aws-sdk-core 2.11.632 → 3.0.0.rc1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/VERSION +1 -0
- data/ca-bundle.crt +3541 -3615
- data/lib/aws-sdk-core.rb +64 -615
- data/lib/aws-sdk-core/client_stubs.rb +3 -64
- data/lib/aws-sdk-core/credential_provider.rb +2 -0
- data/lib/aws-sdk-core/credential_provider_chain.rb +1 -2
- data/lib/aws-sdk-core/eager_loader.rb +0 -1
- data/lib/aws-sdk-core/ecs_credentials.rb +10 -14
- data/lib/aws-sdk-core/errors.rb +12 -34
- data/lib/aws-sdk-core/ini_parser.rb +1 -0
- data/lib/aws-sdk-core/instance_profile_credentials.rb +19 -126
- data/lib/aws-sdk-core/json.rb +4 -5
- data/lib/aws-sdk-core/json/handler.rb +3 -2
- data/lib/aws-sdk-core/json/parser.rb +1 -1
- data/lib/aws-sdk-core/log/param_filter.rb +4 -3
- data/lib/aws-sdk-core/pageable_response.rb +1 -0
- data/lib/aws-sdk-core/pager.rb +30 -25
- data/lib/aws-sdk-core/param_converter.rb +3 -3
- data/lib/aws-sdk-core/param_validator.rb +10 -4
- data/lib/aws-sdk-core/plugins/credentials_configuration.rb +62 -0
- data/lib/aws-sdk-core/plugins/global_configuration.rb +19 -10
- data/lib/aws-sdk-core/plugins/idempotency_token.rb +1 -2
- data/lib/aws-sdk-core/plugins/logging.rb +18 -18
- data/lib/aws-sdk-core/plugins/param_converter.rb +9 -5
- data/lib/aws-sdk-core/plugins/param_validator.rb +8 -5
- data/lib/aws-sdk-core/plugins/protocols/ec2.rb +2 -1
- data/lib/aws-sdk-core/plugins/protocols/json_rpc.rb +13 -12
- data/lib/aws-sdk-core/plugins/protocols/query.rb +2 -2
- data/lib/aws-sdk-core/plugins/regional_endpoint.rb +23 -20
- data/lib/aws-sdk-core/plugins/response_paging.rb +5 -18
- data/lib/aws-sdk-core/plugins/retry_errors.rb +12 -31
- data/lib/aws-sdk-core/plugins/signature_v2.rb +51 -0
- data/lib/aws-sdk-core/plugins/signature_v4.rb +131 -0
- data/lib/aws-sdk-core/plugins/stub_responses.rb +13 -11
- data/lib/aws-sdk-core/plugins/user_agent.rb +16 -6
- data/lib/aws-sdk-core/query.rb +5 -0
- data/lib/aws-sdk-core/query/handler.rb +15 -16
- data/lib/aws-sdk-core/query/param_builder.rb +1 -1
- data/lib/aws-sdk-core/resources/collection.rb +121 -0
- data/lib/aws-sdk-core/rest.rb +10 -0
- data/lib/aws-sdk-core/rest/handler.rb +1 -0
- data/lib/aws-sdk-core/rest/request/endpoint.rb +1 -1
- data/lib/aws-sdk-core/rest/request/headers.rb +0 -9
- data/lib/aws-sdk-core/rest/response/headers.rb +0 -7
- data/lib/aws-sdk-core/rest/response/parser.rb +14 -14
- data/lib/aws-sdk-core/shared_config.rb +1 -38
- data/lib/aws-sdk-core/shared_credentials.rb +2 -0
- data/lib/aws-sdk-core/structure.rb +17 -12
- data/lib/aws-sdk-core/stubbing/data_applicator.rb +1 -1
- data/lib/aws-sdk-core/stubbing/empty_stub.rb +6 -2
- data/lib/aws-sdk-core/stubbing/protocols/ec2.rb +1 -1
- data/lib/aws-sdk-core/stubbing/protocols/rest.rb +1 -7
- data/lib/aws-sdk-core/stubbing/stub_data.rb +4 -0
- data/lib/aws-sdk-core/util.rb +39 -0
- data/lib/aws-sdk-core/version.rb +1 -1
- data/lib/aws-sdk-core/waiters.rb +3 -0
- data/lib/aws-sdk-core/waiters/poller.rb +5 -9
- data/lib/aws-sdk-core/waiters/waiter.rb +3 -2
- data/lib/aws-sdk-core/xml.rb +9 -0
- data/lib/aws-sdk-core/xml/builder.rb +2 -2
- data/lib/aws-sdk-core/xml/error_handler.rb +1 -2
- data/lib/aws-sdk-core/xml/parser.rb +1 -11
- data/lib/aws-sdk-core/xml/parser/engines/ox.rb +1 -5
- data/lib/aws-sdk-core/xml/parser/frame.rb +4 -4
- data/lib/aws-sdk-sts.rb +45 -0
- data/lib/aws-sdk-sts/client.rb +1198 -0
- data/lib/aws-sdk-sts/client_api.rb +266 -0
- data/lib/aws-sdk-sts/customizations.rb +0 -0
- data/lib/aws-sdk-sts/errors.rb +23 -0
- data/lib/aws-sdk-sts/resource.rb +25 -0
- data/lib/aws-sdk-sts/types.rb +854 -0
- data/lib/seahorse.rb +50 -60
- data/lib/seahorse/client/base.rb +1 -7
- data/lib/seahorse/client/configuration.rb +2 -8
- data/lib/seahorse/client/events.rb +1 -1
- data/lib/seahorse/client/http/response.rb +3 -3
- data/lib/seahorse/client/logging/formatter.rb +3 -3
- data/lib/seahorse/client/logging/handler.rb +2 -0
- data/lib/seahorse/client/net_http/connection_pool.rb +3 -0
- data/lib/seahorse/client/net_http/handler.rb +4 -5
- data/lib/seahorse/client/net_http/patches.rb +1 -0
- data/lib/seahorse/client/plugin.rb +66 -6
- data/lib/seahorse/client/plugin_list.rb +1 -3
- data/lib/seahorse/client/plugins/endpoint.rb +14 -10
- data/lib/seahorse/client/plugins/logging.rb +17 -19
- data/lib/seahorse/client/plugins/net_http.rb +23 -15
- data/lib/seahorse/client/plugins/raise_response_errors.rb +4 -4
- data/lib/seahorse/client/plugins/response_target.rb +2 -0
- data/lib/seahorse/model/api.rb +4 -4
- data/lib/seahorse/model/operation.rb +0 -9
- data/lib/seahorse/model/shapes.rb +18 -2
- data/lib/seahorse/util.rb +0 -21
- metadata +42 -1249
- data/apis/AWSMigrationHub/2017-05-31/api-2.json +0 -954
- data/apis/AWSMigrationHub/2017-05-31/examples-1.json +0 -5
- data/apis/AWSMigrationHub/2017-05-31/paginators-1.json +0 -34
- data/apis/accessanalyzer/2019-11-01/api-2.json +0 -1229
- data/apis/accessanalyzer/2019-11-01/examples-1.json +0 -5
- data/apis/accessanalyzer/2019-11-01/paginators-1.json +0 -28
- data/apis/acm-pca/2017-08-22/api-2.json +0 -1203
- data/apis/acm-pca/2017-08-22/examples-1.json +0 -5
- data/apis/acm-pca/2017-08-22/paginators-1.json +0 -22
- data/apis/acm-pca/2017-08-22/waiters-2.json +0 -61
- data/apis/acm/2015-12-08/api-2.json +0 -873
- data/apis/acm/2015-12-08/examples-1.json +0 -5
- data/apis/acm/2015-12-08/paginators-1.json +0 -10
- data/apis/acm/2015-12-08/smoke.json +0 -18
- data/apis/acm/2015-12-08/waiters-2.json +0 -35
- data/apis/alexaforbusiness/2017-11-09/api-2.json +0 -4146
- data/apis/alexaforbusiness/2017-11-09/examples-1.json +0 -5
- data/apis/alexaforbusiness/2017-11-09/paginators-1.json +0 -94
- data/apis/amplify/2017-07-25/api-2.json +0 -2419
- data/apis/amplify/2017-07-25/examples-1.json +0 -5
- data/apis/amplify/2017-07-25/paginators-1.json +0 -4
- data/apis/apigateway/2015-07-09/api-2.json +0 -5412
- data/apis/apigateway/2015-07-09/examples-1.json +0 -5
- data/apis/apigateway/2015-07-09/paginators-1.json +0 -76
- data/apis/apigateway/2015-07-09/smoke.json +0 -20
- data/apis/apigatewaymanagementapi/2018-11-29/api-2.json +0 -192
- data/apis/apigatewaymanagementapi/2018-11-29/paginators-1.json +0 -3
- data/apis/apigatewayv2/2018-11-29/api-2.json +0 -7236
- data/apis/apigatewayv2/2018-11-29/paginators-1.json +0 -3
- data/apis/appconfig/2019-10-09/api-2.json +0 -1699
- data/apis/appconfig/2019-10-09/examples-1.json +0 -5
- data/apis/appconfig/2019-10-09/paginators-1.json +0 -34
- data/apis/appflow/2020-08-23/api-2.json +0 -2422
- data/apis/appflow/2020-08-23/examples-1.json +0 -5
- data/apis/appflow/2020-08-23/paginators-1.json +0 -23
- data/apis/application-autoscaling/2016-02-06/api-2.json +0 -795
- data/apis/application-autoscaling/2016-02-06/examples-1.json +0 -221
- data/apis/application-autoscaling/2016-02-06/paginators-1.json +0 -28
- data/apis/application-autoscaling/2016-02-06/smoke.json +0 -13
- data/apis/application-insights/2018-11-25/api-2.json +0 -1261
- data/apis/application-insights/2018-11-25/examples-1.json +0 -5
- data/apis/application-insights/2018-11-25/paginators-1.json +0 -34
- data/apis/appmesh/2018-10-01/api-2.json +0 -1972
- data/apis/appmesh/2018-10-01/examples-1.json +0 -4
- data/apis/appmesh/2018-10-01/paginators-1.json +0 -28
- data/apis/appmesh/2019-01-25/api-2.json +0 -3764
- data/apis/appmesh/2019-01-25/examples-1.json +0 -5
- data/apis/appmesh/2019-01-25/paginators-1.json +0 -52
- data/apis/appstream/2016-12-01/api-2.json +0 -2390
- data/apis/appstream/2016-12-01/examples-1.json +0 -5
- data/apis/appstream/2016-12-01/paginators-1.json +0 -14
- data/apis/appstream/2016-12-01/smoke.json +0 -11
- data/apis/appstream/2016-12-01/waiters-2.json +0 -55
