openapi: 3.0.0 info: version: '2014-06-30' x-release: v4 title: 'Amazon Cognito Identity #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes #X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp API' description: Amazon Cognito Federated Identities

Amazon Cognito Federated Identities is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. It uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito Federated Identities, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon) or an Amazon Cognito user pool, and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

For a description of the authentication flow from the Amazon Cognito Developer Guide see Authentication Flow.

For more information see Amazon Cognito Federated Identities.

x-logo: url: https://twitter.com/awscloud/profile_image?size=original backgroundColor: '#FFFFFF' termsOfService: https://aws.amazon.com/service-terms/ contact: name: Mike Ralphson email: mike.ralphson@gmail.com url: https://github.com/mermade/aws2openapi x-twitter: PermittedSoc license: name: Apache 2.0 License url: http://www.apache.org/licenses/ x-providerName: amazonaws.com x-serviceName: cognito-identity x-origin: - contentType: application/json url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/cognito-identity-2014-06-30.normal.json converter: url: https://github.com/mermade/aws2openapi version: 1.0.0 x-apisguru-driver: external x-apiClientRegistration: url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct x-apisguru-categories: - cloud x-preferred: true servers: - url: http://cognito-identity.{region}.amazonaws.com variables: region: description: The AWS region enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-west-1 - us-gov-east-1 - ca-central-1 - eu-north-1 - eu-west-1 - eu-west-2 - eu-west-3 - eu-central-1 - eu-south-1 - af-south-1 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-east-1 - ap-south-1 - sa-east-1 - me-south-1 default: us-east-1 description: The Amazon Cognito Identity multi-region endpoint - url: https://cognito-identity.{region}.amazonaws.com variables: region: description: The AWS region enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-west-1 - us-gov-east-1 - ca-central-1 - eu-north-1 - eu-west-1 - eu-west-2 - eu-west-3 - eu-central-1 - eu-south-1 - af-south-1 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-east-1 - ap-south-1 - sa-east-1 - me-south-1 default: us-east-1 description: The Amazon Cognito Identity multi-region endpoint - url: http://cognito-identity.{region}.amazonaws.com.cn variables: region: description: The AWS region enum: - cn-north-1 - cn-northwest-1 default: cn-north-1 description: The Amazon Cognito Identity endpoint for China (Beijing) and China (Ningxia) - url: https://cognito-identity.{region}.amazonaws.com.cn variables: region: description: The AWS region enum: - cn-north-1 - cn-northwest-1 default: cn-north-1 description: The Amazon Cognito Identity endpoint for China (Beijing) and China (Ningxia) security: - hmac: [] tags: - name: '#X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp' paths: /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp: parameters: - $ref: '#/components/parameters/X-Amz-Content-Sha256' - $ref: '#/components/parameters/X-Amz-Date' - $ref: '#/components/parameters/X-Amz-Algorithm' - $ref: '#/components/parameters/X-Amz-Credential' - $ref: '#/components/parameters/X-Amz-Security-Token' - $ref: '#/components/parameters/X-Amz-Signature' - $ref: '#/components/parameters/X-Amz-SignedHeaders' post: operationId: AdminConfirmSignUp description:

Confirms user registration as an admin without using a confirmation code. Works on any user.

Amazon Cognito evaluates Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you must use IAM credentials to authorize requests, and you must grant yourself the corresponding IAM permission in a policy.

