Amazon Cognito

Amazon Cognito Amazon Cognito Identity Provider API

The Amazon Cognito Identity Provider API from Amazon Cognito — 103 operation(s) for amazon cognito identity provider.

GitHub OpenAPI

Operations 103

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AddCustomAttributes Add custom attributes to a user pool · Amazon Cognito Add Custom Attributes #
Ask an LLM
“How do I add a custom profile field like a loyalty tier to my Cognito user pool?”
“Can new custom attributes be added to a user pool that already has users?”
Tell an agent
Add custom attributes {attributes} to user pool {user_pool_id}.
Extend the schema of pool {user_pool_id} with new custom fields {attributes}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminAddUserToGroup Add a user to a group · Amazon Cognito Admin Add User to Group #
Ask an LLM
“How do I put an existing user into an admins group in my user pool?”
“Can I grant a user a group's IAM role by adding them to that group?”
Tell an agent
Add user {username} to group {group} in user pool {user_pool_id}.
Make {username} a member of the {group} group in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminConfirmSignUp Confirm a user's sign-up as an administrator · Amazon Cognito Admin Confirm Sign Up #
Ask an LLM
“Can an admin confirm a new user's registration without them entering a verification code?”
“How do I manually approve a user stuck in unconfirmed status?”
Tell an agent
Confirm the sign-up for user {username} in pool {user_pool_id} as an admin.
Mark unconfirmed user {username} in pool {user_pool_id} as confirmed without a code.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminCreateUser Create a new user as an administrator · Amazon Cognito Admin Create User #
Ask an LLM
“How do I create a user account on someone's behalf and send them an invitation?”
“Can I set a temporary password when an admin creates a user?”
Tell an agent
Create user {username} in user pool {user_pool_id} with attributes {attributes}.
Invite new user {username} to pool {user_pool_id} with temporary password {temp_password}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminDeleteUser Delete a user as an administrator · Amazon Cognito Admin Delete User #
Ask an LLM
“How can an admin permanently remove any user from a user pool?”
“Can I delete a user account by username from the backend?”
Tell an agent destructive · confirm first
Delete user {username} from user pool {user_pool_id}.
As an admin, permanently remove {username}'s account from pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminDeleteUserAttributes Delete attributes from a user as an administrator · Amazon Cognito Admin Delete User Attributes #
Ask an LLM
“How does an admin clear a field like phone number from a specific user's profile?”
“Can I remove several attributes from one user at once from the backend?”
Tell an agent destructive · confirm first
Delete attributes {attribute_names} from user {username} in pool {user_pool_id}.
As an admin, clear {attribute_names} off {username}'s profile in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminDisableProviderForUser Unlink a federated user from a local user · Amazon Cognito Admin Disable Provider for User #
Ask an LLM
“How do I stop a federated user from signing in through the Cognito account they were linked to?”
“Can I remove the link between a social login and a native user pool account?”
Tell an agent destructive · confirm first
Disable the external provider link for user {user} in pool {user_pool_id}.
Unlink federated identity {user} from its linked account in user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminDisableUser Disable a user account · Amazon Cognito Admin Disable User #
Ask an LLM
“How do I block a user from signing in without deleting their account?”
“Can I suspend a user in a user pool and turn them back on later?”
Tell an agent destructive · confirm first
Disable user {username} in user pool {user_pool_id}.
Suspend {username}'s sign-in access in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminEnableUser Re-enable a disabled user · Amazon Cognito Admin Enable User #
Ask an LLM
“How do I restore sign-in for a user I previously disabled?”
“Can a suspended Cognito user be reactivated?”
Tell an agent
Enable user {username} in user pool {user_pool_id}.
Reactivate the disabled account {username} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminForgetDevice Forget a user's remembered device as an admin · Amazon Cognito Admin Forget Device #
Ask an LLM
“How can an admin remove a remembered device from a user's account?”
“Can I make a pool stop trusting one of a user's devices from the backend?”
Tell an agent destructive · confirm first
Forget device {device_key} for user {username} in pool {user_pool_id}.
As an admin, drop remembered device {device_key} from {username}'s account in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminGetDevice Get a user's device as an admin · Amazon Cognito Admin Get Device #
Ask an LLM
“How does an admin look up details of one specific device a user has signed in from?”
“Can I see when a user's device was last authenticated from the backend?”
Tell an agent
Get device {device_key} for user {username} in pool {user_pool_id}.
As an admin, show the details of {username}'s device {device_key} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminGetUser Look up a user by username as an admin · Amazon Cognito Admin Get User #
Ask an LLM
“How do I fetch a user's attributes and account status by their username?”
“Can an admin check whether a specific user is confirmed or enabled?”
Tell an agent
Get user {username} from user pool {user_pool_id}.
Show the status, MFA settings and attributes for {username} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminInitiateAuth Start sign-in for a user from a backend server · Amazon Cognito Admin Initiate Auth #
Ask an LLM
“How does my server-side app start authenticating a user with admin credentials?”
“Which auth flows can a backend use to sign a user in with their username and password?”
Tell an agent
Start server-side authentication with flow {auth_flow} for app client {client_id} in pool {user_pool_id}.
Sign a user in from my backend to pool {user_pool_id} via client {client_id} using flow {auth_flow} and parameters {auth_params}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminLinkProviderForUser Link a federated identity to an existing user · Amazon Cognito Admin Link Provider for User #
Ask an LLM
“How do I link a user's social login to their existing native Cognito account?”
