amazonka-cognito-idp 1.4.5 → 1.5.0

raw patch · 146 files changed

+10621/−3797 lines, 146 filesdep ~amazonka-cognito-idpdep ~amazonka-coredep ~amazonka-testPVP ok

version bump matches the API change (PVP)

Dependency ranges changed: amazonka-cognito-idp, amazonka-core, amazonka-test

API changes (from Hackage documentation)

Files

• README.md +1/−1
• amazonka-cognito-idp.cabal +43/−11
• fixture/AdminAddUserToGroup.yaml +10/−0
• fixture/AdminAddUserToGroupResponse.proto +0/−0
• fixture/AdminDisableProviderForUser.yaml +10/−0
• fixture/AdminDisableProviderForUserResponse.proto +0/−0
• fixture/AdminLinkProviderForUser.yaml +10/−0
• fixture/AdminLinkProviderForUserResponse.proto +0/−0
• fixture/AdminListGroupsForUser.yaml +10/−0
• fixture/AdminListGroupsForUserResponse.proto +0/−0
• fixture/AdminRemoveUserFromGroup.yaml +10/−0
• fixture/AdminRemoveUserFromGroupResponse.proto +0/−0
• fixture/CreateGroup.yaml +10/−0
• fixture/CreateGroupResponse.proto +0/−0
• fixture/CreateIdentityProvider.yaml +10/−0
• fixture/CreateIdentityProviderResponse.proto +0/−0
• fixture/CreateResourceServer.yaml +10/−0
• fixture/CreateResourceServerResponse.proto +0/−0
• fixture/CreateUserPoolDomain.yaml +10/−0
• fixture/CreateUserPoolDomainResponse.proto +0/−0
• fixture/DeleteGroup.yaml +10/−0
• fixture/DeleteGroupResponse.proto +0/−0
• fixture/DeleteIdentityProvider.yaml +10/−0
• fixture/DeleteIdentityProviderResponse.proto +0/−0
• fixture/DeleteResourceServer.yaml +10/−0
• fixture/DeleteResourceServerResponse.proto +0/−0
• fixture/DeleteUserPoolDomain.yaml +10/−0
• fixture/DeleteUserPoolDomainResponse.proto +0/−0
• fixture/DescribeIdentityProvider.yaml +10/−0
• fixture/DescribeIdentityProviderResponse.proto +0/−0
• fixture/DescribeResourceServer.yaml +10/−0
• fixture/DescribeResourceServerResponse.proto +0/−0
• fixture/DescribeUserPoolDomain.yaml +10/−0
• fixture/DescribeUserPoolDomainResponse.proto +0/−0
• fixture/GetGroup.yaml +10/−0
• fixture/GetGroupResponse.proto +0/−0
• fixture/GetIdentityProviderByIdentifier.yaml +10/−0
• fixture/GetIdentityProviderByIdentifierResponse.proto +0/−0
• fixture/GetUICustomization.yaml +10/−0
• fixture/GetUICustomizationResponse.proto +0/−0
• fixture/ListGroups.yaml +10/−0
• fixture/ListGroupsResponse.proto +0/−0
• fixture/ListIdentityProviders.yaml +10/−0
• fixture/ListIdentityProvidersResponse.proto +0/−0
• fixture/ListResourceServers.yaml +10/−0
• fixture/ListResourceServersResponse.proto +0/−0
• fixture/ListUsersInGroup.yaml +10/−0
• fixture/ListUsersInGroupResponse.proto +0/−0
• fixture/SetUICustomization.yaml +10/−0
• fixture/SetUICustomizationResponse.proto +0/−0
• fixture/UpdateGroup.yaml +10/−0
• fixture/UpdateGroupResponse.proto +0/−0
• fixture/UpdateIdentityProvider.yaml +10/−0
• fixture/UpdateIdentityProviderResponse.proto +0/−0
• fixture/UpdateResourceServer.yaml +10/−0
• fixture/UpdateResourceServerResponse.proto +0/−0
• gen/Network/AWS/CognitoIdentityProvider.hs +297/−62
• gen/Network/AWS/CognitoIdentityProvider/AddCustomAttributes.hs +25/−23
• gen/Network/AWS/CognitoIdentityProvider/AdminAddUserToGroup.hs +137/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminConfirmSignUp.hs +25/−23
• gen/Network/AWS/CognitoIdentityProvider/AdminCreateUser.hs +52/−50
• gen/Network/AWS/CognitoIdentityProvider/AdminDeleteUser.hs +24/−20
• gen/Network/AWS/CognitoIdentityProvider/AdminDeleteUserAttributes.hs +31/−26
• gen/Network/AWS/CognitoIdentityProvider/AdminDisableProviderForUser.hs +149/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminDisableUser.hs +25/−23
• gen/Network/AWS/CognitoIdentityProvider/AdminEnableUser.hs +27/−25
• gen/Network/AWS/CognitoIdentityProvider/AdminForgetDevice.hs +28/−22
• gen/Network/AWS/CognitoIdentityProvider/AdminGetDevice.hs +31/−27
• gen/Network/AWS/CognitoIdentityProvider/AdminGetUser.hs +41/−37
• gen/Network/AWS/CognitoIdentityProvider/AdminInitiateAuth.hs +59/−53
• gen/Network/AWS/CognitoIdentityProvider/AdminLinkProviderForUser.hs +159/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminListDevices.hs +37/−31
• gen/Network/AWS/CognitoIdentityProvider/AdminListGroupsForUser.hs +182/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminRemoveUserFromGroup.hs +139/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminResetUserPassword.hs +25/−23
• gen/Network/AWS/CognitoIdentityProvider/AdminRespondToAuthChallenge.hs +57/−50
• gen/Network/AWS/CognitoIdentityProvider/AdminSetUserSettings.hs +29/−25
• gen/Network/AWS/CognitoIdentityProvider/AdminUpdateDeviceStatus.hs +33/−29
• gen/Network/AWS/CognitoIdentityProvider/AdminUpdateUserAttributes.hs +35/−26
• gen/Network/AWS/CognitoIdentityProvider/AdminUserGlobalSignOut.hs +25/−23
• gen/Network/AWS/CognitoIdentityProvider/ChangePassword.hs +38/−35
• gen/Network/AWS/CognitoIdentityProvider/ConfirmDevice.hs +34/−30
• gen/Network/AWS/CognitoIdentityProvider/ConfirmForgotPassword.hs +38/−36
• gen/Network/AWS/CognitoIdentityProvider/ConfirmSignUp.hs +35/−33
• gen/Network/AWS/CognitoIdentityProvider/CreateGroup.hs +179/−0
• gen/Network/AWS/CognitoIdentityProvider/CreateIdentityProvider.hs +192/−0
• gen/Network/AWS/CognitoIdentityProvider/CreateResourceServer.hs +172/−0
• gen/Network/AWS/CognitoIdentityProvider/CreateUserImportJob.hs +29/−27
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPool.hs +87/−54
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPoolClient.hs +113/−37
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPoolDomain.hs +136/−0
• gen/Network/AWS/CognitoIdentityProvider/DeleteGroup.hs +122/−0
• gen/Network/AWS/CognitoIdentityProvider/DeleteIdentityProvider.hs +123/−0
• gen/Network/AWS/CognitoIdentityProvider/DeleteResourceServer.hs +122/−0
• gen/Network/AWS/CognitoIdentityProvider/DeleteUser.hs +27/−24
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserAttributes.hs +38/−35
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPool.hs +20/−19
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPoolClient.hs +24/−22
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPoolDomain.hs +136/−0
• gen/Network/AWS/CognitoIdentityProvider/DescribeIdentityProvider.hs +150/−0
• gen/Network/AWS/CognitoIdentityProvider/DescribeResourceServer.hs +149/−0
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserImportJob.hs +24/−25
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPool.hs +23/−24
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPoolClient.hs +38/−38
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPoolDomain.hs +132/−0
• gen/Network/AWS/CognitoIdentityProvider/ForgetDevice.hs +21/−20
• gen/Network/AWS/CognitoIdentityProvider/ForgotPassword.hs +30/−28
• gen/Network/AWS/CognitoIdentityProvider/GetCSVHeader.hs +27/−26
• gen/Network/AWS/CognitoIdentityProvider/GetDevice.hs +24/−25
• gen/Network/AWS/CognitoIdentityProvider/GetGroup.hs +146/−0
• gen/Network/AWS/CognitoIdentityProvider/GetIdentityProviderByIdentifier.hs +155/−0
• gen/Network/AWS/CognitoIdentityProvider/GetUICustomization.hs +147/−0
• gen/Network/AWS/CognitoIdentityProvider/GetUser.hs +36/−34
• gen/Network/AWS/CognitoIdentityProvider/GetUserAttributeVerificationCode.hs +36/−28
• gen/Network/AWS/CognitoIdentityProvider/GlobalSignOut.hs +27/−26
• gen/Network/AWS/CognitoIdentityProvider/InitiateAuth.hs +55/−51
• gen/Network/AWS/CognitoIdentityProvider/ListDevices.hs +33/−29
• gen/Network/AWS/CognitoIdentityProvider/ListGroups.hs +167/−0
• gen/Network/AWS/CognitoIdentityProvider/ListIdentityProviders.hs +169/−0
• gen/Network/AWS/CognitoIdentityProvider/ListResourceServers.hs +169/−0
• gen/Network/AWS/CognitoIdentityProvider/ListUserImportJobs.hs +35/−31
• gen/Network/AWS/CognitoIdentityProvider/ListUserPoolClients.hs +33/−29
• gen/Network/AWS/CognitoIdentityProvider/ListUserPools.hs +28/−27
• gen/Network/AWS/CognitoIdentityProvider/ListUsers.hs +45/−41
• gen/Network/AWS/CognitoIdentityProvider/ListUsersInGroup.hs +181/−0
• gen/Network/AWS/CognitoIdentityProvider/ResendConfirmationCode.hs +29/−27
• gen/Network/AWS/CognitoIdentityProvider/RespondToAuthChallenge.hs +53/−49
• gen/Network/AWS/CognitoIdentityProvider/SetUICustomization.hs +172/−0
• gen/Network/AWS/CognitoIdentityProvider/SetUserSettings.hs +23/−23
• gen/Network/AWS/CognitoIdentityProvider/SignUp.hs +62/−47
• gen/Network/AWS/CognitoIdentityProvider/StartUserImportJob.hs +24/−25
• gen/Network/AWS/CognitoIdentityProvider/StopUserImportJob.hs +24/−25
• gen/Network/AWS/CognitoIdentityProvider/Types.hs +272/−58
• gen/Network/AWS/CognitoIdentityProvider/Types/Product.hs +2673/−1844
• gen/Network/AWS/CognitoIdentityProvider/Types/Sum.hs +243/−65
• gen/Network/AWS/CognitoIdentityProvider/UpdateDeviceStatus.hs +27/−25
• gen/Network/AWS/CognitoIdentityProvider/UpdateGroup.hs +179/−0
• gen/Network/AWS/CognitoIdentityProvider/UpdateIdentityProvider.hs +181/−0
• gen/Network/AWS/CognitoIdentityProvider/UpdateResourceServer.hs +172/−0
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserAttributes.hs +39/−36
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserPool.hs +73/−50
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserPoolClient.hs +113/−37
• gen/Network/AWS/CognitoIdentityProvider/VerifyUserAttribute.hs +33/−30
• gen/Network/AWS/CognitoIdentityProvider/Waiters.hs +6/−6
• test/Main.hs +2/−2
• test/Test/AWS/Gen/CognitoIdentityProvider.hs +490/−4

@@ -8,7 +8,7 @@  ## Version -`1.4.5`+`1.5.0`   ## Description

@@ -1,13 +1,13 @@ name:                  amazonka-cognito-idp-version:               1.4.5+version:               1.5.0 synopsis:              Amazon Cognito Identity Provider SDK. homepage:              https://github.com/brendanhay/amazonka bug-reports:           https://github.com/brendanhay/amazonka/issues-license:               OtherLicense+license:               MPL-2.0 license-file:          LICENSE author:                Brendan Hay-maintainer:            Brendan Hay <brendan.g.hay@gmail.com>-copyright:             Copyright (c) 2013-2016 Brendan Hay+maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>+copyright:             Copyright (c) 2013-2017 Brendan Hay category:              Network, AWS, Cloud, Distributed Computing build-type:            Simple cabal-version:         >= 1.10@@ -29,29 +29,39 @@     to get started.  source-repository head-    type:     git-    location: git://github.com/brendanhay/amazonka.git+    type:              git+    location:          git://github.com/brendanhay/amazonka.git+    subdir:            amazonka-cognito-idp  library     default-language:  Haskell2010     hs-source-dirs:    src gen -    ghc-options:       -Wall+    ghc-options:+        -Wall+        -fwarn-incomplete-uni-patterns+        -fwarn-incomplete-record-updates+        -funbox-strict-fields      exposed-modules:           Network.AWS.CognitoIdentityProvider         , Network.AWS.CognitoIdentityProvider.AddCustomAttributes+        , Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup         , Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp         , Network.AWS.CognitoIdentityProvider.AdminCreateUser         , Network.AWS.CognitoIdentityProvider.AdminDeleteUser         , Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes+        , Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser         , Network.AWS.CognitoIdentityProvider.AdminDisableUser         , Network.AWS.CognitoIdentityProvider.AdminEnableUser         , Network.AWS.CognitoIdentityProvider.AdminForgetDevice         , Network.AWS.CognitoIdentityProvider.AdminGetDevice         , Network.AWS.CognitoIdentityProvider.AdminGetUser         , Network.AWS.CognitoIdentityProvider.AdminInitiateAuth+        , Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser         , Network.AWS.CognitoIdentityProvider.AdminListDevices+        , Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+        , Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup         , Network.AWS.CognitoIdentityProvider.AdminResetUserPassword         , Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge         , Network.AWS.CognitoIdentityProvider.AdminSetUserSettings@@ -62,37 +72,59 @@         , Network.AWS.CognitoIdentityProvider.ConfirmDevice         , Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword         , Network.AWS.CognitoIdentityProvider.ConfirmSignUp+        , Network.AWS.CognitoIdentityProvider.CreateGroup+        , Network.AWS.CognitoIdentityProvider.CreateIdentityProvider+        , Network.AWS.CognitoIdentityProvider.CreateResourceServer         , Network.AWS.CognitoIdentityProvider.CreateUserImportJob         , Network.AWS.CognitoIdentityProvider.CreateUserPool         , Network.AWS.CognitoIdentityProvider.CreateUserPoolClient+        , Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain+        , Network.AWS.CognitoIdentityProvider.DeleteGroup+        , Network.AWS.CognitoIdentityProvider.DeleteIdentityProvider+        , Network.AWS.CognitoIdentityProvider.DeleteResourceServer         , Network.AWS.CognitoIdentityProvider.DeleteUser         , Network.AWS.CognitoIdentityProvider.DeleteUserAttributes         , Network.AWS.CognitoIdentityProvider.DeleteUserPool         , Network.AWS.CognitoIdentityProvider.DeleteUserPoolClient+        , Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain+        , Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider+        , Network.AWS.CognitoIdentityProvider.DescribeResourceServer         , Network.AWS.CognitoIdentityProvider.DescribeUserImportJob         , Network.AWS.CognitoIdentityProvider.DescribeUserPool         , Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient+        , Network.AWS.CognitoIdentityProvider.DescribeUserPoolDomain         , Network.AWS.CognitoIdentityProvider.ForgetDevice         , Network.AWS.CognitoIdentityProvider.ForgotPassword         , Network.AWS.CognitoIdentityProvider.GetCSVHeader         , Network.AWS.CognitoIdentityProvider.GetDevice+        , Network.AWS.CognitoIdentityProvider.GetGroup+        , Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier+        , Network.AWS.CognitoIdentityProvider.GetUICustomization         , Network.AWS.CognitoIdentityProvider.GetUser         , Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode         , Network.AWS.CognitoIdentityProvider.GlobalSignOut         , Network.AWS.CognitoIdentityProvider.InitiateAuth         , Network.AWS.CognitoIdentityProvider.ListDevices+        , Network.AWS.CognitoIdentityProvider.ListGroups+        , Network.AWS.CognitoIdentityProvider.ListIdentityProviders+        , Network.AWS.CognitoIdentityProvider.ListResourceServers         , Network.AWS.CognitoIdentityProvider.ListUserImportJobs         , Network.AWS.CognitoIdentityProvider.ListUserPoolClients         , Network.AWS.CognitoIdentityProvider.ListUserPools         , Network.AWS.CognitoIdentityProvider.ListUsers+        , Network.AWS.CognitoIdentityProvider.ListUsersInGroup         , Network.AWS.CognitoIdentityProvider.ResendConfirmationCode         , Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge+        , Network.AWS.CognitoIdentityProvider.SetUICustomization         , Network.AWS.CognitoIdentityProvider.SetUserSettings         , Network.AWS.CognitoIdentityProvider.SignUp         , Network.AWS.CognitoIdentityProvider.StartUserImportJob         , Network.AWS.CognitoIdentityProvider.StopUserImportJob         , Network.AWS.CognitoIdentityProvider.Types         , Network.AWS.CognitoIdentityProvider.UpdateDeviceStatus+        , Network.AWS.CognitoIdentityProvider.UpdateGroup+        , Network.AWS.CognitoIdentityProvider.UpdateIdentityProvider+        , Network.AWS.CognitoIdentityProvider.UpdateResourceServer         , Network.AWS.CognitoIdentityProvider.UpdateUserAttributes         , Network.AWS.CognitoIdentityProvider.UpdateUserPool         , Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient@@ -104,7 +136,7 @@         , Network.AWS.CognitoIdentityProvider.Types.Sum      build-depends:-          amazonka-core == 1.4.5.*+          amazonka-core == 1.5.0.*         , base          >= 4.7     && < 5  test-suite amazonka-cognito-idp-test@@ -124,9 +156,9 @@         , Test.AWS.CognitoIdentityProvider.Internal      build-depends:-          amazonka-core == 1.4.5.*-        , amazonka-test == 1.4.5.*-        , amazonka-cognito-idp == 1.4.5.*+          amazonka-core == 1.5.0.*+        , amazonka-test == 1.5.0.*+        , amazonka-cognito-idp         , base         , bytestring         , tasty

