amazonka-cognito-idp 1.5.0 → 1.6.0

raw patch · 130 files changed

+8650/−3737 lines, 130 filesdep ~amazonka-coredep ~amazonka-testPVP ok

version bump matches the API change (PVP)

Dependency ranges changed: amazonka-core, amazonka-test

API changes (from Hackage documentation)

Files

• README.md +1/−1
• amazonka-cognito-idp.cabal +17/−5
• fixture/AdminListUserAuthEvents.yaml +10/−0
• fixture/AdminListUserAuthEventsResponse.proto +0/−0
• fixture/AdminSetUserMFAPreference.yaml +10/−0
• fixture/AdminSetUserMFAPreferenceResponse.proto +0/−0
• fixture/AdminUpdateAuthEventFeedback.yaml +10/−0
• fixture/AdminUpdateAuthEventFeedbackResponse.proto +0/−0
• fixture/AssociateSoftwareToken.yaml +10/−0
• fixture/AssociateSoftwareTokenResponse.proto +0/−0
• fixture/DescribeRiskConfiguration.yaml +10/−0
• fixture/DescribeRiskConfigurationResponse.proto +0/−0
• fixture/GetSigningCertificate.yaml +10/−0
• fixture/GetSigningCertificateResponse.proto +0/−0
• fixture/GetUserPoolMFAConfig.yaml +10/−0
• fixture/GetUserPoolMFAConfigResponse.proto +0/−0
• fixture/SetRiskConfiguration.yaml +10/−0
• fixture/SetRiskConfigurationResponse.proto +0/−0
• fixture/SetUserMFAPreference.yaml +10/−0
• fixture/SetUserMFAPreferenceResponse.proto +0/−0
• fixture/SetUserPoolMFAConfig.yaml +10/−0
• fixture/SetUserPoolMFAConfigResponse.proto +0/−0
• fixture/UpdateAuthEventFeedback.yaml +10/−0
• fixture/UpdateAuthEventFeedbackResponse.proto +0/−0
• fixture/VerifySoftwareToken.yaml +10/−0
• fixture/VerifySoftwareTokenResponse.proto +0/−0
• gen/Network/AWS/CognitoIdentityProvider.hs +263/−1
• gen/Network/AWS/CognitoIdentityProvider/AddCustomAttributes.hs +7/−7
• gen/Network/AWS/CognitoIdentityProvider/AdminAddUserToGroup.hs +8/−8
• gen/Network/AWS/CognitoIdentityProvider/AdminConfirmSignUp.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/AdminCreateUser.hs +31/−25
• gen/Network/AWS/CognitoIdentityProvider/AdminDeleteUser.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/AdminDeleteUserAttributes.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/AdminDisableProviderForUser.hs +8/−8
• gen/Network/AWS/CognitoIdentityProvider/AdminDisableUser.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/AdminEnableUser.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/AdminForgetDevice.hs +8/−8
• gen/Network/AWS/CognitoIdentityProvider/AdminGetDevice.hs +11/−11
• gen/Network/AWS/CognitoIdentityProvider/AdminGetUser.hs +41/−21
• gen/Network/AWS/CognitoIdentityProvider/AdminInitiateAuth.hs +54/−34
• gen/Network/AWS/CognitoIdentityProvider/AdminLinkProviderForUser.hs +12/−12
• gen/Network/AWS/CognitoIdentityProvider/AdminListDevices.hs +17/−17
• gen/Network/AWS/CognitoIdentityProvider/AdminListGroupsForUser.hs +17/−17
• gen/Network/AWS/CognitoIdentityProvider/AdminListUserAuthEvents.hs +181/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminRemoveUserFromGroup.hs +8/−8
• gen/Network/AWS/CognitoIdentityProvider/AdminResetUserPassword.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/AdminRespondToAuthChallenge.hs +53/−33
• gen/Network/AWS/CognitoIdentityProvider/AdminSetUserMFAPreference.hs +161/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminSetUserSettings.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/AdminUpdateAuthEventFeedback.hs +164/−0
• gen/Network/AWS/CognitoIdentityProvider/AdminUpdateDeviceStatus.hs +11/−11
• gen/Network/AWS/CognitoIdentityProvider/AdminUpdateUserAttributes.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/AdminUserGlobalSignOut.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/AssociateSoftwareToken.hs +155/−0
• gen/Network/AWS/CognitoIdentityProvider/ChangePassword.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ConfirmDevice.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ConfirmForgotPassword.hs +41/−21
• gen/Network/AWS/CognitoIdentityProvider/ConfirmSignUp.hs +33/−13
• gen/Network/AWS/CognitoIdentityProvider/CreateGroup.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/CreateIdentityProvider.hs +19/−19
• gen/Network/AWS/CognitoIdentityProvider/CreateResourceServer.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/CreateUserImportJob.hs +11/−11
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPool.hs +51/−41
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPoolClient.hs +44/−33
• gen/Network/AWS/CognitoIdentityProvider/CreateUserPoolDomain.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/DeleteGroup.hs +3/−3
• gen/Network/AWS/CognitoIdentityProvider/DeleteIdentityProvider.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/DeleteResourceServer.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/DeleteUser.hs +2/−2
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserAttributes.hs +7/−7
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPool.hs +2/−2
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPoolClient.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/DeleteUserPoolDomain.hs +4/−4
• gen/Network/AWS/CognitoIdentityProvider/DescribeIdentityProvider.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/DescribeResourceServer.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/DescribeRiskConfiguration.hs +149/−0
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserImportJob.hs +6/−6
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPool.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPoolClient.hs +7/−7
• gen/Network/AWS/CognitoIdentityProvider/DescribeUserPoolDomain.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/ForgetDevice.hs +3/−3
• gen/Network/AWS/CognitoIdentityProvider/ForgotPassword.hs +36/−16
• gen/Network/AWS/CognitoIdentityProvider/GetCSVHeader.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/GetDevice.hs +6/−6
• gen/Network/AWS/CognitoIdentityProvider/GetGroup.hs +6/−6
• gen/Network/AWS/CognitoIdentityProvider/GetIdentityProviderByIdentifier.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/GetSigningCertificate.hs +142/−0
• gen/Network/AWS/CognitoIdentityProvider/GetUICustomization.hs +8/−8
• gen/Network/AWS/CognitoIdentityProvider/GetUser.hs +37/−17
• gen/Network/AWS/CognitoIdentityProvider/GetUserAttributeVerificationCode.hs +11/−11
• gen/Network/AWS/CognitoIdentityProvider/GetUserPoolMFAConfig.hs +157/−0
• gen/Network/AWS/CognitoIdentityProvider/GlobalSignOut.hs +3/−3
• gen/Network/AWS/CognitoIdentityProvider/InitiateAuth.hs +51/−31
• gen/Network/AWS/CognitoIdentityProvider/ListDevices.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ListGroups.hs +12/−12
• gen/Network/AWS/CognitoIdentityProvider/ListIdentityProviders.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ListResourceServers.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ListUserImportJobs.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ListUserPoolClients.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/ListUserPools.hs +10/−10
• gen/Network/AWS/CognitoIdentityProvider/ListUsers.hs +23/−23
• gen/Network/AWS/CognitoIdentityProvider/ListUsersInGroup.hs +17/−17
• gen/Network/AWS/CognitoIdentityProvider/ResendConfirmationCode.hs +37/−15
• gen/Network/AWS/CognitoIdentityProvider/RespondToAuthChallenge.hs +51/−31
• gen/Network/AWS/CognitoIdentityProvider/SetRiskConfiguration.hs +187/−0
• gen/Network/AWS/CognitoIdentityProvider/SetUICustomization.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/SetUserMFAPreference.hs +149/−0
• gen/Network/AWS/CognitoIdentityProvider/SetUserPoolMFAConfig.hs +192/−0
• gen/Network/AWS/CognitoIdentityProvider/SetUserSettings.hs +5/−5
• gen/Network/AWS/CognitoIdentityProvider/SignUp.hs +50/−30
• gen/Network/AWS/CognitoIdentityProvider/StartUserImportJob.hs +6/−6
• gen/Network/AWS/CognitoIdentityProvider/StopUserImportJob.hs +6/−6
• gen/Network/AWS/CognitoIdentityProvider/Types.hs +250/−16
• gen/Network/AWS/CognitoIdentityProvider/Types/Product.hs +4077/−2641
• gen/Network/AWS/CognitoIdentityProvider/Types/Sum.hs +388/−13
• gen/Network/AWS/CognitoIdentityProvider/UpdateAuthEventFeedback.hs +172/−0
• gen/Network/AWS/CognitoIdentityProvider/UpdateDeviceStatus.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/UpdateGroup.hs +17/−17
• gen/Network/AWS/CognitoIdentityProvider/UpdateIdentityProvider.hs +17/−17
• gen/Network/AWS/CognitoIdentityProvider/UpdateResourceServer.hs +15/−15
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserAttributes.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserPool.hs +43/−33
• gen/Network/AWS/CognitoIdentityProvider/UpdateUserPoolClient.hs +44/−33
• gen/Network/AWS/CognitoIdentityProvider/VerifySoftwareToken.hs +179/−0
• gen/Network/AWS/CognitoIdentityProvider/VerifyUserAttribute.hs +9/−9
• gen/Network/AWS/CognitoIdentityProvider/Waiters.hs +1/−1
• test/Main.hs +1/−1
• test/Test/AWS/CognitoIdentityProvider.hs +1/−1
• test/Test/AWS/CognitoIdentityProvider/Internal.hs +1/−1
• test/Test/AWS/Gen/CognitoIdentityProvider.hs +217/−1

@@ -8,7 +8,7 @@  ## Version -`1.5.0`+`1.6.0`   ## Description

@@ -1,5 +1,5 @@ name:                  amazonka-cognito-idp-version:               1.5.0+version:               1.6.0 synopsis:              Amazon Cognito Identity Provider SDK. homepage:              https://github.com/brendanhay/amazonka bug-reports:           https://github.com/brendanhay/amazonka/issues@@ -7,7 +7,7 @@ license-file:          LICENSE author:                Brendan Hay maintainer:            Brendan Hay <brendan.g.hay+amazonka@gmail.com>-copyright:             Copyright (c) 2013-2017 Brendan Hay+copyright:             Copyright (c) 2013-2018 Brendan Hay category:              Network, AWS, Cloud, Distributed Computing build-type:            Simple cabal-version:         >= 1.10@@ -61,13 +61,17 @@         , Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser         , Network.AWS.CognitoIdentityProvider.AdminListDevices         , Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+        , Network.AWS.CognitoIdentityProvider.AdminListUserAuthEvents         , Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup         , Network.AWS.CognitoIdentityProvider.AdminResetUserPassword         , Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge+        , Network.AWS.CognitoIdentityProvider.AdminSetUserMFAPreference         , Network.AWS.CognitoIdentityProvider.AdminSetUserSettings+        , Network.AWS.CognitoIdentityProvider.AdminUpdateAuthEventFeedback         , Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus         , Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes         , Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut+        , Network.AWS.CognitoIdentityProvider.AssociateSoftwareToken         , Network.AWS.CognitoIdentityProvider.ChangePassword         , Network.AWS.CognitoIdentityProvider.ConfirmDevice         , Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword@@ -89,6 +93,7 @@         , Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain         , Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider         , Network.AWS.CognitoIdentityProvider.DescribeResourceServer+        , Network.AWS.CognitoIdentityProvider.DescribeRiskConfiguration         , Network.AWS.CognitoIdentityProvider.DescribeUserImportJob         , Network.AWS.CognitoIdentityProvider.DescribeUserPool         , Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient@@ -99,9 +104,11 @@         , Network.AWS.CognitoIdentityProvider.GetDevice         , Network.AWS.CognitoIdentityProvider.GetGroup         , Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier+        , Network.AWS.CognitoIdentityProvider.GetSigningCertificate         , Network.AWS.CognitoIdentityProvider.GetUICustomization         , Network.AWS.CognitoIdentityProvider.GetUser         , Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode+        , Network.AWS.CognitoIdentityProvider.GetUserPoolMFAConfig         , Network.AWS.CognitoIdentityProvider.GlobalSignOut         , Network.AWS.CognitoIdentityProvider.InitiateAuth         , Network.AWS.CognitoIdentityProvider.ListDevices@@ -115,12 +122,16 @@         , Network.AWS.CognitoIdentityProvider.ListUsersInGroup         , Network.AWS.CognitoIdentityProvider.ResendConfirmationCode         , Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge+        , Network.AWS.CognitoIdentityProvider.SetRiskConfiguration         , Network.AWS.CognitoIdentityProvider.SetUICustomization+        , Network.AWS.CognitoIdentityProvider.SetUserMFAPreference+        , Network.AWS.CognitoIdentityProvider.SetUserPoolMFAConfig         , Network.AWS.CognitoIdentityProvider.SetUserSettings         , Network.AWS.CognitoIdentityProvider.SignUp         , Network.AWS.CognitoIdentityProvider.StartUserImportJob         , Network.AWS.CognitoIdentityProvider.StopUserImportJob         , Network.AWS.CognitoIdentityProvider.Types+        , Network.AWS.CognitoIdentityProvider.UpdateAuthEventFeedback         , Network.AWS.CognitoIdentityProvider.UpdateDeviceStatus         , Network.AWS.CognitoIdentityProvider.UpdateGroup         , Network.AWS.CognitoIdentityProvider.UpdateIdentityProvider@@ -128,6 +139,7 @@         , Network.AWS.CognitoIdentityProvider.UpdateUserAttributes         , Network.AWS.CognitoIdentityProvider.UpdateUserPool         , Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient+        , Network.AWS.CognitoIdentityProvider.VerifySoftwareToken         , Network.AWS.CognitoIdentityProvider.VerifyUserAttribute         , Network.AWS.CognitoIdentityProvider.Waiters @@ -136,7 +148,7 @@         , Network.AWS.CognitoIdentityProvider.Types.Sum      build-depends:-          amazonka-core == 1.5.0.*+          amazonka-core == 1.6.0.*         , base          >= 4.7     && < 5  test-suite amazonka-cognito-idp-test@@ -156,8 +168,8 @@         , Test.AWS.CognitoIdentityProvider.Internal      build-depends:-          amazonka-core == 1.5.0.*-        , amazonka-test == 1.5.0.*+          amazonka-core == 1.6.0.*+        , amazonka-test == 1.6.0.*         , amazonka-cognito-idp         , base         , bytestring

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -0,0 +1,10 @@+---+method: POST+headers:+  Authorization:         AWS4-HMAC-SHA256 Credential=access/20091028/us-east-1/cognito-idp/aws4_request, SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date, Signature=?+  Host:                  cognito-idp.us-east-1.amazonaws.com+  Content-Type:          application/x-www-form-urlencoded; charset=utf-8+  X-Amz-Content-SHA256:  abcdef+  X-Amz-Date:            20091028T223200Z+body:+  ''

@@ -5,7 +5,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -77,12 +77,18 @@     -- ** UserPoolTaggingException     , _UserPoolTaggingException +    -- ** SoftwareTokenMFANotFoundException+    , _SoftwareTokenMFANotFoundException+     -- ** TooManyRequestsException     , _TooManyRequestsException      -- ** ConcurrentModificationException     , _ConcurrentModificationException +    -- ** UserPoolAddOnNotEnabledException+    , _UserPoolAddOnNotEnabledException+     -- ** UserLambdaValidationException     , _UserLambdaValidationException @@ -95,6 +101,9 @@     -- ** TooManyFailedAttemptsException     , _TooManyFailedAttemptsException +    -- ** EnableSoftwareTokenMFAException+    , _EnableSoftwareTokenMFAException+     -- ** UserNotConfirmedException     , _UserNotConfirmedException @@ -155,6 +164,9 @@     -- ** GetUserAttributeVerificationCode     , module Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode +    -- ** SetUserPoolMFAConfig+    , module Network.AWS.CognitoIdentityProvider.SetUserPoolMFAConfig+     -- ** UpdateUserAttributes     , module Network.AWS.CognitoIdentityProvider.UpdateUserAttributes @@ -200,6 +212,9 @@     -- ** ListUsersInGroup     , module Network.AWS.CognitoIdentityProvider.ListUsersInGroup +    -- ** AssociateSoftwareToken+    , module Network.AWS.CognitoIdentityProvider.AssociateSoftwareToken+     -- ** AdminDisableProviderForUser     , module Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser @@ -218,6 +233,9 @@     -- ** AdminConfirmSignUp     , module Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp +    -- ** AdminUpdateAuthEventFeedback+    , module Network.AWS.CognitoIdentityProvider.AdminUpdateAuthEventFeedback+     -- ** StartUserImportJob     , module Network.AWS.CognitoIdentityProvider.StartUserImportJob @@ -263,6 +281,9 @@     -- ** AdminRemoveUserFromGroup     , module Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup +    -- ** SetRiskConfiguration+    , module Network.AWS.CognitoIdentityProvider.SetRiskConfiguration+     -- ** ConfirmSignUp     , module Network.AWS.CognitoIdentityProvider.ConfirmSignUp @@ -272,6 +293,9 @@     -- ** AdminResetUserPassword     , module Network.AWS.CognitoIdentityProvider.AdminResetUserPassword +    -- ** UpdateAuthEventFeedback+    , module Network.AWS.CognitoIdentityProvider.UpdateAuthEventFeedback+     -- ** CreateUserImportJob     , module Network.AWS.CognitoIdentityProvider.CreateUserImportJob @@ -293,6 +317,9 @@     -- ** DescribeResourceServer     , module Network.AWS.CognitoIdentityProvider.DescribeResourceServer +    -- ** SetUserMFAPreference+    , module Network.AWS.CognitoIdentityProvider.SetUserMFAPreference+     -- ** AdminUpdateDeviceStatus     , module Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus @@ -305,6 +332,9 @@     -- ** ListUserPoolClients     , module Network.AWS.CognitoIdentityProvider.ListUserPoolClients +    -- ** AdminSetUserMFAPreference+    , module Network.AWS.CognitoIdentityProvider.AdminSetUserMFAPreference+     -- ** UpdateUserPoolClient     , module Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient @@ -317,27 +347,42 @@     -- ** ForgetDevice     , module Network.AWS.CognitoIdentityProvider.ForgetDevice +    -- ** GetSigningCertificate+    , module Network.AWS.CognitoIdentityProvider.GetSigningCertificate+     -- ** DeleteUser     , module Network.AWS.CognitoIdentityProvider.DeleteUser      -- ** CreateUserPoolClient     , module Network.AWS.CognitoIdentityProvider.CreateUserPoolClient +    -- ** GetUserPoolMFAConfig+    , module Network.AWS.CognitoIdentityProvider.GetUserPoolMFAConfig+     -- ** CreateResourceServer     , module Network.AWS.CognitoIdentityProvider.CreateResourceServer +    -- ** AdminListUserAuthEvents+    , module Network.AWS.CognitoIdentityProvider.AdminListUserAuthEvents+     -- ** CreateGroup     , module Network.AWS.CognitoIdentityProvider.CreateGroup      -- ** AdminAddUserToGroup     , module Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup +    -- ** VerifySoftwareToken+    , module Network.AWS.CognitoIdentityProvider.VerifySoftwareToken+     -- ** StopUserImportJob     , module Network.AWS.CognitoIdentityProvider.StopUserImportJob      -- ** DescribeUserImportJob     , module Network.AWS.CognitoIdentityProvider.DescribeUserImportJob +    -- ** DescribeRiskConfiguration+    , module Network.AWS.CognitoIdentityProvider.DescribeRiskConfiguration+     -- ** DeleteGroup     , module Network.AWS.CognitoIdentityProvider.DeleteGroup @@ -385,6 +430,12 @@      -- * Types +    -- ** AccountTakeoverEventActionType+    , AccountTakeoverEventActionType (..)++    -- ** AdvancedSecurityModeType+    , AdvancedSecurityModeType (..)+     -- ** AliasAttributeType     , AliasAttributeType (..) @@ -394,9 +445,18 @@     -- ** AuthFlowType     , AuthFlowType (..) +    -- ** ChallengeName+    , ChallengeName (..)+     -- ** ChallengeNameType     , ChallengeNameType (..) +    -- ** ChallengeResponse+    , ChallengeResponse (..)++    -- ** CompromisedCredentialsEventActionType+    , CompromisedCredentialsEventActionType (..)+     -- ** DefaultEmailOptionType     , DefaultEmailOptionType (..) @@ -409,9 +469,21 @@     -- ** DomainStatusType     , DomainStatusType (..) +    -- ** EventFilterType+    , EventFilterType (..)++    -- ** EventResponseType+    , EventResponseType (..)++    -- ** EventType+    , EventType (..)+     -- ** ExplicitAuthFlowsType     , ExplicitAuthFlowsType (..) +    -- ** FeedbackValueType+    , FeedbackValueType (..)+     -- ** IdentityProviderTypeType     , IdentityProviderTypeType (..) @@ -421,6 +493,12 @@     -- ** OAuthFlowType     , OAuthFlowType (..) +    -- ** RiskDecisionType+    , RiskDecisionType (..)++    -- ** RiskLevelType+    , RiskLevelType (..)+     -- ** StatusType     , StatusType (..) @@ -439,6 +517,28 @@     -- ** VerifiedAttributeType     , VerifiedAttributeType (..) +    -- ** VerifySoftwareTokenResponseType+    , VerifySoftwareTokenResponseType (..)++    -- ** AccountTakeoverActionType+    , AccountTakeoverActionType+    , accountTakeoverActionType+    , atatNotify+    , atatEventAction++    -- ** AccountTakeoverActionsType+    , AccountTakeoverActionsType+    , accountTakeoverActionsType+    , atatLowAction+    , atatHighAction+    , atatMediumAction++    -- ** AccountTakeoverRiskConfigurationType+    , AccountTakeoverRiskConfigurationType+    , accountTakeoverRiskConfigurationType+    , atrctNotifyConfiguration+    , atrctActions+     -- ** AdminCreateUserConfigType     , AdminCreateUserConfigType     , adminCreateUserConfigType@@ -446,12 +546,37 @@     , acuctUnusedAccountValidityDays     , acuctInviteMessageTemplate +    -- ** AnalyticsConfigurationType+    , AnalyticsConfigurationType+    , analyticsConfigurationType+    , actUserDataShared+    , actApplicationId+    , actRoleARN+    , actExternalId++    -- ** AnalyticsMetadataType+    , AnalyticsMetadataType+    , analyticsMetadataType+    , amtAnalyticsEndpointId+     -- ** AttributeType     , AttributeType     , attributeType     , atValue     , atName +    -- ** AuthEventType+    , AuthEventType+    , authEventType+    , aetEventRisk+    , aetEventResponse+    , aetEventContextData+    , aetChallengeResponses+    , aetEventType+    , aetCreationDate+    , aetEventFeedback+    , aetEventId+     -- ** AuthenticationResultType     , AuthenticationResultType     , authenticationResultType@@ -462,6 +587,12 @@     , artTokenType     , artIdToken +    -- ** ChallengeResponseType+    , ChallengeResponseType+    , challengeResponseType+    , crtChallengeName+    , crtChallengeResponse+     -- ** CodeDeliveryDetailsType     , CodeDeliveryDetailsType     , codeDeliveryDetailsType@@ -469,6 +600,26 @@     , cddtDeliveryMedium     , cddtAttributeName +    -- ** CompromisedCredentialsActionsType+    , CompromisedCredentialsActionsType+    , compromisedCredentialsActionsType+    , ccatEventAction++    -- ** CompromisedCredentialsRiskConfigurationType+    , CompromisedCredentialsRiskConfigurationType+    , compromisedCredentialsRiskConfigurationType+    , ccrctEventFilter+    , ccrctActions++    -- ** ContextDataType+    , ContextDataType+    , contextDataType+    , cdtEncodedData+    , cdtIPAddress+    , cdtServerName+    , cdtServerPath+    , cdtHTTPHeaders+     -- ** DeviceConfigurationType     , DeviceConfigurationType     , deviceConfigurationType@@ -507,6 +658,28 @@     , ectSourceARN     , ectReplyToEmailAddress +    -- ** EventContextDataType+    , EventContextDataType+    , eventContextDataType+    , ecdtIPAddress+    , ecdtCountry+    , ecdtCity+    , ecdtDeviceName+    , ecdtTimezone++    -- ** EventFeedbackType+    , EventFeedbackType+    , eventFeedbackType+    , eftFeedbackDate+    , eftFeedbackValue+    , eftProvider++    -- ** EventRiskType+    , EventRiskType+    , eventRiskType+    , ertRiskLevel+    , ertRiskDecision+     -- ** GroupType     , GroupType     , groupType@@ -518,6 +691,12 @@     , gtDescription     , gtRoleARN +    -- ** HTTPHeader+    , HTTPHeader+    , hTTPHeader+    , httphHeaderValue+    , httphHeaderName+     -- ** IdentityProviderType     , IdentityProviderType     , identityProviderType@@ -540,6 +719,8 @@     , lctCustomMessage     , lctDefineAuthChallenge     , lctPostConfirmation+    , lctPreTokenGeneration+    , lctUserMigration     , lctPreSignUp      -- ** MFAOptionType@@ -561,6 +742,23 @@     , ndmtDeviceGroupKey     , ndmtDeviceKey +    -- ** NotifyConfigurationType+    , NotifyConfigurationType+    , notifyConfigurationType+    , nctNoActionEmail+    , nctFrom+    , nctReplyTo+    , nctBlockEmail+    , nctMFAEmail+    , nctSourceARN++    -- ** NotifyEmailType+    , NotifyEmailType+    , notifyEmailType+    , netTextBody+    , netHTMLBody+    , netSubject+     -- ** NumberAttributeConstraintsType     , NumberAttributeConstraintsType     , numberAttributeConstraintsType@@ -605,6 +803,28 @@     , rstScopes     , rstName +    -- ** RiskConfigurationType+    , RiskConfigurationType+    , riskConfigurationType+    , rctRiskExceptionConfiguration+    , rctClientId+    , rctAccountTakeoverRiskConfiguration+    , rctLastModifiedDate+    , rctUserPoolId+    , rctCompromisedCredentialsRiskConfiguration++    -- ** RiskExceptionConfigurationType+    , RiskExceptionConfigurationType+    , riskExceptionConfigurationType+    , rectSkippedIPRangeList+    , rectBlockedIPRangeList++    -- ** SMSMFASettingsType+    , SMSMFASettingsType+    , sMSMFASettingsType+    , smsmstEnabled+    , smsmstPreferredMFA+     -- ** SchemaAttributeType     , SchemaAttributeType     , schemaAttributeType@@ -622,6 +842,23 @@     , sctExternalId     , sctSNSCallerARN +    -- ** SmsMFAConfigType+    , SmsMFAConfigType+    , smsMFAConfigType+    , smctSmsAuthenticationMessage+    , smctSmsConfiguration++    -- ** SoftwareTokenMFAConfigType+    , SoftwareTokenMFAConfigType+    , softwareTokenMFAConfigType+    , stmctEnabled++    -- ** SoftwareTokenMFASettingsType+    , SoftwareTokenMFASettingsType+    , softwareTokenMFASettingsType+    , stmstEnabled+    , stmstPreferredMFA+     -- ** StringAttributeConstraintsType     , StringAttributeConstraintsType     , stringAttributeConstraintsType@@ -639,6 +876,11 @@     , uictImageURL     , uictCreationDate +    -- ** UserContextDataType+    , UserContextDataType+    , userContextDataType+    , ucdtEncodedData+     -- ** UserImportJobType     , UserImportJobType     , userImportJobType@@ -656,6 +898,11 @@     , uijtCloudWatchLogsRoleARN     , uijtImportedUsers +    -- ** UserPoolAddOnsType+    , UserPoolAddOnsType+    , userPoolAddOnsType+    , upaotAdvancedSecurityMode+     -- ** UserPoolClientDescription     , UserPoolClientDescription     , userPoolClientDescription@@ -681,6 +928,7 @@     , upctReadAttributes     , upctAllowedOAuthScopes     , upctAllowedOAuthFlows+    , upctAnalyticsConfiguration     , upctClientName     , upctCallbackURLs @@ -708,8 +956,10 @@     , uptLastModifiedDate     , uptVerificationMessageTemplate     , uptEstimatedNumberOfUsers+    , uptDomain     , uptEmailVerificationMessage     , uptSmsAuthenticationMessage+    , uptUserPoolAddOns     , uptSchemaAttributes     , uptEmailVerificationSubject     , uptUsernameAttributes@@ -766,13 +1016,17 @@ import Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser import Network.AWS.CognitoIdentityProvider.AdminListDevices import Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser+import Network.AWS.CognitoIdentityProvider.AdminListUserAuthEvents import Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup import Network.AWS.CognitoIdentityProvider.AdminResetUserPassword import Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge+import Network.AWS.CognitoIdentityProvider.AdminSetUserMFAPreference import Network.AWS.CognitoIdentityProvider.AdminSetUserSettings+import Network.AWS.CognitoIdentityProvider.AdminUpdateAuthEventFeedback import Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus import Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes import Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut+import Network.AWS.CognitoIdentityProvider.AssociateSoftwareToken import Network.AWS.CognitoIdentityProvider.ChangePassword import Network.AWS.CognitoIdentityProvider.ConfirmDevice import Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword@@ -794,6 +1048,7 @@ import Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain import Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider import Network.AWS.CognitoIdentityProvider.DescribeResourceServer+import Network.AWS.CognitoIdentityProvider.DescribeRiskConfiguration import Network.AWS.CognitoIdentityProvider.DescribeUserImportJob import Network.AWS.CognitoIdentityProvider.DescribeUserPool import Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient@@ -804,9 +1059,11 @@ import Network.AWS.CognitoIdentityProvider.GetDevice import Network.AWS.CognitoIdentityProvider.GetGroup import Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier+import Network.AWS.CognitoIdentityProvider.GetSigningCertificate import Network.AWS.CognitoIdentityProvider.GetUICustomization import Network.AWS.CognitoIdentityProvider.GetUser import Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode+import Network.AWS.CognitoIdentityProvider.GetUserPoolMFAConfig import Network.AWS.CognitoIdentityProvider.GlobalSignOut import Network.AWS.CognitoIdentityProvider.InitiateAuth import Network.AWS.CognitoIdentityProvider.ListDevices@@ -820,12 +1077,16 @@ import Network.AWS.CognitoIdentityProvider.ListUsersInGroup import Network.AWS.CognitoIdentityProvider.ResendConfirmationCode import Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge+import Network.AWS.CognitoIdentityProvider.SetRiskConfiguration import Network.AWS.CognitoIdentityProvider.SetUICustomization+import Network.AWS.CognitoIdentityProvider.SetUserMFAPreference+import Network.AWS.CognitoIdentityProvider.SetUserPoolMFAConfig import Network.AWS.CognitoIdentityProvider.SetUserSettings import Network.AWS.CognitoIdentityProvider.SignUp import Network.AWS.CognitoIdentityProvider.StartUserImportJob import Network.AWS.CognitoIdentityProvider.StopUserImportJob import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.UpdateAuthEventFeedback import Network.AWS.CognitoIdentityProvider.UpdateDeviceStatus import Network.AWS.CognitoIdentityProvider.UpdateGroup import Network.AWS.CognitoIdentityProvider.UpdateIdentityProvider@@ -833,6 +1094,7 @@ import Network.AWS.CognitoIdentityProvider.UpdateUserAttributes import Network.AWS.CognitoIdentityProvider.UpdateUserPool import Network.AWS.CognitoIdentityProvider.UpdateUserPoolClient+import Network.AWS.CognitoIdentityProvider.VerifySoftwareToken import Network.AWS.CognitoIdentityProvider.VerifyUserAttribute import Network.AWS.CognitoIdentityProvider.Waiters 

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AddCustomAttributes--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,18 +68,18 @@     -> AddCustomAttributes addCustomAttributes pUserPoolId_ pCustomAttributes_ =   AddCustomAttributes'-  { _acaUserPoolId = pUserPoolId_-  , _acaCustomAttributes = _List1 # pCustomAttributes_-  }+    { _acaUserPoolId = pUserPoolId_+    , _acaCustomAttributes = _List1 # pCustomAttributes_+    }   -- | The user pool ID for the user pool where you want to add custom attributes. acaUserPoolId :: Lens' AddCustomAttributes Text-acaUserPoolId = lens _acaUserPoolId (\ s a -> s{_acaUserPoolId = a});+acaUserPoolId = lens _acaUserPoolId (\ s a -> s{_acaUserPoolId = a})  -- | An array of custom attributes, such as Mutable and Name. acaCustomAttributes :: Lens' AddCustomAttributes (NonEmpty SchemaAttributeType)-acaCustomAttributes = lens _acaCustomAttributes (\ s a -> s{_acaCustomAttributes = a}) . _List1;+acaCustomAttributes = lens _acaCustomAttributes (\ s a -> s{_acaCustomAttributes = a}) . _List1  instance AWSRequest AddCustomAttributes where         type Rs AddCustomAttributes =@@ -141,6 +141,6 @@  -- | -- | The response status code. acarsResponseStatus :: Lens' AddCustomAttributesResponse Int-acarsResponseStatus = lens _acarsResponseStatus (\ s a -> s{_acarsResponseStatus = a});+acarsResponseStatus = lens _acarsResponseStatus (\ s a -> s{_acarsResponseStatus = a})  instance NFData AddCustomAttributesResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminAddUserToGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,23 +69,23 @@     -> AdminAddUserToGroup adminAddUserToGroup pUserPoolId_ pUsername_ pGroupName_ =   AdminAddUserToGroup'-  { _aautgUserPoolId = pUserPoolId_-  , _aautgUsername = _Sensitive # pUsername_-  , _aautgGroupName = pGroupName_-  }+    { _aautgUserPoolId = pUserPoolId_+    , _aautgUsername = _Sensitive # pUsername_+    , _aautgGroupName = pGroupName_+    }   -- | The user pool ID for the user pool. aautgUserPoolId :: Lens' AdminAddUserToGroup Text-aautgUserPoolId = lens _aautgUserPoolId (\ s a -> s{_aautgUserPoolId = a});+aautgUserPoolId = lens _aautgUserPoolId (\ s a -> s{_aautgUserPoolId = a})  -- | The username for the user. aautgUsername :: Lens' AdminAddUserToGroup Text-aautgUsername = lens _aautgUsername (\ s a -> s{_aautgUsername = a}) . _Sensitive;+aautgUsername = lens _aautgUsername (\ s a -> s{_aautgUsername = a}) . _Sensitive  -- | The group name. aautgGroupName :: Lens' AdminAddUserToGroup Text-aautgGroupName = lens _aautgGroupName (\ s a -> s{_aautgGroupName = a});+aautgGroupName = lens _aautgGroupName (\ s a -> s{_aautgGroupName = a})  instance AWSRequest AdminAddUserToGroup where         type Rs AdminAddUserToGroup =

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminConfirmSignUp--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -70,16 +70,16 @@     -> AdminConfirmSignUp adminConfirmSignUp pUserPoolId_ pUsername_ =   AdminConfirmSignUp'-  {_acsuUserPoolId = pUserPoolId_, _acsuUsername = _Sensitive # pUsername_}+    {_acsuUserPoolId = pUserPoolId_, _acsuUsername = _Sensitive # pUsername_}   -- | The user pool ID for which you want to confirm user registration. acsuUserPoolId :: Lens' AdminConfirmSignUp Text-acsuUserPoolId = lens _acsuUserPoolId (\ s a -> s{_acsuUserPoolId = a});+acsuUserPoolId = lens _acsuUserPoolId (\ s a -> s{_acsuUserPoolId = a})  -- | The user name for which you want to confirm user registration. acsuUsername :: Lens' AdminConfirmSignUp Text-acsuUsername = lens _acsuUsername (\ s a -> s{_acsuUsername = a}) . _Sensitive;+acsuUsername = lens _acsuUsername (\ s a -> s{_acsuUsername = a}) . _Sensitive  instance AWSRequest AdminConfirmSignUp where         type Rs AdminConfirmSignUp =@@ -141,6 +141,6 @@  -- | -- | The response status code. acsursResponseStatus :: Lens' AdminConfirmSignUpResponse Int-acsursResponseStatus = lens _acsursResponseStatus (\ s a -> s{_acsursResponseStatus = a});+acsursResponseStatus = lens _acsursResponseStatus (\ s a -> s{_acsursResponseStatus = a})  instance NFData AdminConfirmSignUpResponse where