“Can a federated user sign in as an existing local user after linking?”
Tell an agent
Link external identity {source_user} to existing user {destination_user} in pool {user_pool_id}.
Connect federated login {source_user} with local account {destination_user} in user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminListDevices List a user's devices as an admin · Amazon Cognito Admin List Devices #
Ask an LLM
“How can an admin see every device a particular user has remembered?”
“Can I page through a user's devices from the backend?”
Tell an agent
List the devices for user {username} in pool {user_pool_id}.
As an admin, show up to {limit} of {username}'s remembered devices in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminListGroupsForUser List the groups a user belongs to · Amazon Cognito Admin List Groups for User #
Ask an LLM
“Which groups is a given user a member of in my user pool?”
“How do I check a user's group memberships before changing their permissions?”
Tell an agent
List the groups user {username} belongs to in pool {user_pool_id}.
Show {username}'s group memberships in user pool {user_pool_id}, {limit} per page.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminListUserAuthEvents View a user's sign-in history and risk events · Amazon Cognito Admin List User Auth Events #
Ask an LLM
“How can I see a user's recent sign-in attempts and their risk ratings?”
“Does Cognito keep an auth event history I can review for a suspicious account?”
Tell an agent
List the authentication events for user {username} in pool {user_pool_id}.
Show the last {max} sign-in events and risk results for {username} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminRemoveUserFromGroup Remove a user from a group · Amazon Cognito Admin Remove User from Group #
Ask an LLM
“How do I take a user out of a group in my user pool?”
“Can I revoke a user's group-based role by removing their membership?”
Tell an agent destructive · confirm first
Remove user {username} from group {group} in pool {user_pool_id}.
Take {username} out of the {group} group in user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminResetUserPassword Force a password reset for a user · Amazon Cognito Admin Reset User Password #
Ask an LLM
“How does an admin invalidate a user's password and make them reset it with a code?”
“Can I force a user to choose a new password at next sign-in?”
Tell an agent
Reset the password for user {username} in pool {user_pool_id}.
Invalidate {username}'s current password in pool {user_pool_id} and send them a reset code.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminRespondToAuthChallenge Answer a sign-in challenge from a backend server · Amazon Cognito Admin Respond to Auth Challenge #
Ask an LLM
“How does my server respond to an MFA or new-password challenge during admin sign-in?”
“What do I send back when server-side authentication returns a challenge?”
Tell an agent
Respond to challenge {challenge} for client {client_id} in pool {user_pool_id} with {responses}.
From my backend, answer the {challenge} challenge in session {session} for app client {client_id} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminSetUserMFAPreference Set a user's MFA preference as an admin · Amazon Cognito Admin Set User M F a Preference #
Ask an LLM
“How can an admin turn on authenticator app MFA for a specific user?”
“Can I choose SMS as the preferred MFA method for someone else's account?”
Tell an agent
Set the MFA preference for user {username} in pool {user_pool_id} to SMS settings {sms}.
As an admin, enable authenticator app MFA for {username} in pool {user_pool_id} with settings {totp}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminSetUserPassword Set a user's password as an admin · Amazon Cognito Admin Set User Password #
Ask an LLM
“How does an admin set a specific password for a user directly?”
“Can I make an admin-set password permanent so the user is not forced to change it?”
Tell an agent
Set the password for user {username} in pool {user_pool_id} to {password}.
Give {username} in pool {user_pool_id} the password {password}, permanent: {permanent}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminSetUserSettings Set a user's legacy SMS MFA options as an admin · Amazon Cognito Admin Set User Settings #
Ask an LLM
“Is there an older admin endpoint for setting a user's SMS MFA delivery options?”
“How do I configure the legacy MFAOptions for a specific user from the backend?”
Tell an agent
Set legacy MFA options {mfa_options} for user {username} in pool {user_pool_id}.
Using the older admin user settings call, apply MFAOptions {mfa_options} to {username} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminUpdateAuthEventFeedback Mark a user's sign-in event as valid or invalid · Amazon Cognito Admin Update Auth Event Feedback #
Ask an LLM
“How can an admin flag a risky sign-in event as legitimate or fraudulent?”
“Can I give the adaptive authentication engine feedback on a specific user's auth event?”
Tell an agent
Mark auth event {event_id} for user {username} in pool {user_pool_id} as {feedback}.
As an admin, report {username}'s sign-in event {event_id} in pool {user_pool_id} as {feedback}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminUpdateDeviceStatus Change a user's device remembered status as an admin · Amazon Cognito Admin Update Device Status #
Ask an LLM
“How does an admin mark a user's device as remembered or not remembered?”
“Can I stop remembering a user's device without forgetting it entirely?”
Tell an agent
Set device {device_key} for user {username} in pool {user_pool_id} to {status}.
As an admin, mark {username}'s device {device_key} in pool {user_pool_id} as not remembered.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminUpdateUserAttributes Update a user's attributes as an admin · Amazon Cognito Admin Update User Attributes #
Ask an LLM
“How does an admin change a user's email, name or custom attributes?”
“Can I mark a user's email as verified when updating their profile from the backend?”
Tell an agent
Update attributes for user {username} in pool {user_pool_id} to {attributes}.
As an admin, set {username}'s profile fields in pool {user_pool_id} to {attributes}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AdminUserGlobalSignOut Sign a user out of all devices as an admin · Amazon Cognito Admin User Global Sign Out #
Ask an LLM
“How can an admin sign a compromised user out everywhere by revoking their refresh tokens?”
