.+newGetOpenIdTokenResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetOpenIdTokenResponse+newGetOpenIdTokenResponse pHttpStatus_ =+  GetOpenIdTokenResponse'+    { identityId =+        Prelude.Nothing,+      token = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A unique identifier in the format REGION:GUID. Note that the IdentityId+-- returned may not match the one passed on input.+getOpenIdTokenResponse_identityId :: Lens.Lens' GetOpenIdTokenResponse (Prelude.Maybe Prelude.Text)+getOpenIdTokenResponse_identityId = Lens.lens (\GetOpenIdTokenResponse' {identityId} -> identityId) (\s@GetOpenIdTokenResponse' {} a -> s {identityId = a} :: GetOpenIdTokenResponse)++-- | An OpenID token, valid for 10 minutes.+getOpenIdTokenResponse_token :: Lens.Lens' GetOpenIdTokenResponse (Prelude.Maybe Prelude.Text)+getOpenIdTokenResponse_token = Lens.lens (\GetOpenIdTokenResponse' {token} -> token) (\s@GetOpenIdTokenResponse' {} a -> s {token = a} :: GetOpenIdTokenResponse)++-- | The response's http status code.+getOpenIdTokenResponse_httpStatus :: Lens.Lens' GetOpenIdTokenResponse Prelude.Int+getOpenIdTokenResponse_httpStatus = Lens.lens (\GetOpenIdTokenResponse' {httpStatus} -> httpStatus) (\s@GetOpenIdTokenResponse' {} a -> s {httpStatus = a} :: GetOpenIdTokenResponse)++instance Prelude.NFData GetOpenIdTokenResponse where+  rnf GetOpenIdTokenResponse' {..} =+    Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf token+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,348 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Registers (or retrieves) a Cognito @IdentityId@ and an OpenID Connect+-- token for a user authenticated by your backend authentication process.+-- Supplying multiple logins will create an implicit linked account. You+-- can only specify one developer provider as part of the @Logins@ map,+-- which is linked to the identity pool. The developer provider is the+-- \"domain\" by which Cognito will refer to your users.+--+-- You can use @GetOpenIdTokenForDeveloperIdentity@ to create a new+-- identity and to link new logins (that is, user credentials issued by a+-- public provider or developer provider) to an existing identity. When you+-- want to create a new identity, the @IdentityId@ should be null. When you+-- want to associate a new login with an existing+-- authenticated\/unauthenticated identity, you can do so by providing the+-- existing @IdentityId@. This API will create the identity in the+-- specified @IdentityPoolId@.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity+  ( -- * Creating a Request+    GetOpenIdTokenForDeveloperIdentity (..),+    newGetOpenIdTokenForDeveloperIdentity,++    -- * Request Lenses+    getOpenIdTokenForDeveloperIdentity_identityId,+    getOpenIdTokenForDeveloperIdentity_principalTags,+    getOpenIdTokenForDeveloperIdentity_tokenDuration,+    getOpenIdTokenForDeveloperIdentity_identityPoolId,+    getOpenIdTokenForDeveloperIdentity_logins,++    -- * Destructuring the Response+    GetOpenIdTokenForDeveloperIdentityResponse (..),+    newGetOpenIdTokenForDeveloperIdentityResponse,++    -- * Response Lenses+    getOpenIdTokenForDeveloperIdentityResponse_identityId,+    getOpenIdTokenForDeveloperIdentityResponse_token,+    getOpenIdTokenForDeveloperIdentityResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @GetOpenIdTokenForDeveloperIdentity@ action.+--+-- /See:/ 'newGetOpenIdTokenForDeveloperIdentity' smart constructor.+data GetOpenIdTokenForDeveloperIdentity = GetOpenIdTokenForDeveloperIdentity'+  { -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | Use this operation to configure attribute mappings for custom providers.+    principalTags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | The expiration time of the token, in seconds. You can specify a custom+    -- expiration time for the token so that you can cache it. If you don\'t+    -- provide an expiration time, the token is valid for 15 minutes. You can+    -- exchange the token with Amazon STS for temporary AWS credentials, which+    -- are valid for a maximum of one hour. The maximum token duration you can+    -- set is 24 hours. You should take care in setting the expiration time for+    -- a token, as there are significant security implications: an attacker+    -- could use a leaked token to access your AWS resources for the token\'s+    -- duration.+    --+    -- Please provide for a small grace period, usually no more than 5 minutes,+    -- to account for clock skew.+    tokenDuration :: Prelude.Maybe Prelude.Natural,+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text,+    -- | A set of optional name-value pairs that map provider names to provider+    -- tokens. Each name-value pair represents a user from a public provider or+    -- developer provider. If the user is from a developer provider, the+    -- name-value pair will follow the syntax+    -- @\"developer_provider_name\": \"developer_user_identifier\"@. The+    -- developer provider is the \"domain\" by which Cognito will refer to your+    -- users; you provided this domain while creating\/updating the identity+    -- pool. The developer user identifier is an identifier from your backend+    -- that uniquely identifies a user. When you create an identity pool, you+    -- can specify the supported logins.+    logins :: Prelude.HashMap Prelude.Text Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetOpenIdTokenForDeveloperIdentity' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'getOpenIdTokenForDeveloperIdentity_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'principalTags', 'getOpenIdTokenForDeveloperIdentity_principalTags' - Use this operation to configure attribute mappings for custom providers.+--+-- 'tokenDuration', 'getOpenIdTokenForDeveloperIdentity_tokenDuration' - The expiration time of the token, in seconds. You can specify a custom+-- expiration time for the token so that you can cache it. If you don\'t+-- provide an expiration time, the token is valid for 15 minutes. You can+-- exchange the token with Amazon STS for temporary AWS credentials, which+-- are valid for a maximum of one hour. The maximum token duration you can+-- set is 24 hours. You should take care in setting the expiration time for+-- a token, as there are significant security implications: an attacker+-- could use a leaked token to access your AWS resources for the token\'s+-- duration.+--+-- Please provide for a small grace period, usually no more than 5 minutes,+-- to account for clock skew.+--+-- 'identityPoolId', 'getOpenIdTokenForDeveloperIdentity_identityPoolId' - An identity pool ID in the format REGION:GUID.+--+-- 'logins', 'getOpenIdTokenForDeveloperIdentity_logins' - A set of optional name-value pairs that map provider names to provider+-- tokens. Each name-value pair represents a user from a public provider or+-- developer provider. If the user is from a developer provider, the+-- name-value pair will follow the syntax+-- @\"developer_provider_name\": \"developer_user_identifier\"@. The+-- developer provider is the \"domain\" by which Cognito will refer to your+-- users; you provided this domain while creating\/updating the identity+-- pool. The developer user identifier is an identifier from your backend+-- that uniquely identifies a user. When you create an identity pool, you+-- can specify the supported logins.+newGetOpenIdTokenForDeveloperIdentity ::+  -- | 'identityPoolId'+  Prelude.Text ->+  GetOpenIdTokenForDeveloperIdentity+newGetOpenIdTokenForDeveloperIdentity+  pIdentityPoolId_ =+    GetOpenIdTokenForDeveloperIdentity'+      { identityId =+          Prelude.Nothing,+        principalTags = Prelude.Nothing,+        tokenDuration = Prelude.Nothing,+        identityPoolId = pIdentityPoolId_,+        logins = Prelude.mempty+      }++-- | A unique identifier in the format REGION:GUID.+getOpenIdTokenForDeveloperIdentity_identityId :: Lens.Lens' GetOpenIdTokenForDeveloperIdentity (Prelude.Maybe Prelude.Text)+getOpenIdTokenForDeveloperIdentity_identityId = Lens.lens (\GetOpenIdTokenForDeveloperIdentity' {identityId} -> identityId) (\s@GetOpenIdTokenForDeveloperIdentity' {} a -> s {identityId = a} :: GetOpenIdTokenForDeveloperIdentity)++-- | Use this operation to configure attribute mappings for custom providers.+getOpenIdTokenForDeveloperIdentity_principalTags :: Lens.Lens' GetOpenIdTokenForDeveloperIdentity (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getOpenIdTokenForDeveloperIdentity_principalTags = Lens.lens (\GetOpenIdTokenForDeveloperIdentity' {principalTags} -> principalTags) (\s@GetOpenIdTokenForDeveloperIdentity' {} a -> s {principalTags = a} :: GetOpenIdTokenForDeveloperIdentity) Prelude.. Lens.mapping Lens.coerced++-- | The expiration time of the token, in seconds. You can specify a custom+-- expiration time for the token so that you can cache it. If you don\'t+-- provide an expiration time, the token is valid for 15 minutes. You can+-- exchange the token with Amazon STS for temporary AWS credentials, which+-- are valid for a maximum of one hour. The maximum token duration you can+-- set is 24 hours. You should take care in setting the expiration time for+-- a token, as there are significant security implications: an attacker+-- could use a leaked token to access your AWS resources for the token\'s+-- duration.+--+-- Please provide for a small grace period, usually no more than 5 minutes,+-- to account for clock skew.+getOpenIdTokenForDeveloperIdentity_tokenDuration :: Lens.Lens' GetOpenIdTokenForDeveloperIdentity (Prelude.Maybe Prelude.Natural)+getOpenIdTokenForDeveloperIdentity_tokenDuration = Lens.lens (\GetOpenIdTokenForDeveloperIdentity' {tokenDuration} -> tokenDuration) (\s@GetOpenIdTokenForDeveloperIdentity' {} a -> s {tokenDuration = a} :: GetOpenIdTokenForDeveloperIdentity)++-- | An identity pool ID in the format REGION:GUID.+getOpenIdTokenForDeveloperIdentity_identityPoolId :: Lens.Lens' GetOpenIdTokenForDeveloperIdentity Prelude.Text+getOpenIdTokenForDeveloperIdentity_identityPoolId = Lens.lens (\GetOpenIdTokenForDeveloperIdentity' {identityPoolId} -> identityPoolId) (\s@GetOpenIdTokenForDeveloperIdentity' {} a -> s {identityPoolId = a} :: GetOpenIdTokenForDeveloperIdentity)++-- | A set of optional name-value pairs that map provider names to provider+-- tokens. Each name-value pair represents a user from a public provider or+-- developer provider. If the user is from a developer provider, the+-- name-value pair will follow the syntax+-- @\"developer_provider_name\": \"developer_user_identifier\"@. The+-- developer provider is the \"domain\" by which Cognito will refer to your+-- users; you provided this domain while creating\/updating the identity+-- pool. The developer user identifier is an identifier from your backend+-- that uniquely identifies a user. When you create an identity pool, you+-- can specify the supported logins.+getOpenIdTokenForDeveloperIdentity_logins :: Lens.Lens' GetOpenIdTokenForDeveloperIdentity (Prelude.HashMap Prelude.Text Prelude.Text)+getOpenIdTokenForDeveloperIdentity_logins = Lens.lens (\GetOpenIdTokenForDeveloperIdentity' {logins} -> logins) (\s@GetOpenIdTokenForDeveloperIdentity' {} a -> s {logins = a} :: GetOpenIdTokenForDeveloperIdentity) Prelude.. Lens.coerced++instance+  Core.AWSRequest+    GetOpenIdTokenForDeveloperIdentity+  where+  type+    AWSResponse GetOpenIdTokenForDeveloperIdentity =+      GetOpenIdTokenForDeveloperIdentityResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetOpenIdTokenForDeveloperIdentityResponse'+            Prelude.<$> (x Data..?> "IdentityId")+            Prelude.<*> (x Data..?> "Token")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance+  Prelude.Hashable+    GetOpenIdTokenForDeveloperIdentity+  where+  hashWithSalt+    _salt+    GetOpenIdTokenForDeveloperIdentity' {..} =+      _salt+        `Prelude.hashWithSalt` identityId+        `Prelude.hashWithSalt` principalTags+        `Prelude.hashWithSalt` tokenDuration+        `Prelude.hashWithSalt` identityPoolId+        `Prelude.hashWithSalt` logins++instance+  Prelude.NFData+    GetOpenIdTokenForDeveloperIdentity+  where+  rnf GetOpenIdTokenForDeveloperIdentity' {..} =+    Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf principalTags+      `Prelude.seq` Prelude.rnf tokenDuration+      `Prelude.seq` Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf logins++instance+  Data.ToHeaders+    GetOpenIdTokenForDeveloperIdentity+  where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetOpenIdTokenForDeveloperIdentity" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance+  Data.ToJSON+    GetOpenIdTokenForDeveloperIdentity+  where+  toJSON GetOpenIdTokenForDeveloperIdentity' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("IdentityId" Data..