Resource data sync for AWS Systems Manager Inventory now includes des…

…tination data sharing. This feature enables you to synchronize inventory data from multiple AWS accounts into a central Amazon S3 bucket. To use this feature, all AWS accounts must be listed in AWS Organizations.

This release adds the ability to update the task placement strategy and constraints for Amazon ECS services.

Additional response field "CompromisedCredentialsDetected" added to AdminListUserAuthEvents.

Amazon ElastiCache now supports Global Datastore for Redis. Global Datastore for Redis offers fully managed, fast, reliable and secure cross-region replication. Using Global Datastore for Redis, you can create cross-region read replica clusters for ElastiCache for Redis to enable low-latency reads and disaster recovery across regions. You can create, modify and describe a Global Datastore, as well as add or remove regions from your Global Datastore and promote a region as primary in Global Datastore.

Amazon S3 now supports Batch Operations job tagging.

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/CognitoIdentityProviderClient.h

@@ -2343,13 +2343,13 @@ namespace Model
  /**
  * <p>Calling this API causes a message to be sent to the end user with a
  * confirmation code that is required to change the user's password. For the
- * <code>Username</code> parameter, you can use the username or user alias. If a
- * verified phone number exists for the user, the confirmation code is sent to the
- * phone number. Otherwise, if a verified email exists, the confirmation code is
- * sent to the email. If neither a verified phone number nor a verified email
- * exists, <code>InvalidParameterException</code> is thrown. To use the
- * confirmation code for resetting the password, call .</p><p><h3>See Also:</h3> 
- * <a
+ * <code>Username</code> parameter, you can use the username or user alias. The
+ * method used to send the confirmation code is sent according to the specified
+ * AccountRecoverySetting. For more information, see <a href="">Recovering User
+ * Accounts</a> in the <i>Amazon Cognito Developer Guide</i>. If neither a verified
+ * phone number nor a verified email exists, an
+ * <code>InvalidParameterException</code> is thrown. To use the confirmation code
+ * for resetting the password, call .</p><p><h3>See Also:</h3> <a
  * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/ForgotPassword">AWS
  * API Reference</a></p>
  */
@@ -2358,13 +2358,13 @@ namespace Model
  /**
  * <p>Calling this API causes a message to be sent to the end user with a
  * confirmation code that is required to change the user's password. For the
- * <code>Username</code> parameter, you can use the username or user alias. If a
- * verified phone number exists for the user, the confirmation code is sent to the
- * phone number. Otherwise, if a verified email exists, the confirmation code is
- * sent to the email. If neither a verified phone number nor a verified email
- * exists, <code>InvalidParameterException</code> is thrown. To use the
- * confirmation code for resetting the password, call .</p><p><h3>See Also:</h3> 
- * <a
+ * <code>Username</code> parameter, you can use the username or user alias. The
+ * method used to send the confirmation code is sent according to the specified
+ * AccountRecoverySetting. For more information, see <a href="">Recovering User
+ * Accounts</a> in the <i>Amazon Cognito Developer Guide</i>. If neither a verified
+ * phone number nor a verified email exists, an
+ * <code>InvalidParameterException</code> is thrown. To use the confirmation code
+ * for resetting the password, call .</p><p><h3>See Also:</h3> <a
  * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/ForgotPassword">AWS
  * API Reference</a></p>
  *
@@ -2375,13 +2375,13 @@ namespace Model
  /**
  * <p>Calling this API causes a message to be sent to the end user with a
  * confirmation code that is required to change the user's password. For the
- * <code>Username</code> parameter, you can use the username or user alias. If a
- * verified phone number exists for the user, the confirmation code is sent to the
- * phone number. Otherwise, if a verified email exists, the confirmation code is
- * sent to the email. If neither a verified phone number nor a verified email
- * exists, <code>InvalidParameterException</code> is thrown. To use the
- * confirmation code for resetting the password, call .</p><p><h3>See Also:</h3> 
- * <a
+ * <code>Username</code> parameter, you can use the username or user alias. The
+ * method used to send the confirmation code is sent according to the specified
+ * AccountRecoverySetting. For more information, see <a href="">Recovering User
+ * Accounts</a> in the <i>Amazon Cognito Developer Guide</i>. If neither a verified
+ * phone number nor a verified email exists, an
+ * <code>InvalidParameterException</code> is thrown. To use the confirmation code
+ * for resetting the password, call .</p><p><h3>See Also:</h3> <a
  * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/ForgotPassword">AWS
  * API Reference</a></p>
  *

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/model/AnalyticsConfigurationType.h

@@ -35,7 +35,9 @@ namespace Model
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for a user
- * pool.</p><p><h3>See Also:</h3> <a
+ * pool.</p> <note> <p>Cognito User Pools only supports sending events to Amazon
+ * Pinpoint projects in the US East (N. Virginia) us-east-1 Region, regardless of
+ * the region in which the user pool resides.</p> </note><p><h3>See Also:</h3> <a
  * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AnalyticsConfigurationType">AWS
  * API Reference</a></p>
  */

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/model/AnalyticsMetadataType.h

@@ -36,7 +36,10 @@ namespace Model
  /**
  * <p>An Amazon Pinpoint analytics endpoint.</p> <p>An endpoint uniquely identifies
  * a mobile device, email address, or phone number that can receive messages from
- * Amazon Pinpoint analytics.</p><p><h3>See Also:</h3> <a
+ * Amazon Pinpoint analytics.</p> <note> <p>Cognito User Pools only supports
+ * sending events to Amazon Pinpoint projects in the US East (N. Virginia)
+ * us-east-1 Region, regardless of the region in which the user pool resides.</p>
+ * </note><p><h3>See Also:</h3> <a
  * href="http://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/AnalyticsMetadataType">AWS
  * API Reference</a></p>
  */