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -5,16 +5,16 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Using the Amazon Cognito Your User Pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies.+-- Using the Amazon Cognito User Pools API, you can create a user pool to manage directories and users. You can authenticate a user to obtain tokens related to user identity and access policies. -- ----- This API reference provides information about user pools in Amazon Cognito Your User Pools.+-- This API reference provides information about user pools in Amazon Cognito User Pools. -- -- For more information, see the Amazon Cognito Documentation. --@@ -41,6 +41,9 @@     -- ** InvalidEmailRoleAccessPolicyException     , _InvalidEmailRoleAccessPolicyException +    -- ** UnsupportedIdentityProviderException+    , _UnsupportedIdentityProviderException+     -- ** UserNotFoundException     , _UserNotFoundException @@ -59,6 +62,9 @@     -- ** InvalidSmsRoleAccessPolicyException     , _InvalidSmsRoleAccessPolicyException +    -- ** InvalidOAuthFlowException+    , _InvalidOAuthFlowException+     -- ** CodeMismatchException     , _CodeMismatchException @@ -68,6 +74,9 @@     -- ** InvalidSmsRoleTrustRelationshipException     , _InvalidSmsRoleTrustRelationshipException +    -- ** UserPoolTaggingException+    , _UserPoolTaggingException+     -- ** TooManyRequestsException     , _TooManyRequestsException @@ -89,9 +98,15 @@     -- ** UserNotConfirmedException     , _UserNotConfirmedException +    -- ** GroupExistsException+    , _GroupExistsException+     -- ** CodeDeliveryFailureException     , _CodeDeliveryFailureException +    -- ** ScopeDoesNotExistException+    , _ScopeDoesNotExistException+     -- ** ResourceNotFoundException     , _ResourceNotFoundException @@ -101,6 +116,9 @@     -- ** AliasExistsException     , _AliasExistsException +    -- ** DuplicateProviderException+    , _DuplicateProviderException+     -- ** LimitExceededException     , _LimitExceededException @@ -122,9 +140,15 @@     -- ** UpdateUserPool     , module Network.AWS.CognitoIdentityProvider.UpdateUserPool +    -- ** DeleteUserPoolDomain+    , module Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain+     -- ** AdminInitiateAuth     , module Network.AWS.CognitoIdentityProvider.AdminInitiateAuth +    -- ** AdminLinkProviderForUser+    , module Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser+     -- ** AdminEnableUser     , module Network.AWS.CognitoIdentityProvider.AdminEnableUser @@ -152,12 +176,18 @@     -- ** ListUserImportJobs     , module Network.AWS.CognitoIdentityProvider.ListUserImportJobs +    -- ** DescribeIdentityProvider+    , module Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider+     -- ** ListUsers     , module Network.AWS.CognitoIdentityProvider.ListUsers      -- ** AdminDeleteUserAttributes     , module Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes +    -- ** DescribeUserPoolDomain+    , module Network.AWS.CognitoIdentityProvider.DescribeUserPoolDomain+     -- ** AdminUpdateUserAttributes     , module Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes @@ -167,6 +197,12 @@     -- ** AdminUserGlobalSignOut     , module Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut +    -- ** ListUsersInGroup+    , module Network.AWS.CognitoIdentityProvider.ListUsersInGroup++    -- ** AdminDisableProviderForUser+    , module Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser+     -- ** ForgotPassword     , module Network.AWS.CognitoIdentityProvider.ForgotPassword @@ -176,21 +212,42 @@     -- ** InitiateAuth     , module Network.AWS.CognitoIdentityProvider.InitiateAuth +    -- ** AdminListGroupsForUser+    , module Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+     -- ** AdminConfirmSignUp     , module Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp      -- ** StartUserImportJob     , module Network.AWS.CognitoIdentityProvider.StartUserImportJob +    -- ** CreateIdentityProvider+    , module Network.AWS.CognitoIdentityProvider.CreateIdentityProvider++    -- ** SetUICustomization+    , module Network.AWS.CognitoIdentityProvider.SetUICustomization++    -- ** ListIdentityProviders+    , module Network.AWS.CognitoIdentityProvider.ListIdentityProviders+     -- ** GetDevice     , module Network.AWS.CognitoIdentityProvider.GetDevice      -- ** SignUp     , module Network.AWS.CognitoIdentityProvider.SignUp +    -- ** DeleteResourceServer+    , module Network.AWS.CognitoIdentityProvider.DeleteResourceServer++    -- ** UpdateResourceServer+    , module Network.AWS.CognitoIdentityProvider.UpdateResourceServer+     -- ** ChangePassword     , module Network.AWS.CognitoIdentityProvider.ChangePassword +    -- ** CreateUserPoolDomain+    , module Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain+     -- ** RespondToAuthChallenge     , module Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge @@ -200,6 +257,12 @@     -- ** AdminGetDevice     , module Network.AWS.CognitoIdentityProvider.AdminGetDevice +    -- ** GetIdentityProviderByIdentifier+    , module Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier++    -- ** AdminRemoveUserFromGroup+    , module Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup+     -- ** ConfirmSignUp     , module Network.AWS.CognitoIdentityProvider.ConfirmSignUp @@ -215,6 +278,9 @@     -- ** GetUser     , module Network.AWS.CognitoIdentityProvider.GetUser +    -- ** GetUICustomization+    , module Network.AWS.CognitoIdentityProvider.GetUICustomization+     -- ** GetCSVHeader     , module Network.AWS.CognitoIdentityProvider.GetCSVHeader @@ -224,6 +290,9 @@     -- ** AdminForgetDevice     , module Network.AWS.CognitoIdentityProvider.AdminForgetDevice +    -- ** DescribeResourceServer+    , module Network.AWS.CognitoIdentityProvider.DescribeResourceServer+     -- ** AdminUpdateDeviceStatus     , module Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus @@ -254,15 +323,42 @@     -- ** CreateUserPoolClient     , module Network.AWS.CognitoIdentityProvider.CreateUserPoolClient +    -- ** CreateResourceServer+    , module Network.AWS.CognitoIdentityProvider.CreateResourceServer++    -- ** CreateGroup+    , module Network.AWS.CognitoIdentityProvider.CreateGroup++    -- ** AdminAddUserToGroup+    , module Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup+     -- ** StopUserImportJob     , module Network.AWS.CognitoIdentityProvider.StopUserImportJob      -- ** DescribeUserImportJob     , module Network.AWS.CognitoIdentityProvider.DescribeUserImportJob +    -- ** DeleteGroup+    , module Network.AWS.CognitoIdentityProvider.DeleteGroup++    -- ** UpdateGroup+    , module Network.AWS.CognitoIdentityProvider.UpdateGroup+     -- ** GlobalSignOut     , module Network.AWS.CognitoIdentityProvider.GlobalSignOut +    -- ** ListGroups+    , module Network.AWS.CognitoIdentityProvider.ListGroups++    -- ** UpdateIdentityProvider+    , module Network.AWS.CognitoIdentityProvider.UpdateIdentityProvider++    -- ** DeleteIdentityProvider+    , module Network.AWS.CognitoIdentityProvider.DeleteIdentityProvider++    -- ** ListResourceServers+    , module Network.AWS.CognitoIdentityProvider.ListResourceServers+     -- ** AdminRespondToAuthChallenge     , module Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge @@ -278,6 +374,9 @@     -- ** ResendConfirmationCode     , module Network.AWS.CognitoIdentityProvider.ResendConfirmationCode +    -- ** GetGroup+    , module Network.AWS.CognitoIdentityProvider.GetGroup+     -- ** AdminSetUserSettings     , module Network.AWS.CognitoIdentityProvider.AdminSetUserSettings @@ -298,18 +397,30 @@     -- ** ChallengeNameType     , ChallengeNameType (..) +    -- ** DefaultEmailOptionType+    , DefaultEmailOptionType (..)+     -- ** DeliveryMediumType     , DeliveryMediumType (..)      -- ** DeviceRememberedStatusType     , DeviceRememberedStatusType (..) +    -- ** DomainStatusType+    , DomainStatusType (..)+     -- ** ExplicitAuthFlowsType     , ExplicitAuthFlowsType (..) +    -- ** IdentityProviderTypeType+    , IdentityProviderTypeType (..)+     -- ** MessageActionType     , MessageActionType (..) +    -- ** OAuthFlowType+    , OAuthFlowType (..)+     -- ** StatusType     , StatusType (..) @@ -322,6 +433,9 @@     -- ** UserStatusType     , UserStatusType (..) +    -- ** UsernameAttributeType+    , UsernameAttributeType (..)+     -- ** VerifiedAttributeType     , VerifiedAttributeType (..) @@ -376,12 +490,46 @@     , dtDeviceKey     , dtDeviceLastAuthenticatedDate +    -- ** DomainDescriptionType+    , DomainDescriptionType+    , domainDescriptionType+    , ddtStatus+    , ddtCloudFrontDistribution+    , ddtUserPoolId+    , ddtDomain+    , ddtAWSAccountId+    , ddtVersion+    , ddtS3Bucket+     -- ** EmailConfigurationType     , EmailConfigurationType     , emailConfigurationType     , ectSourceARN     , ectReplyToEmailAddress +    -- ** GroupType+    , GroupType+    , groupType+    , gtLastModifiedDate+    , gtUserPoolId+    , gtCreationDate+    , gtPrecedence+    , gtGroupName+    , gtDescription+    , gtRoleARN++    -- ** IdentityProviderType+    , IdentityProviderType+    , identityProviderType+    , iptLastModifiedDate+    , iptUserPoolId+    , iptProviderType+    , iptCreationDate+    , iptIdpIdentifiers+    , iptAttributeMapping+    , iptProviderDetails+    , iptProviderName+     -- ** LambdaConfigType     , LambdaConfigType     , lambdaConfigType@@ -428,6 +576,35 @@     , pptMinimumLength     , pptRequireSymbols +    -- ** ProviderDescription+    , ProviderDescription+    , providerDescription+    , pdLastModifiedDate+    , pdProviderType+    , pdCreationDate+    , pdProviderName++    -- ** ProviderUserIdentifierType+    , ProviderUserIdentifierType+    , providerUserIdentifierType+    , puitProviderAttributeValue+    , puitProviderAttributeName+    , puitProviderName++    -- ** ResourceServerScopeType+    , ResourceServerScopeType+    , resourceServerScopeType+    , rsstScopeName+    , rsstScopeDescription++    -- ** ResourceServerType+    , ResourceServerType+    , resourceServerType+    , rstUserPoolId+    , rstIdentifier+    , rstScopes+    , rstName+     -- ** SchemaAttributeType     , SchemaAttributeType     , schemaAttributeType@@ -451,6 +628,17 @@     , sactMaxLength     , sactMinLength +    -- ** UICustomizationType+    , UICustomizationType+    , uICustomizationType+    , uictClientId+    , uictLastModifiedDate+    , uictUserPoolId+    , uictCSS+    , uictCSSVersion+    , uictImageURL+    , uictCreationDate+     -- ** UserImportJobType     , UserImportJobType     , userImportJobType@@ -483,11 +671,18 @@     , upctExplicitAuthFlows     , upctClientSecret     , upctLastModifiedDate+    , upctSupportedIdentityProviders+    , upctLogoutURLs+    , upctAllowedOAuthFlowsUserPoolClient     , upctUserPoolId+    , upctDefaultRedirectURI     , upctWriteAttributes     , upctCreationDate     , upctReadAttributes+    , upctAllowedOAuthScopes+    , upctAllowedOAuthFlows     , upctClientName+    , upctCallbackURLs      -- ** UserPoolDescriptionType     , UserPoolDescriptionType@@ -508,13 +703,16 @@     , UserPoolType     , userPoolType     , uptStatus+    , uptUserPoolTags     , uptEmailConfigurationFailure     , uptLastModifiedDate+    , uptVerificationMessageTemplate     , uptEstimatedNumberOfUsers     , uptEmailVerificationMessage     , uptSmsAuthenticationMessage     , uptSchemaAttributes     , uptEmailVerificationSubject+    , uptUsernameAttributes     , uptAliasAttributes     , uptEmailConfiguration     , uptSmsVerificationMessage@@ -540,66 +738,103 @@     , utAttributes     , utMFAOptions     , utUserLastModifiedDate++    -- ** VerificationMessageTemplateType+    , VerificationMessageTemplateType+    , verificationMessageTemplateType+    , vmttDefaultEmailOption+    , vmttEmailSubject+    , vmttEmailSubjectByLink+    , vmttSmsMessage+    , vmttEmailMessageByLink+    , vmttEmailMessage     ) where -import           Network.AWS.CognitoIdentityProvider.AddCustomAttributes-import           Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp-import           Network.AWS.CognitoIdentityProvider.AdminCreateUser-import           Network.AWS.CognitoIdentityProvider.AdminDeleteUser-import           Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes-import           Network.AWS.CognitoIdentityProvider.AdminDisableUser-import           Network.AWS.CognitoIdentityProvider.AdminEnableUser-import           Network.AWS.CognitoIdentityProvider.AdminForgetDevice-import           Network.AWS.CognitoIdentityProvider.AdminGetDevice-import           Network.AWS.CognitoIdentityProvider.AdminGetUser-import           Network.AWS.CognitoIdentityProvider.AdminInitiateAuth-import           Network.AWS.CognitoIdentityProvider.AdminListDevices-import           Network.AWS.CognitoIdentityProvider.AdminResetUserPassword-import           Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge-import           Network.AWS.CognitoIdentityProvider.AdminSetUserSettings-import           Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus-import           Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes-import           Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut-import           Network.AWS.CognitoIdentityProvider.ChangePassword-import           Network.AWS.CognitoIdentityProvider.ConfirmDevice-import           Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword-import           Network.AWS.CognitoIdentityProvider.ConfirmSignUp-import           Network.AWS.CognitoIdentityProvider.CreateUserImportJob-import           Network.AWS.CognitoIdentityProvider.CreateUserPool-import           Network.AWS.CognitoIdentityProvider.CreateUserPoolClient-import           Network.AWS.CognitoIdentityProvider.DeleteUser-import           Network.AWS.CognitoIdentityProvider.DeleteUserAttributes-import           Network.AWS.CognitoIdentityProvider.DeleteUserPool-import           Network.AWS.CognitoIdentityProvider.DeleteUserPoolClient-import           Network.AWS.CognitoIdentityProvider.DescribeUserImportJob-import           Network.AWS.CognitoIdentityProvider.DescribeUserPool-import           Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient-import           Network.AWS.CognitoIdentityProvider.ForgetDevice-import           Network.AWS.CognitoIdentityProvider.ForgotPassword-import           Network.AWS.CognitoIdentityProvider.GetCSVHeader-import           Network.AWS.CognitoIdentityProvider.GetDevice-import           Network.AWS.CognitoIdentityProvider.GetUser-import           Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode-import           Network.AWS.CognitoIdentityProvider.GlobalSignOut-import           Network.AWS.CognitoIdentityProvider.InitiateAuth-import           Network.AWS.CognitoIdentityProvider.ListDevices-import           Network.AWS.CognitoIdentityProvider.ListUserImportJobs-import           Network.AWS.CognitoIdentityProvider.ListUserPoolClients-import           Network.AWS.CognitoIdentityProvider.ListUserPools-import           Network.AWS.CognitoIdentityProvider.ListUsers-import           Network.AWS.CognitoIdentityProvider.ResendConfirmationCode-import           Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge-import           Network.AWS.CognitoIdentityProvider.SetUserSettings-import           Network.AWS.CognitoIdentityProvider.SignUp-import           Network.AWS.CognitoIdentityProvider.StartUserImportJob-import           Network.AWS.CognitoIdentityProvider.StopUserImportJob-import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.UpdateDeviceStatus-import           Network.AWS.CognitoIdentityProvider.UpdateUserAttributes-import           Network.AWS.CognitoIdentityProvider.UpdateUserPool-import           Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient-import           Network.AWS.CognitoIdentityProvider.VerifyUserAttribute-import           Network.AWS.CognitoIdentityProvider.Waiters+import Network.AWS.CognitoIdentityProvider.AddCustomAttributes+import Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup+import Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp+import Network.AWS.CognitoIdentityProvider.AdminCreateUser+import Network.AWS.CognitoIdentityProvider.AdminDeleteUser+import Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes+import Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser+import Network.AWS.CognitoIdentityProvider.AdminDisableUser+import Network.AWS.CognitoIdentityProvider.AdminEnableUser+import Network.AWS.CognitoIdentityProvider.AdminForgetDevice+import Network.AWS.CognitoIdentityProvider.AdminGetDevice+import Network.AWS.CognitoIdentityProvider.AdminGetUser+import Network.AWS.CognitoIdentityProvider.AdminInitiateAuth+import Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser+import Network.AWS.CognitoIdentityProvider.AdminListDevices+import Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+import Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup+import Network.AWS.CognitoIdentityProvider.AdminResetUserPassword+import Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge+import Network.AWS.CognitoIdentityProvider.AdminSetUserSettings+import Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus+import Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes+import Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut+import Network.AWS.CognitoIdentityProvider.ChangePassword+import Network.AWS.CognitoIdentityProvider.ConfirmDevice+import Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword+import Network.AWS.CognitoIdentityProvider.ConfirmSignUp+import Network.AWS.CognitoIdentityProvider.CreateGroup+import Network.AWS.CognitoIdentityProvider.CreateIdentityProvider+import Network.AWS.CognitoIdentityProvider.CreateResourceServer+import Network.AWS.CognitoIdentityProvider.CreateUserImportJob+import Network.AWS.CognitoIdentityProvider.CreateUserPool+import Network.AWS.CognitoIdentityProvider.CreateUserPoolClient+import Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain+import Network.AWS.CognitoIdentityProvider.DeleteGroup+import Network.AWS.CognitoIdentityProvider.DeleteIdentityProvider+import Network.AWS.CognitoIdentityProvider.DeleteResourceServer+import Network.AWS.CognitoIdentityProvider.DeleteUser+import Network.AWS.CognitoIdentityProvider.DeleteUserAttributes+import Network.AWS.CognitoIdentityProvider.DeleteUserPool+import Network.AWS.CognitoIdentityProvider.DeleteUserPoolClient+import Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain+import Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider+import Network.AWS.CognitoIdentityProvider.DescribeResourceServer+import Network.AWS.CognitoIdentityProvider.DescribeUserImportJob+import Network.AWS.CognitoIdentityProvider.DescribeUserPool+import Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient+import Network.AWS.CognitoIdentityProvider.DescribeUserPoolDomain+import Network.AWS.CognitoIdentityProvider.ForgetDevice+import Network.AWS.CognitoIdentityProvider.ForgotPassword+import Network.AWS.CognitoIdentityProvider.GetCSVHeader+import Network.AWS.CognitoIdentityProvider.GetDevice+import Network.AWS.CognitoIdentityProvider.GetGroup+import Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier+import Network.AWS.CognitoIdentityProvider.GetUICustomization+import Network.AWS.CognitoIdentityProvider.GetUser+import Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode+import Network.AWS.CognitoIdentityProvider.GlobalSignOut+import Network.AWS.CognitoIdentityProvider.InitiateAuth+import Network.AWS.CognitoIdentityProvider.ListDevices+import Network.AWS.CognitoIdentityProvider.ListGroups+import Network.AWS.CognitoIdentityProvider.ListIdentityProviders+import Network.AWS.CognitoIdentityProvider.ListResourceServers+import Network.AWS.CognitoIdentityProvider.ListUserImportJobs+import Network.AWS.CognitoIdentityProvider.ListUserPoolClients+import Network.AWS.CognitoIdentityProvider.ListUserPools+import Network.AWS.CognitoIdentityProvider.ListUsers+import Network.AWS.CognitoIdentityProvider.ListUsersInGroup+import Network.AWS.CognitoIdentityProvider.ResendConfirmationCode+import Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge+import Network.AWS.CognitoIdentityProvider.SetUICustomization+import Network.AWS.CognitoIdentityProvider.SetUserSettings+import Network.AWS.CognitoIdentityProvider.SignUp+import Network.AWS.CognitoIdentityProvider.StartUserImportJob+import Network.AWS.CognitoIdentityProvider.StopUserImportJob+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.UpdateDeviceStatus+import Network.AWS.CognitoIdentityProvider.UpdateGroup+import Network.AWS.CognitoIdentityProvider.UpdateIdentityProvider+import Network.AWS.CognitoIdentityProvider.UpdateResourceServer+import Network.AWS.CognitoIdentityProvider.UpdateUserAttributes+import Network.AWS.CognitoIdentityProvider.UpdateUserPool+import Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient+import Network.AWS.CognitoIdentityProvider.VerifyUserAttribute+import Network.AWS.CognitoIdentityProvider.Waiters  {- $errors Error matchers are designed for use with the functions provided by

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AddCustomAttributes--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -37,12 +37,12 @@     , acarsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to add custom attributes. --@@ -50,10 +50,11 @@ -- -- /See:/ 'addCustomAttributes' smart constructor. data AddCustomAttributes = AddCustomAttributes'-    { _acaUserPoolId       :: !Text-    , _acaCustomAttributes :: !(List1 SchemaAttributeType)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acaUserPoolId       :: !Text+  , _acaCustomAttributes :: !(List1 SchemaAttributeType)+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AddCustomAttributes' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -66,11 +67,12 @@     -> NonEmpty SchemaAttributeType -- ^ 'acaCustomAttributes'     -> AddCustomAttributes addCustomAttributes pUserPoolId_ pCustomAttributes_ =-    AddCustomAttributes'-    { _acaUserPoolId = pUserPoolId_-    , _acaCustomAttributes = _List1 # pCustomAttributes_-    }+  AddCustomAttributes'+  { _acaUserPoolId = pUserPoolId_+  , _acaCustomAttributes = _List1 # pCustomAttributes_+  } + -- | The user pool ID for the user pool where you want to add custom attributes. acaUserPoolId :: Lens' AddCustomAttributes Text acaUserPoolId = lens _acaUserPoolId (\ s a -> s{_acaUserPoolId = a});@@ -88,9 +90,9 @@               (\ s h x ->                  AddCustomAttributesResponse' <$> (pure (fromEnum s))) -instance Hashable AddCustomAttributes+instance Hashable AddCustomAttributes where -instance NFData AddCustomAttributes+instance NFData AddCustomAttributes where  instance ToHeaders AddCustomAttributes where         toHeaders@@ -121,9 +123,10 @@ -- -- /See:/ 'addCustomAttributesResponse' smart constructor. newtype AddCustomAttributesResponse = AddCustomAttributesResponse'-    { _acarsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acarsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AddCustomAttributesResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -133,12 +136,11 @@     :: Int -- ^ 'acarsResponseStatus'     -> AddCustomAttributesResponse addCustomAttributesResponse pResponseStatus_ =-    AddCustomAttributesResponse'-    { _acarsResponseStatus = pResponseStatus_-    }+  AddCustomAttributesResponse' {_acarsResponseStatus = pResponseStatus_} + -- | -- | The response status code. acarsResponseStatus :: Lens' AddCustomAttributesResponse Int acarsResponseStatus = lens _acarsResponseStatus (\ s a -> s{_acarsResponseStatus = a}); -instance NFData AddCustomAttributesResponse+instance NFData AddCustomAttributesResponse where

@@ -0,0 +1,137 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Adds the specified user to the specified group.+--+--+-- Requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup+    (+    -- * Creating a Request+      adminAddUserToGroup+    , AdminAddUserToGroup+    -- * Request Lenses+    , aautgUserPoolId+    , aautgUsername+    , aautgGroupName++    -- * Destructuring the Response+    , adminAddUserToGroupResponse+    , AdminAddUserToGroupResponse+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminAddUserToGroup' smart constructor.+data AdminAddUserToGroup = AdminAddUserToGroup'+  { _aautgUserPoolId :: !Text+  , _aautgUsername   :: !(Sensitive Text)+  , _aautgGroupName  :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminAddUserToGroup' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'aautgUserPoolId' - The user pool ID for the user pool.+--+-- * 'aautgUsername' - The username for the user.+--+-- * 'aautgGroupName' - The group name.+adminAddUserToGroup+    :: Text -- ^ 'aautgUserPoolId'+    -> Text -- ^ 'aautgUsername'+    -> Text -- ^ 'aautgGroupName'+    -> AdminAddUserToGroup+adminAddUserToGroup pUserPoolId_ pUsername_ pGroupName_ =+  AdminAddUserToGroup'+  { _aautgUserPoolId = pUserPoolId_+  , _aautgUsername = _Sensitive # pUsername_+  , _aautgGroupName = pGroupName_+  }+++-- | The user pool ID for the user pool.+aautgUserPoolId :: Lens' AdminAddUserToGroup Text+aautgUserPoolId = lens _aautgUserPoolId (\ s a -> s{_aautgUserPoolId = a});++-- | The username for the user.+aautgUsername :: Lens' AdminAddUserToGroup Text+aautgUsername = lens _aautgUsername (\ s a -> s{_aautgUsername = a}) . _Sensitive;++-- | The group name.+aautgGroupName :: Lens' AdminAddUserToGroup Text+aautgGroupName = lens _aautgGroupName (\ s a -> s{_aautgGroupName = a});++instance AWSRequest AdminAddUserToGroup where+        type Rs AdminAddUserToGroup =+             AdminAddUserToGroupResponse+        request = postJSON cognitoIdentityProvider+        response = receiveNull AdminAddUserToGroupResponse'++instance Hashable AdminAddUserToGroup where++instance NFData AdminAddUserToGroup where++instance ToHeaders AdminAddUserToGroup where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminAddUserToGroup"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminAddUserToGroup where+        toJSON AdminAddUserToGroup'{..}+          = object+              (catMaybes+                 [Just ("UserPoolId" .= _aautgUserPoolId),+                  Just ("Username" .= _aautgUsername),+                  Just ("GroupName" .= _aautgGroupName)])++instance ToPath AdminAddUserToGroup where+        toPath = const "/"++instance ToQuery AdminAddUserToGroup where+        toQuery = const mempty++-- | /See:/ 'adminAddUserToGroupResponse' smart constructor.+data AdminAddUserToGroupResponse =+  AdminAddUserToGroupResponse'+  deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminAddUserToGroupResponse' with the minimum fields required to make a request.+--+adminAddUserToGroupResponse+    :: AdminAddUserToGroupResponse+adminAddUserToGroupResponse = AdminAddUserToGroupResponse'+++instance NFData AdminAddUserToGroupResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Confirms user registration as an admin without using a confirmation code. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp     (     -- * Creating a Request@@ -37,12 +39,12 @@     , acsursResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to confirm user registration. --@@ -50,10 +52,11 @@ -- -- /See:/ 'adminConfirmSignUp' smart constructor. data AdminConfirmSignUp = AdminConfirmSignUp'-    { _acsuUserPoolId :: !Text-    , _acsuUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acsuUserPoolId :: !Text+  , _acsuUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminConfirmSignUp' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -66,11 +69,10 @@     -> Text -- ^ 'acsuUsername'     -> AdminConfirmSignUp adminConfirmSignUp pUserPoolId_ pUsername_ =-    AdminConfirmSignUp'-    { _acsuUserPoolId = pUserPoolId_-    , _acsuUsername = _Sensitive # pUsername_-    }+  AdminConfirmSignUp'+  {_acsuUserPoolId = pUserPoolId_, _acsuUsername = _Sensitive # pUsername_} + -- | The user pool ID for which you want to confirm user registration. acsuUserPoolId :: Lens' AdminConfirmSignUp Text acsuUserPoolId = lens _acsuUserPoolId (\ s a -> s{_acsuUserPoolId = a});@@ -88,9 +90,9 @@               (\ s h x ->                  AdminConfirmSignUpResponse' <$> (pure (fromEnum s))) -instance Hashable AdminConfirmSignUp+instance Hashable AdminConfirmSignUp where -instance NFData AdminConfirmSignUp+instance NFData AdminConfirmSignUp where  instance ToHeaders AdminConfirmSignUp where         toHeaders@@ -121,9 +123,10 @@ -- -- /See:/ 'adminConfirmSignUpResponse' smart constructor. newtype AdminConfirmSignUpResponse = AdminConfirmSignUpResponse'-    { _acsursResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acsursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminConfirmSignUpResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -133,12 +136,11 @@     :: Int -- ^ 'acsursResponseStatus'     -> AdminConfirmSignUpResponse adminConfirmSignUpResponse pResponseStatus_ =-    AdminConfirmSignUpResponse'-    { _acsursResponseStatus = pResponseStatus_-    }+  AdminConfirmSignUpResponse' {_acsursResponseStatus = pResponseStatus_} + -- | -- | The response status code. acsursResponseStatus :: Lens' AdminConfirmSignUpResponse Int acsursResponseStatus = lens _acsursResponseStatus (\ s a -> s{_acsursResponseStatus = a}); -instance NFData AdminConfirmSignUpResponse+instance NFData AdminConfirmSignUpResponse where