@@ -12,17 +12,23 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminCreateUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Creates a new user in the specified user pool and sends a welcome message via email or phone (SMS). This message is based on a template that you configured in your call to <API_CreateUserPool.html CreateUserPool> or <API_UpdateUserPool.html UpdateUserPool> . This template includes your custom sign-up instructions and placeholders for user name and temporary password.+-- Creates a new user in the specified user pool. -- ----- Requires developer credentials.+-- If @MessageAction@ is not set, the default is to send a welcome message via email or phone (SMS). --+-- Alternatively, you can call AdminCreateUser with “SUPPRESS” for the @MessageAction@ parameter, and Amazon Cognito will not send any email.+--+-- In either case, the user will be in the @FORCE_CHANGE_PASSWORD@ state until they sign in and change their password.+--+-- AdminCreateUser requires developer credentials.+-- module Network.AWS.CognitoIdentityProvider.AdminCreateUser     (     -- * Creating a Request@@ -82,7 +88,7 @@ -- -- * 'acuMessageAction' - Set to @"RESEND"@ to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to @"SUPPRESS"@ to suppress sending the message. Only one value can be specified. ----- * 'acuUserAttributes' - An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in <API_CreateUserPool.html CreateUserPool> or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling <API_AdminUpdateUserAttributes.html AdminUpdateUserAttributes> .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter.+-- * 'acuUserAttributes' - An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter. -- -- * 'acuValidationData' - The user's validation data. This is an array of name-value pairs that contain user attributes and attribute values that you can use for custom validation, such as restricting the types of user accounts that can be registered. For example, you might choose to allow or disallow user sign-up based on the user's domain. To configure custom validation, you must create a Pre Sign-up Lambda trigger for the user pool as described in the Amazon Cognito Developer Guide. The Lambda trigger receives the validation data and uses it in the validation process. The user's validation data is not persisted. --@@ -95,48 +101,48 @@     -> AdminCreateUser adminCreateUser pUserPoolId_ pUsername_ =   AdminCreateUser'-  { _acuTemporaryPassword = Nothing-  , _acuForceAliasCreation = Nothing-  , _acuDesiredDeliveryMediums = Nothing-  , _acuMessageAction = Nothing-  , _acuUserAttributes = Nothing-  , _acuValidationData = Nothing-  , _acuUserPoolId = pUserPoolId_-  , _acuUsername = _Sensitive # pUsername_-  }+    { _acuTemporaryPassword = Nothing+    , _acuForceAliasCreation = Nothing+    , _acuDesiredDeliveryMediums = Nothing+    , _acuMessageAction = Nothing+    , _acuUserAttributes = Nothing+    , _acuValidationData = Nothing+    , _acuUserPoolId = pUserPoolId_+    , _acuUsername = _Sensitive # pUsername_+    }   -- | The user's temporary password. This password must conform to the password policy that you specified when you created the user pool. The temporary password is valid only once. To complete the Admin Create User flow, the user must enter the temporary password in the sign-in page along with a new password to be used in all future sign-ins. This parameter is not required. If you do not specify a value, Amazon Cognito generates one for you. The temporary password can only be used until the user account expiration limit that you specified when you created the user pool. To reset the account after that time limit, you must call @AdminCreateUser@ again, specifying @"RESEND"@ for the @MessageAction@ parameter. acuTemporaryPassword :: Lens' AdminCreateUser (Maybe Text)-acuTemporaryPassword = lens _acuTemporaryPassword (\ s a -> s{_acuTemporaryPassword = a}) . mapping _Sensitive;+acuTemporaryPassword = lens _acuTemporaryPassword (\ s a -> s{_acuTemporaryPassword = a}) . mapping _Sensitive  -- | This parameter is only used if the @phone_number_verified@ or @email_verified@ attribute is set to @True@ . Otherwise, it is ignored. If this parameter is set to @True@ and the phone number or email address specified in the UserAttributes parameter already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user. The previous user will no longer be able to log in using that alias. If this parameter is set to @False@ , the API throws an @AliasExistsException@ error if the alias already exists. The default value is @False@ . acuForceAliasCreation :: Lens' AdminCreateUser (Maybe Bool)-acuForceAliasCreation = lens _acuForceAliasCreation (\ s a -> s{_acuForceAliasCreation = a});+acuForceAliasCreation = lens _acuForceAliasCreation (\ s a -> s{_acuForceAliasCreation = a})  -- | Specify @"EMAIL"@ if email will be used to send the welcome message. Specify @"SMS"@ if the phone number will be used. The default value is @"SMS"@ . More than one value can be specified. acuDesiredDeliveryMediums :: Lens' AdminCreateUser [DeliveryMediumType]-acuDesiredDeliveryMediums = lens _acuDesiredDeliveryMediums (\ s a -> s{_acuDesiredDeliveryMediums = a}) . _Default . _Coerce;+acuDesiredDeliveryMediums = lens _acuDesiredDeliveryMediums (\ s a -> s{_acuDesiredDeliveryMediums = a}) . _Default . _Coerce  -- | Set to @"RESEND"@ to resend the invitation message to a user that already exists and reset the expiration limit on the user's account. Set to @"SUPPRESS"@ to suppress sending the message. Only one value can be specified. acuMessageAction :: Lens' AdminCreateUser (Maybe MessageActionType)-acuMessageAction = lens _acuMessageAction (\ s a -> s{_acuMessageAction = a});+acuMessageAction = lens _acuMessageAction (\ s a -> s{_acuMessageAction = a}) --- | An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in <API_CreateUserPool.html CreateUserPool> or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling <API_AdminUpdateUserAttributes.html AdminUpdateUserAttributes> .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter.+-- | An array of name-value pairs that contain user attributes and attribute values to be set for the user to be created. You can create a user without specifying any attributes other than @Username@ . However, any attributes that you specify as required (in or in the __Attributes__ tab of the console) must be supplied either by you (in your call to @AdminCreateUser@ ) or by the user (when he or she signs up in response to your welcome message). For custom attributes, you must prepend the @custom:@ prefix to the attribute name. To send a message inviting the user to sign up, you must specify the user's email address or phone number. This can be done in your call to AdminCreateUser or in the __Users__ tab of the Amazon Cognito console for managing your user pools. In your call to @AdminCreateUser@ , you can set the @email_verified@ attribute to @True@ , and you can set the @phone_number_verified@ attribute to @True@ . (You can also do this by calling .)     * __email__ : The email address of the user to whom the message that contains the code and username will be sent. Required if the @email_verified@ attribute is set to @True@ , or if @"EMAIL"@ is specified in the @DesiredDeliveryMediums@ parameter.     * __phone_number__ : The phone number of the user to whom the message that contains the code and username will be sent. Required if the @phone_number_verified@ attribute is set to @True@ , or if @"SMS"@ is specified in the @DesiredDeliveryMediums@ parameter. acuUserAttributes :: Lens' AdminCreateUser [AttributeType]-acuUserAttributes = lens _acuUserAttributes (\ s a -> s{_acuUserAttributes = a}) . _Default . _Coerce;+acuUserAttributes = lens _acuUserAttributes (\ s a -> s{_acuUserAttributes = a}) . _Default . _Coerce  -- | The user's validation data. This is an array of name-value pairs that contain user attributes and attribute values that you can use for custom validation, such as restricting the types of user accounts that can be registered. For example, you might choose to allow or disallow user sign-up based on the user's domain. To configure custom validation, you must create a Pre Sign-up Lambda trigger for the user pool as described in the Amazon Cognito Developer Guide. The Lambda trigger receives the validation data and uses it in the validation process. The user's validation data is not persisted. acuValidationData :: Lens' AdminCreateUser [AttributeType]-acuValidationData = lens _acuValidationData (\ s a -> s{_acuValidationData = a}) . _Default . _Coerce;+acuValidationData = lens _acuValidationData (\ s a -> s{_acuValidationData = a}) . _Default . _Coerce  -- | The user pool ID for the user pool where the user will be created. acuUserPoolId :: Lens' AdminCreateUser Text-acuUserPoolId = lens _acuUserPoolId (\ s a -> s{_acuUserPoolId = a});+acuUserPoolId = lens _acuUserPoolId (\ s a -> s{_acuUserPoolId = a})  -- | The username for the user. Must be unique within the user pool. Must be a UTF-8 string between 1 and 128 characters. After the user is created, the username cannot be changed. acuUsername :: Lens' AdminCreateUser Text-acuUsername = lens _acuUsername (\ s a -> s{_acuUsername = a}) . _Sensitive;+acuUsername = lens _acuUsername (\ s a -> s{_acuUsername = a}) . _Sensitive  instance AWSRequest AdminCreateUser where         type Rs AdminCreateUser = AdminCreateUserResponse@@ -204,15 +210,15 @@     -> AdminCreateUserResponse adminCreateUserResponse pResponseStatus_ =   AdminCreateUserResponse'-  {_acursUser = Nothing, _acursResponseStatus = pResponseStatus_}+    {_acursUser = Nothing, _acursResponseStatus = pResponseStatus_}   -- | The newly created user. acursUser :: Lens' AdminCreateUserResponse (Maybe UserType)-acursUser = lens _acursUser (\ s a -> s{_acursUser = a});+acursUser = lens _acursUser (\ s a -> s{_acursUser = a})  -- | -- | The response status code. acursResponseStatus :: Lens' AdminCreateUserResponse Int-acursResponseStatus = lens _acursResponseStatus (\ s a -> s{_acursResponseStatus = a});+acursResponseStatus = lens _acursResponseStatus (\ s a -> s{_acursResponseStatus = a})  instance NFData AdminCreateUserResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDeleteUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,16 +68,16 @@     -> AdminDeleteUser adminDeleteUser pUserPoolId_ pUsername_ =   AdminDeleteUser'-  {_aUserPoolId = pUserPoolId_, _aUsername = _Sensitive # pUsername_}+    {_aUserPoolId = pUserPoolId_, _aUsername = _Sensitive # pUsername_}   -- | The user pool ID for the user pool where you want to delete the user. aUserPoolId :: Lens' AdminDeleteUser Text-aUserPoolId = lens _aUserPoolId (\ s a -> s{_aUserPoolId = a});+aUserPoolId = lens _aUserPoolId (\ s a -> s{_aUserPoolId = a})  -- | The user name of the user you wish to delete. aUsername :: Lens' AdminDeleteUser Text-aUsername = lens _aUsername (\ s a -> s{_aUsername = a}) . _Sensitive;+aUsername = lens _aUsername (\ s a -> s{_aUsername = a}) . _Sensitive  instance AWSRequest AdminDeleteUser where         type Rs AdminDeleteUser = AdminDeleteUserResponse

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDeleteUserAttributes--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -74,23 +74,23 @@     -> AdminDeleteUserAttributes adminDeleteUserAttributes pUserPoolId_ pUsername_ =   AdminDeleteUserAttributes'-  { _aduaUserPoolId = pUserPoolId_-  , _aduaUsername = _Sensitive # pUsername_-  , _aduaUserAttributeNames = mempty-  }+    { _aduaUserPoolId = pUserPoolId_+    , _aduaUsername = _Sensitive # pUsername_+    , _aduaUserAttributeNames = mempty+    }   -- | The user pool ID for the user pool where you want to delete user attributes. aduaUserPoolId :: Lens' AdminDeleteUserAttributes Text-aduaUserPoolId = lens _aduaUserPoolId (\ s a -> s{_aduaUserPoolId = a});+aduaUserPoolId = lens _aduaUserPoolId (\ s a -> s{_aduaUserPoolId = a})  -- | The user name of the user from which you would like to delete attributes. aduaUsername :: Lens' AdminDeleteUserAttributes Text-aduaUsername = lens _aduaUsername (\ s a -> s{_aduaUsername = a}) . _Sensitive;+aduaUsername = lens _aduaUsername (\ s a -> s{_aduaUsername = a}) . _Sensitive  -- | An array of strings representing the user attribute names you wish to delete. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. aduaUserAttributeNames :: Lens' AdminDeleteUserAttributes [Text]-aduaUserAttributeNames = lens _aduaUserAttributeNames (\ s a -> s{_aduaUserAttributeNames = a}) . _Coerce;+aduaUserAttributeNames = lens _aduaUserAttributeNames (\ s a -> s{_aduaUserAttributeNames = a}) . _Coerce  instance AWSRequest AdminDeleteUserAttributes where         type Rs AdminDeleteUserAttributes =@@ -155,7 +155,7 @@  -- | -- | The response status code. aduarsResponseStatus :: Lens' AdminDeleteUserAttributesResponse Int-aduarsResponseStatus = lens _aduarsResponseStatus (\ s a -> s{_aduarsResponseStatus = a});+aduarsResponseStatus = lens _aduarsResponseStatus (\ s a -> s{_aduarsResponseStatus = a})  instance NFData AdminDeleteUserAttributesResponse          where

@@ -12,13 +12,13 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked @DestinationUser@ ) signs in, they must create a new user account. See <API_AdminLinkProviderForUser.html AdminLinkProviderForUser> .+-- Disables the user from signing in with the specified external (SAML or social) identity provider. If the user to disable is a Cognito User Pools native username + password user, they are not permitted to use their password to sign-in. If the user to disable is a linked external IdP user, any link between that user and an existing user is removed. The next time the external user (no longer attached to the previously linked @DestinationUser@ ) signs in, they must create a new user account. See . -- -- -- This action is enabled only for admin access and requires developer credentials.@@ -29,7 +29,7 @@ -- -- The @ProviderAttributeName@ must always be @Cognito_Subject@ for social identity providers. The @ProviderAttributeValue@ must always be the exact subject that was used when the user was originally linked as a source user. ----- For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the @ProviderAttributeName@ and @ProviderAttributeValue@ must be the same values that were used for the @SourceUser@ when the identities were originally linked in the <API_AdminLinkProviderForUser.html AdminLinkProviderForUser> call. (If the linking was done with @ProviderAttributeName@ set to @Cognito_Subject@ , the same applies here). However, if the user has already signed in, the @ProviderAttributeName@ must be @Cognito_Subject@ and @ProviderAttributeValue@ must be the subject of the SAML assertion.+-- For de-linking a SAML identity, there are two scenarios. If the linked identity has not yet been used to sign-in, the @ProviderAttributeName@ and @ProviderAttributeValue@ must be the same values that were used for the @SourceUser@ when the identities were originally linked in the call. (If the linking was done with @ProviderAttributeName@ set to @Cognito_Subject@ , the same applies here). However, if the user has already signed in, the @ProviderAttributeName@ must be @Cognito_Subject@ and @ProviderAttributeValue@ must be the subject of the SAML assertion. -- module Network.AWS.CognitoIdentityProvider.AdminDisableProviderForUser     (@@ -74,16 +74,16 @@     -> AdminDisableProviderForUser adminDisableProviderForUser pUserPoolId_ pUser_ =   AdminDisableProviderForUser'-  {_adpfuUserPoolId = pUserPoolId_, _adpfuUser = pUser_}+    {_adpfuUserPoolId = pUserPoolId_, _adpfuUser = pUser_}   -- | The user pool ID for the user pool. adpfuUserPoolId :: Lens' AdminDisableProviderForUser Text-adpfuUserPoolId = lens _adpfuUserPoolId (\ s a -> s{_adpfuUserPoolId = a});+adpfuUserPoolId = lens _adpfuUserPoolId (\ s a -> s{_adpfuUserPoolId = a})  -- | The user to be disabled. adpfuUser :: Lens' AdminDisableProviderForUser ProviderUserIdentifierType-adpfuUser = lens _adpfuUser (\ s a -> s{_adpfuUser = a});+adpfuUser = lens _adpfuUser (\ s a -> s{_adpfuUser = a})  instance AWSRequest AdminDisableProviderForUser where         type Rs AdminDisableProviderForUser =@@ -138,12 +138,12 @@     -> AdminDisableProviderForUserResponse adminDisableProviderForUserResponse pResponseStatus_ =   AdminDisableProviderForUserResponse'-  {_adpfursResponseStatus = pResponseStatus_}+    {_adpfursResponseStatus = pResponseStatus_}   -- | -- | The response status code. adpfursResponseStatus :: Lens' AdminDisableProviderForUserResponse Int-adpfursResponseStatus = lens _adpfursResponseStatus (\ s a -> s{_adpfursResponseStatus = a});+adpfursResponseStatus = lens _adpfursResponseStatus (\ s a -> s{_adpfursResponseStatus = a})  instance NFData AdminDisableProviderForUserResponse          where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminDisableUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -70,16 +70,16 @@     -> AdminDisableUser adminDisableUser pUserPoolId_ pUsername_ =   AdminDisableUser'-  {_aduUserPoolId = pUserPoolId_, _aduUsername = _Sensitive # pUsername_}+    {_aduUserPoolId = pUserPoolId_, _aduUsername = _Sensitive # pUsername_}   -- | The user pool ID for the user pool where you want to disable the user. aduUserPoolId :: Lens' AdminDisableUser Text-aduUserPoolId = lens _aduUserPoolId (\ s a -> s{_aduUserPoolId = a});+aduUserPoolId = lens _aduUserPoolId (\ s a -> s{_aduUserPoolId = a})  -- | The user name of the user you wish to disable. aduUsername :: Lens' AdminDisableUser Text-aduUsername = lens _aduUsername (\ s a -> s{_aduUsername = a}) . _Sensitive;+aduUsername = lens _aduUsername (\ s a -> s{_aduUsername = a}) . _Sensitive  instance AWSRequest AdminDisableUser where         type Rs AdminDisableUser = AdminDisableUserResponse@@ -140,6 +140,6 @@  -- | -- | The response status code. adursResponseStatus :: Lens' AdminDisableUserResponse Int-adursResponseStatus = lens _adursResponseStatus (\ s a -> s{_adursResponseStatus = a});+adursResponseStatus = lens _adursResponseStatus (\ s a -> s{_adursResponseStatus = a})  instance NFData AdminDisableUserResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminEnableUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -70,16 +70,16 @@     -> AdminEnableUser adminEnableUser pUserPoolId_ pUsername_ =   AdminEnableUser'-  {_aeuUserPoolId = pUserPoolId_, _aeuUsername = _Sensitive # pUsername_}+    {_aeuUserPoolId = pUserPoolId_, _aeuUsername = _Sensitive # pUsername_}   -- | The user pool ID for the user pool where you want to enable the user. aeuUserPoolId :: Lens' AdminEnableUser Text-aeuUserPoolId = lens _aeuUserPoolId (\ s a -> s{_aeuUserPoolId = a});+aeuUserPoolId = lens _aeuUserPoolId (\ s a -> s{_aeuUserPoolId = a})  -- | The user name of the user you wish to enable. aeuUsername :: Lens' AdminEnableUser Text-aeuUsername = lens _aeuUsername (\ s a -> s{_aeuUsername = a}) . _Sensitive;+aeuUsername = lens _aeuUsername (\ s a -> s{_aeuUsername = a}) . _Sensitive  instance AWSRequest AdminEnableUser where         type Rs AdminEnableUser = AdminEnableUserResponse@@ -140,6 +140,6 @@  -- | -- | The response status code. aeursResponseStatus :: Lens' AdminEnableUserResponse Int-aeursResponseStatus = lens _aeursResponseStatus (\ s a -> s{_aeursResponseStatus = a});+aeursResponseStatus = lens _aeursResponseStatus (\ s a -> s{_aeursResponseStatus = a})  instance NFData AdminEnableUserResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminForgetDevice--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -73,23 +73,23 @@     -> AdminForgetDevice adminForgetDevice pUserPoolId_ pUsername_ pDeviceKey_ =   AdminForgetDevice'-  { _afdUserPoolId = pUserPoolId_-  , _afdUsername = _Sensitive # pUsername_-  , _afdDeviceKey = pDeviceKey_-  }+    { _afdUserPoolId = pUserPoolId_+    , _afdUsername = _Sensitive # pUsername_+    , _afdDeviceKey = pDeviceKey_+    }   -- | The user pool ID. afdUserPoolId :: Lens' AdminForgetDevice Text-afdUserPoolId = lens _afdUserPoolId (\ s a -> s{_afdUserPoolId = a});+afdUserPoolId = lens _afdUserPoolId (\ s a -> s{_afdUserPoolId = a})  -- | The user name. afdUsername :: Lens' AdminForgetDevice Text-afdUsername = lens _afdUsername (\ s a -> s{_afdUsername = a}) . _Sensitive;+afdUsername = lens _afdUsername (\ s a -> s{_afdUsername = a}) . _Sensitive  -- | The device key. afdDeviceKey :: Lens' AdminForgetDevice Text-afdDeviceKey = lens _afdDeviceKey (\ s a -> s{_afdDeviceKey = a});+afdDeviceKey = lens _afdDeviceKey (\ s a -> s{_afdDeviceKey = a})  instance AWSRequest AdminForgetDevice where         type Rs AdminForgetDevice = AdminForgetDeviceResponse

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminGetDevice--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -76,23 +76,23 @@     -> AdminGetDevice adminGetDevice pDeviceKey_ pUserPoolId_ pUsername_ =   AdminGetDevice'-  { _agdDeviceKey = pDeviceKey_-  , _agdUserPoolId = pUserPoolId_-  , _agdUsername = _Sensitive # pUsername_-  }+    { _agdDeviceKey = pDeviceKey_+    , _agdUserPoolId = pUserPoolId_+    , _agdUsername = _Sensitive # pUsername_+    }   -- | The device key. agdDeviceKey :: Lens' AdminGetDevice Text-agdDeviceKey = lens _agdDeviceKey (\ s a -> s{_agdDeviceKey = a});+agdDeviceKey = lens _agdDeviceKey (\ s a -> s{_agdDeviceKey = a})  -- | The user pool ID. agdUserPoolId :: Lens' AdminGetDevice Text-agdUserPoolId = lens _agdUserPoolId (\ s a -> s{_agdUserPoolId = a});+agdUserPoolId = lens _agdUserPoolId (\ s a -> s{_agdUserPoolId = a})  -- | The user name. agdUsername :: Lens' AdminGetDevice Text-agdUsername = lens _agdUsername (\ s a -> s{_agdUsername = a}) . _Sensitive;+agdUsername = lens _agdUsername (\ s a -> s{_agdUsername = a}) . _Sensitive  instance AWSRequest AdminGetDevice where         type Rs AdminGetDevice = AdminGetDeviceResponse@@ -155,15 +155,15 @@     -> AdminGetDeviceResponse adminGetDeviceResponse pResponseStatus_ pDevice_ =   AdminGetDeviceResponse'-  {_agdrsResponseStatus = pResponseStatus_, _agdrsDevice = pDevice_}+    {_agdrsResponseStatus = pResponseStatus_, _agdrsDevice = pDevice_}   -- | -- | The response status code. agdrsResponseStatus :: Lens' AdminGetDeviceResponse Int-agdrsResponseStatus = lens _agdrsResponseStatus (\ s a -> s{_agdrsResponseStatus = a});+agdrsResponseStatus = lens _agdrsResponseStatus (\ s a -> s{_agdrsResponseStatus = a})  -- | The device. agdrsDevice :: Lens' AdminGetDeviceResponse DeviceType-agdrsDevice = lens _agdrsDevice (\ s a -> s{_agdrsDevice = a});+agdrsDevice = lens _agdrsDevice (\ s a -> s{_agdrsDevice = a})  instance NFData AdminGetDeviceResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminGetUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -40,8 +40,10 @@     , agursUserStatus     , agursUserAttributes     , agursUserCreateDate+    , agursUserMFASettingList     , agursMFAOptions     , agursUserLastModifiedDate+    , agursPreferredMFASetting     , agursResponseStatus     , agursUsername     ) where@@ -77,16 +79,16 @@     -> AdminGetUser adminGetUser pUserPoolId_ pUsername_ =   AdminGetUser'-  {_aguUserPoolId = pUserPoolId_, _aguUsername = _Sensitive # pUsername_}+    {_aguUserPoolId = pUserPoolId_, _aguUsername = _Sensitive # pUsername_}   -- | The user pool ID for the user pool where you want to get information about the user. aguUserPoolId :: Lens' AdminGetUser Text-aguUserPoolId = lens _aguUserPoolId (\ s a -> s{_aguUserPoolId = a});+aguUserPoolId = lens _aguUserPoolId (\ s a -> s{_aguUserPoolId = a})  -- | The user name of the user you wish to retrieve. aguUsername :: Lens' AdminGetUser Text-aguUsername = lens _aguUsername (\ s a -> s{_aguUsername = a}) . _Sensitive;+aguUsername = lens _aguUsername (\ s a -> s{_aguUsername = a}) . _Sensitive  instance AWSRequest AdminGetUser where         type Rs AdminGetUser = AdminGetUserResponse@@ -98,8 +100,10 @@                    (x .?> "Enabled") <*> (x .?> "UserStatus") <*>                      (x .?> "UserAttributes" .!@ mempty)                      <*> (x .?> "UserCreateDate")+                     <*> (x .?> "UserMFASettingList" .!@ mempty)                      <*> (x .?> "MFAOptions" .!@ mempty)                      <*> (x .?> "UserLastModifiedDate")+                     <*> (x .?> "PreferredMfaSetting")                      <*> (pure (fromEnum s))                      <*> (x .:> "Username")) @@ -140,8 +144,10 @@   , _agursUserStatus           :: !(Maybe UserStatusType)   , _agursUserAttributes       :: !(Maybe [AttributeType])   , _agursUserCreateDate       :: !(Maybe POSIX)+  , _agursUserMFASettingList   :: !(Maybe [Text])   , _agursMFAOptions           :: !(Maybe [MFAOptionType])   , _agursUserLastModifiedDate :: !(Maybe POSIX)+  , _agursPreferredMFASetting  :: !(Maybe Text)   , _agursResponseStatus       :: !Int   , _agursUsername             :: !(Sensitive Text)   } deriving (Eq, Show, Data, Typeable, Generic)@@ -159,10 +165,14 @@ -- -- * 'agursUserCreateDate' - The date the user was created. --+-- * 'agursUserMFASettingList' - The list of the user's MFA settings.+-- -- * 'agursMFAOptions' - Specifies the options for MFA (e.g., email or phone number). -- -- * 'agursUserLastModifiedDate' - The date the user was last modified. --+-- * 'agursPreferredMFASetting' - The user's preferred MFA setting.+-- -- * 'agursResponseStatus' - -- | The response status code. -- -- * 'agursUsername' - The user name of the user about whom you are receiving information.@@ -172,47 +182,57 @@     -> AdminGetUserResponse adminGetUserResponse pResponseStatus_ pUsername_ =   AdminGetUserResponse'-  { _agursEnabled = Nothing-  , _agursUserStatus = Nothing-  , _agursUserAttributes = Nothing-  , _agursUserCreateDate = Nothing-  , _agursMFAOptions = Nothing-  , _agursUserLastModifiedDate = Nothing-  , _agursResponseStatus = pResponseStatus_-  , _agursUsername = _Sensitive # pUsername_-  }+    { _agursEnabled = Nothing+    , _agursUserStatus = Nothing+    , _agursUserAttributes = Nothing+    , _agursUserCreateDate = Nothing+    , _agursUserMFASettingList = Nothing+    , _agursMFAOptions = Nothing+    , _agursUserLastModifiedDate = Nothing+    , _agursPreferredMFASetting = Nothing+    , _agursResponseStatus = pResponseStatus_+    , _agursUsername = _Sensitive # pUsername_+    }   -- | Indicates that the status is enabled. agursEnabled :: Lens' AdminGetUserResponse (Maybe Bool)-agursEnabled = lens _agursEnabled (\ s a -> s{_agursEnabled = a});+agursEnabled = lens _agursEnabled (\ s a -> s{_agursEnabled = a})  -- | The user status. Can be one of the following:     * UNCONFIRMED - User has been created but not confirmed.     * CONFIRMED - User has been confirmed.     * ARCHIVED - User is no longer active.     * COMPROMISED - User is disabled due to a potential security threat.     * UNKNOWN - User status is not known. agursUserStatus :: Lens' AdminGetUserResponse (Maybe UserStatusType)-agursUserStatus = lens _agursUserStatus (\ s a -> s{_agursUserStatus = a});+agursUserStatus = lens _agursUserStatus (\ s a -> s{_agursUserStatus = a})  -- | An array of name-value pairs representing user attributes. agursUserAttributes :: Lens' AdminGetUserResponse [AttributeType]-agursUserAttributes = lens _agursUserAttributes (\ s a -> s{_agursUserAttributes = a}) . _Default . _Coerce;+agursUserAttributes = lens _agursUserAttributes (\ s a -> s{_agursUserAttributes = a}) . _Default . _Coerce  -- | The date the user was created. agursUserCreateDate :: Lens' AdminGetUserResponse (Maybe UTCTime)-agursUserCreateDate = lens _agursUserCreateDate (\ s a -> s{_agursUserCreateDate = a}) . mapping _Time;+agursUserCreateDate = lens _agursUserCreateDate (\ s a -> s{_agursUserCreateDate = a}) . mapping _Time +-- | The list of the user's MFA settings.+agursUserMFASettingList :: Lens' AdminGetUserResponse [Text]+agursUserMFASettingList = lens _agursUserMFASettingList (\ s a -> s{_agursUserMFASettingList = a}) . _Default . _Coerce+ -- | Specifies the options for MFA (e.g., email or phone number). agursMFAOptions :: Lens' AdminGetUserResponse [MFAOptionType]-agursMFAOptions = lens _agursMFAOptions (\ s a -> s{_agursMFAOptions = a}) . _Default . _Coerce;+agursMFAOptions = lens _agursMFAOptions (\ s a -> s{_agursMFAOptions = a}) . _Default . _Coerce  -- | The date the user was last modified. agursUserLastModifiedDate :: Lens' AdminGetUserResponse (Maybe UTCTime)-agursUserLastModifiedDate = lens _agursUserLastModifiedDate (\ s a -> s{_agursUserLastModifiedDate = a}) . mapping _Time;+agursUserLastModifiedDate = lens _agursUserLastModifiedDate (\ s a -> s{_agursUserLastModifiedDate = a}) . mapping _Time +-- | The user's preferred MFA setting.+agursPreferredMFASetting :: Lens' AdminGetUserResponse (Maybe Text)+agursPreferredMFASetting = lens _agursPreferredMFASetting (\ s a -> s{_agursPreferredMFASetting = a})+ -- | -- | The response status code. agursResponseStatus :: Lens' AdminGetUserResponse Int-agursResponseStatus = lens _agursResponseStatus (\ s a -> s{_agursResponseStatus = a});+agursResponseStatus = lens _agursResponseStatus (\ s a -> s{_agursResponseStatus = a})  -- | The user name of the user about whom you are receiving information. agursUsername :: Lens' AdminGetUserResponse Text-agursUsername = lens _agursUsername (\ s a -> s{_agursUsername = a}) . _Sensitive;+agursUsername = lens _agursUsername (\ s a -> s{_agursUsername = a}) . _Sensitive  instance NFData AdminGetUserResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminInitiateAuth--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -30,6 +30,8 @@     , AdminInitiateAuth     -- * Request Lenses     , aiaClientMetadata+    , aiaContextData+    , aiaAnalyticsMetadata     , aiaAuthParameters     , aiaUserPoolId     , aiaClientId@@ -59,11 +61,13 @@ -- -- /See:/ 'adminInitiateAuth' smart constructor. data AdminInitiateAuth = AdminInitiateAuth'-  { _aiaClientMetadata :: !(Maybe (Map Text Text))-  , _aiaAuthParameters :: !(Maybe (Map Text Text))-  , _aiaUserPoolId     :: !Text-  , _aiaClientId       :: !(Sensitive Text)-  , _aiaAuthFlow       :: !AuthFlowType+  { _aiaClientMetadata    :: !(Maybe (Map Text Text))+  , _aiaContextData       :: !(Maybe ContextDataType)+  , _aiaAnalyticsMetadata :: !(Maybe AnalyticsMetadataType)+  , _aiaAuthParameters    :: !(Maybe (Map Text Text))+  , _aiaUserPoolId        :: !Text+  , _aiaClientId          :: !(Sensitive Text)+  , _aiaAuthFlow          :: !AuthFlowType   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -73,13 +77,17 @@ -- -- * 'aiaClientMetadata' - This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. ----- * 'aiaAuthParameters' - The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+-- * 'aiaContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security. --+-- * 'aiaAnalyticsMetadata' - The analytics metadata for collecting Amazon Pinpoint metrics for @AdminInitiateAuth@ calls.+--+-- * 'aiaAuthParameters' - The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @REFRESH_TOKEN@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+-- -- * 'aiaUserPoolId' - The ID of the Amazon Cognito user pool. -- -- * 'aiaClientId' - The app client ID. ----- * 'aiaAuthFlow' - The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client.+-- * 'aiaAuthFlow' - The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution.     * @USER_PASSWORD_AUTH@ will take in @USERNAME@ and @PASSWORD@ and return the next challenge or tokens. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client.     * @USER_PASSWORD_AUTH@ : Non-SRP authentication flow; USERNAME and PASSWORD are passed directly. If a user migration Lambda trigger is set, this flow will invoke the user migration Lambda if the USERNAME is not found in the user pool. adminInitiateAuth     :: Text -- ^ 'aiaUserPoolId'     -> Text -- ^ 'aiaClientId'@@ -87,33 +95,43 @@     -> AdminInitiateAuth adminInitiateAuth pUserPoolId_ pClientId_ pAuthFlow_ =   AdminInitiateAuth'-  { _aiaClientMetadata = Nothing-  , _aiaAuthParameters = Nothing-  , _aiaUserPoolId = pUserPoolId_-  , _aiaClientId = _Sensitive # pClientId_-  , _aiaAuthFlow = pAuthFlow_-  }+    { _aiaClientMetadata = Nothing+    , _aiaContextData = Nothing+    , _aiaAnalyticsMetadata = Nothing+    , _aiaAuthParameters = Nothing+    , _aiaUserPoolId = pUserPoolId_+    , _aiaClientId = _Sensitive # pClientId_+    , _aiaAuthFlow = pAuthFlow_+    }   -- | This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. aiaClientMetadata :: Lens' AdminInitiateAuth (HashMap Text Text)-aiaClientMetadata = lens _aiaClientMetadata (\ s a -> s{_aiaClientMetadata = a}) . _Default . _Map;+aiaClientMetadata = lens _aiaClientMetadata (\ s a -> s{_aiaClientMetadata = a}) . _Default . _Map --- | The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+aiaContextData :: Lens' AdminInitiateAuth (Maybe ContextDataType)+aiaContextData = lens _aiaContextData (\ s a -> s{_aiaContextData = a})++-- | The analytics metadata for collecting Amazon Pinpoint metrics for @AdminInitiateAuth@ calls.+aiaAnalyticsMetadata :: Lens' AdminInitiateAuth (Maybe AnalyticsMetadataType)+aiaAnalyticsMetadata = lens _aiaAnalyticsMetadata (\ s a -> s{_aiaAnalyticsMetadata = a})++-- | The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @REFRESH_TOKEN@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @ADMIN_NO_SRP_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @PASSWORD@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@ aiaAuthParameters :: Lens' AdminInitiateAuth (HashMap Text Text)-aiaAuthParameters = lens _aiaAuthParameters (\ s a -> s{_aiaAuthParameters = a}) . _Default . _Map;+aiaAuthParameters = lens _aiaAuthParameters (\ s a -> s{_aiaAuthParameters = a}) . _Default . _Map  -- | The ID of the Amazon Cognito user pool. aiaUserPoolId :: Lens' AdminInitiateAuth Text-aiaUserPoolId = lens _aiaUserPoolId (\ s a -> s{_aiaUserPoolId = a});+aiaUserPoolId = lens _aiaUserPoolId (\ s a -> s{_aiaUserPoolId = a})  -- | The app client ID. aiaClientId :: Lens' AdminInitiateAuth Text-aiaClientId = lens _aiaClientId (\ s a -> s{_aiaClientId = a}) . _Sensitive;+aiaClientId = lens _aiaClientId (\ s a -> s{_aiaClientId = a}) . _Sensitive --- | The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client.+-- | The authentication flow for this call to execute. The API action will depend on this value. For example:     * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution.     * @USER_PASSWORD_AUTH@ will take in @USERNAME@ and @PASSWORD@ and return the next challenge or tokens. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @ADMIN_NO_SRP_AUTH@ : Non-SRP authentication flow; you can pass in the USERNAME and PASSWORD directly if the flow is enabled for calling the app client.     * @USER_PASSWORD_AUTH@ : Non-SRP authentication flow; USERNAME and PASSWORD are passed directly. If a user migration Lambda trigger is set, this flow will invoke the user migration Lambda if the USERNAME is not found in the user pool. aiaAuthFlow :: Lens' AdminInitiateAuth AuthFlowType-aiaAuthFlow = lens _aiaAuthFlow (\ s a -> s{_aiaAuthFlow = a});+aiaAuthFlow = lens _aiaAuthFlow (\ s a -> s{_aiaAuthFlow = a})  instance AWSRequest AdminInitiateAuth where         type Rs AdminInitiateAuth = AdminInitiateAuthResponse@@ -147,6 +165,8 @@           = object               (catMaybes                  [("ClientMetadata" .=) <$> _aiaClientMetadata,+                  ("ContextData" .=) <$> _aiaContextData,+                  ("AnalyticsMetadata" .=) <$> _aiaAnalyticsMetadata,                   ("AuthParameters" .=) <$> _aiaAuthParameters,                   Just ("UserPoolId" .= _aiaUserPoolId),                   Just ("ClientId" .= _aiaClientId),@@ -178,7 +198,7 @@ -- -- * 'aiarsChallengeName' - The name of the challenge which you are responding to with this call. This is returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge.     * @SMS_MFA@ : Next challenge is to supply an @SMS_MFA_CODE@ , delivered via SMS.     * @PASSWORD_VERIFIER@ : Next challenge is to supply @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , and @TIMESTAMP@ after the client-side SRP calculations.     * @CUSTOM_CHALLENGE@ : This is returned if your custom authentication flow determines that the user should pass another challenge before tokens are issued.     * @DEVICE_SRP_AUTH@ : If device tracking was enabled on your user pool and the previous challenges were passed, this challenge is returned so that Amazon Cognito can start tracking this device.     * @DEVICE_PASSWORD_VERIFIER@ : Similar to @PASSWORD_VERIFIER@ , but for devices only.     * @ADMIN_NO_SRP_AUTH@ : This is returned if you need to authenticate with @USERNAME@ and @PASSWORD@ directly. An app client must be enabled to use this flow.     * @NEW_PASSWORD_REQUIRED@ : For users which are required to change their passwords after successful first login. This challenge should be passed with @NEW_PASSWORD@ and any other required attributes. ----- * 'aiarsChallengeParameters' - The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_IF_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias.+-- * 'aiarsChallengeParameters' - The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_ID_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias. -- -- * 'aiarsAuthenticationResult' - The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. --@@ -190,32 +210,32 @@     -> AdminInitiateAuthResponse adminInitiateAuthResponse pResponseStatus_ =   AdminInitiateAuthResponse'-  { _aiarsChallengeName = Nothing-  , _aiarsChallengeParameters = Nothing-  , _aiarsAuthenticationResult = Nothing-  , _aiarsSession = Nothing-  , _aiarsResponseStatus = pResponseStatus_-  }+    { _aiarsChallengeName = Nothing+    , _aiarsChallengeParameters = Nothing+    , _aiarsAuthenticationResult = Nothing+    , _aiarsSession = Nothing+    , _aiarsResponseStatus = pResponseStatus_+    }   -- | The name of the challenge which you are responding to with this call. This is returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge.     * @SMS_MFA@ : Next challenge is to supply an @SMS_MFA_CODE@ , delivered via SMS.     * @PASSWORD_VERIFIER@ : Next challenge is to supply @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , and @TIMESTAMP@ after the client-side SRP calculations.     * @CUSTOM_CHALLENGE@ : This is returned if your custom authentication flow determines that the user should pass another challenge before tokens are issued.     * @DEVICE_SRP_AUTH@ : If device tracking was enabled on your user pool and the previous challenges were passed, this challenge is returned so that Amazon Cognito can start tracking this device.     * @DEVICE_PASSWORD_VERIFIER@ : Similar to @PASSWORD_VERIFIER@ , but for devices only.     * @ADMIN_NO_SRP_AUTH@ : This is returned if you need to authenticate with @USERNAME@ and @PASSWORD@ directly. An app client must be enabled to use this flow.     * @NEW_PASSWORD_REQUIRED@ : For users which are required to change their passwords after successful first login. This challenge should be passed with @NEW_PASSWORD@ and any other required attributes. aiarsChallengeName :: Lens' AdminInitiateAuthResponse (Maybe ChallengeNameType)-aiarsChallengeName = lens _aiarsChallengeName (\ s a -> s{_aiarsChallengeName = a});+aiarsChallengeName = lens _aiarsChallengeName (\ s a -> s{_aiarsChallengeName = a}) --- | The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_IF_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias.+-- | The challenge parameters. These are returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@AdminRespondToAuthChallenge@ ). All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). The value of the @USER_ID_FOR_SRP@ attribute will be the user's actual username, not an alias (such as email address or phone number), even if you specified an alias in your call to @AdminInitiateAuth@ . This is because, in the @AdminRespondToAuthChallenge@ API @ChallengeResponses@ , the @USERNAME@ attribute cannot be an alias. aiarsChallengeParameters :: Lens' AdminInitiateAuthResponse (HashMap Text Text)-aiarsChallengeParameters = lens _aiarsChallengeParameters (\ s a -> s{_aiarsChallengeParameters = a}) . _Default . _Map;+aiarsChallengeParameters = lens _aiarsChallengeParameters (\ s a -> s{_aiarsChallengeParameters = a}) . _Default . _Map  -- | The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. aiarsAuthenticationResult :: Lens' AdminInitiateAuthResponse (Maybe AuthenticationResultType)-aiarsAuthenticationResult = lens _aiarsAuthenticationResult (\ s a -> s{_aiarsAuthenticationResult = a});+aiarsAuthenticationResult = lens _aiarsAuthenticationResult (\ s a -> s{_aiarsAuthenticationResult = a})  -- | The session which should be passed both ways in challenge-response calls to the service. If @AdminInitiateAuth@ or @AdminRespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @AdminRespondToAuthChallenge@ API call. aiarsSession :: Lens' AdminInitiateAuthResponse (Maybe Text)-aiarsSession = lens _aiarsSession (\ s a -> s{_aiarsSession = a});+aiarsSession = lens _aiarsSession (\ s a -> s{_aiarsSession = a})  -- | -- | The response status code. aiarsResponseStatus :: Lens' AdminInitiateAuthResponse Int-aiarsResponseStatus = lens _aiarsResponseStatus (\ s a -> s{_aiarsResponseStatus = a});+aiarsResponseStatus = lens _aiarsResponseStatus (\ s a -> s{_aiarsResponseStatus = a})  instance NFData AdminInitiateAuthResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminLinkProviderForUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -25,7 +25,7 @@ -- -- /Important:/ Because this API allows a user with an external federated identity to sign in as an existing user in the user pool, it is critical that it only be used with external identity providers and provider attributes that have been trusted by the application owner. ----- See also <API_AdminDisableProviderForUser.html AdminDisableProviderForUser> .+-- See also . -- -- This action is enabled only for admin access and requires developer credentials. --@@ -67,7 +67,7 @@ -- -- * 'alpfuUserPoolId' - The user pool ID for the user pool. ----- * 'alpfuDestinationUser' - The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. The @ProviderAttributeValue@ for the @DestinationUser@ must match the username for the user in the user pool. The @ProviderAttributeName@ will always be ignored.+-- * 'alpfuDestinationUser' - The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. For a native username + password user, the @ProviderAttributeValue@ for the @DestinationUser@ should be the username in the user pool. For a federated user, it should be the provider-specific @user_id@ . The @ProviderAttributeName@ of the @DestinationUser@ is ignored. The @ProviderName@ should be set to @Cognito@ for users in Cognito user pools. -- -- * 'alpfuSourceUser' - An external identity provider account for a user who does not currently exist yet in the user pool. This user must be a federated user (for example, a SAML or Facebook user), not another native user. If the @SourceUser@ is a federated social identity provider user (Facebook, Google, or Login with Amazon), you must set the @ProviderAttributeName@ to @Cognito_Subject@ . For social identity providers, the @ProviderName@ will be @Facebook@ , @Google@ , or @LoginWithAmazon@ , and Cognito will automatically parse the Facebook, Google, and Login with Amazon tokens for @id@ , @sub@ , and @user_id@ , respectively. The @ProviderAttributeValue@ for the user must be the same value as the @id@ , @sub@ , or @user_id@ value found in the social identity provider token. For SAML, the @ProviderAttributeName@ can be any value that matches a claim in the SAML assertion. If you wish to link SAML users based on the subject of the SAML assertion, you should map the subject to a claim through the SAML identity provider and submit that claim name as the @ProviderAttributeName@ . If you set @ProviderAttributeName@ to @Cognito_Subject@ , Cognito will automatically parse the default unique identifier found in the subject from the SAML token. adminLinkProviderForUser@@ -77,23 +77,23 @@     -> AdminLinkProviderForUser adminLinkProviderForUser pUserPoolId_ pDestinationUser_ pSourceUser_ =   AdminLinkProviderForUser'-  { _alpfuUserPoolId = pUserPoolId_-  , _alpfuDestinationUser = pDestinationUser_-  , _alpfuSourceUser = pSourceUser_-  }+    { _alpfuUserPoolId = pUserPoolId_+    , _alpfuDestinationUser = pDestinationUser_+    , _alpfuSourceUser = pSourceUser_+    }   -- | The user pool ID for the user pool. alpfuUserPoolId :: Lens' AdminLinkProviderForUser Text-alpfuUserPoolId = lens _alpfuUserPoolId (\ s a -> s{_alpfuUserPoolId = a});+alpfuUserPoolId = lens _alpfuUserPoolId (\ s a -> s{_alpfuUserPoolId = a}) --- | The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. The @ProviderAttributeValue@ for the @DestinationUser@ must match the username for the user in the user pool. The @ProviderAttributeName@ will always be ignored.+-- | The existing user in the user pool to be linked to the external identity provider user account. Can be a native (Username + Password) Cognito User Pools user or a federated user (for example, a SAML or Facebook user). If the user doesn't exist, an exception is thrown. This is the user that is returned when the new user (with the linked identity provider attribute) signs in. For a native username + password user, the @ProviderAttributeValue@ for the @DestinationUser@ should be the username in the user pool. For a federated user, it should be the provider-specific @user_id@ . The @ProviderAttributeName@ of the @DestinationUser@ is ignored. The @ProviderName@ should be set to @Cognito@ for users in Cognito user pools. alpfuDestinationUser :: Lens' AdminLinkProviderForUser ProviderUserIdentifierType-alpfuDestinationUser = lens _alpfuDestinationUser (\ s a -> s{_alpfuDestinationUser = a});+alpfuDestinationUser = lens _alpfuDestinationUser (\ s a -> s{_alpfuDestinationUser = a})  -- | An external identity provider account for a user who does not currently exist yet in the user pool. This user must be a federated user (for example, a SAML or Facebook user), not another native user. If the @SourceUser@ is a federated social identity provider user (Facebook, Google, or Login with Amazon), you must set the @ProviderAttributeName@ to @Cognito_Subject@ . For social identity providers, the @ProviderName@ will be @Facebook@ , @Google@ , or @LoginWithAmazon@ , and Cognito will automatically parse the Facebook, Google, and Login with Amazon tokens for @id@ , @sub@ , and @user_id@ , respectively. The @ProviderAttributeValue@ for the user must be the same value as the @id@ , @sub@ , or @user_id@ value found in the social identity provider token. For SAML, the @ProviderAttributeName@ can be any value that matches a claim in the SAML assertion. If you wish to link SAML users based on the subject of the SAML assertion, you should map the subject to a claim through the SAML identity provider and submit that claim name as the @ProviderAttributeName@ . If you set @ProviderAttributeName@ to @Cognito_Subject@ , Cognito will automatically parse the default unique identifier found in the subject from the SAML token. alpfuSourceUser :: Lens' AdminLinkProviderForUser ProviderUserIdentifierType-alpfuSourceUser = lens _alpfuSourceUser (\ s a -> s{_alpfuSourceUser = a});+alpfuSourceUser = lens _alpfuSourceUser (\ s a -> s{_alpfuSourceUser = a})  instance AWSRequest AdminLinkProviderForUser where         type Rs AdminLinkProviderForUser =@@ -153,7 +153,7 @@  -- | -- | The response status code. alpfursResponseStatus :: Lens' AdminLinkProviderForUserResponse Int-alpfursResponseStatus = lens _alpfursResponseStatus (\ s a -> s{_alpfursResponseStatus = a});+alpfursResponseStatus = lens _alpfursResponseStatus (\ s a -> s{_alpfursResponseStatus = a})  instance NFData AdminLinkProviderForUserResponse          where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminListDevices--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -80,28 +80,28 @@     -> AdminListDevices adminListDevices pUserPoolId_ pUsername_ =   AdminListDevices'-  { _aldPaginationToken = Nothing-  , _aldLimit = Nothing-  , _aldUserPoolId = pUserPoolId_-  , _aldUsername = _Sensitive # pUsername_-  }+    { _aldPaginationToken = Nothing+    , _aldLimit = Nothing+    , _aldUserPoolId = pUserPoolId_+    , _aldUsername = _Sensitive # pUsername_+    }   -- | The pagination token. aldPaginationToken :: Lens' AdminListDevices (Maybe Text)-aldPaginationToken = lens _aldPaginationToken (\ s a -> s{_aldPaginationToken = a});+aldPaginationToken = lens _aldPaginationToken (\ s a -> s{_aldPaginationToken = a})  -- | The limit of the devices request. aldLimit :: Lens' AdminListDevices (Maybe Natural)-aldLimit = lens _aldLimit (\ s a -> s{_aldLimit = a}) . mapping _Nat;+aldLimit = lens _aldLimit (\ s a -> s{_aldLimit = a}) . mapping _Nat  -- | The user pool ID. aldUserPoolId :: Lens' AdminListDevices Text-aldUserPoolId = lens _aldUserPoolId (\ s a -> s{_aldUserPoolId = a});+aldUserPoolId = lens _aldUserPoolId (\ s a -> s{_aldUserPoolId = a})  -- | The user name. aldUsername :: Lens' AdminListDevices Text-aldUsername = lens _aldUsername (\ s a -> s{_aldUsername = a}) . _Sensitive;+aldUsername = lens _aldUsername (\ s a -> s{_aldUsername = a}) . _Sensitive  instance AWSRequest AdminListDevices where         type Rs AdminListDevices = AdminListDevicesResponse@@ -169,22 +169,22 @@     -> AdminListDevicesResponse adminListDevicesResponse pResponseStatus_ =   AdminListDevicesResponse'-  { _aldrsPaginationToken = Nothing-  , _aldrsDevices = Nothing-  , _aldrsResponseStatus = pResponseStatus_-  }+    { _aldrsPaginationToken = Nothing+    , _aldrsDevices = Nothing+    , _aldrsResponseStatus = pResponseStatus_+    }   -- | The pagination token. aldrsPaginationToken :: Lens' AdminListDevicesResponse (Maybe Text)-aldrsPaginationToken = lens _aldrsPaginationToken (\ s a -> s{_aldrsPaginationToken = a});+aldrsPaginationToken = lens _aldrsPaginationToken (\ s a -> s{_aldrsPaginationToken = a})  -- | The devices in the list of devices response. aldrsDevices :: Lens' AdminListDevicesResponse [DeviceType]-aldrsDevices = lens _aldrsDevices (\ s a -> s{_aldrsDevices = a}) . _Default . _Coerce;+aldrsDevices = lens _aldrsDevices (\ s a -> s{_aldrsDevices = a}) . _Default . _Coerce  -- | -- | The response status code. aldrsResponseStatus :: Lens' AdminListDevicesResponse Int-aldrsResponseStatus = lens _aldrsResponseStatus (\ s a -> s{_aldrsResponseStatus = a});+aldrsResponseStatus = lens _aldrsResponseStatus (\ s a -> s{_aldrsResponseStatus = a})  instance NFData AdminListDevicesResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminListGroupsForUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -76,28 +76,28 @@     -> AdminListGroupsForUser adminListGroupsForUser pUsername_ pUserPoolId_ =   AdminListGroupsForUser'-  { _algfuNextToken = Nothing-  , _algfuLimit = Nothing-  , _algfuUsername = _Sensitive # pUsername_-  , _algfuUserPoolId = pUserPoolId_-  }+    { _algfuNextToken = Nothing+    , _algfuLimit = Nothing+    , _algfuUsername = _Sensitive # pUsername_+    , _algfuUserPoolId = pUserPoolId_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. algfuNextToken :: Lens' AdminListGroupsForUser (Maybe Text)-algfuNextToken = lens _algfuNextToken (\ s a -> s{_algfuNextToken = a});+algfuNextToken = lens _algfuNextToken (\ s a -> s{_algfuNextToken = a})  -- | The limit of the request to list groups. algfuLimit :: Lens' AdminListGroupsForUser (Maybe Natural)-algfuLimit = lens _algfuLimit (\ s a -> s{_algfuLimit = a}) . mapping _Nat;+algfuLimit = lens _algfuLimit (\ s a -> s{_algfuLimit = a}) . mapping _Nat  -- | The username for the user. algfuUsername :: Lens' AdminListGroupsForUser Text-algfuUsername = lens _algfuUsername (\ s a -> s{_algfuUsername = a}) . _Sensitive;+algfuUsername = lens _algfuUsername (\ s a -> s{_algfuUsername = a}) . _Sensitive  -- | The user pool ID for the user pool. algfuUserPoolId :: Lens' AdminListGroupsForUser Text-algfuUserPoolId = lens _algfuUserPoolId (\ s a -> s{_algfuUserPoolId = a});+algfuUserPoolId = lens _algfuUserPoolId (\ s a -> s{_algfuUserPoolId = a})  instance AWSRequest AdminListGroupsForUser where         type Rs AdminListGroupsForUser =@@ -161,22 +161,22 @@     -> AdminListGroupsForUserResponse adminListGroupsForUserResponse pResponseStatus_ =   AdminListGroupsForUserResponse'-  { _algfursGroups = Nothing-  , _algfursNextToken = Nothing-  , _algfursResponseStatus = pResponseStatus_-  }+    { _algfursGroups = Nothing+    , _algfursNextToken = Nothing+    , _algfursResponseStatus = pResponseStatus_+    }   -- | The groups that the user belongs to. algfursGroups :: Lens' AdminListGroupsForUserResponse [GroupType]-algfursGroups = lens _algfursGroups (\ s a -> s{_algfursGroups = a}) . _Default . _Coerce;+algfursGroups = lens _algfursGroups (\ s a -> s{_algfursGroups = a}) . _Default . _Coerce  -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. algfursNextToken :: Lens' AdminListGroupsForUserResponse (Maybe Text)-algfursNextToken = lens _algfursNextToken (\ s a -> s{_algfursNextToken = a});+algfursNextToken = lens _algfursNextToken (\ s a -> s{_algfursNextToken = a})  -- | -- | The response status code. algfursResponseStatus :: Lens' AdminListGroupsForUserResponse Int-algfursResponseStatus = lens _algfursResponseStatus (\ s a -> s{_algfursResponseStatus = a});+algfursResponseStatus = lens _algfursResponseStatus (\ s a -> s{_algfursResponseStatus = a})  instance NFData AdminListGroupsForUserResponse where

