{ "description": "UserPool is the Schema for the UserPools API", "properties": { "apiVersion": { "description": "APIVersion defines the versioned schema of this representation of an object.\nServers should convert recognized schemas to the latest internal value, and\nmay reject unrecognized values.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources", "type": "string" }, "kind": { "description": "Kind is a string value representing the REST resource this object represents.\nServers may infer this from the endpoint the client submits requests to.\nCannot be updated.\nIn CamelCase.\nMore info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds", "type": "string" }, "metadata": { "type": "object" }, "spec": { "description": "UserPoolSpec defines the desired state of UserPool.", "properties": { "accountRecoverySetting": { "description": "The available verified method a user can use to recover their password when\nthey call ForgotPassword. You can use this setting to define a preferred\nmethod when a user has more than one method available. With this setting,\nSMS doesn't qualify for a valid password recovery mechanism if the user also\nhas SMS multi-factor authentication (MFA) activated. In the absence of this\nsetting, Amazon Cognito uses the legacy behavior to determine the recovery\nmethod where SMS is preferred through email.", "properties": { "recoveryMechanisms": { "items": { "description": "A recovery option for a user. The AccountRecoverySettingType data type is\nan array of this object. Each RecoveryOptionType has a priority property\nthat determines whether it is a primary or secondary option.\n\nFor example, if verified_email has a priority of 1 and verified_phone_number\nhas a priority of 2, your user pool sends account-recovery messages to a\nverified email address but falls back to an SMS message if the user has a\nverified phone number. The admin_only option prevents self-service account\nrecovery.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "name": { "type": "string" }, "priority": { "format": "int64", "type": "integer" } }, "type": "object", "additionalProperties": false }, "type": "array" } }, "type": "object", "additionalProperties": false }, "adminCreateUserConfig": { "description": "The configuration for AdminCreateUser requests.", "properties": { "allowAdminCreateUserOnly": { "type": "boolean" }, "inviteMessageTemplate": { "description": "The message template structure.", "properties": { "emailMessage": { "type": "string" }, "emailSubject": { "type": "string" }, "sMSMessage": { "type": "string" } }, "type": "object", "additionalProperties": false }, "unusedAccountValidityDays": { "format": "int64", "type": "integer" } }, "type": "object", "additionalProperties": false }, "aliasAttributes": { "description": "Attributes supported as an alias for this user pool. Possible values: phone_number,\nemail, or preferred_username.", "items": { "type": "string" }, "type": "array" }, "autoVerifiedAttributes": { "description": "The attributes to be auto-verified. Possible values: email, phone_number.", "items": { "type": "string" }, "type": "array" }, "deletionProtection": { "description": "When active, DeletionProtection prevents accidental deletion of your userpool.\nBefore you can delete a user pool that you have protected against deletion,\nyoumust deactivate this feature.\n\nWhen you try to delete a protected user pool in a DeleteUserPool API request,\nAmazon Cognito returns an InvalidParameterException error. To delete a protected\nuser pool, send a new DeleteUserPool request after you deactivate deletion\nprotection in an UpdateUserPool API request.", "type": "string" }, "deviceConfiguration": { "description": "The device-remembering configuration for a user pool. A null value indicates\nthat you have deactivated device remembering in your user pool.\n\nWhen you provide a value for any DeviceConfiguration field, you activate\nthe Amazon Cognito device-remembering feature.", "properties": { "challengeRequiredOnNewDevice": { "type": "boolean" }, "deviceOnlyRememberedOnUserPrompt": { "type": "boolean" } }, "type": "object", "additionalProperties": false }, "emailConfiguration": { "description": "The email configuration of your user pool. The email configuration type sets\nyour preferred sending method, Amazon Web Services Region, and sender for\nmessages from your user pool.", "properties": { "configurationSet": { "type": "string" }, "emailSendingAccount": { "type": "string" }, "from": { "type": "string" }, "replyToEmailAddress": { "type": "string" }, "sourceARN": { "type": "string" } }, "type": "object", "additionalProperties": false }, "emailVerificationMessage": { "description": "This parameter is no longer used. See VerificationMessageTemplateType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html).