@@ -12,13 +12,13 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminCreateUser--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Creates a new user in the specified user pool and sends a welcome message via email or phone (SMS). This message is based on a template that you configured in your call to CreateUserPool or UpdateUserPool. This template includes your custom sign-up instructions and placeholders for user name and temporary password.+-- Creates a new user in the specified user pool and sends a welcome message via email or phone (SMS). This message is based on a template that you configured in your call to <API_CreateUserPool.html CreateUserPool> or <API_UpdateUserPool.html UpdateUserPool> . This template includes your custom sign-up instructions and placeholders for user name and temporary password. -- -- -- Requires developer credentials.@@ -46,12 +46,12 @@     , acursResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to create a user in the specified user pool. --@@ -59,29 +59,30 @@ -- -- /See:/ 'adminCreateUser' smart constructor. data AdminCreateUser = AdminCreateUser'-    { _acuTemporaryPassword      :: !(Maybe (Sensitive Text))-    , _acuForceAliasCreation     :: !(Maybe Bool)-    , _acuDesiredDeliveryMediums :: !(Maybe [DeliveryMediumType])-    , _acuMessageAction          :: !(Maybe MessageActionType)-    , _acuUserAttributes         :: !(Maybe [AttributeType])-    , _acuValidationData         :: !(Maybe [AttributeType])-    , _acuUserPoolId             :: !Text-    , _acuUsername               :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acuTemporaryPassword      :: !(Maybe (Sensitive Text))+  , _acuForceAliasCreation     :: !(Maybe Bool)+  , _acuDesiredDeliveryMediums :: !(Maybe [DeliveryMediumType])+  , _acuMessageAction          :: !(Maybe MessageActionType)+  , _acuUserAttributes         :: !(Maybe [AttributeType])+  , _acuValidationData         :: !(Maybe [AttributeType])+  , _acuUserPoolId             :: !Text+  , _acuUsername               :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminCreateUser' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'acuTemporaryPassword' - The user's temporary password. This password must conform to the password policy that you specified when you created the user pool. The temporary password is valid only once. To complete the Admin Create User flow, the user must enter the temporary password in the sign-in page along with a new password to be used in all future sign-ins. This parameter is not required. If you do not specify a value, Amazon Cognito generates one for you. The temporary password can only be used until the user account expiration limit that you specified when you created the user pool. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter.+-- * 'acuTemporaryPassword' - The user's temporary password. This password must conform to the password policy that you specified when you created the user pool. The temporary password is valid only once. To complete the Admin Create User flow, the user must enter the temporary password in the sign-in page along with a new password to be used in all future sign-ins. This parameter is not required. If you do not specify a value, Amazon Cognito generates one for you. The temporary password can only be used until the user account expiration limit that you specified when you created the user pool. To reset the account after that time limit, you must call @AdminCreateUser@ again, specifying @"RESEND"@ for the @MessageAction@ parameter. ----- * 'acuForceAliasCreation' - This parameter is only used if the phone_number_verified or email_verified attribute is set to True. Otherwise, it is ignored. If this parameter is set to True and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias. If this parameter is set to False, the API throws an AliasExistsException error if the alias already exists. The default value is False.+-- * 'acuForceAliasCreation' - This parameter is only used if the @phone_number_verified@ or @email_verified@ attribute is set to @True@ . Otherwise, it is ignored. If this parameter is set to @True@ and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias. If this parameter is set to @False@ , the API throws an @AliasExistsException@ error if the alias already exists. The default value is @False@ . ----- * 'acuDesiredDeliveryMediums' - Specify "EMAIL" if email will be used to send the welcome message. Specify "SMS" if the phone number will be used. The default value is "SMS". More than one value can be specified.+-- * 'acuDesiredDeliveryMediums' - Specify @"EMAIL"@ if email will be used to send the welcome message. Specify @"SMS"@ if the phone number will be used. The default value is @"SMS"@ . More than one value can be specified. ----- * 'acuMessageAction' - Set to "RESEND" to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to "SUPPRESS" to suppress sending the message. Only one value can be specified.+-- * 'acuMessageAction' - Set to @"RESEND"@ to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to @"SUPPRESS"@ to suppress sending the message. Only one value can be specified. ----- * 'acuUserAttributes' - An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than Username. However, any attributes that you specify as required (in CreateUserPool or in the __Attributes__ tab of the console) must be supplied either by you (in your call to AdminCreateUser) or by the user (when he or she signs up in response to your welcome message). To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to AdminCreateUser, you can set the email_verified attribute to True, and you can set the phone_number_verified attribute to True. (You cannot do this by calling other operations such as AdminUpdateUserAttributes.)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the email_verified attribute is set to True, or if "EMAIL" is specified in the DesiredDeliveryMediums parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the phone_number_verified attribute is set to True, or if "SMS" is specified in the DesiredDeliveryMediums parameter.+-- * 'acuUserAttributes' - An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in <API_CreateUserPool.html CreateUserPool> or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling <API_AdminUpdateUserAttributes.html AdminUpdateUserAttributes> .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter. -- -- * 'acuValidationData' - The user's validation data. This is an array of name-value pairs that contain user attributes and attribute values that you can use for custom validation, such as restricting the types of user accounts that can be registered. For example, you might choose to allow or disallow user sign-up based on the user's domain. To configure custom validation, you must create a Pre Sign-up Lambda trigger for the user pool as described in the Amazon Cognito Developer Guide. The Lambda trigger receives the validation data and uses it in the validation process. The user's validation data is not persisted. --@@ -93,34 +94,35 @@     -> Text -- ^ 'acuUsername'     -> AdminCreateUser adminCreateUser pUserPoolId_ pUsername_ =-    AdminCreateUser'-    { _acuTemporaryPassword = Nothing-    , _acuForceAliasCreation = Nothing-    , _acuDesiredDeliveryMediums = Nothing-    , _acuMessageAction = Nothing-    , _acuUserAttributes = Nothing-    , _acuValidationData = Nothing-    , _acuUserPoolId = pUserPoolId_-    , _acuUsername = _Sensitive # pUsername_-    }+  AdminCreateUser'+  { _acuTemporaryPassword = Nothing+  , _acuForceAliasCreation = Nothing+  , _acuDesiredDeliveryMediums = Nothing+  , _acuMessageAction = Nothing+  , _acuUserAttributes = Nothing+  , _acuValidationData = Nothing+  , _acuUserPoolId = pUserPoolId_+  , _acuUsername = _Sensitive # pUsername_+  } --- | The user's temporary password. This password must conform to the password policy that you specified when you created the user pool. The temporary password is valid only once. To complete the Admin Create User flow, the user must enter the temporary password in the sign-in page along with a new password to be used in all future sign-ins. This parameter is not required. If you do not specify a value, Amazon Cognito generates one for you. The temporary password can only be used until the user account expiration limit that you specified when you created the user pool. To reset the account after that time limit, you must call AdminCreateUser again, specifying "RESEND" for the MessageAction parameter.++-- | The user's temporary password. This password must conform to the password policy that you specified when you created the user pool. The temporary password is valid only once. To complete the Admin Create User flow, the user must enter the temporary password in the sign-in page along with a new password to be used in all future sign-ins. This parameter is not required. If you do not specify a value, Amazon Cognito generates one for you. The temporary password can only be used until the user account expiration limit that you specified when you created the user pool. To reset the account after that time limit, you must call @AdminCreateUser@ again, specifying @"RESEND"@ for the @MessageAction@ parameter. acuTemporaryPassword :: Lens' AdminCreateUser (Maybe Text) acuTemporaryPassword = lens _acuTemporaryPassword (\ s a -> s{_acuTemporaryPassword = a}) . mapping _Sensitive; --- | This parameter is only used if the phone_number_verified or email_verified attribute is set to True. Otherwise, it is ignored. If this parameter is set to True and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias. If this parameter is set to False, the API throws an AliasExistsException error if the alias already exists. The default value is False.+-- | This parameter is only used if the @phone_number_verified@ or @email_verified@ attribute is set to @True@ . Otherwise, it is ignored. If this parameter is set to @True@ and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias. If this parameter is set to @False@ , the API throws an @AliasExistsException@ error if the alias already exists. The default value is @False@ . acuForceAliasCreation :: Lens' AdminCreateUser (Maybe Bool) acuForceAliasCreation = lens _acuForceAliasCreation (\ s a -> s{_acuForceAliasCreation = a}); --- | Specify "EMAIL" if email will be used to send the welcome message. Specify "SMS" if the phone number will be used. The default value is "SMS". More than one value can be specified.+-- | Specify @"EMAIL"@ if email will be used to send the welcome message. Specify @"SMS"@ if the phone number will be used. The default value is @"SMS"@ . More than one value can be specified. acuDesiredDeliveryMediums :: Lens' AdminCreateUser [DeliveryMediumType] acuDesiredDeliveryMediums = lens _acuDesiredDeliveryMediums (\ s a -> s{_acuDesiredDeliveryMediums = a}) . _Default . _Coerce; --- | Set to "RESEND" to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to "SUPPRESS" to suppress sending the message. Only one value can be specified.+-- | Set to @"RESEND"@ to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to @"SUPPRESS"@ to suppress sending the message. Only one value can be specified. acuMessageAction :: Lens' AdminCreateUser (Maybe MessageActionType) acuMessageAction = lens _acuMessageAction (\ s a -> s{_acuMessageAction = a}); --- | An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than Username. However, any attributes that you specify as required (in CreateUserPool or in the __Attributes__ tab of the console) must be supplied either by you (in your call to AdminCreateUser) or by the user (when he or she signs up in response to your welcome message). To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to AdminCreateUser, you can set the email_verified attribute to True, and you can set the phone_number_verified attribute to True. (You cannot do this by calling other operations such as AdminUpdateUserAttributes.)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the email_verified attribute is set to True, or if "EMAIL" is specified in the DesiredDeliveryMediums parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the phone_number_verified attribute is set to True, or if "SMS" is specified in the DesiredDeliveryMediums parameter.+-- | An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in <API_CreateUserPool.html CreateUserPool> or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling <API_AdminUpdateUserAttributes.html AdminUpdateUserAttributes> .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter. acuUserAttributes :: Lens' AdminCreateUser [AttributeType] acuUserAttributes = lens _acuUserAttributes (\ s a -> s{_acuUserAttributes = a}) . _Default . _Coerce; @@ -145,9 +147,9 @@                  AdminCreateUserResponse' <$>                    (x .?> "User") <*> (pure (fromEnum s))) -instance Hashable AdminCreateUser+instance Hashable AdminCreateUser where -instance NFData AdminCreateUser+instance NFData AdminCreateUser where  instance ToHeaders AdminCreateUser where         toHeaders@@ -185,27 +187,27 @@ -- -- /See:/ 'adminCreateUserResponse' smart constructor. data AdminCreateUserResponse = AdminCreateUserResponse'-    { _acursUser           :: !(Maybe UserType)-    , _acursResponseStatus :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _acursUser           :: !(Maybe UserType)+  , _acursResponseStatus :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminCreateUserResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'acursUser' - The user returned in the request to create a new user.+-- * 'acursUser' - The newly created user. -- -- * 'acursResponseStatus' - -- | The response status code. adminCreateUserResponse     :: Int -- ^ 'acursResponseStatus'     -> AdminCreateUserResponse adminCreateUserResponse pResponseStatus_ =-    AdminCreateUserResponse'-    { _acursUser = Nothing-    , _acursResponseStatus = pResponseStatus_-    }+  AdminCreateUserResponse'+  {_acursUser = Nothing, _acursResponseStatus = pResponseStatus_} --- | The user returned in the request to create a new user.++-- | The newly created user. acursUser :: Lens' AdminCreateUserResponse (Maybe UserType) acursUser = lens _acursUser (\ s a -> s{_acursUser = a}); @@ -213,4 +215,4 @@ acursResponseStatus :: Lens' AdminCreateUserResponse Int acursResponseStatus = lens _acursResponseStatus (\ s a -> s{_acursResponseStatus = a}); -instance NFData AdminCreateUserResponse+instance NFData AdminCreateUserResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDeleteUser--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Deletes a user as an administrator. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminDeleteUser     (     -- * Creating a Request@@ -35,12 +37,12 @@     , AdminDeleteUserResponse     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to delete a user as an administrator. --@@ -48,10 +50,11 @@ -- -- /See:/ 'adminDeleteUser' smart constructor. data AdminDeleteUser = AdminDeleteUser'-    { _aUserPoolId :: !Text-    , _aUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aUserPoolId :: !Text+  , _aUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDeleteUser' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -64,11 +67,10 @@     -> Text -- ^ 'aUsername'     -> AdminDeleteUser adminDeleteUser pUserPoolId_ pUsername_ =-    AdminDeleteUser'-    { _aUserPoolId = pUserPoolId_-    , _aUsername = _Sensitive # pUsername_-    }+  AdminDeleteUser'+  {_aUserPoolId = pUserPoolId_, _aUsername = _Sensitive # pUsername_} + -- | The user pool ID for the user pool where you want to delete the user. aUserPoolId :: Lens' AdminDeleteUser Text aUserPoolId = lens _aUserPoolId (\ s a -> s{_aUserPoolId = a});@@ -82,9 +84,9 @@         request = postJSON cognitoIdentityProvider         response = receiveNull AdminDeleteUserResponse' -instance Hashable AdminDeleteUser+instance Hashable AdminDeleteUser where -instance NFData AdminDeleteUser+instance NFData AdminDeleteUser where  instance ToHeaders AdminDeleteUser where         toHeaders@@ -111,13 +113,15 @@  -- | /See:/ 'adminDeleteUserResponse' smart constructor. data AdminDeleteUserResponse =-    AdminDeleteUserResponse'-    deriving (Eq,Read,Show,Data,Typeable,Generic)+  AdminDeleteUserResponse'+  deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDeleteUserResponse' with the minimum fields required to make a request. -- adminDeleteUserResponse     :: AdminDeleteUserResponse adminDeleteUserResponse = AdminDeleteUserResponse' -instance NFData AdminDeleteUserResponse++instance NFData AdminDeleteUserResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Deletes the user attributes in a user pool as an administrator. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes     (     -- * Creating a Request@@ -38,12 +40,12 @@     , aduarsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to delete user attributes as an administrator. --@@ -51,11 +53,12 @@ -- -- /See:/ 'adminDeleteUserAttributes' smart constructor. data AdminDeleteUserAttributes = AdminDeleteUserAttributes'-    { _aduaUserPoolId         :: !Text-    , _aduaUsername           :: !(Sensitive Text)-    , _aduaUserAttributeNames :: ![Text]-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aduaUserPoolId         :: !Text+  , _aduaUsername           :: !(Sensitive Text)+  , _aduaUserAttributeNames :: ![Text]+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDeleteUserAttributes' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -64,18 +67,19 @@ -- -- * 'aduaUsername' - The user name of the user from which you would like to delete attributes. ----- * 'aduaUserAttributeNames' - An array of strings representing the user attribute names you wish to delete.+-- * 'aduaUserAttributeNames' - An array of strings representing the user attribute names you wish to delete. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. adminDeleteUserAttributes     :: Text -- ^ 'aduaUserPoolId'     -> Text -- ^ 'aduaUsername'     -> AdminDeleteUserAttributes adminDeleteUserAttributes pUserPoolId_ pUsername_ =-    AdminDeleteUserAttributes'-    { _aduaUserPoolId = pUserPoolId_-    , _aduaUsername = _Sensitive # pUsername_-    , _aduaUserAttributeNames = mempty-    }+  AdminDeleteUserAttributes'+  { _aduaUserPoolId = pUserPoolId_+  , _aduaUsername = _Sensitive # pUsername_+  , _aduaUserAttributeNames = mempty+  } + -- | The user pool ID for the user pool where you want to delete user attributes. aduaUserPoolId :: Lens' AdminDeleteUserAttributes Text aduaUserPoolId = lens _aduaUserPoolId (\ s a -> s{_aduaUserPoolId = a});@@ -84,7 +88,7 @@ aduaUsername :: Lens' AdminDeleteUserAttributes Text aduaUsername = lens _aduaUsername (\ s a -> s{_aduaUsername = a}) . _Sensitive; --- | An array of strings representing the user attribute names you wish to delete.+-- | An array of strings representing the user attribute names you wish to delete. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. aduaUserAttributeNames :: Lens' AdminDeleteUserAttributes [Text] aduaUserAttributeNames = lens _aduaUserAttributeNames (\ s a -> s{_aduaUserAttributeNames = a}) . _Coerce; @@ -98,9 +102,9 @@                  AdminDeleteUserAttributesResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminDeleteUserAttributes+instance Hashable AdminDeleteUserAttributes where -instance NFData AdminDeleteUserAttributes+instance NFData AdminDeleteUserAttributes where  instance ToHeaders AdminDeleteUserAttributes where         toHeaders@@ -133,9 +137,10 @@ -- -- /See:/ 'adminDeleteUserAttributesResponse' smart constructor. newtype AdminDeleteUserAttributesResponse = AdminDeleteUserAttributesResponse'-    { _aduarsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aduarsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDeleteUserAttributesResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -145,12 +150,12 @@     :: Int -- ^ 'aduarsResponseStatus'     -> AdminDeleteUserAttributesResponse adminDeleteUserAttributesResponse pResponseStatus_ =-    AdminDeleteUserAttributesResponse'-    { _aduarsResponseStatus = pResponseStatus_-    }+  AdminDeleteUserAttributesResponse' {_aduarsResponseStatus = pResponseStatus_} + -- | -- | The response status code. aduarsResponseStatus :: Lens' AdminDeleteUserAttributesResponse Int aduarsResponseStatus = lens _aduarsResponseStatus (\ s a -> s{_aduarsResponseStatus = a});  instance NFData AdminDeleteUserAttributesResponse+         where