- data/apis/appsync/2017-07-25/api-2.json +0 -2294
- data/apis/appsync/2017-07-25/examples-1.json +0 -5
- data/apis/appsync/2017-07-25/paginators-1.json +0 -4
- data/apis/athena/2017-05-18/api-2.json +0 -1403
- data/apis/athena/2017-05-18/examples-1.json +0 -5
- data/apis/athena/2017-05-18/paginators-1.json +0 -48
- data/apis/athena/2017-05-18/smoke.json +0 -11
- data/apis/autoscaling-plans/2018-01-06/api-2.json +0 -659
- data/apis/autoscaling-plans/2018-01-06/examples-1.json +0 -5
- data/apis/autoscaling-plans/2018-01-06/paginators-1.json +0 -4
- data/apis/autoscaling/2011-01-01/api-2.json +0 -2676
- data/apis/autoscaling/2011-01-01/examples-1.json +0 -1496
- data/apis/autoscaling/2011-01-01/paginators-1.json +0 -52
- data/apis/autoscaling/2011-01-01/resources-1.json +0 -1624
- data/apis/autoscaling/2011-01-01/smoke.json +0 -20
- data/apis/autoscaling/2011-01-01/waiters-2.json +0 -62
- data/apis/backup/2018-11-15/api-2.json +0 -2522
- data/apis/backup/2018-11-15/examples-1.json +0 -5
- data/apis/backup/2018-11-15/paginators-1.json +0 -64
- data/apis/batch/2016-08-10/api-2.json +0 -1360
- data/apis/batch/2016-08-10/examples-1.json +0 -687
- data/apis/batch/2016-08-10/paginators-1.json +0 -28
- data/apis/batch/2016-08-10/smoke.json +0 -11
- data/apis/braket/2019-09-01/api-2.json +0 -703
- data/apis/braket/2019-09-01/examples-1.json +0 -5
- data/apis/braket/2019-09-01/paginators-1.json +0 -16
- data/apis/budgets/2016-10-20/api-2.json +0 -1444
- data/apis/budgets/2016-10-20/examples-1.json +0 -5
- data/apis/budgets/2016-10-20/paginators-1.json +0 -46
- data/apis/ce/2017-10-25/api-2.json +0 -2268
- data/apis/ce/2017-10-25/examples-1.json +0 -5
- data/apis/ce/2017-10-25/paginators-1.json +0 -19
- data/apis/chime/2018-05-01/api-2.json +0 -8964
- data/apis/chime/2018-05-01/examples-1.json +0 -5
- data/apis/chime/2018-05-01/paginators-1.json +0 -124
- data/apis/cloud9/2017-09-23/api-2.json +0 -691
- data/apis/cloud9/2017-09-23/examples-1.json +0 -315
- data/apis/cloud9/2017-09-23/paginators-1.json +0 -14
- data/apis/clouddirectory/2016-05-10/api-2.json +0 -4244
- data/apis/clouddirectory/2016-05-10/examples-1.json +0 -5
- data/apis/clouddirectory/2016-05-10/paginators-1.json +0 -94
- data/apis/clouddirectory/2017-01-11/api-2.json +0 -4321
- data/apis/clouddirectory/2017-01-11/examples-1.json +0 -5
- data/apis/clouddirectory/2017-01-11/paginators-1.json +0 -99
- data/apis/cloudformation/2010-05-15/api-2.json +0 -3495
- data/apis/cloudformation/2010-05-15/examples-1.json +0 -5
- data/apis/cloudformation/2010-05-15/paginators-1.json +0 -91
- data/apis/cloudformation/2010-05-15/resources-1.json +0 -211
- data/apis/cloudformation/2010-05-15/smoke.json +0 -19
- data/apis/cloudformation/2010-05-15/waiters-2.json +0 -294
- data/apis/cloudfront/2016-01-28/api-2.json +0 -2219
- data/apis/cloudfront/2016-01-28/examples-1.json +0 -5
- data/apis/cloudfront/2016-01-28/paginators-1.json +0 -32
- data/apis/cloudfront/2016-01-28/waiters-2.json +0 -47
- data/apis/cloudfront/2016-08-01/api-2.json +0 -2548
- data/apis/cloudfront/2016-08-01/examples-1.json +0 -5
- data/apis/cloudfront/2016-08-01/paginators-1.json +0 -32
- data/apis/cloudfront/2016-08-01/waiters-2.json +0 -47
- data/apis/cloudfront/2016-08-20/api-2.json +0 -2586
- data/apis/cloudfront/2016-08-20/paginators-1.json +0 -32
- data/apis/cloudfront/2016-08-20/waiters-2.json +0 -47
- data/apis/cloudfront/2016-09-07/api-2.json +0 -2596
- data/apis/cloudfront/2016-09-07/examples-1.json +0 -5
- data/apis/cloudfront/2016-09-07/paginators-1.json +0 -32
- data/apis/cloudfront/2016-09-07/waiters-2.json +0 -47
- data/apis/cloudfront/2016-09-29/api-2.json +0 -2599
- data/apis/cloudfront/2016-09-29/examples-1.json +0 -5
- data/apis/cloudfront/2016-09-29/paginators-1.json +0 -32
- data/apis/cloudfront/2016-09-29/waiters-2.json +0 -47
- data/apis/cloudfront/2016-11-25/api-2.json +0 -2665
- data/apis/cloudfront/2016-11-25/examples-1.json +0 -5
- data/apis/cloudfront/2016-11-25/paginators-1.json +0 -32
- data/apis/cloudfront/2016-11-25/waiters-2.json +0 -47
- data/apis/cloudfront/2017-03-25/api-2.json +0 -2726
- data/apis/cloudfront/2017-03-25/examples-1.json +0 -83
- data/apis/cloudfront/2017-03-25/paginators-1.json +0 -32
- data/apis/cloudfront/2017-03-25/waiters-2.json +0 -47
- data/apis/cloudfront/2017-10-30/api-2.json +0 -3906
- data/apis/cloudfront/2017-10-30/examples-1.json +0 -5
- data/apis/cloudfront/2017-10-30/paginators-1.json +0 -32
- data/apis/cloudfront/2017-10-30/smoke.json +0 -20
- data/apis/cloudfront/2017-10-30/waiters-2.json +0 -47
- data/apis/cloudfront/2018-06-18/api-2.json +0 -3907
- data/apis/cloudfront/2018-06-18/examples-1.json +0 -5
- data/apis/cloudfront/2018-06-18/paginators-1.json +0 -32
- data/apis/cloudfront/2018-06-18/smoke.json +0 -20
- data/apis/cloudfront/2018-06-18/waiters-2.json +0 -47
- data/apis/cloudfront/2018-11-05/api-2.json +0 -4004
- data/apis/cloudfront/2018-11-05/examples-1.json +0 -5
- data/apis/cloudfront/2018-11-05/paginators-1.json +0 -32
- data/apis/cloudfront/2018-11-05/smoke.json +0 -20
- data/apis/cloudfront/2018-11-05/waiters-2.json +0 -47
- data/apis/cloudfront/2019-03-26/api-2.json +0 -4035
- data/apis/cloudfront/2019-03-26/examples-1.json +0 -5
- data/apis/cloudfront/2019-03-26/paginators-1.json +0 -32
- data/apis/cloudfront/2019-03-26/smoke.json +0 -20
- data/apis/cloudfront/2019-03-26/waiters-2.json +0 -47
- data/apis/cloudfront/2020-05-31/api-2.json +0 -5976
- data/apis/cloudfront/2020-05-31/examples-1.json +0 -5
- data/apis/cloudfront/2020-05-31/paginators-1.json +0 -32
- data/apis/cloudfront/2020-05-31/smoke.json +0 -20
- data/apis/cloudfront/2020-05-31/waiters-2.json +0 -47
- data/apis/cloudhsm/2014-05-30/api-2.json +0 -879
- data/apis/cloudhsm/2014-05-30/examples-1.json +0 -5
- data/apis/cloudhsm/2014-05-30/paginators-1.json +0 -4
- data/apis/cloudhsmv2/2017-04-28/api-2.json +0 -837
- data/apis/cloudhsmv2/2017-04-28/examples-1.json +0 -5
- data/apis/cloudhsmv2/2017-04-28/paginators-1.json +0 -19
- data/apis/cloudhsmv2/2017-04-28/smoke.json +0 -18
- data/apis/cloudsearch/2013-01-01/api-2.json +0 -1529
- data/apis/cloudsearch/2013-01-01/examples-1.json +0 -5
- data/apis/cloudsearch/2013-01-01/paginators-1.json +0 -19
- data/apis/cloudsearch/2013-01-01/smoke.json +0 -18
- data/apis/cloudsearchdomain/2013-01-01/api-2.json +0 -374
- data/apis/cloudsearchdomain/2013-01-01/examples-1.json +0 -5
- data/apis/cloudtrail/2013-11-01/api-2.json +0 -1168
- data/apis/cloudtrail/2013-11-01/examples-1.json +0 -5
- data/apis/cloudtrail/2013-11-01/paginators-1.json +0 -28
- data/apis/cloudtrail/2013-11-01/smoke.json +0 -18
- data/apis/codeartifact/2018-09-22/api-2.json +0 -2420
- data/apis/codeartifact/2018-09-22/examples-1.json +0 -5
- data/apis/codeartifact/2018-09-22/paginators-1.json +0 -40
- data/apis/codebuild/2016-10-06/api-2.json +0 -2438
- data/apis/codebuild/2016-10-06/examples-1.json +0 -281
- data/apis/codebuild/2016-10-06/paginators-1.json +0 -73
- data/apis/codebuild/2016-10-06/smoke.json +0 -11
- data/apis/codecommit/2015-04-13/api-2.json +0 -5517
- data/apis/codecommit/2015-04-13/examples-1.json +0 -5
- data/apis/codecommit/2015-04-13/paginators-1.json +0 -69
- data/apis/codecommit/2015-04-13/smoke.json +0 -18
- data/apis/codedeploy/2014-10-06/api-2.json +0 -3281
- data/apis/codedeploy/2014-10-06/examples-1.json +0 -5
- data/apis/codedeploy/2014-10-06/paginators-1.json +0 -34
- data/apis/codedeploy/2014-10-06/smoke.json +0 -18
- data/apis/codedeploy/2014-10-06/waiters-2.json +0 -30
- data/apis/codeguru-reviewer/2019-09-19/api-2.json +0 -1058
- data/apis/codeguru-reviewer/2019-09-19/examples-1.json +0 -5
- data/apis/codeguru-reviewer/2019-09-19/paginators-1.json +0 -25