\n\nRegex Pattern: `^[\\p{L}\\p{M}\\p{S}\\p{N}\\p{P}\\s*]*\\{####\\}[\\p{L}\\p{M}\\p{S}\\p{N}\\p{P}\\s*]*$`", "type": "string" }, "emailVerificationSubject": { "description": "This parameter is no longer used. See VerificationMessageTemplateType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html).\n\nRegex Pattern: `^[\\p{L}\\p{M}\\p{S}\\p{N}\\p{P}\\s]+$`", "type": "string" }, "lambdaConfig": { "description": "A collection of user pool Lambda triggers. Amazon Cognito invokes triggers\nat several possible stages of authentication operations. Triggers can modify\nthe outcome of the operations that invoked them.", "properties": { "createAuthChallenge": { "type": "string" }, "customEmailSender": { "description": "The properties of a custom email sender Lambda trigger.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "lambdaARN": { "type": "string" }, "lambdaVersion": { "type": "string" } }, "type": "object", "additionalProperties": false }, "customMessage": { "type": "string" }, "customSMSSender": { "description": "The properties of a custom SMS sender Lambda trigger.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "lambdaARN": { "type": "string" }, "lambdaVersion": { "type": "string" } }, "type": "object", "additionalProperties": false }, "defineAuthChallenge": { "type": "string" }, "kmsKeyID": { "type": "string" }, "postAuthentication": { "type": "string" }, "postConfirmation": { "type": "string" }, "preAuthentication": { "type": "string" }, "preSignUp": { "type": "string" }, "preTokenGeneration": { "type": "string" }, "preTokenGenerationConfig": { "description": "The properties of a pre token generation Lambda trigger.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "lambdaARN": { "type": "string" }, "lambdaVersion": { "type": "string" } }, "type": "object", "additionalProperties": false }, "userMigration": { "type": "string" }, "verifyAuthChallengeResponse": { "type": "string" } }, "type": "object", "additionalProperties": false }, "mfaConfiguration": { "description": "Specifies MFA configuration details.", "type": "string" }, "name": { "description": "A string used to name the user pool.\n\nRegex Pattern: `^[\\w\\s+=,.@-]+$`", "type": "string" }, "policies": { "description": "The policies associated with the new user pool.", "properties": { "passwordPolicy": { "description": "The password policy settings for a user pool, including complexity, history,\nand length requirements.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "minimumLength": { "format": "int64", "type": "integer" }, "requireLowercase": { "type": "boolean" }, "requireNumbers": { "type": "boolean" }, "requireSymbols": { "type": "boolean" }, "requireUppercase": { "type": "boolean" }, "temporaryPasswordValidityDays": { "format": "int64", "type": "integer" } }, "type": "object", "additionalProperties": false } }, "type": "object", "additionalProperties": false }, "schema": { "description": "An array of schema attributes for the new user pool. These attributes can\nbe standard or custom attributes.", "items": { "description": "A list of the user attributes and their properties in your user pool. The\nattribute schema contains standard attributes, custom attributes with a custom:\nprefix, and developer attributes with a dev: prefix. For more information,\nsee User pool attributes (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html).\n\nDeveloper-only dev: attributes are a legacy feature of user pools, and are\nread-only to all app clients. You can create and update developer-only attributes\nonly with IAM-authenticated API operations. Use app client read/write permissions\ninstead.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "attributeDataType": { "type": "string" }, "developerOnlyAttribute": { "type": "boolean" }, "mutable": { "type": "boolean" }, "name": { "type": "string" }, "numberAttributeConstraints": { "description": "The minimum and maximum values of an attribute that is of the number type,\nfor example custom:age.\n\nThis data type is part of SchemaAttributeType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SchemaAttributeType.html).\nIt defines the length constraints on number-type attributes that you configure\nin CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand displays the length constraints of all number-type attributes in the\nresponse to DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html)", "properties": { "maxValue": { "type": "string" }, "minValue": { "type": "string" } }, "type": "object", "additionalProperties": false }, "required": { "type": "boolean" }, "stringAttributeConstraints": { "description": "The minimum and maximum length values of an attribute that is of the string\ntype, for example custom:department.