aws-iam-policy-types/dist/cjs/actions/cognito-idp.d.ts

Autogenerated Typescript types for AWS IAM Policy and enums for all policy actions

/**
 * All IAM policy actions for Amazon Cognito User Pools (COGNITO-IDP)
 *
 * Extracted by `aws-iam-policy` from
 * https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazoncognitouserpools.html
 *
 * 2025-02-24T21:47:20.686Z
 */
export declare enum AwsCognitoIdpActions {
    /**
     * Grants permission to add user attributes to the user pool schema
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AddCustomAttributes.html
     */
    AddCustomAttributes = "cognito-idp:AddCustomAttributes",
    /**
     * Grants permission to add any user to any group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminAddUserToGroup.html
     */
    AdminAddUserToGroup = "cognito-idp:AdminAddUserToGroup",
    /**
     * Grants permission to confirm any user's registration without a confirmation cod
     * e
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminConfirmSignUp.html
     */
    AdminConfirmSignUp = "cognito-idp:AdminConfirmSignUp",
    /**
     * Grants permission to create new users and send welcome messages via email or SM
     * S
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminCreateUser.html
     */
    AdminCreateUser = "cognito-idp:AdminCreateUser",
    /**
     * Grants permission to delete any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUser.html
     */
    AdminDeleteUser = "cognito-idp:AdminDeleteUser",
    /**
     * Grants permission to delete attributes from any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDeleteUserAttributes.html
     */
    AdminDeleteUserAttributes = "cognito-idp:AdminDeleteUserAttributes",
    /**
     * Grants permission to unlink any user pool user from a third-party identity prov
     * ider (IdP) user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDisableProviderForUser.html
     */
    AdminDisableProviderForUser = "cognito-idp:AdminDisableProviderForUser",
    /**
     * Grants permission to deactivate any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminDisableUser.html
     */
    AdminDisableUser = "cognito-idp:AdminDisableUser",
    /**
     * Grants permission to activate any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminEnableUser.html
     */
    AdminEnableUser = "cognito-idp:AdminEnableUser",
    /**
     * Grants permission to deregister any user's devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminForgetDevice.html
     */
    AdminForgetDevice = "cognito-idp:AdminForgetDevice",
    /**
     * Grants permission to get information about any user's devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminGetDevice.html
     */
    AdminGetDevice = "cognito-idp:AdminGetDevice",
    /**
     * Grants permission to look up any user by user name
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminGetUser.html
     */
    AdminGetUser = "cognito-idp:AdminGetUser",
    /**
     * Grants permission to authenticate any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminInitiateAuth.html
     */
    AdminInitiateAuth = "cognito-idp:AdminInitiateAuth",
    /**
     * Grants permission to link any user pool user to a third-party IdP user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminLinkProviderForUser.html
     */
    AdminLinkProviderForUser = "cognito-idp:AdminLinkProviderForUser",
    /**
     * Grants permission to list any user's remembered devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListDevices.html
     */
    AdminListDevices = "cognito-idp:AdminListDevices",
    /**
     * Grants permission to list the groups that any user belongs to
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListGroupsForUser.html
     */
    AdminListGroupsForUser = "cognito-idp:AdminListGroupsForUser",
    /**
     * Grants permission to lists sign-in events for any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminListUserAuthEvents.html
     */
    AdminListUserAuthEvents = "cognito-idp:AdminListUserAuthEvents",
    /**
     * Grants permission to remove any user from any group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminRemoveUserFromGroup.html
     */
    AdminRemoveUserFromGroup = "cognito-idp:AdminRemoveUserFromGroup",
    /**
     * Grants permission to reset any user's password
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminResetUserPassword.html
     */
    AdminResetUserPassword = "cognito-idp:AdminResetUserPassword",
    /**
     * Grants permission to respond to an authentication challenge during the authenti
     * cation of any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminRespondToAuthChallenge.html
     */
    AdminRespondToAuthChallenge = "cognito-idp:AdminRespondToAuthChallenge",
    /**
     * Grants permission to set any user's preferred MFA method
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserMFAPreference.html
     */
    AdminSetUserMFAPreference = "cognito-idp:AdminSetUserMFAPreference",
    /**
     * Grants permission to set any user's password
