openapi: 3.0.0 info: version: 2014-06-30 x-release: v4 title: 'Amazon Cognito Identity #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes #X Amz Target=AWSCognitoIdentityProviderService.AddCustomAttributes #X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser API' description: Amazon Cognito Federated Identities

Amazon Cognito Federated Identities is a web service that delivers scoped temporary credentials to mobile devices and other untrusted environments. It uniquely identifies a device and supplies the user with a consistent identity over the lifetime of an application.

Using Amazon Cognito Federated Identities, you can enable authentication with one or more third-party identity providers (Facebook, Google, or Login with Amazon) or an Amazon Cognito user pool, and you can also choose to support unauthenticated access from your app. Cognito delivers a unique identifier for each user and acts as an OpenID token provider trusted by AWS Security Token Service (STS) to access temporary, limited-privilege AWS credentials.

For a description of the authentication flow from the Amazon Cognito Developer Guide see Authentication Flow.

For more information see Amazon Cognito Federated Identities.

x-logo: url: https://api.apis.guru/v2/cache/logo/https_twitter.com_awscloud_profile_image.png backgroundColor: '#FFFFFF' termsOfService: https://aws.amazon.com/service-terms/ contact: name: Mike Ralphson email: mike.ralphson@gmail.com url: https://github.com/mermade/aws2openapi x-twitter: PermittedSoc license: name: Apache 2.0 License url: http://www.apache.org/licenses/ x-providerName: amazonaws.com x-serviceName: cognito-identity x-origin: - contentType: application/json url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/cognito-identity-2014-06-30.normal.json converter: url: https://github.com/mermade/aws2openapi version: 1.0.0 x-apisguru-driver: external x-apiClientRegistration: url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct x-apisguru-categories: - cloud x-preferred: true servers: - url: http://cognito-identity.{region}.amazonaws.com variables: region: description: The AWS region enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-west-1 - us-gov-east-1 - ca-central-1 - eu-north-1 - eu-west-1 - eu-west-2 - eu-west-3 - eu-central-1 - eu-south-1 - af-south-1 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-east-1 - ap-south-1 - sa-east-1 - me-south-1 default: us-east-1 description: The Amazon Cognito Identity multi-region endpoint - url: https://cognito-identity.{region}.amazonaws.com variables: region: description: The AWS region enum: - us-east-1 - us-east-2 - us-west-1 - us-west-2 - us-gov-west-1 - us-gov-east-1 - ca-central-1 - eu-north-1 - eu-west-1 - eu-west-2 - eu-west-3 - eu-central-1 - eu-south-1 - af-south-1 - ap-northeast-1 - ap-northeast-2 - ap-northeast-3 - ap-southeast-1 - ap-southeast-2 - ap-east-1 - ap-south-1 - sa-east-1 - me-south-1 default: us-east-1 description: The Amazon Cognito Identity multi-region endpoint - url: http://cognito-identity.{region}.amazonaws.com.cn variables: region: description: The AWS region enum: - cn-north-1 - cn-northwest-1 default: cn-north-1 description: The Amazon Cognito Identity endpoint for China (Beijing) and China (Ningxia) - url: https://cognito-identity.{region}.amazonaws.com.cn variables: region: description: The AWS region enum: - cn-north-1 - cn-northwest-1 default: cn-north-1 description: The Amazon Cognito Identity endpoint for China (Beijing) and China (Ningxia) security: - hmac: [] tags: - name: '#X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser' paths: /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser: parameters: - $ref: '#/components/parameters/X-Amz-Content-Sha256' - $ref: '#/components/parameters/X-Amz-Date' - $ref: '#/components/parameters/X-Amz-Algorithm' - $ref: '#/components/parameters/X-Amz-Credential' - $ref: '#/components/parameters/X-Amz-Security-Token' - $ref: '#/components/parameters/X-Amz-Signature' - $ref: '#/components/parameters/X-Amz-SignedHeaders' post: operationId: AdminListGroupsForUser description:

Lists the groups that the user belongs to.

Calling this action requires developer credentials.