=) Prelude.<$> identityId,+            ("PrincipalTags" Data..=) Prelude.<$> principalTags,+            ("TokenDuration" Data..=) Prelude.<$> tokenDuration,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId),+            Prelude.Just ("Logins" Data..= logins)+          ]+      )++instance+  Data.ToPath+    GetOpenIdTokenForDeveloperIdentity+  where+  toPath = Prelude.const "/"++instance+  Data.ToQuery+    GetOpenIdTokenForDeveloperIdentity+  where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful+-- @GetOpenIdTokenForDeveloperIdentity@ request.+--+-- /See:/ 'newGetOpenIdTokenForDeveloperIdentityResponse' smart constructor.+data GetOpenIdTokenForDeveloperIdentityResponse = GetOpenIdTokenForDeveloperIdentityResponse'+  { -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | An OpenID token.+    token :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetOpenIdTokenForDeveloperIdentityResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'getOpenIdTokenForDeveloperIdentityResponse_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'token', 'getOpenIdTokenForDeveloperIdentityResponse_token' - An OpenID token.+--+-- 'httpStatus', 'getOpenIdTokenForDeveloperIdentityResponse_httpStatus' - The response's http status code.+newGetOpenIdTokenForDeveloperIdentityResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetOpenIdTokenForDeveloperIdentityResponse+newGetOpenIdTokenForDeveloperIdentityResponse+  pHttpStatus_ =+    GetOpenIdTokenForDeveloperIdentityResponse'+      { identityId =+          Prelude.Nothing,+        token = Prelude.Nothing,+        httpStatus = pHttpStatus_+      }++-- | A unique identifier in the format REGION:GUID.+getOpenIdTokenForDeveloperIdentityResponse_identityId :: Lens.Lens' GetOpenIdTokenForDeveloperIdentityResponse (Prelude.Maybe Prelude.Text)+getOpenIdTokenForDeveloperIdentityResponse_identityId = Lens.lens (\GetOpenIdTokenForDeveloperIdentityResponse' {identityId} -> identityId) (\s@GetOpenIdTokenForDeveloperIdentityResponse' {} a -> s {identityId = a} :: GetOpenIdTokenForDeveloperIdentityResponse)++-- | An OpenID token.+getOpenIdTokenForDeveloperIdentityResponse_token :: Lens.Lens' GetOpenIdTokenForDeveloperIdentityResponse (Prelude.Maybe Prelude.Text)+getOpenIdTokenForDeveloperIdentityResponse_token = Lens.lens (\GetOpenIdTokenForDeveloperIdentityResponse' {token} -> token) (\s@GetOpenIdTokenForDeveloperIdentityResponse' {} a -> s {token = a} :: GetOpenIdTokenForDeveloperIdentityResponse)++-- | The response's http status code.+getOpenIdTokenForDeveloperIdentityResponse_httpStatus :: Lens.Lens' GetOpenIdTokenForDeveloperIdentityResponse Prelude.Int+getOpenIdTokenForDeveloperIdentityResponse_httpStatus = Lens.lens (\GetOpenIdTokenForDeveloperIdentityResponse' {httpStatus} -> httpStatus) (\s@GetOpenIdTokenForDeveloperIdentityResponse' {} a -> s {httpStatus = a} :: GetOpenIdTokenForDeveloperIdentityResponse)++instance+  Prelude.NFData+    GetOpenIdTokenForDeveloperIdentityResponse+  where+  rnf GetOpenIdTokenForDeveloperIdentityResponse' {..} =+    Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf token+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,247 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.GetPrincipalTagAttributeMap+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Use @GetPrincipalTagAttributeMap@ to list all mappings between+-- @PrincipalTags@ and user attributes.+module Amazonka.CognitoIdentity.GetPrincipalTagAttributeMap+  ( -- * Creating a Request+    GetPrincipalTagAttributeMap (..),+    newGetPrincipalTagAttributeMap,++    -- * Request Lenses+    getPrincipalTagAttributeMap_identityPoolId,+    getPrincipalTagAttributeMap_identityProviderName,++    -- * Destructuring the Response+    GetPrincipalTagAttributeMapResponse (..),+    newGetPrincipalTagAttributeMapResponse,++    -- * Response Lenses+    getPrincipalTagAttributeMapResponse_identityPoolId,+    getPrincipalTagAttributeMapResponse_identityProviderName,+    getPrincipalTagAttributeMapResponse_principalTags,+    getPrincipalTagAttributeMapResponse_useDefaults,+    getPrincipalTagAttributeMapResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newGetPrincipalTagAttributeMap' smart constructor.+data GetPrincipalTagAttributeMap = GetPrincipalTagAttributeMap'+  { -- | You can use this operation to get the ID of the Identity Pool you setup+    -- attribute mappings for.+    identityPoolId :: Prelude.Text,+    -- | You can use this operation to get the provider name.+    identityProviderName :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetPrincipalTagAttributeMap' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'getPrincipalTagAttributeMap_identityPoolId' - You can use this operation to get the ID of the Identity Pool you setup+-- attribute mappings for.+--+-- 'identityProviderName', 'getPrincipalTagAttributeMap_identityProviderName' - You can use this operation to get the provider name.+newGetPrincipalTagAttributeMap ::+  -- | 'identityPoolId'+  Prelude.Text ->+  -- | 'identityProviderName'+  Prelude.Text ->+  GetPrincipalTagAttributeMap+newGetPrincipalTagAttributeMap+  pIdentityPoolId_+  pIdentityProviderName_ =+    GetPrincipalTagAttributeMap'+      { identityPoolId =+          pIdentityPoolId_,+        identityProviderName = pIdentityProviderName_+      }++-- | You can use this operation to get the ID of the Identity Pool you setup+-- attribute mappings for.+getPrincipalTagAttributeMap_identityPoolId :: Lens.Lens' GetPrincipalTagAttributeMap Prelude.Text+getPrincipalTagAttributeMap_identityPoolId = Lens.lens (\GetPrincipalTagAttributeMap' {identityPoolId} -> identityPoolId) (\s@GetPrincipalTagAttributeMap' {} a -> s {identityPoolId = a} :: GetPrincipalTagAttributeMap)++-- | You can use this operation to get the provider name.+getPrincipalTagAttributeMap_identityProviderName :: Lens.Lens' GetPrincipalTagAttributeMap Prelude.Text+getPrincipalTagAttributeMap_identityProviderName = Lens.lens (\GetPrincipalTagAttributeMap' {identityProviderName} -> identityProviderName) (\s@GetPrincipalTagAttributeMap' {} a -> s {identityProviderName = a} :: GetPrincipalTagAttributeMap)++instance Core.AWSRequest GetPrincipalTagAttributeMap where+  type+    AWSResponse GetPrincipalTagAttributeMap =+      GetPrincipalTagAttributeMapResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          GetPrincipalTagAttributeMapResponse'+            Prelude.<$> (x Data..?> "IdentityPoolId")+            Prelude.<*> (x Data..?> "IdentityProviderName")+            Prelude.<*> (x Data..?> "PrincipalTags" Core..!@ Prelude.mempty)+            Prelude.<*> (x Data..?> "UseDefaults")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable GetPrincipalTagAttributeMap where+  hashWithSalt _salt GetPrincipalTagAttributeMap' {..} =+    _salt+      `Prelude.hashWithSalt` identityPoolId+      `Prelude.hashWithSalt` identityProviderName++instance Prelude.NFData GetPrincipalTagAttributeMap where+  rnf GetPrincipalTagAttributeMap' {..} =+    Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf identityProviderName++instance Data.ToHeaders GetPrincipalTagAttributeMap where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.GetPrincipalTagAttributeMap" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON GetPrincipalTagAttributeMap where+  toJSON GetPrincipalTagAttributeMap' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId),+            Prelude.Just+              ( "IdentityProviderName"+                  Data..= identityProviderName+              )+          ]+      )++instance Data.ToPath GetPrincipalTagAttributeMap where+  toPath = Prelude.const "/"++instance Data.ToQuery GetPrincipalTagAttributeMap where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newGetPrincipalTagAttributeMapResponse' smart constructor.+data GetPrincipalTagAttributeMapResponse = GetPrincipalTagAttributeMapResponse'+  { -- | You can use this operation to get the ID of the Identity Pool you setup+    -- attribute mappings for.+    identityPoolId :: Prelude.Maybe Prelude.Text,+    -- | You can use this operation to get the provider name.+    identityProviderName :: Prelude.Maybe Prelude.Text,+    -- | You can use this operation to add principal tags. The+    -- @PrincipalTags@operation enables you to reference user attributes in+    -- your IAM permissions policy.+    principalTags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | You can use this operation to list+    useDefaults :: Prelude.Maybe Prelude.Bool,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'GetPrincipalTagAttributeMapResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'getPrincipalTagAttributeMapResponse_identityPoolId' - You can use this operation to get the ID of the Identity Pool you setup+-- attribute mappings for.+--+-- 'identityProviderName', 'getPrincipalTagAttributeMapResponse_identityProviderName' - You can use this operation to get the provider name.+--+-- 'principalTags', 'getPrincipalTagAttributeMapResponse_principalTags' - You can use this operation to add principal tags. The+-- @PrincipalTags@operation enables you to reference user attributes in+-- your IAM permissions policy.+--+-- 'useDefaults', 'getPrincipalTagAttributeMapResponse_useDefaults' - You can use this operation to list+--+-- 'httpStatus', 'getPrincipalTagAttributeMapResponse_httpStatus' - The response's http status code.+newGetPrincipalTagAttributeMapResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  GetPrincipalTagAttributeMapResponse+newGetPrincipalTagAttributeMapResponse pHttpStatus_ =+  GetPrincipalTagAttributeMapResponse'+    { identityPoolId =+        Prelude.Nothing,+      identityProviderName = Prelude.Nothing,+      principalTags = Prelude.Nothing,+      useDefaults = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | You can use this operation to get the ID of the Identity Pool you setup+-- attribute mappings for.+getPrincipalTagAttributeMapResponse_identityPoolId :: Lens.Lens' GetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Text)+getPrincipalTagAttributeMapResponse_identityPoolId = Lens.lens (\GetPrincipalTagAttributeMapResponse' {identityPoolId} -> identityPoolId) (\s@GetPrincipalTagAttributeMapResponse' {} a -> s {identityPoolId = a} :: GetPrincipalTagAttributeMapResponse)++-- | You can use this operation to get the provider name.+getPrincipalTagAttributeMapResponse_identityProviderName :: Lens.Lens' GetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Text)+getPrincipalTagAttributeMapResponse_identityProviderName = Lens.lens (\GetPrincipalTagAttributeMapResponse' {identityProviderName} -> identityProviderName) (\s@GetPrincipalTagAttributeMapResponse' {} a -> s {identityProviderName = a} :: GetPrincipalTagAttributeMapResponse)++-- | You can use this operation to add principal tags. The+-- @PrincipalTags@operation enables you to reference user attributes in+-- your IAM permissions policy.+getPrincipalTagAttributeMapResponse_principalTags :: Lens.Lens' GetPrincipalTagAttributeMapResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+getPrincipalTagAttributeMapResponse_principalTags = Lens.lens (\GetPrincipalTagAttributeMapResponse' {principalTags} -> principalTags) (\s@GetPrincipalTagAttributeMapResponse' {} a -> s {principalTags = a} :: GetPrincipalTagAttributeMapResponse) Prelude.. Lens.mapping Lens.coerced++-- | You can use this operation to list+getPrincipalTagAttributeMapResponse_useDefaults :: Lens.Lens' GetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Bool)+getPrincipalTagAttributeMapResponse_useDefaults = Lens.lens (\GetPrincipalTagAttributeMapResponse' {useDefaults} -> useDefaults) (\s@GetPrincipalTagAttributeMapResponse' {} a -> s {useDefaults = a} :: GetPrincipalTagAttributeMapResponse)++-- | The response's http status code.+getPrincipalTagAttributeMapResponse_httpStatus :: Lens.Lens' GetPrincipalTagAttributeMapResponse Prelude.Int+getPrincipalTagAttributeMapResponse_httpStatus = Lens.lens (\GetPrincipalTagAttributeMapResponse' {httpStatus} -> httpStatus) (\s@GetPrincipalTagAttributeMapResponse' {} a -> s {httpStatus = a} :: GetPrincipalTagAttributeMapResponse)++instance+  Prelude.NFData+    GetPrincipalTagAttributeMapResponse+  where+  rnf GetPrincipalTagAttributeMapResponse' {..