@@ -0,0 +1,149 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked @DestinationUser@ ) signs in, they must create a new user account. See <API_AdminLinkProviderForUser.html AdminLinkProviderForUser> .+--+--+-- This action is enabled only for admin access and requires developer credentials.+--+-- The @ProviderName@ must match the value specified when creating an IdP for the pool.+--+-- To disable a native username + password user, the @ProviderName@ value must be @Cognito@ and the @ProviderAttributeName@ must be @Cognito_Subject@ , with the @ProviderAttributeValue@ being the name that is used in the user pool for the user.+--+-- The @ProviderAttributeName@ must always be @Cognito_Subject@ for social identity providers. The @ProviderAttributeValue@ must always be the exact subject that was used when the user was originally linked as a source user.+--+-- For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the @ProviderAttributeName@ and @ProviderAttributeValue@ must be the same values that were used for the @SourceUser@ when the identities were originally linked in the <API_AdminLinkProviderForUser.html AdminLinkProviderForUser> call. (If the linking was done with @ProviderAttributeName@ set to @Cognito_Subject@ , the same applies here). However, if the user has already signed in, the @ProviderAttributeName@ must be @Cognito_Subject@ and @ProviderAttributeValue@ must be the subject of the SAML assertion.+--+module Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser+    (+    -- * Creating a Request+      adminDisableProviderForUser+    , AdminDisableProviderForUser+    -- * Request Lenses+    , adpfuUserPoolId+    , adpfuUser++    -- * Destructuring the Response+    , adminDisableProviderForUserResponse+    , AdminDisableProviderForUserResponse+    -- * Response Lenses+    , adpfursResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminDisableProviderForUser' smart constructor.+data AdminDisableProviderForUser = AdminDisableProviderForUser'+  { _adpfuUserPoolId :: !Text+  , _adpfuUser       :: !ProviderUserIdentifierType+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminDisableProviderForUser' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'adpfuUserPoolId' - The user pool ID for the user pool.+--+-- * 'adpfuUser' - The user to be disabled.+adminDisableProviderForUser+    :: Text -- ^ 'adpfuUserPoolId'+    -> ProviderUserIdentifierType -- ^ 'adpfuUser'+    -> AdminDisableProviderForUser+adminDisableProviderForUser pUserPoolId_ pUser_ =+  AdminDisableProviderForUser'+  {_adpfuUserPoolId = pUserPoolId_, _adpfuUser = pUser_}+++-- | The user pool ID for the user pool.+adpfuUserPoolId :: Lens' AdminDisableProviderForUser Text+adpfuUserPoolId = lens _adpfuUserPoolId (\ s a -> s{_adpfuUserPoolId = a});++-- | The user to be disabled.+adpfuUser :: Lens' AdminDisableProviderForUser ProviderUserIdentifierType+adpfuUser = lens _adpfuUser (\ s a -> s{_adpfuUser = a});++instance AWSRequest AdminDisableProviderForUser where+        type Rs AdminDisableProviderForUser =+             AdminDisableProviderForUserResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveEmpty+              (\ s h x ->+                 AdminDisableProviderForUserResponse' <$>+                   (pure (fromEnum s)))++instance Hashable AdminDisableProviderForUser where++instance NFData AdminDisableProviderForUser where++instance ToHeaders AdminDisableProviderForUser where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminDisableProviderForUser"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminDisableProviderForUser where+        toJSON AdminDisableProviderForUser'{..}+          = object+              (catMaybes+                 [Just ("UserPoolId" .= _adpfuUserPoolId),+                  Just ("User" .= _adpfuUser)])++instance ToPath AdminDisableProviderForUser where+        toPath = const "/"++instance ToQuery AdminDisableProviderForUser where+        toQuery = const mempty++-- | /See:/ 'adminDisableProviderForUserResponse' smart constructor.+newtype AdminDisableProviderForUserResponse = AdminDisableProviderForUserResponse'+  { _adpfursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminDisableProviderForUserResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'adpfursResponseStatus' - -- | The response status code.+adminDisableProviderForUserResponse+    :: Int -- ^ 'adpfursResponseStatus'+    -> AdminDisableProviderForUserResponse+adminDisableProviderForUserResponse pResponseStatus_ =+  AdminDisableProviderForUserResponse'+  {_adpfursResponseStatus = pResponseStatus_}+++-- | -- | The response status code.+adpfursResponseStatus :: Lens' AdminDisableProviderForUserResponse Int+adpfursResponseStatus = lens _adpfursResponseStatus (\ s a -> s{_adpfursResponseStatus = a});++instance NFData AdminDisableProviderForUserResponse+         where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDisableUser--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Disables the specified user as an administrator. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminDisableUser     (     -- * Creating a Request@@ -37,12 +39,12 @@     , adursResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to disable any user as an administrator. --@@ -50,10 +52,11 @@ -- -- /See:/ 'adminDisableUser' smart constructor. data AdminDisableUser = AdminDisableUser'-    { _aduUserPoolId :: !Text-    , _aduUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aduUserPoolId :: !Text+  , _aduUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDisableUser' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -66,11 +69,10 @@     -> Text -- ^ 'aduUsername'     -> AdminDisableUser adminDisableUser pUserPoolId_ pUsername_ =-    AdminDisableUser'-    { _aduUserPoolId = pUserPoolId_-    , _aduUsername = _Sensitive # pUsername_-    }+  AdminDisableUser'+  {_aduUserPoolId = pUserPoolId_, _aduUsername = _Sensitive # pUsername_} + -- | The user pool ID for the user pool where you want to disable the user. aduUserPoolId :: Lens' AdminDisableUser Text aduUserPoolId = lens _aduUserPoolId (\ s a -> s{_aduUserPoolId = a});@@ -87,9 +89,9 @@               (\ s h x ->                  AdminDisableUserResponse' <$> (pure (fromEnum s))) -instance Hashable AdminDisableUser+instance Hashable AdminDisableUser where -instance NFData AdminDisableUser+instance NFData AdminDisableUser where  instance ToHeaders AdminDisableUser where         toHeaders@@ -120,9 +122,10 @@ -- -- /See:/ 'adminDisableUserResponse' smart constructor. newtype AdminDisableUserResponse = AdminDisableUserResponse'-    { _adursResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _adursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminDisableUserResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -132,12 +135,11 @@     :: Int -- ^ 'adursResponseStatus'     -> AdminDisableUserResponse adminDisableUserResponse pResponseStatus_ =-    AdminDisableUserResponse'-    { _adursResponseStatus = pResponseStatus_-    }+  AdminDisableUserResponse' {_adursResponseStatus = pResponseStatus_} + -- | -- | The response status code. adursResponseStatus :: Lens' AdminDisableUserResponse Int adursResponseStatus = lens _adursResponseStatus (\ s a -> s{_adursResponseStatus = a}); -instance NFData AdminDisableUserResponse+instance NFData AdminDisableUserResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminEnableUser--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Enables the specified user as an administrator. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminEnableUser     (     -- * Creating a Request@@ -37,12 +39,12 @@     , aeursResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request that enables the user as an administrator. --@@ -50,32 +52,32 @@ -- -- /See:/ 'adminEnableUser' smart constructor. data AdminEnableUser = AdminEnableUser'-    { _aeuUserPoolId :: !Text-    , _aeuUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aeuUserPoolId :: !Text+  , _aeuUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminEnableUser' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: -- -- * 'aeuUserPoolId' - The user pool ID for the user pool where you want to enable the user. ----- * 'aeuUsername' - The user name of the user you wish to ebable.+-- * 'aeuUsername' - The user name of the user you wish to enable. adminEnableUser     :: Text -- ^ 'aeuUserPoolId'     -> Text -- ^ 'aeuUsername'     -> AdminEnableUser adminEnableUser pUserPoolId_ pUsername_ =-    AdminEnableUser'-    { _aeuUserPoolId = pUserPoolId_-    , _aeuUsername = _Sensitive # pUsername_-    }+  AdminEnableUser'+  {_aeuUserPoolId = pUserPoolId_, _aeuUsername = _Sensitive # pUsername_} + -- | The user pool ID for the user pool where you want to enable the user. aeuUserPoolId :: Lens' AdminEnableUser Text aeuUserPoolId = lens _aeuUserPoolId (\ s a -> s{_aeuUserPoolId = a}); --- | The user name of the user you wish to ebable.+-- | The user name of the user you wish to enable. aeuUsername :: Lens' AdminEnableUser Text aeuUsername = lens _aeuUsername (\ s a -> s{_aeuUsername = a}) . _Sensitive; @@ -87,9 +89,9 @@               (\ s h x ->                  AdminEnableUserResponse' <$> (pure (fromEnum s))) -instance Hashable AdminEnableUser+instance Hashable AdminEnableUser where -instance NFData AdminEnableUser+instance NFData AdminEnableUser where  instance ToHeaders AdminEnableUser where         toHeaders@@ -120,9 +122,10 @@ -- -- /See:/ 'adminEnableUserResponse' smart constructor. newtype AdminEnableUserResponse = AdminEnableUserResponse'-    { _aeursResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aeursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminEnableUserResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -132,12 +135,11 @@     :: Int -- ^ 'aeursResponseStatus'     -> AdminEnableUserResponse adminEnableUserResponse pResponseStatus_ =-    AdminEnableUserResponse'-    { _aeursResponseStatus = pResponseStatus_-    }+  AdminEnableUserResponse' {_aeursResponseStatus = pResponseStatus_} + -- | -- | The response status code. aeursResponseStatus :: Lens' AdminEnableUserResponse Int aeursResponseStatus = lens _aeursResponseStatus (\ s a -> s{_aeursResponseStatus = a}); -instance NFData AdminEnableUserResponse+instance NFData AdminEnableUserResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminForgetDevice--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Forgets the device, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminForgetDevice     (     -- * Creating a Request@@ -36,12 +38,12 @@     , AdminForgetDeviceResponse     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Sends the forgot device request, as an administrator. --@@ -49,11 +51,12 @@ -- -- /See:/ 'adminForgetDevice' smart constructor. data AdminForgetDevice = AdminForgetDevice'-    { _afdUserPoolId :: !Text-    , _afdUsername   :: !(Sensitive Text)-    , _afdDeviceKey  :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _afdUserPoolId :: !Text+  , _afdUsername   :: !(Sensitive Text)+  , _afdDeviceKey  :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminForgetDevice' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -69,12 +72,13 @@     -> Text -- ^ 'afdDeviceKey'     -> AdminForgetDevice adminForgetDevice pUserPoolId_ pUsername_ pDeviceKey_ =-    AdminForgetDevice'-    { _afdUserPoolId = pUserPoolId_-    , _afdUsername = _Sensitive # pUsername_-    , _afdDeviceKey = pDeviceKey_-    }+  AdminForgetDevice'+  { _afdUserPoolId = pUserPoolId_+  , _afdUsername = _Sensitive # pUsername_+  , _afdDeviceKey = pDeviceKey_+  } + -- | The user pool ID. afdUserPoolId :: Lens' AdminForgetDevice Text afdUserPoolId = lens _afdUserPoolId (\ s a -> s{_afdUserPoolId = a});@@ -92,9 +96,9 @@         request = postJSON cognitoIdentityProvider         response = receiveNull AdminForgetDeviceResponse' -instance Hashable AdminForgetDevice+instance Hashable AdminForgetDevice where -instance NFData AdminForgetDevice+instance NFData AdminForgetDevice where  instance ToHeaders AdminForgetDevice where         toHeaders@@ -122,13 +126,15 @@  -- | /See:/ 'adminForgetDeviceResponse' smart constructor. data AdminForgetDeviceResponse =-    AdminForgetDeviceResponse'-    deriving (Eq,Read,Show,Data,Typeable,Generic)+  AdminForgetDeviceResponse'+  deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminForgetDeviceResponse' with the minimum fields required to make a request. -- adminForgetDeviceResponse     :: AdminForgetDeviceResponse adminForgetDeviceResponse = AdminForgetDeviceResponse' -instance NFData AdminForgetDeviceResponse++instance NFData AdminForgetDeviceResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminGetDevice--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Gets the device, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminGetDevice     (     -- * Creating a Request@@ -39,12 +41,12 @@     , agdrsDevice     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to get the device, as an administrator. --@@ -52,11 +54,12 @@ -- -- /See:/ 'adminGetDevice' smart constructor. data AdminGetDevice = AdminGetDevice'-    { _agdDeviceKey  :: !Text-    , _agdUserPoolId :: !Text-    , _agdUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _agdDeviceKey  :: !Text+  , _agdUserPoolId :: !Text+  , _agdUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminGetDevice' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -72,12 +75,13 @@     -> Text -- ^ 'agdUsername'     -> AdminGetDevice adminGetDevice pDeviceKey_ pUserPoolId_ pUsername_ =-    AdminGetDevice'-    { _agdDeviceKey = pDeviceKey_-    , _agdUserPoolId = pUserPoolId_-    , _agdUsername = _Sensitive # pUsername_-    }+  AdminGetDevice'+  { _agdDeviceKey = pDeviceKey_+  , _agdUserPoolId = pUserPoolId_+  , _agdUsername = _Sensitive # pUsername_+  } + -- | The device key. agdDeviceKey :: Lens' AdminGetDevice Text agdDeviceKey = lens _agdDeviceKey (\ s a -> s{_agdDeviceKey = a});@@ -99,9 +103,9 @@                  AdminGetDeviceResponse' <$>                    (pure (fromEnum s)) <*> (x .:> "Device")) -instance Hashable AdminGetDevice+instance Hashable AdminGetDevice where -instance NFData AdminGetDevice+instance NFData AdminGetDevice where  instance ToHeaders AdminGetDevice where         toHeaders@@ -133,10 +137,11 @@ -- -- /See:/ 'adminGetDeviceResponse' smart constructor. data AdminGetDeviceResponse = AdminGetDeviceResponse'-    { _agdrsResponseStatus :: !Int-    , _agdrsDevice         :: !DeviceType-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _agdrsResponseStatus :: !Int+  , _agdrsDevice         :: !DeviceType+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminGetDeviceResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -149,11 +154,10 @@     -> DeviceType -- ^ 'agdrsDevice'     -> AdminGetDeviceResponse adminGetDeviceResponse pResponseStatus_ pDevice_ =-    AdminGetDeviceResponse'-    { _agdrsResponseStatus = pResponseStatus_-    , _agdrsDevice = pDevice_-    }+  AdminGetDeviceResponse'+  {_agdrsResponseStatus = pResponseStatus_, _agdrsDevice = pDevice_} + -- | -- | The response status code. agdrsResponseStatus :: Lens' AdminGetDeviceResponse Int agdrsResponseStatus = lens _agdrsResponseStatus (\ s a -> s{_agdrsResponseStatus = a});@@ -162,4 +166,4 @@ agdrsDevice :: Lens' AdminGetDeviceResponse DeviceType agdrsDevice = lens _agdrsDevice (\ s a -> s{_agdrsDevice = a}); -instance NFData AdminGetDeviceResponse+instance NFData AdminGetDeviceResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminGetUser--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Gets the specified user by user name in a user pool as an administrator. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminGetUser     (     -- * Creating a Request@@ -44,12 +46,12 @@     , agursUsername     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to get the specified user as an administrator. --@@ -57,10 +59,11 @@ -- -- /See:/ 'adminGetUser' smart constructor. data AdminGetUser = AdminGetUser'-    { _aguUserPoolId :: !Text-    , _aguUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aguUserPoolId :: !Text+  , _aguUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminGetUser' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -73,11 +76,10 @@     -> Text -- ^ 'aguUsername'     -> AdminGetUser adminGetUser pUserPoolId_ pUsername_ =-    AdminGetUser'-    { _aguUserPoolId = pUserPoolId_-    , _aguUsername = _Sensitive # pUsername_-    }+  AdminGetUser'+  {_aguUserPoolId = pUserPoolId_, _aguUsername = _Sensitive # pUsername_} + -- | The user pool ID for the user pool where you want to get information about the user. aguUserPoolId :: Lens' AdminGetUser Text aguUserPoolId = lens _aguUserPoolId (\ s a -> s{_aguUserPoolId = a});@@ -101,9 +103,9 @@                      <*> (pure (fromEnum s))                      <*> (x .:> "Username")) -instance Hashable AdminGetUser+instance Hashable AdminGetUser where -instance NFData AdminGetUser+instance NFData AdminGetUser where  instance ToHeaders AdminGetUser where         toHeaders@@ -134,16 +136,17 @@ -- -- /See:/ 'adminGetUserResponse' smart constructor. data AdminGetUserResponse = AdminGetUserResponse'-    { _agursEnabled              :: !(Maybe Bool)-    , _agursUserStatus           :: !(Maybe UserStatusType)-    , _agursUserAttributes       :: !(Maybe [AttributeType])-    , _agursUserCreateDate       :: !(Maybe POSIX)-    , _agursMFAOptions           :: !(Maybe [MFAOptionType])-    , _agursUserLastModifiedDate :: !(Maybe POSIX)-    , _agursResponseStatus       :: !Int-    , _agursUsername             :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _agursEnabled              :: !(Maybe Bool)+  , _agursUserStatus           :: !(Maybe UserStatusType)+  , _agursUserAttributes       :: !(Maybe [AttributeType])+  , _agursUserCreateDate       :: !(Maybe POSIX)+  , _agursMFAOptions           :: !(Maybe [MFAOptionType])+  , _agursUserLastModifiedDate :: !(Maybe POSIX)+  , _agursResponseStatus       :: !Int+  , _agursUsername             :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminGetUserResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -168,17 +171,18 @@     -> Text -- ^ 'agursUsername'     -> AdminGetUserResponse adminGetUserResponse pResponseStatus_ pUsername_ =-    AdminGetUserResponse'-    { _agursEnabled = Nothing-    , _agursUserStatus = Nothing-    , _agursUserAttributes = Nothing-    , _agursUserCreateDate = Nothing-    , _agursMFAOptions = Nothing-    , _agursUserLastModifiedDate = Nothing-    , _agursResponseStatus = pResponseStatus_-    , _agursUsername = _Sensitive # pUsername_-    }+  AdminGetUserResponse'+  { _agursEnabled = Nothing+  , _agursUserStatus = Nothing+  , _agursUserAttributes = Nothing+  , _agursUserCreateDate = Nothing+  , _agursMFAOptions = Nothing+  , _agursUserLastModifiedDate = Nothing+  , _agursResponseStatus = pResponseStatus_+  , _agursUsername = _Sensitive # pUsername_+  } + -- | Indicates that the status is enabled. agursEnabled :: Lens' AdminGetUserResponse (Maybe Bool) agursEnabled = lens _agursEnabled (\ s a -> s{_agursEnabled = a});@@ -211,4 +215,4 @@ agursUsername :: Lens' AdminGetUserResponse Text agursUsername = lens _agursUsername (\ s a -> s{_agursUsername = a}) . _Sensitive; -instance NFData AdminGetUserResponse+instance NFData AdminGetUserResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminInitiateAuth--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Initiates the authentication flow, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminInitiateAuth     (     -- * Creating a Request@@ -44,12 +46,12 @@     , aiarsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Initiates the authorization request, as an administrator. --@@ -57,45 +59,47 @@ -- -- /See:/ 'adminInitiateAuth' smart constructor. data AdminInitiateAuth = AdminInitiateAuth'-    { _aiaClientMetadata :: !(Maybe (Map Text Text))-    , _aiaAuthParameters :: !(Maybe (Map Text Text))-    , _aiaUserPoolId     :: !Text-    , _aiaClientId       :: !(Sensitive Text)-    , _aiaAuthFlow       :: !AuthFlowType-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aiaClientMetadata :: !(Maybe (Map Text Text))+  , _aiaAuthParameters :: !(Maybe (Map Text Text))+  , _aiaUserPoolId     :: !Text+  , _aiaClientId       :: !(Sensitive Text)+  , _aiaAuthFlow       :: !AuthFlowType+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminInitiateAuth' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'aiaClientMetadata' - The client app metadata.+-- * 'aiaClientMetadata' - This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. ----- * 'aiaAuthParameters' - The authentication parameters.+-- * 'aiaAuthParameters' - The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@ -- -- * 'aiaUserPoolId' - The ID of the Amazon Cognito user pool. ----- * 'aiaClientId' - The client app ID.+-- * 'aiaClientId' - The app client ID. ----- * 'aiaAuthFlow' - The authentication flow.+-- * 'aiaAuthFlow' - The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client. adminInitiateAuth     :: Text -- ^ 'aiaUserPoolId'     -> Text -- ^ 'aiaClientId'     -> AuthFlowType -- ^ 'aiaAuthFlow'     -> AdminInitiateAuth adminInitiateAuth pUserPoolId_ pClientId_ pAuthFlow_ =-    AdminInitiateAuth'-    { _aiaClientMetadata = Nothing-    , _aiaAuthParameters = Nothing-    , _aiaUserPoolId = pUserPoolId_-    , _aiaClientId = _Sensitive # pClientId_-    , _aiaAuthFlow = pAuthFlow_-    }+  AdminInitiateAuth'+  { _aiaClientMetadata = Nothing+  , _aiaAuthParameters = Nothing+  , _aiaUserPoolId = pUserPoolId_+  , _aiaClientId = _Sensitive # pClientId_+  , _aiaAuthFlow = pAuthFlow_+  } --- | The client app metadata.++-- | This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. aiaClientMetadata :: Lens' AdminInitiateAuth (HashMap Text Text) aiaClientMetadata = lens _aiaClientMetadata (\ s a -> s{_aiaClientMetadata = a}) . _Default . _Map; --- | The authentication parameters.+-- | The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@ aiaAuthParameters :: Lens' AdminInitiateAuth (HashMap Text Text) aiaAuthParameters = lens _aiaAuthParameters (\ s a -> s{_aiaAuthParameters = a}) . _Default . _Map; @@ -103,11 +107,11 @@ aiaUserPoolId :: Lens' AdminInitiateAuth Text aiaUserPoolId = lens _aiaUserPoolId (\ s a -> s{_aiaUserPoolId = a}); --- | The client app ID.+-- | The app client ID. aiaClientId :: Lens' AdminInitiateAuth Text aiaClientId = lens _aiaClientId (\ s a -> s{_aiaClientId = a}) . _Sensitive; --- | The authentication flow.+-- | The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client. aiaAuthFlow :: Lens' AdminInitiateAuth AuthFlowType aiaAuthFlow = lens _aiaAuthFlow (\ s a -> s{_aiaAuthFlow = a}); @@ -124,9 +128,9 @@                      <*> (x .?> "Session")                      <*> (pure (fromEnum s))) -instance Hashable AdminInitiateAuth+instance Hashable AdminInitiateAuth where -instance NFData AdminInitiateAuth+instance NFData AdminInitiateAuth where  instance ToHeaders AdminInitiateAuth where         toHeaders@@ -160,51 +164,53 @@ -- -- /See:/ 'adminInitiateAuthResponse' smart constructor. data AdminInitiateAuthResponse = AdminInitiateAuthResponse'-    { _aiarsChallengeName        :: !(Maybe ChallengeNameType)-    , _aiarsChallengeParameters  :: !(Maybe (Map Text Text))-    , _aiarsAuthenticationResult :: !(Maybe AuthenticationResultType)-    , _aiarsSession              :: !(Maybe Text)-    , _aiarsResponseStatus       :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aiarsChallengeName        :: !(Maybe ChallengeNameType)+  , _aiarsChallengeParameters  :: !(Maybe (Map Text Text))+  , _aiarsAuthenticationResult :: !(Maybe AuthenticationResultType)+  , _aiarsSession              :: !(Maybe Text)+  , _aiarsResponseStatus       :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminInitiateAuthResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'aiarsChallengeName' - The name of the challenge.+-- * 'aiarsChallengeName' - The name of the challenge which you are responding to with this call. This is returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge.     * @SMS_MFA@ : Next challenge is to supply an @SMS_MFA_CODE@ , delivered via SMS.     * @PASSWORD_VERIFIER@ : Next challenge is to supply @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , and @TIMESTAMP@ after the client-side SRP calculations.     * @CUSTOM_CHALLENGE@ : This is returned if your custom authentication flow determines that the user should pass another challenge before tokens are issued.     * @DEVICE_SRP_AUTH@ : If device tracking was enabled on your user pool and the previous challenges were passed, this challenge is returned so that Amazon Cognito can start tracking this device.     * @DEVICE_PASSWORD_VERIFIER@ : Similar to @PASSWORD_VERIFIER@ , but for devices only.     * @ADMIN_NO_SRP_AUTH@ : This is returned if you need to authenticate with @USERNAME@ and @PASSWORD@ directly. An app client must be enabled to use this flow.     * @NEW_PASSWORD_REQUIRED@ : For users which are required to change their passwords after successful first login. This challenge should be passed with @NEW_PASSWORD@ and any other required attributes. ----- * 'aiarsChallengeParameters' - The challenge parameters.+-- * 'aiarsChallengeParameters' - The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_IF_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias. ----- * 'aiarsAuthenticationResult' - The result of the authentication response.+-- * 'aiarsAuthenticationResult' - The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. ----- * 'aiarsSession' - The session.+-- * 'aiarsSession' - The session which should be passed both ways in challenge-response calls to the service. If @AdminInitiateAuth@ or @AdminRespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @AdminRespondToAuthChallenge@ API call. -- -- * 'aiarsResponseStatus' - -- | The response status code. adminInitiateAuthResponse     :: Int -- ^ 'aiarsResponseStatus'     -> AdminInitiateAuthResponse adminInitiateAuthResponse pResponseStatus_ =-    AdminInitiateAuthResponse'-    { _aiarsChallengeName = Nothing-    , _aiarsChallengeParameters = Nothing-    , _aiarsAuthenticationResult = Nothing-    , _aiarsSession = Nothing-    , _aiarsResponseStatus = pResponseStatus_-    }+  AdminInitiateAuthResponse'+  { _aiarsChallengeName = Nothing+  , _aiarsChallengeParameters = Nothing+  , _aiarsAuthenticationResult = Nothing+  , _aiarsSession = Nothing+  , _aiarsResponseStatus = pResponseStatus_+  } --- | The name of the challenge.++-- | The name of the challenge which you are responding to with this call. This is returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge.     * @SMS_MFA@ : Next challenge is to supply an @SMS_MFA_CODE@ , delivered via SMS.     * @PASSWORD_VERIFIER@ : Next challenge is to supply @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , and @TIMESTAMP@ after the client-side SRP calculations.     * @CUSTOM_CHALLENGE@ : This is returned if your custom authentication flow determines that the user should pass another challenge before tokens are issued.     * @DEVICE_SRP_AUTH@ : If device tracking was enabled on your user pool and the previous challenges were passed, this challenge is returned so that Amazon Cognito can start tracking this device.     * @DEVICE_PASSWORD_VERIFIER@ : Similar to @PASSWORD_VERIFIER@ , but for devices only.     * @ADMIN_NO_SRP_AUTH@ : This is returned if you need to authenticate with @USERNAME@ and @PASSWORD@ directly. An app client must be enabled to use this flow.     * @NEW_PASSWORD_REQUIRED@ : For users which are required to change their passwords after successful first login. This challenge should be passed with @NEW_PASSWORD@ and any other required attributes. aiarsChallengeName :: Lens' AdminInitiateAuthResponse (Maybe ChallengeNameType) aiarsChallengeName = lens _aiarsChallengeName (\ s a -> s{_aiarsChallengeName = a}); --- | The challenge parameters.+-- | The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_IF_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias. aiarsChallengeParameters :: Lens' AdminInitiateAuthResponse (HashMap Text Text) aiarsChallengeParameters = lens _aiarsChallengeParameters (\ s a -> s{_aiarsChallengeParameters = a}) . _Default . _Map; --- | The result of the authentication response.+-- | The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. aiarsAuthenticationResult :: Lens' AdminInitiateAuthResponse (Maybe AuthenticationResultType) aiarsAuthenticationResult = lens _aiarsAuthenticationResult (\ s a -> s{_aiarsAuthenticationResult = a}); --- | The session.+-- | The session which should be passed both ways in challenge-response calls to the service. If @AdminInitiateAuth@ or @AdminRespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @AdminRespondToAuthChallenge@ API call. aiarsSession :: Lens' AdminInitiateAuthResponse (Maybe Text) aiarsSession = lens _aiarsSession (\ s a -> s{_aiarsSession = a}); @@ -212,4 +218,4 @@ aiarsResponseStatus :: Lens' AdminInitiateAuthResponse Int aiarsResponseStatus = lens _aiarsResponseStatus (\ s a -> s{_aiarsResponseStatus = a}); -instance NFData AdminInitiateAuthResponse+instance NFData AdminInitiateAuthResponse where

@@ -0,0 +1,159 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Links an existing user account in a user pool (@DestinationUser@ ) to an identity from an external identity provider (@SourceUser@ ) based on a specified attribute name and value from the external identity provider. This allows you to create a link from the existing user account to an external federated user identity that has not yet been used to sign in, so that the federated user identity can be used to sign in as the existing user account.+--+--+-- For example, if there is an existing user with a username and password, this API links that user to a federated user identity, so that when the federated user identity is used, the user signs in as the existing user account.+--+-- /Important:/ Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external identity providers and provider attributes that have been trusted by the application owner.+--+-- See also <API_AdminDisableProviderForUser.html AdminDisableProviderForUser> .+--+-- This action is enabled only for admin access and requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser+    (+    -- * Creating a Request+      adminLinkProviderForUser+    , AdminLinkProviderForUser+    -- * Request Lenses+    , alpfuUserPoolId+    , alpfuDestinationUser+    , alpfuSourceUser++    -- * Destructuring the Response+    , adminLinkProviderForUserResponse+    , AdminLinkProviderForUserResponse+    -- * Response Lenses+    , alpfursResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminLinkProviderForUser' smart constructor.+data AdminLinkProviderForUser = AdminLinkProviderForUser'+  { _alpfuUserPoolId      :: !Text+  , _alpfuDestinationUser :: !ProviderUserIdentifierType+  , _alpfuSourceUser      :: !ProviderUserIdentifierType+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminLinkProviderForUser' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'alpfuUserPoolId' - The user pool ID for the user pool.+--+-- * 'alpfuDestinationUser' - The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. The @ProviderAttributeValue@ for the @DestinationUser@ must match the username for the user in the user pool. The @ProviderAttributeName@ will always be ignored.+--+-- * 'alpfuSourceUser' - An external identity provider account for a user who does not currently exist yet in the user pool. This user must be a federated user (for example, a SAML or Facebook user), not another native user. If the @SourceUser@ is a federated social identity provider user (Facebook, Google, or Login with Amazon), you must set the @ProviderAttributeName@ to @Cognito_Subject@ . For social identity providers, the @ProviderName@ will be @Facebook@ , @Google@ , or @LoginWithAmazon@ , and Cognito will automatically parse the Facebook, Google, and Login with Amazon tokens for @id@ , @sub@ , and @user_id@ , respectively. The @ProviderAttributeValue@ for the user must be the same value as the @id@ , @sub@ , or @user_id@ value found in the social identity provider token. For SAML, the @ProviderAttributeName@ can be any value that matches a claim in the SAML assertion. If you wish to link SAML users based on the subject of the SAML assertion, you should map the subject to a claim through the SAML identity provider and submit that claim name as the @ProviderAttributeName@ . If you set @ProviderAttributeName@ to @Cognito_Subject@ , Cognito will automatically parse the default unique identifier found in the subject from the SAML token.+adminLinkProviderForUser+    :: Text -- ^ 'alpfuUserPoolId'+    -> ProviderUserIdentifierType -- ^ 'alpfuDestinationUser'+    -> ProviderUserIdentifierType -- ^ 'alpfuSourceUser'+    -> AdminLinkProviderForUser+adminLinkProviderForUser pUserPoolId_ pDestinationUser_ pSourceUser_ =+  AdminLinkProviderForUser'+  { _alpfuUserPoolId = pUserPoolId_+  , _alpfuDestinationUser = pDestinationUser_+  , _alpfuSourceUser = pSourceUser_+  }+++-- | The user pool ID for the user pool.+alpfuUserPoolId :: Lens' AdminLinkProviderForUser Text+alpfuUserPoolId = lens _alpfuUserPoolId (\ s a -> s{_alpfuUserPoolId = a});++-- | The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. The @ProviderAttributeValue@ for the @DestinationUser@ must match the username for the user in the user pool. The @ProviderAttributeName@ will always be ignored.+alpfuDestinationUser :: Lens' AdminLinkProviderForUser ProviderUserIdentifierType+alpfuDestinationUser = lens _alpfuDestinationUser (\ s a -> s{_alpfuDestinationUser = a});++-- | An external identity provider account for a user who does not currently exist yet in the user pool. This user must be a federated user (for example, a SAML or Facebook user), not another native user. If the @SourceUser@ is a federated social identity provider user (Facebook, Google, or Login with Amazon), you must set the @ProviderAttributeName@ to @Cognito_Subject@ . For social identity providers, the @ProviderName@ will be @Facebook@ , @Google@ , or @LoginWithAmazon@ , and Cognito will automatically parse the Facebook, Google, and Login with Amazon tokens for @id@ , @sub@ , and @user_id@ , respectively. The @ProviderAttributeValue@ for the user must be the same value as the @id@ , @sub@ , or @user_id@ value found in the social identity provider token. For SAML, the @ProviderAttributeName@ can be any value that matches a claim in the SAML assertion. If you wish to link SAML users based on the subject of the SAML assertion, you should map the subject to a claim through the SAML identity provider and submit that claim name as the @ProviderAttributeName@ . If you set @ProviderAttributeName@ to @Cognito_Subject@ , Cognito will automatically parse the default unique identifier found in the subject from the SAML token.+alpfuSourceUser :: Lens' AdminLinkProviderForUser ProviderUserIdentifierType+alpfuSourceUser = lens _alpfuSourceUser (\ s a -> s{_alpfuSourceUser = a});++instance AWSRequest AdminLinkProviderForUser where+        type Rs AdminLinkProviderForUser =+             AdminLinkProviderForUserResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveEmpty+              (\ s h x ->+                 AdminLinkProviderForUserResponse' <$>+                   (pure (fromEnum s)))++instance Hashable AdminLinkProviderForUser where++instance NFData AdminLinkProviderForUser where++instance ToHeaders AdminLinkProviderForUser where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminLinkProviderForUser"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminLinkProviderForUser where+        toJSON AdminLinkProviderForUser'{..}+          = object+              (catMaybes+                 [Just ("UserPoolId" .= _alpfuUserPoolId),+                  Just ("DestinationUser" .= _alpfuDestinationUser),+                  Just ("SourceUser" .= _alpfuSourceUser)])++instance ToPath AdminLinkProviderForUser where+        toPath = const "/"++instance ToQuery AdminLinkProviderForUser where+        toQuery = const mempty++-- | /See:/ 'adminLinkProviderForUserResponse' smart constructor.+newtype AdminLinkProviderForUserResponse = AdminLinkProviderForUserResponse'+  { _alpfursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminLinkProviderForUserResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'alpfursResponseStatus' - -- | The response status code.+adminLinkProviderForUserResponse+    :: Int -- ^ 'alpfursResponseStatus'+    -> AdminLinkProviderForUserResponse+adminLinkProviderForUserResponse pResponseStatus_ =+  AdminLinkProviderForUserResponse' {_alpfursResponseStatus = pResponseStatus_}+++-- | -- | The response status code.+alpfursResponseStatus :: Lens' AdminLinkProviderForUserResponse Int+alpfursResponseStatus = lens _alpfursResponseStatus (\ s a -> s{_alpfursResponseStatus = a});++instance NFData AdminLinkProviderForUserResponse+         where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminListDevices--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Lists devices, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminListDevices     (     -- * Creating a Request@@ -41,12 +43,12 @@     , aldrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to list devices, as an administrator. --@@ -54,12 +56,13 @@ -- -- /See:/ 'adminListDevices' smart constructor. data AdminListDevices = AdminListDevices'-    { _aldPaginationToken :: !(Maybe Text)-    , _aldLimit           :: !(Maybe Nat)-    , _aldUserPoolId      :: !Text-    , _aldUsername        :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aldPaginationToken :: !(Maybe Text)+  , _aldLimit           :: !(Maybe Nat)+  , _aldUserPoolId      :: !Text+  , _aldUsername        :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminListDevices' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -76,13 +79,14 @@     -> Text -- ^ 'aldUsername'     -> AdminListDevices adminListDevices pUserPoolId_ pUsername_ =-    AdminListDevices'-    { _aldPaginationToken = Nothing-    , _aldLimit = Nothing-    , _aldUserPoolId = pUserPoolId_-    , _aldUsername = _Sensitive # pUsername_-    }+  AdminListDevices'+  { _aldPaginationToken = Nothing+  , _aldLimit = Nothing+  , _aldUserPoolId = pUserPoolId_+  , _aldUsername = _Sensitive # pUsername_+  } + -- | The pagination token. aldPaginationToken :: Lens' AdminListDevices (Maybe Text) aldPaginationToken = lens _aldPaginationToken (\ s a -> s{_aldPaginationToken = a});@@ -110,9 +114,9 @@                      (x .?> "Devices" .!@ mempty)                      <*> (pure (fromEnum s))) -instance Hashable AdminListDevices+instance Hashable AdminListDevices where -instance NFData AdminListDevices+instance NFData AdminListDevices where  instance ToHeaders AdminListDevices where         toHeaders@@ -145,11 +149,12 @@ -- -- /See:/ 'adminListDevicesResponse' smart constructor. data AdminListDevicesResponse = AdminListDevicesResponse'-    { _aldrsPaginationToken :: !(Maybe Text)-    , _aldrsDevices         :: !(Maybe [DeviceType])-    , _aldrsResponseStatus  :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aldrsPaginationToken :: !(Maybe Text)+  , _aldrsDevices         :: !(Maybe [DeviceType])+  , _aldrsResponseStatus  :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminListDevicesResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -163,12 +168,13 @@     :: Int -- ^ 'aldrsResponseStatus'     -> AdminListDevicesResponse adminListDevicesResponse pResponseStatus_ =-    AdminListDevicesResponse'-    { _aldrsPaginationToken = Nothing-    , _aldrsDevices = Nothing-    , _aldrsResponseStatus = pResponseStatus_-    }+  AdminListDevicesResponse'+  { _aldrsPaginationToken = Nothing+  , _aldrsDevices = Nothing+  , _aldrsResponseStatus = pResponseStatus_+  } + -- | The pagination token. aldrsPaginationToken :: Lens' AdminListDevicesResponse (Maybe Text) aldrsPaginationToken = lens _aldrsPaginationToken (\ s a -> s{_aldrsPaginationToken = a});@@ -181,4 +187,4 @@ aldrsResponseStatus :: Lens' AdminListDevicesResponse Int aldrsResponseStatus = lens _aldrsResponseStatus (\ s a -> s{_aldrsResponseStatus = a}); -instance NFData AdminListDevicesResponse+instance NFData AdminListDevicesResponse where