\n\nThis data type is part of SchemaAttributeType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SchemaAttributeType.html).\nIt defines the length constraints on string-type attributes that you configure\nin CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand displays the length constraints of all string-type attributes in the\nresponse to DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html)", "properties": { "maxLength": { "type": "string" }, "minLength": { "type": "string" } }, "type": "object", "additionalProperties": false } }, "type": "object", "additionalProperties": false }, "type": "array" }, "smsAuthenticationMessage": { "description": "A string representing the SMS authentication message.\n\nRegex Pattern: `\\{####\\}`", "type": "string" }, "smsConfiguration": { "description": "The SMS configuration with the settings that your Amazon Cognito user pool\nmust use to send an SMS message from your Amazon Web Services account through\nAmazon Simple Notification Service. To send SMS messages with Amazon SNS\nin the Amazon Web Services Region that you want, the Amazon Cognito user\npool uses an Identity and Access Management (IAM) role in your Amazon Web\nServices account.", "properties": { "externalID": { "type": "string" }, "snsCallerARN": { "type": "string" }, "snsRegion": { "type": "string" } }, "type": "object", "additionalProperties": false }, "smsVerificationMessage": { "description": "This parameter is no longer used. See VerificationMessageTemplateType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_VerificationMessageTemplateType.html).\n\nRegex Pattern: `\\{####\\}`", "type": "string" }, "tags": { "additionalProperties": { "type": "string" }, "description": "The tags to assign to the user pool.", "type": "object" }, "userAttributeUpdateSettings": { "description": "The settings for updates to user attributes. These settings include the property\nAttributesRequireVerificationBeforeUpdate,a user-pool setting that tells\nAmazon Cognito how to handle changes to the value of your users' email address\nand phone number attributes. Formore information, see Verifying updates to\nemail addresses and phone numbers (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-email-phone-verification.html#user-pool-settings-verifications-verify-attribute-updates).", "properties": { "attributesRequireVerificationBeforeUpdate": { "items": { "type": "string" }, "type": "array" } }, "type": "object", "additionalProperties": false }, "userPoolAddOns": { "description": "User pool add-ons. Contains settings for activation of advanced security\nfeatures. To log user security information but take no action, set to AUDIT.\nTo configure automatic security responses to risky traffic to your user pool,\nset to ENFORCED.\n\nFor more information, see Adding advanced security to a user pool (https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-advanced-security.html).", "properties": { "advancedSecurityMode": { "type": "string" } }, "type": "object", "additionalProperties": false }, "userPoolTags": { "additionalProperties": { "type": "string" }, "description": "The tag keys and values to assign to the user pool. A tag is a label that\nyou can use to categorize and manage user pools in different ways, such as\nby purpose, owner, environment, or other criteria.", "type": "object" }, "usernameAttributes": { "description": "Specifies whether a user can use an email address or phone number as a username\nwhen they sign up.", "items": { "type": "string" }, "type": "array" }, "usernameConfiguration": { "description": "Case sensitivity on the username input for the selected sign-in option. When\ncase sensitivity is set to False (case insensitive), users can sign in with\nany combination of capital and lowercase letters. For example, username,\nUSERNAME, or UserName, or for email, email@example.com or EMaiL@eXamplE.Com.\nFor most use cases, set case sensitivity to False (case insensitive) as a\nbest practice. When usernames and email addresses are case insensitive, Amazon\nCognito treats any variation in case as the same user, and prevents a case\nvariation from being assigned to the same attribute for a different user.\n\nThis configuration is immutable after you set it. For more information, see\nUsernameConfigurationType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UsernameConfigurationType.html).", "properties": { "caseSensitive": { "type": "boolean" } }, "type": "object", "additionalProperties": false }, "verificationMessageTemplate": { "description": "The template for the verification message that your user pool delivers to\nusers who set an email address or phone number attribute.