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserPassword.html
     */
    AdminSetUserPassword = "cognito-idp:AdminSetUserPassword",
    /**
     * Grants permission to set user settings for any user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminSetUserSettings.html
     */
    AdminSetUserSettings = "cognito-idp:AdminSetUserSettings",
    /**
     * Grants permission to update advanced security feedback for any user's authentic
     * ation event
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateAuthEventFeedback.html
     */
    AdminUpdateAuthEventFeedback = "cognito-idp:AdminUpdateAuthEventFeedback",
    /**
     * Grants permission to update the status of any user's remembered devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateDeviceStatus.html
     */
    AdminUpdateDeviceStatus = "cognito-idp:AdminUpdateDeviceStatus",
    /**
     * Grants permission to updates any user's standard or custom attributes
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUpdateUserAttributes.html
     */
    AdminUpdateUserAttributes = "cognito-idp:AdminUpdateUserAttributes",
    /**
     * Grants permission to sign out any user from all sessions
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AdminUserGlobalSignOut.html
     */
    AdminUserGlobalSignOut = "cognito-idp:AdminUserGlobalSignOut",
    /**
     * Grants permission to return a unique generated shared secret key code for the u
     * ser
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_AssociateSoftwareToken.html
     */
    AssociateSoftwareToken = "cognito-idp:AssociateSoftwareToken",
    /**
     * Grants permission to associate the user pool with an AWS WAF web ACL
     *
     * See ${UserGuideDocPage}user-pool-waf.html
     */
    AssociateWebACL = "cognito-idp:AssociateWebACL",
    /**
     * Grants permission to change the password for a specified user in a user pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ChangePassword.html
     */
    ChangePassword = "cognito-idp:ChangePassword",
    /**
     * Grants permission to confirm tracking of the device. This API call is the call
     * that begins device tracking
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmDevice.html
     */
    ConfirmDevice = "cognito-idp:ConfirmDevice",
    /**
     * Grants permission to allow a user to enter a confirmation code to reset a forgo
     * tten password
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmForgotPassword.html
     */
    ConfirmForgotPassword = "cognito-idp:ConfirmForgotPassword",
    /**
     * Grants permission to confirm registration of a user and handles the existing al
     * ias from a previous user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ConfirmSignUp.html
     */
    ConfirmSignUp = "cognito-idp:ConfirmSignUp",
    /**
     * Grants permission to create new user pool groups
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateGroup.html
     */
    CreateGroup = "cognito-idp:CreateGroup",
    /**
     * Grants permission to add identity providers to user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateIdentityProvider.html
     */
    CreateIdentityProvider = "cognito-idp:CreateIdentityProvider",
    /**
     * Grants permission to create a branding settings for managed login and associate
     * it with an app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateManagedLoginBranding.html
     */
    CreateManagedLoginBranding = "cognito-idp:CreateManagedLoginBranding",
    /**
     * Grants permission to create and configure scopes for OAuth 2.0 resource servers
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateResourceServer.html
     */
    CreateResourceServer = "cognito-idp:CreateResourceServer",
    /**
     * Grants permission to create user CSV import jobs
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserImportJob.html
     */
    CreateUserImportJob = "cognito-idp:CreateUserImportJob",
    /**
     * Grants permission to create and set password policy for user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html
     */
    CreateUserPool = "cognito-idp:CreateUserPool",
    /**
     * Grants permission to create user pool app clients
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolClient.html
     */
    CreateUserPoolClient = "cognito-idp:CreateUserPoolClient",
    /**
     * Grants permission to add user pool domains
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPoolDomain.html
     */
    CreateUserPoolDomain = "cognito-idp:CreateUserPoolDomain",
    /**
     * Grants permission to delete any empty user pool group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteGroup.html
     */
    DeleteGroup = "cognito-idp:DeleteGroup",
    /**
     * Grants permission to delete any identity provider from user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteIdentityProvider.html
     */
    DeleteIdentityProvider = "cognito-idp:DeleteIdentityProvider",
    /**
     * Grants permission to delete the managed login branding style for any app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteManagedLoginBranding.html