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/model/CreateIdentityProviderRequest.h

@@ -177,7 +177,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline const Aws::Map<Aws::String, Aws::String>& GetProviderDetails() const{ return m_providerDetails; }
@@ -199,7 +199,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline bool ProviderDetailsHasBeenSet() const { return m_providerDetailsHasBeenSet; }
@@ -221,7 +221,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline void SetProviderDetails(const Aws::Map<Aws::String, Aws::String>& value) { m_providerDetailsHasBeenSet = true; m_providerDetails = value; }
@@ -243,7 +243,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline void SetProviderDetails(Aws::Map<Aws::String, Aws::String>&& value) { m_providerDetailsHasBeenSet = true; m_providerDetails = std::move(value); }
@@ -265,7 +265,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& WithProviderDetails(const Aws::Map<Aws::String, Aws::String>& value) { SetProviderDetails(value); return *this;}
@@ -287,7 +287,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& WithProviderDetails(Aws::Map<Aws::String, Aws::String>&& value) { SetProviderDetails(std::move(value)); return *this;}
@@ -309,7 +309,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(const Aws::String& key, const Aws::String& value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(key, value); return *this; }
@@ -331,7 +331,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(Aws::String&& key, const Aws::String& value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(std::move(key), value); return *this; }
@@ -353,7 +353,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(const Aws::String& key, Aws::String&& value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(key, std::move(value)); return *this; }
@@ -375,7 +375,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(Aws::String&& key, Aws::String&& value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(std::move(key), std::move(value)); return *this; }
@@ -397,7 +397,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(const char* key, Aws::String&& value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(key, std::move(value)); return *this; }
@@ -419,7 +419,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(Aws::String&& key, const char* value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(std::move(key), value); return *this; }
@@ -441,7 +441,7 @@ namespace Model
  * oidc_issuer key</i> </p> </li> <li> <p>jwks_uri <i>if not available from
  * discovery URL specified by oidc_issuer key</i> </p> </li> <li>
  * <p>authorize_scopes</p> </li> </ul> </li> <li> <p>For SAML providers:</p> <ul>
- * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignOut <i>optional</i>
+ * <li> <p>MetadataFile OR MetadataURL</p> </li> <li> <p>IDPSignout <i>optional</i>
  * </p> </li> </ul> </li> </ul>
  */
  inline CreateIdentityProviderRequest& AddProviderDetails(const char* key, const char* value) { m_providerDetailsHasBeenSet = true; m_providerDetails.emplace(key, value); return *this; }

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/model/CreateUserPoolClientRequest.h

@@ -1048,37 +1048,49 @@ namespace Model
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline const AnalyticsConfigurationType& GetAnalyticsConfiguration() const{ return m_analyticsConfiguration; }
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline bool AnalyticsConfigurationHasBeenSet() const { return m_analyticsConfigurationHasBeenSet; }
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline void SetAnalyticsConfiguration(const AnalyticsConfigurationType& value) { m_analyticsConfigurationHasBeenSet = true; m_analyticsConfiguration = value; }
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline void SetAnalyticsConfiguration(AnalyticsConfigurationType&& value) { m_analyticsConfigurationHasBeenSet = true; m_analyticsConfiguration = std::move(value); }
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline CreateUserPoolClientRequest& WithAnalyticsConfiguration(const AnalyticsConfigurationType& value) { SetAnalyticsConfiguration(value); return *this;}
 
  /**
  * <p>The Amazon Pinpoint analytics configuration for collecting metrics for this
- * user pool.</p>
+ * user pool.</p> <note> <p>Cognito User Pools only supports sending events to
+ * Amazon Pinpoint projects in the US East (N. Virginia) us-east-1 Region,
+ * regardless of the region in which the user pool resides.</p> </note>
  */
  inline CreateUserPoolClientRequest& WithAnalyticsConfiguration(AnalyticsConfigurationType&& value) { SetAnalyticsConfiguration(std::move(value)); return *this;}
 

aws-cpp-sdk-cognito-idp/include/aws/cognito-idp/model/EventRiskType.h

@@ -109,13 +109,41 @@ namespace Model
  */
  inline EventRiskType& WithRiskLevel(RiskLevelType&& value) { SetRiskLevel(std::move(value)); return *this;}
 
+
+ /**
+ * <p>Indicates whether compromised credentials were detected during an
+ * authentication event.</p>
+ */
+ inline bool GetCompromisedCredentialsDetected() const{ return m_compromisedCredentialsDetected; }
+
+ /**
+ * <p>Indicates whether compromised credentials were detected during an
+ * authentication event.</p>
+ */
+ inline bool CompromisedCredentialsDetectedHasBeenSet() const { return m_compromisedCredentialsDetectedHasBeenSet; }
+
+ /**
+ * <p>Indicates whether compromised credentials were detected during an
+ * authentication event.</p>
+ */
+ inline void SetCompromisedCredentialsDetected(bool value) { m_compromisedCredentialsDetectedHasBeenSet = true; m_compromisedCredentialsDetected = value; }
+
+ /**
+ * <p>Indicates whether compromised credentials were detected during an
+ * authentication event.</p>
+ */
+ inline EventRiskType& WithCompromisedCredentialsDetected(bool value) { SetCompromisedCredentialsDetected(value); return *this;}
+
  private:
 
  RiskDecisionType m_riskDecision;
  bool m_riskDecisionHasBeenSet;
 
  RiskLevelType m_riskLevel;
  bool m_riskLevelHasBeenSet;
+
+ bool m_compromisedCredentialsDetected;
+ bool m_compromisedCredentialsDetectedHasBeenSet;
  };
 
 } // namespace Model