@@ -0,0 +1,182 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists the groups that the user belongs to.+--+--+-- Requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+    (+    -- * Creating a Request+      adminListGroupsForUser+    , AdminListGroupsForUser+    -- * Request Lenses+    , algfuNextToken+    , algfuLimit+    , algfuUsername+    , algfuUserPoolId++    -- * Destructuring the Response+    , adminListGroupsForUserResponse+    , AdminListGroupsForUserResponse+    -- * Response Lenses+    , algfursGroups+    , algfursNextToken+    , algfursResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminListGroupsForUser' smart constructor.+data AdminListGroupsForUser = AdminListGroupsForUser'+  { _algfuNextToken  :: !(Maybe Text)+  , _algfuLimit      :: !(Maybe Nat)+  , _algfuUsername   :: !(Sensitive Text)+  , _algfuUserPoolId :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminListGroupsForUser' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'algfuNextToken' - An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list.+--+-- * 'algfuLimit' - The limit of the request to list groups.+--+-- * 'algfuUsername' - The username for the user.+--+-- * 'algfuUserPoolId' - The user pool ID for the user pool.+adminListGroupsForUser+    :: Text -- ^ 'algfuUsername'+    -> Text -- ^ 'algfuUserPoolId'+    -> AdminListGroupsForUser+adminListGroupsForUser pUsername_ pUserPoolId_ =+  AdminListGroupsForUser'+  { _algfuNextToken = Nothing+  , _algfuLimit = Nothing+  , _algfuUsername = _Sensitive # pUsername_+  , _algfuUserPoolId = pUserPoolId_+  }+++-- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list.+algfuNextToken :: Lens' AdminListGroupsForUser (Maybe Text)+algfuNextToken = lens _algfuNextToken (\ s a -> s{_algfuNextToken = a});++-- | The limit of the request to list groups.+algfuLimit :: Lens' AdminListGroupsForUser (Maybe Natural)+algfuLimit = lens _algfuLimit (\ s a -> s{_algfuLimit = a}) . mapping _Nat;++-- | The username for the user.+algfuUsername :: Lens' AdminListGroupsForUser Text+algfuUsername = lens _algfuUsername (\ s a -> s{_algfuUsername = a}) . _Sensitive;++-- | The user pool ID for the user pool.+algfuUserPoolId :: Lens' AdminListGroupsForUser Text+algfuUserPoolId = lens _algfuUserPoolId (\ s a -> s{_algfuUserPoolId = a});++instance AWSRequest AdminListGroupsForUser where+        type Rs AdminListGroupsForUser =+             AdminListGroupsForUserResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 AdminListGroupsForUserResponse' <$>+                   (x .?> "Groups" .!@ mempty) <*> (x .?> "NextToken")+                     <*> (pure (fromEnum s)))++instance Hashable AdminListGroupsForUser where++instance NFData AdminListGroupsForUser where++instance ToHeaders AdminListGroupsForUser where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminListGroupsForUser"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminListGroupsForUser where+        toJSON AdminListGroupsForUser'{..}+          = object+              (catMaybes+                 [("NextToken" .=) <$> _algfuNextToken,+                  ("Limit" .=) <$> _algfuLimit,+                  Just ("Username" .= _algfuUsername),+                  Just ("UserPoolId" .= _algfuUserPoolId)])++instance ToPath AdminListGroupsForUser where+        toPath = const "/"++instance ToQuery AdminListGroupsForUser where+        toQuery = const mempty++-- | /See:/ 'adminListGroupsForUserResponse' smart constructor.+data AdminListGroupsForUserResponse = AdminListGroupsForUserResponse'+  { _algfursGroups         :: !(Maybe [GroupType])+  , _algfursNextToken      :: !(Maybe Text)+  , _algfursResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminListGroupsForUserResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'algfursGroups' - The groups that the user belongs to.+--+-- * 'algfursNextToken' - An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list.+--+-- * 'algfursResponseStatus' - -- | The response status code.+adminListGroupsForUserResponse+    :: Int -- ^ 'algfursResponseStatus'+    -> AdminListGroupsForUserResponse+adminListGroupsForUserResponse pResponseStatus_ =+  AdminListGroupsForUserResponse'+  { _algfursGroups = Nothing+  , _algfursNextToken = Nothing+  , _algfursResponseStatus = pResponseStatus_+  }+++-- | The groups that the user belongs to.+algfursGroups :: Lens' AdminListGroupsForUserResponse [GroupType]+algfursGroups = lens _algfursGroups (\ s a -> s{_algfursGroups = a}) . _Default . _Coerce;++-- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list.+algfursNextToken :: Lens' AdminListGroupsForUserResponse (Maybe Text)+algfursNextToken = lens _algfursNextToken (\ s a -> s{_algfursNextToken = a});++-- | -- | The response status code.+algfursResponseStatus :: Lens' AdminListGroupsForUserResponse Int+algfursResponseStatus = lens _algfursResponseStatus (\ s a -> s{_algfursResponseStatus = a});++instance NFData AdminListGroupsForUserResponse where

@@ -0,0 +1,139 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Removes the specified user from the specified group.+--+--+-- Requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup+    (+    -- * Creating a Request+      adminRemoveUserFromGroup+    , AdminRemoveUserFromGroup+    -- * Request Lenses+    , arufgUserPoolId+    , arufgUsername+    , arufgGroupName++    -- * Destructuring the Response+    , adminRemoveUserFromGroupResponse+    , AdminRemoveUserFromGroupResponse+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminRemoveUserFromGroup' smart constructor.+data AdminRemoveUserFromGroup = AdminRemoveUserFromGroup'+  { _arufgUserPoolId :: !Text+  , _arufgUsername   :: !(Sensitive Text)+  , _arufgGroupName  :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminRemoveUserFromGroup' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'arufgUserPoolId' - The user pool ID for the user pool.+--+-- * 'arufgUsername' - The username for the user.+--+-- * 'arufgGroupName' - The group name.+adminRemoveUserFromGroup+    :: Text -- ^ 'arufgUserPoolId'+    -> Text -- ^ 'arufgUsername'+    -> Text -- ^ 'arufgGroupName'+    -> AdminRemoveUserFromGroup+adminRemoveUserFromGroup pUserPoolId_ pUsername_ pGroupName_ =+  AdminRemoveUserFromGroup'+  { _arufgUserPoolId = pUserPoolId_+  , _arufgUsername = _Sensitive # pUsername_+  , _arufgGroupName = pGroupName_+  }+++-- | The user pool ID for the user pool.+arufgUserPoolId :: Lens' AdminRemoveUserFromGroup Text+arufgUserPoolId = lens _arufgUserPoolId (\ s a -> s{_arufgUserPoolId = a});++-- | The username for the user.+arufgUsername :: Lens' AdminRemoveUserFromGroup Text+arufgUsername = lens _arufgUsername (\ s a -> s{_arufgUsername = a}) . _Sensitive;++-- | The group name.+arufgGroupName :: Lens' AdminRemoveUserFromGroup Text+arufgGroupName = lens _arufgGroupName (\ s a -> s{_arufgGroupName = a});++instance AWSRequest AdminRemoveUserFromGroup where+        type Rs AdminRemoveUserFromGroup =+             AdminRemoveUserFromGroupResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveNull AdminRemoveUserFromGroupResponse'++instance Hashable AdminRemoveUserFromGroup where++instance NFData AdminRemoveUserFromGroup where++instance ToHeaders AdminRemoveUserFromGroup where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminRemoveUserFromGroup where+        toJSON AdminRemoveUserFromGroup'{..}+          = object+              (catMaybes+                 [Just ("UserPoolId" .= _arufgUserPoolId),+                  Just ("Username" .= _arufgUsername),+                  Just ("GroupName" .= _arufgGroupName)])++instance ToPath AdminRemoveUserFromGroup where+        toPath = const "/"++instance ToQuery AdminRemoveUserFromGroup where+        toQuery = const mempty++-- | /See:/ 'adminRemoveUserFromGroupResponse' smart constructor.+data AdminRemoveUserFromGroupResponse =+  AdminRemoveUserFromGroupResponse'+  deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminRemoveUserFromGroupResponse' with the minimum fields required to make a request.+--+adminRemoveUserFromGroupResponse+    :: AdminRemoveUserFromGroupResponse+adminRemoveUserFromGroupResponse = AdminRemoveUserFromGroupResponse'+++instance NFData AdminRemoveUserFromGroupResponse+         where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminResetUserPassword--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -23,6 +23,8 @@ -- -- When a developer calls this API, the current password is invalidated, so it must be changed. If a user tries to sign in after the API is called, the app will get a PasswordResetRequiredException exception back and should direct the user down the flow to reset the password, which is the same as the forgot password flow. In addition, if the user pool has phone verification selected and a verified phone number exists for the user, or if email verification is selected and a verified email exists for the user, calling this API will also result in sending a message to the end user with the code to change their password. --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminResetUserPassword     (     -- * Creating a Request@@ -39,12 +41,12 @@     , aruprsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to reset a user's password as an administrator. --@@ -52,10 +54,11 @@ -- -- /See:/ 'adminResetUserPassword' smart constructor. data AdminResetUserPassword = AdminResetUserPassword'-    { _arupUserPoolId :: !Text-    , _arupUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _arupUserPoolId :: !Text+  , _arupUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminResetUserPassword' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -68,11 +71,10 @@     -> Text -- ^ 'arupUsername'     -> AdminResetUserPassword adminResetUserPassword pUserPoolId_ pUsername_ =-    AdminResetUserPassword'-    { _arupUserPoolId = pUserPoolId_-    , _arupUsername = _Sensitive # pUsername_-    }+  AdminResetUserPassword'+  {_arupUserPoolId = pUserPoolId_, _arupUsername = _Sensitive # pUsername_} + -- | The user pool ID for the user pool where you want to reset the user's password. arupUserPoolId :: Lens' AdminResetUserPassword Text arupUserPoolId = lens _arupUserPoolId (\ s a -> s{_arupUserPoolId = a});@@ -91,9 +93,9 @@                  AdminResetUserPasswordResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminResetUserPassword+instance Hashable AdminResetUserPassword where -instance NFData AdminResetUserPassword+instance NFData AdminResetUserPassword where  instance ToHeaders AdminResetUserPassword where         toHeaders@@ -124,9 +126,10 @@ -- -- /See:/ 'adminResetUserPasswordResponse' smart constructor. newtype AdminResetUserPasswordResponse = AdminResetUserPasswordResponse'-    { _aruprsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _aruprsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminResetUserPasswordResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -136,12 +139,11 @@     :: Int -- ^ 'aruprsResponseStatus'     -> AdminResetUserPasswordResponse adminResetUserPasswordResponse pResponseStatus_ =-    AdminResetUserPasswordResponse'-    { _aruprsResponseStatus = pResponseStatus_-    }+  AdminResetUserPasswordResponse' {_aruprsResponseStatus = pResponseStatus_} + -- | -- | The response status code. aruprsResponseStatus :: Lens' AdminResetUserPasswordResponse Int aruprsResponseStatus = lens _aruprsResponseStatus (\ s a -> s{_aruprsResponseStatus = a}); -instance NFData AdminResetUserPasswordResponse+instance NFData AdminResetUserPasswordResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Responds to an authentication challenge, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge     (     -- * Creating a Request@@ -44,12 +46,12 @@     , artacrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | The request to respond to the authentication challenge, as an administrator. --@@ -57,45 +59,47 @@ -- -- /See:/ 'adminRespondToAuthChallenge' smart constructor. data AdminRespondToAuthChallenge = AdminRespondToAuthChallenge'-    { _artacChallengeResponses :: !(Maybe (Map Text Text))-    , _artacSession            :: !(Maybe Text)-    , _artacUserPoolId         :: !Text-    , _artacClientId           :: !(Sensitive Text)-    , _artacChallengeName      :: !ChallengeNameType-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _artacChallengeResponses :: !(Maybe (Map Text Text))+  , _artacSession            :: !(Maybe Text)+  , _artacUserPoolId         :: !Text+  , _artacClientId           :: !(Sensitive Text)+  , _artacChallengeName      :: !ChallengeNameType+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminRespondToAuthChallenge' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'artacChallengeResponses' - The challenge response.+-- * 'artacChallengeResponses' - The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @ADMIN_NO_SRP_AUTH@ : @PASSWORD@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).      * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).  The value of the @USERNAME@ attribute must be the user's actual username, not an alias (such as email address or phone number). To make this easier, the @AdminInitiateAuth@ response includes the actual username value in the @USERNAMEUSER_ID_FOR_SRP@ attribute, even if you specified an alias in your call to @AdminInitiateAuth@ . ----- * 'artacSession' - The session.+-- * 'artacSession' - The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'artacUserPoolId' - The ID of the Amazon Cognito user pool. ----- * 'artacClientId' - The client ID.+-- * 'artacClientId' - The app client ID. ----- * 'artacChallengeName' - The name of the challenge.+-- * 'artacChallengeName' - The challenge name. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . adminRespondToAuthChallenge     :: Text -- ^ 'artacUserPoolId'     -> Text -- ^ 'artacClientId'     -> ChallengeNameType -- ^ 'artacChallengeName'     -> AdminRespondToAuthChallenge adminRespondToAuthChallenge pUserPoolId_ pClientId_ pChallengeName_ =-    AdminRespondToAuthChallenge'-    { _artacChallengeResponses = Nothing-    , _artacSession = Nothing-    , _artacUserPoolId = pUserPoolId_-    , _artacClientId = _Sensitive # pClientId_-    , _artacChallengeName = pChallengeName_-    }+  AdminRespondToAuthChallenge'+  { _artacChallengeResponses = Nothing+  , _artacSession = Nothing+  , _artacUserPoolId = pUserPoolId_+  , _artacClientId = _Sensitive # pClientId_+  , _artacChallengeName = pChallengeName_+  } --- | The challenge response.++-- | The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @ADMIN_NO_SRP_AUTH@ : @PASSWORD@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).      * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).  The value of the @USERNAME@ attribute must be the user's actual username, not an alias (such as email address or phone number). To make this easier, the @AdminInitiateAuth@ response includes the actual username value in the @USERNAMEUSER_ID_FOR_SRP@ attribute, even if you specified an alias in your call to @AdminInitiateAuth@ . artacChallengeResponses :: Lens' AdminRespondToAuthChallenge (HashMap Text Text) artacChallengeResponses = lens _artacChallengeResponses (\ s a -> s{_artacChallengeResponses = a}) . _Default . _Map; --- | The session.+-- | The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. artacSession :: Lens' AdminRespondToAuthChallenge (Maybe Text) artacSession = lens _artacSession (\ s a -> s{_artacSession = a}); @@ -103,11 +107,11 @@ artacUserPoolId :: Lens' AdminRespondToAuthChallenge Text artacUserPoolId = lens _artacUserPoolId (\ s a -> s{_artacUserPoolId = a}); --- | The client ID.+-- | The app client ID. artacClientId :: Lens' AdminRespondToAuthChallenge Text artacClientId = lens _artacClientId (\ s a -> s{_artacClientId = a}) . _Sensitive; --- | The name of the challenge.+-- | The challenge name. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . artacChallengeName :: Lens' AdminRespondToAuthChallenge ChallengeNameType artacChallengeName = lens _artacChallengeName (\ s a -> s{_artacChallengeName = a}); @@ -125,9 +129,9 @@                      <*> (x .?> "Session")                      <*> (pure (fromEnum s))) -instance Hashable AdminRespondToAuthChallenge+instance Hashable AdminRespondToAuthChallenge where -instance NFData AdminRespondToAuthChallenge+instance NFData AdminRespondToAuthChallenge where  instance ToHeaders AdminRespondToAuthChallenge where         toHeaders@@ -162,43 +166,45 @@ -- -- /See:/ 'adminRespondToAuthChallengeResponse' smart constructor. data AdminRespondToAuthChallengeResponse = AdminRespondToAuthChallengeResponse'-    { _artacrsChallengeName        :: !(Maybe ChallengeNameType)-    , _artacrsChallengeParameters  :: !(Maybe (Map Text Text))-    , _artacrsAuthenticationResult :: !(Maybe AuthenticationResultType)-    , _artacrsSession              :: !(Maybe Text)-    , _artacrsResponseStatus       :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _artacrsChallengeName        :: !(Maybe ChallengeNameType)+  , _artacrsChallengeParameters  :: !(Maybe (Map Text Text))+  , _artacrsAuthenticationResult :: !(Maybe AuthenticationResultType)+  , _artacrsSession              :: !(Maybe Text)+  , _artacrsResponseStatus       :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminRespondToAuthChallengeResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'artacrsChallengeName' - The name of the challenge.+-- * 'artacrsChallengeName' - The name of the challenge. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . ----- * 'artacrsChallengeParameters' - The challenge parameters.+-- * 'artacrsChallengeParameters' - The challenge parameters. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . -- -- * 'artacrsAuthenticationResult' - The result returned by the server in response to the authentication request. ----- * 'artacrsSession' - The session.+-- * 'artacrsSession' - The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'artacrsResponseStatus' - -- | The response status code. adminRespondToAuthChallengeResponse     :: Int -- ^ 'artacrsResponseStatus'     -> AdminRespondToAuthChallengeResponse adminRespondToAuthChallengeResponse pResponseStatus_ =-    AdminRespondToAuthChallengeResponse'-    { _artacrsChallengeName = Nothing-    , _artacrsChallengeParameters = Nothing-    , _artacrsAuthenticationResult = Nothing-    , _artacrsSession = Nothing-    , _artacrsResponseStatus = pResponseStatus_-    }+  AdminRespondToAuthChallengeResponse'+  { _artacrsChallengeName = Nothing+  , _artacrsChallengeParameters = Nothing+  , _artacrsAuthenticationResult = Nothing+  , _artacrsSession = Nothing+  , _artacrsResponseStatus = pResponseStatus_+  } --- | The name of the challenge.++-- | The name of the challenge. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . artacrsChallengeName :: Lens' AdminRespondToAuthChallengeResponse (Maybe ChallengeNameType) artacrsChallengeName = lens _artacrsChallengeName (\ s a -> s{_artacrsChallengeName = a}); --- | The challenge parameters.+-- | The challenge parameters. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> . artacrsChallengeParameters :: Lens' AdminRespondToAuthChallengeResponse (HashMap Text Text) artacrsChallengeParameters = lens _artacrsChallengeParameters (\ s a -> s{_artacrsChallengeParameters = a}) . _Default . _Map; @@ -206,7 +212,7 @@ artacrsAuthenticationResult :: Lens' AdminRespondToAuthChallengeResponse (Maybe AuthenticationResultType) artacrsAuthenticationResult = lens _artacrsAuthenticationResult (\ s a -> s{_artacrsAuthenticationResult = a}); --- | The session.+-- | The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. artacrsSession :: Lens' AdminRespondToAuthChallengeResponse (Maybe Text) artacrsSession = lens _artacrsSession (\ s a -> s{_artacrsSession = a}); @@ -215,3 +221,4 @@ artacrsResponseStatus = lens _artacrsResponseStatus (\ s a -> s{_artacrsResponseStatus = a});  instance NFData AdminRespondToAuthChallengeResponse+         where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminSetUserSettings--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Sets all the user settings for a specified user name. Works on any user. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminSetUserSettings     (     -- * Creating a Request@@ -38,12 +40,12 @@     , asusrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to set user settings as an administrator. --@@ -51,11 +53,12 @@ -- -- /See:/ 'adminSetUserSettings' smart constructor. data AdminSetUserSettings = AdminSetUserSettings'-    { _asusUserPoolId :: !Text-    , _asusUsername   :: !(Sensitive Text)-    , _asusMFAOptions :: ![MFAOptionType]-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _asusUserPoolId :: !Text+  , _asusUsername   :: !(Sensitive Text)+  , _asusMFAOptions :: ![MFAOptionType]+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminSetUserSettings' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -70,12 +73,13 @@     -> Text -- ^ 'asusUsername'     -> AdminSetUserSettings adminSetUserSettings pUserPoolId_ pUsername_ =-    AdminSetUserSettings'-    { _asusUserPoolId = pUserPoolId_-    , _asusUsername = _Sensitive # pUsername_-    , _asusMFAOptions = mempty-    }+  AdminSetUserSettings'+  { _asusUserPoolId = pUserPoolId_+  , _asusUsername = _Sensitive # pUsername_+  , _asusMFAOptions = mempty+  } + -- | The user pool ID for the user pool where you want to set the user's settings, such as MFA options. asusUserPoolId :: Lens' AdminSetUserSettings Text asusUserPoolId = lens _asusUserPoolId (\ s a -> s{_asusUserPoolId = a});@@ -98,9 +102,9 @@                  AdminSetUserSettingsResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminSetUserSettings+instance Hashable AdminSetUserSettings where -instance NFData AdminSetUserSettings+instance NFData AdminSetUserSettings where  instance ToHeaders AdminSetUserSettings where         toHeaders@@ -132,9 +136,10 @@ -- -- /See:/ 'adminSetUserSettingsResponse' smart constructor. newtype AdminSetUserSettingsResponse = AdminSetUserSettingsResponse'-    { _asusrsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _asusrsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminSetUserSettingsResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -144,12 +149,11 @@     :: Int -- ^ 'asusrsResponseStatus'     -> AdminSetUserSettingsResponse adminSetUserSettingsResponse pResponseStatus_ =-    AdminSetUserSettingsResponse'-    { _asusrsResponseStatus = pResponseStatus_-    }+  AdminSetUserSettingsResponse' {_asusrsResponseStatus = pResponseStatus_} + -- | -- | The response status code. asusrsResponseStatus :: Lens' AdminSetUserSettingsResponse Int asusrsResponseStatus = lens _asusrsResponseStatus (\ s a -> s{_asusrsResponseStatus = a}); -instance NFData AdminSetUserSettingsResponse+instance NFData AdminSetUserSettingsResponse where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Updates the device status as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus     (     -- * Creating a Request@@ -39,12 +41,12 @@     , audsrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | The request to update the device status, as an administrator. --@@ -52,19 +54,20 @@ -- -- /See:/ 'adminUpdateDeviceStatus' smart constructor. data AdminUpdateDeviceStatus = AdminUpdateDeviceStatus'-    { _audsDeviceRememberedStatus :: !(Maybe DeviceRememberedStatusType)-    , _audsUserPoolId             :: !Text-    , _audsUsername               :: !(Sensitive Text)-    , _audsDeviceKey              :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _audsDeviceRememberedStatus :: !(Maybe DeviceRememberedStatusType)+  , _audsUserPoolId             :: !Text+  , _audsUsername               :: !(Sensitive Text)+  , _audsDeviceKey              :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUpdateDeviceStatus' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: -- -- * 'audsDeviceRememberedStatus' - The status indicating whether a device has been remembered or not. ----- * 'audsUserPoolId' - The user pool ID>+-- * 'audsUserPoolId' - The user pool ID. -- -- * 'audsUsername' - The user name. --@@ -75,18 +78,19 @@     -> Text -- ^ 'audsDeviceKey'     -> AdminUpdateDeviceStatus adminUpdateDeviceStatus pUserPoolId_ pUsername_ pDeviceKey_ =-    AdminUpdateDeviceStatus'-    { _audsDeviceRememberedStatus = Nothing-    , _audsUserPoolId = pUserPoolId_-    , _audsUsername = _Sensitive # pUsername_-    , _audsDeviceKey = pDeviceKey_-    }+  AdminUpdateDeviceStatus'+  { _audsDeviceRememberedStatus = Nothing+  , _audsUserPoolId = pUserPoolId_+  , _audsUsername = _Sensitive # pUsername_+  , _audsDeviceKey = pDeviceKey_+  } + -- | The status indicating whether a device has been remembered or not. audsDeviceRememberedStatus :: Lens' AdminUpdateDeviceStatus (Maybe DeviceRememberedStatusType) audsDeviceRememberedStatus = lens _audsDeviceRememberedStatus (\ s a -> s{_audsDeviceRememberedStatus = a}); --- | The user pool ID>+-- | The user pool ID. audsUserPoolId :: Lens' AdminUpdateDeviceStatus Text audsUserPoolId = lens _audsUserPoolId (\ s a -> s{_audsUserPoolId = a}); @@ -108,9 +112,9 @@                  AdminUpdateDeviceStatusResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminUpdateDeviceStatus+instance Hashable AdminUpdateDeviceStatus where -instance NFData AdminUpdateDeviceStatus+instance NFData AdminUpdateDeviceStatus where  instance ToHeaders AdminUpdateDeviceStatus where         toHeaders@@ -144,9 +148,10 @@ -- -- /See:/ 'adminUpdateDeviceStatusResponse' smart constructor. newtype AdminUpdateDeviceStatusResponse = AdminUpdateDeviceStatusResponse'-    { _audsrsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _audsrsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUpdateDeviceStatusResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -156,12 +161,11 @@     :: Int -- ^ 'audsrsResponseStatus'     -> AdminUpdateDeviceStatusResponse adminUpdateDeviceStatusResponse pResponseStatus_ =-    AdminUpdateDeviceStatusResponse'-    { _audsrsResponseStatus = pResponseStatus_-    }+  AdminUpdateDeviceStatusResponse' {_audsrsResponseStatus = pResponseStatus_} + -- | -- | The response status code. audsrsResponseStatus :: Lens' AdminUpdateDeviceStatusResponse Int audsrsResponseStatus = lens _audsrsResponseStatus (\ s a -> s{_audsrsResponseStatus = a}); -instance NFData AdminUpdateDeviceStatusResponse+instance NFData AdminUpdateDeviceStatusResponse where