@@ -0,0 +1,181 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminListUserAuthEvents+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Lists a history of user activity and any risks detected as part of Amazon Cognito advanced security.+--+--+module Network.AWS.CognitoIdentityProvider.AdminListUserAuthEvents+    (+    -- * Creating a Request+      adminListUserAuthEvents+    , AdminListUserAuthEvents+    -- * Request Lenses+    , aluaeNextToken+    , aluaeMaxResults+    , aluaeUserPoolId+    , aluaeUsername++    -- * Destructuring the Response+    , adminListUserAuthEventsResponse+    , AdminListUserAuthEventsResponse+    -- * Response Lenses+    , aluaersNextToken+    , aluaersAuthEvents+    , aluaersResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminListUserAuthEvents' smart constructor.+data AdminListUserAuthEvents = AdminListUserAuthEvents'+  { _aluaeNextToken  :: !(Maybe Text)+  , _aluaeMaxResults :: !(Maybe Nat)+  , _aluaeUserPoolId :: !Text+  , _aluaeUsername   :: !(Sensitive Text)+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminListUserAuthEvents' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'aluaeNextToken' - A pagination token.+--+-- * 'aluaeMaxResults' - The maximum number of authentication events to return.+--+-- * 'aluaeUserPoolId' - The user pool ID.+--+-- * 'aluaeUsername' - The user pool username or an alias.+adminListUserAuthEvents+    :: Text -- ^ 'aluaeUserPoolId'+    -> Text -- ^ 'aluaeUsername'+    -> AdminListUserAuthEvents+adminListUserAuthEvents pUserPoolId_ pUsername_ =+  AdminListUserAuthEvents'+    { _aluaeNextToken = Nothing+    , _aluaeMaxResults = Nothing+    , _aluaeUserPoolId = pUserPoolId_+    , _aluaeUsername = _Sensitive # pUsername_+    }+++-- | A pagination token.+aluaeNextToken :: Lens' AdminListUserAuthEvents (Maybe Text)+aluaeNextToken = lens _aluaeNextToken (\ s a -> s{_aluaeNextToken = a})++-- | The maximum number of authentication events to return.+aluaeMaxResults :: Lens' AdminListUserAuthEvents (Maybe Natural)+aluaeMaxResults = lens _aluaeMaxResults (\ s a -> s{_aluaeMaxResults = a}) . mapping _Nat++-- | The user pool ID.+aluaeUserPoolId :: Lens' AdminListUserAuthEvents Text+aluaeUserPoolId = lens _aluaeUserPoolId (\ s a -> s{_aluaeUserPoolId = a})++-- | The user pool username or an alias.+aluaeUsername :: Lens' AdminListUserAuthEvents Text+aluaeUsername = lens _aluaeUsername (\ s a -> s{_aluaeUsername = a}) . _Sensitive++instance AWSRequest AdminListUserAuthEvents where+        type Rs AdminListUserAuthEvents =+             AdminListUserAuthEventsResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 AdminListUserAuthEventsResponse' <$>+                   (x .?> "NextToken") <*>+                     (x .?> "AuthEvents" .!@ mempty)+                     <*> (pure (fromEnum s)))++instance Hashable AdminListUserAuthEvents where++instance NFData AdminListUserAuthEvents where++instance ToHeaders AdminListUserAuthEvents where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminListUserAuthEvents"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminListUserAuthEvents where+        toJSON AdminListUserAuthEvents'{..}+          = object+              (catMaybes+                 [("NextToken" .=) <$> _aluaeNextToken,+                  ("MaxResults" .=) <$> _aluaeMaxResults,+                  Just ("UserPoolId" .= _aluaeUserPoolId),+                  Just ("Username" .= _aluaeUsername)])++instance ToPath AdminListUserAuthEvents where+        toPath = const "/"++instance ToQuery AdminListUserAuthEvents where+        toQuery = const mempty++-- | /See:/ 'adminListUserAuthEventsResponse' smart constructor.+data AdminListUserAuthEventsResponse = AdminListUserAuthEventsResponse'+  { _aluaersNextToken      :: !(Maybe Text)+  , _aluaersAuthEvents     :: !(Maybe [AuthEventType])+  , _aluaersResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminListUserAuthEventsResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'aluaersNextToken' - A pagination token.+--+-- * 'aluaersAuthEvents' - The response object. It includes the @EventID@ , @EventType@ , @CreationDate@ , @EventRisk@ , and @EventResponse@ .+--+-- * 'aluaersResponseStatus' - -- | The response status code.+adminListUserAuthEventsResponse+    :: Int -- ^ 'aluaersResponseStatus'+    -> AdminListUserAuthEventsResponse+adminListUserAuthEventsResponse pResponseStatus_ =+  AdminListUserAuthEventsResponse'+    { _aluaersNextToken = Nothing+    , _aluaersAuthEvents = Nothing+    , _aluaersResponseStatus = pResponseStatus_+    }+++-- | A pagination token.+aluaersNextToken :: Lens' AdminListUserAuthEventsResponse (Maybe Text)+aluaersNextToken = lens _aluaersNextToken (\ s a -> s{_aluaersNextToken = a})++-- | The response object. It includes the @EventID@ , @EventType@ , @CreationDate@ , @EventRisk@ , and @EventResponse@ .+aluaersAuthEvents :: Lens' AdminListUserAuthEventsResponse [AuthEventType]+aluaersAuthEvents = lens _aluaersAuthEvents (\ s a -> s{_aluaersAuthEvents = a}) . _Default . _Coerce++-- | -- | The response status code.+aluaersResponseStatus :: Lens' AdminListUserAuthEventsResponse Int+aluaersResponseStatus = lens _aluaersResponseStatus (\ s a -> s{_aluaersResponseStatus = a})++instance NFData AdminListUserAuthEventsResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminRemoveUserFromGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,23 +69,23 @@     -> AdminRemoveUserFromGroup adminRemoveUserFromGroup pUserPoolId_ pUsername_ pGroupName_ =   AdminRemoveUserFromGroup'-  { _arufgUserPoolId = pUserPoolId_-  , _arufgUsername = _Sensitive # pUsername_-  , _arufgGroupName = pGroupName_-  }+    { _arufgUserPoolId = pUserPoolId_+    , _arufgUsername = _Sensitive # pUsername_+    , _arufgGroupName = pGroupName_+    }   -- | The user pool ID for the user pool. arufgUserPoolId :: Lens' AdminRemoveUserFromGroup Text-arufgUserPoolId = lens _arufgUserPoolId (\ s a -> s{_arufgUserPoolId = a});+arufgUserPoolId = lens _arufgUserPoolId (\ s a -> s{_arufgUserPoolId = a})  -- | The username for the user. arufgUsername :: Lens' AdminRemoveUserFromGroup Text-arufgUsername = lens _arufgUsername (\ s a -> s{_arufgUsername = a}) . _Sensitive;+arufgUsername = lens _arufgUsername (\ s a -> s{_arufgUsername = a}) . _Sensitive  -- | The group name. arufgGroupName :: Lens' AdminRemoveUserFromGroup Text-arufgGroupName = lens _arufgGroupName (\ s a -> s{_arufgGroupName = a});+arufgGroupName = lens _arufgGroupName (\ s a -> s{_arufgGroupName = a})  instance AWSRequest AdminRemoveUserFromGroup where         type Rs AdminRemoveUserFromGroup =

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminResetUserPassword--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -72,16 +72,16 @@     -> AdminResetUserPassword adminResetUserPassword pUserPoolId_ pUsername_ =   AdminResetUserPassword'-  {_arupUserPoolId = pUserPoolId_, _arupUsername = _Sensitive # pUsername_}+    {_arupUserPoolId = pUserPoolId_, _arupUsername = _Sensitive # pUsername_}   -- | The user pool ID for the user pool where you want to reset the user's password. arupUserPoolId :: Lens' AdminResetUserPassword Text-arupUserPoolId = lens _arupUserPoolId (\ s a -> s{_arupUserPoolId = a});+arupUserPoolId = lens _arupUserPoolId (\ s a -> s{_arupUserPoolId = a})  -- | The user name of the user whose password you wish to reset. arupUsername :: Lens' AdminResetUserPassword Text-arupUsername = lens _arupUsername (\ s a -> s{_arupUsername = a}) . _Sensitive;+arupUsername = lens _arupUsername (\ s a -> s{_arupUsername = a}) . _Sensitive  instance AWSRequest AdminResetUserPassword where         type Rs AdminResetUserPassword =@@ -144,6 +144,6 @@  -- | -- | The response status code. aruprsResponseStatus :: Lens' AdminResetUserPasswordResponse Int-aruprsResponseStatus = lens _aruprsResponseStatus (\ s a -> s{_aruprsResponseStatus = a});+aruprsResponseStatus = lens _aruprsResponseStatus (\ s a -> s{_aruprsResponseStatus = a})  instance NFData AdminResetUserPasswordResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminRespondToAuthChallenge--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -29,6 +29,8 @@       adminRespondToAuthChallenge     , AdminRespondToAuthChallenge     -- * Request Lenses+    , artacContextData+    , artacAnalyticsMetadata     , artacChallengeResponses     , artacSession     , artacUserPoolId@@ -59,7 +61,9 @@ -- -- /See:/ 'adminRespondToAuthChallenge' smart constructor. data AdminRespondToAuthChallenge = AdminRespondToAuthChallenge'-  { _artacChallengeResponses :: !(Maybe (Map Text Text))+  { _artacContextData        :: !(Maybe ContextDataType)+  , _artacAnalyticsMetadata  :: !(Maybe AnalyticsMetadataType)+  , _artacChallengeResponses :: !(Maybe (Map Text Text))   , _artacSession            :: !(Maybe Text)   , _artacUserPoolId         :: !Text   , _artacClientId           :: !(Sensitive Text)@@ -71,6 +75,10 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'artacContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+--+-- * 'artacAnalyticsMetadata' - The analytics metadata for collecting Amazon Pinpoint metrics for @AdminRespondToAuthChallenge@ calls.+-- -- * 'artacChallengeResponses' - The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @ADMIN_NO_SRP_AUTH@ : @PASSWORD@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).      * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).  The value of the @USERNAME@ attribute must be the user's actual username, not an alias (such as email address or phone number). To make this easier, the @AdminInitiateAuth@ response includes the actual username value in the @USERNAMEUSER_ID_FOR_SRP@ attribute, even if you specified an alias in your call to @AdminInitiateAuth@ . -- -- * 'artacSession' - The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.@@ -79,7 +87,7 @@ -- -- * 'artacClientId' - The app client ID. ----- * 'artacChallengeName' - The challenge name. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- * 'artacChallengeName' - The challenge name. For more information, see . adminRespondToAuthChallenge     :: Text -- ^ 'artacUserPoolId'     -> Text -- ^ 'artacClientId'@@ -87,33 +95,43 @@     -> AdminRespondToAuthChallenge adminRespondToAuthChallenge pUserPoolId_ pClientId_ pChallengeName_ =   AdminRespondToAuthChallenge'-  { _artacChallengeResponses = Nothing-  , _artacSession = Nothing-  , _artacUserPoolId = pUserPoolId_-  , _artacClientId = _Sensitive # pClientId_-  , _artacChallengeName = pChallengeName_-  }+    { _artacContextData = Nothing+    , _artacAnalyticsMetadata = Nothing+    , _artacChallengeResponses = Nothing+    , _artacSession = Nothing+    , _artacUserPoolId = pUserPoolId_+    , _artacClientId = _Sensitive # pClientId_+    , _artacChallengeName = pChallengeName_+    }  +-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+artacContextData :: Lens' AdminRespondToAuthChallenge (Maybe ContextDataType)+artacContextData = lens _artacContextData (\ s a -> s{_artacContextData = a})++-- | The analytics metadata for collecting Amazon Pinpoint metrics for @AdminRespondToAuthChallenge@ calls.+artacAnalyticsMetadata :: Lens' AdminRespondToAuthChallenge (Maybe AnalyticsMetadataType)+artacAnalyticsMetadata = lens _artacAnalyticsMetadata (\ s a -> s{_artacAnalyticsMetadata = a})+ -- | The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @ADMIN_NO_SRP_AUTH@ : @PASSWORD@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).      * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).  The value of the @USERNAME@ attribute must be the user's actual username, not an alias (such as email address or phone number). To make this easier, the @AdminInitiateAuth@ response includes the actual username value in the @USERNAMEUSER_ID_FOR_SRP@ attribute, even if you specified an alias in your call to @AdminInitiateAuth@ . artacChallengeResponses :: Lens' AdminRespondToAuthChallenge (HashMap Text Text)-artacChallengeResponses = lens _artacChallengeResponses (\ s a -> s{_artacChallengeResponses = a}) . _Default . _Map;+artacChallengeResponses = lens _artacChallengeResponses (\ s a -> s{_artacChallengeResponses = a}) . _Default . _Map  -- | The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. artacSession :: Lens' AdminRespondToAuthChallenge (Maybe Text)-artacSession = lens _artacSession (\ s a -> s{_artacSession = a});+artacSession = lens _artacSession (\ s a -> s{_artacSession = a})  -- | The ID of the Amazon Cognito user pool. artacUserPoolId :: Lens' AdminRespondToAuthChallenge Text-artacUserPoolId = lens _artacUserPoolId (\ s a -> s{_artacUserPoolId = a});+artacUserPoolId = lens _artacUserPoolId (\ s a -> s{_artacUserPoolId = a})  -- | The app client ID. artacClientId :: Lens' AdminRespondToAuthChallenge Text-artacClientId = lens _artacClientId (\ s a -> s{_artacClientId = a}) . _Sensitive;+artacClientId = lens _artacClientId (\ s a -> s{_artacClientId = a}) . _Sensitive --- | The challenge name. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- | The challenge name. For more information, see . artacChallengeName :: Lens' AdminRespondToAuthChallenge ChallengeNameType-artacChallengeName = lens _artacChallengeName (\ s a -> s{_artacChallengeName = a});+artacChallengeName = lens _artacChallengeName (\ s a -> s{_artacChallengeName = a})  instance AWSRequest AdminRespondToAuthChallenge where         type Rs AdminRespondToAuthChallenge =@@ -147,7 +165,9 @@         toJSON AdminRespondToAuthChallenge'{..}           = object               (catMaybes-                 [("ChallengeResponses" .=) <$>+                 [("ContextData" .=) <$> _artacContextData,+                  ("AnalyticsMetadata" .=) <$> _artacAnalyticsMetadata,+                  ("ChallengeResponses" .=) <$>                     _artacChallengeResponses,                   ("Session" .=) <$> _artacSession,                   Just ("UserPoolId" .= _artacUserPoolId),@@ -178,13 +198,13 @@ -- -- Use one of the following lenses to modify other fields as desired: ----- * 'artacrsChallengeName' - The name of the challenge. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- * 'artacrsChallengeName' - The name of the challenge. For more information, see . ----- * 'artacrsChallengeParameters' - The challenge parameters. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- * 'artacrsChallengeParameters' - The challenge parameters. For more information, see . -- -- * 'artacrsAuthenticationResult' - The result returned by the server in response to the authentication request. ----- * 'artacrsSession' - The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- * 'artacrsSession' - The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'artacrsResponseStatus' - -- | The response status code. adminRespondToAuthChallengeResponse@@ -192,33 +212,33 @@     -> AdminRespondToAuthChallengeResponse adminRespondToAuthChallengeResponse pResponseStatus_ =   AdminRespondToAuthChallengeResponse'-  { _artacrsChallengeName = Nothing-  , _artacrsChallengeParameters = Nothing-  , _artacrsAuthenticationResult = Nothing-  , _artacrsSession = Nothing-  , _artacrsResponseStatus = pResponseStatus_-  }+    { _artacrsChallengeName = Nothing+    , _artacrsChallengeParameters = Nothing+    , _artacrsAuthenticationResult = Nothing+    , _artacrsSession = Nothing+    , _artacrsResponseStatus = pResponseStatus_+    }  --- | The name of the challenge. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- | The name of the challenge. For more information, see . artacrsChallengeName :: Lens' AdminRespondToAuthChallengeResponse (Maybe ChallengeNameType)-artacrsChallengeName = lens _artacrsChallengeName (\ s a -> s{_artacrsChallengeName = a});+artacrsChallengeName = lens _artacrsChallengeName (\ s a -> s{_artacrsChallengeName = a}) --- | The challenge parameters. For more information, see <API_AdminInitiateAuth.html AdminInitiateAuth> .+-- | The challenge parameters. For more information, see . artacrsChallengeParameters :: Lens' AdminRespondToAuthChallengeResponse (HashMap Text Text)-artacrsChallengeParameters = lens _artacrsChallengeParameters (\ s a -> s{_artacrsChallengeParameters = a}) . _Default . _Map;+artacrsChallengeParameters = lens _artacrsChallengeParameters (\ s a -> s{_artacrsChallengeParameters = a}) . _Default . _Map  -- | The result returned by the server in response to the authentication request. artacrsAuthenticationResult :: Lens' AdminRespondToAuthChallengeResponse (Maybe AuthenticationResultType)-artacrsAuthenticationResult = lens _artacrsAuthenticationResult (\ s a -> s{_artacrsAuthenticationResult = a});+artacrsAuthenticationResult = lens _artacrsAuthenticationResult (\ s a -> s{_artacrsAuthenticationResult = a}) --- | The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- | The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. artacrsSession :: Lens' AdminRespondToAuthChallengeResponse (Maybe Text)-artacrsSession = lens _artacrsSession (\ s a -> s{_artacrsSession = a});+artacrsSession = lens _artacrsSession (\ s a -> s{_artacrsSession = a})  -- | -- | The response status code. artacrsResponseStatus :: Lens' AdminRespondToAuthChallengeResponse Int-artacrsResponseStatus = lens _artacrsResponseStatus (\ s a -> s{_artacrsResponseStatus = a});+artacrsResponseStatus = lens _artacrsResponseStatus (\ s a -> s{_artacrsResponseStatus = a})  instance NFData AdminRespondToAuthChallengeResponse          where

@@ -0,0 +1,161 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminSetUserMFAPreference+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Sets the user's multi-factor authentication (MFA) preference.+--+--+module Network.AWS.CognitoIdentityProvider.AdminSetUserMFAPreference+    (+    -- * Creating a Request+      adminSetUserMFAPreference+    , AdminSetUserMFAPreference+    -- * Request Lenses+    , asumpSMSMFASettings+    , asumpSoftwareTokenMFASettings+    , asumpUsername+    , asumpUserPoolId++    -- * Destructuring the Response+    , adminSetUserMFAPreferenceResponse+    , AdminSetUserMFAPreferenceResponse+    -- * Response Lenses+    , asumprsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminSetUserMFAPreference' smart constructor.+data AdminSetUserMFAPreference = AdminSetUserMFAPreference'+  { _asumpSMSMFASettings           :: !(Maybe SMSMFASettingsType)+  , _asumpSoftwareTokenMFASettings :: !(Maybe SoftwareTokenMFASettingsType)+  , _asumpUsername                 :: !(Sensitive Text)+  , _asumpUserPoolId               :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminSetUserMFAPreference' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'asumpSMSMFASettings' - The SMS text message MFA settings.+--+-- * 'asumpSoftwareTokenMFASettings' - The time-based one-time password software token MFA settings.+--+-- * 'asumpUsername' - The user pool username or alias.+--+-- * 'asumpUserPoolId' - The user pool ID.+adminSetUserMFAPreference+    :: Text -- ^ 'asumpUsername'+    -> Text -- ^ 'asumpUserPoolId'+    -> AdminSetUserMFAPreference+adminSetUserMFAPreference pUsername_ pUserPoolId_ =+  AdminSetUserMFAPreference'+    { _asumpSMSMFASettings = Nothing+    , _asumpSoftwareTokenMFASettings = Nothing+    , _asumpUsername = _Sensitive # pUsername_+    , _asumpUserPoolId = pUserPoolId_+    }+++-- | The SMS text message MFA settings.+asumpSMSMFASettings :: Lens' AdminSetUserMFAPreference (Maybe SMSMFASettingsType)+asumpSMSMFASettings = lens _asumpSMSMFASettings (\ s a -> s{_asumpSMSMFASettings = a})++-- | The time-based one-time password software token MFA settings.+asumpSoftwareTokenMFASettings :: Lens' AdminSetUserMFAPreference (Maybe SoftwareTokenMFASettingsType)+asumpSoftwareTokenMFASettings = lens _asumpSoftwareTokenMFASettings (\ s a -> s{_asumpSoftwareTokenMFASettings = a})++-- | The user pool username or alias.+asumpUsername :: Lens' AdminSetUserMFAPreference Text+asumpUsername = lens _asumpUsername (\ s a -> s{_asumpUsername = a}) . _Sensitive++-- | The user pool ID.+asumpUserPoolId :: Lens' AdminSetUserMFAPreference Text+asumpUserPoolId = lens _asumpUserPoolId (\ s a -> s{_asumpUserPoolId = a})++instance AWSRequest AdminSetUserMFAPreference where+        type Rs AdminSetUserMFAPreference =+             AdminSetUserMFAPreferenceResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveEmpty+              (\ s h x ->+                 AdminSetUserMFAPreferenceResponse' <$>+                   (pure (fromEnum s)))++instance Hashable AdminSetUserMFAPreference where++instance NFData AdminSetUserMFAPreference where++instance ToHeaders AdminSetUserMFAPreference where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminSetUserMFAPreference"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminSetUserMFAPreference where+        toJSON AdminSetUserMFAPreference'{..}+          = object+              (catMaybes+                 [("SMSMfaSettings" .=) <$> _asumpSMSMFASettings,+                  ("SoftwareTokenMfaSettings" .=) <$>+                    _asumpSoftwareTokenMFASettings,+                  Just ("Username" .= _asumpUsername),+                  Just ("UserPoolId" .= _asumpUserPoolId)])++instance ToPath AdminSetUserMFAPreference where+        toPath = const "/"++instance ToQuery AdminSetUserMFAPreference where+        toQuery = const mempty++-- | /See:/ 'adminSetUserMFAPreferenceResponse' smart constructor.+newtype AdminSetUserMFAPreferenceResponse = AdminSetUserMFAPreferenceResponse'+  { _asumprsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminSetUserMFAPreferenceResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'asumprsResponseStatus' - -- | The response status code.+adminSetUserMFAPreferenceResponse+    :: Int -- ^ 'asumprsResponseStatus'+    -> AdminSetUserMFAPreferenceResponse+adminSetUserMFAPreferenceResponse pResponseStatus_ =+  AdminSetUserMFAPreferenceResponse' {_asumprsResponseStatus = pResponseStatus_}+++-- | -- | The response status code.+asumprsResponseStatus :: Lens' AdminSetUserMFAPreferenceResponse Int+asumprsResponseStatus = lens _asumprsResponseStatus (\ s a -> s{_asumprsResponseStatus = a})++instance NFData AdminSetUserMFAPreferenceResponse+         where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminSetUserSettings--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -74,23 +74,23 @@     -> AdminSetUserSettings adminSetUserSettings pUserPoolId_ pUsername_ =   AdminSetUserSettings'-  { _asusUserPoolId = pUserPoolId_-  , _asusUsername = _Sensitive # pUsername_-  , _asusMFAOptions = mempty-  }+    { _asusUserPoolId = pUserPoolId_+    , _asusUsername = _Sensitive # pUsername_+    , _asusMFAOptions = mempty+    }   -- | The user pool ID for the user pool where you want to set the user's settings, such as MFA options. asusUserPoolId :: Lens' AdminSetUserSettings Text-asusUserPoolId = lens _asusUserPoolId (\ s a -> s{_asusUserPoolId = a});+asusUserPoolId = lens _asusUserPoolId (\ s a -> s{_asusUserPoolId = a})  -- | The user name of the user for whom you wish to set user settings. asusUsername :: Lens' AdminSetUserSettings Text-asusUsername = lens _asusUsername (\ s a -> s{_asusUsername = a}) . _Sensitive;+asusUsername = lens _asusUsername (\ s a -> s{_asusUsername = a}) . _Sensitive  -- | Specifies the options for MFA (e.g., email or phone number). asusMFAOptions :: Lens' AdminSetUserSettings [MFAOptionType]-asusMFAOptions = lens _asusMFAOptions (\ s a -> s{_asusMFAOptions = a}) . _Coerce;+asusMFAOptions = lens _asusMFAOptions (\ s a -> s{_asusMFAOptions = a}) . _Coerce  instance AWSRequest AdminSetUserSettings where         type Rs AdminSetUserSettings =@@ -154,6 +154,6 @@  -- | -- | The response status code. asusrsResponseStatus :: Lens' AdminSetUserSettingsResponse Int-asusrsResponseStatus = lens _asusrsResponseStatus (\ s a -> s{_asusrsResponseStatus = a});+asusrsResponseStatus = lens _asusrsResponseStatus (\ s a -> s{_asusrsResponseStatus = a})  instance NFData AdminSetUserSettingsResponse where