“Can I force a specific user to log out on every device?”
Tell an agent destructive · confirm first
Sign user {username} out of all sessions in pool {user_pool_id}.
As an admin, revoke every refresh token for {username} in user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.AssociateSoftwareToken Start setting up an authenticator app for MFA · Amazon Cognito Associate Software Token #
Ask an LLM
“How do I get the secret code a user scans into an authenticator app for TOTP MFA?”
“Can I begin authenticator app enrollment during a sign-in session instead of with an access token?”
Tell an agent
Generate a TOTP secret to register an authenticator app for the user with access token {access_token}.
Start authenticator app MFA setup in sign-in session {session}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ChangePassword Change the signed-in user's password · Amazon Cognito Change Password #
Ask an LLM
“How does a signed-in user change their own password?”
“Does a user need their old password to set a new one?”
Tell an agent
Change my password from {old_password} to {new_password} using access token {access_token}.
Replace the current user's password {old_password} with {new_password} (token {access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ConfirmDevice Confirm and start tracking a new device · Amazon Cognito Confirm Device #
Ask an LLM
“How does an app register a device so Cognito can remember it for the signed-in user?”
“Can I give a friendly name to a device when confirming it?”
Tell an agent
Confirm device {device_key} for the user with access token {access_token}.
Start tracking device {device_key} as {device_name} for the signed-in user ({access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ConfirmForgotPassword Set a new password with a reset code · Amazon Cognito Confirm Forgot Password #
Ask an LLM
“How does a user finish resetting a forgotten password with the code they received?”
“What do I submit along with the confirmation code to complete a password reset?”
Tell an agent
Complete the password reset for {username} with code {code} and new password {password} via client {client_id}.
Use reset code {code} to set {username}'s new password to {password} on app client {client_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ConfirmSignUp Confirm a self sign-up with a code · Amazon Cognito Confirm Sign Up #
Ask an LLM
“How does a new user confirm their registration with the code emailed or texted to them?”
“Can confirming sign-up move an email alias from another account?”
Tell an agent
Confirm sign-up for {username} with code {code} on app client {client_id}.
Verify new registration {username} using confirmation code {code} through client {client_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateGroup Create a user group · Amazon Cognito Create Group #
Ask an LLM
“How do I create a group like admins or editors in my user pool?”
“Can I attach an IAM role and a precedence to a new group?”
Tell an agent
Create group {group} in user pool {user_pool_id}.
Add a new group {group} to pool {user_pool_id} with role {role_arn} and precedence {precedence}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateIdentityProvider Add a third-party identity provider to a user pool · Amazon Cognito Create Identity Provider #
Ask an LLM
“How do I let users sign in to my user pool with SAML or an OIDC provider?”
“Can I map attributes from an external identity provider onto user pool attributes?”
Tell an agent
Add identity provider {provider_name} of type {provider_type} to pool {user_pool_id} with details {details}.
Set up {provider_type} federation called {provider_name} in pool {user_pool_id} using {details} and attribute mapping {mapping}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateResourceServer Create a resource server with OAuth scopes · Amazon Cognito Create Resource Server #
Ask an LLM
“How do I define custom OAuth scopes for my API in a user pool?”
“Can I register my backend API as a resource server so app clients can request its scopes?”
Tell an agent
Create resource server {name} with identifier {identifier} in pool {user_pool_id}.
Register API {identifier} named {name} in pool {user_pool_id} with custom scopes {scopes}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateUserImportJob Create a job to bulk import users · Amazon Cognito Create User Import Job #
Ask an LLM
“How do I migrate users into a user pool in bulk from a CSV file?”
“What IAM role does a bulk user import need for CloudWatch logging?”
Tell an agent
Create user import job {job_name} for pool {user_pool_id} logging with role {role_arn}.
Set up a bulk CSV import called {job_name} into pool {user_pool_id} using CloudWatch role {role_arn}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateUserPool Create a new user pool · Amazon Cognito Create User Pool #
Ask an LLM
“How do I create a Cognito user pool for my app's sign-up and sign-in?”
“Can I require MFA and set a password policy when creating a user pool?”
Tell an agent
Create a user pool named {pool_name}.
Create user pool {pool_name} with MFA set to {mfa} and password policy {policies}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateUserPoolClient Create an app client for a user pool · Amazon Cognito Create User Pool Client #
Ask an LLM
“How do I register a web or mobile app as a client of my user pool?”
“Can I generate a client secret and set token lifetimes for a new app client?”
Tell an agent
Create app client {client_name} in user pool {user_pool_id}.
Create client {client_name} in pool {user_pool_id} with a secret ({generate_secret}) and callback URLs {callbacks}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.CreateUserPoolDomain Create a hosted UI domain for a user pool · Amazon Cognito Create User Pool Domain #
Ask an LLM
“How do I give my user pool's hosted sign-in pages a domain?”
“Can I use my own custom domain with an ACM certificate for the hosted UI?”
Tell an agent
Create domain {domain} for user pool {user_pool_id}.
Set up custom domain {domain} for pool {user_pool_id} with certificate config {custom_config}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteGroup Delete a user group · Amazon Cognito Delete Group #
Ask an LLM
“How do I remove a group I no longer need from my user pool?”
“Does deleting a group delete the users who were in it?”
Tell an agent destructive · confirm first
Delete group {group} from user pool {user_pool_id}.