- data/apis/codeguruprofiler/2019-07-18/api-2.json +0 -1609
- data/apis/codeguruprofiler/2019-07-18/examples-1.json +0 -5
- data/apis/codeguruprofiler/2019-07-18/paginators-1.json +0 -25
- data/apis/codepipeline/2015-07-09/api-2.json +0 -2517
- data/apis/codepipeline/2015-07-09/examples-1.json +0 -5
- data/apis/codepipeline/2015-07-09/paginators-1.json +0 -38
- data/apis/codepipeline/2015-07-09/smoke.json +0 -18
- data/apis/codestar-connections/2019-12-01/api-2.json +0 -515
- data/apis/codestar-connections/2019-12-01/examples-1.json +0 -5
- data/apis/codestar-connections/2019-12-01/paginators-1.json +0 -14
- data/apis/codestar-notifications/2019-10-15/api-2.json +0 -724
- data/apis/codestar-notifications/2019-10-15/examples-1.json +0 -5
- data/apis/codestar-notifications/2019-10-15/paginators-1.json +0 -22
- data/apis/codestar/2017-04-19/api-2.json +0 -1033
- data/apis/codestar/2017-04-19/examples-1.json +0 -5
- data/apis/codestar/2017-04-19/paginators-1.json +0 -4
- data/apis/codestar/2017-04-19/smoke.json +0 -11
- data/apis/cognito-identity/2014-06-30/api-2.json +0 -1069
- data/apis/cognito-identity/2014-06-30/examples-1.json +0 -5
- data/apis/cognito-identity/2014-06-30/paginators-1.json +0 -10
- data/apis/cognito-identity/2014-06-30/smoke.json +0 -20
- data/apis/cognito-idp/2016-04-18/api-2.json +0 -5483
- data/apis/cognito-idp/2016-04-18/examples-1.json +0 -5
- data/apis/cognito-idp/2016-04-18/paginators-1.json +0 -58
- data/apis/cognito-idp/2016-04-18/smoke.json +0 -20
- data/apis/cognito-sync/2014-06-30/api-2.json +0 -1875
- data/apis/comprehend/2017-11-27/api-2.json +0 -3004
- data/apis/comprehend/2017-11-27/examples-1.json +0 -5
- data/apis/comprehend/2017-11-27/paginators-1.json +0 -44
- data/apis/comprehendmedical/2018-10-30/api-2.json +0 -1210
- data/apis/comprehendmedical/2018-10-30/examples-1.json +0 -5
- data/apis/comprehendmedical/2018-10-30/paginators-1.json +0 -4
- data/apis/compute-optimizer/2019-11-01/api-2.json +0 -869
- data/apis/compute-optimizer/2019-11-01/examples-1.json +0 -5
- data/apis/compute-optimizer/2019-11-01/paginators-1.json +0 -4
- data/apis/config/2014-11-12/api-2.json +0 -4378
- data/apis/config/2014-11-12/examples-1.json +0 -5
- data/apis/config/2014-11-12/paginators-1.json +0 -26
- data/apis/config/2014-11-12/smoke.json +0 -19
- data/apis/connect/2017-08-08/api-2.json +0 -4452
- data/apis/connect/2017-08-08/examples-1.json +0 -5
- data/apis/connect/2017-08-08/paginators-1.json +0 -116
- data/apis/connectparticipant/2018-09-07/api-2.json +0 -408
- data/apis/connectparticipant/2018-09-07/examples-1.json +0 -5
- data/apis/connectparticipant/2018-09-07/paginators-1.json +0 -9
- data/apis/cur/2017-01-06/api-2.json +0 -295
- data/apis/cur/2017-01-06/examples-1.json +0 -102
- data/apis/cur/2017-01-06/paginators-1.json +0 -9
- data/apis/cur/2017-01-06/smoke.json +0 -11
- data/apis/databrew/2017-07-25/api-2.json +0 -2127
- data/apis/databrew/2017-07-25/examples-1.json +0 -5
- data/apis/databrew/2017-07-25/paginators-1.json +0 -46
- data/apis/dataexchange/2017-07-25/api-2.json +0 -2272
- data/apis/dataexchange/2017-07-25/paginators-1.json +0 -28
- data/apis/datapipeline/2012-10-29/api-2.json +0 -1168
- data/apis/datapipeline/2012-10-29/paginators-1.json +0 -26
- data/apis/datasync/2018-11-09/api-2.json +0 -1675
- data/apis/datasync/2018-11-09/examples-1.json +0 -5
- data/apis/datasync/2018-11-09/paginators-1.json +0 -29
- data/apis/dax/2017-04-19/api-2.json +0 -1140
- data/apis/dax/2017-04-19/examples-1.json +0 -5
- data/apis/dax/2017-04-19/paginators-1.json +0 -4
- data/apis/detective/2018-10-26/api-2.json +0 -486
- data/apis/detective/2018-10-26/examples-1.json +0 -5
- data/apis/detective/2018-10-26/paginators-1.json +0 -19
- data/apis/devicefarm/2015-06-23/api-2.json +0 -3619
- data/apis/devicefarm/2015-06-23/examples-1.json +0 -1242
- data/apis/devicefarm/2015-06-23/paginators-1.json +0 -97
- data/apis/devicefarm/2015-06-23/smoke.json +0 -18
- data/apis/directconnect/2012-10-25/api-2.json +0 -2188
- data/apis/directconnect/2012-10-25/examples-1.json +0 -5
- data/apis/directconnect/2012-10-25/paginators-1.json +0 -22
- data/apis/directconnect/2012-10-25/smoke.json +0 -18
- data/apis/discovery/2015-11-01/api-2.json +0 -1369
- data/apis/discovery/2015-11-01/examples-1.json +0 -5
- data/apis/discovery/2015-11-01/paginators-1.json +0 -14
- data/apis/discovery/2015-11-01/smoke.json +0 -11
- data/apis/dlm/2018-01-12/api-2.json +0 -696
- data/apis/dlm/2018-01-12/examples-1.json +0 -5
- data/apis/dlm/2018-01-12/paginators-1.json +0 -4
- data/apis/dms/2016-01-01/api-2.json +0 -2844
- data/apis/dms/2016-01-01/examples-1.json +0 -1074
- data/apis/dms/2016-01-01/paginators-1.json +0 -94
- data/apis/dms/2016-01-01/smoke.json +0 -18
- data/apis/dms/2016-01-01/waiters-2.json +0 -336
- data/apis/docdb/2014-10-31/api-2.json +0 -2535
- data/apis/docdb/2014-10-31/examples-1.json +0 -5
- data/apis/docdb/2014-10-31/paginators-1.json +0 -73
- data/apis/docdb/2014-10-31/smoke.json +0 -18
- data/apis/docdb/2014-10-31/waiters-2.json +0 -90
- data/apis/ds/2015-04-16/api-2.json +0 -3179
- data/apis/ds/2015-04-16/examples-1.json +0 -5
- data/apis/ds/2015-04-16/paginators-1.json +0 -9
- data/apis/ds/2015-04-16/smoke.json +0 -20
- data/apis/dynamodb/2011-12-05/api-2.json +0 -818
- data/apis/dynamodb/2011-12-05/examples-1.json +0 -5
- data/apis/dynamodb/2011-12-05/paginators-1.json +0 -26
- data/apis/dynamodb/2011-12-05/smoke.json +0 -20
- data/apis/dynamodb/2011-12-05/waiters-2.json +0 -35
- data/apis/dynamodb/2012-08-10/api-2.json +0 -3392
- data/apis/dynamodb/2012-08-10/examples-1.json +0 -631
- data/apis/dynamodb/2012-08-10/paginators-1.json +0 -36
- data/apis/dynamodb/2012-08-10/resources-1.json +0 -136
- data/apis/dynamodb/2012-08-10/smoke.json +0 -20
- data/apis/dynamodb/2012-08-10/waiters-2.json +0 -35
- data/apis/ebs/2019-11-02/api-2.json +0 -645
- data/apis/ebs/2019-11-02/examples-1.json +0 -5
- data/apis/ebs/2019-11-02/paginators-1.json +0 -14
- data/apis/ec2-instance-connect/2018-04-02/api-2.json +0 -119
- data/apis/ec2-instance-connect/2018-04-02/examples-1.json +0 -34
- data/apis/ec2-instance-connect/2018-04-02/paginators-1.json +0 -4
- data/apis/ec2/2015-10-01/api-2.json +0 -13760
- data/apis/ec2/2015-10-01/examples-1.json +0 -5
- data/apis/ec2/2015-10-01/paginators-1.json +0 -138
- data/apis/ec2/2015-10-01/resources-1.json +0 -2582
- data/apis/ec2/2015-10-01/waiters-2.json +0 -593
- data/apis/ec2/2016-04-01/api-2.json +0 -14191
- data/apis/ec2/2016-04-01/examples-1.json +0 -3729
- data/apis/ec2/2016-04-01/paginators-1.json +0 -138
- data/apis/ec2/2016-04-01/resources-1.json +0 -2582
- data/apis/ec2/2016-04-01/waiters-2.json +0 -593
- data/apis/ec2/2016-09-15/api-2.json +0 -14415
- data/apis/ec2/2016-09-15/examples-1.json +0 -3740
- data/apis/ec2/2016-09-15/paginators-1.json +0 -138
- data/apis/ec2/2016-09-15/resources-1.json +0 -2582
- data/apis/ec2/2016-09-15/waiters-2.json +0 -593
- data/apis/ec2/2016-11-15/api-2.json +0 -31412
- data/apis/ec2/2016-11-15/examples-1.json +0 -5048
- data/apis/ec2/2016-11-15/paginators-1.json +0 -594
- data/apis/ec2/2016-11-15/resources-1.json +0 -2907
- data/apis/ec2/2016-11-15/smoke.json +0 -20
- data/apis/ec2/2016-11-15/waiters-2.json +0 -640
- data/apis/ecr/2015-09-21/api-2.json +0 -1684
- data/apis/ecr/2015-09-21/examples-1.json +0 -215
- data/apis/ecr/2015-09-21/paginators-1.json +0 -48
- data/apis/ecr/2015-09-21/smoke.json +0 -18
- data/apis/ecr/2015-09-21/waiters-2.json +0 -45
- data/apis/ecs/2014-11-13/api-2.json +0 -3263
- data/apis/ecs/2014-11-13/examples-1.json +0 -1137
- data/apis/ecs/2014-11-13/paginators-1.json +0 -52
- data/apis/ecs/2014-11-13/smoke.json +0 -18
- data/apis/ecs/2014-11-13/waiters-2.json +0 -93