} =+    Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf identityProviderName+      `Prelude.seq` Prelude.rnf principalTags+      `Prelude.seq` Prelude.rnf useDefaults+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,300 @@+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-duplicate-exports #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.Lens+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+module Amazonka.CognitoIdentity.Lens+  ( -- * Operations++    -- ** CreateIdentityPool+    createIdentityPool_allowClassicFlow,+    createIdentityPool_cognitoIdentityProviders,+    createIdentityPool_developerProviderName,+    createIdentityPool_identityPoolTags,+    createIdentityPool_openIdConnectProviderARNs,+    createIdentityPool_samlProviderARNs,+    createIdentityPool_supportedLoginProviders,+    createIdentityPool_identityPoolName,+    createIdentityPool_allowUnauthenticatedIdentities,+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,++    -- ** DeleteIdentities+    deleteIdentities_identityIdsToDelete,+    deleteIdentitiesResponse_unprocessedIdentityIds,+    deleteIdentitiesResponse_httpStatus,++    -- ** DeleteIdentityPool+    deleteIdentityPool_identityPoolId,++    -- ** DescribeIdentity+    describeIdentity_identityId,+    identityDescription_creationDate,+    identityDescription_identityId,+    identityDescription_lastModifiedDate,+    identityDescription_logins,++    -- ** DescribeIdentityPool+    describeIdentityPool_identityPoolId,+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,++    -- ** GetCredentialsForIdentity+    getCredentialsForIdentity_customRoleArn,+    getCredentialsForIdentity_logins,+    getCredentialsForIdentity_identityId,+    getCredentialsForIdentityResponse_credentials,+    getCredentialsForIdentityResponse_identityId,+    getCredentialsForIdentityResponse_httpStatus,++    -- ** GetId+    getId_accountId,+    getId_logins,+    getId_identityPoolId,+    getIdResponse_identityId,+    getIdResponse_httpStatus,++    -- ** GetIdentityPoolRoles+    getIdentityPoolRoles_identityPoolId,+    getIdentityPoolRolesResponse_identityPoolId,+    getIdentityPoolRolesResponse_roleMappings,+    getIdentityPoolRolesResponse_roles,+    getIdentityPoolRolesResponse_httpStatus,++    -- ** GetOpenIdToken+    getOpenIdToken_logins,+    getOpenIdToken_identityId,+    getOpenIdTokenResponse_identityId,+    getOpenIdTokenResponse_token,+    getOpenIdTokenResponse_httpStatus,++    -- ** GetOpenIdTokenForDeveloperIdentity+    getOpenIdTokenForDeveloperIdentity_identityId,+    getOpenIdTokenForDeveloperIdentity_principalTags,+    getOpenIdTokenForDeveloperIdentity_tokenDuration,+    getOpenIdTokenForDeveloperIdentity_identityPoolId,+    getOpenIdTokenForDeveloperIdentity_logins,+    getOpenIdTokenForDeveloperIdentityResponse_identityId,+    getOpenIdTokenForDeveloperIdentityResponse_token,+    getOpenIdTokenForDeveloperIdentityResponse_httpStatus,++    -- ** GetPrincipalTagAttributeMap+    getPrincipalTagAttributeMap_identityPoolId,+    getPrincipalTagAttributeMap_identityProviderName,+    getPrincipalTagAttributeMapResponse_identityPoolId,+    getPrincipalTagAttributeMapResponse_identityProviderName,+    getPrincipalTagAttributeMapResponse_principalTags,+    getPrincipalTagAttributeMapResponse_useDefaults,+    getPrincipalTagAttributeMapResponse_httpStatus,++    -- ** ListIdentities+    listIdentities_hideDisabled,+    listIdentities_nextToken,+    listIdentities_identityPoolId,+    listIdentities_maxResults,+    listIdentitiesResponse_identities,+    listIdentitiesResponse_identityPoolId,+    listIdentitiesResponse_nextToken,+    listIdentitiesResponse_httpStatus,++    -- ** ListIdentityPools+    listIdentityPools_nextToken,+    listIdentityPools_maxResults,+    listIdentityPoolsResponse_identityPools,+    listIdentityPoolsResponse_nextToken,+    listIdentityPoolsResponse_httpStatus,++    -- ** ListTagsForResource+    listTagsForResource_resourceArn,+    listTagsForResourceResponse_tags,+    listTagsForResourceResponse_httpStatus,++    -- ** LookupDeveloperIdentity+    lookupDeveloperIdentity_developerUserIdentifier,+    lookupDeveloperIdentity_identityId,+    lookupDeveloperIdentity_maxResults,+    lookupDeveloperIdentity_nextToken,+    lookupDeveloperIdentity_identityPoolId,+    lookupDeveloperIdentityResponse_developerUserIdentifierList,+    lookupDeveloperIdentityResponse_identityId,+    lookupDeveloperIdentityResponse_nextToken,+    lookupDeveloperIdentityResponse_httpStatus,++    -- ** MergeDeveloperIdentities+    mergeDeveloperIdentities_sourceUserIdentifier,+    mergeDeveloperIdentities_destinationUserIdentifier,+    mergeDeveloperIdentities_developerProviderName,+    mergeDeveloperIdentities_identityPoolId,+    mergeDeveloperIdentitiesResponse_identityId,+    mergeDeveloperIdentitiesResponse_httpStatus,++    -- ** SetIdentityPoolRoles+    setIdentityPoolRoles_roleMappings,+    setIdentityPoolRoles_identityPoolId,+    setIdentityPoolRoles_roles,++    -- ** SetPrincipalTagAttributeMap+    setPrincipalTagAttributeMap_principalTags,+    setPrincipalTagAttributeMap_useDefaults,+    setPrincipalTagAttributeMap_identityPoolId,+    setPrincipalTagAttributeMap_identityProviderName,+    setPrincipalTagAttributeMapResponse_identityPoolId,+    setPrincipalTagAttributeMapResponse_identityProviderName,+    setPrincipalTagAttributeMapResponse_principalTags,+    setPrincipalTagAttributeMapResponse_useDefaults,+    setPrincipalTagAttributeMapResponse_httpStatus,++    -- ** TagResource+    tagResource_resourceArn,+    tagResource_tags,+    tagResourceResponse_httpStatus,++    -- ** UnlinkDeveloperIdentity+    unlinkDeveloperIdentity_identityId,+    unlinkDeveloperIdentity_identityPoolId,+    unlinkDeveloperIdentity_developerProviderName,+    unlinkDeveloperIdentity_developerUserIdentifier,++    -- ** UnlinkIdentity+    unlinkIdentity_identityId,+    unlinkIdentity_logins,+    unlinkIdentity_loginsToRemove,++    -- ** UntagResource+    untagResource_resourceArn,+    untagResource_tagKeys,+    untagResourceResponse_httpStatus,++    -- ** UpdateIdentityPool+    updateIdentityPool_allowClassicFlow,+    updateIdentityPool_cognitoIdentityProviders,+    updateIdentityPool_developerProviderName,+    updateIdentityPool_identityPoolTags,+    updateIdentityPool_openIdConnectProviderARNs,+    updateIdentityPool_samlProviderARNs,+    updateIdentityPool_supportedLoginProviders,+    updateIdentityPool_identityPoolId,+    updateIdentityPool_identityPoolName,+    updateIdentityPool_allowUnauthenticatedIdentities,+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,++    -- * Types++    -- ** CognitoIdentityProvider+    cognitoIdentityProvider_clientId,+    cognitoIdentityProvider_providerName,+    cognitoIdentityProvider_serverSideTokenCheck,++    -- ** Credentials+    credentials_accessKeyId,+    credentials_expiration,+    credentials_secretKey,+    credentials_sessionToken,++    -- ** IdentityDescription+    identityDescription_creationDate,+    identityDescription_identityId,+    identityDescription_lastModifiedDate,+    identityDescription_logins,++    -- ** IdentityPool+    identityPool_allowClassicFlow,+    identityPool_cognitoIdentityProviders,+    identityPool_developerProviderName,+    identityPool_identityPoolTags,+    identityPool_openIdConnectProviderARNs,+    identityPool_samlProviderARNs,+    identityPool_supportedLoginProviders,+    identityPool_identityPoolId,+    identityPool_identityPoolName,+    identityPool_allowUnauthenticatedIdentities,++    -- ** IdentityPoolShortDescription+    identityPoolShortDescription_identityPoolId,+    identityPoolShortDescription_identityPoolName,++    -- ** MappingRule+    mappingRule_claim,+    mappingRule_matchType,+    mappingRule_value,+    mappingRule_roleARN,++    -- ** RoleMapping+    roleMapping_ambiguousRoleResolution,+    roleMapping_rulesConfiguration,+    roleMapping_type,++    -- ** RulesConfigurationType+    rulesConfigurationType_rules,++    -- ** UnprocessedIdentityId+    unprocessedIdentityId_errorCode,+    unprocessedIdentityId_identityId,+  )+where++import Amazonka.CognitoIdentity.CreateIdentityPool+import Amazonka.CognitoIdentity.DeleteIdentities+import Amazonka.CognitoIdentity.DeleteIdentityPool+import Amazonka.CognitoIdentity.DescribeIdentity+import Amazonka.CognitoIdentity.DescribeIdentityPool+import Amazonka.CognitoIdentity.GetCredentialsForIdentity+import Amazonka.CognitoIdentity.GetId+import Amazonka.CognitoIdentity.GetIdentityPoolRoles+import Amazonka.CognitoIdentity.GetOpenIdToken+import Amazonka.CognitoIdentity.GetOpenIdTokenForDeveloperIdentity+import Amazonka.CognitoIdentity.GetPrincipalTagAttributeMap+import Amazonka.CognitoIdentity.ListIdentities+import Amazonka.CognitoIdentity.ListIdentityPools+import Amazonka.CognitoIdentity.ListTagsForResource+import Amazonka.CognitoIdentity.LookupDeveloperIdentity+import Amazonka.CognitoIdentity.MergeDeveloperIdentities+import Amazonka.CognitoIdentity.SetIdentityPoolRoles+import Amazonka.CognitoIdentity.SetPrincipalTagAttributeMap+import Amazonka.CognitoIdentity.TagResource+import Amazonka.CognitoIdentity.Types.CognitoIdentityProvider+import Amazonka.CognitoIdentity.Types.Credentials+import Amazonka.CognitoIdentity.Types.IdentityDescription+import Amazonka.CognitoIdentity.Types.IdentityPool+import Amazonka.CognitoIdentity.Types.IdentityPoolShortDescription+import Amazonka.CognitoIdentity.Types.MappingRule+import Amazonka.CognitoIdentity.Types.RoleMapping+import Amazonka.CognitoIdentity.Types.RulesConfigurationType+import Amazonka.CognitoIdentity.Types.UnprocessedIdentityId+import Amazonka.CognitoIdentity.UnlinkDeveloperIdentity+import Amazonka.CognitoIdentity.UnlinkIdentity+import Amazonka.CognitoIdentity.UntagResource+import Amazonka.CognitoIdentity.UpdateIdentityPool

@@ -0,0 +1,251 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.ListIdentities+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the identities in an identity pool.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.ListIdentities+  ( -- * Creating a Request+    ListIdentities (..),+    newListIdentities,++    -- * Request Lenses+    listIdentities_hideDisabled,+    listIdentities_nextToken,+    listIdentities_identityPoolId,+    listIdentities_maxResults,++    -- * Destructuring the Response+    ListIdentitiesResponse (..),+    newListIdentitiesResponse,++    -- * Response Lenses+    listIdentitiesResponse_identities,+    listIdentitiesResponse_identityPoolId,+    listIdentitiesResponse_nextToken,+    listIdentitiesResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the ListIdentities action.+--+-- /See:/ 'newListIdentities' smart constructor.+data ListIdentities = ListIdentities'+  { -- | An optional boolean parameter that allows you to hide disabled+    -- identities. If omitted, the ListIdentities API will include disabled+    -- identities in the response.+    hideDisabled :: Prelude.Maybe Prelude.Bool,+    -- | A pagination token.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text,+    -- | The maximum number of identities to return.+    maxResults :: Prelude.Natural+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListIdentities' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'hideDisabled', 'listIdentities_hideDisabled' - An optional boolean parameter that allows you to hide disabled+-- identities. If omitted, the ListIdentities API will include disabled+-- identities in the response.+--+-- 'nextToken', 'listIdentities_nextToken' - A pagination token.+--+-- 'identityPoolId', 'listIdentities_identityPoolId' - An identity pool ID in the format REGION:GUID.+--+-- 'maxResults', 'listIdentities_maxResults' - The maximum number of identities to return.+newListIdentities ::+  -- | 'identityPoolId'+  Prelude.Text ->+  -- | 'maxResults'+  Prelude.Natural ->+  ListIdentities+newListIdentities pIdentityPoolId_ pMaxResults_ =+  ListIdentities'+    { hideDisabled = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      identityPoolId = pIdentityPoolId_,+      maxResults = pMaxResults_+    }++-- | An optional boolean parameter that allows you to hide disabled+-- identities. If omitted, the ListIdentities API will include disabled+-- identities in the response.+listIdentities_hideDisabled :: Lens.Lens' ListIdentities (Prelude.Maybe Prelude.Bool)+listIdentities_hideDisabled = Lens.lens (\ListIdentities' {hideDisabled} -> hideDisabled) (\s@ListIdentities' {} a -> s {hideDisabled = a} :: ListIdentities)++-- | A pagination token.+listIdentities_nextToken :: Lens.Lens' ListIdentities (Prelude.Maybe Prelude.Text)+listIdentities_nextToken = Lens.lens (\ListIdentities' {nextToken} -> nextToken) (\s@ListIdentities' {} a -> s {nextToken = a} :: ListIdentities)++-- | An identity pool ID in the format REGION:GUID.