\n\nSet the email message type that corresponds to your DefaultEmailOption selection.\nFor CONFIRM_WITH_LINK, specify an EmailMessageByLink and leave EmailMessage\nblank. For CONFIRM_WITH_CODE, specify an EmailMessage and leave EmailMessageByLink\nblank. When you supply both parameters with either choice, Amazon Cognito\nreturns an error.", "properties": { "defaultEmailOption": { "type": "string" }, "emailMessage": { "type": "string" }, "emailMessageByLink": { "type": "string" }, "emailSubject": { "type": "string" }, "emailSubjectByLink": { "type": "string" }, "smsMessage": { "type": "string" } }, "type": "object", "additionalProperties": false } }, "required": [ "name" ], "type": "object", "additionalProperties": false }, "status": { "description": "UserPoolStatus defines the observed state of UserPool", "properties": { "ackResourceMetadata": { "description": "All CRs managed by ACK have a common `Status.ACKResourceMetadata` member\nthat is used to contain resource sync state, account ownership,\nconstructed ARN for the resource", "properties": { "arn": { "description": "ARN is the Amazon Resource Name for the resource. This is a\nglobally-unique identifier and is set only by the ACK service controller\nonce the controller has orchestrated the creation of the resource OR\nwhen it has verified that an \"adopted\" resource (a resource where the\nARN annotation was set by the Kubernetes user on the CR) exists and\nmatches the supplied CR's Spec field values.\nhttps://github.com/aws/aws-controllers-k8s/issues/270", "type": "string" }, "ownerAccountID": { "description": "OwnerAccountID is the AWS Account ID of the account that owns the\nbackend AWS service API resource.", "type": "string" }, "region": { "description": "Region is the AWS region in which the resource exists or will exist.", "type": "string" } }, "required": [ "ownerAccountID", "region" ], "type": "object", "additionalProperties": false }, "conditions": { "description": "All CRs managed by ACK have a common `Status.Conditions` member that\ncontains a collection of `ackv1alpha1.Condition` objects that describe\nthe various terminal states of the CR and its backend AWS service API\nresource", "items": { "description": "Condition is the common struct used by all CRDs managed by ACK service\ncontrollers to indicate terminal states of the CR and its backend AWS\nservice API resource", "properties": { "lastTransitionTime": { "description": "Last time the condition transitioned from one status to another.", "format": "date-time", "type": "string" }, "message": { "description": "A human readable message indicating details about the transition.", "type": "string" }, "reason": { "description": "The reason for the condition's last transition.", "type": "string" }, "status": { "description": "Status of the condition, one of True, False, Unknown.", "type": "string" }, "type": { "description": "Type is the type of the Condition", "type": "string" } }, "required": [ "status", "type" ], "type": "object", "additionalProperties": false }, "type": "array" }, "creationDate": { "description": "The date and time when the item was created. Amazon Cognito returns this\ntimestamp in UNIX epoch time format. Your SDK might render the output in\na human-readable format like ISO 8601 or a Java Date object.", "format": "date-time", "type": "string" }, "customDomain": { "description": "A custom domain name that you provide to Amazon Cognito. This parameter applies\nonly if you use a custom domain to host the sign-up and sign-in pages for\nyour application. An example of a custom domain name might be auth.example.com.\n\nFor more information about adding a custom domain to your user pool, see\nUsing Your Own Domain for the Hosted UI (https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.html).\n\nRegex Pattern: `^[a-z0-9](?:[a-z0-9\\-]{0,61}[a-z0-9])?$`", "type": "string" }, "domain": { "description": "The domain prefix, if the user pool has a domain associated with it.\n\nRegex Pattern: `^[a-z0-9](?:[a-z0-9\\-]{0,61}[a-z0-9])?$`", "type": "string" }, "emailConfigurationFailure": { "description": "Deprecated. Review error codes from API requests with EventSource:cognito-idp.amazonaws.com\nin CloudTrail for information about problems with user pool email configuration.", "type": "string" }, "estimatedNumberOfUsers": { "description": "A number estimating the size of the user pool.", "format": "int64", "type": "integer" }, "id": { "description": "The ID of the user pool.