- data/apis/eks/2017-11-01/api-2.json +0 -1485
- data/apis/eks/2017-11-01/examples-1.json +0 -135
- data/apis/eks/2017-11-01/paginators-1.json +0 -28
- data/apis/eks/2017-11-01/waiters-2.json +0 -91
- data/apis/elastic-inference/2017-07-25/api-2.json +0 -426
- data/apis/elastic-inference/2017-07-25/examples-1.json +0 -5
- data/apis/elastic-inference/2017-07-25/paginators-1.json +0 -10
- data/apis/elasticache/2015-02-02/api-2.json +0 -4349
- data/apis/elasticache/2015-02-02/examples-1.json +0 -3149
- data/apis/elasticache/2015-02-02/paginators-1.json +0 -106
- data/apis/elasticache/2015-02-02/smoke.json +0 -18
- data/apis/elasticache/2015-02-02/waiters-2.json +0 -143
- data/apis/elasticbeanstalk/2010-12-01/api-2.json +0 -2617
- data/apis/elasticbeanstalk/2010-12-01/examples-1.json +0 -1109
- data/apis/elasticbeanstalk/2010-12-01/paginators-1.json +0 -42
- data/apis/elasticbeanstalk/2010-12-01/smoke.json +0 -18
- data/apis/elasticbeanstalk/2010-12-01/waiters-2.json +0 -63
- data/apis/elasticfilesystem/2015-02-01/api-2.json +0 -1510
- data/apis/elasticfilesystem/2015-02-01/examples-1.json +0 -291
- data/apis/elasticfilesystem/2015-02-01/paginators-1.json +0 -24
- data/apis/elasticfilesystem/2015-02-01/smoke.json +0 -18
- data/apis/elasticloadbalancing/2012-06-01/api-2.json +0 -1642
- data/apis/elasticloadbalancing/2012-06-01/examples-1.json +0 -1036
- data/apis/elasticloadbalancing/2012-06-01/paginators-1.json +0 -18
- data/apis/elasticloadbalancing/2012-06-01/smoke.json +0 -20
- data/apis/elasticloadbalancing/2012-06-01/waiters-2.json +0 -54
- data/apis/elasticloadbalancingv2/2015-12-01/api-2.json +0 -2391
- data/apis/elasticloadbalancingv2/2015-12-01/examples-1.json +0 -1384
- data/apis/elasticloadbalancingv2/2015-12-01/paginators-1.json +0 -19
- data/apis/elasticloadbalancingv2/2015-12-01/smoke.json +0 -20
- data/apis/elasticloadbalancingv2/2015-12-01/waiters-2.json +0 -100
- data/apis/elasticmapreduce/2009-03-31/api-2.json +0 -2555
- data/apis/elasticmapreduce/2009-03-31/examples-1.json +0 -5
- data/apis/elasticmapreduce/2009-03-31/paginators-1.json +0 -47
- data/apis/elasticmapreduce/2009-03-31/smoke.json +0 -18
- data/apis/elasticmapreduce/2009-03-31/waiters-2.json +0 -86
- data/apis/elastictranscoder/2012-09-25/api-2.json +0 -1484
- data/apis/elastictranscoder/2012-09-25/examples-1.json +0 -5
- data/apis/elastictranscoder/2012-09-25/paginators-1.json +0 -24
- data/apis/elastictranscoder/2012-09-25/smoke.json +0 -18
- data/apis/elastictranscoder/2012-09-25/waiters-2.json +0 -30
- data/apis/email/2010-12-01/api-2.json +0 -3182
- data/apis/email/2010-12-01/examples-1.json +0 -1021
- data/apis/email/2010-12-01/paginators-1.json +0 -18
- data/apis/email/2010-12-01/smoke.json +0 -18
- data/apis/email/2010-12-01/waiters-2.json +0 -18
- data/apis/entitlement.marketplace/2017-01-11/api-2.json +0 -128
- data/apis/entitlement.marketplace/2017-01-11/examples-1.json +0 -5
- data/apis/entitlement.marketplace/2017-01-11/paginators-1.json +0 -4
- data/apis/es/2015-01-01/api-2.json +0 -2533
- data/apis/es/2015-01-01/examples-1.json +0 -5
- data/apis/es/2015-01-01/paginators-1.json +0 -59
- data/apis/es/2015-01-01/smoke.json +0 -18
- data/apis/eventbridge/2015-10-07/api-2.json +0 -2052
- data/apis/eventbridge/2015-10-07/examples-1.json +0 -5
- data/apis/eventbridge/2015-10-07/paginators-1.json +0 -4
- data/apis/eventbridge/2015-10-07/smoke.json +0 -18
- data/apis/events/2015-10-07/api-2.json +0 -2052
- data/apis/events/2015-10-07/examples-1.json +0 -5
- data/apis/events/2015-10-07/paginators-1.json +0 -4
- data/apis/events/2015-10-07/smoke.json +0 -18
- data/apis/firehose/2015-08-04/api-2.json +0 -1717
- data/apis/firehose/2015-08-04/examples-1.json +0 -5
- data/apis/firehose/2015-08-04/paginators-1.json +0 -4
- data/apis/firehose/2015-08-04/smoke.json +0 -18
- data/apis/fms/2018-01-01/api-2.json +0 -1449
- data/apis/fms/2018-01-01/examples-1.json +0 -5
- data/apis/fms/2018-01-01/paginators-1.json +0 -22
- data/apis/forecast/2018-06-26/api-2.json +0 -1565
- data/apis/forecast/2018-06-26/examples-1.json +0 -5
- data/apis/forecast/2018-06-26/paginators-1.json +0 -40
- data/apis/forecastquery/2018-06-26/api-2.json +0 -146
- data/apis/forecastquery/2018-06-26/examples-1.json +0 -5
- data/apis/forecastquery/2018-06-26/paginators-1.json +0 -4
- data/apis/frauddetector/2019-11-15/api-2.json +0 -2510
- data/apis/frauddetector/2019-11-15/examples-1.json +0 -5
- data/apis/frauddetector/2019-11-15/paginators-1.json +0 -59
- data/apis/fsx/2018-03-01/api-2.json +0 -1642
- data/apis/fsx/2018-03-01/examples-1.json +0 -395
- data/apis/fsx/2018-03-01/paginators-1.json +0 -24
- data/apis/gamelift/2015-10-01/api-2.json +0 -4505
- data/apis/gamelift/2015-10-01/examples-1.json +0 -5
- data/apis/gamelift/2015-10-01/paginators-1.json +0 -124
- data/apis/gamelift/2015-10-01/smoke.json +0 -18
- data/apis/glacier/2012-06-01/api-2.json +0 -1906
- data/apis/glacier/2012-06-01/examples-1.json +0 -806
- data/apis/glacier/2012-06-01/paginators-1.json +0 -28
- data/apis/glacier/2012-06-01/resources-1.json +0 -563
- data/apis/glacier/2012-06-01/smoke.json +0 -18
- data/apis/glacier/2012-06-01/waiters-2.json +0 -39
- data/apis/globalaccelerator/2018-08-08/api-2.json +0 -1181
- data/apis/globalaccelerator/2018-08-08/examples-1.json +0 -5
- data/apis/globalaccelerator/2018-08-08/paginators-1.json +0 -4
- data/apis/glue/2017-03-31/api-2.json +0 -8102
- data/apis/glue/2017-03-31/examples-1.json +0 -5
- data/apis/glue/2017-03-31/paginators-1.json +0 -154
- data/apis/glue/2017-03-31/smoke.json +0 -11
- data/apis/greengrass/2017-06-07/api-2.json +0 -5244
- data/apis/groundstation/2019-05-23/api-2.json +0 -1463
- data/apis/groundstation/2019-05-23/examples-1.json +0 -5
- data/apis/groundstation/2019-05-23/paginators-1.json +0 -40
- data/apis/guardduty/2017-11-28/api-2.json +0 -4370
- data/apis/guardduty/2017-11-28/examples-1.json +0 -5
- data/apis/guardduty/2017-11-28/paginators-1.json +0 -62
- data/apis/health/2016-08-04/api-2.json +0 -847
- data/apis/health/2016-08-04/examples-1.json +0 -5
- data/apis/health/2016-08-04/paginators-1.json +0 -55
- data/apis/health/2016-08-04/smoke.json +0 -11
- data/apis/honeycode/2020-03-01/api-2.json +0 -321
- data/apis/honeycode/2020-03-01/examples-1.json +0 -5
- data/apis/honeycode/2020-03-01/paginators-1.json +0 -4
- data/apis/iam/2010-05-08/api-2.json +0 -5821
- data/apis/iam/2010-05-08/examples-1.json +0 -1577
- data/apis/iam/2010-05-08/paginators-1.json +0 -198
- data/apis/iam/2010-05-08/resources-1.json +0 -1740
- data/apis/iam/2010-05-08/smoke.json +0 -18
- data/apis/iam/2010-05-08/waiters-2.json +0 -73
- data/apis/identitystore/2020-06-15/api-2.json +0 -318
- data/apis/identitystore/2020-06-15/examples-1.json +0 -5
- data/apis/identitystore/2020-06-15/paginators-1.json +0 -14
- data/apis/imagebuilder/2019-12-02/api-2.json +0 -2493
- data/apis/imagebuilder/2019-12-02/examples-1.json +0 -5
- data/apis/imagebuilder/2019-12-02/paginators-1.json +0 -49
- data/apis/importexport/2010-06-01/api-2.json +0 -667
- data/apis/importexport/2010-06-01/paginators-1.json +0 -11
- data/apis/inspector/2016-02-16/api-2.json +0 -2387
- data/apis/inspector/2016-02-16/examples-1.json +0 -1148
- data/apis/inspector/2016-02-16/paginators-1.json +0 -54
- data/apis/inspector/2016-02-16/smoke.json +0 -18
- data/apis/iot-data/2015-05-28/api-2.json +0 -343
- data/apis/iot-data/2015-05-28/examples-1.json +0 -5
- data/apis/iot-data/2015-05-28/paginators-1.json +0 -4
- data/apis/iot-data/2015-05-28/smoke.json +0 -13
- data/apis/iot-jobs-data/2017-09-29/api-2.json +0 -348
- data/apis/iot-jobs-data/2017-09-29/examples-1.json +0 -5
- data/apis/iot-jobs-data/2017-09-29/paginators-1.json +0 -4