+listIdentities_identityPoolId :: Lens.Lens' ListIdentities Prelude.Text+listIdentities_identityPoolId = Lens.lens (\ListIdentities' {identityPoolId} -> identityPoolId) (\s@ListIdentities' {} a -> s {identityPoolId = a} :: ListIdentities)++-- | The maximum number of identities to return.+listIdentities_maxResults :: Lens.Lens' ListIdentities Prelude.Natural+listIdentities_maxResults = Lens.lens (\ListIdentities' {maxResults} -> maxResults) (\s@ListIdentities' {} a -> s {maxResults = a} :: ListIdentities)++instance Core.AWSRequest ListIdentities where+  type+    AWSResponse ListIdentities =+      ListIdentitiesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListIdentitiesResponse'+            Prelude.<$> (x Data..?> "Identities" Core..!@ Prelude.mempty)+            Prelude.<*> (x Data..?> "IdentityPoolId")+            Prelude.<*> (x Data..?> "NextToken")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListIdentities where+  hashWithSalt _salt ListIdentities' {..} =+    _salt+      `Prelude.hashWithSalt` hideDisabled+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` identityPoolId+      `Prelude.hashWithSalt` maxResults++instance Prelude.NFData ListIdentities where+  rnf ListIdentities' {..} =+    Prelude.rnf hideDisabled+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf maxResults++instance Data.ToHeaders ListIdentities where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.ListIdentities" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListIdentities where+  toJSON ListIdentities' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("HideDisabled" Data..=) Prelude.<$> hideDisabled,+            ("NextToken" Data..=) Prelude.<$> nextToken,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId),+            Prelude.Just ("MaxResults" Data..= maxResults)+          ]+      )++instance Data.ToPath ListIdentities where+  toPath = Prelude.const "/"++instance Data.ToQuery ListIdentities where+  toQuery = Prelude.const Prelude.mempty++-- | The response to a ListIdentities request.+--+-- /See:/ 'newListIdentitiesResponse' smart constructor.+data ListIdentitiesResponse = ListIdentitiesResponse'+  { -- | An object containing a set of identities and associated mappings.+    identities :: Prelude.Maybe [IdentityDescription],+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Maybe Prelude.Text,+    -- | A pagination token.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListIdentitiesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identities', 'listIdentitiesResponse_identities' - An object containing a set of identities and associated mappings.+--+-- 'identityPoolId', 'listIdentitiesResponse_identityPoolId' - An identity pool ID in the format REGION:GUID.+--+-- 'nextToken', 'listIdentitiesResponse_nextToken' - A pagination token.+--+-- 'httpStatus', 'listIdentitiesResponse_httpStatus' - The response's http status code.+newListIdentitiesResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListIdentitiesResponse+newListIdentitiesResponse pHttpStatus_ =+  ListIdentitiesResponse'+    { identities =+        Prelude.Nothing,+      identityPoolId = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | An object containing a set of identities and associated mappings.+listIdentitiesResponse_identities :: Lens.Lens' ListIdentitiesResponse (Prelude.Maybe [IdentityDescription])+listIdentitiesResponse_identities = Lens.lens (\ListIdentitiesResponse' {identities} -> identities) (\s@ListIdentitiesResponse' {} a -> s {identities = a} :: ListIdentitiesResponse) Prelude.. Lens.mapping Lens.coerced++-- | An identity pool ID in the format REGION:GUID.+listIdentitiesResponse_identityPoolId :: Lens.Lens' ListIdentitiesResponse (Prelude.Maybe Prelude.Text)+listIdentitiesResponse_identityPoolId = Lens.lens (\ListIdentitiesResponse' {identityPoolId} -> identityPoolId) (\s@ListIdentitiesResponse' {} a -> s {identityPoolId = a} :: ListIdentitiesResponse)++-- | A pagination token.+listIdentitiesResponse_nextToken :: Lens.Lens' ListIdentitiesResponse (Prelude.Maybe Prelude.Text)+listIdentitiesResponse_nextToken = Lens.lens (\ListIdentitiesResponse' {nextToken} -> nextToken) (\s@ListIdentitiesResponse' {} a -> s {nextToken = a} :: ListIdentitiesResponse)++-- | The response's http status code.+listIdentitiesResponse_httpStatus :: Lens.Lens' ListIdentitiesResponse Prelude.Int+listIdentitiesResponse_httpStatus = Lens.lens (\ListIdentitiesResponse' {httpStatus} -> httpStatus) (\s@ListIdentitiesResponse' {} a -> s {httpStatus = a} :: ListIdentitiesResponse)++instance Prelude.NFData ListIdentitiesResponse where+  rnf ListIdentitiesResponse' {..} =+    Prelude.rnf identities+      `Prelude.seq` Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,228 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.ListIdentityPools+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists all of the Cognito identity pools registered for your account.+--+-- You must use AWS Developer credentials to call this API.+--+-- This operation returns paginated results.+module Amazonka.CognitoIdentity.ListIdentityPools+  ( -- * Creating a Request+    ListIdentityPools (..),+    newListIdentityPools,++    -- * Request Lenses+    listIdentityPools_nextToken,+    listIdentityPools_maxResults,++    -- * Destructuring the Response+    ListIdentityPoolsResponse (..),+    newListIdentityPoolsResponse,++    -- * Response Lenses+    listIdentityPoolsResponse_identityPools,+    listIdentityPoolsResponse_nextToken,+    listIdentityPoolsResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the ListIdentityPools action.+--+-- /See:/ 'newListIdentityPools' smart constructor.+data ListIdentityPools = ListIdentityPools'+  { -- | A pagination token.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The maximum number of identities to return.+    maxResults :: Prelude.Natural+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListIdentityPools' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'nextToken', 'listIdentityPools_nextToken' - A pagination token.+--+-- 'maxResults', 'listIdentityPools_maxResults' - The maximum number of identities to return.+newListIdentityPools ::+  -- | 'maxResults'+  Prelude.Natural ->+  ListIdentityPools+newListIdentityPools pMaxResults_ =+  ListIdentityPools'+    { nextToken = Prelude.Nothing,+      maxResults = pMaxResults_+    }++-- | A pagination token.+listIdentityPools_nextToken :: Lens.Lens' ListIdentityPools (Prelude.Maybe Prelude.Text)+listIdentityPools_nextToken = Lens.lens (\ListIdentityPools' {nextToken} -> nextToken) (\s@ListIdentityPools' {} a -> s {nextToken = a} :: ListIdentityPools)++-- | The maximum number of identities to return.+listIdentityPools_maxResults :: Lens.Lens' ListIdentityPools Prelude.Natural+listIdentityPools_maxResults = Lens.lens (\ListIdentityPools' {maxResults} -> maxResults) (\s@ListIdentityPools' {} a -> s {maxResults = a} :: ListIdentityPools)++instance Core.AWSPager ListIdentityPools where+  page rq rs+    | Core.stop+        ( rs+            Lens.^? listIdentityPoolsResponse_nextToken+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Core.stop+        ( rs+            Lens.^? listIdentityPoolsResponse_identityPools+            Prelude.. Lens._Just+        ) =+        Prelude.Nothing+    | Prelude.otherwise =+        Prelude.Just+          Prelude.$ rq+          Prelude.& listIdentityPools_nextToken+          Lens..~ rs+          Lens.^? listIdentityPoolsResponse_nextToken+          Prelude.. Lens._Just++instance Core.AWSRequest ListIdentityPools where+  type+    AWSResponse ListIdentityPools =+      ListIdentityPoolsResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListIdentityPoolsResponse'+            Prelude.<$> (x Data..?> "IdentityPools" Core..!@ Prelude.mempty)+            Prelude.<*> (x Data..?> "NextToken")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListIdentityPools where+  hashWithSalt _salt ListIdentityPools' {..} =+    _salt+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` maxResults++instance Prelude.NFData ListIdentityPools where+  rnf ListIdentityPools' {..} =+    Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf maxResults++instance Data.ToHeaders ListIdentityPools where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.ListIdentityPools" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListIdentityPools where+  toJSON ListIdentityPools' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("NextToken" Data..=) Prelude.<$> nextToken,+            Prelude.Just ("MaxResults" Data..= maxResults)+          ]+      )++instance Data.ToPath ListIdentityPools where+  toPath = Prelude.const "/"++instance Data.ToQuery ListIdentityPools where+  toQuery = Prelude.const Prelude.mempty++-- | The result of a successful ListIdentityPools action.+--+-- /See:/ 'newListIdentityPoolsResponse' smart constructor.+data ListIdentityPoolsResponse = ListIdentityPoolsResponse'+  { -- | The identity pools returned by the ListIdentityPools action.+    identityPools :: Prelude.Maybe [IdentityPoolShortDescription],+    -- | A pagination token.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListIdentityPoolsResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPools', 'listIdentityPoolsResponse_identityPools' - The identity pools returned by the ListIdentityPools action.+--+-- 'nextToken', 'listIdentityPoolsResponse_nextToken' - A pagination token.+--+-- 'httpStatus', 'listIdentityPoolsResponse_httpStatus' - The response's http status code.+newListIdentityPoolsResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListIdentityPoolsResponse+newListIdentityPoolsResponse pHttpStatus_ =+  ListIdentityPoolsResponse'+    { identityPools =+        Prelude.Nothing,+      nextToken = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The identity pools returned by the ListIdentityPools action.+listIdentityPoolsResponse_identityPools :: Lens.Lens' ListIdentityPoolsResponse (Prelude.Maybe [IdentityPoolShortDescription])+listIdentityPoolsResponse_identityPools = Lens.lens (\ListIdentityPoolsResponse' {identityPools} -> identityPools) (\s@ListIdentityPoolsResponse' {} a -> s {identityPools = a} :: ListIdentityPoolsResponse) Prelude.. Lens.mapping Lens.coerced++-- | A pagination token.+listIdentityPoolsResponse_nextToken :: Lens.Lens' ListIdentityPoolsResponse (Prelude.Maybe Prelude.Text)+listIdentityPoolsResponse_nextToken = Lens.lens (\ListIdentityPoolsResponse' {nextToken} -> nextToken) (\s@ListIdentityPoolsResponse' {} a -> s {nextToken = a} :: ListIdentityPoolsResponse)++-- | The response's http status code.+listIdentityPoolsResponse_httpStatus :: Lens.Lens' ListIdentityPoolsResponse Prelude.Int+listIdentityPoolsResponse_httpStatus = Lens.lens (\ListIdentityPoolsResponse' {httpStatus} -> httpStatus) (\s@ListIdentityPoolsResponse' {} a -> s {httpStatus = a} :: ListIdentityPoolsResponse)++instance Prelude.NFData ListIdentityPoolsResponse where+  rnf ListIdentityPoolsResponse' {..} =+    Prelude.rnf identityPools+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,178 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.ListTagsForResource+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the tags that are assigned to an Amazon Cognito identity pool.+--+-- A tag is a label that you can apply to identity pools to categorize and+-- manage them in different ways, such as by purpose, owner, environment,+-- or other criteria.+--+-- You can use this action up to 10 times per second, per account.+module Amazonka.CognitoIdentity.ListTagsForResource+  ( -- * Creating a Request+    ListTagsForResource (..),+    newListTagsForResource,++    -- * Request Lenses+    listTagsForResource_resourceArn,++    -- * Destructuring the Response+    ListTagsForResourceResponse (..),+    newListTagsForResourceResponse,++    -- * Response Lenses+    listTagsForResourceResponse_tags,+    listTagsForResourceResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newListTagsForResource' smart constructor.+data ListTagsForResource = ListTagsForResource'+  { -- | The Amazon Resource Name (ARN) of the identity pool that the tags are+    -- assigned to.+    resourceArn :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListTagsForResource' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'resourceArn', 'listTagsForResource_resourceArn' - The Amazon Resource Name (ARN) of the identity pool that the tags are+-- assigned to.+newListTagsForResource ::+  -- | 'resourceArn'+  Prelude.Text ->+  ListTagsForResource+newListTagsForResource pResourceArn_ =+  ListTagsForResource' {resourceArn = pResourceArn_}++-- | The Amazon Resource Name (ARN) of the identity pool that the tags are+-- assigned to.