allowedOauthScopes

List of allowed OAuth scopes, including phone, email, openid, profile, and aws.cognito.signin.user.admin.