@@ -0,0 +1,164 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AdminUpdateAuthEventFeedback+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Provides feedback for an authentication event as to whether it was from a valid user. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.+--+--+module Network.AWS.CognitoIdentityProvider.AdminUpdateAuthEventFeedback+    (+    -- * Creating a Request+      adminUpdateAuthEventFeedback+    , AdminUpdateAuthEventFeedback+    -- * Request Lenses+    , auaefUserPoolId+    , auaefUsername+    , auaefEventId+    , auaefFeedbackValue++    -- * Destructuring the Response+    , adminUpdateAuthEventFeedbackResponse+    , AdminUpdateAuthEventFeedbackResponse+    -- * Response Lenses+    , auaefrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'adminUpdateAuthEventFeedback' smart constructor.+data AdminUpdateAuthEventFeedback = AdminUpdateAuthEventFeedback'+  { _auaefUserPoolId    :: !Text+  , _auaefUsername      :: !(Sensitive Text)+  , _auaefEventId       :: !Text+  , _auaefFeedbackValue :: !FeedbackValueType+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminUpdateAuthEventFeedback' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'auaefUserPoolId' - The user pool ID.+--+-- * 'auaefUsername' - The user pool username.+--+-- * 'auaefEventId' - The authentication event ID.+--+-- * 'auaefFeedbackValue' - The authentication event feedback value.+adminUpdateAuthEventFeedback+    :: Text -- ^ 'auaefUserPoolId'+    -> Text -- ^ 'auaefUsername'+    -> Text -- ^ 'auaefEventId'+    -> FeedbackValueType -- ^ 'auaefFeedbackValue'+    -> AdminUpdateAuthEventFeedback+adminUpdateAuthEventFeedback pUserPoolId_ pUsername_ pEventId_ pFeedbackValue_ =+  AdminUpdateAuthEventFeedback'+    { _auaefUserPoolId = pUserPoolId_+    , _auaefUsername = _Sensitive # pUsername_+    , _auaefEventId = pEventId_+    , _auaefFeedbackValue = pFeedbackValue_+    }+++-- | The user pool ID.+auaefUserPoolId :: Lens' AdminUpdateAuthEventFeedback Text+auaefUserPoolId = lens _auaefUserPoolId (\ s a -> s{_auaefUserPoolId = a})++-- | The user pool username.+auaefUsername :: Lens' AdminUpdateAuthEventFeedback Text+auaefUsername = lens _auaefUsername (\ s a -> s{_auaefUsername = a}) . _Sensitive++-- | The authentication event ID.+auaefEventId :: Lens' AdminUpdateAuthEventFeedback Text+auaefEventId = lens _auaefEventId (\ s a -> s{_auaefEventId = a})++-- | The authentication event feedback value.+auaefFeedbackValue :: Lens' AdminUpdateAuthEventFeedback FeedbackValueType+auaefFeedbackValue = lens _auaefFeedbackValue (\ s a -> s{_auaefFeedbackValue = a})++instance AWSRequest AdminUpdateAuthEventFeedback+         where+        type Rs AdminUpdateAuthEventFeedback =+             AdminUpdateAuthEventFeedbackResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveEmpty+              (\ s h x ->+                 AdminUpdateAuthEventFeedbackResponse' <$>+                   (pure (fromEnum s)))++instance Hashable AdminUpdateAuthEventFeedback where++instance NFData AdminUpdateAuthEventFeedback where++instance ToHeaders AdminUpdateAuthEventFeedback where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AdminUpdateAuthEventFeedback where+        toJSON AdminUpdateAuthEventFeedback'{..}+          = object+              (catMaybes+                 [Just ("UserPoolId" .= _auaefUserPoolId),+                  Just ("Username" .= _auaefUsername),+                  Just ("EventId" .= _auaefEventId),+                  Just ("FeedbackValue" .= _auaefFeedbackValue)])++instance ToPath AdminUpdateAuthEventFeedback where+        toPath = const "/"++instance ToQuery AdminUpdateAuthEventFeedback where+        toQuery = const mempty++-- | /See:/ 'adminUpdateAuthEventFeedbackResponse' smart constructor.+newtype AdminUpdateAuthEventFeedbackResponse = AdminUpdateAuthEventFeedbackResponse'+  { _auaefrsResponseStatus :: Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AdminUpdateAuthEventFeedbackResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'auaefrsResponseStatus' - -- | The response status code.+adminUpdateAuthEventFeedbackResponse+    :: Int -- ^ 'auaefrsResponseStatus'+    -> AdminUpdateAuthEventFeedbackResponse+adminUpdateAuthEventFeedbackResponse pResponseStatus_ =+  AdminUpdateAuthEventFeedbackResponse'+    {_auaefrsResponseStatus = pResponseStatus_}+++-- | -- | The response status code.+auaefrsResponseStatus :: Lens' AdminUpdateAuthEventFeedbackResponse Int+auaefrsResponseStatus = lens _auaefrsResponseStatus (\ s a -> s{_auaefrsResponseStatus = a})++instance NFData AdminUpdateAuthEventFeedbackResponse+         where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUpdateDeviceStatus--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -79,28 +79,28 @@     -> AdminUpdateDeviceStatus adminUpdateDeviceStatus pUserPoolId_ pUsername_ pDeviceKey_ =   AdminUpdateDeviceStatus'-  { _audsDeviceRememberedStatus = Nothing-  , _audsUserPoolId = pUserPoolId_-  , _audsUsername = _Sensitive # pUsername_-  , _audsDeviceKey = pDeviceKey_-  }+    { _audsDeviceRememberedStatus = Nothing+    , _audsUserPoolId = pUserPoolId_+    , _audsUsername = _Sensitive # pUsername_+    , _audsDeviceKey = pDeviceKey_+    }   -- | The status indicating whether a device has been remembered or not. audsDeviceRememberedStatus :: Lens' AdminUpdateDeviceStatus (Maybe DeviceRememberedStatusType)-audsDeviceRememberedStatus = lens _audsDeviceRememberedStatus (\ s a -> s{_audsDeviceRememberedStatus = a});+audsDeviceRememberedStatus = lens _audsDeviceRememberedStatus (\ s a -> s{_audsDeviceRememberedStatus = a})  -- | The user pool ID. audsUserPoolId :: Lens' AdminUpdateDeviceStatus Text-audsUserPoolId = lens _audsUserPoolId (\ s a -> s{_audsUserPoolId = a});+audsUserPoolId = lens _audsUserPoolId (\ s a -> s{_audsUserPoolId = a})  -- | The user name. audsUsername :: Lens' AdminUpdateDeviceStatus Text-audsUsername = lens _audsUsername (\ s a -> s{_audsUsername = a}) . _Sensitive;+audsUsername = lens _audsUsername (\ s a -> s{_audsUsername = a}) . _Sensitive  -- | The device key. audsDeviceKey :: Lens' AdminUpdateDeviceStatus Text-audsDeviceKey = lens _audsDeviceKey (\ s a -> s{_audsDeviceKey = a});+audsDeviceKey = lens _audsDeviceKey (\ s a -> s{_audsDeviceKey = a})  instance AWSRequest AdminUpdateDeviceStatus where         type Rs AdminUpdateDeviceStatus =@@ -166,6 +166,6 @@  -- | -- | The response status code. audsrsResponseStatus :: Lens' AdminUpdateDeviceStatusResponse Int-audsrsResponseStatus = lens _audsrsResponseStatus (\ s a -> s{_audsrsResponseStatus = a});+audsrsResponseStatus = lens _audsrsResponseStatus (\ s a -> s{_audsrsResponseStatus = a})  instance NFData AdminUpdateDeviceStatusResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUpdateUserAttributes--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -78,23 +78,23 @@     -> AdminUpdateUserAttributes adminUpdateUserAttributes pUserPoolId_ pUsername_ =   AdminUpdateUserAttributes'-  { _auuaUserPoolId = pUserPoolId_-  , _auuaUsername = _Sensitive # pUsername_-  , _auuaUserAttributes = mempty-  }+    { _auuaUserPoolId = pUserPoolId_+    , _auuaUsername = _Sensitive # pUsername_+    , _auuaUserAttributes = mempty+    }   -- | The user pool ID for the user pool where you want to update user attributes. auuaUserPoolId :: Lens' AdminUpdateUserAttributes Text-auuaUserPoolId = lens _auuaUserPoolId (\ s a -> s{_auuaUserPoolId = a});+auuaUserPoolId = lens _auuaUserPoolId (\ s a -> s{_auuaUserPoolId = a})  -- | The user name of the user for whom you want to update user attributes. auuaUsername :: Lens' AdminUpdateUserAttributes Text-auuaUsername = lens _auuaUsername (\ s a -> s{_auuaUsername = a}) . _Sensitive;+auuaUsername = lens _auuaUsername (\ s a -> s{_auuaUsername = a}) . _Sensitive  -- | An array of name-value pairs representing user attributes. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. auuaUserAttributes :: Lens' AdminUpdateUserAttributes [AttributeType]-auuaUserAttributes = lens _auuaUserAttributes (\ s a -> s{_auuaUserAttributes = a}) . _Coerce;+auuaUserAttributes = lens _auuaUserAttributes (\ s a -> s{_auuaUserAttributes = a}) . _Coerce  instance AWSRequest AdminUpdateUserAttributes where         type Rs AdminUpdateUserAttributes =@@ -158,7 +158,7 @@  -- | -- | The response status code. auuarsResponseStatus :: Lens' AdminUpdateUserAttributesResponse Int-auuarsResponseStatus = lens _auuarsResponseStatus (\ s a -> s{_auuarsResponseStatus = a});+auuarsResponseStatus = lens _auuarsResponseStatus (\ s a -> s{_auuarsResponseStatus = a})  instance NFData AdminUpdateUserAttributesResponse          where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.AdminUserGlobalSignOut--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -70,16 +70,16 @@     -> AdminUserGlobalSignOut adminUserGlobalSignOut pUserPoolId_ pUsername_ =   AdminUserGlobalSignOut'-  {_augsoUserPoolId = pUserPoolId_, _augsoUsername = _Sensitive # pUsername_}+    {_augsoUserPoolId = pUserPoolId_, _augsoUsername = _Sensitive # pUsername_}   -- | The user pool ID. augsoUserPoolId :: Lens' AdminUserGlobalSignOut Text-augsoUserPoolId = lens _augsoUserPoolId (\ s a -> s{_augsoUserPoolId = a});+augsoUserPoolId = lens _augsoUserPoolId (\ s a -> s{_augsoUserPoolId = a})  -- | The user name. augsoUsername :: Lens' AdminUserGlobalSignOut Text-augsoUsername = lens _augsoUsername (\ s a -> s{_augsoUsername = a}) . _Sensitive;+augsoUsername = lens _augsoUsername (\ s a -> s{_augsoUsername = a}) . _Sensitive  instance AWSRequest AdminUserGlobalSignOut where         type Rs AdminUserGlobalSignOut =@@ -142,6 +142,6 @@  -- | -- | The response status code. augsorsResponseStatus :: Lens' AdminUserGlobalSignOutResponse Int-augsorsResponseStatus = lens _augsorsResponseStatus (\ s a -> s{_augsorsResponseStatus = a});+augsorsResponseStatus = lens _augsorsResponseStatus (\ s a -> s{_augsorsResponseStatus = a})  instance NFData AdminUserGlobalSignOutResponse where