+listTagsForResource_resourceArn :: Lens.Lens' ListTagsForResource Prelude.Text+listTagsForResource_resourceArn = Lens.lens (\ListTagsForResource' {resourceArn} -> resourceArn) (\s@ListTagsForResource' {} a -> s {resourceArn = a} :: ListTagsForResource)++instance Core.AWSRequest ListTagsForResource where+  type+    AWSResponse ListTagsForResource =+      ListTagsForResourceResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          ListTagsForResourceResponse'+            Prelude.<$> (x Data..?> "Tags" Core..!@ Prelude.mempty)+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable ListTagsForResource where+  hashWithSalt _salt ListTagsForResource' {..} =+    _salt `Prelude.hashWithSalt` resourceArn++instance Prelude.NFData ListTagsForResource where+  rnf ListTagsForResource' {..} =+    Prelude.rnf resourceArn++instance Data.ToHeaders ListTagsForResource where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.ListTagsForResource" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON ListTagsForResource where+  toJSON ListTagsForResource' {..} =+    Data.object+      ( Prelude.catMaybes+          [Prelude.Just ("ResourceArn" Data..= resourceArn)]+      )++instance Data.ToPath ListTagsForResource where+  toPath = Prelude.const "/"++instance Data.ToQuery ListTagsForResource where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newListTagsForResourceResponse' smart constructor.+data ListTagsForResourceResponse = ListTagsForResourceResponse'+  { -- | The tags that are assigned to the identity pool.+    tags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'ListTagsForResourceResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'tags', 'listTagsForResourceResponse_tags' - The tags that are assigned to the identity pool.+--+-- 'httpStatus', 'listTagsForResourceResponse_httpStatus' - The response's http status code.+newListTagsForResourceResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  ListTagsForResourceResponse+newListTagsForResourceResponse pHttpStatus_ =+  ListTagsForResourceResponse'+    { tags =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The tags that are assigned to the identity pool.+listTagsForResourceResponse_tags :: Lens.Lens' ListTagsForResourceResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+listTagsForResourceResponse_tags = Lens.lens (\ListTagsForResourceResponse' {tags} -> tags) (\s@ListTagsForResourceResponse' {} a -> s {tags = a} :: ListTagsForResourceResponse) Prelude.. Lens.mapping Lens.coerced++-- | The response's http status code.+listTagsForResourceResponse_httpStatus :: Lens.Lens' ListTagsForResourceResponse Prelude.Int+listTagsForResourceResponse_httpStatus = Lens.lens (\ListTagsForResourceResponse' {httpStatus} -> httpStatus) (\s@ListTagsForResourceResponse' {} a -> s {httpStatus = a} :: ListTagsForResourceResponse)++instance Prelude.NFData ListTagsForResourceResponse where+  rnf ListTagsForResourceResponse' {..} =+    Prelude.rnf tags+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,322 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.LookupDeveloperIdentity+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Retrieves the @IdentityID@ associated with a @DeveloperUserIdentifier@+-- or the list of @DeveloperUserIdentifier@ values associated with an+-- @IdentityId@ for an existing identity. Either @IdentityID@ or+-- @DeveloperUserIdentifier@ must not be null. If you supply only one of+-- these values, the other value will be searched in the database and+-- returned as a part of the response. If you supply both,+-- @DeveloperUserIdentifier@ will be matched against @IdentityID@. If the+-- values are verified against the database, the response returns both+-- values and is the same as the request. Otherwise a+-- @ResourceConflictException@ is thrown.+--+-- @LookupDeveloperIdentity@ is intended for low-throughput control plane+-- operations: for example, to enable customer service to locate an+-- identity ID by username. If you are using it for higher-volume+-- operations such as user authentication, your requests are likely to be+-- throttled. GetOpenIdTokenForDeveloperIdentity is a better option for+-- higher-volume operations for user authentication.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.LookupDeveloperIdentity+  ( -- * Creating a Request+    LookupDeveloperIdentity (..),+    newLookupDeveloperIdentity,++    -- * Request Lenses+    lookupDeveloperIdentity_developerUserIdentifier,+    lookupDeveloperIdentity_identityId,+    lookupDeveloperIdentity_maxResults,+    lookupDeveloperIdentity_nextToken,+    lookupDeveloperIdentity_identityPoolId,++    -- * Destructuring the Response+    LookupDeveloperIdentityResponse (..),+    newLookupDeveloperIdentityResponse,++    -- * Response Lenses+    lookupDeveloperIdentityResponse_developerUserIdentifierList,+    lookupDeveloperIdentityResponse_identityId,+    lookupDeveloperIdentityResponse_nextToken,+    lookupDeveloperIdentityResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @LookupDeveloperIdentityInput@ action.+--+-- /See:/ 'newLookupDeveloperIdentity' smart constructor.+data LookupDeveloperIdentity = LookupDeveloperIdentity'+  { -- | A unique ID used by your backend authentication process to identify a+    -- user. Typically, a developer identity provider would issue many+    -- developer user identifiers, in keeping with the number of users.+    developerUserIdentifier :: Prelude.Maybe Prelude.Text,+    -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | The maximum number of identities to return.+    maxResults :: Prelude.Maybe Prelude.Natural,+    -- | A pagination token. The first call you make will have @NextToken@ set to+    -- null. After that the service will return @NextToken@ values as needed.+    -- For example, let\'s say you make a request with @MaxResults@ set to 10,+    -- and there are 20 matches in the database. The service will return a+    -- pagination token as a part of the response. This token can be used to+    -- call the API again and get results starting from the 11th match.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'LookupDeveloperIdentity' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'developerUserIdentifier', 'lookupDeveloperIdentity_developerUserIdentifier' - A unique ID used by your backend authentication process to identify a+-- user. Typically, a developer identity provider would issue many+-- developer user identifiers, in keeping with the number of users.+--+-- 'identityId', 'lookupDeveloperIdentity_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'maxResults', 'lookupDeveloperIdentity_maxResults' - The maximum number of identities to return.+--+-- 'nextToken', 'lookupDeveloperIdentity_nextToken' - A pagination token. The first call you make will have @NextToken@ set to+-- null. After that the service will return @NextToken@ values as needed.+-- For example, let\'s say you make a request with @MaxResults@ set to 10,+-- and there are 20 matches in the database. The service will return a+-- pagination token as a part of the response. This token can be used to+-- call the API again and get results starting from the 11th match.+--+-- 'identityPoolId', 'lookupDeveloperIdentity_identityPoolId' - An identity pool ID in the format REGION:GUID.+newLookupDeveloperIdentity ::+  -- | 'identityPoolId'+  Prelude.Text ->+  LookupDeveloperIdentity+newLookupDeveloperIdentity pIdentityPoolId_ =+  LookupDeveloperIdentity'+    { developerUserIdentifier =+        Prelude.Nothing,+      identityId = Prelude.Nothing,+      maxResults = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      identityPoolId = pIdentityPoolId_+    }++-- | A unique ID used by your backend authentication process to identify a+-- user. Typically, a developer identity provider would issue many+-- developer user identifiers, in keeping with the number of users.+lookupDeveloperIdentity_developerUserIdentifier :: Lens.Lens' LookupDeveloperIdentity (Prelude.Maybe Prelude.Text)+lookupDeveloperIdentity_developerUserIdentifier = Lens.lens (\LookupDeveloperIdentity' {developerUserIdentifier} -> developerUserIdentifier) (\s@LookupDeveloperIdentity' {} a -> s {developerUserIdentifier = a} :: LookupDeveloperIdentity)++-- | A unique identifier in the format REGION:GUID.+lookupDeveloperIdentity_identityId :: Lens.Lens' LookupDeveloperIdentity (Prelude.Maybe Prelude.Text)+lookupDeveloperIdentity_identityId = Lens.lens (\LookupDeveloperIdentity' {identityId} -> identityId) (\s@LookupDeveloperIdentity' {} a -> s {identityId = a} :: LookupDeveloperIdentity)++-- | The maximum number of identities to return.+lookupDeveloperIdentity_maxResults :: Lens.Lens' LookupDeveloperIdentity (Prelude.Maybe Prelude.Natural)+lookupDeveloperIdentity_maxResults = Lens.lens (\LookupDeveloperIdentity' {maxResults} -> maxResults) (\s@LookupDeveloperIdentity' {} a -> s {maxResults = a} :: LookupDeveloperIdentity)++-- | A pagination token. The first call you make will have @NextToken@ set to+-- null. After that the service will return @NextToken@ values as needed.+-- For example, let\'s say you make a request with @MaxResults@ set to 10,+-- and there are 20 matches in the database. The service will return a+-- pagination token as a part of the response. This token can be used to+-- call the API again and get results starting from the 11th match.+lookupDeveloperIdentity_nextToken :: Lens.Lens' LookupDeveloperIdentity (Prelude.Maybe Prelude.Text)+lookupDeveloperIdentity_nextToken = Lens.lens (\LookupDeveloperIdentity' {nextToken} -> nextToken) (\s@LookupDeveloperIdentity' {} a -> s {nextToken = a} :: LookupDeveloperIdentity)++-- | An identity pool ID in the format REGION:GUID.+lookupDeveloperIdentity_identityPoolId :: Lens.Lens' LookupDeveloperIdentity Prelude.Text+lookupDeveloperIdentity_identityPoolId = Lens.lens (\LookupDeveloperIdentity' {identityPoolId} -> identityPoolId) (\s@LookupDeveloperIdentity' {} a -> s {identityPoolId = a} :: LookupDeveloperIdentity)++instance Core.AWSRequest LookupDeveloperIdentity where+  type+    AWSResponse LookupDeveloperIdentity =+      LookupDeveloperIdentityResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          LookupDeveloperIdentityResponse'+            Prelude.<$> ( x+                            Data..?> "DeveloperUserIdentifierList"+                            Core..!@ Prelude.mempty+                        )+            Prelude.<*> (x Data..?> "IdentityId")+            Prelude.<*> (x Data..?> "NextToken")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable LookupDeveloperIdentity where+  hashWithSalt _salt LookupDeveloperIdentity' {..} =+    _salt+      `Prelude.hashWithSalt` developerUserIdentifier+      `Prelude.hashWithSalt` identityId+      `Prelude.hashWithSalt` maxResults+      `Prelude.hashWithSalt` nextToken+      `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData LookupDeveloperIdentity where+  rnf LookupDeveloperIdentity' {..} =+    Prelude.rnf developerUserIdentifier+      `Prelude.seq` Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf maxResults+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf identityPoolId++instance Data.ToHeaders LookupDeveloperIdentity where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.LookupDeveloperIdentity" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON LookupDeveloperIdentity where+  toJSON LookupDeveloperIdentity' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("DeveloperUserIdentifier" Data..=)+              Prelude.<$> developerUserIdentifier,+            ("IdentityId" Data..=) Prelude.<$> identityId,+            ("MaxResults" Data..=) Prelude.<$> maxResults,+            ("NextToken" Data..=) Prelude.<$> nextToken,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath LookupDeveloperIdentity where+  toPath = Prelude.const "/"++instance Data.ToQuery LookupDeveloperIdentity where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful @LookupDeveloperIdentity@ action.+--+-- /See:/ 'newLookupDeveloperIdentityResponse' smart constructor.+data LookupDeveloperIdentityResponse = LookupDeveloperIdentityResponse'+  { -- | This is the list of developer user identifiers associated with an+    -- identity ID. Cognito supports the association of multiple developer user+    -- identifiers with an identity ID.+    developerUserIdentifierList :: Prelude.Maybe [Prelude.Text],+    -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | A pagination token. The first call you make will have @NextToken@ set to+    -- null. After that the service will return @NextToken@ values as needed.