\n\nRegex Pattern: `^[\\w-]+_[0-9a-zA-Z]+$`", "type": "string" }, "lastModifiedDate": { "description": "The date and time when the item was modified. Amazon Cognito returns this\ntimestamp in UNIX epoch time format. Your SDK might render the output in\na human-readable format like ISO 8601 or a Java Date object.", "format": "date-time", "type": "string" }, "schemaAttributes": { "description": "A list of the user attributes and their properties in your user pool. The\nattribute schema contains standard attributes, custom attributes with a custom:\nprefix, and developer attributes with a dev: prefix. For more information,\nsee User pool attributes (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html).\n\nDeveloper-only attributes are a legacy feature of user pools, and are read-only\nto all app clients. You can create and update developer-only attributes only\nwith IAM-authenticated API operations. Use app client read/write permissions\ninstead.", "items": { "description": "A list of the user attributes and their properties in your user pool. The\nattribute schema contains standard attributes, custom attributes with a custom:\nprefix, and developer attributes with a dev: prefix. For more information,\nsee User pool attributes (https://docs.aws.amazon.com/cognito/latest/developerguide/user-pool-settings-attributes.html).\n\nDeveloper-only dev: attributes are a legacy feature of user pools, and are\nread-only to all app clients. You can create and update developer-only attributes\nonly with IAM-authenticated API operations. Use app client read/write permissions\ninstead.\n\nThis data type is a request and response parameter of CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand a response parameter of DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html).", "properties": { "attributeDataType": { "type": "string" }, "developerOnlyAttribute": { "type": "boolean" }, "mutable": { "type": "boolean" }, "name": { "type": "string" }, "numberAttributeConstraints": { "description": "The minimum and maximum values of an attribute that is of the number type,\nfor example custom:age.\n\nThis data type is part of SchemaAttributeType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SchemaAttributeType.html).\nIt defines the length constraints on number-type attributes that you configure\nin CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand displays the length constraints of all number-type attributes in the\nresponse to DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html)", "properties": { "maxValue": { "type": "string" }, "minValue": { "type": "string" } }, "type": "object", "additionalProperties": false }, "required": { "type": "boolean" }, "stringAttributeConstraints": { "description": "The minimum and maximum length values of an attribute that is of the string\ntype, for example custom:department.\n\nThis data type is part of SchemaAttributeType (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SchemaAttributeType.html).\nIt defines the length constraints on string-type attributes that you configure\nin CreateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_CreateUserPool.html)\nand UpdateUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UpdateUserPool.html),\nand displays the length constraints of all string-type attributes in the\nresponse to DescribeUserPool (https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_DescribeUserPool.html)", "properties": { "maxLength": { "type": "string" }, "minLength": { "type": "string" } }, "type": "object", "additionalProperties": false } }, "type": "object", "additionalProperties": false }, "type": "array" }, "smsConfigurationFailure": { "description": "The reason why the SMS configuration can't send the messages to your users.\n\nThis message might include comma-separated values to describe why your SMS\nconfiguration can't send messages to user pool end users.\n\nInvalidSmsRoleAccessPolicyException\n\nThe Identity and Access Management role that Amazon Cognito uses to send\nSMS messages isn't properly configured. For more information, see SmsConfigurationType\n(https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_SmsConfigurationType.html).\n\nSNSSandbox\n\nThe Amazon Web Services account is in the SNS SMS Sandbox and messages will\nonly reach verified end users. This parameter won\u2019t get populated with\nSNSSandbox if the user creating the user pool doesn\u2019t have SNS permissions.\nTo learn how to move your Amazon Web Services account out of the sandbox,\nsee Moving out of the SMS sandbox (https://docs.aws.amazon.com/sns/latest/dg/sns-sms-sandbox-moving-to-production.html).", "type": "string" }, "status": { "description": "This parameter is no longer used.", "type": "string" } }, "type": "object", "additionalProperties": false } }, "type": "object" }