Get rid of the {group} group entirely in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteIdentityProvider Remove a third-party identity provider · Amazon Cognito Delete Identity Provider #
Ask an LLM
“How do I stop users from signing in through a SAML or social provider on my user pool?”
“Can I delete a federation provider I configured by mistake?”
Tell an agent destructive · confirm first
Delete identity provider {provider_name} from user pool {user_pool_id}.
Remove the {provider_name} federation from pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteResourceServer Delete a resource server · Amazon Cognito Delete Resource Server #
Ask an LLM
“How do I remove an API resource server and its custom scopes from my user pool?”
“Can I delete a resource server identifier I no longer use?”
Tell an agent destructive · confirm first
Delete resource server {identifier} from user pool {user_pool_id}.
Remove API {identifier} and its OAuth scopes from pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteUser Let a signed-in user delete their own account · Amazon Cognito Delete User #
Ask an LLM
“How can a user delete their own account from inside my app?”
“Can a signed-in user close their profile with just their access token?”
Tell an agent destructive · confirm first
Delete my own account using access token {access_token}.
Permanently close the signed-in user's profile for token {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteUserAttributes Let a signed-in user delete their own attributes · Amazon Cognito Delete User Attributes #
Ask an LLM
“How does a signed-in user remove a field like their phone number from their own profile?”
“Can users clear their own custom attributes with an access token?”
Tell an agent destructive · confirm first
Delete my attributes {attribute_names} using access token {access_token}.
Clear {attribute_names} from the current user's own profile (token {access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteUserPool Delete a user pool · Amazon Cognito Delete User Pool #
Ask an LLM
“How do I permanently delete a Cognito user pool and all its users?”
“Will deletion protection stop me from deleting a user pool?”
Tell an agent destructive · confirm first
Delete user pool {user_pool_id}.
Tear down pool {user_pool_id} along with every user in it.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteUserPoolClient Delete an app client · Amazon Cognito Delete User Pool Client #
Ask an LLM
“How do I remove an app client from my user pool?”
“Can I revoke an app's access to the pool by deleting its client ID?”
Tell an agent destructive · confirm first
Delete app client {client_id} from user pool {user_pool_id}.
Remove client {client_id} so it can no longer use pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DeleteUserPoolDomain Delete a user pool's hosted UI domain · Amazon Cognito Delete User Pool Domain #
Ask an LLM
“How do I remove the hosted sign-in domain from my user pool?”
“Can I delete a custom domain before assigning a different one to the pool?”
Tell an agent destructive · confirm first
Delete domain {domain} from user pool {user_pool_id}.
Take hosted UI domain {domain} off pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeIdentityProvider Get a third-party identity provider's settings · Amazon Cognito Describe Identity Provider #
Ask an LLM
“How can I see how a SAML or OIDC provider is configured on my user pool?”
“What attribute mapping does an existing identity provider use?”
Tell an agent
Describe identity provider {provider_name} in user pool {user_pool_id}.
Show the details and attribute mapping of federation {provider_name} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeResourceServer Get a resource server and its scopes · Amazon Cognito Describe Resource Server #
Ask an LLM
“Which custom scopes are defined on a resource server in my user pool?”
“How do I look up a single resource server by its identifier?”
Tell an agent
Describe resource server {identifier} in user pool {user_pool_id}.
Show the name and scopes of API {identifier} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeRiskConfiguration Get a user pool's advanced security risk settings · Amazon Cognito Describe Risk Configuration #
Ask an LLM
“How can I review the compromised credentials and account takeover settings on my user pool?”
“Can I see the risk configuration for one specific app client?”
Tell an agent
Show the risk configuration for user pool {user_pool_id}.
Describe the advanced security risk settings for app client {client_id} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeUserImportJob Check the status of a user import job · Amazon Cognito Describe User Import Job #
Ask an LLM
“How do I check whether my bulk user import has finished or failed?”
“Can I see how many users were imported or skipped in an import job?”
Tell an agent
Describe user import job {job_id} in pool {user_pool_id}.
Show progress and counts for import {job_id} into pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeUserPool Get a user pool's configuration · Amazon Cognito Describe User Pool #
Ask an LLM
“How do I view the full configuration of a user pool, like its password policy and triggers?”
“Which Lambda triggers and MFA setting does my user pool currently have?”
Tell an agent
Describe user pool {user_pool_id}.
Show the policies, Lambda triggers and MFA mode of pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeUserPoolClient Get an app client's settings · Amazon Cognito Describe User Pool Client #
Ask an LLM
“How can I see an app client's OAuth flows, callback URLs and token lifetimes?”
“Can I retrieve the client secret and settings for an existing app client?”
Tell an agent
Describe app client {client_id} in user pool {user_pool_id}.
Show the callback URLs and allowed flows for client {client_id} of pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.DescribeUserPoolDomain Get details of a user pool domain · Amazon Cognito Describe User Pool Domain #
Ask an LLM
“How do I check the status and CloudFront distribution of my hosted UI domain?”
“Which user pool is a given sign-in domain attached to?”
Tell an agent
Describe user pool domain {domain}.
Show the status and owning pool of sign-in domain {domain}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ForgetDevice Let a signed-in user forget one of their devices · Amazon Cognito Forget Device #
Ask an LLM
“How does a signed-in user remove a remembered device from their own account?”
“Can a user make the app stop remembering their current device?”