+    -- For example, let\'s say you make a request with @MaxResults@ set to 10,+    -- and there are 20 matches in the database. The service will return a+    -- pagination token as a part of the response. This token can be used to+    -- call the API again and get results starting from the 11th match.+    nextToken :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'LookupDeveloperIdentityResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'developerUserIdentifierList', 'lookupDeveloperIdentityResponse_developerUserIdentifierList' - This is the list of developer user identifiers associated with an+-- identity ID. Cognito supports the association of multiple developer user+-- identifiers with an identity ID.+--+-- 'identityId', 'lookupDeveloperIdentityResponse_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'nextToken', 'lookupDeveloperIdentityResponse_nextToken' - A pagination token. The first call you make will have @NextToken@ set to+-- null. After that the service will return @NextToken@ values as needed.+-- For example, let\'s say you make a request with @MaxResults@ set to 10,+-- and there are 20 matches in the database. The service will return a+-- pagination token as a part of the response. This token can be used to+-- call the API again and get results starting from the 11th match.+--+-- 'httpStatus', 'lookupDeveloperIdentityResponse_httpStatus' - The response's http status code.+newLookupDeveloperIdentityResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  LookupDeveloperIdentityResponse+newLookupDeveloperIdentityResponse pHttpStatus_ =+  LookupDeveloperIdentityResponse'+    { developerUserIdentifierList =+        Prelude.Nothing,+      identityId = Prelude.Nothing,+      nextToken = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | This is the list of developer user identifiers associated with an+-- identity ID. Cognito supports the association of multiple developer user+-- identifiers with an identity ID.+lookupDeveloperIdentityResponse_developerUserIdentifierList :: Lens.Lens' LookupDeveloperIdentityResponse (Prelude.Maybe [Prelude.Text])+lookupDeveloperIdentityResponse_developerUserIdentifierList = Lens.lens (\LookupDeveloperIdentityResponse' {developerUserIdentifierList} -> developerUserIdentifierList) (\s@LookupDeveloperIdentityResponse' {} a -> s {developerUserIdentifierList = a} :: LookupDeveloperIdentityResponse) Prelude.. Lens.mapping Lens.coerced++-- | A unique identifier in the format REGION:GUID.+lookupDeveloperIdentityResponse_identityId :: Lens.Lens' LookupDeveloperIdentityResponse (Prelude.Maybe Prelude.Text)+lookupDeveloperIdentityResponse_identityId = Lens.lens (\LookupDeveloperIdentityResponse' {identityId} -> identityId) (\s@LookupDeveloperIdentityResponse' {} a -> s {identityId = a} :: LookupDeveloperIdentityResponse)++-- | A pagination token. The first call you make will have @NextToken@ set to+-- null. After that the service will return @NextToken@ values as needed.+-- For example, let\'s say you make a request with @MaxResults@ set to 10,+-- and there are 20 matches in the database. The service will return a+-- pagination token as a part of the response. This token can be used to+-- call the API again and get results starting from the 11th match.+lookupDeveloperIdentityResponse_nextToken :: Lens.Lens' LookupDeveloperIdentityResponse (Prelude.Maybe Prelude.Text)+lookupDeveloperIdentityResponse_nextToken = Lens.lens (\LookupDeveloperIdentityResponse' {nextToken} -> nextToken) (\s@LookupDeveloperIdentityResponse' {} a -> s {nextToken = a} :: LookupDeveloperIdentityResponse)++-- | The response's http status code.+lookupDeveloperIdentityResponse_httpStatus :: Lens.Lens' LookupDeveloperIdentityResponse Prelude.Int+lookupDeveloperIdentityResponse_httpStatus = Lens.lens (\LookupDeveloperIdentityResponse' {httpStatus} -> httpStatus) (\s@LookupDeveloperIdentityResponse' {} a -> s {httpStatus = a} :: LookupDeveloperIdentityResponse)++instance+  Prelude.NFData+    LookupDeveloperIdentityResponse+  where+  rnf LookupDeveloperIdentityResponse' {..} =+    Prelude.rnf developerUserIdentifierList+      `Prelude.seq` Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf nextToken+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,276 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.MergeDeveloperIdentities+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Merges two users having different @IdentityId@s, existing in the same+-- identity pool, and identified by the same developer provider. You can+-- use this action to request that discrete users be merged and identified+-- as a single user in the Cognito environment. Cognito associates the+-- given source user (@SourceUserIdentifier@) with the @IdentityId@ of the+-- @DestinationUserIdentifier@. Only developer-authenticated users can be+-- merged. If the users to be merged are associated with the same public+-- provider, but as two different users, an exception will be thrown.+--+-- The number of linked logins is limited to 20. So, the number of linked+-- logins for the source user, @SourceUserIdentifier@, and the destination+-- user, @DestinationUserIdentifier@, together should not be larger than+-- 20. Otherwise, an exception will be thrown.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.MergeDeveloperIdentities+  ( -- * Creating a Request+    MergeDeveloperIdentities (..),+    newMergeDeveloperIdentities,++    -- * Request Lenses+    mergeDeveloperIdentities_sourceUserIdentifier,+    mergeDeveloperIdentities_destinationUserIdentifier,+    mergeDeveloperIdentities_developerProviderName,+    mergeDeveloperIdentities_identityPoolId,++    -- * Destructuring the Response+    MergeDeveloperIdentitiesResponse (..),+    newMergeDeveloperIdentitiesResponse,++    -- * Response Lenses+    mergeDeveloperIdentitiesResponse_identityId,+    mergeDeveloperIdentitiesResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @MergeDeveloperIdentities@ action.+--+-- /See:/ 'newMergeDeveloperIdentities' smart constructor.+data MergeDeveloperIdentities = MergeDeveloperIdentities'+  { -- | User identifier for the source user. The value should be a+    -- @DeveloperUserIdentifier@.+    sourceUserIdentifier :: Prelude.Text,+    -- | User identifier for the destination user. The value should be a+    -- @DeveloperUserIdentifier@.+    destinationUserIdentifier :: Prelude.Text,+    -- | The \"domain\" by which Cognito will refer to your users. This is a+    -- (pseudo) domain name that you provide while creating an identity pool.+    -- This name acts as a placeholder that allows your backend and the Cognito+    -- service to communicate about the developer provider. For the+    -- @DeveloperProviderName@, you can use letters as well as period (.),+    -- underscore (_), and dash (-).+    developerProviderName :: Prelude.Text,+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'MergeDeveloperIdentities' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'sourceUserIdentifier', 'mergeDeveloperIdentities_sourceUserIdentifier' - User identifier for the source user. The value should be a+-- @DeveloperUserIdentifier@.+--+-- 'destinationUserIdentifier', 'mergeDeveloperIdentities_destinationUserIdentifier' - User identifier for the destination user. The value should be a+-- @DeveloperUserIdentifier@.+--+-- 'developerProviderName', 'mergeDeveloperIdentities_developerProviderName' - The \"domain\" by which Cognito will refer to your users. This is a+-- (pseudo) domain name that you provide while creating an identity pool.+-- This name acts as a placeholder that allows your backend and the Cognito+-- service to communicate about the developer provider. For the+-- @DeveloperProviderName@, you can use letters as well as period (.),+-- underscore (_), and dash (-).+--+-- 'identityPoolId', 'mergeDeveloperIdentities_identityPoolId' - An identity pool ID in the format REGION:GUID.+newMergeDeveloperIdentities ::+  -- | 'sourceUserIdentifier'+  Prelude.Text ->+  -- | 'destinationUserIdentifier'+  Prelude.Text ->+  -- | 'developerProviderName'+  Prelude.Text ->+  -- | 'identityPoolId'+  Prelude.Text ->+  MergeDeveloperIdentities+newMergeDeveloperIdentities+  pSourceUserIdentifier_+  pDestinationUserIdentifier_+  pDeveloperProviderName_+  pIdentityPoolId_ =+    MergeDeveloperIdentities'+      { sourceUserIdentifier =+          pSourceUserIdentifier_,+        destinationUserIdentifier =+          pDestinationUserIdentifier_,+        developerProviderName = pDeveloperProviderName_,+        identityPoolId = pIdentityPoolId_+      }++-- | User identifier for the source user. The value should be a+-- @DeveloperUserIdentifier@.+mergeDeveloperIdentities_sourceUserIdentifier :: Lens.Lens' MergeDeveloperIdentities Prelude.Text+mergeDeveloperIdentities_sourceUserIdentifier = Lens.lens (\MergeDeveloperIdentities' {sourceUserIdentifier} -> sourceUserIdentifier) (\s@MergeDeveloperIdentities' {} a -> s {sourceUserIdentifier = a} :: MergeDeveloperIdentities)++-- | User identifier for the destination user. The value should be a+-- @DeveloperUserIdentifier@.+mergeDeveloperIdentities_destinationUserIdentifier :: Lens.Lens' MergeDeveloperIdentities Prelude.Text+mergeDeveloperIdentities_destinationUserIdentifier = Lens.lens (\MergeDeveloperIdentities' {destinationUserIdentifier} -> destinationUserIdentifier) (\s@MergeDeveloperIdentities' {} a -> s {destinationUserIdentifier = a} :: MergeDeveloperIdentities)++-- | The \"domain\" by which Cognito will refer to your users. This is a+-- (pseudo) domain name that you provide while creating an identity pool.+-- This name acts as a placeholder that allows your backend and the Cognito+-- service to communicate about the developer provider. For the+-- @DeveloperProviderName@, you can use letters as well as period (.),+-- underscore (_), and dash (-).+mergeDeveloperIdentities_developerProviderName :: Lens.Lens' MergeDeveloperIdentities Prelude.Text+mergeDeveloperIdentities_developerProviderName = Lens.lens (\MergeDeveloperIdentities' {developerProviderName} -> developerProviderName) (\s@MergeDeveloperIdentities' {} a -> s {developerProviderName = a} :: MergeDeveloperIdentities)++-- | An identity pool ID in the format REGION:GUID.+mergeDeveloperIdentities_identityPoolId :: Lens.Lens' MergeDeveloperIdentities Prelude.Text+mergeDeveloperIdentities_identityPoolId = Lens.lens (\MergeDeveloperIdentities' {identityPoolId} -> identityPoolId) (\s@MergeDeveloperIdentities' {} a -> s {identityPoolId = a} :: MergeDeveloperIdentities)++instance Core.AWSRequest MergeDeveloperIdentities where+  type+    AWSResponse MergeDeveloperIdentities =+      MergeDeveloperIdentitiesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          MergeDeveloperIdentitiesResponse'+            Prelude.<$> (x Data..?> "IdentityId")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable MergeDeveloperIdentities where+  hashWithSalt _salt MergeDeveloperIdentities' {..} =+    _salt+      `Prelude.hashWithSalt` sourceUserIdentifier+      `Prelude.hashWithSalt` destinationUserIdentifier+      `Prelude.hashWithSalt` developerProviderName+      `Prelude.hashWithSalt` identityPoolId++instance Prelude.NFData MergeDeveloperIdentities where+  rnf MergeDeveloperIdentities' {..} =+    Prelude.rnf sourceUserIdentifier+      `Prelude.seq` Prelude.rnf destinationUserIdentifier+      `Prelude.seq` Prelude.rnf developerProviderName+      `Prelude.seq` Prelude.rnf identityPoolId++instance Data.ToHeaders MergeDeveloperIdentities where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.MergeDeveloperIdentities" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON MergeDeveloperIdentities where+  toJSON MergeDeveloperIdentities' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just+              ( "SourceUserIdentifier"+                  Data..= sourceUserIdentifier+              ),+            Prelude.Just+              ( "DestinationUserIdentifier"+                  Data..= destinationUserIdentifier+              ),+            Prelude.Just+              ( "DeveloperProviderName"+                  Data..= developerProviderName+              ),+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId)+          ]+      )++instance Data.ToPath MergeDeveloperIdentities where+  toPath = Prelude.const "/"++instance Data.ToQuery MergeDeveloperIdentities where+  toQuery = Prelude.const Prelude.mempty++-- | Returned in response to a successful @MergeDeveloperIdentities@ action.+--+-- /See:/ 'newMergeDeveloperIdentitiesResponse' smart constructor.+data MergeDeveloperIdentitiesResponse = MergeDeveloperIdentitiesResponse'+  { -- | A unique identifier in the format REGION:GUID.