@@ -12,15 +12,21 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Updates the specified user's attributes, including developer attributes, as an administrator. Works on any user. -- --+-- For custom attributes, you must prepend the @custom:@ prefix to the attribute name.+--+-- In addition to updating user attributes, this API can also be used to mark phone and email as verified.+--+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes     (     -- * Creating a Request@@ -38,12 +44,12 @@     , auuarsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to update the user's attributes as an administrator. --@@ -51,11 +57,12 @@ -- -- /See:/ 'adminUpdateUserAttributes' smart constructor. data AdminUpdateUserAttributes = AdminUpdateUserAttributes'-    { _auuaUserPoolId     :: !Text-    , _auuaUsername       :: !(Sensitive Text)-    , _auuaUserAttributes :: ![AttributeType]-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _auuaUserPoolId     :: !Text+  , _auuaUsername       :: !(Sensitive Text)+  , _auuaUserAttributes :: ![AttributeType]+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUpdateUserAttributes' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -64,18 +71,19 @@ -- -- * 'auuaUsername' - The user name of the user for whom you want to update user attributes. ----- * 'auuaUserAttributes' - An array of name-value pairs representing user attributes.+-- * 'auuaUserAttributes' - An array of name-value pairs representing user attributes. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. adminUpdateUserAttributes     :: Text -- ^ 'auuaUserPoolId'     -> Text -- ^ 'auuaUsername'     -> AdminUpdateUserAttributes adminUpdateUserAttributes pUserPoolId_ pUsername_ =-    AdminUpdateUserAttributes'-    { _auuaUserPoolId = pUserPoolId_-    , _auuaUsername = _Sensitive # pUsername_-    , _auuaUserAttributes = mempty-    }+  AdminUpdateUserAttributes'+  { _auuaUserPoolId = pUserPoolId_+  , _auuaUsername = _Sensitive # pUsername_+  , _auuaUserAttributes = mempty+  } + -- | The user pool ID for the user pool where you want to update user attributes. auuaUserPoolId :: Lens' AdminUpdateUserAttributes Text auuaUserPoolId = lens _auuaUserPoolId (\ s a -> s{_auuaUserPoolId = a});@@ -84,7 +92,7 @@ auuaUsername :: Lens' AdminUpdateUserAttributes Text auuaUsername = lens _auuaUsername (\ s a -> s{_auuaUsername = a}) . _Sensitive; --- | An array of name-value pairs representing user attributes.+-- | An array of name-value pairs representing user attributes. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. auuaUserAttributes :: Lens' AdminUpdateUserAttributes [AttributeType] auuaUserAttributes = lens _auuaUserAttributes (\ s a -> s{_auuaUserAttributes = a}) . _Coerce; @@ -98,9 +106,9 @@                  AdminUpdateUserAttributesResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminUpdateUserAttributes+instance Hashable AdminUpdateUserAttributes where -instance NFData AdminUpdateUserAttributes+instance NFData AdminUpdateUserAttributes where  instance ToHeaders AdminUpdateUserAttributes where         toHeaders@@ -132,9 +140,10 @@ -- -- /See:/ 'adminUpdateUserAttributesResponse' smart constructor. newtype AdminUpdateUserAttributesResponse = AdminUpdateUserAttributesResponse'-    { _auuarsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _auuarsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUpdateUserAttributesResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -144,12 +153,12 @@     :: Int -- ^ 'auuarsResponseStatus'     -> AdminUpdateUserAttributesResponse adminUpdateUserAttributesResponse pResponseStatus_ =-    AdminUpdateUserAttributesResponse'-    { _auuarsResponseStatus = pResponseStatus_-    }+  AdminUpdateUserAttributesResponse' {_auuarsResponseStatus = pResponseStatus_} + -- | -- | The response status code. auuarsResponseStatus :: Lens' AdminUpdateUserAttributesResponse Int auuarsResponseStatus = lens _auuarsResponseStatus (\ s a -> s{_auuarsResponseStatus = a});  instance NFData AdminUpdateUserAttributesResponse+         where

@@ -12,15 +12,17 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) -- -- Signs out users from all devices, as an administrator. -- --+-- Requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut     (     -- * Creating a Request@@ -37,12 +39,12 @@     , augsorsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | The request to sign out of all devices, as an administrator. --@@ -50,10 +52,11 @@ -- -- /See:/ 'adminUserGlobalSignOut' smart constructor. data AdminUserGlobalSignOut = AdminUserGlobalSignOut'-    { _augsoUserPoolId :: !Text-    , _augsoUsername   :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _augsoUserPoolId :: !Text+  , _augsoUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUserGlobalSignOut' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -66,11 +69,10 @@     -> Text -- ^ 'augsoUsername'     -> AdminUserGlobalSignOut adminUserGlobalSignOut pUserPoolId_ pUsername_ =-    AdminUserGlobalSignOut'-    { _augsoUserPoolId = pUserPoolId_-    , _augsoUsername = _Sensitive # pUsername_-    }+  AdminUserGlobalSignOut'+  {_augsoUserPoolId = pUserPoolId_, _augsoUsername = _Sensitive # pUsername_} + -- | The user pool ID. augsoUserPoolId :: Lens' AdminUserGlobalSignOut Text augsoUserPoolId = lens _augsoUserPoolId (\ s a -> s{_augsoUserPoolId = a});@@ -89,9 +91,9 @@                  AdminUserGlobalSignOutResponse' <$>                    (pure (fromEnum s))) -instance Hashable AdminUserGlobalSignOut+instance Hashable AdminUserGlobalSignOut where -instance NFData AdminUserGlobalSignOut+instance NFData AdminUserGlobalSignOut where  instance ToHeaders AdminUserGlobalSignOut where         toHeaders@@ -122,9 +124,10 @@ -- -- /See:/ 'adminUserGlobalSignOutResponse' smart constructor. newtype AdminUserGlobalSignOutResponse = AdminUserGlobalSignOutResponse'-    { _augsorsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _augsorsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'AdminUserGlobalSignOutResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -134,12 +137,11 @@     :: Int -- ^ 'augsorsResponseStatus'     -> AdminUserGlobalSignOutResponse adminUserGlobalSignOutResponse pResponseStatus_ =-    AdminUserGlobalSignOutResponse'-    { _augsorsResponseStatus = pResponseStatus_-    }+  AdminUserGlobalSignOutResponse' {_augsorsResponseStatus = pResponseStatus_} + -- | -- | The response status code. augsorsResponseStatus :: Lens' AdminUserGlobalSignOutResponse Int augsorsResponseStatus = lens _augsorsResponseStatus (\ s a -> s{_augsorsResponseStatus = a}); -instance NFData AdminUserGlobalSignOutResponse+instance NFData AdminUserGlobalSignOutResponse where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ChangePassword--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -27,9 +27,9 @@       changePassword     , ChangePassword     -- * Request Lenses-    , cpAccessToken     , cpPreviousPassword     , cpProposedPassword+    , cpAccessToken      -- * Destructuring the Response     , changePasswordResponse@@ -38,12 +38,12 @@     , cprsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to change a user password. --@@ -51,34 +51,33 @@ -- -- /See:/ 'changePassword' smart constructor. data ChangePassword = ChangePassword'-    { _cpAccessToken      :: !(Maybe (Sensitive Text))-    , _cpPreviousPassword :: !(Sensitive Text)-    , _cpProposedPassword :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cpPreviousPassword :: !(Sensitive Text)+  , _cpProposedPassword :: !(Sensitive Text)+  , _cpAccessToken      :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'ChangePassword' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'cpAccessToken' - The access token in the change password request.--- -- * 'cpPreviousPassword' - The old password in the change password request. -- -- * 'cpProposedPassword' - The new password in the change password request.+--+-- * 'cpAccessToken' - The access token in the change password request. changePassword     :: Text -- ^ 'cpPreviousPassword'     -> Text -- ^ 'cpProposedPassword'+    -> Text -- ^ 'cpAccessToken'     -> ChangePassword-changePassword pPreviousPassword_ pProposedPassword_ =-    ChangePassword'-    { _cpAccessToken = Nothing-    , _cpPreviousPassword = _Sensitive # pPreviousPassword_-    , _cpProposedPassword = _Sensitive # pProposedPassword_-    }+changePassword pPreviousPassword_ pProposedPassword_ pAccessToken_ =+  ChangePassword'+  { _cpPreviousPassword = _Sensitive # pPreviousPassword_+  , _cpProposedPassword = _Sensitive # pProposedPassword_+  , _cpAccessToken = _Sensitive # pAccessToken_+  } --- | The access token in the change password request.-cpAccessToken :: Lens' ChangePassword (Maybe Text)-cpAccessToken = lens _cpAccessToken (\ s a -> s{_cpAccessToken = a}) . mapping _Sensitive;  -- | The old password in the change password request. cpPreviousPassword :: Lens' ChangePassword Text@@ -88,6 +87,10 @@ cpProposedPassword :: Lens' ChangePassword Text cpProposedPassword = lens _cpProposedPassword (\ s a -> s{_cpProposedPassword = a}) . _Sensitive; +-- | The access token in the change password request.+cpAccessToken :: Lens' ChangePassword Text+cpAccessToken = lens _cpAccessToken (\ s a -> s{_cpAccessToken = a}) . _Sensitive;+ instance AWSRequest ChangePassword where         type Rs ChangePassword = ChangePasswordResponse         request = postJSON cognitoIdentityProvider@@ -96,9 +99,9 @@               (\ s h x ->                  ChangePasswordResponse' <$> (pure (fromEnum s))) -instance Hashable ChangePassword+instance Hashable ChangePassword where -instance NFData ChangePassword+instance NFData ChangePassword where  instance ToHeaders ChangePassword where         toHeaders@@ -114,9 +117,9 @@         toJSON ChangePassword'{..}           = object               (catMaybes-                 [("AccessToken" .=) <$> _cpAccessToken,-                  Just ("PreviousPassword" .= _cpPreviousPassword),-                  Just ("ProposedPassword" .= _cpProposedPassword)])+                 [Just ("PreviousPassword" .= _cpPreviousPassword),+                  Just ("ProposedPassword" .= _cpProposedPassword),+                  Just ("AccessToken" .= _cpAccessToken)])  instance ToPath ChangePassword where         toPath = const "/"@@ -130,9 +133,10 @@ -- -- /See:/ 'changePasswordResponse' smart constructor. newtype ChangePasswordResponse = ChangePasswordResponse'-    { _cprsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cprsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'ChangePasswordResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -142,12 +146,11 @@     :: Int -- ^ 'cprsResponseStatus'     -> ChangePasswordResponse changePasswordResponse pResponseStatus_ =-    ChangePasswordResponse'-    { _cprsResponseStatus = pResponseStatus_-    }+  ChangePasswordResponse' {_cprsResponseStatus = pResponseStatus_} + -- | -- | The response status code. cprsResponseStatus :: Lens' ChangePasswordResponse Int cprsResponseStatus = lens _cprsResponseStatus (\ s a -> s{_cprsResponseStatus = a}); -instance NFData ChangePasswordResponse+instance NFData ChangePasswordResponse where

@@ -12,13 +12,13 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmDevice--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Confirms tracking of the device. This API call is the call that beings device tracking.+-- Confirms tracking of the device. This API call is the call that begins device tracking. -- -- module Network.AWS.CognitoIdentityProvider.ConfirmDevice@@ -40,12 +40,12 @@     , cdrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Confirms the device request. --@@ -53,12 +53,13 @@ -- -- /See:/ 'confirmDevice' smart constructor. data ConfirmDevice = ConfirmDevice'-    { _cdDeviceSecretVerifierConfig :: !(Maybe DeviceSecretVerifierConfigType)-    , _cdDeviceName                 :: !(Maybe Text)-    , _cdAccessToken                :: !(Sensitive Text)-    , _cdDeviceKey                  :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cdDeviceSecretVerifierConfig :: !(Maybe DeviceSecretVerifierConfigType)+  , _cdDeviceName                 :: !(Maybe Text)+  , _cdAccessToken                :: !(Sensitive Text)+  , _cdDeviceKey                  :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmDevice' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -75,13 +76,14 @@     -> Text -- ^ 'cdDeviceKey'     -> ConfirmDevice confirmDevice pAccessToken_ pDeviceKey_ =-    ConfirmDevice'-    { _cdDeviceSecretVerifierConfig = Nothing-    , _cdDeviceName = Nothing-    , _cdAccessToken = _Sensitive # pAccessToken_-    , _cdDeviceKey = pDeviceKey_-    }+  ConfirmDevice'+  { _cdDeviceSecretVerifierConfig = Nothing+  , _cdDeviceName = Nothing+  , _cdAccessToken = _Sensitive # pAccessToken_+  , _cdDeviceKey = pDeviceKey_+  } + -- | The configuration of the device secret verifier. cdDeviceSecretVerifierConfig :: Lens' ConfirmDevice (Maybe DeviceSecretVerifierConfigType) cdDeviceSecretVerifierConfig = lens _cdDeviceSecretVerifierConfig (\ s a -> s{_cdDeviceSecretVerifierConfig = a});@@ -108,9 +110,9 @@                    (x .?> "UserConfirmationNecessary") <*>                      (pure (fromEnum s))) -instance Hashable ConfirmDevice+instance Hashable ConfirmDevice where -instance NFData ConfirmDevice+instance NFData ConfirmDevice where  instance ToHeaders ConfirmDevice where         toHeaders@@ -144,10 +146,11 @@ -- -- /See:/ 'confirmDeviceResponse' smart constructor. data ConfirmDeviceResponse = ConfirmDeviceResponse'-    { _cdrsUserConfirmationNecessary :: !(Maybe Bool)-    , _cdrsResponseStatus            :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cdrsUserConfirmationNecessary :: !(Maybe Bool)+  , _cdrsResponseStatus            :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmDeviceResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -159,11 +162,12 @@     :: Int -- ^ 'cdrsResponseStatus'     -> ConfirmDeviceResponse confirmDeviceResponse pResponseStatus_ =-    ConfirmDeviceResponse'-    { _cdrsUserConfirmationNecessary = Nothing-    , _cdrsResponseStatus = pResponseStatus_-    }+  ConfirmDeviceResponse'+  { _cdrsUserConfirmationNecessary = Nothing+  , _cdrsResponseStatus = pResponseStatus_+  } + -- | Indicates whether the user confirmation is necessary to confirm the device response. cdrsUserConfirmationNecessary :: Lens' ConfirmDeviceResponse (Maybe Bool) cdrsUserConfirmationNecessary = lens _cdrsUserConfirmationNecessary (\ s a -> s{_cdrsUserConfirmationNecessary = a});@@ -172,4 +176,4 @@ cdrsResponseStatus :: Lens' ConfirmDeviceResponse Int cdrsResponseStatus = lens _cdrsResponseStatus (\ s a -> s{_cdrsResponseStatus = a}); -instance NFData ConfirmDeviceResponse+instance NFData ConfirmDeviceResponse where

@@ -12,13 +12,13 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Allows a user to enter a code provided when they reset their password to update their password.+-- Allows a user to enter a confirmation code to reset a forgotten password. -- -- module Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword@@ -40,12 +40,12 @@     , cfprsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | The request representing the confirmation for a password reset. --@@ -53,26 +53,27 @@ -- -- /See:/ 'confirmForgotPassword' smart constructor. data ConfirmForgotPassword = ConfirmForgotPassword'-    { _cfpSecretHash       :: !(Maybe (Sensitive Text))-    , _cfpClientId         :: !(Sensitive Text)-    , _cfpUsername         :: !(Sensitive Text)-    , _cfpConfirmationCode :: !Text-    , _cfpPassword         :: !(Sensitive Text)-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cfpSecretHash       :: !(Maybe (Sensitive Text))+  , _cfpClientId         :: !(Sensitive Text)+  , _cfpUsername         :: !(Sensitive Text)+  , _cfpConfirmationCode :: !Text+  , _cfpPassword         :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmForgotPassword' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: -- -- * 'cfpSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. ----- * 'cfpClientId' - The ID of the client associated with the user pool.+-- * 'cfpClientId' - The app client ID of the app associated with the user pool. -- -- * 'cfpUsername' - The user name of the user for whom you want to enter a code to retrieve a forgotten password. ----- * 'cfpConfirmationCode' - The confirmation code sent by a user's request to retrieve a forgotten password.+-- * 'cfpConfirmationCode' - The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see <API_ForgotPassword.html ForgotPassword> ----- * 'cfpPassword' - The password sent by sent by a user's request to retrieve a forgotten password.+-- * 'cfpPassword' - The password sent by a user's request to retrieve a forgotten password. confirmForgotPassword     :: Text -- ^ 'cfpClientId'     -> Text -- ^ 'cfpUsername'@@ -80,19 +81,20 @@     -> Text -- ^ 'cfpPassword'     -> ConfirmForgotPassword confirmForgotPassword pClientId_ pUsername_ pConfirmationCode_ pPassword_ =-    ConfirmForgotPassword'-    { _cfpSecretHash = Nothing-    , _cfpClientId = _Sensitive # pClientId_-    , _cfpUsername = _Sensitive # pUsername_-    , _cfpConfirmationCode = pConfirmationCode_-    , _cfpPassword = _Sensitive # pPassword_-    }+  ConfirmForgotPassword'+  { _cfpSecretHash = Nothing+  , _cfpClientId = _Sensitive # pClientId_+  , _cfpUsername = _Sensitive # pUsername_+  , _cfpConfirmationCode = pConfirmationCode_+  , _cfpPassword = _Sensitive # pPassword_+  } + -- | A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. cfpSecretHash :: Lens' ConfirmForgotPassword (Maybe Text) cfpSecretHash = lens _cfpSecretHash (\ s a -> s{_cfpSecretHash = a}) . mapping _Sensitive; --- | The ID of the client associated with the user pool.+-- | The app client ID of the app associated with the user pool. cfpClientId :: Lens' ConfirmForgotPassword Text cfpClientId = lens _cfpClientId (\ s a -> s{_cfpClientId = a}) . _Sensitive; @@ -100,11 +102,11 @@ cfpUsername :: Lens' ConfirmForgotPassword Text cfpUsername = lens _cfpUsername (\ s a -> s{_cfpUsername = a}) . _Sensitive; --- | The confirmation code sent by a user's request to retrieve a forgotten password.+-- | The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see <API_ForgotPassword.html ForgotPassword> cfpConfirmationCode :: Lens' ConfirmForgotPassword Text cfpConfirmationCode = lens _cfpConfirmationCode (\ s a -> s{_cfpConfirmationCode = a}); --- | The password sent by sent by a user's request to retrieve a forgotten password.+-- | The password sent by a user's request to retrieve a forgotten password. cfpPassword :: Lens' ConfirmForgotPassword Text cfpPassword = lens _cfpPassword (\ s a -> s{_cfpPassword = a}) . _Sensitive; @@ -118,9 +120,9 @@                  ConfirmForgotPasswordResponse' <$>                    (pure (fromEnum s))) -instance Hashable ConfirmForgotPassword+instance Hashable ConfirmForgotPassword where -instance NFData ConfirmForgotPassword+instance NFData ConfirmForgotPassword where  instance ToHeaders ConfirmForgotPassword where         toHeaders@@ -154,9 +156,10 @@ -- -- /See:/ 'confirmForgotPasswordResponse' smart constructor. newtype ConfirmForgotPasswordResponse = ConfirmForgotPasswordResponse'-    { _cfprsResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cfprsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmForgotPasswordResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -166,12 +169,11 @@     :: Int -- ^ 'cfprsResponseStatus'     -> ConfirmForgotPasswordResponse confirmForgotPasswordResponse pResponseStatus_ =-    ConfirmForgotPasswordResponse'-    { _cfprsResponseStatus = pResponseStatus_-    }+  ConfirmForgotPasswordResponse' {_cfprsResponseStatus = pResponseStatus_} + -- | -- | The response status code. cfprsResponseStatus :: Lens' ConfirmForgotPasswordResponse Int cfprsResponseStatus = lens _cfprsResponseStatus (\ s a -> s{_cfprsResponseStatus = a}); -instance NFData ConfirmForgotPasswordResponse+instance NFData ConfirmForgotPasswordResponse where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmSignUp--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -40,12 +40,12 @@     , csursResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to confirm registration of a user. --@@ -53,22 +53,23 @@ -- -- /See:/ 'confirmSignUp' smart constructor. data ConfirmSignUp = ConfirmSignUp'-    { _csuForceAliasCreation :: !(Maybe Bool)-    , _csuSecretHash         :: !(Maybe (Sensitive Text))-    , _csuClientId           :: !(Sensitive Text)-    , _csuUsername           :: !(Sensitive Text)-    , _csuConfirmationCode   :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _csuForceAliasCreation :: !(Maybe Bool)+  , _csuSecretHash         :: !(Maybe (Sensitive Text))+  , _csuClientId           :: !(Sensitive Text)+  , _csuUsername           :: !(Sensitive Text)+  , _csuConfirmationCode   :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmSignUp' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'csuForceAliasCreation' - Boolean to be specified to force user confirmation irrespective of existing alias. By default set to False. If this parameter is set to True and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to False, the API will throw an __AliasExistsException__ error.+-- * 'csuForceAliasCreation' - Boolean to be specified to force user confirmation irrespective of existing alias. By default set to @False@ . If this parameter is set to @True@ and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to @False@ , the API will throw an __AliasExistsException__ error. -- -- * 'csuSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. ----- * 'csuClientId' - The ID of the client associated with the user pool.+-- * 'csuClientId' - The ID of the app client associated with the user pool. -- -- * 'csuUsername' - The user name of the user whose registration you wish to confirm. --@@ -79,15 +80,16 @@     -> Text -- ^ 'csuConfirmationCode'     -> ConfirmSignUp confirmSignUp pClientId_ pUsername_ pConfirmationCode_ =-    ConfirmSignUp'-    { _csuForceAliasCreation = Nothing-    , _csuSecretHash = Nothing-    , _csuClientId = _Sensitive # pClientId_-    , _csuUsername = _Sensitive # pUsername_-    , _csuConfirmationCode = pConfirmationCode_-    }+  ConfirmSignUp'+  { _csuForceAliasCreation = Nothing+  , _csuSecretHash = Nothing+  , _csuClientId = _Sensitive # pClientId_+  , _csuUsername = _Sensitive # pUsername_+  , _csuConfirmationCode = pConfirmationCode_+  } --- | Boolean to be specified to force user confirmation irrespective of existing alias. By default set to False. If this parameter is set to True and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to False, the API will throw an __AliasExistsException__ error.++-- | Boolean to be specified to force user confirmation irrespective of existing alias. By default set to @False@ . If this parameter is set to @True@ and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to @False@ , the API will throw an __AliasExistsException__ error. csuForceAliasCreation :: Lens' ConfirmSignUp (Maybe Bool) csuForceAliasCreation = lens _csuForceAliasCreation (\ s a -> s{_csuForceAliasCreation = a}); @@ -95,7 +97,7 @@ csuSecretHash :: Lens' ConfirmSignUp (Maybe Text) csuSecretHash = lens _csuSecretHash (\ s a -> s{_csuSecretHash = a}) . mapping _Sensitive; --- | The ID of the client associated with the user pool.+-- | The ID of the app client associated with the user pool. csuClientId :: Lens' ConfirmSignUp Text csuClientId = lens _csuClientId (\ s a -> s{_csuClientId = a}) . _Sensitive; @@ -115,9 +117,9 @@               (\ s h x ->                  ConfirmSignUpResponse' <$> (pure (fromEnum s))) -instance Hashable ConfirmSignUp+instance Hashable ConfirmSignUp where -instance NFData ConfirmSignUp+instance NFData ConfirmSignUp where  instance ToHeaders ConfirmSignUp where         toHeaders@@ -152,9 +154,10 @@ -- -- /See:/ 'confirmSignUpResponse' smart constructor. newtype ConfirmSignUpResponse = ConfirmSignUpResponse'-    { _csursResponseStatus :: Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _csursResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'ConfirmSignUpResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -164,12 +167,11 @@     :: Int -- ^ 'csursResponseStatus'     -> ConfirmSignUpResponse confirmSignUpResponse pResponseStatus_ =-    ConfirmSignUpResponse'-    { _csursResponseStatus = pResponseStatus_-    }+  ConfirmSignUpResponse' {_csursResponseStatus = pResponseStatus_} + -- | -- | The response status code. csursResponseStatus :: Lens' ConfirmSignUpResponse Int csursResponseStatus = lens _csursResponseStatus (\ s a -> s{_csursResponseStatus = a}); -instance NFData ConfirmSignUpResponse+instance NFData ConfirmSignUpResponse where