Tell an agent destructive · confirm first
Forget my device {device_key}.
Remove remembered device {device_key} from the current user's account using token {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ForgotPassword Send a forgotten-password reset code · Amazon Cognito Forgot Password #
Ask an LLM
“How do I start the forgot password flow and send a user a reset code?”
“Where does the reset code go when a user says they forgot their password?”
Tell an agent
Send a password reset code to {username} via app client {client_id}.
Kick off forgot-password for user {username} on client {client_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetCSVHeader Get the CSV header for a user import file · Amazon Cognito Get C S V Header #
Ask an LLM
“What columns does my CSV file need for a bulk user import into this pool?”
“How do I get the exact header row to use when preparing a user import file?”
Tell an agent
Get the import CSV header for user pool {user_pool_id}.
Show the column list my user import CSV must use for pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetDevice Let a signed-in user view one of their devices · Amazon Cognito Get Device #
Ask an LLM
“How can a signed-in user see the details of one of their own remembered devices?”
“Can my app show a user when their device last signed in?”
Tell an agent
Get my device {device_key}.
Show the current user's device {device_key} using access token {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetGroup Get a group's details · Amazon Cognito Get Group #
Ask an LLM
“How do I look up a group's description, IAM role and precedence?”
“Can I fetch a single group by name from my user pool?”
Tell an agent
Get group {group} in user pool {user_pool_id}.
Show the role and precedence of the {group} group in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetIdentityProviderByIdentifier Find an identity provider by its identifier · Amazon Cognito Get Identity Provider by Identifier #
Ask an LLM
“How do I find which identity provider in my user pool uses a given IdP identifier?”
“Can I look up a federation provider by an alias like a company domain?”
Tell an agent
Find the identity provider with identifier {idp_identifier} in pool {user_pool_id}.
Look up which federation in pool {user_pool_id} owns IdP identifier {idp_identifier}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetLogDeliveryConfiguration Get a user pool's log delivery settings · Amazon Cognito Get Log Delivery Configuration #
Ask an LLM
“Where is my user pool sending its message delivery error logs?”
“How do I check the logging configuration of a user pool?”
Tell an agent
Get the log delivery configuration for user pool {user_pool_id}.
Show where pool {user_pool_id} exports its logs.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetSigningCertificate Get a user pool's SAML signing certificate · Amazon Cognito Get Signing Certificate #
Ask an LLM
“How do I get the certificate my user pool uses to sign SAML requests?”
“Which signing certificate should my SAML identity provider trust for this pool?”
Tell an agent
Get the signing certificate for user pool {user_pool_id}.
Fetch the SAML signing cert of pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetUICustomization Get hosted UI customization · Amazon Cognito Get U I Customization #
Ask an LLM
“How can I see the CSS and logo currently applied to my hosted sign-in page?”
“Can I view the hosted UI styling for one specific app client?”
Tell an agent
Get the hosted UI customization for user pool {user_pool_id}.
Show the CSS and logo used for app client {client_id} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetUser Get the signed-in user's profile · Amazon Cognito Get User #
Ask an LLM
“How does my app read the current user's attributes from their access token?”
“Can a signed-in user fetch their own profile without admin credentials?”
Tell an agent
Get my profile using access token {access_token}.
Show the attributes of the user who owns token {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetUserAttributeVerificationCode Send a verification code for a user attribute · Amazon Cognito Get User Attribute Verification Code #
Ask an LLM
“How do I send a user a code to verify their new email address or phone number?”
“Can a signed-in user request a fresh verification code for their phone number?”
Tell an agent
Send me a verification code for {attribute} using access token {access_token}.
Request a code to verify the current user's {attribute} (token {access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GetUserPoolMfaConfig Get a user pool's MFA configuration · Amazon Cognito Get User Pool Mfa Config #
Ask an LLM
“Is MFA required, optional or off on my user pool?”
“Which MFA methods, SMS or authenticator app, are enabled for a user pool?”
Tell an agent
Get the MFA configuration for user pool {user_pool_id}.
Show which MFA methods are turned on in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.GlobalSignOut Sign the current user out of all devices · Amazon Cognito Global Sign Out #
Ask an LLM
“How does a user sign themselves out of every device at once?”
“Can my app invalidate all of the current user's refresh tokens on logout?”
Tell an agent destructive · confirm first
Sign me out everywhere using access token {access_token}.
Log the user holding token {access_token} out of all their sessions.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.InitiateAuth Start sign-in for a user from the client app · Amazon Cognito Initiate Auth #
Ask an LLM
“How does my client app start signing in a user with SRP or a refresh token?”
“Can I use a refresh token to get new access and ID tokens?”
Tell an agent
Start client-side sign-in with flow {auth_flow} for app client {client_id}.
Authenticate through client {client_id} with flow {auth_flow} and parameters {auth_params}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListDevices Let a signed-in user list their devices · Amazon Cognito List Devices #
Ask an LLM
“How can a user see all the devices remembered on their own account?”
“Can my app show users a page of their trusted devices?”
Tell an agent
List my devices using access token {access_token}.
Show up to {limit} remembered devices for the signed-in user ({access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListGroups List the groups in a user pool · Amazon Cognito List Groups #
Ask an LLM
“What groups exist in my user pool?”
“Can I page through all the groups defined in a pool?”
Tell an agent
List the groups in user pool {user_pool_id}.