- data/apis/iot/2015-05-28/api-2.json +0 -11835
- data/apis/iot/2015-05-28/examples-1.json +0 -5
- data/apis/iot/2015-05-28/paginators-1.json +0 -294
- data/apis/iot/2015-05-28/smoke.json +0 -18
- data/apis/iot1click-devices/2018-05-14/api-2.json +0 -902
- data/apis/iot1click-projects/2018-05-14/api-2.json +0 -883
- data/apis/iot1click-projects/2018-05-14/examples-1.json +0 -5
- data/apis/iot1click-projects/2018-05-14/paginators-1.json +0 -16
- data/apis/iotanalytics/2017-11-27/api-2.json +0 -2269
- data/apis/iotanalytics/2017-11-27/examples-1.json +0 -5
- data/apis/iotanalytics/2017-11-27/paginators-1.json +0 -29
- data/apis/iotevents-data/2018-10-23/api-2.json +0 -454
- data/apis/iotevents-data/2018-10-23/examples-1.json +0 -5
- data/apis/iotevents-data/2018-10-23/paginators-1.json +0 -4
- data/apis/iotevents/2018-07-27/api-2.json +0 -1262
- data/apis/iotevents/2018-07-27/examples-1.json +0 -5
- data/apis/iotevents/2018-07-27/paginators-1.json +0 -4
- data/apis/iotsecuretunneling/2018-10-05/api-2.json +0 -384
- data/apis/iotsecuretunneling/2018-10-05/examples-1.json +0 -5
- data/apis/iotsecuretunneling/2018-10-05/paginators-1.json +0 -9
- data/apis/iotsitewise/2019-12-02/api-2.json +0 -3673
- data/apis/iotsitewise/2019-12-02/examples-1.json +0 -5
- data/apis/iotsitewise/2019-12-02/paginators-1.json +0 -70
- data/apis/iotsitewise/2019-12-02/waiters-2.json +0 -92
- data/apis/iotthingsgraph/2018-09-06/api-2.json +0 -1581
- data/apis/iotthingsgraph/2018-09-06/examples-1.json +0 -5
- data/apis/iotthingsgraph/2018-09-06/paginators-1.json +0 -64
- data/apis/ivs/2020-07-14/api-2.json +0 -981
- data/apis/ivs/2020-07-14/examples-1.json +0 -5
- data/apis/ivs/2020-07-14/paginators-1.json +0 -33
- data/apis/kafka/2018-11-14/api-2.json +0 -2917
- data/apis/kafka/2018-11-14/paginators-1.json +0 -46
- data/apis/kendra/2019-02-03/api-2.json +0 -2561
- data/apis/kendra/2019-02-03/examples-1.json +0 -5
- data/apis/kendra/2019-02-03/paginators-1.json +0 -19
- data/apis/kinesis-video-archived-media/2017-09-30/api-2.json +0 -498
- data/apis/kinesis-video-archived-media/2017-09-30/examples-1.json +0 -5
- data/apis/kinesis-video-archived-media/2017-09-30/paginators-1.json +0 -10
- data/apis/kinesis-video-media/2017-09-30/api-2.json +0 -160
- data/apis/kinesis-video-media/2017-09-30/examples-1.json +0 -5
- data/apis/kinesis-video-media/2017-09-30/paginators-1.json +0 -4
- data/apis/kinesis-video-signaling/2019-12-04/api-2.json +0 -200
- data/apis/kinesis-video-signaling/2019-12-04/examples-1.json +0 -5
- data/apis/kinesis-video-signaling/2019-12-04/paginators-1.json +0 -4
- data/apis/kinesis/2013-12-02/api-2.json +0 -1449
- data/apis/kinesis/2013-12-02/examples-1.json +0 -5
- data/apis/kinesis/2013-12-02/paginators-1.json +0 -23
- data/apis/kinesis/2013-12-02/smoke.json +0 -18
- data/apis/kinesis/2013-12-02/waiters-2.json +0 -30
- data/apis/kinesisanalytics/2015-08-14/api-2.json +0 -1510
- data/apis/kinesisanalytics/2015-08-14/examples-1.json +0 -5
- data/apis/kinesisanalytics/2015-08-14/paginators-1.json +0 -4
- data/apis/kinesisanalyticsv2/2018-05-23/api-2.json +0 -2342
- data/apis/kinesisanalyticsv2/2018-05-23/examples-1.json +0 -5
- data/apis/kinesisanalyticsv2/2018-05-23/paginators-1.json +0 -4
- data/apis/kinesisvideo/2017-09-30/api-2.json +0 -958
- data/apis/kinesisvideo/2017-09-30/examples-1.json +0 -5
- data/apis/kinesisvideo/2017-09-30/paginators-1.json +0 -16
- data/apis/kms/2014-11-01/api-2.json +0 -2158
- data/apis/kms/2014-11-01/examples-1.json +0 -906
- data/apis/kms/2014-11-01/paginators-1.json +0 -32
- data/apis/kms/2014-11-01/smoke.json +0 -19
- data/apis/lakeformation/2017-03-31/api-2.json +0 -737
- data/apis/lakeformation/2017-03-31/examples-1.json +0 -5
- data/apis/lakeformation/2017-03-31/paginators-1.json +0 -19
- data/apis/lambda/2014-11-11/api-2.json +0 -668
- data/apis/lambda/2014-11-11/paginators-1.json +0 -16
- data/apis/lambda/2015-03-31/api-2.json +0 -3067
- data/apis/lambda/2015-03-31/examples-1.json +0 -1513
- data/apis/lambda/2015-03-31/paginators-1.json +0 -52
- data/apis/lambda/2015-03-31/smoke.json +0 -18
- data/apis/lambda/2015-03-31/waiters-2.json +0 -74
- data/apis/lex-models/2017-04-19/api-2.json +0 -2688
- data/apis/lex-models/2017-04-19/examples-1.json +0 -758
- data/apis/lex-models/2017-04-19/paginators-1.json +0 -54
- data/apis/license-manager/2018-08-01/api-2.json +0 -886
- data/apis/license-manager/2018-08-01/examples-1.json +0 -5
- data/apis/license-manager/2018-08-01/paginators-1.json +0 -4
- data/apis/lightsail/2016-11-28/api-2.json +0 -6873
- data/apis/lightsail/2016-11-28/examples-1.json +0 -5
- data/apis/lightsail/2016-11-28/paginators-1.json +0 -4
- data/apis/lightsail/2016-11-28/smoke.json +0 -11
- data/apis/logs/2014-03-28/api-2.json +0 -1819
- data/apis/logs/2014-03-28/examples-1.json +0 -5
- data/apis/logs/2014-03-28/paginators-1.json +0 -49
- data/apis/logs/2014-03-28/smoke.json +0 -19
- data/apis/machinelearning/2014-12-12/api-2.json +0 -1978
- data/apis/machinelearning/2014-12-12/examples-1.json +0 -5
- data/apis/machinelearning/2014-12-12/paginators-1.json +0 -28
- data/apis/machinelearning/2014-12-12/waiters-2.json +0 -81
- data/apis/macie/2017-12-19/api-2.json +0 -365
- data/apis/macie/2017-12-19/examples-1.json +0 -5
- data/apis/macie/2017-12-19/paginators-1.json +0 -14
- data/apis/macie2/2020-01-01/api-2.json +0 -5775
- data/apis/macie2/2020-01-01/paginators-1.json +0 -58
- data/apis/managedblockchain/2018-09-24/api-2.json +0 -1507
- data/apis/managedblockchain/2018-09-24/examples-1.json +0 -5
- data/apis/managedblockchain/2018-09-24/paginators-1.json +0 -34
- data/apis/marketplace-catalog/2018-09-17/api-2.json +0 -560
- data/apis/marketplace-catalog/2018-09-17/examples-1.json +0 -5
- data/apis/marketplace-catalog/2018-09-17/paginators-1.json +0 -14
- data/apis/marketplacecommerceanalytics/2015-07-01/api-2.json +0 -176
- data/apis/marketplacecommerceanalytics/2015-07-01/examples-1.json +0 -5
- data/apis/marketplacecommerceanalytics/2015-07-01/paginators-1.json +0 -4
- data/apis/marketplacecommerceanalytics/2015-07-01/smoke.json +0 -17
- data/apis/mediaconnect/2018-11-14/api-2.json +0 -2882
- data/apis/mediaconnect/2018-11-14/paginators-1.json +0 -28
- data/apis/mediaconvert/2017-08-29/api-2.json +0 -9636
- data/apis/mediaconvert/2017-08-29/paginators-1.json +0 -34
- data/apis/medialive/2017-10-14/api-2.json +0 -12784
- data/apis/medialive/2017-10-14/paginators-1.json +0 -64
- data/apis/medialive/2017-10-14/waiters-2.json +0 -298
- data/apis/mediapackage-vod/2018-11-07/api-2.json +0 -1879
- data/apis/mediapackage-vod/2018-11-07/paginators-1.json +0 -22
- data/apis/mediapackage/2017-10-12/api-2.json +0 -2700
- data/apis/mediapackage/2017-10-12/paginators-1.json +0 -22
- data/apis/mediastore-data/2017-09-01/api-2.json +0 -406
- data/apis/mediastore-data/2017-09-01/examples-1.json +0 -5
- data/apis/mediastore-data/2017-09-01/paginators-1.json +0 -9
- data/apis/mediastore/2017-09-01/api-2.json +0 -871
- data/apis/mediastore/2017-09-01/examples-1.json +0 -5
- data/apis/mediastore/2017-09-01/paginators-1.json +0 -9
- data/apis/mediatailor/2018-04-23/api-2.json +0 -629
- data/apis/mediatailor/2018-04-23/paginators-1.json +0 -3
- data/apis/meteringmarketplace/2016-01-14/api-2.json +0 -417
- data/apis/meteringmarketplace/2016-01-14/examples-1.json +0 -5
- data/apis/meteringmarketplace/2016-01-14/paginators-1.json +0 -4
- data/apis/migrationhub-config/2019-06-30/api-2.json +0 -220
- data/apis/migrationhub-config/2019-06-30/examples-1.json +0 -5
- data/apis/migrationhub-config/2019-06-30/paginators-1.json +0 -9
- data/apis/mobile/2017-07-01/api-2.json +0 -551
- data/apis/mobile/2017-07-01/examples-1.json +0 -5