responses: '200': description: Success content: application/json: schema: $ref: '#/components/schemas/AdminListGroupsForUserResponse' examples: AdminListGroupsForUser200Example: summary: Default AdminListGroupsForUser 200 response x-microcks-default: true value: Groups: example-value NextToken: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9... '480': description: InvalidParameterException content: application/json: schema: $ref: '#/components/schemas/InvalidParameterException' examples: AdminListGroupsForUser480Example: summary: Default AdminListGroupsForUser 480 response x-microcks-default: true value: example '481': description: ResourceNotFoundException content: application/json: schema: $ref: '#/components/schemas/ResourceNotFoundException' examples: AdminListGroupsForUser481Example: summary: Default AdminListGroupsForUser 481 response x-microcks-default: true value: example '482': description: TooManyRequestsException content: application/json: schema: $ref: '#/components/schemas/TooManyRequestsException' examples: AdminListGroupsForUser482Example: summary: Default AdminListGroupsForUser 482 response x-microcks-default: true value: example '483': description: NotAuthorizedException content: application/json: schema: $ref: '#/components/schemas/NotAuthorizedException' examples: AdminListGroupsForUser483Example: summary: Default AdminListGroupsForUser 483 response x-microcks-default: true value: example '484': description: UserNotFoundException content: application/json: schema: $ref: '#/components/schemas/UserNotFoundException' examples: AdminListGroupsForUser484Example: summary: Default AdminListGroupsForUser 484 response x-microcks-default: true value: example '485': description: InternalErrorException content: application/json: schema: $ref: '#/components/schemas/InternalErrorException' examples: AdminListGroupsForUser485Example: summary: Default AdminListGroupsForUser 485 response x-microcks-default: true value: example requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/AdminListGroupsForUserRequest' examples: AdminListGroupsForUserRequestExample: summary: Default AdminListGroupsForUser request x-microcks-default: true value: Username: my-user-pool UserPoolId: us-east-1_AbCdEfGhI Limit: example-value NextToken: eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9... parameters: - name: Limit in: query schema: type: string description: Pagination limit required: false - name: NextToken in: query schema: type: string description: Pagination token required: false - name: X-Amz-Target in: header required: true schema: type: string enum: - AWSCognitoIdentityProviderService.AdminListGroupsForUser summary: Amazon Cognito Admin List Groups for User x-microcks-operation: delay: 0 dispatcher: FALLBACK tags: - '#X Amz Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser' components: schemas: ResourceNotFoundException: {} UserNotFoundException: {} DateType: type: string format: date-time InvalidParameterException: {} AdminListGroupsForUserRequest: type: object required: - Username - UserPoolId title: AdminListGroupsForUserRequest properties: Username: allOf: - $ref: '#/components/schemas/UsernameType' - description: The username for the user. UserPoolId: allOf: - $ref: '#/components/schemas/UserPoolIdType' - description: The user pool ID for the user pool. Limit: allOf: - $ref: '#/components/schemas/QueryLimitType' - description: The limit of the request to list groups. NextToken: allOf: - $ref: '#/components/schemas/PaginationKey' - description: An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. TooManyRequestsException: {} PaginationKey: type: string pattern: '[\S]+' minLength: 1 InternalErrorException: {} NotAuthorizedException: {} GroupListType: type: array items: $ref: '#/components/schemas/GroupType' DescriptionType: type: string maxLength: 2048 GroupNameType: type: string pattern: '[\p{L}\p{M}\p{S}\p{N}\p{P}]+' minLength: 1 maxLength: 128 QueryLimitType: type: integer minimum: 0 maximum: 60 GroupType: type: object properties: GroupName: allOf: - $ref: '#/components/schemas/GroupNameType' - description: The name of the group. UserPoolId: allOf: - $ref: '#/components/schemas/UserPoolIdType' - description: The user pool ID for the user pool. Description: allOf: - $ref: '#/components/schemas/DescriptionType' - description: A string containing the description of the group. RoleArn: allOf: - $ref: '#/components/schemas/ArnType' - description: The role Amazon Resource Name (ARN) for the group. Precedence: allOf: - $ref: '#/components/schemas/PrecedenceType' - description:

A non-negative integer value that specifies the precedence of this group relative to the other groups that a user can belong to in the user pool. Zero is the highest precedence value. Groups with lower Precedence values take precedence over groups with higher ornull Precedence values. If a user belongs to two or more groups, it is the group with the lowest precedence value whose role ARN is given in the user's tokens for the cognito:roles and cognito:preferred_role claims.

Two groups can have the same Precedence value. If this happens, neither group takes precedence over the other. If two groups with the same Precedence have the same role ARN, that role is used in the cognito:preferred_role claim in tokens for users in each group. If the two groups have different role ARNs, the cognito:preferred_role claim isn't set in users' tokens.

The default Precedence value is null.

LastModifiedDate: allOf: - $ref: '#/components/schemas/DateType' - description: The date the group was last modified. CreationDate: allOf: - $ref: '#/components/schemas/DateType' - description: The date the group was created. description: The group type. UserPoolIdType: type: string pattern: '[\w-]+_[0-9a-zA-Z]+' minLength: 1 maxLength: 55 AdminListGroupsForUserResponse: type: object properties: Groups: allOf: - $ref: '#/components/schemas/GroupListType' - description: The groups that the user belongs to. NextToken: allOf: - $ref: '#/components/schemas/PaginationKey' - description: An identifier that was returned from the previous call to this operation, which can be used to return the next set of items in the list. ArnType: type: string pattern: arn:[\w+=/,.@-]+:[\w+=/,.@-]+:([\w+=/,.@-]*)?:[0-9]+:[\w+=/,.@-]+(:[\w+=/,.@-]+)?(:[\w+=/,.@-]+)? minLength: 20 maxLength: 2048 UsernameType: type: string pattern: '[\p{L}\p{M}\p{S}\p{N}\p{P}]+' minLength: 1 maxLength: 128 format: password PrecedenceType: type: integer minimum: 0 parameters: X-Amz-Credential: name: X-Amz-Credential in: header schema: type: string required: false X-Amz-Date: name: X-Amz-Date in: header schema: type: string required: false X-Amz-Signature: name: X-Amz-Signature in: header schema: type: string required: false X-Amz-Algorithm: name: X-Amz-Algorithm in: header schema: type: string required: false X-Amz-Security-Token: name: X-Amz-Security-Token in: header schema: type: string required: false X-Amz-SignedHeaders: name: X-Amz-SignedHeaders in: header schema: type: string required: false X-Amz-Content-Sha256: name: X-Amz-Content-Sha256 in: header schema: type: string required: false securitySchemes: hmac: type: apiKey name: Authorization in: header description: Amazon Signature authorization v4 x-amazon-apigateway-authtype: awsSigv4 externalDocs: description: Amazon Web Services documentation url: https://docs.aws.amazon.com/cognito-identity/ x-hasEquivalentPaths: true