@@ -0,0 +1,179 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.CreateGroup+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new group in the specified user pool.+--+--+-- Requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.CreateGroup+    (+    -- * Creating a Request+      createGroup+    , CreateGroup+    -- * Request Lenses+    , cgPrecedence+    , cgDescription+    , cgRoleARN+    , cgGroupName+    , cgUserPoolId++    -- * Destructuring the Response+    , createGroupResponse+    , CreateGroupResponse+    -- * Response Lenses+    , cgrsGroup+    , cgrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'createGroup' smart constructor.+data CreateGroup = CreateGroup'+  { _cgPrecedence  :: !(Maybe Nat)+  , _cgDescription :: !(Maybe Text)+  , _cgRoleARN     :: !(Maybe Text)+  , _cgGroupName   :: !Text+  , _cgUserPoolId  :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateGroup' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'cgPrecedence' - A nonnegative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower @Precedence@ values take precedence over groups with higher or null @Precedence@ values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN will be used in the @cognito:roles@ and @cognito:preferred_role@ claims in the user's tokens. Two groups can have the same @Precedence@ value. If this happens, neither group takes precedence over the other. If two groups with the same @Precedence@ have the same role ARN, that role is used in the @cognito:preferred_role@ claim in tokens for users in each group. If the two groups have different role ARNs, the @cognito:preferred_role@ claim is not set in users' tokens. The default @Precedence@ value is null.+--+-- * 'cgDescription' - A string containing the description of the group.+--+-- * 'cgRoleARN' - The role ARN for the group.+--+-- * 'cgGroupName' - The name of the group. Must be unique.+--+-- * 'cgUserPoolId' - The user pool ID for the user pool.+createGroup+    :: Text -- ^ 'cgGroupName'+    -> Text -- ^ 'cgUserPoolId'+    -> CreateGroup+createGroup pGroupName_ pUserPoolId_ =+  CreateGroup'+  { _cgPrecedence = Nothing+  , _cgDescription = Nothing+  , _cgRoleARN = Nothing+  , _cgGroupName = pGroupName_+  , _cgUserPoolId = pUserPoolId_+  }+++-- | A nonnegative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower @Precedence@ values take precedence over groups with higher or null @Precedence@ values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN will be used in the @cognito:roles@ and @cognito:preferred_role@ claims in the user's tokens. Two groups can have the same @Precedence@ value. If this happens, neither group takes precedence over the other. If two groups with the same @Precedence@ have the same role ARN, that role is used in the @cognito:preferred_role@ claim in tokens for users in each group. If the two groups have different role ARNs, the @cognito:preferred_role@ claim is not set in users' tokens. The default @Precedence@ value is null.+cgPrecedence :: Lens' CreateGroup (Maybe Natural)+cgPrecedence = lens _cgPrecedence (\ s a -> s{_cgPrecedence = a}) . mapping _Nat;++-- | A string containing the description of the group.+cgDescription :: Lens' CreateGroup (Maybe Text)+cgDescription = lens _cgDescription (\ s a -> s{_cgDescription = a});++-- | The role ARN for the group.+cgRoleARN :: Lens' CreateGroup (Maybe Text)+cgRoleARN = lens _cgRoleARN (\ s a -> s{_cgRoleARN = a});++-- | The name of the group. Must be unique.+cgGroupName :: Lens' CreateGroup Text+cgGroupName = lens _cgGroupName (\ s a -> s{_cgGroupName = a});++-- | The user pool ID for the user pool.+cgUserPoolId :: Lens' CreateGroup Text+cgUserPoolId = lens _cgUserPoolId (\ s a -> s{_cgUserPoolId = a});++instance AWSRequest CreateGroup where+        type Rs CreateGroup = CreateGroupResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 CreateGroupResponse' <$>+                   (x .?> "Group") <*> (pure (fromEnum s)))++instance Hashable CreateGroup where++instance NFData CreateGroup where++instance ToHeaders CreateGroup where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.CreateGroup" ::+                       ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON CreateGroup where+        toJSON CreateGroup'{..}+          = object+              (catMaybes+                 [("Precedence" .=) <$> _cgPrecedence,+                  ("Description" .=) <$> _cgDescription,+                  ("RoleArn" .=) <$> _cgRoleARN,+                  Just ("GroupName" .= _cgGroupName),+                  Just ("UserPoolId" .= _cgUserPoolId)])++instance ToPath CreateGroup where+        toPath = const "/"++instance ToQuery CreateGroup where+        toQuery = const mempty++-- | /See:/ 'createGroupResponse' smart constructor.+data CreateGroupResponse = CreateGroupResponse'+  { _cgrsGroup          :: !(Maybe GroupType)+  , _cgrsResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateGroupResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'cgrsGroup' - The group object for the group.+--+-- * 'cgrsResponseStatus' - -- | The response status code.+createGroupResponse+    :: Int -- ^ 'cgrsResponseStatus'+    -> CreateGroupResponse+createGroupResponse pResponseStatus_ =+  CreateGroupResponse'+  {_cgrsGroup = Nothing, _cgrsResponseStatus = pResponseStatus_}+++-- | The group object for the group.+cgrsGroup :: Lens' CreateGroupResponse (Maybe GroupType)+cgrsGroup = lens _cgrsGroup (\ s a -> s{_cgrsGroup = a});++-- | -- | The response status code.+cgrsResponseStatus :: Lens' CreateGroupResponse Int+cgrsResponseStatus = lens _cgrsResponseStatus (\ s a -> s{_cgrsResponseStatus = a});++instance NFData CreateGroupResponse where

@@ -0,0 +1,192 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.CreateIdentityProvider+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates an identity provider for a user pool.+--+--+module Network.AWS.CognitoIdentityProvider.CreateIdentityProvider+    (+    -- * Creating a Request+      createIdentityProvider+    , CreateIdentityProvider+    -- * Request Lenses+    , cipIdpIdentifiers+    , cipAttributeMapping+    , cipUserPoolId+    , cipProviderName+    , cipProviderType+    , cipProviderDetails++    -- * Destructuring the Response+    , createIdentityProviderResponse+    , CreateIdentityProviderResponse+    -- * Response Lenses+    , ciprsResponseStatus+    , ciprsIdentityProvider+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'createIdentityProvider' smart constructor.+data CreateIdentityProvider = CreateIdentityProvider'+  { _cipIdpIdentifiers   :: !(Maybe [Text])+  , _cipAttributeMapping :: !(Maybe (Map Text Text))+  , _cipUserPoolId       :: !Text+  , _cipProviderName     :: !Text+  , _cipProviderType     :: !IdentityProviderTypeType+  , _cipProviderDetails  :: !(Map Text Text)+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateIdentityProvider' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'cipIdpIdentifiers' - A list of identity provider identifiers.+--+-- * 'cipAttributeMapping' - A mapping of identity provider attributes to standard and custom user pool attributes.+--+-- * 'cipUserPoolId' - The user pool ID.+--+-- * 'cipProviderName' - The identity provider name.+--+-- * 'cipProviderType' - The identity provider type.+--+-- * 'cipProviderDetails' - The identity provider details, such as @MetadataURL@ and @MetadataFile@ .+createIdentityProvider+    :: Text -- ^ 'cipUserPoolId'+    -> Text -- ^ 'cipProviderName'+    -> IdentityProviderTypeType -- ^ 'cipProviderType'+    -> CreateIdentityProvider+createIdentityProvider pUserPoolId_ pProviderName_ pProviderType_ =+  CreateIdentityProvider'+  { _cipIdpIdentifiers = Nothing+  , _cipAttributeMapping = Nothing+  , _cipUserPoolId = pUserPoolId_+  , _cipProviderName = pProviderName_+  , _cipProviderType = pProviderType_+  , _cipProviderDetails = mempty+  }+++-- | A list of identity provider identifiers.+cipIdpIdentifiers :: Lens' CreateIdentityProvider [Text]+cipIdpIdentifiers = lens _cipIdpIdentifiers (\ s a -> s{_cipIdpIdentifiers = a}) . _Default . _Coerce;++-- | A mapping of identity provider attributes to standard and custom user pool attributes.+cipAttributeMapping :: Lens' CreateIdentityProvider (HashMap Text Text)+cipAttributeMapping = lens _cipAttributeMapping (\ s a -> s{_cipAttributeMapping = a}) . _Default . _Map;++-- | The user pool ID.+cipUserPoolId :: Lens' CreateIdentityProvider Text+cipUserPoolId = lens _cipUserPoolId (\ s a -> s{_cipUserPoolId = a});++-- | The identity provider name.+cipProviderName :: Lens' CreateIdentityProvider Text+cipProviderName = lens _cipProviderName (\ s a -> s{_cipProviderName = a});++-- | The identity provider type.+cipProviderType :: Lens' CreateIdentityProvider IdentityProviderTypeType+cipProviderType = lens _cipProviderType (\ s a -> s{_cipProviderType = a});++-- | The identity provider details, such as @MetadataURL@ and @MetadataFile@ .+cipProviderDetails :: Lens' CreateIdentityProvider (HashMap Text Text)+cipProviderDetails = lens _cipProviderDetails (\ s a -> s{_cipProviderDetails = a}) . _Map;++instance AWSRequest CreateIdentityProvider where+        type Rs CreateIdentityProvider =+             CreateIdentityProviderResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 CreateIdentityProviderResponse' <$>+                   (pure (fromEnum s)) <*> (x .:> "IdentityProvider"))++instance Hashable CreateIdentityProvider where++instance NFData CreateIdentityProvider where++instance ToHeaders CreateIdentityProvider where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.CreateIdentityProvider"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON CreateIdentityProvider where+        toJSON CreateIdentityProvider'{..}+          = object+              (catMaybes+                 [("IdpIdentifiers" .=) <$> _cipIdpIdentifiers,+                  ("AttributeMapping" .=) <$> _cipAttributeMapping,+                  Just ("UserPoolId" .= _cipUserPoolId),+                  Just ("ProviderName" .= _cipProviderName),+                  Just ("ProviderType" .= _cipProviderType),+                  Just ("ProviderDetails" .= _cipProviderDetails)])++instance ToPath CreateIdentityProvider where+        toPath = const "/"++instance ToQuery CreateIdentityProvider where+        toQuery = const mempty++-- | /See:/ 'createIdentityProviderResponse' smart constructor.+data CreateIdentityProviderResponse = CreateIdentityProviderResponse'+  { _ciprsResponseStatus   :: !Int+  , _ciprsIdentityProvider :: !IdentityProviderType+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateIdentityProviderResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'ciprsResponseStatus' - -- | The response status code.+--+-- * 'ciprsIdentityProvider' - The newly created identity provider object.+createIdentityProviderResponse+    :: Int -- ^ 'ciprsResponseStatus'+    -> IdentityProviderType -- ^ 'ciprsIdentityProvider'+    -> CreateIdentityProviderResponse+createIdentityProviderResponse pResponseStatus_ pIdentityProvider_ =+  CreateIdentityProviderResponse'+  { _ciprsResponseStatus = pResponseStatus_+  , _ciprsIdentityProvider = pIdentityProvider_+  }+++-- | -- | The response status code.+ciprsResponseStatus :: Lens' CreateIdentityProviderResponse Int+ciprsResponseStatus = lens _ciprsResponseStatus (\ s a -> s{_ciprsResponseStatus = a});++-- | The newly created identity provider object.+ciprsIdentityProvider :: Lens' CreateIdentityProviderResponse IdentityProviderType+ciprsIdentityProvider = lens _ciprsIdentityProvider (\ s a -> s{_ciprsIdentityProvider = a});++instance NFData CreateIdentityProviderResponse where

@@ -0,0 +1,172 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.CreateResourceServer+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new OAuth2.0 resource server and defines custom scopes in it.+--+--+module Network.AWS.CognitoIdentityProvider.CreateResourceServer+    (+    -- * Creating a Request+      createResourceServer+    , CreateResourceServer+    -- * Request Lenses+    , crsScopes+    , crsUserPoolId+    , crsIdentifier+    , crsName++    -- * Destructuring the Response+    , createResourceServerResponse+    , CreateResourceServerResponse+    -- * Response Lenses+    , crsrsResponseStatus+    , crsrsResourceServer+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'createResourceServer' smart constructor.+data CreateResourceServer = CreateResourceServer'+  { _crsScopes     :: !(Maybe [ResourceServerScopeType])+  , _crsUserPoolId :: !Text+  , _crsIdentifier :: !Text+  , _crsName       :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateResourceServer' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'crsScopes' - A list of scopes. Each scope is map, where the keys are @name@ and @description@ .+--+-- * 'crsUserPoolId' - The user pool ID for the user pool.+--+-- * 'crsIdentifier' - A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example, @https://my-weather-api.example.com@ .+--+-- * 'crsName' - A friendly name for the resource server.+createResourceServer+    :: Text -- ^ 'crsUserPoolId'+    -> Text -- ^ 'crsIdentifier'+    -> Text -- ^ 'crsName'+    -> CreateResourceServer+createResourceServer pUserPoolId_ pIdentifier_ pName_ =+  CreateResourceServer'+  { _crsScopes = Nothing+  , _crsUserPoolId = pUserPoolId_+  , _crsIdentifier = pIdentifier_+  , _crsName = pName_+  }+++-- | A list of scopes. Each scope is map, where the keys are @name@ and @description@ .+crsScopes :: Lens' CreateResourceServer [ResourceServerScopeType]+crsScopes = lens _crsScopes (\ s a -> s{_crsScopes = a}) . _Default . _Coerce;++-- | The user pool ID for the user pool.+crsUserPoolId :: Lens' CreateResourceServer Text+crsUserPoolId = lens _crsUserPoolId (\ s a -> s{_crsUserPoolId = a});++-- | A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example, @https://my-weather-api.example.com@ .+crsIdentifier :: Lens' CreateResourceServer Text+crsIdentifier = lens _crsIdentifier (\ s a -> s{_crsIdentifier = a});++-- | A friendly name for the resource server.+crsName :: Lens' CreateResourceServer Text+crsName = lens _crsName (\ s a -> s{_crsName = a});++instance AWSRequest CreateResourceServer where+        type Rs CreateResourceServer =+             CreateResourceServerResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 CreateResourceServerResponse' <$>+                   (pure (fromEnum s)) <*> (x .:> "ResourceServer"))++instance Hashable CreateResourceServer where++instance NFData CreateResourceServer where++instance ToHeaders CreateResourceServer where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.CreateResourceServer"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON CreateResourceServer where+        toJSON CreateResourceServer'{..}+          = object+              (catMaybes+                 [("Scopes" .=) <$> _crsScopes,+                  Just ("UserPoolId" .= _crsUserPoolId),+                  Just ("Identifier" .= _crsIdentifier),+                  Just ("Name" .= _crsName)])++instance ToPath CreateResourceServer where+        toPath = const "/"++instance ToQuery CreateResourceServer where+        toQuery = const mempty++-- | /See:/ 'createResourceServerResponse' smart constructor.+data CreateResourceServerResponse = CreateResourceServerResponse'+  { _crsrsResponseStatus :: !Int+  , _crsrsResourceServer :: !ResourceServerType+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateResourceServerResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'crsrsResponseStatus' - -- | The response status code.+--+-- * 'crsrsResourceServer' - The newly created resource server.+createResourceServerResponse+    :: Int -- ^ 'crsrsResponseStatus'+    -> ResourceServerType -- ^ 'crsrsResourceServer'+    -> CreateResourceServerResponse+createResourceServerResponse pResponseStatus_ pResourceServer_ =+  CreateResourceServerResponse'+  { _crsrsResponseStatus = pResponseStatus_+  , _crsrsResourceServer = pResourceServer_+  }+++-- | -- | The response status code.+crsrsResponseStatus :: Lens' CreateResourceServerResponse Int+crsrsResponseStatus = lens _crsrsResponseStatus (\ s a -> s{_crsrsResponseStatus = a});++-- | The newly created resource server.+crsrsResourceServer :: Lens' CreateResourceServerResponse ResourceServerType+crsrsResourceServer = lens _crsrsResourceServer (\ s a -> s{_crsrsResourceServer = a});++instance NFData CreateResourceServerResponse where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserImportJob--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -39,12 +39,12 @@     , cuijrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to create the user import job. --@@ -52,11 +52,12 @@ -- -- /See:/ 'createUserImportJob' smart constructor. data CreateUserImportJob = CreateUserImportJob'-    { _cuijJobName               :: !Text-    , _cuijUserPoolId            :: !Text-    , _cuijCloudWatchLogsRoleARN :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cuijJobName               :: !Text+  , _cuijUserPoolId            :: !Text+  , _cuijCloudWatchLogsRoleARN :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserImportJob' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -72,12 +73,13 @@     -> Text -- ^ 'cuijCloudWatchLogsRoleARN'     -> CreateUserImportJob createUserImportJob pJobName_ pUserPoolId_ pCloudWatchLogsRoleARN_ =-    CreateUserImportJob'-    { _cuijJobName = pJobName_-    , _cuijUserPoolId = pUserPoolId_-    , _cuijCloudWatchLogsRoleARN = pCloudWatchLogsRoleARN_-    }+  CreateUserImportJob'+  { _cuijJobName = pJobName_+  , _cuijUserPoolId = pUserPoolId_+  , _cuijCloudWatchLogsRoleARN = pCloudWatchLogsRoleARN_+  } + -- | The job name for the user import job. cuijJobName :: Lens' CreateUserImportJob Text cuijJobName = lens _cuijJobName (\ s a -> s{_cuijJobName = a});@@ -100,9 +102,9 @@                  CreateUserImportJobResponse' <$>                    (x .?> "UserImportJob") <*> (pure (fromEnum s))) -instance Hashable CreateUserImportJob+instance Hashable CreateUserImportJob where -instance NFData CreateUserImportJob+instance NFData CreateUserImportJob where  instance ToHeaders CreateUserImportJob where         toHeaders@@ -136,10 +138,11 @@ -- -- /See:/ 'createUserImportJobResponse' smart constructor. data CreateUserImportJobResponse = CreateUserImportJobResponse'-    { _cuijrsUserImportJob  :: !(Maybe UserImportJobType)-    , _cuijrsResponseStatus :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cuijrsUserImportJob  :: !(Maybe UserImportJobType)+  , _cuijrsResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserImportJobResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -151,11 +154,10 @@     :: Int -- ^ 'cuijrsResponseStatus'     -> CreateUserImportJobResponse createUserImportJobResponse pResponseStatus_ =-    CreateUserImportJobResponse'-    { _cuijrsUserImportJob = Nothing-    , _cuijrsResponseStatus = pResponseStatus_-    }+  CreateUserImportJobResponse'+  {_cuijrsUserImportJob = Nothing, _cuijrsResponseStatus = pResponseStatus_} + -- | The job object that represents the user import job. cuijrsUserImportJob :: Lens' CreateUserImportJobResponse (Maybe UserImportJobType) cuijrsUserImportJob = lens _cuijrsUserImportJob (\ s a -> s{_cuijrsUserImportJob = a});@@ -164,4 +166,4 @@ cuijrsResponseStatus :: Lens' CreateUserImportJobResponse Int cuijrsResponseStatus = lens _cuijrsResponseStatus (\ s a -> s{_cuijrsResponseStatus = a}); -instance NFData CreateUserImportJobResponse+instance NFData CreateUserImportJobResponse where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPool--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -27,9 +27,12 @@       createUserPool     , CreateUserPool     -- * Request Lenses+    , cupUserPoolTags+    , cupVerificationMessageTemplate     , cupEmailVerificationMessage     , cupSmsAuthenticationMessage     , cupEmailVerificationSubject+    , cupUsernameAttributes     , cupAliasAttributes     , cupSchema     , cupEmailConfiguration@@ -51,12 +54,12 @@     , cuprsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to create a user pool. --@@ -64,33 +67,43 @@ -- -- /See:/ 'createUserPool' smart constructor. data CreateUserPool = CreateUserPool'-    { _cupEmailVerificationMessage :: !(Maybe Text)-    , _cupSmsAuthenticationMessage :: !(Maybe Text)-    , _cupEmailVerificationSubject :: !(Maybe Text)-    , _cupAliasAttributes          :: !(Maybe [AliasAttributeType])-    , _cupSchema                   :: !(Maybe (List1 SchemaAttributeType))-    , _cupEmailConfiguration       :: !(Maybe EmailConfigurationType)-    , _cupSmsVerificationMessage   :: !(Maybe Text)-    , _cupMFAConfiguration         :: !(Maybe UserPoolMFAType)-    , _cupLambdaConfig             :: !(Maybe LambdaConfigType)-    , _cupSmsConfiguration         :: !(Maybe SmsConfigurationType)-    , _cupAdminCreateUserConfig    :: !(Maybe AdminCreateUserConfigType)-    , _cupDeviceConfiguration      :: !(Maybe DeviceConfigurationType)-    , _cupAutoVerifiedAttributes   :: !(Maybe [VerifiedAttributeType])-    , _cupPolicies                 :: !(Maybe UserPoolPolicyType)-    , _cupPoolName                 :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cupUserPoolTags                :: !(Maybe (Map Text Text))+  , _cupVerificationMessageTemplate :: !(Maybe VerificationMessageTemplateType)+  , _cupEmailVerificationMessage    :: !(Maybe Text)+  , _cupSmsAuthenticationMessage    :: !(Maybe Text)+  , _cupEmailVerificationSubject    :: !(Maybe Text)+  , _cupUsernameAttributes          :: !(Maybe [UsernameAttributeType])+  , _cupAliasAttributes             :: !(Maybe [AliasAttributeType])+  , _cupSchema                      :: !(Maybe (List1 SchemaAttributeType))+  , _cupEmailConfiguration          :: !(Maybe EmailConfigurationType)+  , _cupSmsVerificationMessage      :: !(Maybe Text)+  , _cupMFAConfiguration            :: !(Maybe UserPoolMFAType)+  , _cupLambdaConfig                :: !(Maybe LambdaConfigType)+  , _cupSmsConfiguration            :: !(Maybe SmsConfigurationType)+  , _cupAdminCreateUserConfig       :: !(Maybe AdminCreateUserConfigType)+  , _cupDeviceConfiguration         :: !(Maybe DeviceConfigurationType)+  , _cupAutoVerifiedAttributes      :: !(Maybe [VerifiedAttributeType])+  , _cupPolicies                    :: !(Maybe UserPoolPolicyType)+  , _cupPoolName                    :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserPool' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'cupUserPoolTags' - The cost allocation tags for the user pool. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-cost-allocation-tagging.html Adding Cost Allocation Tags to Your User Pool>+--+-- * 'cupVerificationMessageTemplate' - The template for the verification message that the user sees when the app requests permission to access the user's information.+-- -- * 'cupEmailVerificationMessage' - A string representing the email verification message. -- -- * 'cupSmsAuthenticationMessage' - A string representing the SMS authentication message. -- -- * 'cupEmailVerificationSubject' - A string representing the email verification subject. --+-- * 'cupUsernameAttributes' - Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.+-- -- * 'cupAliasAttributes' - Attributes supported as an alias for this user pool. Possible values: __phone_number__ , __email__ , or __preferred_username__ . -- -- * 'cupSchema' - An array of schema attributes for the new user pool. These attributes can be standard or custom attributes.@@ -105,7 +118,7 @@ -- -- * 'cupSmsConfiguration' - The SMS configuration. ----- * 'cupAdminCreateUserConfig' - The configuration for AdminCreateUser requests.+-- * 'cupAdminCreateUserConfig' - The configuration for @AdminCreateUser@ requests. -- -- * 'cupDeviceConfiguration' - The device configuration. --@@ -118,24 +131,36 @@     :: Text -- ^ 'cupPoolName'     -> CreateUserPool createUserPool pPoolName_ =-    CreateUserPool'-    { _cupEmailVerificationMessage = Nothing-    , _cupSmsAuthenticationMessage = Nothing-    , _cupEmailVerificationSubject = Nothing-    , _cupAliasAttributes = Nothing-    , _cupSchema = Nothing-    , _cupEmailConfiguration = Nothing-    , _cupSmsVerificationMessage = Nothing-    , _cupMFAConfiguration = Nothing-    , _cupLambdaConfig = Nothing-    , _cupSmsConfiguration = Nothing-    , _cupAdminCreateUserConfig = Nothing-    , _cupDeviceConfiguration = Nothing-    , _cupAutoVerifiedAttributes = Nothing-    , _cupPolicies = Nothing-    , _cupPoolName = pPoolName_-    }+  CreateUserPool'+  { _cupUserPoolTags = Nothing+  , _cupVerificationMessageTemplate = Nothing+  , _cupEmailVerificationMessage = Nothing+  , _cupSmsAuthenticationMessage = Nothing+  , _cupEmailVerificationSubject = Nothing+  , _cupUsernameAttributes = Nothing+  , _cupAliasAttributes = Nothing+  , _cupSchema = Nothing+  , _cupEmailConfiguration = Nothing+  , _cupSmsVerificationMessage = Nothing+  , _cupMFAConfiguration = Nothing+  , _cupLambdaConfig = Nothing+  , _cupSmsConfiguration = Nothing+  , _cupAdminCreateUserConfig = Nothing+  , _cupDeviceConfiguration = Nothing+  , _cupAutoVerifiedAttributes = Nothing+  , _cupPolicies = Nothing+  , _cupPoolName = pPoolName_+  } ++-- | The cost allocation tags for the user pool. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-cost-allocation-tagging.html Adding Cost Allocation Tags to Your User Pool>+cupUserPoolTags :: Lens' CreateUserPool (HashMap Text Text)+cupUserPoolTags = lens _cupUserPoolTags (\ s a -> s{_cupUserPoolTags = a}) . _Default . _Map;++-- | The template for the verification message that the user sees when the app requests permission to access the user's information.+cupVerificationMessageTemplate :: Lens' CreateUserPool (Maybe VerificationMessageTemplateType)+cupVerificationMessageTemplate = lens _cupVerificationMessageTemplate (\ s a -> s{_cupVerificationMessageTemplate = a});+ -- | A string representing the email verification message. cupEmailVerificationMessage :: Lens' CreateUserPool (Maybe Text) cupEmailVerificationMessage = lens _cupEmailVerificationMessage (\ s a -> s{_cupEmailVerificationMessage = a});@@ -148,6 +173,10 @@ cupEmailVerificationSubject :: Lens' CreateUserPool (Maybe Text) cupEmailVerificationSubject = lens _cupEmailVerificationSubject (\ s a -> s{_cupEmailVerificationSubject = a}); +-- | Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.+cupUsernameAttributes :: Lens' CreateUserPool [UsernameAttributeType]+cupUsernameAttributes = lens _cupUsernameAttributes (\ s a -> s{_cupUsernameAttributes = a}) . _Default . _Coerce;+ -- | Attributes supported as an alias for this user pool. Possible values: __phone_number__ , __email__ , or __preferred_username__ . cupAliasAttributes :: Lens' CreateUserPool [AliasAttributeType] cupAliasAttributes = lens _cupAliasAttributes (\ s a -> s{_cupAliasAttributes = a}) . _Default . _Coerce;@@ -176,7 +205,7 @@ cupSmsConfiguration :: Lens' CreateUserPool (Maybe SmsConfigurationType) cupSmsConfiguration = lens _cupSmsConfiguration (\ s a -> s{_cupSmsConfiguration = a}); --- | The configuration for AdminCreateUser requests.+-- | The configuration for @AdminCreateUser@ requests. cupAdminCreateUserConfig :: Lens' CreateUserPool (Maybe AdminCreateUserConfigType) cupAdminCreateUserConfig = lens _cupAdminCreateUserConfig (\ s a -> s{_cupAdminCreateUserConfig = a}); @@ -205,9 +234,9 @@                  CreateUserPoolResponse' <$>                    (x .?> "UserPool") <*> (pure (fromEnum s))) -instance Hashable CreateUserPool+instance Hashable CreateUserPool where -instance NFData CreateUserPool+instance NFData CreateUserPool where  instance ToHeaders CreateUserPool where         toHeaders@@ -223,12 +252,16 @@         toJSON CreateUserPool'{..}           = object               (catMaybes-                 [("EmailVerificationMessage" .=) <$>+                 [("UserPoolTags" .=) <$> _cupUserPoolTags,+                  ("VerificationMessageTemplate" .=) <$>+                    _cupVerificationMessageTemplate,+                  ("EmailVerificationMessage" .=) <$>                     _cupEmailVerificationMessage,                   ("SmsAuthenticationMessage" .=) <$>                     _cupSmsAuthenticationMessage,                   ("EmailVerificationSubject" .=) <$>                     _cupEmailVerificationSubject,+                  ("UsernameAttributes" .=) <$> _cupUsernameAttributes,                   ("AliasAttributes" .=) <$> _cupAliasAttributes,                   ("Schema" .=) <$> _cupSchema,                   ("EmailConfiguration" .=) <$> _cupEmailConfiguration,@@ -258,10 +291,11 @@ -- -- /See:/ 'createUserPoolResponse' smart constructor. data CreateUserPoolResponse = CreateUserPoolResponse'-    { _cuprsUserPool       :: !(Maybe UserPoolType)-    , _cuprsResponseStatus :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cuprsUserPool       :: !(Maybe UserPoolType)+  , _cuprsResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserPoolResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -273,11 +307,10 @@     :: Int -- ^ 'cuprsResponseStatus'     -> CreateUserPoolResponse createUserPoolResponse pResponseStatus_ =-    CreateUserPoolResponse'-    { _cuprsUserPool = Nothing-    , _cuprsResponseStatus = pResponseStatus_-    }+  CreateUserPoolResponse'+  {_cuprsUserPool = Nothing, _cuprsResponseStatus = pResponseStatus_} + -- | A container for the user pool details. cuprsUserPool :: Lens' CreateUserPoolResponse (Maybe UserPoolType) cuprsUserPool = lens _cuprsUserPool (\ s a -> s{_cuprsUserPool = a});@@ -286,4 +319,4 @@ cuprsResponseStatus :: Lens' CreateUserPoolResponse Int cuprsResponseStatus = lens _cuprsResponseStatus (\ s a -> s{_cuprsResponseStatus = a}); -instance NFData CreateUserPoolResponse+instance NFData CreateUserPoolResponse where