Learn more

responses: '200': description: Success content: application/json: schema: $ref: '#/components/schemas/AdminConfirmSignUpResponse' examples: AdminConfirmSignUp200Example: summary: Default AdminConfirmSignUp 200 response x-microcks-default: true value: {} '480': description: ResourceNotFoundException content: application/json: schema: $ref: '#/components/schemas/ResourceNotFoundException' examples: AdminConfirmSignUp480Example: summary: Default AdminConfirmSignUp 480 response x-microcks-default: true value: example '481': description: InvalidParameterException content: application/json: schema: $ref: '#/components/schemas/InvalidParameterException' examples: AdminConfirmSignUp481Example: summary: Default AdminConfirmSignUp 481 response x-microcks-default: true value: example '482': description: UnexpectedLambdaException content: application/json: schema: $ref: '#/components/schemas/UnexpectedLambdaException' examples: AdminConfirmSignUp482Example: summary: Default AdminConfirmSignUp 482 response x-microcks-default: true value: example '483': description: UserLambdaValidationException content: application/json: schema: $ref: '#/components/schemas/UserLambdaValidationException' examples: AdminConfirmSignUp483Example: summary: Default AdminConfirmSignUp 483 response x-microcks-default: true value: example '484': description: NotAuthorizedException content: application/json: schema: $ref: '#/components/schemas/NotAuthorizedException' examples: AdminConfirmSignUp484Example: summary: Default AdminConfirmSignUp 484 response x-microcks-default: true value: example '485': description: TooManyFailedAttemptsException content: application/json: schema: $ref: '#/components/schemas/TooManyFailedAttemptsException' examples: AdminConfirmSignUp485Example: summary: Default AdminConfirmSignUp 485 response x-microcks-default: true value: example '486': description: InvalidLambdaResponseException content: application/json: schema: $ref: '#/components/schemas/InvalidLambdaResponseException' examples: AdminConfirmSignUp486Example: summary: Default AdminConfirmSignUp 486 response x-microcks-default: true value: example '487': description: TooManyRequestsException content: application/json: schema: $ref: '#/components/schemas/TooManyRequestsException' examples: AdminConfirmSignUp487Example: summary: Default AdminConfirmSignUp 487 response x-microcks-default: true value: example '488': description: LimitExceededException content: application/json: schema: $ref: '#/components/schemas/LimitExceededException' examples: AdminConfirmSignUp488Example: summary: Default AdminConfirmSignUp 488 response x-microcks-default: true value: example '489': description: UserNotFoundException content: application/json: schema: $ref: '#/components/schemas/UserNotFoundException' examples: AdminConfirmSignUp489Example: summary: Default AdminConfirmSignUp 489 response x-microcks-default: true value: example '490': description: InternalErrorException content: application/json: schema: $ref: '#/components/schemas/InternalErrorException' examples: AdminConfirmSignUp490Example: summary: Default AdminConfirmSignUp 490 response x-microcks-default: true value: example requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/AdminConfirmSignUpRequest' parameters: - name: X-Amz-Target in: header required: true schema: type: string enum: - AWSCognitoIdentityProviderService.AdminConfirmSignUp summary: Amazon Cognito Admin Confirm Sign Up x-microcks-operation: delay: 0 dispatcher: FALLBACK tags: - '#X Amz Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp' components: parameters: X-Amz-Content-Sha256: name: X-Amz-Content-Sha256 in: header schema: type: string required: false X-Amz-Date: name: X-Amz-Date in: header schema: type: string required: false X-Amz-Security-Token: name: X-Amz-Security-Token in: header schema: type: string required: false X-Amz-SignedHeaders: name: X-Amz-SignedHeaders in: header schema: type: string required: false X-Amz-Algorithm: name: X-Amz-Algorithm in: header schema: type: string required: false X-Amz-Signature: name: X-Amz-Signature in: header schema: type: string required: false X-Amz-Credential: name: X-Amz-Credential in: header schema: type: string required: false schemas: ResourceNotFoundException: {} InvalidParameterException: {} UserLambdaValidationException: {} TooManyFailedAttemptsException: {} UserNotFoundException: {} AdminConfirmSignUpRequest: type: object required: - UserPoolId - Username title: AdminConfirmSignUpRequest properties: UserPoolId: allOf: - $ref: '#/components/schemas/UserPoolIdType' - description: The user pool ID for which you want to confirm user registration. Username: allOf: - $ref: '#/components/schemas/UsernameType' - description: The user name for which you want to confirm user registration. ClientMetadata: allOf: - $ref: '#/components/schemas/ClientMetadataType' - description:

A map of custom key-value pairs that you can provide as input for any custom workflows that this action triggers.

If your user pool configuration includes triggers, the AdminConfirmSignUp API action invokes the Lambda function that is specified for the post confirmation trigger. When Amazon Cognito invokes this function, it passes a JSON payload, which the function receives as input. In this payload, the clientMetadata attribute provides the data that you assigned to the ClientMetadata parameter in your AdminConfirmSignUp request. In your function code in Lambda, you can process the ClientMetadata value to enhance your workflow for your specific needs.

For more information, see Customizing user pool Workflows with Lambda Triggers in the Amazon Cognito Developer Guide.

When you use the ClientMetadata parameter, remember that Amazon Cognito won't do the following:

description: Confirm a user's registration as a user pool administrator. InvalidLambdaResponseException: {} StringType: type: string minLength: 0 maxLength: 131072 UnexpectedLambdaException: {} ClientMetadataType: type: object additionalProperties: $ref: '#/components/schemas/StringType' UserPoolIdType: type: string pattern: '[\w-]+_[0-9a-zA-Z]+' minLength: 1 maxLength: 55 NotAuthorizedException: {} InternalErrorException: {} AdminConfirmSignUpResponse: type: object properties: {} description: Represents the response from the server for the request to confirm registration. UsernameType: type: string pattern: '[\p{L}\p{M}\p{S}\p{N}\p{P}]+' minLength: 1 maxLength: 128 format: password TooManyRequestsException: {} LimitExceededException: {} securitySchemes: hmac: type: apiKey name: Authorization in: header description: Amazon Signature authorization v4 x-amazon-apigateway-authtype: awsSigv4 externalDocs: description: Amazon Web Services documentation url: https://docs.aws.amazon.com/cognito-identity/ x-hasEquivalentPaths: true