- data/apis/mobile/2017-07-01/paginators-1.json +0 -14
- data/apis/monitoring/2010-08-01/api-2.json +0 -1978
- data/apis/monitoring/2010-08-01/examples-1.json +0 -5
- data/apis/monitoring/2010-08-01/paginators-1.json +0 -46
- data/apis/monitoring/2010-08-01/resources-1.json +0 -505
- data/apis/monitoring/2010-08-01/smoke.json +0 -22
- data/apis/monitoring/2010-08-01/waiters-2.json +0 -31
- data/apis/mq/2017-11-27/api-2.json +0 -2783
- data/apis/mq/2017-11-27/paginators-1.json +0 -10
- data/apis/mturk-requester/2017-01-17/api-2.json +0 -1696
- data/apis/mturk-requester/2017-01-17/examples-1.json +0 -5
- data/apis/mturk-requester/2017-01-17/paginators-1.json +0 -54
- data/apis/neptune/2014-10-31/api-2.json +0 -3822
- data/apis/neptune/2014-10-31/examples-1.json +0 -5
- data/apis/neptune/2014-10-31/paginators-1.json +0 -67
- data/apis/neptune/2014-10-31/smoke.json +0 -18
- data/apis/neptune/2014-10-31/waiters-2.json +0 -90
- data/apis/network-firewall/2020-11-12/api-2.json +0 -1884
- data/apis/network-firewall/2020-11-12/examples-1.json +0 -5
- data/apis/network-firewall/2020-11-12/paginators-1.json +0 -28
- data/apis/networkmanager/2019-07-05/api-2.json +0 -1588
- data/apis/networkmanager/2019-07-05/examples-1.json +0 -5
- data/apis/networkmanager/2019-07-05/paginators-1.json +0 -46
- data/apis/opsworks/2013-02-18/api-2.json +0 -2885
- data/apis/opsworks/2013-02-18/examples-1.json +0 -5
- data/apis/opsworks/2013-02-18/paginators-1.json +0 -55
- data/apis/opsworks/2013-02-18/resources-1.json +0 -173
- data/apis/opsworks/2013-02-18/smoke.json +0 -18
- data/apis/opsworks/2013-02-18/waiters-2.json +0 -289
- data/apis/opsworkscm/2016-11-01/api-2.json +0 -948
- data/apis/opsworkscm/2016-11-01/examples-1.json +0 -5
- data/apis/opsworkscm/2016-11-01/paginators-1.json +0 -28
- data/apis/opsworkscm/2016-11-01/waiters-2.json +0 -25
- data/apis/organizations/2016-11-28/api-2.json +0 -2618
- data/apis/organizations/2016-11-28/examples-1.json +0 -1409
- data/apis/organizations/2016-11-28/paginators-1.json +0 -86
- data/apis/outposts/2019-12-03/api-2.json +0 -432
- data/apis/outposts/2019-12-03/examples-1.json +0 -5
- data/apis/outposts/2019-12-03/paginators-1.json +0 -14
- data/apis/personalize-events/2018-03-22/api-2.json +0 -214
- data/apis/personalize-events/2018-03-22/examples-1.json +0 -5
- data/apis/personalize-events/2018-03-22/paginators-1.json +0 -4
- data/apis/personalize-runtime/2018-05-22/api-2.json +0 -172
- data/apis/personalize-runtime/2018-05-22/examples-1.json +0 -5
- data/apis/personalize-runtime/2018-05-22/paginators-1.json +0 -4
- data/apis/personalize/2018-05-22/api-2.json +0 -2038
- data/apis/personalize/2018-05-22/examples-1.json +0 -5
- data/apis/personalize/2018-05-22/paginators-1.json +0 -64
- data/apis/pi/2018-02-27/api-2.json +0 -253
- data/apis/pi/2018-02-27/examples-1.json +0 -5
- data/apis/pi/2018-02-27/paginators-1.json +0 -4
- data/apis/pinpoint-email/2018-07-26/api-2.json +0 -2093
- data/apis/pinpoint-email/2018-07-26/examples-1.json +0 -5
- data/apis/pinpoint-email/2018-07-26/paginators-1.json +0 -34
- data/apis/pinpoint/2016-12-01/api-2.json +0 -12480
- data/apis/pinpoint/2016-12-01/examples-1.json +0 -5
- data/apis/polly/2016-06-10/api-2.json +0 -836
- data/apis/polly/2016-06-10/examples-1.json +0 -171
- data/apis/polly/2016-06-10/paginators-1.json +0 -9
- data/apis/polly/2016-06-10/smoke.json +0 -11
- data/apis/pricing/2017-10-15/api-2.json +0 -227
- data/apis/pricing/2017-10-15/examples-1.json +0 -103
- data/apis/pricing/2017-10-15/paginators-1.json +0 -19
- data/apis/qldb-session/2019-07-11/api-2.json +0 -259
- data/apis/qldb-session/2019-07-11/examples-1.json +0 -5
- data/apis/qldb-session/2019-07-11/paginators-1.json +0 -4
- data/apis/qldb/2019-01-02/api-2.json +0 -999
- data/apis/qldb/2019-01-02/examples-1.json +0 -5
- data/apis/qldb/2019-01-02/paginators-1.json +0 -24
- data/apis/quicksight/2018-04-01/api-2.json +0 -7780
- data/apis/quicksight/2018-04-01/examples-1.json +0 -5
- data/apis/quicksight/2018-04-01/paginators-1.json +0 -64
- data/apis/ram/2018-01-04/api-2.json +0 -1315
- data/apis/ram/2018-01-04/examples-1.json +0 -5
- data/apis/ram/2018-01-04/paginators-1.json +0 -39
- data/apis/rds-data/2018-08-01/api-2.json +0 -552
- data/apis/rds-data/2018-08-01/examples-1.json +0 -5
- data/apis/rds-data/2018-08-01/paginators-1.json +0 -4
- data/apis/rds/2013-01-10/api-2.json +0 -2903
- data/apis/rds/2013-01-10/examples-1.json +0 -5
- data/apis/rds/2013-01-10/paginators-1.json +0 -97
- data/apis/rds/2013-01-10/smoke.json +0 -18
- data/apis/rds/2013-02-12/api-2.json +0 -3059
- data/apis/rds/2013-02-12/examples-1.json +0 -5
- data/apis/rds/2013-02-12/paginators-1.json +0 -110
- data/apis/rds/2013-02-12/smoke.json +0 -18
- data/apis/rds/2013-09-09/api-2.json +0 -3160
- data/apis/rds/2013-09-09/examples-1.json +0 -5
- data/apis/rds/2013-09-09/paginators-1.json +0 -110
- data/apis/rds/2013-09-09/smoke.json +0 -18
- data/apis/rds/2013-09-09/waiters-2.json +0 -97
- data/apis/rds/2014-09-01/api-2.json +0 -3273
- data/apis/rds/2014-09-01/examples-1.json +0 -5
- data/apis/rds/2014-09-01/paginators-1.json +0 -4
- data/apis/rds/2014-09-01/smoke.json +0 -18
- data/apis/rds/2014-10-31/api-2.json +0 -7765
- data/apis/rds/2014-10-31/examples-1.json +0 -1951
- data/apis/rds/2014-10-31/paginators-1.json +0 -212
- data/apis/rds/2014-10-31/resources-1.json +0 -3272
- data/apis/rds/2014-10-31/smoke.json +0 -18
- data/apis/rds/2014-10-31/waiters-2.json +0 -260
- data/apis/redshift-data/2019-12-20/api-2.json +0 -501
- data/apis/redshift-data/2019-12-20/examples-1.json +0 -5
- data/apis/redshift-data/2019-12-20/paginators-1.json +0 -39
- data/apis/redshift/2012-12-01/api-2.json +0 -5527
- data/apis/redshift/2012-12-01/examples-1.json +0 -5
- data/apis/redshift/2012-12-01/paginators-1.json +0 -154
- data/apis/redshift/2012-12-01/smoke.json +0 -18
- data/apis/redshift/2012-12-01/waiters-2.json +0 -97
- data/apis/rekognition/2016-06-27/api-2.json +0 -3180
- data/apis/rekognition/2016-06-27/examples-1.json +0 -651
- data/apis/rekognition/2016-06-27/paginators-1.json +0 -73
- data/apis/rekognition/2016-06-27/smoke.json +0 -11
- data/apis/rekognition/2016-06-27/waiters-2.json +0 -45
- data/apis/resource-groups/2017-11-27/api-2.json +0 -927
- data/apis/resource-groups/2017-11-27/examples-1.json +0 -5
- data/apis/resource-groups/2017-11-27/paginators-1.json +0 -22
- data/apis/resourcegroupstaggingapi/2017-01-26/api-2.json +0 -532
- data/apis/resourcegroupstaggingapi/2017-01-26/examples-1.json +0 -5
- data/apis/resourcegroupstaggingapi/2017-01-26/paginators-1.json +0 -26
- data/apis/robomaker/2018-06-29/api-2.json +0 -3160
- data/apis/robomaker/2018-06-29/examples-1.json +0 -5
- data/apis/robomaker/2018-06-29/paginators-1.json +0 -70
- data/apis/route53/2013-04-01/api-2.json +0 -3881
- data/apis/route53/2013-04-01/examples-1.json +0 -762
- data/apis/route53/2013-04-01/paginators-1.json +0 -39
- data/apis/route53/2013-04-01/smoke.json +0 -18
- data/apis/route53/2013-04-01/waiters-2.json +0 -18
- data/apis/route53domains/2014-05-15/api-2.json +0 -1507
- data/apis/route53domains/2014-05-15/examples-1.json +0 -5
- data/apis/route53domains/2014-05-15/paginators-1.json +0 -16
- data/apis/route53domains/2014-05-15/smoke.json +0 -18
- data/apis/route53resolver/2018-04-01/api-2.json +0 -1666
- data/apis/route53resolver/2018-04-01/examples-1.json +0 -5
- data/apis/route53resolver/2018-04-01/paginators-1.json +0 -46
- data/apis/route53resolver/2018-04-01/smoke.json +0 -18
- data/apis/runtime.lex/2016-11-28/api-2.json +0 -841
- data/apis/runtime.lex/2016-11-28/examples-1.json +0 -5
- data/apis/runtime.lex/2016-11-28/paginators-1.json +0 -4
- data/apis/runtime.sagemaker/2017-05-13/api-2.json +0 -175