@@ -0,0 +1,155 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.AssociateSoftwareToken+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Returns a unique generated shared secret key code for the user account. The request takes an access token or a session string, but not both.+--+--+module Network.AWS.CognitoIdentityProvider.AssociateSoftwareToken+    (+    -- * Creating a Request+      associateSoftwareToken+    , AssociateSoftwareToken+    -- * Request Lenses+    , astAccessToken+    , astSession++    -- * Destructuring the Response+    , associateSoftwareTokenResponse+    , AssociateSoftwareTokenResponse+    -- * Response Lenses+    , astrsSecretCode+    , astrsSession+    , astrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'associateSoftwareToken' smart constructor.+data AssociateSoftwareToken = AssociateSoftwareToken'+  { _astAccessToken :: !(Maybe (Sensitive Text))+  , _astSession     :: !(Maybe Text)+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AssociateSoftwareToken' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'astAccessToken' - The access token.+--+-- * 'astSession' - The session which should be passed both ways in challenge-response calls to the service. This allows authentication of the user as part of the MFA setup process.+associateSoftwareToken+    :: AssociateSoftwareToken+associateSoftwareToken =+  AssociateSoftwareToken' {_astAccessToken = Nothing, _astSession = Nothing}+++-- | The access token.+astAccessToken :: Lens' AssociateSoftwareToken (Maybe Text)+astAccessToken = lens _astAccessToken (\ s a -> s{_astAccessToken = a}) . mapping _Sensitive++-- | The session which should be passed both ways in challenge-response calls to the service. This allows authentication of the user as part of the MFA setup process.+astSession :: Lens' AssociateSoftwareToken (Maybe Text)+astSession = lens _astSession (\ s a -> s{_astSession = a})++instance AWSRequest AssociateSoftwareToken where+        type Rs AssociateSoftwareToken =+             AssociateSoftwareTokenResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 AssociateSoftwareTokenResponse' <$>+                   (x .?> "SecretCode") <*> (x .?> "Session") <*>+                     (pure (fromEnum s)))++instance Hashable AssociateSoftwareToken where++instance NFData AssociateSoftwareToken where++instance ToHeaders AssociateSoftwareToken where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.AssociateSoftwareToken"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON AssociateSoftwareToken where+        toJSON AssociateSoftwareToken'{..}+          = object+              (catMaybes+                 [("AccessToken" .=) <$> _astAccessToken,+                  ("Session" .=) <$> _astSession])++instance ToPath AssociateSoftwareToken where+        toPath = const "/"++instance ToQuery AssociateSoftwareToken where+        toQuery = const mempty++-- | /See:/ 'associateSoftwareTokenResponse' smart constructor.+data AssociateSoftwareTokenResponse = AssociateSoftwareTokenResponse'+  { _astrsSecretCode     :: !(Maybe (Sensitive Text))+  , _astrsSession        :: !(Maybe Text)+  , _astrsResponseStatus :: !Int+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'AssociateSoftwareTokenResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'astrsSecretCode' - A unique generated shared secret code that is used in the TOTP algorithm to generate a one time code.+--+-- * 'astrsSession' - The session which should be passed both ways in challenge-response calls to the service. This allows authentication of the user as part of the MFA setup process.+--+-- * 'astrsResponseStatus' - -- | The response status code.+associateSoftwareTokenResponse+    :: Int -- ^ 'astrsResponseStatus'+    -> AssociateSoftwareTokenResponse+associateSoftwareTokenResponse pResponseStatus_ =+  AssociateSoftwareTokenResponse'+    { _astrsSecretCode = Nothing+    , _astrsSession = Nothing+    , _astrsResponseStatus = pResponseStatus_+    }+++-- | A unique generated shared secret code that is used in the TOTP algorithm to generate a one time code.+astrsSecretCode :: Lens' AssociateSoftwareTokenResponse (Maybe Text)+astrsSecretCode = lens _astrsSecretCode (\ s a -> s{_astrsSecretCode = a}) . mapping _Sensitive++-- | The session which should be passed both ways in challenge-response calls to the service. This allows authentication of the user as part of the MFA setup process.+astrsSession :: Lens' AssociateSoftwareTokenResponse (Maybe Text)+astrsSession = lens _astrsSession (\ s a -> s{_astrsSession = a})++-- | -- | The response status code.+astrsResponseStatus :: Lens' AssociateSoftwareTokenResponse Int+astrsResponseStatus = lens _astrsResponseStatus (\ s a -> s{_astrsResponseStatus = a})++instance NFData AssociateSoftwareTokenResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ChangePassword--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -61,11 +61,11 @@ -- -- Use one of the following lenses to modify other fields as desired: ----- * 'cpPreviousPassword' - The old password in the change password request.+-- * 'cpPreviousPassword' - The old password. ----- * 'cpProposedPassword' - The new password in the change password request.+-- * 'cpProposedPassword' - The new password. ----- * 'cpAccessToken' - The access token in the change password request.+-- * 'cpAccessToken' - The access token. changePassword     :: Text -- ^ 'cpPreviousPassword'     -> Text -- ^ 'cpProposedPassword'@@ -73,23 +73,23 @@     -> ChangePassword changePassword pPreviousPassword_ pProposedPassword_ pAccessToken_ =   ChangePassword'-  { _cpPreviousPassword = _Sensitive # pPreviousPassword_-  , _cpProposedPassword = _Sensitive # pProposedPassword_-  , _cpAccessToken = _Sensitive # pAccessToken_-  }+    { _cpPreviousPassword = _Sensitive # pPreviousPassword_+    , _cpProposedPassword = _Sensitive # pProposedPassword_+    , _cpAccessToken = _Sensitive # pAccessToken_+    }  --- | The old password in the change password request.+-- | The old password. cpPreviousPassword :: Lens' ChangePassword Text-cpPreviousPassword = lens _cpPreviousPassword (\ s a -> s{_cpPreviousPassword = a}) . _Sensitive;+cpPreviousPassword = lens _cpPreviousPassword (\ s a -> s{_cpPreviousPassword = a}) . _Sensitive --- | The new password in the change password request.+-- | The new password. cpProposedPassword :: Lens' ChangePassword Text-cpProposedPassword = lens _cpProposedPassword (\ s a -> s{_cpProposedPassword = a}) . _Sensitive;+cpProposedPassword = lens _cpProposedPassword (\ s a -> s{_cpProposedPassword = a}) . _Sensitive --- | The access token in the change password request.+-- | The access token. cpAccessToken :: Lens' ChangePassword Text-cpAccessToken = lens _cpAccessToken (\ s a -> s{_cpAccessToken = a}) . _Sensitive;+cpAccessToken = lens _cpAccessToken (\ s a -> s{_cpAccessToken = a}) . _Sensitive  instance AWSRequest ChangePassword where         type Rs ChangePassword = ChangePasswordResponse@@ -151,6 +151,6 @@  -- | -- | The response status code. cprsResponseStatus :: Lens' ChangePasswordResponse Int-cprsResponseStatus = lens _cprsResponseStatus (\ s a -> s{_cprsResponseStatus = a});+cprsResponseStatus = lens _cprsResponseStatus (\ s a -> s{_cprsResponseStatus = a})  instance NFData ChangePasswordResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmDevice--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -77,28 +77,28 @@     -> ConfirmDevice confirmDevice pAccessToken_ pDeviceKey_ =   ConfirmDevice'-  { _cdDeviceSecretVerifierConfig = Nothing-  , _cdDeviceName = Nothing-  , _cdAccessToken = _Sensitive # pAccessToken_-  , _cdDeviceKey = pDeviceKey_-  }+    { _cdDeviceSecretVerifierConfig = Nothing+    , _cdDeviceName = Nothing+    , _cdAccessToken = _Sensitive # pAccessToken_+    , _cdDeviceKey = pDeviceKey_+    }   -- | The configuration of the device secret verifier. cdDeviceSecretVerifierConfig :: Lens' ConfirmDevice (Maybe DeviceSecretVerifierConfigType)-cdDeviceSecretVerifierConfig = lens _cdDeviceSecretVerifierConfig (\ s a -> s{_cdDeviceSecretVerifierConfig = a});+cdDeviceSecretVerifierConfig = lens _cdDeviceSecretVerifierConfig (\ s a -> s{_cdDeviceSecretVerifierConfig = a})  -- | The device name. cdDeviceName :: Lens' ConfirmDevice (Maybe Text)-cdDeviceName = lens _cdDeviceName (\ s a -> s{_cdDeviceName = a});+cdDeviceName = lens _cdDeviceName (\ s a -> s{_cdDeviceName = a})  -- | The access token. cdAccessToken :: Lens' ConfirmDevice Text-cdAccessToken = lens _cdAccessToken (\ s a -> s{_cdAccessToken = a}) . _Sensitive;+cdAccessToken = lens _cdAccessToken (\ s a -> s{_cdAccessToken = a}) . _Sensitive  -- | The device key. cdDeviceKey :: Lens' ConfirmDevice Text-cdDeviceKey = lens _cdDeviceKey (\ s a -> s{_cdDeviceKey = a});+cdDeviceKey = lens _cdDeviceKey (\ s a -> s{_cdDeviceKey = a})  instance AWSRequest ConfirmDevice where         type Rs ConfirmDevice = ConfirmDeviceResponse@@ -163,17 +163,17 @@     -> ConfirmDeviceResponse confirmDeviceResponse pResponseStatus_ =   ConfirmDeviceResponse'-  { _cdrsUserConfirmationNecessary = Nothing-  , _cdrsResponseStatus = pResponseStatus_-  }+    { _cdrsUserConfirmationNecessary = Nothing+    , _cdrsResponseStatus = pResponseStatus_+    }   -- | Indicates whether the user confirmation is necessary to confirm the device response. cdrsUserConfirmationNecessary :: Lens' ConfirmDeviceResponse (Maybe Bool)-cdrsUserConfirmationNecessary = lens _cdrsUserConfirmationNecessary (\ s a -> s{_cdrsUserConfirmationNecessary = a});+cdrsUserConfirmationNecessary = lens _cdrsUserConfirmationNecessary (\ s a -> s{_cdrsUserConfirmationNecessary = a})  -- | -- | The response status code. cdrsResponseStatus :: Lens' ConfirmDeviceResponse Int-cdrsResponseStatus = lens _cdrsResponseStatus (\ s a -> s{_cdrsResponseStatus = a});+cdrsResponseStatus = lens _cdrsResponseStatus (\ s a -> s{_cdrsResponseStatus = a})  instance NFData ConfirmDeviceResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmForgotPassword--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -27,6 +27,8 @@       confirmForgotPassword     , ConfirmForgotPassword     -- * Request Lenses+    , cfpAnalyticsMetadata+    , cfpUserContextData     , cfpSecretHash     , cfpClientId     , cfpUsername@@ -53,11 +55,13 @@ -- -- /See:/ 'confirmForgotPassword' smart constructor. data ConfirmForgotPassword = ConfirmForgotPassword'-  { _cfpSecretHash       :: !(Maybe (Sensitive Text))-  , _cfpClientId         :: !(Sensitive Text)-  , _cfpUsername         :: !(Sensitive Text)-  , _cfpConfirmationCode :: !Text-  , _cfpPassword         :: !(Sensitive Text)+  { _cfpAnalyticsMetadata :: !(Maybe AnalyticsMetadataType)+  , _cfpUserContextData   :: !(Maybe UserContextDataType)+  , _cfpSecretHash        :: !(Maybe (Sensitive Text))+  , _cfpClientId          :: !(Sensitive Text)+  , _cfpUsername          :: !(Sensitive Text)+  , _cfpConfirmationCode  :: !Text+  , _cfpPassword          :: !(Sensitive Text)   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -65,13 +69,17 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'cfpAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @ConfirmForgotPassword@ calls.+--+-- * 'cfpUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+-- -- * 'cfpSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. -- -- * 'cfpClientId' - The app client ID of the app associated with the user pool. -- -- * 'cfpUsername' - The user name of the user for whom you want to enter a code to retrieve a forgotten password. ----- * 'cfpConfirmationCode' - The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see <API_ForgotPassword.html ForgotPassword>+-- * 'cfpConfirmationCode' - The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see -- -- * 'cfpPassword' - The password sent by a user's request to retrieve a forgotten password. confirmForgotPassword@@ -82,33 +90,43 @@     -> ConfirmForgotPassword confirmForgotPassword pClientId_ pUsername_ pConfirmationCode_ pPassword_ =   ConfirmForgotPassword'-  { _cfpSecretHash = Nothing-  , _cfpClientId = _Sensitive # pClientId_-  , _cfpUsername = _Sensitive # pUsername_-  , _cfpConfirmationCode = pConfirmationCode_-  , _cfpPassword = _Sensitive # pPassword_-  }+    { _cfpAnalyticsMetadata = Nothing+    , _cfpUserContextData = Nothing+    , _cfpSecretHash = Nothing+    , _cfpClientId = _Sensitive # pClientId_+    , _cfpUsername = _Sensitive # pUsername_+    , _cfpConfirmationCode = pConfirmationCode_+    , _cfpPassword = _Sensitive # pPassword_+    }  +-- | The Amazon Pinpoint analytics metadata for collecting metrics for @ConfirmForgotPassword@ calls.+cfpAnalyticsMetadata :: Lens' ConfirmForgotPassword (Maybe AnalyticsMetadataType)+cfpAnalyticsMetadata = lens _cfpAnalyticsMetadata (\ s a -> s{_cfpAnalyticsMetadata = a})++-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+cfpUserContextData :: Lens' ConfirmForgotPassword (Maybe UserContextDataType)+cfpUserContextData = lens _cfpUserContextData (\ s a -> s{_cfpUserContextData = a})+ -- | A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. cfpSecretHash :: Lens' ConfirmForgotPassword (Maybe Text)-cfpSecretHash = lens _cfpSecretHash (\ s a -> s{_cfpSecretHash = a}) . mapping _Sensitive;+cfpSecretHash = lens _cfpSecretHash (\ s a -> s{_cfpSecretHash = a}) . mapping _Sensitive  -- | The app client ID of the app associated with the user pool. cfpClientId :: Lens' ConfirmForgotPassword Text-cfpClientId = lens _cfpClientId (\ s a -> s{_cfpClientId = a}) . _Sensitive;+cfpClientId = lens _cfpClientId (\ s a -> s{_cfpClientId = a}) . _Sensitive  -- | The user name of the user for whom you want to enter a code to retrieve a forgotten password. cfpUsername :: Lens' ConfirmForgotPassword Text-cfpUsername = lens _cfpUsername (\ s a -> s{_cfpUsername = a}) . _Sensitive;+cfpUsername = lens _cfpUsername (\ s a -> s{_cfpUsername = a}) . _Sensitive --- | The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see <API_ForgotPassword.html ForgotPassword>+-- | The confirmation code sent by a user's request to retrieve a forgotten password. For more information, see cfpConfirmationCode :: Lens' ConfirmForgotPassword Text-cfpConfirmationCode = lens _cfpConfirmationCode (\ s a -> s{_cfpConfirmationCode = a});+cfpConfirmationCode = lens _cfpConfirmationCode (\ s a -> s{_cfpConfirmationCode = a})  -- | The password sent by a user's request to retrieve a forgotten password. cfpPassword :: Lens' ConfirmForgotPassword Text-cfpPassword = lens _cfpPassword (\ s a -> s{_cfpPassword = a}) . _Sensitive;+cfpPassword = lens _cfpPassword (\ s a -> s{_cfpPassword = a}) . _Sensitive  instance AWSRequest ConfirmForgotPassword where         type Rs ConfirmForgotPassword =@@ -138,7 +156,9 @@         toJSON ConfirmForgotPassword'{..}           = object               (catMaybes-                 [("SecretHash" .=) <$> _cfpSecretHash,+                 [("AnalyticsMetadata" .=) <$> _cfpAnalyticsMetadata,+                  ("UserContextData" .=) <$> _cfpUserContextData,+                  ("SecretHash" .=) <$> _cfpSecretHash,                   Just ("ClientId" .= _cfpClientId),                   Just ("Username" .= _cfpUsername),                   Just ("ConfirmationCode" .= _cfpConfirmationCode),@@ -174,6 +194,6 @@  -- | -- | The response status code. cfprsResponseStatus :: Lens' ConfirmForgotPasswordResponse Int-cfprsResponseStatus = lens _cfprsResponseStatus (\ s a -> s{_cfprsResponseStatus = a});+cfprsResponseStatus = lens _cfprsResponseStatus (\ s a -> s{_cfprsResponseStatus = a})  instance NFData ConfirmForgotPasswordResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ConfirmSignUp--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -28,6 +28,8 @@     , ConfirmSignUp     -- * Request Lenses     , csuForceAliasCreation+    , csuAnalyticsMetadata+    , csuUserContextData     , csuSecretHash     , csuClientId     , csuUsername@@ -54,6 +56,8 @@ -- /See:/ 'confirmSignUp' smart constructor. data ConfirmSignUp = ConfirmSignUp'   { _csuForceAliasCreation :: !(Maybe Bool)+  , _csuAnalyticsMetadata  :: !(Maybe AnalyticsMetadataType)+  , _csuUserContextData    :: !(Maybe UserContextDataType)   , _csuSecretHash         :: !(Maybe (Sensitive Text))   , _csuClientId           :: !(Sensitive Text)   , _csuUsername           :: !(Sensitive Text)@@ -67,6 +71,10 @@ -- -- * 'csuForceAliasCreation' - Boolean to be specified to force user confirmation irrespective of existing alias. By default set to @False@ . If this parameter is set to @True@ and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to @False@ , the API will throw an __AliasExistsException__ error. --+-- * 'csuAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @ConfirmSignUp@ calls.+--+-- * 'csuUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+-- -- * 'csuSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. -- -- * 'csuClientId' - The ID of the app client associated with the user pool.@@ -81,33 +89,43 @@     -> ConfirmSignUp confirmSignUp pClientId_ pUsername_ pConfirmationCode_ =   ConfirmSignUp'-  { _csuForceAliasCreation = Nothing-  , _csuSecretHash = Nothing-  , _csuClientId = _Sensitive # pClientId_-  , _csuUsername = _Sensitive # pUsername_-  , _csuConfirmationCode = pConfirmationCode_-  }+    { _csuForceAliasCreation = Nothing+    , _csuAnalyticsMetadata = Nothing+    , _csuUserContextData = Nothing+    , _csuSecretHash = Nothing+    , _csuClientId = _Sensitive # pClientId_+    , _csuUsername = _Sensitive # pUsername_+    , _csuConfirmationCode = pConfirmationCode_+    }   -- | Boolean to be specified to force user confirmation irrespective of existing alias. By default set to @False@ . If this parameter is set to @True@ and the phone number/email used for sign up confirmation already exists as an alias with a different user, the API call will migrate the alias from the previous user to the newly created user being confirmed. If set to @False@ , the API will throw an __AliasExistsException__ error. csuForceAliasCreation :: Lens' ConfirmSignUp (Maybe Bool)-csuForceAliasCreation = lens _csuForceAliasCreation (\ s a -> s{_csuForceAliasCreation = a});+csuForceAliasCreation = lens _csuForceAliasCreation (\ s a -> s{_csuForceAliasCreation = a}) +-- | The Amazon Pinpoint analytics metadata for collecting metrics for @ConfirmSignUp@ calls.+csuAnalyticsMetadata :: Lens' ConfirmSignUp (Maybe AnalyticsMetadataType)+csuAnalyticsMetadata = lens _csuAnalyticsMetadata (\ s a -> s{_csuAnalyticsMetadata = a})++-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+csuUserContextData :: Lens' ConfirmSignUp (Maybe UserContextDataType)+csuUserContextData = lens _csuUserContextData (\ s a -> s{_csuUserContextData = a})+ -- | A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. csuSecretHash :: Lens' ConfirmSignUp (Maybe Text)-csuSecretHash = lens _csuSecretHash (\ s a -> s{_csuSecretHash = a}) . mapping _Sensitive;+csuSecretHash = lens _csuSecretHash (\ s a -> s{_csuSecretHash = a}) . mapping _Sensitive  -- | The ID of the app client associated with the user pool. csuClientId :: Lens' ConfirmSignUp Text-csuClientId = lens _csuClientId (\ s a -> s{_csuClientId = a}) . _Sensitive;+csuClientId = lens _csuClientId (\ s a -> s{_csuClientId = a}) . _Sensitive  -- | The user name of the user whose registration you wish to confirm. csuUsername :: Lens' ConfirmSignUp Text-csuUsername = lens _csuUsername (\ s a -> s{_csuUsername = a}) . _Sensitive;+csuUsername = lens _csuUsername (\ s a -> s{_csuUsername = a}) . _Sensitive  -- | The confirmation code sent by a user's request to confirm registration. csuConfirmationCode :: Lens' ConfirmSignUp Text-csuConfirmationCode = lens _csuConfirmationCode (\ s a -> s{_csuConfirmationCode = a});+csuConfirmationCode = lens _csuConfirmationCode (\ s a -> s{_csuConfirmationCode = a})  instance AWSRequest ConfirmSignUp where         type Rs ConfirmSignUp = ConfirmSignUpResponse@@ -137,6 +155,8 @@               (catMaybes                  [("ForceAliasCreation" .=) <$>                     _csuForceAliasCreation,+                  ("AnalyticsMetadata" .=) <$> _csuAnalyticsMetadata,+                  ("UserContextData" .=) <$> _csuUserContextData,                   ("SecretHash" .=) <$> _csuSecretHash,                   Just ("ClientId" .= _csuClientId),                   Just ("Username" .= _csuUsername),@@ -172,6 +192,6 @@  -- | -- | The response status code. csursResponseStatus :: Lens' ConfirmSignUpResponse Int-csursResponseStatus = lens _csursResponseStatus (\ s a -> s{_csursResponseStatus = a});+csursResponseStatus = lens _csursResponseStatus (\ s a -> s{_csursResponseStatus = a})  instance NFData ConfirmSignUpResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -79,33 +79,33 @@     -> CreateGroup createGroup pGroupName_ pUserPoolId_ =   CreateGroup'-  { _cgPrecedence = Nothing-  , _cgDescription = Nothing-  , _cgRoleARN = Nothing-  , _cgGroupName = pGroupName_-  , _cgUserPoolId = pUserPoolId_-  }+    { _cgPrecedence = Nothing+    , _cgDescription = Nothing+    , _cgRoleARN = Nothing+    , _cgGroupName = pGroupName_+    , _cgUserPoolId = pUserPoolId_+    }   -- | A nonnegative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower @Precedence@ values take precedence over groups with higher or null @Precedence@ values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN will be used in the @cognito:roles@ and @cognito:preferred_role@ claims in the user's tokens. Two groups can have the same @Precedence@ value. If this happens, neither group takes precedence over the other. If two groups with the same @Precedence@ have the same role ARN, that role is used in the @cognito:preferred_role@ claim in tokens for users in each group. If the two groups have different role ARNs, the @cognito:preferred_role@ claim is not set in users' tokens. The default @Precedence@ value is null. cgPrecedence :: Lens' CreateGroup (Maybe Natural)-cgPrecedence = lens _cgPrecedence (\ s a -> s{_cgPrecedence = a}) . mapping _Nat;+cgPrecedence = lens _cgPrecedence (\ s a -> s{_cgPrecedence = a}) . mapping _Nat  -- | A string containing the description of the group. cgDescription :: Lens' CreateGroup (Maybe Text)-cgDescription = lens _cgDescription (\ s a -> s{_cgDescription = a});+cgDescription = lens _cgDescription (\ s a -> s{_cgDescription = a})  -- | The role ARN for the group. cgRoleARN :: Lens' CreateGroup (Maybe Text)-cgRoleARN = lens _cgRoleARN (\ s a -> s{_cgRoleARN = a});+cgRoleARN = lens _cgRoleARN (\ s a -> s{_cgRoleARN = a})  -- | The name of the group. Must be unique. cgGroupName :: Lens' CreateGroup Text-cgGroupName = lens _cgGroupName (\ s a -> s{_cgGroupName = a});+cgGroupName = lens _cgGroupName (\ s a -> s{_cgGroupName = a})  -- | The user pool ID for the user pool. cgUserPoolId :: Lens' CreateGroup Text-cgUserPoolId = lens _cgUserPoolId (\ s a -> s{_cgUserPoolId = a});+cgUserPoolId = lens _cgUserPoolId (\ s a -> s{_cgUserPoolId = a})  instance AWSRequest CreateGroup where         type Rs CreateGroup = CreateGroupResponse@@ -165,15 +165,15 @@     -> CreateGroupResponse createGroupResponse pResponseStatus_ =   CreateGroupResponse'-  {_cgrsGroup = Nothing, _cgrsResponseStatus = pResponseStatus_}+    {_cgrsGroup = Nothing, _cgrsResponseStatus = pResponseStatus_}   -- | The group object for the group. cgrsGroup :: Lens' CreateGroupResponse (Maybe GroupType)-cgrsGroup = lens _cgrsGroup (\ s a -> s{_cgrsGroup = a});+cgrsGroup = lens _cgrsGroup (\ s a -> s{_cgrsGroup = a})  -- | -- | The response status code. cgrsResponseStatus :: Lens' CreateGroupResponse Int-cgrsResponseStatus = lens _cgrsResponseStatus (\ s a -> s{_cgrsResponseStatus = a});+cgrsResponseStatus = lens _cgrsResponseStatus (\ s a -> s{_cgrsResponseStatus = a})  instance NFData CreateGroupResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateIdentityProvider--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -82,38 +82,38 @@     -> CreateIdentityProvider createIdentityProvider pUserPoolId_ pProviderName_ pProviderType_ =   CreateIdentityProvider'-  { _cipIdpIdentifiers = Nothing-  , _cipAttributeMapping = Nothing-  , _cipUserPoolId = pUserPoolId_-  , _cipProviderName = pProviderName_-  , _cipProviderType = pProviderType_-  , _cipProviderDetails = mempty-  }+    { _cipIdpIdentifiers = Nothing+    , _cipAttributeMapping = Nothing+    , _cipUserPoolId = pUserPoolId_+    , _cipProviderName = pProviderName_+    , _cipProviderType = pProviderType_+    , _cipProviderDetails = mempty+    }   -- | A list of identity provider identifiers. cipIdpIdentifiers :: Lens' CreateIdentityProvider [Text]-cipIdpIdentifiers = lens _cipIdpIdentifiers (\ s a -> s{_cipIdpIdentifiers = a}) . _Default . _Coerce;+cipIdpIdentifiers = lens _cipIdpIdentifiers (\ s a -> s{_cipIdpIdentifiers = a}) . _Default . _Coerce  -- | A mapping of identity provider attributes to standard and custom user pool attributes. cipAttributeMapping :: Lens' CreateIdentityProvider (HashMap Text Text)-cipAttributeMapping = lens _cipAttributeMapping (\ s a -> s{_cipAttributeMapping = a}) . _Default . _Map;+cipAttributeMapping = lens _cipAttributeMapping (\ s a -> s{_cipAttributeMapping = a}) . _Default . _Map  -- | The user pool ID. cipUserPoolId :: Lens' CreateIdentityProvider Text-cipUserPoolId = lens _cipUserPoolId (\ s a -> s{_cipUserPoolId = a});+cipUserPoolId = lens _cipUserPoolId (\ s a -> s{_cipUserPoolId = a})  -- | The identity provider name. cipProviderName :: Lens' CreateIdentityProvider Text-cipProviderName = lens _cipProviderName (\ s a -> s{_cipProviderName = a});+cipProviderName = lens _cipProviderName (\ s a -> s{_cipProviderName = a})  -- | The identity provider type. cipProviderType :: Lens' CreateIdentityProvider IdentityProviderTypeType-cipProviderType = lens _cipProviderType (\ s a -> s{_cipProviderType = a});+cipProviderType = lens _cipProviderType (\ s a -> s{_cipProviderType = a})  -- | The identity provider details, such as @MetadataURL@ and @MetadataFile@ . cipProviderDetails :: Lens' CreateIdentityProvider (HashMap Text Text)-cipProviderDetails = lens _cipProviderDetails (\ s a -> s{_cipProviderDetails = a}) . _Map;+cipProviderDetails = lens _cipProviderDetails (\ s a -> s{_cipProviderDetails = a}) . _Map  instance AWSRequest CreateIdentityProvider where         type Rs CreateIdentityProvider =@@ -176,17 +176,17 @@     -> CreateIdentityProviderResponse createIdentityProviderResponse pResponseStatus_ pIdentityProvider_ =   CreateIdentityProviderResponse'-  { _ciprsResponseStatus = pResponseStatus_-  , _ciprsIdentityProvider = pIdentityProvider_-  }+    { _ciprsResponseStatus = pResponseStatus_+    , _ciprsIdentityProvider = pIdentityProvider_+    }   -- | -- | The response status code. ciprsResponseStatus :: Lens' CreateIdentityProviderResponse Int-ciprsResponseStatus = lens _ciprsResponseStatus (\ s a -> s{_ciprsResponseStatus = a});+ciprsResponseStatus = lens _ciprsResponseStatus (\ s a -> s{_ciprsResponseStatus = a})  -- | The newly created identity provider object. ciprsIdentityProvider :: Lens' CreateIdentityProviderResponse IdentityProviderType-ciprsIdentityProvider = lens _ciprsIdentityProvider (\ s a -> s{_ciprsIdentityProvider = a});+ciprsIdentityProvider = lens _ciprsIdentityProvider (\ s a -> s{_ciprsIdentityProvider = a})  instance NFData CreateIdentityProviderResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateResourceServer--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -74,28 +74,28 @@     -> CreateResourceServer createResourceServer pUserPoolId_ pIdentifier_ pName_ =   CreateResourceServer'-  { _crsScopes = Nothing-  , _crsUserPoolId = pUserPoolId_-  , _crsIdentifier = pIdentifier_-  , _crsName = pName_-  }+    { _crsScopes = Nothing+    , _crsUserPoolId = pUserPoolId_+    , _crsIdentifier = pIdentifier_+    , _crsName = pName_+    }   -- | A list of scopes. Each scope is map, where the keys are @name@ and @description@ . crsScopes :: Lens' CreateResourceServer [ResourceServerScopeType]-crsScopes = lens _crsScopes (\ s a -> s{_crsScopes = a}) . _Default . _Coerce;+crsScopes = lens _crsScopes (\ s a -> s{_crsScopes = a}) . _Default . _Coerce  -- | The user pool ID for the user pool. crsUserPoolId :: Lens' CreateResourceServer Text-crsUserPoolId = lens _crsUserPoolId (\ s a -> s{_crsUserPoolId = a});+crsUserPoolId = lens _crsUserPoolId (\ s a -> s{_crsUserPoolId = a})  -- | A unique resource server identifier for the resource server. This could be an HTTPS endpoint where the resource server is located. For example, @https://my-weather-api.example.com@ . crsIdentifier :: Lens' CreateResourceServer Text-crsIdentifier = lens _crsIdentifier (\ s a -> s{_crsIdentifier = a});+crsIdentifier = lens _crsIdentifier (\ s a -> s{_crsIdentifier = a})  -- | A friendly name for the resource server. crsName :: Lens' CreateResourceServer Text-crsName = lens _crsName (\ s a -> s{_crsName = a});+crsName = lens _crsName (\ s a -> s{_crsName = a})  instance AWSRequest CreateResourceServer where         type Rs CreateResourceServer =@@ -156,17 +156,17 @@     -> CreateResourceServerResponse createResourceServerResponse pResponseStatus_ pResourceServer_ =   CreateResourceServerResponse'-  { _crsrsResponseStatus = pResponseStatus_-  , _crsrsResourceServer = pResourceServer_-  }+    { _crsrsResponseStatus = pResponseStatus_+    , _crsrsResourceServer = pResourceServer_+    }   -- | -- | The response status code. crsrsResponseStatus :: Lens' CreateResourceServerResponse Int-crsrsResponseStatus = lens _crsrsResponseStatus (\ s a -> s{_crsrsResponseStatus = a});+crsrsResponseStatus = lens _crsrsResponseStatus (\ s a -> s{_crsrsResponseStatus = a})  -- | The newly created resource server. crsrsResourceServer :: Lens' CreateResourceServerResponse ResourceServerType-crsrsResourceServer = lens _crsrsResourceServer (\ s a -> s{_crsrsResourceServer = a});+crsrsResourceServer = lens _crsrsResourceServer (\ s a -> s{_crsrsResourceServer = a})  instance NFData CreateResourceServerResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserImportJob--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -74,23 +74,23 @@     -> CreateUserImportJob createUserImportJob pJobName_ pUserPoolId_ pCloudWatchLogsRoleARN_ =   CreateUserImportJob'-  { _cuijJobName = pJobName_-  , _cuijUserPoolId = pUserPoolId_-  , _cuijCloudWatchLogsRoleARN = pCloudWatchLogsRoleARN_-  }+    { _cuijJobName = pJobName_+    , _cuijUserPoolId = pUserPoolId_+    , _cuijCloudWatchLogsRoleARN = pCloudWatchLogsRoleARN_+    }   -- | The job name for the user import job. cuijJobName :: Lens' CreateUserImportJob Text-cuijJobName = lens _cuijJobName (\ s a -> s{_cuijJobName = a});+cuijJobName = lens _cuijJobName (\ s a -> s{_cuijJobName = a})  -- | The user pool ID for the user pool that the users are being imported into. cuijUserPoolId :: Lens' CreateUserImportJob Text-cuijUserPoolId = lens _cuijUserPoolId (\ s a -> s{_cuijUserPoolId = a});+cuijUserPoolId = lens _cuijUserPoolId (\ s a -> s{_cuijUserPoolId = a})  -- | The role ARN for the Amazon CloudWatch Logging role for the user import job. cuijCloudWatchLogsRoleARN :: Lens' CreateUserImportJob Text-cuijCloudWatchLogsRoleARN = lens _cuijCloudWatchLogsRoleARN (\ s a -> s{_cuijCloudWatchLogsRoleARN = a});+cuijCloudWatchLogsRoleARN = lens _cuijCloudWatchLogsRoleARN (\ s a -> s{_cuijCloudWatchLogsRoleARN = a})  instance AWSRequest CreateUserImportJob where         type Rs CreateUserImportJob =@@ -155,15 +155,15 @@     -> CreateUserImportJobResponse createUserImportJobResponse pResponseStatus_ =   CreateUserImportJobResponse'-  {_cuijrsUserImportJob = Nothing, _cuijrsResponseStatus = pResponseStatus_}+    {_cuijrsUserImportJob = Nothing, _cuijrsResponseStatus = pResponseStatus_}   -- | The job object that represents the user import job. cuijrsUserImportJob :: Lens' CreateUserImportJobResponse (Maybe UserImportJobType)-cuijrsUserImportJob = lens _cuijrsUserImportJob (\ s a -> s{_cuijrsUserImportJob = a});+cuijrsUserImportJob = lens _cuijrsUserImportJob (\ s a -> s{_cuijrsUserImportJob = a})  -- | -- | The response status code. cuijrsResponseStatus :: Lens' CreateUserImportJobResponse Int-cuijrsResponseStatus = lens _cuijrsResponseStatus (\ s a -> s{_cuijrsResponseStatus = a});+cuijrsResponseStatus = lens _cuijrsResponseStatus (\ s a -> s{_cuijrsResponseStatus = a})  instance NFData CreateUserImportJobResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPool--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -31,6 +31,7 @@     , cupVerificationMessageTemplate     , cupEmailVerificationMessage     , cupSmsAuthenticationMessage+    , cupUserPoolAddOns     , cupEmailVerificationSubject     , cupUsernameAttributes     , cupAliasAttributes@@ -71,6 +72,7 @@   , _cupVerificationMessageTemplate :: !(Maybe VerificationMessageTemplateType)   , _cupEmailVerificationMessage    :: !(Maybe Text)   , _cupSmsAuthenticationMessage    :: !(Maybe Text)+  , _cupUserPoolAddOns              :: !(Maybe UserPoolAddOnsType)   , _cupEmailVerificationSubject    :: !(Maybe Text)   , _cupUsernameAttributes          :: !(Maybe [UsernameAttributeType])   , _cupAliasAttributes             :: !(Maybe [AliasAttributeType])@@ -100,6 +102,8 @@ -- -- * 'cupSmsAuthenticationMessage' - A string representing the SMS authentication message. --+-- * 'cupUserPoolAddOns' - Used to enable advanced security risk detection. Set the key @AdvancedSecurityMode@ to the value "AUDIT".+-- -- * 'cupEmailVerificationSubject' - A string representing the email verification subject. -- -- * 'cupUsernameAttributes' - Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up.@@ -132,98 +136,103 @@     -> CreateUserPool createUserPool pPoolName_ =   CreateUserPool'-  { _cupUserPoolTags = Nothing-  , _cupVerificationMessageTemplate = Nothing-  , _cupEmailVerificationMessage = Nothing-  , _cupSmsAuthenticationMessage = Nothing-  , _cupEmailVerificationSubject = Nothing-  , _cupUsernameAttributes = Nothing-  , _cupAliasAttributes = Nothing-  , _cupSchema = Nothing-  , _cupEmailConfiguration = Nothing-  , _cupSmsVerificationMessage = Nothing-  , _cupMFAConfiguration = Nothing-  , _cupLambdaConfig = Nothing-  , _cupSmsConfiguration = Nothing-  , _cupAdminCreateUserConfig = Nothing-  , _cupDeviceConfiguration = Nothing-  , _cupAutoVerifiedAttributes = Nothing-  , _cupPolicies = Nothing-  , _cupPoolName = pPoolName_-  }+    { _cupUserPoolTags = Nothing+    , _cupVerificationMessageTemplate = Nothing+    , _cupEmailVerificationMessage = Nothing+    , _cupSmsAuthenticationMessage = Nothing+    , _cupUserPoolAddOns = Nothing+    , _cupEmailVerificationSubject = Nothing+    , _cupUsernameAttributes = Nothing+    , _cupAliasAttributes = Nothing+    , _cupSchema = Nothing+    , _cupEmailConfiguration = Nothing+    , _cupSmsVerificationMessage = Nothing+    , _cupMFAConfiguration = Nothing+    , _cupLambdaConfig = Nothing+    , _cupSmsConfiguration = Nothing+    , _cupAdminCreateUserConfig = Nothing+    , _cupDeviceConfiguration = Nothing+    , _cupAutoVerifiedAttributes = Nothing+    , _cupPolicies = Nothing+    , _cupPoolName = pPoolName_+    }   -- | The cost allocation tags for the user pool. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-cost-allocation-tagging.html Adding Cost Allocation Tags to Your User Pool> cupUserPoolTags :: Lens' CreateUserPool (HashMap Text Text)-cupUserPoolTags = lens _cupUserPoolTags (\ s a -> s{_cupUserPoolTags = a}) . _Default . _Map;+cupUserPoolTags = lens _cupUserPoolTags (\ s a -> s{_cupUserPoolTags = a}) . _Default . _Map  -- | The template for the verification message that the user sees when the app requests permission to access the user's information. cupVerificationMessageTemplate :: Lens' CreateUserPool (Maybe VerificationMessageTemplateType)-cupVerificationMessageTemplate = lens _cupVerificationMessageTemplate (\ s a -> s{_cupVerificationMessageTemplate = a});+cupVerificationMessageTemplate = lens _cupVerificationMessageTemplate (\ s a -> s{_cupVerificationMessageTemplate = a})  -- | A string representing the email verification message. cupEmailVerificationMessage :: Lens' CreateUserPool (Maybe Text)-cupEmailVerificationMessage = lens _cupEmailVerificationMessage (\ s a -> s{_cupEmailVerificationMessage = a});+cupEmailVerificationMessage = lens _cupEmailVerificationMessage (\ s a -> s{_cupEmailVerificationMessage = a})  -- | A string representing the SMS authentication message. cupSmsAuthenticationMessage :: Lens' CreateUserPool (Maybe Text)-cupSmsAuthenticationMessage = lens _cupSmsAuthenticationMessage (\ s a -> s{_cupSmsAuthenticationMessage = a});+cupSmsAuthenticationMessage = lens _cupSmsAuthenticationMessage (\ s a -> s{_cupSmsAuthenticationMessage = a}) +-- | Used to enable advanced security risk detection. Set the key @AdvancedSecurityMode@ to the value "AUDIT".+cupUserPoolAddOns :: Lens' CreateUserPool (Maybe UserPoolAddOnsType)+cupUserPoolAddOns = lens _cupUserPoolAddOns (\ s a -> s{_cupUserPoolAddOns = a})+ -- | A string representing the email verification subject. cupEmailVerificationSubject :: Lens' CreateUserPool (Maybe Text)-cupEmailVerificationSubject = lens _cupEmailVerificationSubject (\ s a -> s{_cupEmailVerificationSubject = a});+cupEmailVerificationSubject = lens _cupEmailVerificationSubject (\ s a -> s{_cupEmailVerificationSubject = a})  -- | Specifies whether email addresses or phone numbers can be specified as usernames when a user signs up. cupUsernameAttributes :: Lens' CreateUserPool [UsernameAttributeType]-cupUsernameAttributes = lens _cupUsernameAttributes (\ s a -> s{_cupUsernameAttributes = a}) . _Default . _Coerce;+cupUsernameAttributes = lens _cupUsernameAttributes (\ s a -> s{_cupUsernameAttributes = a}) . _Default . _Coerce  -- | Attributes supported as an alias for this user pool. Possible values: __phone_number__ , __email__ , or __preferred_username__ . cupAliasAttributes :: Lens' CreateUserPool [AliasAttributeType]-cupAliasAttributes = lens _cupAliasAttributes (\ s a -> s{_cupAliasAttributes = a}) . _Default . _Coerce;+cupAliasAttributes = lens _cupAliasAttributes (\ s a -> s{_cupAliasAttributes = a}) . _Default . _Coerce  -- | An array of schema attributes for the new user pool. These attributes can be standard or custom attributes. cupSchema :: Lens' CreateUserPool (Maybe (NonEmpty SchemaAttributeType))-cupSchema = lens _cupSchema (\ s a -> s{_cupSchema = a}) . mapping _List1;+cupSchema = lens _cupSchema (\ s a -> s{_cupSchema = a}) . mapping _List1  -- | The email configuration. cupEmailConfiguration :: Lens' CreateUserPool (Maybe EmailConfigurationType)-cupEmailConfiguration = lens _cupEmailConfiguration (\ s a -> s{_cupEmailConfiguration = a});+cupEmailConfiguration = lens _cupEmailConfiguration (\ s a -> s{_cupEmailConfiguration = a})  -- | A string representing the SMS verification message. cupSmsVerificationMessage :: Lens' CreateUserPool (Maybe Text)-cupSmsVerificationMessage = lens _cupSmsVerificationMessage (\ s a -> s{_cupSmsVerificationMessage = a});+cupSmsVerificationMessage = lens _cupSmsVerificationMessage (\ s a -> s{_cupSmsVerificationMessage = a})  -- | Specifies MFA configuration details. cupMFAConfiguration :: Lens' CreateUserPool (Maybe UserPoolMFAType)-cupMFAConfiguration = lens _cupMFAConfiguration (\ s a -> s{_cupMFAConfiguration = a});+cupMFAConfiguration = lens _cupMFAConfiguration (\ s a -> s{_cupMFAConfiguration = a})  -- | The Lambda trigger configuration information for the new user pool. cupLambdaConfig :: Lens' CreateUserPool (Maybe LambdaConfigType)-cupLambdaConfig = lens _cupLambdaConfig (\ s a -> s{_cupLambdaConfig = a});+cupLambdaConfig = lens _cupLambdaConfig (\ s a -> s{_cupLambdaConfig = a})  -- | The SMS configuration. cupSmsConfiguration :: Lens' CreateUserPool (Maybe SmsConfigurationType)-cupSmsConfiguration = lens _cupSmsConfiguration (\ s a -> s{_cupSmsConfiguration = a});+cupSmsConfiguration = lens _cupSmsConfiguration (\ s a -> s{_cupSmsConfiguration = a})  -- | The configuration for @AdminCreateUser@ requests. cupAdminCreateUserConfig :: Lens' CreateUserPool (Maybe AdminCreateUserConfigType)-cupAdminCreateUserConfig = lens _cupAdminCreateUserConfig (\ s a -> s{_cupAdminCreateUserConfig = a});+cupAdminCreateUserConfig = lens _cupAdminCreateUserConfig (\ s a -> s{_cupAdminCreateUserConfig = a})  -- | The device configuration. cupDeviceConfiguration :: Lens' CreateUserPool (Maybe DeviceConfigurationType)-cupDeviceConfiguration = lens _cupDeviceConfiguration (\ s a -> s{_cupDeviceConfiguration = a});+cupDeviceConfiguration = lens _cupDeviceConfiguration (\ s a -> s{_cupDeviceConfiguration = a})  -- | The attributes to be auto-verified. Possible values: __email__ , __phone_number__ . cupAutoVerifiedAttributes :: Lens' CreateUserPool [VerifiedAttributeType]-cupAutoVerifiedAttributes = lens _cupAutoVerifiedAttributes (\ s a -> s{_cupAutoVerifiedAttributes = a}) . _Default . _Coerce;+cupAutoVerifiedAttributes = lens _cupAutoVerifiedAttributes (\ s a -> s{_cupAutoVerifiedAttributes = a}) . _Default . _Coerce  -- | The policies associated with the new user pool. cupPolicies :: Lens' CreateUserPool (Maybe UserPoolPolicyType)-cupPolicies = lens _cupPolicies (\ s a -> s{_cupPolicies = a});+cupPolicies = lens _cupPolicies (\ s a -> s{_cupPolicies = a})  -- | A string used to name the user pool. cupPoolName :: Lens' CreateUserPool Text-cupPoolName = lens _cupPoolName (\ s a -> s{_cupPoolName = a});+cupPoolName = lens _cupPoolName (\ s a -> s{_cupPoolName = a})  instance AWSRequest CreateUserPool where         type Rs CreateUserPool = CreateUserPoolResponse@@ -259,6 +268,7 @@                     _cupEmailVerificationMessage,                   ("SmsAuthenticationMessage" .=) <$>                     _cupSmsAuthenticationMessage,+                  ("UserPoolAddOns" .=) <$> _cupUserPoolAddOns,                   ("EmailVerificationSubject" .=) <$>                     _cupEmailVerificationSubject,                   ("UsernameAttributes" .=) <$> _cupUsernameAttributes,@@ -308,15 +318,15 @@     -> CreateUserPoolResponse createUserPoolResponse pResponseStatus_ =   CreateUserPoolResponse'-  {_cuprsUserPool = Nothing, _cuprsResponseStatus = pResponseStatus_}+    {_cuprsUserPool = Nothing, _cuprsResponseStatus = pResponseStatus_}   -- | A container for the user pool details. cuprsUserPool :: Lens' CreateUserPoolResponse (Maybe UserPoolType)-cuprsUserPool = lens _cuprsUserPool (\ s a -> s{_cuprsUserPool = a});+cuprsUserPool = lens _cuprsUserPool (\ s a -> s{_cuprsUserPool = a})  -- | -- | The response status code. cuprsResponseStatus :: Lens' CreateUserPoolResponse Int-cuprsResponseStatus = lens _cuprsResponseStatus (\ s a -> s{_cuprsResponseStatus = a});+cuprsResponseStatus = lens _cuprsResponseStatus (\ s a -> s{_cuprsResponseStatus = a})  instance NFData CreateUserPoolResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPoolClient--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -38,6 +38,7 @@     , cupcReadAttributes     , cupcAllowedOAuthScopes     , cupcAllowedOAuthFlows+    , cupcAnalyticsConfiguration     , cupcCallbackURLs     , cupcUserPoolId     , cupcClientName@@ -74,6 +75,7 @@   , _cupcReadAttributes                  :: !(Maybe [Text])   , _cupcAllowedOAuthScopes              :: !(Maybe [Text])   , _cupcAllowedOAuthFlows               :: !(Maybe [OAuthFlowType])+  , _cupcAnalyticsConfiguration          :: !(Maybe AnalyticsConfigurationType)   , _cupcCallbackURLs                    :: !(Maybe [Text])   , _cupcUserPoolId                      :: !Text   , _cupcClientName                      :: !Text@@ -106,6 +108,8 @@ -- -- * 'cupcAllowedOAuthFlows' - Set to @code@ to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint. Set to @token@ to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly. --+-- * 'cupcAnalyticsConfiguration' - The Amazon Pinpoint analytics configuration for collecting metrics for this user pool.+-- -- * 'cupcCallbackURLs' - A list of allowed callback URLs for the identity providers. -- -- * 'cupcUserPoolId' - The user pool ID for the user pool where you want to create a user pool client.@@ -117,78 +121,83 @@     -> CreateUserPoolClient createUserPoolClient pUserPoolId_ pClientName_ =   CreateUserPoolClient'-  { _cupcRefreshTokenValidity = Nothing-  , _cupcExplicitAuthFlows = Nothing-  , _cupcSupportedIdentityProviders = Nothing-  , _cupcLogoutURLs = Nothing-  , _cupcAllowedOAuthFlowsUserPoolClient = Nothing-  , _cupcGenerateSecret = Nothing-  , _cupcDefaultRedirectURI = Nothing-  , _cupcWriteAttributes = Nothing-  , _cupcReadAttributes = Nothing-  , _cupcAllowedOAuthScopes = Nothing-  , _cupcAllowedOAuthFlows = Nothing-  , _cupcCallbackURLs = Nothing-  , _cupcUserPoolId = pUserPoolId_-  , _cupcClientName = pClientName_-  }+    { _cupcRefreshTokenValidity = Nothing+    , _cupcExplicitAuthFlows = Nothing+    , _cupcSupportedIdentityProviders = Nothing+    , _cupcLogoutURLs = Nothing+    , _cupcAllowedOAuthFlowsUserPoolClient = Nothing+    , _cupcGenerateSecret = Nothing+    , _cupcDefaultRedirectURI = Nothing+    , _cupcWriteAttributes = Nothing+    , _cupcReadAttributes = Nothing+    , _cupcAllowedOAuthScopes = Nothing+    , _cupcAllowedOAuthFlows = Nothing+    , _cupcAnalyticsConfiguration = Nothing+    , _cupcCallbackURLs = Nothing+    , _cupcUserPoolId = pUserPoolId_+    , _cupcClientName = pClientName_+    }   -- | The time limit, in days, after which the refresh token is no longer valid and cannot be used. cupcRefreshTokenValidity :: Lens' CreateUserPoolClient (Maybe Natural)-cupcRefreshTokenValidity = lens _cupcRefreshTokenValidity (\ s a -> s{_cupcRefreshTokenValidity = a}) . mapping _Nat;+cupcRefreshTokenValidity = lens _cupcRefreshTokenValidity (\ s a -> s{_cupcRefreshTokenValidity = a}) . mapping _Nat  -- | The explicit authentication flows. cupcExplicitAuthFlows :: Lens' CreateUserPoolClient [ExplicitAuthFlowsType]-cupcExplicitAuthFlows = lens _cupcExplicitAuthFlows (\ s a -> s{_cupcExplicitAuthFlows = a}) . _Default . _Coerce;+cupcExplicitAuthFlows = lens _cupcExplicitAuthFlows (\ s a -> s{_cupcExplicitAuthFlows = a}) . _Default . _Coerce  -- | A list of provider names for the identity providers that are supported on this client. cupcSupportedIdentityProviders :: Lens' CreateUserPoolClient [Text]-cupcSupportedIdentityProviders = lens _cupcSupportedIdentityProviders (\ s a -> s{_cupcSupportedIdentityProviders = a}) . _Default . _Coerce;+cupcSupportedIdentityProviders = lens _cupcSupportedIdentityProviders (\ s a -> s{_cupcSupportedIdentityProviders = a}) . _Default . _Coerce  -- | A list of allowed logout URLs for the identity providers. cupcLogoutURLs :: Lens' CreateUserPoolClient [Text]-cupcLogoutURLs = lens _cupcLogoutURLs (\ s a -> s{_cupcLogoutURLs = a}) . _Default . _Coerce;+cupcLogoutURLs = lens _cupcLogoutURLs (\ s a -> s{_cupcLogoutURLs = a}) . _Default . _Coerce  -- | Set to @True@ if the client is allowed to follow the OAuth protocol when interacting with Cognito user pools. cupcAllowedOAuthFlowsUserPoolClient :: Lens' CreateUserPoolClient (Maybe Bool)-cupcAllowedOAuthFlowsUserPoolClient = lens _cupcAllowedOAuthFlowsUserPoolClient (\ s a -> s{_cupcAllowedOAuthFlowsUserPoolClient = a});+cupcAllowedOAuthFlowsUserPoolClient = lens _cupcAllowedOAuthFlowsUserPoolClient (\ s a -> s{_cupcAllowedOAuthFlowsUserPoolClient = a})  -- | Boolean to specify whether you want to generate a secret for the user pool client being created. cupcGenerateSecret :: Lens' CreateUserPoolClient (Maybe Bool)-cupcGenerateSecret = lens _cupcGenerateSecret (\ s a -> s{_cupcGenerateSecret = a});+cupcGenerateSecret = lens _cupcGenerateSecret (\ s a -> s{_cupcGenerateSecret = a})  -- | The default redirect URI. Must be in the @CallbackURLs@ list. cupcDefaultRedirectURI :: Lens' CreateUserPoolClient (Maybe Text)-cupcDefaultRedirectURI = lens _cupcDefaultRedirectURI (\ s a -> s{_cupcDefaultRedirectURI = a});+cupcDefaultRedirectURI = lens _cupcDefaultRedirectURI (\ s a -> s{_cupcDefaultRedirectURI = a})  -- | The write attributes. cupcWriteAttributes :: Lens' CreateUserPoolClient [Text]-cupcWriteAttributes = lens _cupcWriteAttributes (\ s a -> s{_cupcWriteAttributes = a}) . _Default . _Coerce;+cupcWriteAttributes = lens _cupcWriteAttributes (\ s a -> s{_cupcWriteAttributes = a}) . _Default . _Coerce  -- | The read attributes. cupcReadAttributes :: Lens' CreateUserPoolClient [Text]-cupcReadAttributes = lens _cupcReadAttributes (\ s a -> s{_cupcReadAttributes = a}) . _Default . _Coerce;+cupcReadAttributes = lens _cupcReadAttributes (\ s a -> s{_cupcReadAttributes = a}) . _Default . _Coerce  -- | A list of allowed @OAuth@ scopes. Currently supported values are @"phone"@ , @"email"@ , @"openid"@ , and @"Cognito"@ . cupcAllowedOAuthScopes :: Lens' CreateUserPoolClient [Text]-cupcAllowedOAuthScopes = lens _cupcAllowedOAuthScopes (\ s a -> s{_cupcAllowedOAuthScopes = a}) . _Default . _Coerce;+cupcAllowedOAuthScopes = lens _cupcAllowedOAuthScopes (\ s a -> s{_cupcAllowedOAuthScopes = a}) . _Default . _Coerce  -- | Set to @code@ to initiate a code grant flow, which provides an authorization code as the response. This code can be exchanged for access tokens with the token endpoint. Set to @token@ to specify that the client should get the access token (and, optionally, ID token, based on scopes) directly. cupcAllowedOAuthFlows :: Lens' CreateUserPoolClient [OAuthFlowType]-cupcAllowedOAuthFlows = lens _cupcAllowedOAuthFlows (\ s a -> s{_cupcAllowedOAuthFlows = a}) . _Default . _Coerce;+cupcAllowedOAuthFlows = lens _cupcAllowedOAuthFlows (\ s a -> s{_cupcAllowedOAuthFlows = a}) . _Default . _Coerce +-- | The Amazon Pinpoint analytics configuration for collecting metrics for this user pool.+cupcAnalyticsConfiguration :: Lens' CreateUserPoolClient (Maybe AnalyticsConfigurationType)+cupcAnalyticsConfiguration = lens _cupcAnalyticsConfiguration (\ s a -> s{_cupcAnalyticsConfiguration = a})+ -- | A list of allowed callback URLs for the identity providers. cupcCallbackURLs :: Lens' CreateUserPoolClient [Text]-cupcCallbackURLs = lens _cupcCallbackURLs (\ s a -> s{_cupcCallbackURLs = a}) . _Default . _Coerce;+cupcCallbackURLs = lens _cupcCallbackURLs (\ s a -> s{_cupcCallbackURLs = a}) . _Default . _Coerce  -- | The user pool ID for the user pool where you want to create a user pool client. cupcUserPoolId :: Lens' CreateUserPoolClient Text-cupcUserPoolId = lens _cupcUserPoolId (\ s a -> s{_cupcUserPoolId = a});+cupcUserPoolId = lens _cupcUserPoolId (\ s a -> s{_cupcUserPoolId = a})  -- | The client name for the user pool client you would like to create. cupcClientName :: Lens' CreateUserPoolClient Text-cupcClientName = lens _cupcClientName (\ s a -> s{_cupcClientName = a});+cupcClientName = lens _cupcClientName (\ s a -> s{_cupcClientName = a})  instance AWSRequest CreateUserPoolClient where         type Rs CreateUserPoolClient =@@ -234,6 +243,8 @@                   ("AllowedOAuthScopes" .=) <$>                     _cupcAllowedOAuthScopes,                   ("AllowedOAuthFlows" .=) <$> _cupcAllowedOAuthFlows,+                  ("AnalyticsConfiguration" .=) <$>+                    _cupcAnalyticsConfiguration,                   ("CallbackURLs" .=) <$> _cupcCallbackURLs,                   Just ("UserPoolId" .= _cupcUserPoolId),                   Just ("ClientName" .= _cupcClientName)])@@ -267,15 +278,15 @@     -> CreateUserPoolClientResponse createUserPoolClientResponse pResponseStatus_ =   CreateUserPoolClientResponse'-  {_cupcrsUserPoolClient = Nothing, _cupcrsResponseStatus = pResponseStatus_}+    {_cupcrsUserPoolClient = Nothing, _cupcrsResponseStatus = pResponseStatus_}   -- | The user pool client that was just created. cupcrsUserPoolClient :: Lens' CreateUserPoolClientResponse (Maybe UserPoolClientType)-cupcrsUserPoolClient = lens _cupcrsUserPoolClient (\ s a -> s{_cupcrsUserPoolClient = a});+cupcrsUserPoolClient = lens _cupcrsUserPoolClient (\ s a -> s{_cupcrsUserPoolClient = a})  -- | -- | The response status code. cupcrsResponseStatus :: Lens' CreateUserPoolClientResponse Int-cupcrsResponseStatus = lens _cupcrsResponseStatus (\ s a -> s{_cupcrsResponseStatus = a});+cupcrsResponseStatus = lens _cupcrsResponseStatus (\ s a -> s{_cupcrsResponseStatus = a})  instance NFData CreateUserPoolClientResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.CreateUserPoolDomain--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,11 +68,11 @@  -- | The domain string. cupdDomain :: Lens' CreateUserPoolDomain Text-cupdDomain = lens _cupdDomain (\ s a -> s{_cupdDomain = a});+cupdDomain = lens _cupdDomain (\ s a -> s{_cupdDomain = a})  -- | The user pool ID. cupdUserPoolId :: Lens' CreateUserPoolDomain Text-cupdUserPoolId = lens _cupdUserPoolId (\ s a -> s{_cupdUserPoolId = a});+cupdUserPoolId = lens _cupdUserPoolId (\ s a -> s{_cupdUserPoolId = a})  instance AWSRequest CreateUserPoolDomain where         type Rs CreateUserPoolDomain =@@ -131,6 +131,6 @@  -- | -- | The response status code. cupdrsResponseStatus :: Lens' CreateUserPoolDomainResponse Int-cupdrsResponseStatus = lens _cupdrsResponseStatus (\ s a -> s{_cupdrsResponseStatus = a});+cupdrsResponseStatus = lens _cupdrsResponseStatus (\ s a -> s{_cupdrsResponseStatus = a})  instance NFData CreateUserPoolDomainResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,11 +68,11 @@  -- | The name of the group. dgGroupName :: Lens' DeleteGroup Text-dgGroupName = lens _dgGroupName (\ s a -> s{_dgGroupName = a});+dgGroupName = lens _dgGroupName (\ s a -> s{_dgGroupName = a})  -- | The user pool ID for the user pool. dgUserPoolId :: Lens' DeleteGroup Text-dgUserPoolId = lens _dgUserPoolId (\ s a -> s{_dgUserPoolId = a});+dgUserPoolId = lens _dgUserPoolId (\ s a -> s{_dgUserPoolId = a})  instance AWSRequest DeleteGroup where         type Rs DeleteGroup = DeleteGroupResponse

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteIdentityProvider--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -62,16 +62,16 @@     -> DeleteIdentityProvider deleteIdentityProvider pUserPoolId_ pProviderName_ =   DeleteIdentityProvider'-  {_delUserPoolId = pUserPoolId_, _delProviderName = pProviderName_}+    {_delUserPoolId = pUserPoolId_, _delProviderName = pProviderName_}   -- | The user pool ID. delUserPoolId :: Lens' DeleteIdentityProvider Text-delUserPoolId = lens _delUserPoolId (\ s a -> s{_delUserPoolId = a});+delUserPoolId = lens _delUserPoolId (\ s a -> s{_delUserPoolId = a})  -- | The identity provider name. delProviderName :: Lens' DeleteIdentityProvider Text-delProviderName = lens _delProviderName (\ s a -> s{_delProviderName = a});+delProviderName = lens _delProviderName (\ s a -> s{_delProviderName = a})  instance AWSRequest DeleteIdentityProvider where         type Rs DeleteIdentityProvider =

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteResourceServer--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -62,16 +62,16 @@     -> DeleteResourceServer deleteResourceServer pUserPoolId_ pIdentifier_ =   DeleteResourceServer'-  {_drsUserPoolId = pUserPoolId_, _drsIdentifier = pIdentifier_}+    {_drsUserPoolId = pUserPoolId_, _drsIdentifier = pIdentifier_}   -- | The user pool ID for the user pool that hosts the resource server. drsUserPoolId :: Lens' DeleteResourceServer Text-drsUserPoolId = lens _drsUserPoolId (\ s a -> s{_drsUserPoolId = a});+drsUserPoolId = lens _drsUserPoolId (\ s a -> s{_drsUserPoolId = a})  -- | The identifier for the resource server. drsIdentifier :: Lens' DeleteResourceServer Text-drsIdentifier = lens _drsIdentifier (\ s a -> s{_drsIdentifier = a});+drsIdentifier = lens _drsIdentifier (\ s a -> s{_drsIdentifier = a})  instance AWSRequest DeleteResourceServer where         type Rs DeleteResourceServer =