Show {limit} groups at a time from pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListIdentityProviders List the identity providers on a user pool · Amazon Cognito List Identity Providers #
Ask an LLM
“Which SAML, OIDC or social providers are set up on my user pool?”
“How do I enumerate every federation provider for a pool?”
Tell an agent
List the identity providers in user pool {user_pool_id}.
Show up to {max} federation providers configured for pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListResourceServers List the resource servers in a user pool · Amazon Cognito List Resource Servers #
Ask an LLM
“What resource servers and custom scope sets are defined in my user pool?”
“Can I page through every API resource server registered with a pool?”
Tell an agent
List the resource servers in user pool {user_pool_id}.
Show {max} registered APIs and their scopes from pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListTagsForResource List tags on a user pool · Amazon Cognito List Tags for Resource #
Ask an LLM
“How do I see the tags assigned to a Cognito user pool?”
“What cost allocation tags are on my user pool right now?”
Tell an agent
List the tags on user pool {resource_arn}.
Show every tag key and value on user pool ARN {resource_arn}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListUserImportJobs List user import jobs · Amazon Cognito List User Import Jobs #
Ask an LLM
“Which bulk user import jobs have been run against my user pool?”
“Can I review past import jobs for a pool a page at a time?”
Tell an agent
List up to {max} user import jobs for pool {user_pool_id}.
Show the bulk import history of pool {user_pool_id}, {max} jobs per page.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListUserPoolClients List the app clients of a user pool · Amazon Cognito List User Pool Clients #
Ask an LLM
“Which app clients are registered with my user pool?”
“How do I find the client IDs for every app using a pool?”
Tell an agent
List the app clients in user pool {user_pool_id}.
Show {max} client IDs and names for pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListUserPools List user pools in the account · Amazon Cognito List User Pools #
Ask an LLM
“What Cognito user pools exist in my AWS account?”
“Can I page through all my user pools a set number at a time?”
Tell an agent
List my user pools, {max} per page.
Show the next {max} user pools after token {next_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListUsers List and search users in a user pool · Amazon Cognito List Users #
Ask an LLM
“How do I find users in my pool by email address or phone number?”
“Can I filter the user list by account status, like unconfirmed users?”
Tell an agent
List the users in user pool {user_pool_id}.
Search pool {user_pool_id} for users matching filter {filter}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ListUsersInGroup List the members of a group · Amazon Cognito List Users in Group #
Ask an LLM
“Who are the members of a particular group in my user pool?”
“Can I page through everyone in the admins group?”
Tell an agent
List the users in group {group} of pool {user_pool_id}.
Show {limit} members of the {group} group in user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.ResendConfirmationCode Resend a sign-up confirmation code · Amazon Cognito Resend Confirmation Code #
Ask an LLM
“How do I send a new sign-up confirmation code to a user who never got the first one?”
“Can an unconfirmed user ask for their registration code again?”
Tell an agent
Resend the sign-up confirmation code to {username} via app client {client_id}.
Send unconfirmed user {username} another registration code through client {client_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.RespondToAuthChallenge Answer a sign-in challenge from the client app · Amazon Cognito Respond to Auth Challenge #
Ask an LLM
“How does my client app answer an SMS MFA or new-password-required challenge?”
“What does a client send to complete sign-in after receiving a challenge and session?”
Tell an agent
Answer challenge {challenge} for app client {client_id} with responses {responses}.
Complete client-side sign-in by replying to {challenge} in session {session} via client {client_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.RevokeToken Revoke a refresh token · Amazon Cognito Revoke Token #
Ask an LLM
“How do I revoke a refresh token and the access tokens issued from it?”
“Does revoking a refresh token require the app client secret?”
Tell an agent destructive · confirm first
Revoke refresh token {token} for app client {client_id}.
Invalidate refresh token {token} issued to client {client_id} using secret {client_secret}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetLogDeliveryConfiguration Configure log delivery for a user pool · Amazon Cognito Set Log Delivery Configuration #
Ask an LLM
“How do I send my user pool's message delivery errors to CloudWatch Logs?”
“Can I change where a user pool exports its logs?”
Tell an agent
Set the log delivery configuration of user pool {user_pool_id} to {log_configs}.
Start exporting logs for pool {user_pool_id} with configuration {log_configs}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetRiskConfiguration Configure advanced security risk settings · Amazon Cognito Set Risk Configuration #
Ask an LLM
“How do I block sign-ins that use compromised credentials in my user pool?”
“Can I set account takeover actions or IP exceptions for one app client?”
Tell an agent
Set account takeover protection {takeover} on user pool {user_pool_id}.
Configure compromised credentials handling {compromised} for client {client_id} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetUICustomization Customize the hosted UI look and logo · Amazon Cognito Set U I Customization #
Ask an LLM
“How do I upload a logo and custom CSS for my hosted sign-in page?”
“Can I style the hosted UI differently for each app client?”
Tell an agent
Apply custom CSS {css} to the hosted UI of user pool {user_pool_id}.
Set logo {image} and styles {css} for app client {client_id} in pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetUserMFAPreference Let a signed-in user set their MFA preference · Amazon Cognito Set User M F a Preference #
Ask an LLM
“How does a signed-in user choose between SMS and authenticator app MFA for themselves?”
“Can users turn on their own MFA with just their access token?”
Tell an agent
Set my SMS MFA settings to {sms} using access token {access_token}.