- data/apis/runtime.sagemaker/2017-05-13/examples-1.json +0 -5
- data/apis/runtime.sagemaker/2017-05-13/paginators-1.json +0 -4
- data/apis/s3/2006-03-01/api-2.json +0 -7474
- data/apis/s3/2006-03-01/examples-1.json +0 -1876
- data/apis/s3/2006-03-01/paginators-1.json +0 -66
- data/apis/s3/2006-03-01/resources-1.json +0 -1249
- data/apis/s3/2006-03-01/smoke.json +0 -11
- data/apis/s3/2006-03-01/waiters-2.json +0 -73
- data/apis/s3control/2018-08-20/api-2.json +0 -2903
- data/apis/s3control/2018-08-20/examples-1.json +0 -5
- data/apis/s3control/2018-08-20/paginators-1.json +0 -19
- data/apis/s3outposts/2017-07-25/api-2.json +0 -250
- data/apis/s3outposts/2017-07-25/examples-1.json +0 -5
- data/apis/s3outposts/2017-07-25/paginators-1.json +0 -10
- data/apis/sagemaker-a2i-runtime/2019-11-07/api-2.json +0 -366
- data/apis/sagemaker-a2i-runtime/2019-11-07/examples-1.json +0 -5
- data/apis/sagemaker-a2i-runtime/2019-11-07/paginators-1.json +0 -10
- data/apis/sagemaker/2017-07-24/api-2.json +0 -10329
- data/apis/sagemaker/2017-07-24/examples-1.json +0 -5
- data/apis/sagemaker/2017-07-24/paginators-1.json +0 -214
- data/apis/sagemaker/2017-07-24/waiters-2.json +0 -193
- data/apis/savingsplans/2019-06-28/api-2.json +0 -786
- data/apis/savingsplans/2019-06-28/examples-1.json +0 -5
- data/apis/savingsplans/2019-06-28/paginators-1.json +0 -4
- data/apis/schemas/2019-12-02/api-2.json +0 -2980
- data/apis/schemas/2019-12-02/paginators-1.json +0 -34
- data/apis/schemas/2019-12-02/waiters-2.json +0 -36
- data/apis/sdb/2009-04-15/api-2.json +0 -955
- data/apis/sdb/2009-04-15/paginators-1.json +0 -15
- data/apis/secretsmanager/2017-10-17/api-2.json +0 -1088
- data/apis/secretsmanager/2017-10-17/examples-1.json +0 -594
- data/apis/secretsmanager/2017-10-17/paginators-1.json +0 -14
- data/apis/secretsmanager/2017-10-17/smoke.json +0 -18
- data/apis/securityhub/2018-10-26/api-2.json +0 -4515
- data/apis/securityhub/2018-10-26/examples-1.json +0 -5
- data/apis/securityhub/2018-10-26/paginators-1.json +0 -54
- data/apis/serverlessrepo/2017-09-08/api-2.json +0 -1857
- data/apis/serverlessrepo/2017-09-08/paginators-1.json +0 -19
- data/apis/service-quotas/2019-06-24/api-2.json +0 -867
- data/apis/service-quotas/2019-06-24/examples-1.json +0 -5
- data/apis/service-quotas/2019-06-24/paginators-1.json +0 -40
- data/apis/servicecatalog-appregistry/2020-06-24/api-2.json +0 -857
- data/apis/servicecatalog-appregistry/2020-06-24/examples-1.json +0 -5
- data/apis/servicecatalog-appregistry/2020-06-24/paginators-1.json +0 -28
- data/apis/servicecatalog/2015-12-10/api-2.json +0 -4130
- data/apis/servicecatalog/2015-12-10/examples-1.json +0 -5
- data/apis/servicecatalog/2015-12-10/paginators-1.json +0 -94
- data/apis/servicecatalog/2015-12-10/smoke.json +0 -11
- data/apis/servicediscovery/2017-03-14/api-2.json +0 -1317
- data/apis/servicediscovery/2017-03-14/examples-1.json +0 -672
- data/apis/servicediscovery/2017-03-14/paginators-1.json +0 -29
- data/apis/sesv2/2019-09-27/api-2.json +0 -3966
- data/apis/sesv2/2019-09-27/examples-1.json +0 -5
- data/apis/sesv2/2019-09-27/paginators-1.json +0 -64
- data/apis/shield/2016-06-02/api-2.json +0 -1445
- data/apis/shield/2016-06-02/examples-1.json +0 -5
- data/apis/shield/2016-06-02/paginators-1.json +0 -26
- data/apis/shield/2016-06-02/smoke.json +0 -11
- data/apis/signer/2017-08-25/api-2.json +0 -822
- data/apis/signer/2017-08-25/examples-1.json +0 -5
- data/apis/signer/2017-08-25/paginators-1.json +0 -19
- data/apis/signer/2017-08-25/waiters-2.json +0 -29
- data/apis/sms-voice/2018-09-05/api-2.json +0 -630
- data/apis/sms/2016-10-24/api-2.json +0 -1775
- data/apis/sms/2016-10-24/examples-1.json +0 -5
- data/apis/sms/2016-10-24/paginators-1.json +0 -28
- data/apis/sms/2016-10-24/smoke.json +0 -18
- data/apis/snowball/2016-06-30/api-2.json +0 -1116
- data/apis/snowball/2016-06-30/examples-1.json +0 -442
- data/apis/snowball/2016-06-30/paginators-1.json +0 -16
- data/apis/snowball/2016-06-30/smoke.json +0 -11
- data/apis/sns/2010-03-31/api-2.json +0 -1471
- data/apis/sns/2010-03-31/examples-1.json +0 -5
- data/apis/sns/2010-03-31/paginators-1.json +0 -29
- data/apis/sns/2010-03-31/resources-1.json +0 -327
- data/apis/sns/2010-03-31/smoke.json +0 -19
- data/apis/sqs/2012-11-05/api-2.json +0 -1139
- data/apis/sqs/2012-11-05/examples-1.json +0 -5
- data/apis/sqs/2012-11-05/paginators-1.json +0 -16
- data/apis/sqs/2012-11-05/resources-1.json +0 -232
- data/apis/sqs/2012-11-05/smoke.json +0 -18
- data/apis/ssm/2014-11-06/api-2.json +0 -9349
- data/apis/ssm/2014-11-06/examples-1.json +0 -5
- data/apis/ssm/2014-11-06/paginators-1.json +0 -259
- data/apis/ssm/2014-11-06/smoke.json +0 -18
- data/apis/ssm/2014-11-06/waiters-2.json +0 -60
- data/apis/sso-admin/2020-07-20/api-2.json +0 -1296
- data/apis/sso-admin/2020-07-20/examples-1.json +0 -5
- data/apis/sso-admin/2020-07-20/paginators-1.json +0 -63
- data/apis/sso-oidc/2019-06-10/api-2.json +0 -283
- data/apis/sso-oidc/2019-06-10/examples-1.json +0 -5
- data/apis/sso-oidc/2019-06-10/paginators-1.json +0 -4
- data/apis/sso/2019-06-10/api-2.json +0 -281
- data/apis/sso/2019-06-10/examples-1.json +0 -5
- data/apis/sso/2019-06-10/paginators-1.json +0 -16
- data/apis/states/2016-11-23/api-2.json +0 -1539
- data/apis/states/2016-11-23/examples-1.json +0 -5
- data/apis/states/2016-11-23/paginators-1.json +0 -28
- data/apis/states/2016-11-23/smoke.json +0 -11
- data/apis/storagegateway/2013-06-30/api-2.json +0 -3733
- data/apis/storagegateway/2013-06-30/examples-1.json +0 -1381
- data/apis/storagegateway/2013-06-30/paginators-1.json +0 -82
- data/apis/streams.dynamodb/2012-08-10/api-2.json +0 -407
- data/apis/streams.dynamodb/2012-08-10/examples-1.json +0 -212
- data/apis/streams.dynamodb/2012-08-10/paginators-1.json +0 -4
- data/apis/sts/2011-06-15/api-2.json +0 -599
- data/apis/sts/2011-06-15/examples-1.json +0 -271
- data/apis/sts/2011-06-15/paginators-1.json +0 -4
- data/apis/sts/2011-06-15/smoke.json +0 -19
- data/apis/support/2013-04-15/api-2.json +0 -773
- data/apis/support/2013-04-15/examples-1.json +0 -5
- data/apis/support/2013-04-15/paginators-1.json +0 -25
- data/apis/support/2013-04-15/smoke.json +0 -22
- data/apis/swf/2012-01-25/api-2.json +0 -2792
- data/apis/swf/2012-01-25/examples-1.json +0 -5
- data/apis/swf/2012-01-25/paginators-1.json +0 -46
- data/apis/synthetics/2017-10-11/api-2.json +0 -790
- data/apis/synthetics/2017-10-11/examples-1.json +0 -5
- data/apis/synthetics/2017-10-11/paginators-1.json +0 -24
- data/apis/textract/2018-06-27/api-2.json +0 -690
- data/apis/textract/2018-06-27/examples-1.json +0 -5
- data/apis/textract/2018-06-27/paginators-1.json +0 -4
- data/apis/timestream-query/2018-11-01/api-2.json +0 -299
- data/apis/timestream-query/2018-11-01/examples-1.json +0 -5
- data/apis/timestream-query/2018-11-01/paginators-1.json +0 -14
- data/apis/timestream-write/2018-11-01/api-2.json +0 -775
- data/apis/timestream-write/2018-11-01/examples-1.json +0 -5
- data/apis/timestream-write/2018-11-01/paginators-1.json +0 -14
- data/apis/transcribe-streaming/2017-10-26/api-2.json +0 -347
- data/apis/transcribe-streaming/2017-10-26/examples-1.json +0 -5
- data/apis/transcribe-streaming/2017-10-26/paginators-1.json +0 -4
- data/apis/transcribe/2017-10-26/api-2.json +0 -1327
- data/apis/transcribe/2017-10-26/examples-1.json +0 -5
- data/apis/transcribe/2017-10-26/paginators-1.json +0 -34
- data/apis/transfer/2018-11-05/api-2.json +0 -1110
- data/apis/transfer/2018-11-05/examples-1.json +0 -5
- data/apis/transfer/2018-11-05/paginators-1.json +0 -24
- data/apis/translate/2017-07-01/api-2.json +0 -660
- data/apis/translate/2017-07-01/examples-1.json +0 -5