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -65,7 +65,7 @@  -- | The access token from a request to delete a user. duAccessToken :: Lens' DeleteUser Text-duAccessToken = lens _duAccessToken (\ s a -> s{_duAccessToken = a}) . _Sensitive;+duAccessToken = lens _duAccessToken (\ s a -> s{_duAccessToken = a}) . _Sensitive  instance AWSRequest DeleteUser where         type Rs DeleteUser = DeleteUserResponse

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteUserAttributes--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -67,18 +67,18 @@     -> DeleteUserAttributes deleteUserAttributes pAccessToken_ =   DeleteUserAttributes'-  { _duaUserAttributeNames = mempty-  , _duaAccessToken = _Sensitive # pAccessToken_-  }+    { _duaUserAttributeNames = mempty+    , _duaAccessToken = _Sensitive # pAccessToken_+    }   -- | An array of strings representing the user attribute names you wish to delete. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. duaUserAttributeNames :: Lens' DeleteUserAttributes [Text]-duaUserAttributeNames = lens _duaUserAttributeNames (\ s a -> s{_duaUserAttributeNames = a}) . _Coerce;+duaUserAttributeNames = lens _duaUserAttributeNames (\ s a -> s{_duaUserAttributeNames = a}) . _Coerce  -- | The access token used in the request to delete user attributes. duaAccessToken :: Lens' DeleteUserAttributes Text-duaAccessToken = lens _duaAccessToken (\ s a -> s{_duaAccessToken = a}) . _Sensitive;+duaAccessToken = lens _duaAccessToken (\ s a -> s{_duaAccessToken = a}) . _Sensitive  instance AWSRequest DeleteUserAttributes where         type Rs DeleteUserAttributes =@@ -142,6 +142,6 @@  -- | -- | The response status code. duarsResponseStatus :: Lens' DeleteUserAttributesResponse Int-duarsResponseStatus = lens _duarsResponseStatus (\ s a -> s{_duarsResponseStatus = a});+duarsResponseStatus = lens _duarsResponseStatus (\ s a -> s{_duarsResponseStatus = a})  instance NFData DeleteUserAttributesResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteUserPool--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -64,7 +64,7 @@  -- | The user pool ID for the user pool you want to delete. dupUserPoolId :: Lens' DeleteUserPool Text-dupUserPoolId = lens _dupUserPoolId (\ s a -> s{_dupUserPoolId = a});+dupUserPoolId = lens _dupUserPoolId (\ s a -> s{_dupUserPoolId = a})  instance AWSRequest DeleteUserPool where         type Rs DeleteUserPool = DeleteUserPoolResponse

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteUserPoolClient--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -66,16 +66,16 @@     -> DeleteUserPoolClient deleteUserPoolClient pUserPoolId_ pClientId_ =   DeleteUserPoolClient'-  {_dupcUserPoolId = pUserPoolId_, _dupcClientId = _Sensitive # pClientId_}+    {_dupcUserPoolId = pUserPoolId_, _dupcClientId = _Sensitive # pClientId_}   -- | The user pool ID for the user pool where you want to delete the client. dupcUserPoolId :: Lens' DeleteUserPoolClient Text-dupcUserPoolId = lens _dupcUserPoolId (\ s a -> s{_dupcUserPoolId = a});+dupcUserPoolId = lens _dupcUserPoolId (\ s a -> s{_dupcUserPoolId = a})  -- | The app client ID of the app associated with the user pool. dupcClientId :: Lens' DeleteUserPoolClient Text-dupcClientId = lens _dupcClientId (\ s a -> s{_dupcClientId = a}) . _Sensitive;+dupcClientId = lens _dupcClientId (\ s a -> s{_dupcClientId = a}) . _Sensitive  instance AWSRequest DeleteUserPoolClient where         type Rs DeleteUserPoolClient =

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DeleteUserPoolDomain--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,11 +68,11 @@  -- | The domain string. dupdDomain :: Lens' DeleteUserPoolDomain Text-dupdDomain = lens _dupdDomain (\ s a -> s{_dupdDomain = a});+dupdDomain = lens _dupdDomain (\ s a -> s{_dupdDomain = a})  -- | The user pool ID. dupdUserPoolId :: Lens' DeleteUserPoolDomain Text-dupdUserPoolId = lens _dupdUserPoolId (\ s a -> s{_dupdUserPoolId = a});+dupdUserPoolId = lens _dupdUserPoolId (\ s a -> s{_dupdUserPoolId = a})  instance AWSRequest DeleteUserPoolDomain where         type Rs DeleteUserPoolDomain =@@ -131,6 +131,6 @@  -- | -- | The response status code. dupdrsResponseStatus :: Lens' DeleteUserPoolDomainResponse Int-dupdrsResponseStatus = lens _dupdrsResponseStatus (\ s a -> s{_dupdrsResponseStatus = a});+dupdrsResponseStatus = lens _dupdrsResponseStatus (\ s a -> s{_dupdrsResponseStatus = a})  instance NFData DeleteUserPoolDomainResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeIdentityProvider--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -65,16 +65,16 @@     -> DescribeIdentityProvider describeIdentityProvider pUserPoolId_ pProviderName_ =   DescribeIdentityProvider'-  {_dipUserPoolId = pUserPoolId_, _dipProviderName = pProviderName_}+    {_dipUserPoolId = pUserPoolId_, _dipProviderName = pProviderName_}   -- | The user pool ID. dipUserPoolId :: Lens' DescribeIdentityProvider Text-dipUserPoolId = lens _dipUserPoolId (\ s a -> s{_dipUserPoolId = a});+dipUserPoolId = lens _dipUserPoolId (\ s a -> s{_dipUserPoolId = a})  -- | The identity provider name. dipProviderName :: Lens' DescribeIdentityProvider Text-dipProviderName = lens _dipProviderName (\ s a -> s{_dipProviderName = a});+dipProviderName = lens _dipProviderName (\ s a -> s{_dipProviderName = a})  instance AWSRequest DescribeIdentityProvider where         type Rs DescribeIdentityProvider =@@ -133,18 +133,18 @@     -> DescribeIdentityProviderResponse describeIdentityProviderResponse pResponseStatus_ pIdentityProvider_ =   DescribeIdentityProviderResponse'-  { _diprsResponseStatus = pResponseStatus_-  , _diprsIdentityProvider = pIdentityProvider_-  }+    { _diprsResponseStatus = pResponseStatus_+    , _diprsIdentityProvider = pIdentityProvider_+    }   -- | -- | The response status code. diprsResponseStatus :: Lens' DescribeIdentityProviderResponse Int-diprsResponseStatus = lens _diprsResponseStatus (\ s a -> s{_diprsResponseStatus = a});+diprsResponseStatus = lens _diprsResponseStatus (\ s a -> s{_diprsResponseStatus = a})  -- | The identity provider that was deleted. diprsIdentityProvider :: Lens' DescribeIdentityProviderResponse IdentityProviderType-diprsIdentityProvider = lens _diprsIdentityProvider (\ s a -> s{_diprsIdentityProvider = a});+diprsIdentityProvider = lens _diprsIdentityProvider (\ s a -> s{_diprsIdentityProvider = a})  instance NFData DescribeIdentityProviderResponse          where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeResourceServer--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -65,16 +65,16 @@     -> DescribeResourceServer describeResourceServer pUserPoolId_ pIdentifier_ =   DescribeResourceServer'-  {_desUserPoolId = pUserPoolId_, _desIdentifier = pIdentifier_}+    {_desUserPoolId = pUserPoolId_, _desIdentifier = pIdentifier_}   -- | The user pool ID for the user pool that hosts the resource server. desUserPoolId :: Lens' DescribeResourceServer Text-desUserPoolId = lens _desUserPoolId (\ s a -> s{_desUserPoolId = a});+desUserPoolId = lens _desUserPoolId (\ s a -> s{_desUserPoolId = a})  -- | The identifier for the resource server desIdentifier :: Lens' DescribeResourceServer Text-desIdentifier = lens _desIdentifier (\ s a -> s{_desIdentifier = a});+desIdentifier = lens _desIdentifier (\ s a -> s{_desIdentifier = a})  instance AWSRequest DescribeResourceServer where         type Rs DescribeResourceServer =@@ -133,17 +133,17 @@     -> DescribeResourceServerResponse describeResourceServerResponse pResponseStatus_ pResourceServer_ =   DescribeResourceServerResponse'-  { _drsrsResponseStatus = pResponseStatus_-  , _drsrsResourceServer = pResourceServer_-  }+    { _drsrsResponseStatus = pResponseStatus_+    , _drsrsResourceServer = pResourceServer_+    }   -- | -- | The response status code. drsrsResponseStatus :: Lens' DescribeResourceServerResponse Int-drsrsResponseStatus = lens _drsrsResponseStatus (\ s a -> s{_drsrsResponseStatus = a});+drsrsResponseStatus = lens _drsrsResponseStatus (\ s a -> s{_drsrsResponseStatus = a})  -- | The resource server. drsrsResourceServer :: Lens' DescribeResourceServerResponse ResourceServerType-drsrsResourceServer = lens _drsrsResourceServer (\ s a -> s{_drsrsResourceServer = a});+drsrsResourceServer = lens _drsrsResourceServer (\ s a -> s{_drsrsResourceServer = a})  instance NFData DescribeResourceServerResponse where

@@ -0,0 +1,149 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.DescribeRiskConfiguration+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Describes the risk configuration.+--+--+module Network.AWS.CognitoIdentityProvider.DescribeRiskConfiguration+    (+    -- * Creating a Request+      describeRiskConfiguration+    , DescribeRiskConfiguration+    -- * Request Lenses+    , drcClientId+    , drcUserPoolId++    -- * Destructuring the Response+    , describeRiskConfigurationResponse+    , DescribeRiskConfigurationResponse+    -- * Response Lenses+    , drcrsResponseStatus+    , drcrsRiskConfiguration+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'describeRiskConfiguration' smart constructor.+data DescribeRiskConfiguration = DescribeRiskConfiguration'+  { _drcClientId   :: !(Maybe (Sensitive Text))+  , _drcUserPoolId :: !Text+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'DescribeRiskConfiguration' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'drcClientId' - The app client ID.+--+-- * 'drcUserPoolId' - The user pool ID.+describeRiskConfiguration+    :: Text -- ^ 'drcUserPoolId'+    -> DescribeRiskConfiguration+describeRiskConfiguration pUserPoolId_ =+  DescribeRiskConfiguration'+    {_drcClientId = Nothing, _drcUserPoolId = pUserPoolId_}+++-- | The app client ID.+drcClientId :: Lens' DescribeRiskConfiguration (Maybe Text)+drcClientId = lens _drcClientId (\ s a -> s{_drcClientId = a}) . mapping _Sensitive++-- | The user pool ID.+drcUserPoolId :: Lens' DescribeRiskConfiguration Text+drcUserPoolId = lens _drcUserPoolId (\ s a -> s{_drcUserPoolId = a})++instance AWSRequest DescribeRiskConfiguration where+        type Rs DescribeRiskConfiguration =+             DescribeRiskConfigurationResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 DescribeRiskConfigurationResponse' <$>+                   (pure (fromEnum s)) <*> (x .:> "RiskConfiguration"))++instance Hashable DescribeRiskConfiguration where++instance NFData DescribeRiskConfiguration where++instance ToHeaders DescribeRiskConfiguration where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.DescribeRiskConfiguration"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON DescribeRiskConfiguration where+        toJSON DescribeRiskConfiguration'{..}+          = object+              (catMaybes+                 [("ClientId" .=) <$> _drcClientId,+                  Just ("UserPoolId" .= _drcUserPoolId)])++instance ToPath DescribeRiskConfiguration where+        toPath = const "/"++instance ToQuery DescribeRiskConfiguration where+        toQuery = const mempty++-- | /See:/ 'describeRiskConfigurationResponse' smart constructor.+data DescribeRiskConfigurationResponse = DescribeRiskConfigurationResponse'+  { _drcrsResponseStatus    :: !Int+  , _drcrsRiskConfiguration :: !RiskConfigurationType+  } deriving (Eq, Show, Data, Typeable, Generic)+++-- | Creates a value of 'DescribeRiskConfigurationResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'drcrsResponseStatus' - -- | The response status code.+--+-- * 'drcrsRiskConfiguration' - The risk configuration.+describeRiskConfigurationResponse+    :: Int -- ^ 'drcrsResponseStatus'+    -> RiskConfigurationType -- ^ 'drcrsRiskConfiguration'+    -> DescribeRiskConfigurationResponse+describeRiskConfigurationResponse pResponseStatus_ pRiskConfiguration_ =+  DescribeRiskConfigurationResponse'+    { _drcrsResponseStatus = pResponseStatus_+    , _drcrsRiskConfiguration = pRiskConfiguration_+    }+++-- | -- | The response status code.+drcrsResponseStatus :: Lens' DescribeRiskConfigurationResponse Int+drcrsResponseStatus = lens _drcrsResponseStatus (\ s a -> s{_drcrsResponseStatus = a})++-- | The risk configuration.+drcrsRiskConfiguration :: Lens' DescribeRiskConfigurationResponse RiskConfigurationType+drcrsRiskConfiguration = lens _drcrsRiskConfiguration (\ s a -> s{_drcrsRiskConfiguration = a})++instance NFData DescribeRiskConfigurationResponse+         where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeUserImportJob--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -73,11 +73,11 @@  -- | The user pool ID for the user pool that the users are being imported into. duijUserPoolId :: Lens' DescribeUserImportJob Text-duijUserPoolId = lens _duijUserPoolId (\ s a -> s{_duijUserPoolId = a});+duijUserPoolId = lens _duijUserPoolId (\ s a -> s{_duijUserPoolId = a})  -- | The job ID for the user import job. duijJobId :: Lens' DescribeUserImportJob Text-duijJobId = lens _duijJobId (\ s a -> s{_duijJobId = a});+duijJobId = lens _duijJobId (\ s a -> s{_duijJobId = a})  instance AWSRequest DescribeUserImportJob where         type Rs DescribeUserImportJob =@@ -139,15 +139,15 @@     -> DescribeUserImportJobResponse describeUserImportJobResponse pResponseStatus_ =   DescribeUserImportJobResponse'-  {_duijrsUserImportJob = Nothing, _duijrsResponseStatus = pResponseStatus_}+    {_duijrsUserImportJob = Nothing, _duijrsResponseStatus = pResponseStatus_}   -- | The job object that represents the user import job. duijrsUserImportJob :: Lens' DescribeUserImportJobResponse (Maybe UserImportJobType)-duijrsUserImportJob = lens _duijrsUserImportJob (\ s a -> s{_duijrsUserImportJob = a});+duijrsUserImportJob = lens _duijrsUserImportJob (\ s a -> s{_duijrsUserImportJob = a})  -- | -- | The response status code. duijrsResponseStatus :: Lens' DescribeUserImportJobResponse Int-duijrsResponseStatus = lens _duijrsResponseStatus (\ s a -> s{_duijrsResponseStatus = a});+duijrsResponseStatus = lens _duijrsResponseStatus (\ s a -> s{_duijrsResponseStatus = a})  instance NFData DescribeUserImportJobResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeUserPool--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -67,7 +67,7 @@  -- | The user pool ID for the user pool you want to describe. dUserPoolId :: Lens' DescribeUserPool Text-dUserPoolId = lens _dUserPoolId (\ s a -> s{_dUserPoolId = a});+dUserPoolId = lens _dUserPoolId (\ s a -> s{_dUserPoolId = a})  instance AWSRequest DescribeUserPool where         type Rs DescribeUserPool = DescribeUserPoolResponse@@ -126,15 +126,15 @@     -> DescribeUserPoolResponse describeUserPoolResponse pResponseStatus_ =   DescribeUserPoolResponse'-  {_duprsUserPool = Nothing, _duprsResponseStatus = pResponseStatus_}+    {_duprsUserPool = Nothing, _duprsResponseStatus = pResponseStatus_}   -- | The container of metadata returned by the server to describe the pool. duprsUserPool :: Lens' DescribeUserPoolResponse (Maybe UserPoolType)-duprsUserPool = lens _duprsUserPool (\ s a -> s{_duprsUserPool = a});+duprsUserPool = lens _duprsUserPool (\ s a -> s{_duprsUserPool = a})  -- | -- | The response status code. duprsResponseStatus :: Lens' DescribeUserPoolResponse Int-duprsResponseStatus = lens _duprsResponseStatus (\ s a -> s{_duprsResponseStatus = a});+duprsResponseStatus = lens _duprsResponseStatus (\ s a -> s{_duprsResponseStatus = a})  instance NFData DescribeUserPoolResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeUserPoolClient--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,16 +69,16 @@     -> DescribeUserPoolClient describeUserPoolClient pUserPoolId_ pClientId_ =   DescribeUserPoolClient'-  {_dupcuUserPoolId = pUserPoolId_, _dupcuClientId = _Sensitive # pClientId_}+    {_dupcuUserPoolId = pUserPoolId_, _dupcuClientId = _Sensitive # pClientId_}   -- | The user pool ID for the user pool you want to describe. dupcuUserPoolId :: Lens' DescribeUserPoolClient Text-dupcuUserPoolId = lens _dupcuUserPoolId (\ s a -> s{_dupcuUserPoolId = a});+dupcuUserPoolId = lens _dupcuUserPoolId (\ s a -> s{_dupcuUserPoolId = a})  -- | The app client ID of the app associated with the user pool. dupcuClientId :: Lens' DescribeUserPoolClient Text-dupcuClientId = lens _dupcuClientId (\ s a -> s{_dupcuClientId = a}) . _Sensitive;+dupcuClientId = lens _dupcuClientId (\ s a -> s{_dupcuClientId = a}) . _Sensitive  instance AWSRequest DescribeUserPoolClient where         type Rs DescribeUserPoolClient =@@ -140,15 +140,15 @@     -> DescribeUserPoolClientResponse describeUserPoolClientResponse pResponseStatus_ =   DescribeUserPoolClientResponse'-  {_dupcrsUserPoolClient = Nothing, _dupcrsResponseStatus = pResponseStatus_}+    {_dupcrsUserPoolClient = Nothing, _dupcrsResponseStatus = pResponseStatus_}   -- | The user pool client from a server response to describe the user pool client. dupcrsUserPoolClient :: Lens' DescribeUserPoolClientResponse (Maybe UserPoolClientType)-dupcrsUserPoolClient = lens _dupcrsUserPoolClient (\ s a -> s{_dupcrsUserPoolClient = a});+dupcrsUserPoolClient = lens _dupcrsUserPoolClient (\ s a -> s{_dupcrsUserPoolClient = a})  -- | -- | The response status code. dupcrsResponseStatus :: Lens' DescribeUserPoolClientResponse Int-dupcrsResponseStatus = lens _dupcrsResponseStatus (\ s a -> s{_dupcrsResponseStatus = a});+dupcrsResponseStatus = lens _dupcrsResponseStatus (\ s a -> s{_dupcrsResponseStatus = a})  instance NFData DescribeUserPoolClientResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.DescribeUserPoolDomain--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -63,7 +63,7 @@  -- | The domain string. dDomain :: Lens' DescribeUserPoolDomain Text-dDomain = lens _dDomain (\ s a -> s{_dDomain = a});+dDomain = lens _dDomain (\ s a -> s{_dDomain = a})  instance AWSRequest DescribeUserPoolDomain where         type Rs DescribeUserPoolDomain =@@ -118,15 +118,15 @@     -> DescribeUserPoolDomainResponse describeUserPoolDomainResponse pResponseStatus_ =   DescribeUserPoolDomainResponse'-  {_drsDomainDescription = Nothing, _drsResponseStatus = pResponseStatus_}+    {_drsDomainDescription = Nothing, _drsResponseStatus = pResponseStatus_}   -- | A domain description object containing information about the domain. drsDomainDescription :: Lens' DescribeUserPoolDomainResponse (Maybe DomainDescriptionType)-drsDomainDescription = lens _drsDomainDescription (\ s a -> s{_drsDomainDescription = a});+drsDomainDescription = lens _drsDomainDescription (\ s a -> s{_drsDomainDescription = a})  -- | -- | The response status code. drsResponseStatus :: Lens' DescribeUserPoolDomainResponse Int-drsResponseStatus = lens _drsResponseStatus (\ s a -> s{_drsResponseStatus = a});+drsResponseStatus = lens _drsResponseStatus (\ s a -> s{_drsResponseStatus = a})  instance NFData DescribeUserPoolDomainResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ForgetDevice--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,11 +69,11 @@  -- | The access token for the forgotten device request. fdAccessToken :: Lens' ForgetDevice (Maybe Text)-fdAccessToken = lens _fdAccessToken (\ s a -> s{_fdAccessToken = a}) . mapping _Sensitive;+fdAccessToken = lens _fdAccessToken (\ s a -> s{_fdAccessToken = a}) . mapping _Sensitive  -- | The device key. fdDeviceKey :: Lens' ForgetDevice Text-fdDeviceKey = lens _fdDeviceKey (\ s a -> s{_fdDeviceKey = a});+fdDeviceKey = lens _fdDeviceKey (\ s a -> s{_fdDeviceKey = a})  instance AWSRequest ForgetDevice where         type Rs ForgetDevice = ForgetDeviceResponse

@@ -12,13 +12,13 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ForgotPassword--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated -- Portability : non-portable (GHC extensions) ----- Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the @Username@ parameter, you can use the username or user alias. If a verified phone number exists for the user, the confirmation code is sent to the phone number. Otherwise, if a verified email exists, the confirmation code is sent to the email. If neither a verified phone number nor a verified email exists, @InvalidParameterException@ is thrown. To use the confirmation code for resetting the password, call <API_ConfirmForgotPassword.html ConfirmForgotPassword> .+-- Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the @Username@ parameter, you can use the username or user alias. If a verified phone number exists for the user, the confirmation code is sent to the phone number. Otherwise, if a verified email exists, the confirmation code is sent to the email. If neither a verified phone number nor a verified email exists, @InvalidParameterException@ is thrown. To use the confirmation code for resetting the password, call . -- -- module Network.AWS.CognitoIdentityProvider.ForgotPassword@@ -27,6 +27,8 @@       forgotPassword     , ForgotPassword     -- * Request Lenses+    , fpAnalyticsMetadata+    , fpUserContextData     , fpSecretHash     , fpClientId     , fpUsername@@ -52,9 +54,11 @@ -- -- /See:/ 'forgotPassword' smart constructor. data ForgotPassword = ForgotPassword'-  { _fpSecretHash :: !(Maybe (Sensitive Text))-  , _fpClientId   :: !(Sensitive Text)-  , _fpUsername   :: !(Sensitive Text)+  { _fpAnalyticsMetadata :: !(Maybe AnalyticsMetadataType)+  , _fpUserContextData   :: !(Maybe UserContextDataType)+  , _fpSecretHash        :: !(Maybe (Sensitive Text))+  , _fpClientId          :: !(Sensitive Text)+  , _fpUsername          :: !(Sensitive Text)   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -62,6 +66,10 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'fpAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @ForgotPassword@ calls.+--+-- * 'fpUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+-- -- * 'fpSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. -- -- * 'fpClientId' - The ID of the client associated with the user pool.@@ -73,23 +81,33 @@     -> ForgotPassword forgotPassword pClientId_ pUsername_ =   ForgotPassword'-  { _fpSecretHash = Nothing-  , _fpClientId = _Sensitive # pClientId_-  , _fpUsername = _Sensitive # pUsername_-  }+    { _fpAnalyticsMetadata = Nothing+    , _fpUserContextData = Nothing+    , _fpSecretHash = Nothing+    , _fpClientId = _Sensitive # pClientId_+    , _fpUsername = _Sensitive # pUsername_+    }  +-- | The Amazon Pinpoint analytics metadata for collecting metrics for @ForgotPassword@ calls.+fpAnalyticsMetadata :: Lens' ForgotPassword (Maybe AnalyticsMetadataType)+fpAnalyticsMetadata = lens _fpAnalyticsMetadata (\ s a -> s{_fpAnalyticsMetadata = a})++-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+fpUserContextData :: Lens' ForgotPassword (Maybe UserContextDataType)+fpUserContextData = lens _fpUserContextData (\ s a -> s{_fpUserContextData = a})+ -- | A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. fpSecretHash :: Lens' ForgotPassword (Maybe Text)-fpSecretHash = lens _fpSecretHash (\ s a -> s{_fpSecretHash = a}) . mapping _Sensitive;+fpSecretHash = lens _fpSecretHash (\ s a -> s{_fpSecretHash = a}) . mapping _Sensitive  -- | The ID of the client associated with the user pool. fpClientId :: Lens' ForgotPassword Text-fpClientId = lens _fpClientId (\ s a -> s{_fpClientId = a}) . _Sensitive;+fpClientId = lens _fpClientId (\ s a -> s{_fpClientId = a}) . _Sensitive  -- | The user name of the user for whom you want to enter a code to reset a forgotten password. fpUsername :: Lens' ForgotPassword Text-fpUsername = lens _fpUsername (\ s a -> s{_fpUsername = a}) . _Sensitive;+fpUsername = lens _fpUsername (\ s a -> s{_fpUsername = a}) . _Sensitive  instance AWSRequest ForgotPassword where         type Rs ForgotPassword = ForgotPasswordResponse@@ -119,7 +137,9 @@         toJSON ForgotPassword'{..}           = object               (catMaybes-                 [("SecretHash" .=) <$> _fpSecretHash,+                 [("AnalyticsMetadata" .=) <$> _fpAnalyticsMetadata,+                  ("UserContextData" .=) <$> _fpUserContextData,+                  ("SecretHash" .=) <$> _fpSecretHash,                   Just ("ClientId" .= _fpClientId),                   Just ("Username" .= _fpUsername)]) @@ -152,15 +172,15 @@     -> ForgotPasswordResponse forgotPasswordResponse pResponseStatus_ =   ForgotPasswordResponse'-  {_fprsCodeDeliveryDetails = Nothing, _fprsResponseStatus = pResponseStatus_}+    {_fprsCodeDeliveryDetails = Nothing, _fprsResponseStatus = pResponseStatus_}   -- | The code delivery details returned by the server in response to the request to reset a password. fprsCodeDeliveryDetails :: Lens' ForgotPasswordResponse (Maybe CodeDeliveryDetailsType)-fprsCodeDeliveryDetails = lens _fprsCodeDeliveryDetails (\ s a -> s{_fprsCodeDeliveryDetails = a});+fprsCodeDeliveryDetails = lens _fprsCodeDeliveryDetails (\ s a -> s{_fprsCodeDeliveryDetails = a})  -- | -- | The response status code. fprsResponseStatus :: Lens' ForgotPasswordResponse Int-fprsResponseStatus = lens _fprsResponseStatus (\ s a -> s{_fprsResponseStatus = a});+fprsResponseStatus = lens _fprsResponseStatus (\ s a -> s{_fprsResponseStatus = a})  instance NFData ForgotPasswordResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetCSVHeader--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,7 +68,7 @@  -- | The user pool ID for the user pool that the users are to be imported into. gchUserPoolId :: Lens' GetCSVHeader Text-gchUserPoolId = lens _gchUserPoolId (\ s a -> s{_gchUserPoolId = a});+gchUserPoolId = lens _gchUserPoolId (\ s a -> s{_gchUserPoolId = a})  instance AWSRequest GetCSVHeader where         type Rs GetCSVHeader = GetCSVHeaderResponse@@ -132,22 +132,22 @@     -> GetCSVHeaderResponse getCSVHeaderResponse pResponseStatus_ =   GetCSVHeaderResponse'-  { _gchrsUserPoolId = Nothing-  , _gchrsCSVHeader = Nothing-  , _gchrsResponseStatus = pResponseStatus_-  }+    { _gchrsUserPoolId = Nothing+    , _gchrsCSVHeader = Nothing+    , _gchrsResponseStatus = pResponseStatus_+    }   -- | The user pool ID for the user pool that the users are to be imported into. gchrsUserPoolId :: Lens' GetCSVHeaderResponse (Maybe Text)-gchrsUserPoolId = lens _gchrsUserPoolId (\ s a -> s{_gchrsUserPoolId = a});+gchrsUserPoolId = lens _gchrsUserPoolId (\ s a -> s{_gchrsUserPoolId = a})  -- | The header information for the .csv file for the user import job. gchrsCSVHeader :: Lens' GetCSVHeaderResponse [Text]-gchrsCSVHeader = lens _gchrsCSVHeader (\ s a -> s{_gchrsCSVHeader = a}) . _Default . _Coerce;+gchrsCSVHeader = lens _gchrsCSVHeader (\ s a -> s{_gchrsCSVHeader = a}) . _Default . _Coerce  -- | -- | The response status code. gchrsResponseStatus :: Lens' GetCSVHeaderResponse Int-gchrsResponseStatus = lens _gchrsResponseStatus (\ s a -> s{_gchrsResponseStatus = a});+gchrsResponseStatus = lens _gchrsResponseStatus (\ s a -> s{_gchrsResponseStatus = a})  instance NFData GetCSVHeaderResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetDevice--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -72,11 +72,11 @@  -- | The access token. gdAccessToken :: Lens' GetDevice (Maybe Text)-gdAccessToken = lens _gdAccessToken (\ s a -> s{_gdAccessToken = a}) . mapping _Sensitive;+gdAccessToken = lens _gdAccessToken (\ s a -> s{_gdAccessToken = a}) . mapping _Sensitive  -- | The device key. gdDeviceKey :: Lens' GetDevice Text-gdDeviceKey = lens _gdDeviceKey (\ s a -> s{_gdDeviceKey = a});+gdDeviceKey = lens _gdDeviceKey (\ s a -> s{_gdDeviceKey = a})  instance AWSRequest GetDevice where         type Rs GetDevice = GetDeviceResponse@@ -138,15 +138,15 @@     -> GetDeviceResponse getDeviceResponse pResponseStatus_ pDevice_ =   GetDeviceResponse'-  {_gdrsResponseStatus = pResponseStatus_, _gdrsDevice = pDevice_}+    {_gdrsResponseStatus = pResponseStatus_, _gdrsDevice = pDevice_}   -- | -- | The response status code. gdrsResponseStatus :: Lens' GetDeviceResponse Int-gdrsResponseStatus = lens _gdrsResponseStatus (\ s a -> s{_gdrsResponseStatus = a});+gdrsResponseStatus = lens _gdrsResponseStatus (\ s a -> s{_gdrsResponseStatus = a})  -- | The device. gdrsDevice :: Lens' GetDeviceResponse DeviceType-gdrsDevice = lens _gdrsDevice (\ s a -> s{_gdrsDevice = a});+gdrsDevice = lens _gdrsDevice (\ s a -> s{_gdrsDevice = a})  instance NFData GetDeviceResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -71,11 +71,11 @@  -- | The name of the group. ggGroupName :: Lens' GetGroup Text-ggGroupName = lens _ggGroupName (\ s a -> s{_ggGroupName = a});+ggGroupName = lens _ggGroupName (\ s a -> s{_ggGroupName = a})  -- | The user pool ID for the user pool. ggUserPoolId :: Lens' GetGroup Text-ggUserPoolId = lens _ggUserPoolId (\ s a -> s{_ggUserPoolId = a});+ggUserPoolId = lens _ggUserPoolId (\ s a -> s{_ggUserPoolId = a})  instance AWSRequest GetGroup where         type Rs GetGroup = GetGroupResponse@@ -132,15 +132,15 @@     -> GetGroupResponse getGroupResponse pResponseStatus_ =   GetGroupResponse'-  {_ggrsGroup = Nothing, _ggrsResponseStatus = pResponseStatus_}+    {_ggrsGroup = Nothing, _ggrsResponseStatus = pResponseStatus_}   -- | The group object for the group. ggrsGroup :: Lens' GetGroupResponse (Maybe GroupType)-ggrsGroup = lens _ggrsGroup (\ s a -> s{_ggrsGroup = a});+ggrsGroup = lens _ggrsGroup (\ s a -> s{_ggrsGroup = a})  -- | -- | The response status code. ggrsResponseStatus :: Lens' GetGroupResponse Int-ggrsResponseStatus = lens _ggrsResponseStatus (\ s a -> s{_ggrsResponseStatus = a});+ggrsResponseStatus = lens _ggrsResponseStatus (\ s a -> s{_ggrsResponseStatus = a})  instance NFData GetGroupResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetIdentityProviderByIdentifier--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -65,16 +65,16 @@     -> GetIdentityProviderByIdentifier getIdentityProviderByIdentifier pUserPoolId_ pIdpIdentifier_ =   GetIdentityProviderByIdentifier'-  {_gipbiUserPoolId = pUserPoolId_, _gipbiIdpIdentifier = pIdpIdentifier_}+    {_gipbiUserPoolId = pUserPoolId_, _gipbiIdpIdentifier = pIdpIdentifier_}   -- | The user pool ID. gipbiUserPoolId :: Lens' GetIdentityProviderByIdentifier Text-gipbiUserPoolId = lens _gipbiUserPoolId (\ s a -> s{_gipbiUserPoolId = a});+gipbiUserPoolId = lens _gipbiUserPoolId (\ s a -> s{_gipbiUserPoolId = a})  -- | The identity provider ID. gipbiIdpIdentifier :: Lens' GetIdentityProviderByIdentifier Text-gipbiIdpIdentifier = lens _gipbiIdpIdentifier (\ s a -> s{_gipbiIdpIdentifier = a});+gipbiIdpIdentifier = lens _gipbiIdpIdentifier (\ s a -> s{_gipbiIdpIdentifier = a})  instance AWSRequest GetIdentityProviderByIdentifier          where@@ -137,18 +137,18 @@     -> GetIdentityProviderByIdentifierResponse getIdentityProviderByIdentifierResponse pResponseStatus_ pIdentityProvider_ =   GetIdentityProviderByIdentifierResponse'-  { _gipbirsResponseStatus = pResponseStatus_-  , _gipbirsIdentityProvider = pIdentityProvider_-  }+    { _gipbirsResponseStatus = pResponseStatus_+    , _gipbirsIdentityProvider = pIdentityProvider_+    }   -- | -- | The response status code. gipbirsResponseStatus :: Lens' GetIdentityProviderByIdentifierResponse Int-gipbirsResponseStatus = lens _gipbirsResponseStatus (\ s a -> s{_gipbirsResponseStatus = a});+gipbirsResponseStatus = lens _gipbirsResponseStatus (\ s a -> s{_gipbirsResponseStatus = a})  -- | The identity provider object. gipbirsIdentityProvider :: Lens' GetIdentityProviderByIdentifierResponse IdentityProviderType-gipbirsIdentityProvider = lens _gipbirsIdentityProvider (\ s a -> s{_gipbirsIdentityProvider = a});+gipbirsIdentityProvider = lens _gipbirsIdentityProvider (\ s a -> s{_gipbirsIdentityProvider = a})  instance NFData            GetIdentityProviderByIdentifierResponse