Make authenticator app MFA ({totp}) preferred for the current user with token {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetUserPoolMfaConfig Set a user pool's MFA configuration · Amazon Cognito Set User Pool Mfa Config #
Ask an LLM
“How do I make MFA required or optional for everyone in my user pool?”
“Can I enable authenticator app MFA for a whole pool?”
Tell an agent
Set MFA for user pool {user_pool_id} to {mfa}.
Turn on authenticator app MFA {totp_config} pool-wide for {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SetUserSettings Set the signed-in user's legacy SMS MFA options · Amazon Cognito Set User Settings #
Ask an LLM
“Is there an older self-service call for a user to set their SMS MFA delivery options?”
“How does a signed-in user update their legacy MFAOptions?”
Tell an agent
Set my legacy MFA options to {mfa_options} using access token {access_token}.
With the older user settings call, apply MFAOptions {mfa_options} for token holder {access_token}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.SignUp Register a new user through self sign-up · Amazon Cognito Sign Up #
Ask an LLM
“How do users register themselves for my app with a username and password?”
“Can I collect attributes like email and name at self sign-up time?”
Tell an agent
Sign up {username} with password {password} on app client {client_id}.
Register new user {username} ({password}) through client {client_id} with attributes {attributes}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.StartUserImportJob Start a user import job · Amazon Cognito Start User Import Job #
Ask an LLM
“How do I kick off a bulk user import after uploading the CSV?”
“When does a created import job actually begin importing users?”
Tell an agent
Start user import job {job_id} in pool {user_pool_id}.
Begin running bulk import {job_id} for user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.StopUserImportJob Stop a running user import job · Amazon Cognito Stop User Import Job #
Ask an LLM
“How do I halt a bulk user import that is still in progress?”
“Can I cancel an import job partway through?”
Tell an agent destructive · confirm first
Stop user import job {job_id} in pool {user_pool_id}.
Cancel the in-progress bulk import {job_id} for user pool {user_pool_id}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.TagResource Tag a user pool · Amazon Cognito Tag Resource #
Ask an LLM
“How do I add cost allocation tags to a Cognito user pool?”
“Can I label a user pool with key-value tags for billing and access control?”
Tell an agent
Add tags {tags} to user pool {resource_arn}.
Tag user pool ARN {resource_arn} with {tags}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UntagResource Remove tags from a user pool · Amazon Cognito Untag Resource #
Ask an LLM
“How do I delete tags from a Cognito user pool?”
“Can I strip specific tag keys off a user pool?”
Tell an agent destructive · confirm first
Remove tag keys {tag_keys} from user pool {resource_arn}.
Untag user pool ARN {resource_arn}, dropping keys {tag_keys}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateAuthEventFeedback Give feedback on a sign-in event with a token · Amazon Cognito Update Auth Event Feedback #
Ask an LLM
“How does a user confirm or deny a suspicious sign-in using the feedback link token?”
“Can end users report an auth event as fraudulent without admin rights?”
Tell an agent
Mark event {event_id} for {username} in pool {user_pool_id} as {feedback} using feedback token {feedback_token}.
With token {feedback_token}, report {username}'s sign-in {event_id} in pool {user_pool_id} as {feedback}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateDeviceStatus Let a signed-in user change a device's remembered status · Amazon Cognito Update Device Status #
Ask an LLM
“How does a user mark their own device as remembered or not remembered?”
“Can my app let users stop remembering one of their own devices?”
Tell an agent
Set my device {device_key} to {status} using access token {access_token}.
Remember the current user's device {device_key} (token {access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateGroup Update a group's role, description or precedence · Amazon Cognito Update Group #
Ask an LLM
“How do I change the IAM role attached to an existing group?”
“Can I edit a group's description or precedence after creating it?”
Tell an agent
Update group {group} in pool {user_pool_id} to use role {role_arn}.
Change the description of existing group {group} in pool {user_pool_id} to {description}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateIdentityProvider Update a third-party identity provider · Amazon Cognito Update Identity Provider #
Ask an LLM
“How do I change the metadata URL or attribute mapping of an existing SAML provider?”
“Can I edit the IdP identifiers on a federation provider I already set up?”
Tell an agent
Update identity provider {provider_name} in pool {user_pool_id} with details {details}.
Change the attribute mapping of existing federation {provider_name} in pool {user_pool_id} to {mapping}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateResourceServer Update a resource server's name or scopes · Amazon Cognito Update Resource Server #
Ask an LLM
“How do I add or change the custom scopes on an existing resource server?”
“Can I rename a resource server without changing its identifier?”
Tell an agent
Update resource server {identifier} in pool {user_pool_id} with name {name} and scopes {scopes}.
Rename existing API {identifier} in user pool {user_pool_id} to {name}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateUserAttributes Let a signed-in user update their own attributes · Amazon Cognito Update User Attributes #
Ask an LLM
“How does a signed-in user change their own email or name?”
“Will updating their own email trigger a verification code for the user?”
Tell an agent
Update my attributes to {attributes} using access token {access_token}.
Change the current user's own profile fields to {attributes} (token {access_token}).
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateUserPool Update a user pool's settings · Amazon Cognito Update User Pool #
Ask an LLM
“How do I change the password policy or Lambda triggers on an existing user pool?”
“Can I turn on deletion protection for a user pool I already created?”
Tell an agent
Update the password policy of user pool {user_pool_id} to {policies}.
Set the Lambda triggers on existing pool {user_pool_id} to {lambda_config}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateUserPoolClient Update an app client's settings · Amazon Cognito Update User Pool Client #
Ask an LLM
“How do I add a callback URL or change OAuth flows on an existing app client?”