@@ -12,9 +12,9 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPoolClient--- Copyright   : (c) 2013-2016 Brendan Hay+-- Copyright   : (c) 2013-2017 Brendan Hay -- License     : Mozilla Public License, v. 2.0.--- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) --@@ -29,9 +29,16 @@     -- * Request Lenses     , cupcRefreshTokenValidity     , cupcExplicitAuthFlows+    , cupcSupportedIdentityProviders+    , cupcLogoutURLs+    , cupcAllowedOAuthFlowsUserPoolClient     , cupcGenerateSecret+    , cupcDefaultRedirectURI     , cupcWriteAttributes     , cupcReadAttributes+    , cupcAllowedOAuthScopes+    , cupcAllowedOAuthFlows+    , cupcCallbackURLs     , cupcUserPoolId     , cupcClientName @@ -43,12 +50,12 @@     , cupcrsResponseStatus     ) where -import           Network.AWS.CognitoIdentityProvider.Types-import           Network.AWS.CognitoIdentityProvider.Types.Product-import           Network.AWS.Lens-import           Network.AWS.Prelude-import           Network.AWS.Request-import           Network.AWS.Response+import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response  -- | Represents the request to create a user pool client. --@@ -56,29 +63,51 @@ -- -- /See:/ 'createUserPoolClient' smart constructor. data CreateUserPoolClient = CreateUserPoolClient'-    { _cupcRefreshTokenValidity :: !(Maybe Nat)-    , _cupcExplicitAuthFlows    :: !(Maybe [ExplicitAuthFlowsType])-    , _cupcGenerateSecret       :: !(Maybe Bool)-    , _cupcWriteAttributes      :: !(Maybe [Text])-    , _cupcReadAttributes       :: !(Maybe [Text])-    , _cupcUserPoolId           :: !Text-    , _cupcClientName           :: !Text-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cupcRefreshTokenValidity            :: !(Maybe Nat)+  , _cupcExplicitAuthFlows               :: !(Maybe [ExplicitAuthFlowsType])+  , _cupcSupportedIdentityProviders      :: !(Maybe [Text])+  , _cupcLogoutURLs                      :: !(Maybe [Text])+  , _cupcAllowedOAuthFlowsUserPoolClient :: !(Maybe Bool)+  , _cupcGenerateSecret                  :: !(Maybe Bool)+  , _cupcDefaultRedirectURI              :: !(Maybe Text)+  , _cupcWriteAttributes                 :: !(Maybe [Text])+  , _cupcReadAttributes                  :: !(Maybe [Text])+  , _cupcAllowedOAuthScopes              :: !(Maybe [Text])+  , _cupcAllowedOAuthFlows               :: !(Maybe [OAuthFlowType])+  , _cupcCallbackURLs                    :: !(Maybe [Text])+  , _cupcUserPoolId                      :: !Text+  , _cupcClientName                      :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserPoolClient' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired: ----- * 'cupcRefreshTokenValidity' - Refreshes the token validity.+-- * 'cupcRefreshTokenValidity' - The time limit, in days, after which the refresh token is no longer valid and cannot be used. -- -- * 'cupcExplicitAuthFlows' - The explicit authentication flows. --+-- * 'cupcSupportedIdentityProviders' - A list of provider names for the identity providers that are supported on this client.+--+-- * 'cupcLogoutURLs' - A list of allowed logout URLs for the identity providers.+--+-- * 'cupcAllowedOAuthFlowsUserPoolClient' - Set to @True@ if the client is allowed to follow the OAuth protocol when interacting with Cognito user pools.+-- -- * 'cupcGenerateSecret' - Boolean to specify whether you want to generate a secret for the user pool client being created. --+-- * 'cupcDefaultRedirectURI' - The default redirect URI. Must be in the @CallbackURLs@ list.+-- -- * 'cupcWriteAttributes' - The write attributes. -- -- * 'cupcReadAttributes' - The read attributes. --+-- * 'cupcAllowedOAuthScopes' - A list of allowed @OAuth@ scopes. Currently supported values are @"phone"@ , @"email"@ , @"openid"@ , and @"Cognito"@ .+--+-- * 'cupcAllowedOAuthFlows' - Set to @code@ to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint. Set to @token@ to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly.+--+-- * 'cupcCallbackURLs' - A list of allowed callback URLs for the identity providers.+-- -- * 'cupcUserPoolId' - The user pool ID for the user pool where you want to create a user pool client. -- -- * 'cupcClientName' - The client name for the user pool client you would like to create.@@ -87,17 +116,25 @@     -> Text -- ^ 'cupcClientName'     -> CreateUserPoolClient createUserPoolClient pUserPoolId_ pClientName_ =-    CreateUserPoolClient'-    { _cupcRefreshTokenValidity = Nothing-    , _cupcExplicitAuthFlows = Nothing-    , _cupcGenerateSecret = Nothing-    , _cupcWriteAttributes = Nothing-    , _cupcReadAttributes = Nothing-    , _cupcUserPoolId = pUserPoolId_-    , _cupcClientName = pClientName_-    }+  CreateUserPoolClient'+  { _cupcRefreshTokenValidity = Nothing+  , _cupcExplicitAuthFlows = Nothing+  , _cupcSupportedIdentityProviders = Nothing+  , _cupcLogoutURLs = Nothing+  , _cupcAllowedOAuthFlowsUserPoolClient = Nothing+  , _cupcGenerateSecret = Nothing+  , _cupcDefaultRedirectURI = Nothing+  , _cupcWriteAttributes = Nothing+  , _cupcReadAttributes = Nothing+  , _cupcAllowedOAuthScopes = Nothing+  , _cupcAllowedOAuthFlows = Nothing+  , _cupcCallbackURLs = Nothing+  , _cupcUserPoolId = pUserPoolId_+  , _cupcClientName = pClientName_+  } --- | Refreshes the token validity.++-- | The time limit, in days, after which the refresh token is no longer valid and cannot be used. cupcRefreshTokenValidity :: Lens' CreateUserPoolClient (Maybe Natural) cupcRefreshTokenValidity = lens _cupcRefreshTokenValidity (\ s a -> s{_cupcRefreshTokenValidity = a}) . mapping _Nat; @@ -105,10 +142,26 @@ cupcExplicitAuthFlows :: Lens' CreateUserPoolClient [ExplicitAuthFlowsType] cupcExplicitAuthFlows = lens _cupcExplicitAuthFlows (\ s a -> s{_cupcExplicitAuthFlows = a}) . _Default . _Coerce; +-- | A list of provider names for the identity providers that are supported on this client.+cupcSupportedIdentityProviders :: Lens' CreateUserPoolClient [Text]+cupcSupportedIdentityProviders = lens _cupcSupportedIdentityProviders (\ s a -> s{_cupcSupportedIdentityProviders = a}) . _Default . _Coerce;++-- | A list of allowed logout URLs for the identity providers.+cupcLogoutURLs :: Lens' CreateUserPoolClient [Text]+cupcLogoutURLs = lens _cupcLogoutURLs (\ s a -> s{_cupcLogoutURLs = a}) . _Default . _Coerce;++-- | Set to @True@ if the client is allowed to follow the OAuth protocol when interacting with Cognito user pools.+cupcAllowedOAuthFlowsUserPoolClient :: Lens' CreateUserPoolClient (Maybe Bool)+cupcAllowedOAuthFlowsUserPoolClient = lens _cupcAllowedOAuthFlowsUserPoolClient (\ s a -> s{_cupcAllowedOAuthFlowsUserPoolClient = a});+ -- | Boolean to specify whether you want to generate a secret for the user pool client being created. cupcGenerateSecret :: Lens' CreateUserPoolClient (Maybe Bool) cupcGenerateSecret = lens _cupcGenerateSecret (\ s a -> s{_cupcGenerateSecret = a}); +-- | The default redirect URI. Must be in the @CallbackURLs@ list.+cupcDefaultRedirectURI :: Lens' CreateUserPoolClient (Maybe Text)+cupcDefaultRedirectURI = lens _cupcDefaultRedirectURI (\ s a -> s{_cupcDefaultRedirectURI = a});+ -- | The write attributes. cupcWriteAttributes :: Lens' CreateUserPoolClient [Text] cupcWriteAttributes = lens _cupcWriteAttributes (\ s a -> s{_cupcWriteAttributes = a}) . _Default . _Coerce;@@ -117,6 +170,18 @@ cupcReadAttributes :: Lens' CreateUserPoolClient [Text] cupcReadAttributes = lens _cupcReadAttributes (\ s a -> s{_cupcReadAttributes = a}) . _Default . _Coerce; +-- | A list of allowed @OAuth@ scopes. Currently supported values are @"phone"@ , @"email"@ , @"openid"@ , and @"Cognito"@ .+cupcAllowedOAuthScopes :: Lens' CreateUserPoolClient [Text]+cupcAllowedOAuthScopes = lens _cupcAllowedOAuthScopes (\ s a -> s{_cupcAllowedOAuthScopes = a}) . _Default . _Coerce;++-- | Set to @code@ to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint. Set to @token@ to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly.+cupcAllowedOAuthFlows :: Lens' CreateUserPoolClient [OAuthFlowType]+cupcAllowedOAuthFlows = lens _cupcAllowedOAuthFlows (\ s a -> s{_cupcAllowedOAuthFlows = a}) . _Default . _Coerce;++-- | A list of allowed callback URLs for the identity providers.+cupcCallbackURLs :: Lens' CreateUserPoolClient [Text]+cupcCallbackURLs = lens _cupcCallbackURLs (\ s a -> s{_cupcCallbackURLs = a}) . _Default . _Coerce;+ -- | The user pool ID for the user pool where you want to create a user pool client. cupcUserPoolId :: Lens' CreateUserPoolClient Text cupcUserPoolId = lens _cupcUserPoolId (\ s a -> s{_cupcUserPoolId = a});@@ -135,9 +200,9 @@                  CreateUserPoolClientResponse' <$>                    (x .?> "UserPoolClient") <*> (pure (fromEnum s))) -instance Hashable CreateUserPoolClient+instance Hashable CreateUserPoolClient where -instance NFData CreateUserPoolClient+instance NFData CreateUserPoolClient where  instance ToHeaders CreateUserPoolClient where         toHeaders@@ -156,9 +221,20 @@                  [("RefreshTokenValidity" .=) <$>                     _cupcRefreshTokenValidity,                   ("ExplicitAuthFlows" .=) <$> _cupcExplicitAuthFlows,+                  ("SupportedIdentityProviders" .=) <$>+                    _cupcSupportedIdentityProviders,+                  ("LogoutURLs" .=) <$> _cupcLogoutURLs,+                  ("AllowedOAuthFlowsUserPoolClient" .=) <$>+                    _cupcAllowedOAuthFlowsUserPoolClient,                   ("GenerateSecret" .=) <$> _cupcGenerateSecret,+                  ("DefaultRedirectURI" .=) <$>+                    _cupcDefaultRedirectURI,                   ("WriteAttributes" .=) <$> _cupcWriteAttributes,                   ("ReadAttributes" .=) <$> _cupcReadAttributes,+                  ("AllowedOAuthScopes" .=) <$>+                    _cupcAllowedOAuthScopes,+                  ("AllowedOAuthFlows" .=) <$> _cupcAllowedOAuthFlows,+                  ("CallbackURLs" .=) <$> _cupcCallbackURLs,                   Just ("UserPoolId" .= _cupcUserPoolId),                   Just ("ClientName" .= _cupcClientName)]) @@ -174,10 +250,11 @@ -- -- /See:/ 'createUserPoolClientResponse' smart constructor. data CreateUserPoolClientResponse = CreateUserPoolClientResponse'-    { _cupcrsUserPoolClient :: !(Maybe UserPoolClientType)-    , _cupcrsResponseStatus :: !Int-    } deriving (Eq,Read,Show,Data,Typeable,Generic)+  { _cupcrsUserPoolClient :: !(Maybe UserPoolClientType)+  , _cupcrsResponseStatus :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic) + -- | Creates a value of 'CreateUserPoolClientResponse' with the minimum fields required to make a request. -- -- Use one of the following lenses to modify other fields as desired:@@ -189,11 +266,10 @@     :: Int -- ^ 'cupcrsResponseStatus'     -> CreateUserPoolClientResponse createUserPoolClientResponse pResponseStatus_ =-    CreateUserPoolClientResponse'-    { _cupcrsUserPoolClient = Nothing-    , _cupcrsResponseStatus = pResponseStatus_-    }+  CreateUserPoolClientResponse'+  {_cupcrsUserPoolClient = Nothing, _cupcrsResponseStatus = pResponseStatus_} + -- | The user pool client that was just created. cupcrsUserPoolClient :: Lens' CreateUserPoolClientResponse (Maybe UserPoolClientType) cupcrsUserPoolClient = lens _cupcrsUserPoolClient (\ s a -> s{_cupcrsUserPoolClient = a});@@ -202,4 +278,4 @@ cupcrsResponseStatus :: Lens' CreateUserPoolClientResponse Int cupcrsResponseStatus = lens _cupcrsResponseStatus (\ s a -> s{_cupcrsResponseStatus = a}); -instance NFData CreateUserPoolClientResponse+instance NFData CreateUserPoolClientResponse where

@@ -0,0 +1,136 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Creates a new domain for a user pool.+--+--+module Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain+    (+    -- * Creating a Request+      createUserPoolDomain+    , CreateUserPoolDomain+    -- * Request Lenses+    , cupdDomain+    , cupdUserPoolId++    -- * Destructuring the Response+    , createUserPoolDomainResponse+    , CreateUserPoolDomainResponse+    -- * Response Lenses+    , cupdrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'createUserPoolDomain' smart constructor.+data CreateUserPoolDomain = CreateUserPoolDomain'+  { _cupdDomain     :: !Text+  , _cupdUserPoolId :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateUserPoolDomain' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'cupdDomain' - The domain string.+--+-- * 'cupdUserPoolId' - The user pool ID.+createUserPoolDomain+    :: Text -- ^ 'cupdDomain'+    -> Text -- ^ 'cupdUserPoolId'+    -> CreateUserPoolDomain+createUserPoolDomain pDomain_ pUserPoolId_ =+  CreateUserPoolDomain' {_cupdDomain = pDomain_, _cupdUserPoolId = pUserPoolId_}+++-- | The domain string.+cupdDomain :: Lens' CreateUserPoolDomain Text+cupdDomain = lens _cupdDomain (\ s a -> s{_cupdDomain = a});++-- | The user pool ID.+cupdUserPoolId :: Lens' CreateUserPoolDomain Text+cupdUserPoolId = lens _cupdUserPoolId (\ s a -> s{_cupdUserPoolId = a});++instance AWSRequest CreateUserPoolDomain where+        type Rs CreateUserPoolDomain =+             CreateUserPoolDomainResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveEmpty+              (\ s h x ->+                 CreateUserPoolDomainResponse' <$>+                   (pure (fromEnum s)))++instance Hashable CreateUserPoolDomain where++instance NFData CreateUserPoolDomain where++instance ToHeaders CreateUserPoolDomain where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.CreateUserPoolDomain"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON CreateUserPoolDomain where+        toJSON CreateUserPoolDomain'{..}+          = object+              (catMaybes+                 [Just ("Domain" .= _cupdDomain),+                  Just ("UserPoolId" .= _cupdUserPoolId)])++instance ToPath CreateUserPoolDomain where+        toPath = const "/"++instance ToQuery CreateUserPoolDomain where+        toQuery = const mempty++-- | /See:/ 'createUserPoolDomainResponse' smart constructor.+newtype CreateUserPoolDomainResponse = CreateUserPoolDomainResponse'+  { _cupdrsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'CreateUserPoolDomainResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'cupdrsResponseStatus' - -- | The response status code.+createUserPoolDomainResponse+    :: Int -- ^ 'cupdrsResponseStatus'+    -> CreateUserPoolDomainResponse+createUserPoolDomainResponse pResponseStatus_ =+  CreateUserPoolDomainResponse' {_cupdrsResponseStatus = pResponseStatus_}+++-- | -- | The response status code.+cupdrsResponseStatus :: Lens' CreateUserPoolDomainResponse Int+cupdrsResponseStatus = lens _cupdrsResponseStatus (\ s a -> s{_cupdrsResponseStatus = a});++instance NFData CreateUserPoolDomainResponse where

@@ -0,0 +1,122 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.DeleteGroup+-- Copyright   : (c) 2013-2017 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Deletes a group. Currently only groups with no members can be deleted.+--+--+-- Requires developer credentials.+--+module Network.AWS.CognitoIdentityProvider.DeleteGroup+    (+    -- * Creating a Request+      deleteGroup+    , DeleteGroup+    -- * Request Lenses+    , dgGroupName+    , dgUserPoolId++    -- * Destructuring the Response+    , deleteGroupResponse+    , DeleteGroupResponse+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'deleteGroup' smart constructor.+data DeleteGroup = DeleteGroup'+  { _dgGroupName  :: !Text+  , _dgUserPoolId :: !Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'DeleteGroup' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'dgGroupName' - The name of the group.+--+-- * 'dgUserPoolId' - The user pool ID for the user pool.+deleteGroup+    :: Text -- ^ 'dgGroupName'+    -> Text -- ^ 'dgUserPoolId'+    -> DeleteGroup+deleteGroup pGroupName_ pUserPoolId_ =+  DeleteGroup' {_dgGroupName = pGroupName_, _dgUserPoolId = pUserPoolId_}+++-- | The name of the group.+dgGroupName :: Lens' DeleteGroup Text+dgGroupName = lens _dgGroupName (\ s a -> s{_dgGroupName = a});++-- | The user pool ID for the user pool.+dgUserPoolId :: Lens' DeleteGroup Text+dgUserPoolId = lens _dgUserPoolId (\ s a -> s{_dgUserPoolId = a});++instance AWSRequest DeleteGroup where+        type Rs DeleteGroup = DeleteGroupResponse+        request = postJSON cognitoIdentityProvider+        response = receiveNull DeleteGroupResponse'++instance Hashable DeleteGroup where++instance NFData DeleteGroup where++instance ToHeaders DeleteGroup where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.DeleteGroup" ::+                       ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DeleteGroup where+        toJSON DeleteGroup'{..}+          = object+              (catMaybes+                 [Just ("GroupName" .= _dgGroupName),+                  Just ("UserPoolId" .= _dgUserPoolId)])++instance ToPath DeleteGroup where+        toPath = const "/"++instance ToQuery DeleteGroup where+        toQuery = const mempty++-- | /See:/ 'deleteGroupResponse' smart constructor.+data DeleteGroupResponse =+  DeleteGroupResponse'+  deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'DeleteGroupResponse' with the minimum fields required to make a request.+--+deleteGroupResponse+    :: DeleteGroupResponse+deleteGroupResponse = DeleteGroupResponse'+++instance NFData DeleteGroupResponse where