@@ -0,0 +1,142 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.GetSigningCertificate+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- This method takes a user pool ID, and returns the signing certificate.+--+--+module Network.AWS.CognitoIdentityProvider.GetSigningCertificate+    (+    -- * Creating a Request+      getSigningCertificate+    , GetSigningCertificate+    -- * Request Lenses+    , gscUserPoolId++    -- * Destructuring the Response+    , getSigningCertificateResponse+    , GetSigningCertificateResponse+    -- * Response Lenses+    , gscrsCertificate+    , gscrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | Request to get a signing certificate from Cognito.+--+--+--+-- /See:/ 'getSigningCertificate' smart constructor.+newtype GetSigningCertificate = GetSigningCertificate'+  { _gscUserPoolId :: Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'GetSigningCertificate' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'gscUserPoolId' - The user pool ID.+getSigningCertificate+    :: Text -- ^ 'gscUserPoolId'+    -> GetSigningCertificate+getSigningCertificate pUserPoolId_ =+  GetSigningCertificate' {_gscUserPoolId = pUserPoolId_}+++-- | The user pool ID.+gscUserPoolId :: Lens' GetSigningCertificate Text+gscUserPoolId = lens _gscUserPoolId (\ s a -> s{_gscUserPoolId = a})++instance AWSRequest GetSigningCertificate where+        type Rs GetSigningCertificate =+             GetSigningCertificateResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 GetSigningCertificateResponse' <$>+                   (x .?> "Certificate") <*> (pure (fromEnum s)))++instance Hashable GetSigningCertificate where++instance NFData GetSigningCertificate where++instance ToHeaders GetSigningCertificate where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.GetSigningCertificate"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON GetSigningCertificate where+        toJSON GetSigningCertificate'{..}+          = object+              (catMaybes [Just ("UserPoolId" .= _gscUserPoolId)])++instance ToPath GetSigningCertificate where+        toPath = const "/"++instance ToQuery GetSigningCertificate where+        toQuery = const mempty++-- | Response from Cognito for a signing certificate request.+--+--+--+-- /See:/ 'getSigningCertificateResponse' smart constructor.+data GetSigningCertificateResponse = GetSigningCertificateResponse'+  { _gscrsCertificate    :: !(Maybe Text)+  , _gscrsResponseStatus :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'GetSigningCertificateResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'gscrsCertificate' - The signing certificate.+--+-- * 'gscrsResponseStatus' - -- | The response status code.+getSigningCertificateResponse+    :: Int -- ^ 'gscrsResponseStatus'+    -> GetSigningCertificateResponse+getSigningCertificateResponse pResponseStatus_ =+  GetSigningCertificateResponse'+    {_gscrsCertificate = Nothing, _gscrsResponseStatus = pResponseStatus_}+++-- | The signing certificate.+gscrsCertificate :: Lens' GetSigningCertificateResponse (Maybe Text)+gscrsCertificate = lens _gscrsCertificate (\ s a -> s{_gscrsCertificate = a})++-- | -- | The response status code.+gscrsResponseStatus :: Lens' GetSigningCertificateResponse Int+gscrsResponseStatus = lens _gscrsResponseStatus (\ s a -> s{_gscrsResponseStatus = a})++instance NFData GetSigningCertificateResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetUICustomization--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -68,11 +68,11 @@  -- | The client ID for the client app. guicClientId :: Lens' GetUICustomization (Maybe Text)-guicClientId = lens _guicClientId (\ s a -> s{_guicClientId = a}) . mapping _Sensitive;+guicClientId = lens _guicClientId (\ s a -> s{_guicClientId = a}) . mapping _Sensitive  -- | The user pool ID for the user pool. guicUserPoolId :: Lens' GetUICustomization Text-guicUserPoolId = lens _guicUserPoolId (\ s a -> s{_guicUserPoolId = a});+guicUserPoolId = lens _guicUserPoolId (\ s a -> s{_guicUserPoolId = a})  instance AWSRequest GetUICustomization where         type Rs GetUICustomization =@@ -131,17 +131,17 @@     -> GetUICustomizationResponse getUICustomizationResponse pResponseStatus_ pUICustomization_ =   GetUICustomizationResponse'-  { _guicrsResponseStatus = pResponseStatus_-  , _guicrsUICustomization = pUICustomization_-  }+    { _guicrsResponseStatus = pResponseStatus_+    , _guicrsUICustomization = pUICustomization_+    }   -- | -- | The response status code. guicrsResponseStatus :: Lens' GetUICustomizationResponse Int-guicrsResponseStatus = lens _guicrsResponseStatus (\ s a -> s{_guicrsResponseStatus = a});+guicrsResponseStatus = lens _guicrsResponseStatus (\ s a -> s{_guicrsResponseStatus = a})  -- | The UI customization information. guicrsUICustomization :: Lens' GetUICustomizationResponse UICustomizationType-guicrsUICustomization = lens _guicrsUICustomization (\ s a -> s{_guicrsUICustomization = a});+guicrsUICustomization = lens _guicrsUICustomization (\ s a -> s{_guicrsUICustomization = a})  instance NFData GetUICustomizationResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetUser--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -33,7 +33,9 @@     , getUserResponse     , GetUserResponse     -- * Response Lenses+    , gursUserMFASettingList     , gursMFAOptions+    , gursPreferredMFASetting     , gursResponseStatus     , gursUsername     , gursUserAttributes@@ -69,7 +71,7 @@  -- | The access token returned by the server response to get information about the user. guAccessToken :: Lens' GetUser Text-guAccessToken = lens _guAccessToken (\ s a -> s{_guAccessToken = a}) . _Sensitive;+guAccessToken = lens _guAccessToken (\ s a -> s{_guAccessToken = a}) . _Sensitive  instance AWSRequest GetUser where         type Rs GetUser = GetUserResponse@@ -78,8 +80,10 @@           = receiveJSON               (\ s h x ->                  GetUserResponse' <$>-                   (x .?> "MFAOptions" .!@ mempty) <*>-                     (pure (fromEnum s))+                   (x .?> "UserMFASettingList" .!@ mempty) <*>+                     (x .?> "MFAOptions" .!@ mempty)+                     <*> (x .?> "PreferredMfaSetting")+                     <*> (pure (fromEnum s))                      <*> (x .:> "Username")                      <*> (x .?> "UserAttributes" .!@ mempty)) @@ -114,10 +118,12 @@ -- -- /See:/ 'getUserResponse' smart constructor. data GetUserResponse = GetUserResponse'-  { _gursMFAOptions     :: !(Maybe [MFAOptionType])-  , _gursResponseStatus :: !Int-  , _gursUsername       :: !(Sensitive Text)-  , _gursUserAttributes :: ![AttributeType]+  { _gursUserMFASettingList  :: !(Maybe [Text])+  , _gursMFAOptions          :: !(Maybe [MFAOptionType])+  , _gursPreferredMFASetting :: !(Maybe Text)+  , _gursResponseStatus      :: !Int+  , _gursUsername            :: !(Sensitive Text)+  , _gursUserAttributes      :: ![AttributeType]   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -125,8 +131,12 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'gursUserMFASettingList' - The list of the user's MFA settings.+-- -- * 'gursMFAOptions' - Specifies the options for MFA (e.g., email or phone number). --+-- * 'gursPreferredMFASetting' - The user's preferred MFA setting.+-- -- * 'gursResponseStatus' - -- | The response status code. -- -- * 'gursUsername' - The user name of the user you wish to retrieve from the get user request.@@ -138,27 +148,37 @@     -> GetUserResponse getUserResponse pResponseStatus_ pUsername_ =   GetUserResponse'-  { _gursMFAOptions = Nothing-  , _gursResponseStatus = pResponseStatus_-  , _gursUsername = _Sensitive # pUsername_-  , _gursUserAttributes = mempty-  }+    { _gursUserMFASettingList = Nothing+    , _gursMFAOptions = Nothing+    , _gursPreferredMFASetting = Nothing+    , _gursResponseStatus = pResponseStatus_+    , _gursUsername = _Sensitive # pUsername_+    , _gursUserAttributes = mempty+    }  +-- | The list of the user's MFA settings.+gursUserMFASettingList :: Lens' GetUserResponse [Text]+gursUserMFASettingList = lens _gursUserMFASettingList (\ s a -> s{_gursUserMFASettingList = a}) . _Default . _Coerce+ -- | Specifies the options for MFA (e.g., email or phone number). gursMFAOptions :: Lens' GetUserResponse [MFAOptionType]-gursMFAOptions = lens _gursMFAOptions (\ s a -> s{_gursMFAOptions = a}) . _Default . _Coerce;+gursMFAOptions = lens _gursMFAOptions (\ s a -> s{_gursMFAOptions = a}) . _Default . _Coerce +-- | The user's preferred MFA setting.+gursPreferredMFASetting :: Lens' GetUserResponse (Maybe Text)+gursPreferredMFASetting = lens _gursPreferredMFASetting (\ s a -> s{_gursPreferredMFASetting = a})+ -- | -- | The response status code. gursResponseStatus :: Lens' GetUserResponse Int-gursResponseStatus = lens _gursResponseStatus (\ s a -> s{_gursResponseStatus = a});+gursResponseStatus = lens _gursResponseStatus (\ s a -> s{_gursResponseStatus = a})  -- | The user name of the user you wish to retrieve from the get user request. gursUsername :: Lens' GetUserResponse Text-gursUsername = lens _gursUsername (\ s a -> s{_gursUsername = a}) . _Sensitive;+gursUsername = lens _gursUsername (\ s a -> s{_gursUsername = a}) . _Sensitive  -- | An array of name-value pairs representing user attributes. For custom attributes, you must prepend the @custom:@ prefix to the attribute name. gursUserAttributes :: Lens' GetUserResponse [AttributeType]-gursUserAttributes = lens _gursUserAttributes (\ s a -> s{_gursUserAttributes = a}) . _Coerce;+gursUserAttributes = lens _gursUserAttributes (\ s a -> s{_gursUserAttributes = a}) . _Coerce  instance NFData GetUserResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GetUserAttributeVerificationCode--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,18 +69,18 @@     -> GetUserAttributeVerificationCode getUserAttributeVerificationCode pAccessToken_ pAttributeName_ =   GetUserAttributeVerificationCode'-  { _guavcAccessToken = _Sensitive # pAccessToken_-  , _guavcAttributeName = pAttributeName_-  }+    { _guavcAccessToken = _Sensitive # pAccessToken_+    , _guavcAttributeName = pAttributeName_+    }   -- | The access token returned by the server response to get the user attribute verification code. guavcAccessToken :: Lens' GetUserAttributeVerificationCode Text-guavcAccessToken = lens _guavcAccessToken (\ s a -> s{_guavcAccessToken = a}) . _Sensitive;+guavcAccessToken = lens _guavcAccessToken (\ s a -> s{_guavcAccessToken = a}) . _Sensitive  -- | The attribute name returned by the server response to get the user attribute verification code. guavcAttributeName :: Lens' GetUserAttributeVerificationCode Text-guavcAttributeName = lens _guavcAttributeName (\ s a -> s{_guavcAttributeName = a});+guavcAttributeName = lens _guavcAttributeName (\ s a -> s{_guavcAttributeName = a})  instance AWSRequest GetUserAttributeVerificationCode          where@@ -150,18 +150,18 @@     -> GetUserAttributeVerificationCodeResponse getUserAttributeVerificationCodeResponse pResponseStatus_ =   GetUserAttributeVerificationCodeResponse'-  { _guavcrsCodeDeliveryDetails = Nothing-  , _guavcrsResponseStatus = pResponseStatus_-  }+    { _guavcrsCodeDeliveryDetails = Nothing+    , _guavcrsResponseStatus = pResponseStatus_+    }   -- | The code delivery details returned by the server in response to the request to get the user attribute verification code. guavcrsCodeDeliveryDetails :: Lens' GetUserAttributeVerificationCodeResponse (Maybe CodeDeliveryDetailsType)-guavcrsCodeDeliveryDetails = lens _guavcrsCodeDeliveryDetails (\ s a -> s{_guavcrsCodeDeliveryDetails = a});+guavcrsCodeDeliveryDetails = lens _guavcrsCodeDeliveryDetails (\ s a -> s{_guavcrsCodeDeliveryDetails = a})  -- | -- | The response status code. guavcrsResponseStatus :: Lens' GetUserAttributeVerificationCodeResponse Int-guavcrsResponseStatus = lens _guavcrsResponseStatus (\ s a -> s{_guavcrsResponseStatus = a});+guavcrsResponseStatus = lens _guavcrsResponseStatus (\ s a -> s{_guavcrsResponseStatus = a})  instance NFData            GetUserAttributeVerificationCodeResponse

@@ -0,0 +1,157 @@+{-# LANGUAGE DeriveDataTypeable #-}+{-# LANGUAGE DeriveGeneric      #-}+{-# LANGUAGE OverloadedStrings  #-}+{-# LANGUAGE RecordWildCards    #-}+{-# LANGUAGE TypeFamilies       #-}++{-# OPTIONS_GHC -fno-warn-unused-imports #-}+{-# OPTIONS_GHC -fno-warn-unused-binds   #-}+{-# OPTIONS_GHC -fno-warn-unused-matches #-}++-- Derived from AWS service descriptions, licensed under Apache 2.0.++-- |+-- Module      : Network.AWS.CognitoIdentityProvider.GetUserPoolMFAConfig+-- Copyright   : (c) 2013-2018 Brendan Hay+-- License     : Mozilla Public License, v. 2.0.+-- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com>+-- Stability   : auto-generated+-- Portability : non-portable (GHC extensions)+--+-- Gets the user pool multi-factor authentication (MFA) configuration.+--+--+module Network.AWS.CognitoIdentityProvider.GetUserPoolMFAConfig+    (+    -- * Creating a Request+      getUserPoolMFAConfig+    , GetUserPoolMFAConfig+    -- * Request Lenses+    , gupmcUserPoolId++    -- * Destructuring the Response+    , getUserPoolMFAConfigResponse+    , GetUserPoolMFAConfigResponse+    -- * Response Lenses+    , gupmcrsSmsMFAConfiguration+    , gupmcrsSoftwareTokenMFAConfiguration+    , gupmcrsMFAConfiguration+    , gupmcrsResponseStatus+    ) where++import Network.AWS.CognitoIdentityProvider.Types+import Network.AWS.CognitoIdentityProvider.Types.Product+import Network.AWS.Lens+import Network.AWS.Prelude+import Network.AWS.Request+import Network.AWS.Response++-- | /See:/ 'getUserPoolMFAConfig' smart constructor.+newtype GetUserPoolMFAConfig = GetUserPoolMFAConfig'+  { _gupmcUserPoolId :: Text+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'GetUserPoolMFAConfig' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'gupmcUserPoolId' - The user pool ID.+getUserPoolMFAConfig+    :: Text -- ^ 'gupmcUserPoolId'+    -> GetUserPoolMFAConfig+getUserPoolMFAConfig pUserPoolId_ =+  GetUserPoolMFAConfig' {_gupmcUserPoolId = pUserPoolId_}+++-- | The user pool ID.+gupmcUserPoolId :: Lens' GetUserPoolMFAConfig Text+gupmcUserPoolId = lens _gupmcUserPoolId (\ s a -> s{_gupmcUserPoolId = a})++instance AWSRequest GetUserPoolMFAConfig where+        type Rs GetUserPoolMFAConfig =+             GetUserPoolMFAConfigResponse+        request = postJSON cognitoIdentityProvider+        response+          = receiveJSON+              (\ s h x ->+                 GetUserPoolMFAConfigResponse' <$>+                   (x .?> "SmsMfaConfiguration") <*>+                     (x .?> "SoftwareTokenMfaConfiguration")+                     <*> (x .?> "MfaConfiguration")+                     <*> (pure (fromEnum s)))++instance Hashable GetUserPoolMFAConfig where++instance NFData GetUserPoolMFAConfig where++instance ToHeaders GetUserPoolMFAConfig where+        toHeaders+          = const+              (mconcat+                 ["X-Amz-Target" =#+                    ("AWSCognitoIdentityProviderService.GetUserPoolMfaConfig"+                       :: ByteString),+                  "Content-Type" =#+                    ("application/x-amz-json-1.1" :: ByteString)])++instance ToJSON GetUserPoolMFAConfig where+        toJSON GetUserPoolMFAConfig'{..}+          = object+              (catMaybes [Just ("UserPoolId" .= _gupmcUserPoolId)])++instance ToPath GetUserPoolMFAConfig where+        toPath = const "/"++instance ToQuery GetUserPoolMFAConfig where+        toQuery = const mempty++-- | /See:/ 'getUserPoolMFAConfigResponse' smart constructor.+data GetUserPoolMFAConfigResponse = GetUserPoolMFAConfigResponse'+  { _gupmcrsSmsMFAConfiguration           :: !(Maybe SmsMFAConfigType)+  , _gupmcrsSoftwareTokenMFAConfiguration :: !(Maybe SoftwareTokenMFAConfigType)+  , _gupmcrsMFAConfiguration              :: !(Maybe UserPoolMFAType)+  , _gupmcrsResponseStatus                :: !Int+  } deriving (Eq, Read, Show, Data, Typeable, Generic)+++-- | Creates a value of 'GetUserPoolMFAConfigResponse' with the minimum fields required to make a request.+--+-- Use one of the following lenses to modify other fields as desired:+--+-- * 'gupmcrsSmsMFAConfiguration' - The SMS text message multi-factor (MFA) configuration.+--+-- * 'gupmcrsSoftwareTokenMFAConfiguration' - The software token multi-factor (MFA) configuration.+--+-- * 'gupmcrsMFAConfiguration' - The multi-factor (MFA) configuration.+--+-- * 'gupmcrsResponseStatus' - -- | The response status code.+getUserPoolMFAConfigResponse+    :: Int -- ^ 'gupmcrsResponseStatus'+    -> GetUserPoolMFAConfigResponse+getUserPoolMFAConfigResponse pResponseStatus_ =+  GetUserPoolMFAConfigResponse'+    { _gupmcrsSmsMFAConfiguration = Nothing+    , _gupmcrsSoftwareTokenMFAConfiguration = Nothing+    , _gupmcrsMFAConfiguration = Nothing+    , _gupmcrsResponseStatus = pResponseStatus_+    }+++-- | The SMS text message multi-factor (MFA) configuration.+gupmcrsSmsMFAConfiguration :: Lens' GetUserPoolMFAConfigResponse (Maybe SmsMFAConfigType)+gupmcrsSmsMFAConfiguration = lens _gupmcrsSmsMFAConfiguration (\ s a -> s{_gupmcrsSmsMFAConfiguration = a})++-- | The software token multi-factor (MFA) configuration.+gupmcrsSoftwareTokenMFAConfiguration :: Lens' GetUserPoolMFAConfigResponse (Maybe SoftwareTokenMFAConfigType)+gupmcrsSoftwareTokenMFAConfiguration = lens _gupmcrsSoftwareTokenMFAConfiguration (\ s a -> s{_gupmcrsSoftwareTokenMFAConfiguration = a})++-- | The multi-factor (MFA) configuration.+gupmcrsMFAConfiguration :: Lens' GetUserPoolMFAConfigResponse (Maybe UserPoolMFAType)+gupmcrsMFAConfiguration = lens _gupmcrsMFAConfiguration (\ s a -> s{_gupmcrsMFAConfiguration = a})++-- | -- | The response status code.+gupmcrsResponseStatus :: Lens' GetUserPoolMFAConfigResponse Int+gupmcrsResponseStatus = lens _gupmcrsResponseStatus (\ s a -> s{_gupmcrsResponseStatus = a})++instance NFData GetUserPoolMFAConfigResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.GlobalSignOut--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -67,7 +67,7 @@  -- | The access token. gsoAccessToken :: Lens' GlobalSignOut Text-gsoAccessToken = lens _gsoAccessToken (\ s a -> s{_gsoAccessToken = a}) . _Sensitive;+gsoAccessToken = lens _gsoAccessToken (\ s a -> s{_gsoAccessToken = a}) . _Sensitive  instance AWSRequest GlobalSignOut where         type Rs GlobalSignOut = GlobalSignOutResponse@@ -126,6 +126,6 @@  -- | -- | The response status code. gsorsResponseStatus :: Lens' GlobalSignOutResponse Int-gsorsResponseStatus = lens _gsorsResponseStatus (\ s a -> s{_gsorsResponseStatus = a});+gsorsResponseStatus = lens _gsorsResponseStatus (\ s a -> s{_gsorsResponseStatus = a})  instance NFData GlobalSignOutResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.InitiateAuth--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -28,6 +28,8 @@     , InitiateAuth     -- * Request Lenses     , iaClientMetadata+    , iaAnalyticsMetadata+    , iaUserContextData     , iaAuthParameters     , iaAuthFlow     , iaClientId@@ -56,10 +58,12 @@ -- -- /See:/ 'initiateAuth' smart constructor. data InitiateAuth = InitiateAuth'-  { _iaClientMetadata :: !(Maybe (Map Text Text))-  , _iaAuthParameters :: !(Maybe (Map Text Text))-  , _iaAuthFlow       :: !AuthFlowType-  , _iaClientId       :: !(Sensitive Text)+  { _iaClientMetadata    :: !(Maybe (Map Text Text))+  , _iaAnalyticsMetadata :: !(Maybe AnalyticsMetadataType)+  , _iaUserContextData   :: !(Maybe UserContextDataType)+  , _iaAuthParameters    :: !(Maybe (Map Text Text))+  , _iaAuthFlow          :: !AuthFlowType+  , _iaClientId          :: !(Sensitive Text)   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -69,10 +73,14 @@ -- -- * 'iaClientMetadata' - This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. ----- * 'iaAuthParameters' - The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+-- * 'iaAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @InitiateAuth@ calls. ----- * 'iaAuthFlow' - The authentication flow for this call to execute. The API action will depend on this value. For example:      * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow. @ADMIN_NO_SRP_AUTH@ is not a valid value.+-- * 'iaUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security. --+-- * 'iaAuthParameters' - The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @REFRESH_TOKEN@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+--+-- * 'iaAuthFlow' - The authentication flow for this call to execute. The API action will depend on this value. For example:      * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution.     * @USER_PASSWORD_AUTH@ will take in @USERNAME@ and @PASSWORD@ and return the next challenge or tokens. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @USER_PASSWORD_AUTH@ : Non-SRP authentication flow; USERNAME and PASSWORD are passed directly. If a user migration Lambda trigger is set, this flow will invoke the user migration Lambda if the USERNAME is not found in the user pool.  @ADMIN_NO_SRP_AUTH@ is not a valid value.+-- -- * 'iaClientId' - The app client ID. initiateAuth     :: AuthFlowType -- ^ 'iaAuthFlow'@@ -80,28 +88,38 @@     -> InitiateAuth initiateAuth pAuthFlow_ pClientId_ =   InitiateAuth'-  { _iaClientMetadata = Nothing-  , _iaAuthParameters = Nothing-  , _iaAuthFlow = pAuthFlow_-  , _iaClientId = _Sensitive # pClientId_-  }+    { _iaClientMetadata = Nothing+    , _iaAnalyticsMetadata = Nothing+    , _iaUserContextData = Nothing+    , _iaAuthParameters = Nothing+    , _iaAuthFlow = pAuthFlow_+    , _iaClientId = _Sensitive # pClientId_+    }   -- | This is a random key-value pair map which can contain any key and will be passed to your PreAuthentication Lambda trigger as-is. It can be used to implement additional validations around authentication. iaClientMetadata :: Lens' InitiateAuth (HashMap Text Text)-iaClientMetadata = lens _iaClientMetadata (\ s a -> s{_iaClientMetadata = a}) . _Default . _Map;+iaClientMetadata = lens _iaClientMetadata (\ s a -> s{_iaClientMetadata = a}) . _Default . _Map --- | The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @USERNAME@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @REFRESH_TOKEN@ (required), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@+-- | The Amazon Pinpoint analytics metadata for collecting metrics for @InitiateAuth@ calls.+iaAnalyticsMetadata :: Lens' InitiateAuth (Maybe AnalyticsMetadataType)+iaAnalyticsMetadata = lens _iaAnalyticsMetadata (\ s a -> s{_iaAnalyticsMetadata = a})++-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+iaUserContextData :: Lens' InitiateAuth (Maybe UserContextDataType)+iaUserContextData = lens _iaUserContextData (\ s a -> s{_iaUserContextData = a})++-- | The authentication parameters. These are inputs corresponding to the @AuthFlow@ that you are invoking. The required values depend on the value of @AuthFlow@ :     * For @USER_SRP_AUTH@ : @USERNAME@ (required), @SRP_A@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @REFRESH_TOKEN_AUTH/REFRESH_TOKEN@ : @REFRESH_TOKEN@ (required), @SECRET_HASH@ (required if the app client is configured with a client secret), @DEVICE_KEY@      * For @CUSTOM_AUTH@ : @USERNAME@ (required), @SECRET_HASH@ (if app client is configured with client secret), @DEVICE_KEY@ iaAuthParameters :: Lens' InitiateAuth (HashMap Text Text)-iaAuthParameters = lens _iaAuthParameters (\ s a -> s{_iaAuthParameters = a}) . _Default . _Map;+iaAuthParameters = lens _iaAuthParameters (\ s a -> s{_iaAuthParameters = a}) . _Default . _Map --- | The authentication flow for this call to execute. The API action will depend on this value. For example:      * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow. @ADMIN_NO_SRP_AUTH@ is not a valid value.+-- | The authentication flow for this call to execute. The API action will depend on this value. For example:      * @REFRESH_TOKEN_AUTH@ will take in a valid refresh token and return new tokens.     * @USER_SRP_AUTH@ will take in @USERNAME@ and @SRP_A@ and return the SRP variables to be used for next challenge execution.     * @USER_PASSWORD_AUTH@ will take in @USERNAME@ and @PASSWORD@ and return the next challenge or tokens. Valid values include:     * @USER_SRP_AUTH@ : Authentication flow for the Secure Remote Password (SRP) protocol.     * @REFRESH_TOKEN_AUTH@ /@REFRESH_TOKEN@ : Authentication flow for refreshing the access token and ID token by supplying a valid refresh token.     * @CUSTOM_AUTH@ : Custom authentication flow.     * @USER_PASSWORD_AUTH@ : Non-SRP authentication flow; USERNAME and PASSWORD are passed directly. If a user migration Lambda trigger is set, this flow will invoke the user migration Lambda if the USERNAME is not found in the user pool.  @ADMIN_NO_SRP_AUTH@ is not a valid value. iaAuthFlow :: Lens' InitiateAuth AuthFlowType-iaAuthFlow = lens _iaAuthFlow (\ s a -> s{_iaAuthFlow = a});+iaAuthFlow = lens _iaAuthFlow (\ s a -> s{_iaAuthFlow = a})  -- | The app client ID. iaClientId :: Lens' InitiateAuth Text-iaClientId = lens _iaClientId (\ s a -> s{_iaClientId = a}) . _Sensitive;+iaClientId = lens _iaClientId (\ s a -> s{_iaClientId = a}) . _Sensitive  instance AWSRequest InitiateAuth where         type Rs InitiateAuth = InitiateAuthResponse@@ -135,6 +153,8 @@           = object               (catMaybes                  [("ClientMetadata" .=) <$> _iaClientMetadata,+                  ("AnalyticsMetadata" .=) <$> _iaAnalyticsMetadata,+                  ("UserContextData" .=) <$> _iaUserContextData,                   ("AuthParameters" .=) <$> _iaAuthParameters,                   Just ("AuthFlow" .= _iaAuthFlow),                   Just ("ClientId" .= _iaClientId)])@@ -169,7 +189,7 @@ -- -- * 'iarsAuthenticationResult' - The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. ----- * 'iarsSession' - The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- * 'iarsSession' - The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'iarsResponseStatus' - -- | The response status code. initiateAuthResponse@@ -177,32 +197,32 @@     -> InitiateAuthResponse initiateAuthResponse pResponseStatus_ =   InitiateAuthResponse'-  { _iarsChallengeName = Nothing-  , _iarsChallengeParameters = Nothing-  , _iarsAuthenticationResult = Nothing-  , _iarsSession = Nothing-  , _iarsResponseStatus = pResponseStatus_-  }+    { _iarsChallengeName = Nothing+    , _iarsChallengeParameters = Nothing+    , _iarsAuthenticationResult = Nothing+    , _iarsSession = Nothing+    , _iarsResponseStatus = pResponseStatus_+    }   -- | The name of the challenge which you are responding to with this call. This is returned to you in the @AdminInitiateAuth@ response if you need to pass another challenge. Valid values include the following. Note that all of these challenges require @USERNAME@ and @SECRET_HASH@ (if applicable) in the parameters.     * @SMS_MFA@ : Next challenge is to supply an @SMS_MFA_CODE@ , delivered via SMS.     * @PASSWORD_VERIFIER@ : Next challenge is to supply @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , and @TIMESTAMP@ after the client-side SRP calculations.     * @CUSTOM_CHALLENGE@ : This is returned if your custom authentication flow determines that the user should pass another challenge before tokens are issued.     * @DEVICE_SRP_AUTH@ : If device tracking was enabled on your user pool and the previous challenges were passed, this challenge is returned so that Amazon Cognito can start tracking this device.     * @DEVICE_PASSWORD_VERIFIER@ : Similar to @PASSWORD_VERIFIER@ , but for devices only.     * @NEW_PASSWORD_REQUIRED@ : For users which are required to change their passwords after successful first login. This challenge should be passed with @NEW_PASSWORD@ and any other required attributes. iarsChallengeName :: Lens' InitiateAuthResponse (Maybe ChallengeNameType)-iarsChallengeName = lens _iarsChallengeName (\ s a -> s{_iarsChallengeName = a});+iarsChallengeName = lens _iarsChallengeName (\ s a -> s{_iarsChallengeName = a})  -- | The challenge parameters. These are returned to you in the @InitiateAuth@ response if you need to pass another challenge. The responses in this parameter should be used to compute inputs to the next call (@RespondToAuthChallenge@ ).  All challenges require @USERNAME@ and @SECRET_HASH@ (if applicable). iarsChallengeParameters :: Lens' InitiateAuthResponse (HashMap Text Text)-iarsChallengeParameters = lens _iarsChallengeParameters (\ s a -> s{_iarsChallengeParameters = a}) . _Default . _Map;+iarsChallengeParameters = lens _iarsChallengeParameters (\ s a -> s{_iarsChallengeParameters = a}) . _Default . _Map  -- | The result of the authentication response. This is only returned if the caller does not need to pass another challenge. If the caller does need to pass another challenge before it gets tokens, @ChallengeName@ , @ChallengeParameters@ , and @Session@ are returned. iarsAuthenticationResult :: Lens' InitiateAuthResponse (Maybe AuthenticationResultType)-iarsAuthenticationResult = lens _iarsAuthenticationResult (\ s a -> s{_iarsAuthenticationResult = a});+iarsAuthenticationResult = lens _iarsAuthenticationResult (\ s a -> s{_iarsAuthenticationResult = a}) --- | The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- | The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. iarsSession :: Lens' InitiateAuthResponse (Maybe Text)-iarsSession = lens _iarsSession (\ s a -> s{_iarsSession = a});+iarsSession = lens _iarsSession (\ s a -> s{_iarsSession = a})  -- | -- | The response status code. iarsResponseStatus :: Lens' InitiateAuthResponse Int-iarsResponseStatus = lens _iarsResponseStatus (\ s a -> s{_iarsResponseStatus = a});+iarsResponseStatus = lens _iarsResponseStatus (\ s a -> s{_iarsResponseStatus = a})  instance NFData InitiateAuthResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListDevices--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -73,23 +73,23 @@     -> ListDevices listDevices pAccessToken_ =   ListDevices'-  { _ldPaginationToken = Nothing-  , _ldLimit = Nothing-  , _ldAccessToken = _Sensitive # pAccessToken_-  }+    { _ldPaginationToken = Nothing+    , _ldLimit = Nothing+    , _ldAccessToken = _Sensitive # pAccessToken_+    }   -- | The pagination token for the list request. ldPaginationToken :: Lens' ListDevices (Maybe Text)-ldPaginationToken = lens _ldPaginationToken (\ s a -> s{_ldPaginationToken = a});+ldPaginationToken = lens _ldPaginationToken (\ s a -> s{_ldPaginationToken = a})  -- | The limit of the device request. ldLimit :: Lens' ListDevices (Maybe Natural)-ldLimit = lens _ldLimit (\ s a -> s{_ldLimit = a}) . mapping _Nat;+ldLimit = lens _ldLimit (\ s a -> s{_ldLimit = a}) . mapping _Nat  -- | The access tokens for the request to list devices. ldAccessToken :: Lens' ListDevices Text-ldAccessToken = lens _ldAccessToken (\ s a -> s{_ldAccessToken = a}) . _Sensitive;+ldAccessToken = lens _ldAccessToken (\ s a -> s{_ldAccessToken = a}) . _Sensitive  instance AWSRequest ListDevices where         type Rs ListDevices = ListDevicesResponse@@ -156,22 +156,22 @@     -> ListDevicesResponse listDevicesResponse pResponseStatus_ =   ListDevicesResponse'-  { _ldrsPaginationToken = Nothing-  , _ldrsDevices = Nothing-  , _ldrsResponseStatus = pResponseStatus_-  }+    { _ldrsPaginationToken = Nothing+    , _ldrsDevices = Nothing+    , _ldrsResponseStatus = pResponseStatus_+    }   -- | The pagination token for the list device response. ldrsPaginationToken :: Lens' ListDevicesResponse (Maybe Text)-ldrsPaginationToken = lens _ldrsPaginationToken (\ s a -> s{_ldrsPaginationToken = a});+ldrsPaginationToken = lens _ldrsPaginationToken (\ s a -> s{_ldrsPaginationToken = a})  -- | The devices returned in the list devices response. ldrsDevices :: Lens' ListDevicesResponse [DeviceType]-ldrsDevices = lens _ldrsDevices (\ s a -> s{_ldrsDevices = a}) . _Default . _Coerce;+ldrsDevices = lens _ldrsDevices (\ s a -> s{_ldrsDevices = a}) . _Default . _Coerce  -- | -- | The response status code. ldrsResponseStatus :: Lens' ListDevicesResponse Int-ldrsResponseStatus = lens _ldrsResponseStatus (\ s a -> s{_ldrsResponseStatus = a});+ldrsResponseStatus = lens _ldrsResponseStatus (\ s a -> s{_ldrsResponseStatus = a})  instance NFData ListDevicesResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListGroups--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -71,20 +71,20 @@     -> ListGroups listGroups pUserPoolId_ =   ListGroups'-  {_lgNextToken = Nothing, _lgLimit = Nothing, _lgUserPoolId = pUserPoolId_}+    {_lgNextToken = Nothing, _lgLimit = Nothing, _lgUserPoolId = pUserPoolId_}   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lgNextToken :: Lens' ListGroups (Maybe Text)-lgNextToken = lens _lgNextToken (\ s a -> s{_lgNextToken = a});+lgNextToken = lens _lgNextToken (\ s a -> s{_lgNextToken = a})  -- | The limit of the request to list groups. lgLimit :: Lens' ListGroups (Maybe Natural)-lgLimit = lens _lgLimit (\ s a -> s{_lgLimit = a}) . mapping _Nat;+lgLimit = lens _lgLimit (\ s a -> s{_lgLimit = a}) . mapping _Nat  -- | The user pool ID for the user pool. lgUserPoolId :: Lens' ListGroups Text-lgUserPoolId = lens _lgUserPoolId (\ s a -> s{_lgUserPoolId = a});+lgUserPoolId = lens _lgUserPoolId (\ s a -> s{_lgUserPoolId = a})  instance AWSRequest ListGroups where         type Rs ListGroups = ListGroupsResponse@@ -146,22 +146,22 @@     -> ListGroupsResponse listGroupsResponse pResponseStatus_ =   ListGroupsResponse'-  { _lgrsGroups = Nothing-  , _lgrsNextToken = Nothing-  , _lgrsResponseStatus = pResponseStatus_-  }+    { _lgrsGroups = Nothing+    , _lgrsNextToken = Nothing+    , _lgrsResponseStatus = pResponseStatus_+    }   -- | The group objects for the groups. lgrsGroups :: Lens' ListGroupsResponse [GroupType]-lgrsGroups = lens _lgrsGroups (\ s a -> s{_lgrsGroups = a}) . _Default . _Coerce;+lgrsGroups = lens _lgrsGroups (\ s a -> s{_lgrsGroups = a}) . _Default . _Coerce  -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lgrsNextToken :: Lens' ListGroupsResponse (Maybe Text)-lgrsNextToken = lens _lgrsNextToken (\ s a -> s{_lgrsNextToken = a});+lgrsNextToken = lens _lgrsNextToken (\ s a -> s{_lgrsNextToken = a})  -- | -- | The response status code. lgrsResponseStatus :: Lens' ListGroupsResponse Int-lgrsResponseStatus = lens _lgrsResponseStatus (\ s a -> s{_lgrsResponseStatus = a});+lgrsResponseStatus = lens _lgrsResponseStatus (\ s a -> s{_lgrsResponseStatus = a})  instance NFData ListGroupsResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListIdentityProviders--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,23 +69,23 @@     -> ListIdentityProviders listIdentityProviders pUserPoolId_ =   ListIdentityProviders'-  { _lipNextToken = Nothing-  , _lipMaxResults = Nothing-  , _lipUserPoolId = pUserPoolId_-  }+    { _lipNextToken = Nothing+    , _lipMaxResults = Nothing+    , _lipUserPoolId = pUserPoolId_+    }   -- | A pagination token. lipNextToken :: Lens' ListIdentityProviders (Maybe Text)-lipNextToken = lens _lipNextToken (\ s a -> s{_lipNextToken = a});+lipNextToken = lens _lipNextToken (\ s a -> s{_lipNextToken = a})  -- | The maximum number of identity providers to return. lipMaxResults :: Lens' ListIdentityProviders (Maybe Natural)-lipMaxResults = lens _lipMaxResults (\ s a -> s{_lipMaxResults = a}) . mapping _Nat;+lipMaxResults = lens _lipMaxResults (\ s a -> s{_lipMaxResults = a}) . mapping _Nat  -- | The user pool ID. lipUserPoolId :: Lens' ListIdentityProviders Text-lipUserPoolId = lens _lipUserPoolId (\ s a -> s{_lipUserPoolId = a});+lipUserPoolId = lens _lipUserPoolId (\ s a -> s{_lipUserPoolId = a})  instance AWSRequest ListIdentityProviders where         type Rs ListIdentityProviders =@@ -148,22 +148,22 @@     -> ListIdentityProvidersResponse listIdentityProvidersResponse pResponseStatus_ =   ListIdentityProvidersResponse'-  { _liprsNextToken = Nothing-  , _liprsResponseStatus = pResponseStatus_-  , _liprsProviders = mempty-  }+    { _liprsNextToken = Nothing+    , _liprsResponseStatus = pResponseStatus_+    , _liprsProviders = mempty+    }   -- | A pagination token. liprsNextToken :: Lens' ListIdentityProvidersResponse (Maybe Text)-liprsNextToken = lens _liprsNextToken (\ s a -> s{_liprsNextToken = a});+liprsNextToken = lens _liprsNextToken (\ s a -> s{_liprsNextToken = a})  -- | -- | The response status code. liprsResponseStatus :: Lens' ListIdentityProvidersResponse Int-liprsResponseStatus = lens _liprsResponseStatus (\ s a -> s{_liprsResponseStatus = a});+liprsResponseStatus = lens _liprsResponseStatus (\ s a -> s{_liprsResponseStatus = a})  -- | A list of identity provider objects. liprsProviders :: Lens' ListIdentityProvidersResponse [ProviderDescription]-liprsProviders = lens _liprsProviders (\ s a -> s{_liprsProviders = a}) . _Coerce;+liprsProviders = lens _liprsProviders (\ s a -> s{_liprsProviders = a}) . _Coerce  instance NFData ListIdentityProvidersResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListResourceServers--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,23 +69,23 @@     -> ListResourceServers listResourceServers pUserPoolId_ =   ListResourceServers'-  { _lrsNextToken = Nothing-  , _lrsMaxResults = Nothing-  , _lrsUserPoolId = pUserPoolId_-  }+    { _lrsNextToken = Nothing+    , _lrsMaxResults = Nothing+    , _lrsUserPoolId = pUserPoolId_+    }   -- | A pagination token. lrsNextToken :: Lens' ListResourceServers (Maybe Text)-lrsNextToken = lens _lrsNextToken (\ s a -> s{_lrsNextToken = a});+lrsNextToken = lens _lrsNextToken (\ s a -> s{_lrsNextToken = a})  -- | The maximum number of resource servers to return. lrsMaxResults :: Lens' ListResourceServers (Maybe Natural)-lrsMaxResults = lens _lrsMaxResults (\ s a -> s{_lrsMaxResults = a}) . mapping _Nat;+lrsMaxResults = lens _lrsMaxResults (\ s a -> s{_lrsMaxResults = a}) . mapping _Nat  -- | The user pool ID for the user pool. lrsUserPoolId :: Lens' ListResourceServers Text-lrsUserPoolId = lens _lrsUserPoolId (\ s a -> s{_lrsUserPoolId = a});+lrsUserPoolId = lens _lrsUserPoolId (\ s a -> s{_lrsUserPoolId = a})  instance AWSRequest ListResourceServers where         type Rs ListResourceServers =@@ -148,22 +148,22 @@     -> ListResourceServersResponse listResourceServersResponse pResponseStatus_ =   ListResourceServersResponse'-  { _lrsrsNextToken = Nothing-  , _lrsrsResponseStatus = pResponseStatus_-  , _lrsrsResourceServers = mempty-  }+    { _lrsrsNextToken = Nothing+    , _lrsrsResponseStatus = pResponseStatus_+    , _lrsrsResourceServers = mempty+    }   -- | A pagination token. lrsrsNextToken :: Lens' ListResourceServersResponse (Maybe Text)-lrsrsNextToken = lens _lrsrsNextToken (\ s a -> s{_lrsrsNextToken = a});+lrsrsNextToken = lens _lrsrsNextToken (\ s a -> s{_lrsrsNextToken = a})  -- | -- | The response status code. lrsrsResponseStatus :: Lens' ListResourceServersResponse Int-lrsrsResponseStatus = lens _lrsrsResponseStatus (\ s a -> s{_lrsrsResponseStatus = a});+lrsrsResponseStatus = lens _lrsrsResponseStatus (\ s a -> s{_lrsrsResponseStatus = a})  -- | The resource servers. lrsrsResourceServers :: Lens' ListResourceServersResponse [ResourceServerType]-lrsrsResourceServers = lens _lrsrsResourceServers (\ s a -> s{_lrsrsResourceServers = a}) . _Coerce;+lrsrsResourceServers = lens _lrsrsResourceServers (\ s a -> s{_lrsrsResourceServers = a}) . _Coerce  instance NFData ListResourceServersResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListUserImportJobs--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -74,23 +74,23 @@     -> ListUserImportJobs listUserImportJobs pUserPoolId_ pMaxResults_ =   ListUserImportJobs'-  { _luijPaginationToken = Nothing-  , _luijUserPoolId = pUserPoolId_-  , _luijMaxResults = _Nat # pMaxResults_-  }+    { _luijPaginationToken = Nothing+    , _luijUserPoolId = pUserPoolId_+    , _luijMaxResults = _Nat # pMaxResults_+    }   -- | An identifier that was returned from the previous call to @ListUserImportJobs@ , which can be used to return the next set of import jobs in the list. luijPaginationToken :: Lens' ListUserImportJobs (Maybe Text)-luijPaginationToken = lens _luijPaginationToken (\ s a -> s{_luijPaginationToken = a});+luijPaginationToken = lens _luijPaginationToken (\ s a -> s{_luijPaginationToken = a})  -- | The user pool ID for the user pool that the users are being imported into. luijUserPoolId :: Lens' ListUserImportJobs Text-luijUserPoolId = lens _luijUserPoolId (\ s a -> s{_luijUserPoolId = a});+luijUserPoolId = lens _luijUserPoolId (\ s a -> s{_luijUserPoolId = a})  -- | The maximum number of import jobs you want the request to return. luijMaxResults :: Lens' ListUserImportJobs Natural-luijMaxResults = lens _luijMaxResults (\ s a -> s{_luijMaxResults = a}) . _Nat;+luijMaxResults = lens _luijMaxResults (\ s a -> s{_luijMaxResults = a}) . _Nat  instance AWSRequest ListUserImportJobs where         type Rs ListUserImportJobs =@@ -158,22 +158,22 @@     -> ListUserImportJobsResponse listUserImportJobsResponse pResponseStatus_ =   ListUserImportJobsResponse'-  { _luijrsPaginationToken = Nothing-  , _luijrsUserImportJobs = Nothing-  , _luijrsResponseStatus = pResponseStatus_-  }+    { _luijrsPaginationToken = Nothing+    , _luijrsUserImportJobs = Nothing+    , _luijrsResponseStatus = pResponseStatus_+    }   -- | An identifier that can be used to return the next set of user import jobs in the list. luijrsPaginationToken :: Lens' ListUserImportJobsResponse (Maybe Text)-luijrsPaginationToken = lens _luijrsPaginationToken (\ s a -> s{_luijrsPaginationToken = a});+luijrsPaginationToken = lens _luijrsPaginationToken (\ s a -> s{_luijrsPaginationToken = a})  -- | The user import jobs. luijrsUserImportJobs :: Lens' ListUserImportJobsResponse (Maybe (NonEmpty UserImportJobType))-luijrsUserImportJobs = lens _luijrsUserImportJobs (\ s a -> s{_luijrsUserImportJobs = a}) . mapping _List1;+luijrsUserImportJobs = lens _luijrsUserImportJobs (\ s a -> s{_luijrsUserImportJobs = a}) . mapping _List1  -- | -- | The response status code. luijrsResponseStatus :: Lens' ListUserImportJobsResponse Int-luijrsResponseStatus = lens _luijrsResponseStatus (\ s a -> s{_luijrsResponseStatus = a});+luijrsResponseStatus = lens _luijrsResponseStatus (\ s a -> s{_luijrsResponseStatus = a})  instance NFData ListUserImportJobsResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListUserPoolClients--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -73,23 +73,23 @@     -> ListUserPoolClients listUserPoolClients pUserPoolId_ =   ListUserPoolClients'-  { _lupcNextToken = Nothing-  , _lupcMaxResults = Nothing-  , _lupcUserPoolId = pUserPoolId_-  }+    { _lupcNextToken = Nothing+    , _lupcMaxResults = Nothing+    , _lupcUserPoolId = pUserPoolId_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lupcNextToken :: Lens' ListUserPoolClients (Maybe Text)-lupcNextToken = lens _lupcNextToken (\ s a -> s{_lupcNextToken = a});+lupcNextToken = lens _lupcNextToken (\ s a -> s{_lupcNextToken = a})  -- | The maximum number of results you want the request to return when listing the user pool clients. lupcMaxResults :: Lens' ListUserPoolClients (Maybe Natural)-lupcMaxResults = lens _lupcMaxResults (\ s a -> s{_lupcMaxResults = a}) . mapping _Nat;+lupcMaxResults = lens _lupcMaxResults (\ s a -> s{_lupcMaxResults = a}) . mapping _Nat  -- | The user pool ID for the user pool where you want to list user pool clients. lupcUserPoolId :: Lens' ListUserPoolClients Text-lupcUserPoolId = lens _lupcUserPoolId (\ s a -> s{_lupcUserPoolId = a});+lupcUserPoolId = lens _lupcUserPoolId (\ s a -> s{_lupcUserPoolId = a})  instance AWSRequest ListUserPoolClients where         type Rs ListUserPoolClients =@@ -157,22 +157,22 @@     -> ListUserPoolClientsResponse listUserPoolClientsResponse pResponseStatus_ =   ListUserPoolClientsResponse'-  { _lupcrsNextToken = Nothing-  , _lupcrsUserPoolClients = Nothing-  , _lupcrsResponseStatus = pResponseStatus_-  }+    { _lupcrsNextToken = Nothing+    , _lupcrsUserPoolClients = Nothing+    , _lupcrsResponseStatus = pResponseStatus_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lupcrsNextToken :: Lens' ListUserPoolClientsResponse (Maybe Text)-lupcrsNextToken = lens _lupcrsNextToken (\ s a -> s{_lupcrsNextToken = a});+lupcrsNextToken = lens _lupcrsNextToken (\ s a -> s{_lupcrsNextToken = a})  -- | The user pool clients in the response that lists user pool clients. lupcrsUserPoolClients :: Lens' ListUserPoolClientsResponse [UserPoolClientDescription]-lupcrsUserPoolClients = lens _lupcrsUserPoolClients (\ s a -> s{_lupcrsUserPoolClients = a}) . _Default . _Coerce;+lupcrsUserPoolClients = lens _lupcrsUserPoolClients (\ s a -> s{_lupcrsUserPoolClients = a}) . _Default . _Coerce  -- | -- | The response status code. lupcrsResponseStatus :: Lens' ListUserPoolClientsResponse Int-lupcrsResponseStatus = lens _lupcrsResponseStatus (\ s a -> s{_lupcrsResponseStatus = a});+lupcrsResponseStatus = lens _lupcrsResponseStatus (\ s a -> s{_lupcrsResponseStatus = a})  instance NFData ListUserPoolClientsResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListUserPools--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -73,11 +73,11 @@  -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lupNextToken :: Lens' ListUserPools (Maybe Text)-lupNextToken = lens _lupNextToken (\ s a -> s{_lupNextToken = a});+lupNextToken = lens _lupNextToken (\ s a -> s{_lupNextToken = a})  -- | The maximum number of results you want the request to return when listing the user pools. lupMaxResults :: Lens' ListUserPools Natural-lupMaxResults = lens _lupMaxResults (\ s a -> s{_lupMaxResults = a}) . _Nat;+lupMaxResults = lens _lupMaxResults (\ s a -> s{_lupMaxResults = a}) . _Nat  instance AWSRequest ListUserPools where         type Rs ListUserPools = ListUserPoolsResponse@@ -143,22 +143,22 @@     -> ListUserPoolsResponse listUserPoolsResponse pResponseStatus_ =   ListUserPoolsResponse'-  { _luprsUserPools = Nothing-  , _luprsNextToken = Nothing-  , _luprsResponseStatus = pResponseStatus_-  }+    { _luprsUserPools = Nothing+    , _luprsNextToken = Nothing+    , _luprsResponseStatus = pResponseStatus_+    }   -- | The user pools from the response to list users. luprsUserPools :: Lens' ListUserPoolsResponse [UserPoolDescriptionType]-luprsUserPools = lens _luprsUserPools (\ s a -> s{_luprsUserPools = a}) . _Default . _Coerce;+luprsUserPools = lens _luprsUserPools (\ s a -> s{_luprsUserPools = a}) . _Default . _Coerce  -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. luprsNextToken :: Lens' ListUserPoolsResponse (Maybe Text)-luprsNextToken = lens _luprsNextToken (\ s a -> s{_luprsNextToken = a});+luprsNextToken = lens _luprsNextToken (\ s a -> s{_luprsNextToken = a})  -- | -- | The response status code. luprsResponseStatus :: Lens' ListUserPoolsResponse Int-luprsResponseStatus = lens _luprsResponseStatus (\ s a -> s{_luprsResponseStatus = a});+luprsResponseStatus = lens _luprsResponseStatus (\ s a -> s{_luprsResponseStatus = a})  instance NFData ListUserPoolsResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListUsers--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -69,11 +69,11 @@ -- -- * 'luPaginationToken' - An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. ----- * 'luAttributesToGet' - An array of strings, where each string is the name of a user attribute to be returned for each user in the search results. If the array is empty, all attributes are returned.+-- * 'luAttributesToGet' - An array of strings, where each string is the name of a user attribute to be returned for each user in the search results. If the array is null, all attributes are returned. -- -- * 'luLimit' - Maximum number of users to be returned. ----- * 'luFilter' - A filter string of the form "/AttributeName/ /Filter-Type/ "/AttributeValue/ "". Quotation marks within the filter string must be escaped using the backslash (\) character. For example, "@family_name@ = \"Reddy\"".     * /AttributeName/ : The name of the attribute to search for. You can only search for one attribute at a time.     * /Filter-Type/ : For an exact match, use =, for example, "@given_name@ = \"Jon\"". For a prefix ("starts with") match, use ^=, for example, "@given_name@ ^= \"Jon\"".      * /AttributeValue/ : The attribute value that must be matched for each user. If the filter string is empty, @ListUsers@ returns all users in the user pool. You can only search for the following standard attributes:     * @username@ (case-sensitive)     * @email@      * @phone_number@      * @name@      * @given_name@      * @family_name@      * @preferred_username@      * @cognito:user_status@ (called __Enabled__ in the Console) (case-sensitive)     * @status@ (case-insensitive) Custom attributes are not searchable. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-using-listusers-api Searching for Users Using the ListUsers API> and <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-listusers-api-examples Examples of Using the ListUsers API> in the /Amazon Cognito Developer Guide/ .+-- * 'luFilter' - A filter string of the form "/AttributeName/ /Filter-Type/ "/AttributeValue/ "". Quotation marks within the filter string must be escaped using the backslash (\) character. For example, "@family_name@ = \"Reddy\"".     * /AttributeName/ : The name of the attribute to search for. You can only search for one attribute at a time.     * /Filter-Type/ : For an exact match, use =, for example, "@given_name@ = \"Jon\"". For a prefix ("starts with") match, use ^=, for example, "@given_name@ ^= \"Jon\"".      * /AttributeValue/ : The attribute value that must be matched for each user. If the filter string is empty, @ListUsers@ returns all users in the user pool. You can only search for the following standard attributes:     * @username@ (case-sensitive)     * @email@      * @phone_number@      * @name@      * @given_name@      * @family_name@      * @preferred_username@      * @cognito:user_status@ (called __Enabled__ in the Console) (case-sensitive)     * @status@ (case-insensitive)     * @sub@  Custom attributes are not searchable. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-using-listusers-api Searching for Users Using the ListUsers API> and <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-listusers-api-examples Examples of Using the ListUsers API> in the /Amazon Cognito Developer Guide/ . -- -- * 'luUserPoolId' - The user pool ID for the user pool on which the search should be performed. listUsers@@ -81,33 +81,33 @@     -> ListUsers listUsers pUserPoolId_ =   ListUsers'-  { _luPaginationToken = Nothing-  , _luAttributesToGet = Nothing-  , _luLimit = Nothing-  , _luFilter = Nothing-  , _luUserPoolId = pUserPoolId_-  }+    { _luPaginationToken = Nothing+    , _luAttributesToGet = Nothing+    , _luLimit = Nothing+    , _luFilter = Nothing+    , _luUserPoolId = pUserPoolId_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. luPaginationToken :: Lens' ListUsers (Maybe Text)-luPaginationToken = lens _luPaginationToken (\ s a -> s{_luPaginationToken = a});+luPaginationToken = lens _luPaginationToken (\ s a -> s{_luPaginationToken = a}) --- | An array of strings, where each string is the name of a user attribute to be returned for each user in the search results. If the array is empty, all attributes are returned.+-- | An array of strings, where each string is the name of a user attribute to be returned for each user in the search results. If the array is null, all attributes are returned. luAttributesToGet :: Lens' ListUsers [Text]-luAttributesToGet = lens _luAttributesToGet (\ s a -> s{_luAttributesToGet = a}) . _Default . _Coerce;+luAttributesToGet = lens _luAttributesToGet (\ s a -> s{_luAttributesToGet = a}) . _Default . _Coerce  -- | Maximum number of users to be returned. luLimit :: Lens' ListUsers (Maybe Natural)-luLimit = lens _luLimit (\ s a -> s{_luLimit = a}) . mapping _Nat;+luLimit = lens _luLimit (\ s a -> s{_luLimit = a}) . mapping _Nat --- | A filter string of the form "/AttributeName/ /Filter-Type/ "/AttributeValue/ "". Quotation marks within the filter string must be escaped using the backslash (\) character. For example, "@family_name@ = \"Reddy\"".     * /AttributeName/ : The name of the attribute to search for. You can only search for one attribute at a time.     * /Filter-Type/ : For an exact match, use =, for example, "@given_name@ = \"Jon\"". For a prefix ("starts with") match, use ^=, for example, "@given_name@ ^= \"Jon\"".      * /AttributeValue/ : The attribute value that must be matched for each user. If the filter string is empty, @ListUsers@ returns all users in the user pool. You can only search for the following standard attributes:     * @username@ (case-sensitive)     * @email@      * @phone_number@      * @name@      * @given_name@      * @family_name@      * @preferred_username@      * @cognito:user_status@ (called __Enabled__ in the Console) (case-sensitive)     * @status@ (case-insensitive) Custom attributes are not searchable. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-using-listusers-api Searching for Users Using the ListUsers API> and <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-listusers-api-examples Examples of Using the ListUsers API> in the /Amazon Cognito Developer Guide/ .+-- | A filter string of the form "/AttributeName/ /Filter-Type/ "/AttributeValue/ "". Quotation marks within the filter string must be escaped using the backslash (\) character. For example, "@family_name@ = \"Reddy\"".     * /AttributeName/ : The name of the attribute to search for. You can only search for one attribute at a time.     * /Filter-Type/ : For an exact match, use =, for example, "@given_name@ = \"Jon\"". For a prefix ("starts with") match, use ^=, for example, "@given_name@ ^= \"Jon\"".      * /AttributeValue/ : The attribute value that must be matched for each user. If the filter string is empty, @ListUsers@ returns all users in the user pool. You can only search for the following standard attributes:     * @username@ (case-sensitive)     * @email@      * @phone_number@      * @name@      * @given_name@      * @family_name@      * @preferred_username@      * @cognito:user_status@ (called __Enabled__ in the Console) (case-sensitive)     * @status@ (case-insensitive)     * @sub@  Custom attributes are not searchable. For more information, see <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-using-listusers-api Searching for Users Using the ListUsers API> and <http://docs.aws.amazon.com/cognito/latest/developerguide/how-to-manage-user-accounts.html#cognito-user-pools-searching-for-users-listusers-api-examples Examples of Using the ListUsers API> in the /Amazon Cognito Developer Guide/ . luFilter :: Lens' ListUsers (Maybe Text)-luFilter = lens _luFilter (\ s a -> s{_luFilter = a});+luFilter = lens _luFilter (\ s a -> s{_luFilter = a})  -- | The user pool ID for the user pool on which the search should be performed. luUserPoolId :: Lens' ListUsers Text-luUserPoolId = lens _luUserPoolId (\ s a -> s{_luUserPoolId = a});+luUserPoolId = lens _luUserPoolId (\ s a -> s{_luUserPoolId = a})  instance AWSRequest ListUsers where         type Rs ListUsers = ListUsersResponse@@ -176,22 +176,22 @@     -> ListUsersResponse listUsersResponse pResponseStatus_ =   ListUsersResponse'-  { _lursPaginationToken = Nothing-  , _lursUsers = Nothing-  , _lursResponseStatus = pResponseStatus_-  }+    { _lursPaginationToken = Nothing+    , _lursUsers = Nothing+    , _lursResponseStatus = pResponseStatus_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. lursPaginationToken :: Lens' ListUsersResponse (Maybe Text)-lursPaginationToken = lens _lursPaginationToken (\ s a -> s{_lursPaginationToken = a});+lursPaginationToken = lens _lursPaginationToken (\ s a -> s{_lursPaginationToken = a})  -- | The users returned in the request to list users. lursUsers :: Lens' ListUsersResponse [UserType]-lursUsers = lens _lursUsers (\ s a -> s{_lursUsers = a}) . _Default . _Coerce;+lursUsers = lens _lursUsers (\ s a -> s{_lursUsers = a}) . _Default . _Coerce  -- | -- | The response status code. lursResponseStatus :: Lens' ListUsersResponse Int-lursResponseStatus = lens _lursResponseStatus (\ s a -> s{_lursResponseStatus = a});+lursResponseStatus = lens _lursResponseStatus (\ s a -> s{_lursResponseStatus = a})  instance NFData ListUsersResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ListUsersInGroup--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -76,28 +76,28 @@     -> ListUsersInGroup listUsersInGroup pUserPoolId_ pGroupName_ =   ListUsersInGroup'-  { _luigNextToken = Nothing-  , _luigLimit = Nothing-  , _luigUserPoolId = pUserPoolId_-  , _luigGroupName = pGroupName_-  }+    { _luigNextToken = Nothing+    , _luigLimit = Nothing+    , _luigUserPoolId = pUserPoolId_+    , _luigGroupName = pGroupName_+    }   -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. luigNextToken :: Lens' ListUsersInGroup (Maybe Text)-luigNextToken = lens _luigNextToken (\ s a -> s{_luigNextToken = a});+luigNextToken = lens _luigNextToken (\ s a -> s{_luigNextToken = a})  -- | The limit of the request to list users. luigLimit :: Lens' ListUsersInGroup (Maybe Natural)-luigLimit = lens _luigLimit (\ s a -> s{_luigLimit = a}) . mapping _Nat;+luigLimit = lens _luigLimit (\ s a -> s{_luigLimit = a}) . mapping _Nat  -- | The user pool ID for the user pool. luigUserPoolId :: Lens' ListUsersInGroup Text-luigUserPoolId = lens _luigUserPoolId (\ s a -> s{_luigUserPoolId = a});+luigUserPoolId = lens _luigUserPoolId (\ s a -> s{_luigUserPoolId = a})  -- | The name of the group. luigGroupName :: Lens' ListUsersInGroup Text-luigGroupName = lens _luigGroupName (\ s a -> s{_luigGroupName = a});+luigGroupName = lens _luigGroupName (\ s a -> s{_luigGroupName = a})  instance AWSRequest ListUsersInGroup where         type Rs ListUsersInGroup = ListUsersInGroupResponse@@ -160,22 +160,22 @@     -> ListUsersInGroupResponse listUsersInGroupResponse pResponseStatus_ =   ListUsersInGroupResponse'-  { _luigrsUsers = Nothing-  , _luigrsNextToken = Nothing-  , _luigrsResponseStatus = pResponseStatus_-  }+    { _luigrsUsers = Nothing+    , _luigrsNextToken = Nothing+    , _luigrsResponseStatus = pResponseStatus_+    }   -- | The users returned in the request to list users. luigrsUsers :: Lens' ListUsersInGroupResponse [UserType]-luigrsUsers = lens _luigrsUsers (\ s a -> s{_luigrsUsers = a}) . _Default . _Coerce;+luigrsUsers = lens _luigrsUsers (\ s a -> s{_luigrsUsers = a}) . _Default . _Coerce  -- | An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. luigrsNextToken :: Lens' ListUsersInGroupResponse (Maybe Text)-luigrsNextToken = lens _luigrsNextToken (\ s a -> s{_luigrsNextToken = a});+luigrsNextToken = lens _luigrsNextToken (\ s a -> s{_luigrsNextToken = a})  -- | -- | The response status code. luigrsResponseStatus :: Lens' ListUsersInGroupResponse Int-luigrsResponseStatus = lens _luigrsResponseStatus (\ s a -> s{_luigrsResponseStatus = a});+luigrsResponseStatus = lens _luigrsResponseStatus (\ s a -> s{_luigrsResponseStatus = a})  instance NFData ListUsersInGroupResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.ResendConfirmationCode--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -27,6 +27,8 @@       resendConfirmationCode     , ResendConfirmationCode     -- * Request Lenses+    , rccAnalyticsMetadata+    , rccUserContextData     , rccSecretHash     , rccClientId     , rccUsername@@ -52,9 +54,11 @@ -- -- /See:/ 'resendConfirmationCode' smart constructor. data ResendConfirmationCode = ResendConfirmationCode'-  { _rccSecretHash :: !(Maybe (Sensitive Text))-  , _rccClientId   :: !(Sensitive Text)-  , _rccUsername   :: !(Sensitive Text)+  { _rccAnalyticsMetadata :: !(Maybe AnalyticsMetadataType)+  , _rccUserContextData   :: !(Maybe UserContextDataType)+  , _rccSecretHash        :: !(Maybe (Sensitive Text))+  , _rccClientId          :: !(Sensitive Text)+  , _rccUsername          :: !(Sensitive Text)   } deriving (Eq, Show, Data, Typeable, Generic)  @@ -62,6 +66,10 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'rccAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @ResendConfirmationCode@ calls.+--+-- * 'rccUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+-- -- * 'rccSecretHash' - A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. -- -- * 'rccClientId' - The ID of the client associated with the user pool.@@ -73,23 +81,33 @@     -> ResendConfirmationCode resendConfirmationCode pClientId_ pUsername_ =   ResendConfirmationCode'-  { _rccSecretHash = Nothing-  , _rccClientId = _Sensitive # pClientId_-  , _rccUsername = _Sensitive # pUsername_-  }+    { _rccAnalyticsMetadata = Nothing+    , _rccUserContextData = Nothing+    , _rccSecretHash = Nothing+    , _rccClientId = _Sensitive # pClientId_+    , _rccUsername = _Sensitive # pUsername_+    }  +-- | The Amazon Pinpoint analytics metadata for collecting metrics for @ResendConfirmationCode@ calls.+rccAnalyticsMetadata :: Lens' ResendConfirmationCode (Maybe AnalyticsMetadataType)+rccAnalyticsMetadata = lens _rccAnalyticsMetadata (\ s a -> s{_rccAnalyticsMetadata = a})++-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+rccUserContextData :: Lens' ResendConfirmationCode (Maybe UserContextDataType)+rccUserContextData = lens _rccUserContextData (\ s a -> s{_rccUserContextData = a})+ -- | A keyed-hash message authentication code (HMAC) calculated using the secret key of a user pool client and username plus the client ID in the message. rccSecretHash :: Lens' ResendConfirmationCode (Maybe Text)-rccSecretHash = lens _rccSecretHash (\ s a -> s{_rccSecretHash = a}) . mapping _Sensitive;+rccSecretHash = lens _rccSecretHash (\ s a -> s{_rccSecretHash = a}) . mapping _Sensitive  -- | The ID of the client associated with the user pool. rccClientId :: Lens' ResendConfirmationCode Text-rccClientId = lens _rccClientId (\ s a -> s{_rccClientId = a}) . _Sensitive;+rccClientId = lens _rccClientId (\ s a -> s{_rccClientId = a}) . _Sensitive  -- | The user name of the user to whom you wish to resend a confirmation code. rccUsername :: Lens' ResendConfirmationCode Text-rccUsername = lens _rccUsername (\ s a -> s{_rccUsername = a}) . _Sensitive;+rccUsername = lens _rccUsername (\ s a -> s{_rccUsername = a}) . _Sensitive  instance AWSRequest ResendConfirmationCode where         type Rs ResendConfirmationCode =@@ -120,7 +138,9 @@         toJSON ResendConfirmationCode'{..}           = object               (catMaybes-                 [("SecretHash" .=) <$> _rccSecretHash,+                 [("AnalyticsMetadata" .=) <$> _rccAnalyticsMetadata,+                  ("UserContextData" .=) <$> _rccUserContextData,+                  ("SecretHash" .=) <$> _rccSecretHash,                   Just ("ClientId" .= _rccClientId),                   Just ("Username" .= _rccUsername)]) @@ -153,15 +173,17 @@     -> ResendConfirmationCodeResponse resendConfirmationCodeResponse pResponseStatus_ =   ResendConfirmationCodeResponse'-  {_rccrsCodeDeliveryDetails = Nothing, _rccrsResponseStatus = pResponseStatus_}+    { _rccrsCodeDeliveryDetails = Nothing+    , _rccrsResponseStatus = pResponseStatus_+    }   -- | The code delivery details returned by the server in response to the request to resend the confirmation code. rccrsCodeDeliveryDetails :: Lens' ResendConfirmationCodeResponse (Maybe CodeDeliveryDetailsType)-rccrsCodeDeliveryDetails = lens _rccrsCodeDeliveryDetails (\ s a -> s{_rccrsCodeDeliveryDetails = a});+rccrsCodeDeliveryDetails = lens _rccrsCodeDeliveryDetails (\ s a -> s{_rccrsCodeDeliveryDetails = a})  -- | -- | The response status code. rccrsResponseStatus :: Lens' ResendConfirmationCodeResponse Int-rccrsResponseStatus = lens _rccrsResponseStatus (\ s a -> s{_rccrsResponseStatus = a});+rccrsResponseStatus = lens _rccrsResponseStatus (\ s a -> s{_rccrsResponseStatus = a})  instance NFData ResendConfirmationCodeResponse where