“Can I shorten the access token lifetime for an app client already in use?”
Tell an agent
Update app client {client_id} in pool {user_pool_id} with callback URLs {callbacks}.
Set the access token validity of existing client {client_id} in pool {user_pool_id} to {validity}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.UpdateUserPoolDomain Update the certificate on a custom domain · Amazon Cognito Update User Pool Domain #
Ask an LLM
“How do I swap the SSL certificate on my user pool's custom domain?”
“Can I renew the ACM certificate used by the hosted UI custom domain?”
Tell an agent
Update custom domain {domain} of pool {user_pool_id} to certificate config {custom_config}.
Replace the ACM certificate on {domain} for user pool {user_pool_id} using {custom_config}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.VerifySoftwareToken Verify an authenticator app code to finish MFA setup · Amazon Cognito Verify Software Token #
Ask an LLM
“How do I confirm a user's authenticator app is set up by checking their first TOTP code?”
“What finishes authenticator app MFA registration after the secret is scanned?”
Tell an agent
Verify TOTP code {code} for the user with access token {access_token}.
Finish authenticator setup with code {code} and name the device {device_name}.
POST /#X-Amz-Target=AWSCognitoIdentityProviderService.VerifyUserAttribute Verify a user attribute with a code · Amazon Cognito Verify User Attribute #
Ask an LLM
“How does a user confirm their email address or phone number with the code we sent?”
“Can a signed-in user mark their phone number as verified by entering a code?”
Tell an agent
Verify my {attribute} with code {code} using access token {access_token}.
Submit verification code {code} for the current user's {attribute} (token {access_token}).

Documentation

📖
Documentation
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html
📖
APIReference
https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/Welcome.html
📖
GettingStarted
https://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-cognito-user-pools.html
📖
Documentation
https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-identity.html
📖
APIReference
https://docs.aws.amazon.com/cognitoidentity/latest/APIReference/Welcome.html
📖
GettingStarted
https://docs.aws.amazon.com/cognito/latest/developerguide/getting-started-with-identity-pools.html

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/openapi/amazon-cognito-amazon-cognito-identity-provider-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-schema/user-pools-user-pool-type-schema.json
📊
JSONStructure
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-structure/user-pools-user-pool-type-structure.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-schema/identity-pools-identity-pool-schema.json
📊
JSONStructure
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-structure/identity-pools-identity-pool-structure.json

Other Resources

🔗
JSONLD
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-ld/amazon-cognito-user-pools-context.jsonld
🔗
GraphQL
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/graphql/amazon-cognito-graphql.md
🔗
JSONLD
https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/json-ld/amazon-cognito-identity-pools-context.jsonld

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/amazon-cognito-amazon-cognito-identity-provider-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

amazon-cognito-amazon-cognito-identity-provider-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  version: '2016-04-18'
  x-release: v4
  title: Amazon Cognito Identity Provider API
  description: With the Amazon Cognito user pools API, you can set up user pools and app clients, and authenticate users.
  x-logo:
    url: https://twitter.com/awscloud/profile_image?size=original
    backgroundColor: '#FFFFFF'
  termsOfService: https://aws.amazon.com/service-terms/
  contact:
    name: Mike Ralphson
    email: mike.ralphson@gmail.com
    url: https://github.com/mermade/aws2openapi
    x-twitter: PermittedSoc
  license:
    name: Apache 2.0 License
    url: http://www.apache.org/licenses/
  x-providerName: amazonaws.com
  x-serviceName: cognito-idp
  x-origin:
  - contentType: application/json
    url: https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/cognito-idp-2016-04-18.normal.json
    converter:
      url: https://github.com/mermade/aws2openapi
      version: 1.0.0
    x-apisguru-driver: external
  x-apiClientRegistration:
    url: https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct
  x-apisguru-categories:
  - cloud
  x-preferred: true
servers:
- url: http://cognito-idp.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Amazon Cognito Identity Provider multi-region endpoint
- url: https://cognito-idp.{region}.amazonaws.com
  variables:
    region:
      description: The AWS region
      enum:
      - us-east-1
      - us-east-2
      - us-west-1
      - us-west-2
      - us-gov-west-1
      - us-gov-east-1
      - ca-central-1
      - eu-north-1
      - eu-west-1
      - eu-west-2
      - eu-west-3
      - eu-central-1
      - eu-south-1
      - af-south-1
      - ap-northeast-1
      - ap-northeast-2
      - ap-northeast-3
      - ap-southeast-1
      - ap-southeast-2
      - ap-east-1
      - ap-south-1
      - sa-east-1
      - me-south-1
      default: us-east-1
  description: The Amazon Cognito Identity Provider multi-region endpoint
- url: http://cognito-idp.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Amazon Cognito Identity Provider endpoint for China (Beijing) and China (Ningxia)
- url: https://cognito-idp.{region}.amazonaws.com.cn
  variables:
    region:
      description: The AWS region
      enum:
      - cn-north-1
      - cn-northwest-1
      default: cn-north-1
  description: The Amazon Cognito Identity Provider endpoint for China (Beijing) and China (Ningxia)
security:
- hmac: []
tags:


# --- truncated at 32 KB (903 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-cognito/refs/heads/main/openapi/amazon-cognito-amazon-cognito-identity-provider-api-openapi.yml