{ "$schema": "https://json-schema.org/draft/2020-12/schema", "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-schema/user-pools-update-user-pool-request-schema.json", "title": "UpdateUserPoolRequest", "description": "Represents the request to update the user pool.", "type": "object", "properties": { "UserPoolId": { "allOf": [ { "$ref": "#/components/schemas/UserPoolIdType" }, { "description": "The user pool ID for the user pool you want to update." } ] }, "Policies": { "allOf": [ { "$ref": "#/components/schemas/UserPoolPolicyType" }, { "description": "A container with the policies you want to update in a user pool." } ] }, "DeletionProtection": { "allOf": [ { "$ref": "#/components/schemas/DeletionProtectionType" }, { "description": "
When active, DeletionProtection prevents accidental deletion of your user pool. Before you can delete a user pool that you have protected against deletion, you must deactivate this feature.
When you try to delete a protected user pool in a DeleteUserPool API request, Amazon Cognito returns an InvalidParameterException error. To delete a protected user pool, send a new DeleteUserPool request after you deactivate deletion protection in an UpdateUserPool API request.
AttributesRequireVerificationBeforeUpdate, a user-pool setting that tells Amazon Cognito how to handle changes to the value of your users' email address and phone number attributes. For more information, see Verifying updates to email addresses and phone numbers."
}
]
},
"MfaConfiguration": {
"allOf": [
{
"$ref": "#/components/schemas/UserPoolMfaType"
},
{
"description": "Possible values include:
OFF - MFA tokens aren't required and can't be specified during user registration.
ON - MFA tokens are required for all user registrations. You can only specify ON when you're initially creating a user pool. You can use the SetUserPoolMfaConfig API operation to turn MFA \"ON\" for existing user pools.
OPTIONAL - Users have the option when registering to create an MFA token.
The device-remembering configuration for a user pool. A null value indicates that you have deactivated device remembering in your user pool.
When you provide a value for any DeviceConfiguration field, you activate the Amazon Cognito device-remembering feature.
AdminCreateUser requests."
}
]
},
"UserPoolAddOns": {
"allOf": [
{
"$ref": "#/components/schemas/UserPoolAddOnsType"
},
{
"description": "User pool add-ons. Contains settings for activation of advanced security features. To log user security information but take no action, set to AUDIT. To configure automatic security responses to risky traffic to your user pool, set to ENFORCED.
For more information, see Adding advanced security to a user pool.
" } ] }, "AccountRecoverySetting": { "allOf": [ { "$ref": "#/components/schemas/AccountRecoverySettingType" }, { "description": "The available verified method a user can use to recover their password when they callForgotPassword. You can use this setting to define a preferred method when a user has more than one method available. With this setting, SMS doesn't qualify for a valid password recovery mechanism if the user also has SMS multi-factor authentication (MFA) activated. In the absence of this setting, Amazon Cognito uses the legacy behavior to determine the recovery method where SMS is preferred through email."
}
]
}
},
"required": [
"UserPoolId"
]
}