@@ -12,7 +12,7 @@  -- | -- Module      : Network.AWS.CognitoIdentityProvider.RespondToAuthChallenge--- Copyright   : (c) 2013-2017 Brendan Hay+-- Copyright   : (c) 2013-2018 Brendan Hay -- License     : Mozilla Public License, v. 2.0. -- Maintainer  : Brendan Hay <brendan.g.hay+amazonka@gmail.com> -- Stability   : auto-generated@@ -27,7 +27,9 @@       respondToAuthChallenge     , RespondToAuthChallenge     -- * Request Lenses+    , rtacAnalyticsMetadata     , rtacChallengeResponses+    , rtacUserContextData     , rtacSession     , rtacClientId     , rtacChallengeName@@ -56,7 +58,9 @@ -- -- /See:/ 'respondToAuthChallenge' smart constructor. data RespondToAuthChallenge = RespondToAuthChallenge'-  { _rtacChallengeResponses :: !(Maybe (Map Text Text))+  { _rtacAnalyticsMetadata  :: !(Maybe AnalyticsMetadataType)+  , _rtacChallengeResponses :: !(Maybe (Map Text Text))+  , _rtacUserContextData    :: !(Maybe UserContextDataType)   , _rtacSession            :: !(Maybe Text)   , _rtacClientId           :: !(Sensitive Text)   , _rtacChallengeName      :: !ChallengeNameType@@ -67,41 +71,55 @@ -- -- Use one of the following lenses to modify other fields as desired: --+-- * 'rtacAnalyticsMetadata' - The Amazon Pinpoint analytics metadata for collecting metrics for @RespondToAuthChallenge@ calls.+-- -- * 'rtacChallengeResponses' - The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret). --+-- * 'rtacUserContextData' - Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+-- -- * 'rtacSession' - The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'rtacClientId' - The app client ID. ----- * 'rtacChallengeName' - The challenge name. For more information, see <API_InitiateAuth.html InitiateAuth> . @ADMIN_NO_SRP_AUTH@ is not a valid value.+-- * 'rtacChallengeName' - The challenge name. For more information, see . @ADMIN_NO_SRP_AUTH@ is not a valid value. respondToAuthChallenge     :: Text -- ^ 'rtacClientId'     -> ChallengeNameType -- ^ 'rtacChallengeName'     -> RespondToAuthChallenge respondToAuthChallenge pClientId_ pChallengeName_ =   RespondToAuthChallenge'-  { _rtacChallengeResponses = Nothing-  , _rtacSession = Nothing-  , _rtacClientId = _Sensitive # pClientId_-  , _rtacChallengeName = pChallengeName_-  }+    { _rtacAnalyticsMetadata = Nothing+    , _rtacChallengeResponses = Nothing+    , _rtacUserContextData = Nothing+    , _rtacSession = Nothing+    , _rtacClientId = _Sensitive # pClientId_+    , _rtacChallengeName = pChallengeName_+    }  +-- | The Amazon Pinpoint analytics metadata for collecting metrics for @RespondToAuthChallenge@ calls.+rtacAnalyticsMetadata :: Lens' RespondToAuthChallenge (Maybe AnalyticsMetadataType)+rtacAnalyticsMetadata = lens _rtacAnalyticsMetadata (\ s a -> s{_rtacAnalyticsMetadata = a})+ -- | The challenge responses. These are inputs corresponding to the value of @ChallengeName@ , for example:     * @SMS_MFA@ : @SMS_MFA_CODE@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @PASSWORD_VERIFIER@ : @PASSWORD_CLAIM_SIGNATURE@ , @PASSWORD_CLAIM_SECRET_BLOCK@ , @TIMESTAMP@ , @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret).     * @NEW_PASSWORD_REQUIRED@ : @NEW_PASSWORD@ , any other required attributes, @USERNAME@ , @SECRET_HASH@ (if app client is configured with client secret). rtacChallengeResponses :: Lens' RespondToAuthChallenge (HashMap Text Text)-rtacChallengeResponses = lens _rtacChallengeResponses (\ s a -> s{_rtacChallengeResponses = a}) . _Default . _Map;+rtacChallengeResponses = lens _rtacChallengeResponses (\ s a -> s{_rtacChallengeResponses = a}) . _Default . _Map +-- | Contextual data such as the user's device fingerprint, IP address, or location used for evaluating the risk of an unexpected event by Amazon Cognito advanced security.+rtacUserContextData :: Lens' RespondToAuthChallenge (Maybe UserContextDataType)+rtacUserContextData = lens _rtacUserContextData (\ s a -> s{_rtacUserContextData = a})+ -- | The session which should be passed both ways in challenge-response calls to the service. If @InitiateAuth@ or @RespondToAuthChallenge@ API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. rtacSession :: Lens' RespondToAuthChallenge (Maybe Text)-rtacSession = lens _rtacSession (\ s a -> s{_rtacSession = a});+rtacSession = lens _rtacSession (\ s a -> s{_rtacSession = a})  -- | The app client ID. rtacClientId :: Lens' RespondToAuthChallenge Text-rtacClientId = lens _rtacClientId (\ s a -> s{_rtacClientId = a}) . _Sensitive;+rtacClientId = lens _rtacClientId (\ s a -> s{_rtacClientId = a}) . _Sensitive --- | The challenge name. For more information, see <API_InitiateAuth.html InitiateAuth> . @ADMIN_NO_SRP_AUTH@ is not a valid value.+-- | The challenge name. For more information, see . @ADMIN_NO_SRP_AUTH@ is not a valid value. rtacChallengeName :: Lens' RespondToAuthChallenge ChallengeNameType-rtacChallengeName = lens _rtacChallengeName (\ s a -> s{_rtacChallengeName = a});+rtacChallengeName = lens _rtacChallengeName (\ s a -> s{_rtacChallengeName = a})  instance AWSRequest RespondToAuthChallenge where         type Rs RespondToAuthChallenge =@@ -135,8 +153,10 @@         toJSON RespondToAuthChallenge'{..}           = object               (catMaybes-                 [("ChallengeResponses" .=) <$>+                 [("AnalyticsMetadata" .=) <$> _rtacAnalyticsMetadata,+                  ("ChallengeResponses" .=) <$>                     _rtacChallengeResponses,+                  ("UserContextData" .=) <$> _rtacUserContextData,                   ("Session" .=) <$> _rtacSession,                   Just ("ClientId" .= _rtacClientId),                   Just ("ChallengeName" .= _rtacChallengeName)])@@ -165,13 +185,13 @@ -- -- Use one of the following lenses to modify other fields as desired: ----- * 'rtacrsChallengeName' - The challenge name. For more information, see <API_InitiateAuth.html InitiateAuth> .+-- * 'rtacrsChallengeName' - The challenge name. For more information, see . ----- * 'rtacrsChallengeParameters' - The challenge parameters. For more information, see <API_InitiateAuth.html InitiateAuth> .+-- * 'rtacrsChallengeParameters' - The challenge parameters. For more information, see . -- -- * 'rtacrsAuthenticationResult' - The result returned by the server in response to the request to respond to the authentication challenge. ----- * 'rtacrsSession' - The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- * 'rtacrsSession' - The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. -- -- * 'rtacrsResponseStatus' - -- | The response status code. respondToAuthChallengeResponse@@ -179,32 +199,32 @@     -> RespondToAuthChallengeResponse respondToAuthChallengeResponse pResponseStatus_ =   RespondToAuthChallengeResponse'-  { _rtacrsChallengeName = Nothing-  , _rtacrsChallengeParameters = Nothing-  , _rtacrsAuthenticationResult = Nothing-  , _rtacrsSession = Nothing-  , _rtacrsResponseStatus = pResponseStatus_-  }+    { _rtacrsChallengeName = Nothing+    , _rtacrsChallengeParameters = Nothing+    , _rtacrsAuthenticationResult = Nothing+    , _rtacrsSession = Nothing+    , _rtacrsResponseStatus = pResponseStatus_+    }  --- | The challenge name. For more information, see <API_InitiateAuth.html InitiateAuth> .+-- | The challenge name. For more information, see . rtacrsChallengeName :: Lens' RespondToAuthChallengeResponse (Maybe ChallengeNameType)-rtacrsChallengeName = lens _rtacrsChallengeName (\ s a -> s{_rtacrsChallengeName = a});+rtacrsChallengeName = lens _rtacrsChallengeName (\ s a -> s{_rtacrsChallengeName = a}) --- | The challenge parameters. For more information, see <API_InitiateAuth.html InitiateAuth> .+-- | The challenge parameters. For more information, see . rtacrsChallengeParameters :: Lens' RespondToAuthChallengeResponse (HashMap Text Text)-rtacrsChallengeParameters = lens _rtacrsChallengeParameters (\ s a -> s{_rtacrsChallengeParameters = a}) . _Default . _Map;+rtacrsChallengeParameters = lens _rtacrsChallengeParameters (\ s a -> s{_rtacrsChallengeParameters = a}) . _Default . _Map  -- | The result returned by the server in response to the request to respond to the authentication challenge. rtacrsAuthenticationResult :: Lens' RespondToAuthChallengeResponse (Maybe AuthenticationResultType)-rtacrsAuthenticationResult = lens _rtacrsAuthenticationResult (\ s a -> s{_rtacrsAuthenticationResult = a});+rtacrsAuthenticationResult = lens _rtacrsAuthenticationResult (\ s a -> s{_rtacrsAuthenticationResult = a}) --- | The session which should be passed both ways in challenge-response calls to the service. If the <API_InitiateAuth.html InitiateAuth> or <API_RespondToAuthChallenge.html RespondToAuthChallenge> API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call.+-- | The session which should be passed both ways in challenge-response calls to the service. If the or API call determines that the caller needs to go through another challenge, they return a session with other challenge parameters. This session should be passed as it is to the next @RespondToAuthChallenge@ API call. rtacrsSession :: Lens' RespondToAuthChallengeResponse (Maybe Text)-rtacrsSession = lens _rtacrsSession (\ s a -> s{_rtacrsSession = a});+rtacrsSession = lens _rtacrsSession (\ s a -> s{_rtacrsSession = a})  -- | -- | The response status code. rtacrsResponseStatus :: Lens' RespondToAuthChallengeResponse Int-rtacrsResponseStatus = lens _rtacrsResponseStatus (\ s a -> s{_rtacrsResponseStatus = a});+rtacrsResponseStatus = lens _rtacrsResponseStatus (\ s a -> s{_rtacrsResponseStatus = a})  instance NFData RespondToAuthChallengeResponse where