+    identityId :: Prelude.Maybe Prelude.Text,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'MergeDeveloperIdentitiesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityId', 'mergeDeveloperIdentitiesResponse_identityId' - A unique identifier in the format REGION:GUID.+--+-- 'httpStatus', 'mergeDeveloperIdentitiesResponse_httpStatus' - The response's http status code.+newMergeDeveloperIdentitiesResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  MergeDeveloperIdentitiesResponse+newMergeDeveloperIdentitiesResponse pHttpStatus_ =+  MergeDeveloperIdentitiesResponse'+    { identityId =+        Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | A unique identifier in the format REGION:GUID.+mergeDeveloperIdentitiesResponse_identityId :: Lens.Lens' MergeDeveloperIdentitiesResponse (Prelude.Maybe Prelude.Text)+mergeDeveloperIdentitiesResponse_identityId = Lens.lens (\MergeDeveloperIdentitiesResponse' {identityId} -> identityId) (\s@MergeDeveloperIdentitiesResponse' {} a -> s {identityId = a} :: MergeDeveloperIdentitiesResponse)++-- | The response's http status code.+mergeDeveloperIdentitiesResponse_httpStatus :: Lens.Lens' MergeDeveloperIdentitiesResponse Prelude.Int+mergeDeveloperIdentitiesResponse_httpStatus = Lens.lens (\MergeDeveloperIdentitiesResponse' {httpStatus} -> httpStatus) (\s@MergeDeveloperIdentitiesResponse' {} a -> s {httpStatus = a} :: MergeDeveloperIdentitiesResponse)++instance+  Prelude.NFData+    MergeDeveloperIdentitiesResponse+  where+  rnf MergeDeveloperIdentitiesResponse' {..} =+    Prelude.rnf identityId+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,192 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.SetIdentityPoolRoles+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Sets the roles for an identity pool. These roles are used when making+-- calls to GetCredentialsForIdentity action.+--+-- You must use AWS Developer credentials to call this API.+module Amazonka.CognitoIdentity.SetIdentityPoolRoles+  ( -- * Creating a Request+    SetIdentityPoolRoles (..),+    newSetIdentityPoolRoles,++    -- * Request Lenses+    setIdentityPoolRoles_roleMappings,+    setIdentityPoolRoles_identityPoolId,+    setIdentityPoolRoles_roles,++    -- * Destructuring the Response+    SetIdentityPoolRolesResponse (..),+    newSetIdentityPoolRolesResponse,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | Input to the @SetIdentityPoolRoles@ action.+--+-- /See:/ 'newSetIdentityPoolRoles' smart constructor.+data SetIdentityPoolRoles = SetIdentityPoolRoles'+  { -- | How users for a specific identity provider are to mapped to roles. This+    -- is a string to RoleMapping object map. The string identifies the+    -- identity provider, for example, \"graph.facebook.com\" or+    -- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+    --+    -- Up to 25 rules can be specified per identity provider.+    roleMappings :: Prelude.Maybe (Prelude.HashMap Prelude.Text RoleMapping),+    -- | An identity pool ID in the format REGION:GUID.+    identityPoolId :: Prelude.Text,+    -- | The map of roles associated with this pool. For a given role, the key+    -- will be either \"authenticated\" or \"unauthenticated\" and the value+    -- will be the Role ARN.+    roles :: Prelude.HashMap Prelude.Text Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'SetIdentityPoolRoles' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'roleMappings', 'setIdentityPoolRoles_roleMappings' - How users for a specific identity provider are to mapped to roles. This+-- is a string to RoleMapping object map. The string identifies the+-- identity provider, for example, \"graph.facebook.com\" or+-- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+--+-- Up to 25 rules can be specified per identity provider.+--+-- 'identityPoolId', 'setIdentityPoolRoles_identityPoolId' - An identity pool ID in the format REGION:GUID.+--+-- 'roles', 'setIdentityPoolRoles_roles' - The map of roles associated with this pool. For a given role, the key+-- will be either \"authenticated\" or \"unauthenticated\" and the value+-- will be the Role ARN.+newSetIdentityPoolRoles ::+  -- | 'identityPoolId'+  Prelude.Text ->+  SetIdentityPoolRoles+newSetIdentityPoolRoles pIdentityPoolId_ =+  SetIdentityPoolRoles'+    { roleMappings =+        Prelude.Nothing,+      identityPoolId = pIdentityPoolId_,+      roles = Prelude.mempty+    }++-- | How users for a specific identity provider are to mapped to roles. This+-- is a string to RoleMapping object map. The string identifies the+-- identity provider, for example, \"graph.facebook.com\" or+-- \"cognito-idp.us-east-1.amazonaws.com\/us-east-1_abcdefghi:app_client_id\".+--+-- Up to 25 rules can be specified per identity provider.+setIdentityPoolRoles_roleMappings :: Lens.Lens' SetIdentityPoolRoles (Prelude.Maybe (Prelude.HashMap Prelude.Text RoleMapping))+setIdentityPoolRoles_roleMappings = Lens.lens (\SetIdentityPoolRoles' {roleMappings} -> roleMappings) (\s@SetIdentityPoolRoles' {} a -> s {roleMappings = a} :: SetIdentityPoolRoles) Prelude.. Lens.mapping Lens.coerced++-- | An identity pool ID in the format REGION:GUID.+setIdentityPoolRoles_identityPoolId :: Lens.Lens' SetIdentityPoolRoles Prelude.Text+setIdentityPoolRoles_identityPoolId = Lens.lens (\SetIdentityPoolRoles' {identityPoolId} -> identityPoolId) (\s@SetIdentityPoolRoles' {} a -> s {identityPoolId = a} :: SetIdentityPoolRoles)++-- | The map of roles associated with this pool. For a given role, the key+-- will be either \"authenticated\" or \"unauthenticated\" and the value+-- will be the Role ARN.+setIdentityPoolRoles_roles :: Lens.Lens' SetIdentityPoolRoles (Prelude.HashMap Prelude.Text Prelude.Text)+setIdentityPoolRoles_roles = Lens.lens (\SetIdentityPoolRoles' {roles} -> roles) (\s@SetIdentityPoolRoles' {} a -> s {roles = a} :: SetIdentityPoolRoles) Prelude.. Lens.coerced++instance Core.AWSRequest SetIdentityPoolRoles where+  type+    AWSResponse SetIdentityPoolRoles =+      SetIdentityPoolRolesResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveNull SetIdentityPoolRolesResponse'++instance Prelude.Hashable SetIdentityPoolRoles where+  hashWithSalt _salt SetIdentityPoolRoles' {..} =+    _salt+      `Prelude.hashWithSalt` roleMappings+      `Prelude.hashWithSalt` identityPoolId+      `Prelude.hashWithSalt` roles++instance Prelude.NFData SetIdentityPoolRoles where+  rnf SetIdentityPoolRoles' {..} =+    Prelude.rnf roleMappings+      `Prelude.seq` Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf roles++instance Data.ToHeaders SetIdentityPoolRoles where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.SetIdentityPoolRoles" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON SetIdentityPoolRoles where+  toJSON SetIdentityPoolRoles' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("RoleMappings" Data..=) Prelude.<$> roleMappings,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId),+            Prelude.Just ("Roles" Data..= roles)+          ]+      )++instance Data.ToPath SetIdentityPoolRoles where+  toPath = Prelude.const "/"++instance Data.ToQuery SetIdentityPoolRoles where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newSetIdentityPoolRolesResponse' smart constructor.+data SetIdentityPoolRolesResponse = SetIdentityPoolRolesResponse'+  {+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'SetIdentityPoolRolesResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+newSetIdentityPoolRolesResponse ::+  SetIdentityPoolRolesResponse+newSetIdentityPoolRolesResponse =+  SetIdentityPoolRolesResponse'++instance Prelude.NFData SetIdentityPoolRolesResponse where+  rnf _ = ()

@@ -0,0 +1,273 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.SetPrincipalTagAttributeMap+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- You can use this operation to use default (username and clientID)+-- attribute or custom attribute mappings.+module Amazonka.CognitoIdentity.SetPrincipalTagAttributeMap+  ( -- * Creating a Request+    SetPrincipalTagAttributeMap (..),+    newSetPrincipalTagAttributeMap,++    -- * Request Lenses+    setPrincipalTagAttributeMap_principalTags,+    setPrincipalTagAttributeMap_useDefaults,+    setPrincipalTagAttributeMap_identityPoolId,+    setPrincipalTagAttributeMap_identityProviderName,++    -- * Destructuring the Response+    SetPrincipalTagAttributeMapResponse (..),+    newSetPrincipalTagAttributeMapResponse,++    -- * Response Lenses+    setPrincipalTagAttributeMapResponse_identityPoolId,+    setPrincipalTagAttributeMapResponse_identityProviderName,+    setPrincipalTagAttributeMapResponse_principalTags,+    setPrincipalTagAttributeMapResponse_useDefaults,+    setPrincipalTagAttributeMapResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newSetPrincipalTagAttributeMap' smart constructor.+data SetPrincipalTagAttributeMap = SetPrincipalTagAttributeMap'+  { -- | You can use this operation to add principal tags.+    principalTags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | You can use this operation to use default (username and clientID)+    -- attribute mappings.+    useDefaults :: Prelude.Maybe Prelude.Bool,+    -- | The ID of the Identity Pool you want to set attribute mappings for.+    identityPoolId :: Prelude.Text,+    -- | The provider name you want to use for attribute mappings.+    identityProviderName :: Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'SetPrincipalTagAttributeMap' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'principalTags', 'setPrincipalTagAttributeMap_principalTags' - You can use this operation to add principal tags.+--+-- 'useDefaults', 'setPrincipalTagAttributeMap_useDefaults' - You can use this operation to use default (username and clientID)+-- attribute mappings.+--+-- 'identityPoolId', 'setPrincipalTagAttributeMap_identityPoolId' - The ID of the Identity Pool you want to set attribute mappings for.+--+-- 'identityProviderName', 'setPrincipalTagAttributeMap_identityProviderName' - The provider name you want to use for attribute mappings.+newSetPrincipalTagAttributeMap ::+  -- | 'identityPoolId'+  Prelude.Text ->+  -- | 'identityProviderName'+  Prelude.Text ->+  SetPrincipalTagAttributeMap+newSetPrincipalTagAttributeMap+  pIdentityPoolId_+  pIdentityProviderName_ =+    SetPrincipalTagAttributeMap'+      { principalTags =+          Prelude.Nothing,+        useDefaults = Prelude.Nothing,+        identityPoolId = pIdentityPoolId_,+        identityProviderName = pIdentityProviderName_+      }++-- | You can use this operation to add principal tags.+setPrincipalTagAttributeMap_principalTags :: Lens.Lens' SetPrincipalTagAttributeMap (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+setPrincipalTagAttributeMap_principalTags = Lens.lens (\SetPrincipalTagAttributeMap' {principalTags} -> principalTags) (\s@SetPrincipalTagAttributeMap' {} a -> s {principalTags = a} :: SetPrincipalTagAttributeMap) Prelude.. Lens.mapping Lens.coerced++-- | You can use this operation to use default (username and clientID)+-- attribute mappings.+setPrincipalTagAttributeMap_useDefaults :: Lens.Lens' SetPrincipalTagAttributeMap (Prelude.Maybe Prelude.Bool)+setPrincipalTagAttributeMap_useDefaults = Lens.lens (\SetPrincipalTagAttributeMap' {useDefaults} -> useDefaults) (\s@SetPrincipalTagAttributeMap' {} a -> s {useDefaults = a} :: SetPrincipalTagAttributeMap)++-- | The ID of the Identity Pool you want to set attribute mappings for.+setPrincipalTagAttributeMap_identityPoolId :: Lens.Lens' SetPrincipalTagAttributeMap Prelude.Text+setPrincipalTagAttributeMap_identityPoolId = Lens.lens (\SetPrincipalTagAttributeMap' {identityPoolId} -> identityPoolId) (\s@SetPrincipalTagAttributeMap' {} a -> s {identityPoolId = a} :: SetPrincipalTagAttributeMap)++-- | The provider name you want to use for attribute mappings.+setPrincipalTagAttributeMap_identityProviderName :: Lens.Lens' SetPrincipalTagAttributeMap Prelude.Text+setPrincipalTagAttributeMap_identityProviderName = Lens.lens (\SetPrincipalTagAttributeMap' {identityProviderName} -> identityProviderName) (\s@SetPrincipalTagAttributeMap' {} a -> s {identityProviderName = a} :: SetPrincipalTagAttributeMap)++instance Core.AWSRequest SetPrincipalTagAttributeMap where+  type+    AWSResponse SetPrincipalTagAttributeMap =+      SetPrincipalTagAttributeMapResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveJSON+      ( \s h x ->+          SetPrincipalTagAttributeMapResponse'+            Prelude.<$> (x Data..?> "IdentityPoolId")+            Prelude.<*> (x Data..?> "IdentityProviderName")+            Prelude.<*> (x Data..?> "PrincipalTags" Core..!