     */
    DeleteManagedLoginBranding = "cognito-idp:DeleteManagedLoginBranding",
    /**
     * Grants permission to delete any OAuth 2.0 resource server from user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteResourceServer.html
     */
    DeleteResourceServer = "cognito-idp:DeleteResourceServer",
    /**
     * Grants permission to allow a user to delete one's self
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUser.html
     */
    DeleteUser = "cognito-idp:DeleteUser",
    /**
     * Grants permission to delete the attributes for a user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserAttributes.html
     */
    DeleteUserAttributes = "cognito-idp:DeleteUserAttributes",
    /**
     * Grants permission to delete user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPool.html
     */
    DeleteUserPool = "cognito-idp:DeleteUserPool",
    /**
     * Grants permission to delete any user pool app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolClient.html
     */
    DeleteUserPoolClient = "cognito-idp:DeleteUserPoolClient",
    /**
     * Grants permission to delete any user pool domain
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DeleteUserPoolDomain.html
     */
    DeleteUserPoolDomain = "cognito-idp:DeleteUserPoolDomain",
    /**
     * Grants permission to describe any user pool identity provider
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeIdentityProvider.html
     */
    DescribeIdentityProvider = "cognito-idp:DescribeIdentityProvider",
    /**
     * Grants permission to get the detailed information about the branding style of m
     * anaged login
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBranding.html
     */
    DescribeManagedLoginBranding = "cognito-idp:DescribeManagedLoginBranding",
    /**
     * Grants permission to get the detailed information about the branding style of m
     * anaged login associated with an appclient
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeManagedLoginBrandingByClient.html
     */
    DescribeManagedLoginBrandingByClient = "cognito-idp:DescribeManagedLoginBrandingByClient",
    /**
     * Grants permission to describe any OAuth 2.0 resource server
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeResourceServer.html
     */
    DescribeResourceServer = "cognito-idp:DescribeResourceServer",
    /**
     * Grants permission to describe the risk configuration settings of user pools and
     * app clients
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeRiskConfiguration.html
     */
    DescribeRiskConfiguration = "cognito-idp:DescribeRiskConfiguration",
    /**
     * Grants permission to describe any user import job
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserImportJob.html
     */
    DescribeUserImportJob = "cognito-idp:DescribeUserImportJob",
    /**
     * Grants permission to describe user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html
     */
    DescribeUserPool = "cognito-idp:DescribeUserPool",
    /**
     * Grants permission to describe any user pool app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolClient.html
     */
    DescribeUserPoolClient = "cognito-idp:DescribeUserPoolClient",
    /**
     * Grants permission to describe any user pool domain
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPoolDomain.html
     */
    DescribeUserPoolDomain = "cognito-idp:DescribeUserPoolDomain",
    /**
     * Grants permission to disassociate the user pool with an AWS WAF web ACL
     *
     * See ${UserGuideDocPage}user-pool-waf.html
     */
    DisassociateWebACL = "cognito-idp:DisassociateWebACL",
    /**
     * Grants permission to forget the specified device
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ForgetDevice.html
     */
    ForgetDevice = "cognito-idp:ForgetDevice",
    /**
     * Grants permission to send a message to the end user with a confirmation code th
     * at is required to change the user's password
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ForgotPassword.html
     */
    ForgotPassword = "cognito-idp:ForgotPassword",
    /**
     * Grants permission to generate headers for a user import .csv file
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetCSVHeader.html
     */
    GetCSVHeader = "cognito-idp:GetCSVHeader",
    /**
     * Grants permission to get the device
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetDevice.html
     */
    GetDevice = "cognito-idp:GetDevice",
    /**
     * Grants permission to describe a user pool group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetGroup.html
     */
    GetGroup = "cognito-idp:GetGroup",
    /**
     * Grants permission to correlate a user pool IdP identifier to the IdP Name
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetIdentityProviderByIdentifier.html
     */
    GetIdentityProviderByIdentifier = "cognito-idp:GetIdentityProviderByIdentifier",
    /**
     * Grants permission to get the detailed activity logging configuration for a user
     * pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetLogDeliveryConfiguration.html
     */
    GetLogDeliveryConfiguration = "cognito-idp:GetLogDeliveryConfiguration",
    /**
     * Grants permission to look up signing certificates for user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetSigningCertificate.html
     */
    GetSigningCertificate = "cognito-idp:GetSigningCertificate",
    /**
     * Grants permission to get UI customization information for the hosted UI of any
     * app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUICustomization.html
     */
    GetUICustomization = "cognito-idp:GetUICustomization",
    /**
     * Grants permission to get the user attributes and metadata for a user
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUser.html
     */
    GetUser = "cognito-idp:GetUser",
    /**
     * Grants permission to get the user attribute verification code for the specified
     * attribute name
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUserAttributeVerificationCode.html
     */
    GetUserAttributeVerificationCode = "cognito-idp:GetUserAttributeVerificationCode",
    /**
     * Grants permission to look up the MFA configuration of user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GetUserPoolMfaConfig.html
     */
    GetUserPoolMfaConfig = "cognito-idp:GetUserPoolMfaConfig",
    /**
     * Grants permission to get the AWS WAF web ACL that is associated with an Amazon
     * Cognito user pool
     *
     * See ${UserGuideDocPage}user-pool-waf.html
     */
    GetWebACLForResource = "cognito-idp:GetWebACLForResource",
    /**
     * Grants permission to sign out users from all devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GlobalSignOut.html
     */
    GlobalSignOut = "cognito-idp:GlobalSignOut",
    /**
     * Grants permission to initiate the authentication flow
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_InitiateAuth.html
     */
    InitiateAuth = "cognito-idp:InitiateAuth",
    /**
     * Grants permission to list the devices
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListDevices.html
     */
    ListDevices = "cognito-idp:ListDevices",
    /**
     * Grants permission to list all groups in user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListGroups.html
     */
    ListGroups = "cognito-idp:ListGroups",
    /**
     * Grants permission to list all identity providers in user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListIdentityProviders.html
     */
    ListIdentityProviders = "cognito-idp:ListIdentityProviders",
    /**
     * Grants permission to list all resource servers in user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListResourceServers.html
     */
    ListResourceServers = "cognito-idp:ListResourceServers",
    /**
     * Grants permission to list the user pools that are associated with an AWS WAF we
     * b ACL
     *
     * See ${UserGuideDocPage}user-pool-waf.html
     */
    ListResourcesForWebACL = "cognito-idp:ListResourcesForWebACL",
    /**
     * Grants permission to list the tags that are assigned to an Amazon Cognito user
     * pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListTagsForResource.html
     */
    ListTagsForResource = "cognito-idp:ListTagsForResource",
    /**
     * Grants permission to list all user import jobs
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserImportJobs.html
     */
    ListUserImportJobs = "cognito-idp:ListUserImportJobs",
    /**
     * Grants permission to list all app clients in user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPoolClients.html
     */
    ListUserPoolClients = "cognito-idp:ListUserPoolClients",
    /**
     * Grants permission to list all user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUserPools.html
     */
    ListUserPools = "cognito-idp:ListUserPools",
    /**
     * Grants permission to list all user pool users
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsers.html
     */
    ListUsers = "cognito-idp:ListUsers",
    /**
     * Grants permission to list the users in any group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsersInGroup.html
     */
    ListUsersInGroup = "cognito-idp:ListUsersInGroup",
    /**
     * Grants permission to resend the confirmation (for confirmation of registration)
     * to a specific user in the user pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ResendConfirmationCode.html
     */
    ResendConfirmationCode = "cognito-idp:ResendConfirmationCode",
    /**
     * Grants permission to respond to the authentication challenge
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RespondToAuthChallenge.html
     */
    RespondToAuthChallenge = "cognito-idp:RespondToAuthChallenge",
    /**
     * Grants permission to revoke all of the access tokens generated by the specified
     * refresh token
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_RevokeToken.html
     */
    RevokeToken = "cognito-idp:RevokeToken",
    /**
     * Grants permission to set up or modify the detailed activity logging configurati
     * on of a user pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetLogDeliveryConfiguration.html
     */
    SetLogDeliveryConfiguration = "cognito-idp:SetLogDeliveryConfiguration",
    /**
     * Grants permission to set risk configuration for user pools and app clients
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetRiskConfiguration.html
     */
    SetRiskConfiguration = "cognito-idp:SetRiskConfiguration",
    /**
     * Grants permission to customize the hosted UI for any app client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUICustomization.html
     */
    SetUICustomization = "cognito-idp:SetUICustomization",
    /**
     * Grants permission to set MFA preference for the user in the userpool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserMFAPreference.html
     */
    SetUserMFAPreference = "cognito-idp:SetUserMFAPreference",
    /**
     * Grants permission to set user pool MFA configuration
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserPoolMfaConfig.html
     */
    SetUserPoolMfaConfig = "cognito-idp:SetUserPoolMfaConfig",
    /**
     * Grants permission to set the user settings like multi-factor authentication (MF
     * A)
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SetUserSettings.html
     */
    SetUserSettings = "cognito-idp:SetUserSettings",
    /**
     * Grants permission to register the user in the specified user pool and creates a
     * user name, password, and user attributes
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SignUp.html
     */
    SignUp = "cognito-idp:SignUp",
    /**
     * Grants permission to start any user import job
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_StartUserImportJob.html
     */
    StartUserImportJob = "cognito-idp:StartUserImportJob",
    /**
     * Grants permission to stop any user import job
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_StopUserImportJob.html
     */
    StopUserImportJob = "cognito-idp:StopUserImportJob",
    /**
     * Grants permission to tag a user pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_TagResource.html
     */
    TagResource = "cognito-idp:TagResource",
    /**
     * Grants permission to untag a user pool
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UntagResource.html
     */
    UntagResource = "cognito-idp:UntagResource",
    /**
     * Grants permission to update the feedback for the user authentication event
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateAuthEventFeedback.html
     */
    UpdateAuthEventFeedback = "cognito-idp:UpdateAuthEventFeedback",
    /**
     * Grants permission to update the device status
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateDeviceStatus.html
     */
    UpdateDeviceStatus = "cognito-idp:UpdateDeviceStatus",
    /**
     * Grants permission to update the configuration of any group
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateGroup.html
     */
    UpdateGroup = "cognito-idp:UpdateGroup",
    /**
     * Grants permission to update the configuration of any user pool IdP
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateIdentityProvider.html
     */
    UpdateIdentityProvider = "cognito-idp:UpdateIdentityProvider",
    /**
     * Grants permission to update the branding settings of a managed login
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateManagedLoginBranding.html
     */
    UpdateManagedLoginBranding = "cognito-idp:UpdateManagedLoginBranding",
    /**
     * Grants permission to update the configuration of any OAuth 2.0 resource server
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateResourceServer.html
     */
    UpdateResourceServer = "cognito-idp:UpdateResourceServer",
    /**
     * Grants permission to allow a user to update a specific attribute (one at a time
     * )
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserAttributes.html
     */
    UpdateUserAttributes = "cognito-idp:UpdateUserAttributes",
    /**
     * Grants permission to updates the configuration of user pools
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html
     */
    UpdateUserPool = "cognito-idp:UpdateUserPool",
    /**
     * Grants permission to update any user pool client
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolClient.html
     */
    UpdateUserPoolClient = "cognito-idp:UpdateUserPoolClient",
    /**
     * Grants permission to replace the certificate for any custom domain
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPoolDomain.html
     */
    UpdateUserPoolDomain = "cognito-idp:UpdateUserPoolDomain",
    /**
     * Grants permission to register a user's entered TOTP code and mark the user's so
     * ftware token MFA status as verified if successful
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifySoftwareToken.html
     */
    VerifySoftwareToken = "cognito-idp:VerifySoftwareToken",
    /**
     * Grants permission to verify a user attribute using a one time verification code
     *
     * See https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerifyUserAttribute.html
     */
    VerifyUserAttribute = "cognito-idp:VerifyUserAttribute"
}