@ Prelude.mempty)+            Prelude.<*> (x Data..?> "UseDefaults")+            Prelude.<*> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable SetPrincipalTagAttributeMap where+  hashWithSalt _salt SetPrincipalTagAttributeMap' {..} =+    _salt+      `Prelude.hashWithSalt` principalTags+      `Prelude.hashWithSalt` useDefaults+      `Prelude.hashWithSalt` identityPoolId+      `Prelude.hashWithSalt` identityProviderName++instance Prelude.NFData SetPrincipalTagAttributeMap where+  rnf SetPrincipalTagAttributeMap' {..} =+    Prelude.rnf principalTags+      `Prelude.seq` Prelude.rnf useDefaults+      `Prelude.seq` Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf identityProviderName++instance Data.ToHeaders SetPrincipalTagAttributeMap where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.SetPrincipalTagAttributeMap" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON SetPrincipalTagAttributeMap where+  toJSON SetPrincipalTagAttributeMap' {..} =+    Data.object+      ( Prelude.catMaybes+          [ ("PrincipalTags" Data..=) Prelude.<$> principalTags,+            ("UseDefaults" Data..=) Prelude.<$> useDefaults,+            Prelude.Just+              ("IdentityPoolId" Data..= identityPoolId),+            Prelude.Just+              ( "IdentityProviderName"+                  Data..= identityProviderName+              )+          ]+      )++instance Data.ToPath SetPrincipalTagAttributeMap where+  toPath = Prelude.const "/"++instance Data.ToQuery SetPrincipalTagAttributeMap where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newSetPrincipalTagAttributeMapResponse' smart constructor.+data SetPrincipalTagAttributeMapResponse = SetPrincipalTagAttributeMapResponse'+  { -- | The ID of the Identity Pool you want to set attribute mappings for.+    identityPoolId :: Prelude.Maybe Prelude.Text,+    -- | The provider name you want to use for attribute mappings.+    identityProviderName :: Prelude.Maybe Prelude.Text,+    -- | You can use this operation to add principal tags. The+    -- @PrincipalTags@operation enables you to reference user attributes in+    -- your IAM permissions policy.+    principalTags :: Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text),+    -- | You can use this operation to select default (username and clientID)+    -- attribute mappings.+    useDefaults :: Prelude.Maybe Prelude.Bool,+    -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'SetPrincipalTagAttributeMapResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'identityPoolId', 'setPrincipalTagAttributeMapResponse_identityPoolId' - The ID of the Identity Pool you want to set attribute mappings for.+--+-- 'identityProviderName', 'setPrincipalTagAttributeMapResponse_identityProviderName' - The provider name you want to use for attribute mappings.+--+-- 'principalTags', 'setPrincipalTagAttributeMapResponse_principalTags' - You can use this operation to add principal tags. The+-- @PrincipalTags@operation enables you to reference user attributes in+-- your IAM permissions policy.+--+-- 'useDefaults', 'setPrincipalTagAttributeMapResponse_useDefaults' - You can use this operation to select default (username and clientID)+-- attribute mappings.+--+-- 'httpStatus', 'setPrincipalTagAttributeMapResponse_httpStatus' - The response's http status code.+newSetPrincipalTagAttributeMapResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  SetPrincipalTagAttributeMapResponse+newSetPrincipalTagAttributeMapResponse pHttpStatus_ =+  SetPrincipalTagAttributeMapResponse'+    { identityPoolId =+        Prelude.Nothing,+      identityProviderName = Prelude.Nothing,+      principalTags = Prelude.Nothing,+      useDefaults = Prelude.Nothing,+      httpStatus = pHttpStatus_+    }++-- | The ID of the Identity Pool you want to set attribute mappings for.+setPrincipalTagAttributeMapResponse_identityPoolId :: Lens.Lens' SetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Text)+setPrincipalTagAttributeMapResponse_identityPoolId = Lens.lens (\SetPrincipalTagAttributeMapResponse' {identityPoolId} -> identityPoolId) (\s@SetPrincipalTagAttributeMapResponse' {} a -> s {identityPoolId = a} :: SetPrincipalTagAttributeMapResponse)++-- | The provider name you want to use for attribute mappings.+setPrincipalTagAttributeMapResponse_identityProviderName :: Lens.Lens' SetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Text)+setPrincipalTagAttributeMapResponse_identityProviderName = Lens.lens (\SetPrincipalTagAttributeMapResponse' {identityProviderName} -> identityProviderName) (\s@SetPrincipalTagAttributeMapResponse' {} a -> s {identityProviderName = a} :: SetPrincipalTagAttributeMapResponse)++-- | You can use this operation to add principal tags. The+-- @PrincipalTags@operation enables you to reference user attributes in+-- your IAM permissions policy.+setPrincipalTagAttributeMapResponse_principalTags :: Lens.Lens' SetPrincipalTagAttributeMapResponse (Prelude.Maybe (Prelude.HashMap Prelude.Text Prelude.Text))+setPrincipalTagAttributeMapResponse_principalTags = Lens.lens (\SetPrincipalTagAttributeMapResponse' {principalTags} -> principalTags) (\s@SetPrincipalTagAttributeMapResponse' {} a -> s {principalTags = a} :: SetPrincipalTagAttributeMapResponse) Prelude.. Lens.mapping Lens.coerced++-- | You can use this operation to select default (username and clientID)+-- attribute mappings.+setPrincipalTagAttributeMapResponse_useDefaults :: Lens.Lens' SetPrincipalTagAttributeMapResponse (Prelude.Maybe Prelude.Bool)+setPrincipalTagAttributeMapResponse_useDefaults = Lens.lens (\SetPrincipalTagAttributeMapResponse' {useDefaults} -> useDefaults) (\s@SetPrincipalTagAttributeMapResponse' {} a -> s {useDefaults = a} :: SetPrincipalTagAttributeMapResponse)++-- | The response's http status code.+setPrincipalTagAttributeMapResponse_httpStatus :: Lens.Lens' SetPrincipalTagAttributeMapResponse Prelude.Int+setPrincipalTagAttributeMapResponse_httpStatus = Lens.lens (\SetPrincipalTagAttributeMapResponse' {httpStatus} -> httpStatus) (\s@SetPrincipalTagAttributeMapResponse' {} a -> s {httpStatus = a} :: SetPrincipalTagAttributeMapResponse)++instance+  Prelude.NFData+    SetPrincipalTagAttributeMapResponse+  where+  rnf SetPrincipalTagAttributeMapResponse' {..} =+    Prelude.rnf identityPoolId+      `Prelude.seq` Prelude.rnf identityProviderName+      `Prelude.seq` Prelude.rnf principalTags+      `Prelude.seq` Prelude.rnf useDefaults+      `Prelude.seq` Prelude.rnf httpStatus

@@ -0,0 +1,187 @@+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE RecordWildCards #-}+{-# LANGUAGE StrictData #-}+{-# LANGUAGE TypeFamilies #-}+{-# LANGUAGE NoImplicitPrelude #-}+{-# OPTIONS_GHC -fno-warn-unused-binds #-}+{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Amazonka.CognitoIdentity.TagResource+-- Copyright   : (c) 2013-2023 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Assigns a set of tags to the specified Amazon Cognito identity pool. A+-- tag is a label that you can use to categorize and manage identity pools+-- in different ways, such as by purpose, owner, environment, or other+-- criteria.+--+-- Each tag consists of a key and value, both of which you define. A key is+-- a general category for more specific values. For example, if you have+-- two versions of an identity pool, one for testing and another for+-- production, you might assign an @Environment@ tag key to both identity+-- pools. The value of this key might be @Test@ for one identity pool and+-- @Production@ for the other.+--+-- Tags are useful for cost tracking and access control. You can activate+-- your tags so that they appear on the Billing and Cost Management+-- console, where you can track the costs associated with your identity+-- pools. In an IAM policy, you can constrain permissions for identity+-- pools based on specific tags or tag values.+--+-- You can use this action up to 5 times per second, per account. An+-- identity pool can have as many as 50 tags.+module Amazonka.CognitoIdentity.TagResource+  ( -- * Creating a Request+    TagResource (..),+    newTagResource,++    -- * Request Lenses+    tagResource_resourceArn,+    tagResource_tags,++    -- * Destructuring the Response+    TagResourceResponse (..),+    newTagResourceResponse,++    -- * Response Lenses+    tagResourceResponse_httpStatus,+  )+where++import Amazonka.CognitoIdentity.Types+import qualified Amazonka.Core as Core+import qualified Amazonka.Core.Lens.Internal as Lens+import qualified Amazonka.Data as Data+import qualified Amazonka.Prelude as Prelude+import qualified Amazonka.Request as Request+import qualified Amazonka.Response as Response++-- | /See:/ 'newTagResource' smart constructor.+data TagResource = TagResource'+  { -- | The Amazon Resource Name (ARN) of the identity pool.+    resourceArn :: Prelude.Text,+    -- | The tags to assign to the identity pool.+    tags :: Prelude.HashMap Prelude.Text Prelude.Text+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'TagResource' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'resourceArn', 'tagResource_resourceArn' - The Amazon Resource Name (ARN) of the identity pool.+--+-- 'tags', 'tagResource_tags' - The tags to assign to the identity pool.+newTagResource ::+  -- | 'resourceArn'+  Prelude.Text ->+  TagResource+newTagResource pResourceArn_ =+  TagResource'+    { resourceArn = pResourceArn_,+      tags = Prelude.mempty+    }++-- | The Amazon Resource Name (ARN) of the identity pool.+tagResource_resourceArn :: Lens.Lens' TagResource Prelude.Text+tagResource_resourceArn = Lens.lens (\TagResource' {resourceArn} -> resourceArn) (\s@TagResource' {} a -> s {resourceArn = a} :: TagResource)++-- | The tags to assign to the identity pool.+tagResource_tags :: Lens.Lens' TagResource (Prelude.HashMap Prelude.Text Prelude.Text)+tagResource_tags = Lens.lens (\TagResource' {tags} -> tags) (\s@TagResource' {} a -> s {tags = a} :: TagResource) Prelude.. Lens.coerced++instance Core.AWSRequest TagResource where+  type AWSResponse TagResource = TagResourceResponse+  request overrides =+    Request.postJSON (overrides defaultService)+  response =+    Response.receiveEmpty+      ( \s h x ->+          TagResourceResponse'+            Prelude.<$> (Prelude.pure (Prelude.fromEnum s))+      )++instance Prelude.Hashable TagResource where+  hashWithSalt _salt TagResource' {..} =+    _salt+      `Prelude.hashWithSalt` resourceArn+      `Prelude.hashWithSalt` tags++instance Prelude.NFData TagResource where+  rnf TagResource' {..} =+    Prelude.rnf resourceArn+      `Prelude.seq` Prelude.rnf tags++instance Data.ToHeaders TagResource where+  toHeaders =+    Prelude.const+      ( Prelude.mconcat+          [ "X-Amz-Target"+              Data.=# ( "AWSCognitoIdentityService.TagResource" ::+                          Prelude.ByteString+                      ),+            "Content-Type"+              Data.=# ( "application/x-amz-json-1.1" ::+                          Prelude.ByteString+                      )+          ]+      )++instance Data.ToJSON TagResource where+  toJSON TagResource' {..} =+    Data.object+      ( Prelude.catMaybes+          [ Prelude.Just ("ResourceArn" Data..= resourceArn),+            Prelude.Just ("Tags" Data..= tags)+          ]+      )++instance Data.ToPath TagResource where+  toPath = Prelude.const "/"++instance Data.ToQuery TagResource where+  toQuery = Prelude.const Prelude.mempty++-- | /See:/ 'newTagResourceResponse' smart constructor.+data TagResourceResponse = TagResourceResponse'+  { -- | The response's http status code.+    httpStatus :: Prelude.Int+  }+  deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic)++-- |+-- Create a value of 'TagResourceResponse' with all optional fields omitted.+--+-- Use <https://hackage.haskell.org/package/generic-lens generic-lens> or <https://hackage.haskell.org/package/optics optics> to modify other optional fields.+--+-- The following record fields are available, with the corresponding lenses provided+-- for backwards compatibility:+--+-- 'httpStatus', 'tagResourceResponse_httpStatus' - The response's http status code.+newTagResourceResponse ::+  -- | 'httpStatus'+  Prelude.Int ->+  TagResourceResponse+newTagResourceResponse pHttpStatus_ =+  TagResourceResponse' {httpStatus = pHttpStatus_}++-- | The response's http status code.+tagResourceResponse_httpStatus :: Lens.Lens' TagResourceResponse Prelude.Int+tagResourceResponse_httpStatus = Lens.lens (\TagResourceResponse' {httpStatus} -> httpStatus) (\s@TagResourceResponse' {} a -> s {httpStatus = a} :: TagResourceResponse)++instance Prelude.NFData TagResourceResponse where+  rnf TagResourceResponse' {..} = Prelude.rnf httpStatus