- data/apis/translate/2017-07-01/paginators-1.json +0 -14
- data/apis/waf-regional/2016-11-28/api-2.json +0 -4093
- data/apis/waf-regional/2016-11-28/examples-1.json +0 -1017
- data/apis/waf-regional/2016-11-28/paginators-1.json +0 -4
- data/apis/waf-regional/2016-11-28/smoke.json +0 -21
- data/apis/waf/2015-08-24/api-2.json +0 -3958
- data/apis/waf/2015-08-24/examples-1.json +0 -1017
- data/apis/waf/2015-08-24/paginators-1.json +0 -4
- data/apis/waf/2015-08-24/smoke.json +0 -21
- data/apis/wafv2/2019-07-29/api-2.json +0 -2698
- data/apis/wafv2/2019-07-29/examples-1.json +0 -5
- data/apis/wafv2/2019-07-29/paginators-1.json +0 -4
- data/apis/wafv2/2019-07-29/smoke.json +0 -22
- data/apis/workdocs/2016-05-01/api-2.json +0 -2899
- data/apis/workdocs/2016-05-01/examples-1.json +0 -5
- data/apis/workdocs/2016-05-01/paginators-1.json +0 -25
- data/apis/worklink/2018-09-25/api-2.json +0 -1393
- data/apis/worklink/2018-09-25/examples-1.json +0 -5
- data/apis/worklink/2018-09-25/paginators-1.json +0 -29
- data/apis/workmail/2017-10-01/api-2.json +0 -2430
- data/apis/workmail/2017-10-01/examples-1.json +0 -5
- data/apis/workmail/2017-10-01/paginators-1.json +0 -49
- data/apis/workmailmessageflow/2019-05-01/api-2.json +0 -67
- data/apis/workmailmessageflow/2019-05-01/examples-1.json +0 -5
- data/apis/workmailmessageflow/2019-05-01/paginators-1.json +0 -4
- data/apis/workspaces/2015-04-08/api-2.json +0 -2442
- data/apis/workspaces/2015-04-08/examples-1.json +0 -5
- data/apis/workspaces/2015-04-08/paginators-1.json +0 -20
- data/apis/workspaces/2015-04-08/smoke.json +0 -18
- data/apis/xray/2016-04-12/api-2.json +0 -1792
- data/apis/xray/2016-04-12/examples-1.json +0 -5
- data/apis/xray/2016-04-12/paginators-1.json +0 -54
- data/bin/aws.rb +0 -180
- data/endpoints.json +0 -9478
- data/lib/aws-sdk-core/accessanalyzer.rb +0 -6
- data/lib/aws-sdk-core/acm.rb +0 -7
- data/lib/aws-sdk-core/acmpca.rb +0 -7
- data/lib/aws-sdk-core/alexaforbusiness.rb +0 -6
- data/lib/aws-sdk-core/amplify.rb +0 -6
- data/lib/aws-sdk-core/api/builder.rb +0 -129
- data/lib/aws-sdk-core/api/customizations.rb +0 -304
- data/lib/aws-sdk-core/api/docs/builder.rb +0 -223
- data/lib/aws-sdk-core/api/docs/client_type_documenter.rb +0 -118
- data/lib/aws-sdk-core/api/docs/crosslink.rb +0 -43
- data/lib/aws-sdk-core/api/docs/docstring_provider.rb +0 -75
- data/lib/aws-sdk-core/api/docs/operation_documenter.rb +0 -151
- data/lib/aws-sdk-core/api/docs/param_formatter.rb +0 -163
- data/lib/aws-sdk-core/api/docs/request_syntax_example.rb +0 -22
- data/lib/aws-sdk-core/api/docs/response_structure_example.rb +0 -91
- data/lib/aws-sdk-core/api/docs/shared_example.rb +0 -100
- data/lib/aws-sdk-core/api/docs/utils.rb +0 -133
- data/lib/aws-sdk-core/api/shape_map.rb +0 -146
- data/lib/aws-sdk-core/apigateway.rb +0 -6
- data/lib/aws-sdk-core/apigatewaymanagementapi.rb +0 -5
- data/lib/aws-sdk-core/apigatewayv2.rb +0 -5
- data/lib/aws-sdk-core/appconfig.rb +0 -6
- data/lib/aws-sdk-core/appflow.rb +0 -6
- data/lib/aws-sdk-core/applicationautoscaling.rb +0 -6
- data/lib/aws-sdk-core/applicationdiscoveryservice.rb +0 -6
- data/lib/aws-sdk-core/applicationinsights.rb +0 -6
- data/lib/aws-sdk-core/appmesh.rb +0 -6
- data/lib/aws-sdk-core/appregistry.rb +0 -6
- data/lib/aws-sdk-core/appstream.rb +0 -7
- data/lib/aws-sdk-core/appsync.rb +0 -6
- data/lib/aws-sdk-core/athena.rb +0 -6
- data/lib/aws-sdk-core/augmentedairuntime.rb +0 -6
- data/lib/aws-sdk-core/autoscaling.rb +0 -8
- data/lib/aws-sdk-core/autoscalingplans.rb +0 -6
- data/lib/aws-sdk-core/backup.rb +0 -6
- data/lib/aws-sdk-core/batch.rb +0 -6
- data/lib/aws-sdk-core/braket.rb +0 -6
- data/lib/aws-sdk-core/budgets.rb +0 -6
- data/lib/aws-sdk-core/checksums.rb +0 -51
- data/lib/aws-sdk-core/chime.rb +0 -6
- data/lib/aws-sdk-core/client.rb +0 -78
- data/lib/aws-sdk-core/client_waiters.rb +0 -120
- data/lib/aws-sdk-core/cloud9.rb +0 -6
- data/lib/aws-sdk-core/clouddirectory.rb +0 -6
- data/lib/aws-sdk-core/cloudformation.rb +0 -8
- data/lib/aws-sdk-core/cloudfront.rb +0 -17
- data/lib/aws-sdk-core/cloudfront/cookie_signer.rb +0 -44
- data/lib/aws-sdk-core/cloudfront/signer.rb +0 -141
- data/lib/aws-sdk-core/cloudfront/url_signer.rb +0 -48
- data/lib/aws-sdk-core/cloudhsm.rb +0 -6
- data/lib/aws-sdk-core/cloudhsmv2.rb +0 -6
- data/lib/aws-sdk-core/cloudsearch.rb +0 -6
- data/lib/aws-sdk-core/cloudsearchdomain.rb +0 -5
- data/lib/aws-sdk-core/cloudtrail.rb +0 -6
- data/lib/aws-sdk-core/cloudwatch.rb +0 -8
- data/lib/aws-sdk-core/cloudwatchevents.rb +0 -6
- data/lib/aws-sdk-core/cloudwatchlogs.rb +0 -6
- data/lib/aws-sdk-core/codeartifact.rb +0 -6
- data/lib/aws-sdk-core/codebuild.rb +0 -6
- data/lib/aws-sdk-core/codecommit.rb +0 -6
- data/lib/aws-sdk-core/codedeploy.rb +0 -7
- data/lib/aws-sdk-core/codeguruprofiler.rb +0 -6
- data/lib/aws-sdk-core/codegurureviewer.rb +0 -6
- data/lib/aws-sdk-core/codepipeline.rb +0 -6
- data/lib/aws-sdk-core/codestar.rb +0 -6
- data/lib/aws-sdk-core/codestarconnections.rb +0 -6
- data/lib/aws-sdk-core/codestarnotifications.rb +0 -6
- data/lib/aws-sdk-core/cognitoidentity.rb +0 -6
- data/lib/aws-sdk-core/cognitoidentityprovider.rb +0 -6
- data/lib/aws-sdk-core/cognitosync.rb +0 -4
- data/lib/aws-sdk-core/comprehend.rb +0 -6
- data/lib/aws-sdk-core/comprehendmedical.rb +0 -6
- data/lib/aws-sdk-core/computeoptimizer.rb +0 -6
- data/lib/aws-sdk-core/configservice.rb +0 -6
- data/lib/aws-sdk-core/connect.rb +0 -6
- data/lib/aws-sdk-core/connectparticipant.rb +0 -6
- data/lib/aws-sdk-core/costandusagereportservice.rb +0 -6
- data/lib/aws-sdk-core/costexplorer.rb +0 -6
- data/lib/aws-sdk-core/databasemigrationservice.rb +0 -7
- data/lib/aws-sdk-core/dataexchange.rb +0 -5
- data/lib/aws-sdk-core/datapipeline.rb +0 -5
- data/lib/aws-sdk-core/datasync.rb +0 -6
- data/lib/aws-sdk-core/dax.rb +0 -6
- data/lib/aws-sdk-core/detective.rb +0 -6
- data/lib/aws-sdk-core/devicefarm.rb +0 -6
- data/lib/aws-sdk-core/directconnect.rb +0 -6
- data/lib/aws-sdk-core/directoryservice.rb +0 -6
- data/lib/aws-sdk-core/dlm.rb +0 -6
- data/lib/aws-sdk-core/docdb.rb +0 -7
- data/lib/aws-sdk-core/dynamodb.rb +0 -40
- data/lib/aws-sdk-core/dynamodb/attribute_value.rb +0 -110
- data/lib/aws-sdk-core/dynamodbstreams.rb +0 -6
- data/lib/aws-sdk-core/ebs.rb +0 -6
- data/lib/aws-sdk-core/ec2.rb +0 -8
- data/lib/aws-sdk-core/ec2instanceconnect.rb +0 -6
- data/lib/aws-sdk-core/ecr.rb +0 -7
- data/lib/aws-sdk-core/ecs.rb +0 -7
- data/lib/aws-sdk-core/efs.rb +0 -6
- data/lib/aws-sdk-core/eks.rb +0 -7
- data/lib/aws-sdk-core/elasticache.rb +0 -7
- data/lib/aws-sdk-core/elasticbeanstalk.rb +0 -7
- data/lib/aws-sdk-core/elasticinference.rb +0 -6
- data/lib/aws-sdk-core/elasticloadbalancing.rb +0 -7
- data/lib/aws-sdk-core/elasticloadbalancingv2.rb +0 -7
- data/lib/aws-sdk-core/elasticsearchservice.rb +0 -6
- data/lib/aws-sdk-core/elastictranscoder.rb +0 -7
- data/lib/aws-sdk-core/empty_structure.rb +0 -3
- data/lib/aws-sdk-core/emr.rb +0 -7
- data/lib/aws-sdk-core/endpoint_cache.rb +0 -188
- data/lib/aws-sdk-core/endpoint_provider.rb +0 -131
- data/lib/aws-sdk-core/eventbridge.rb +0 -6
- data/lib/aws-sdk-core/firehose.rb +0 -6
- data/lib/aws-sdk-core/fms.rb +0 -6
- data/lib/aws-sdk-core/forecastqueryservice.rb +0 -6
- data/lib/aws-sdk-core/forecastservice.rb +0 -6
- data/lib/aws-sdk-core/frauddetector.rb +0 -6
- data/lib/aws-sdk-core/fsx.rb +0 -6
- data/lib/aws-sdk-core/gamelift.rb +0 -6
- data/lib/aws-sdk-core/glacier.rb +0 -8
- data/lib/aws-sdk-core/globalaccelerator.rb +0 -6
- data/lib/aws-sdk-core/glue.rb +0 -6
- data/lib/aws-sdk-core/gluedatabrew.rb +0 -6
- data/lib/aws-sdk-core/greengrass.rb +0 -4
- data/lib/aws-sdk-core/groundstation.rb +0 -6
- data/lib/aws-sdk-core/guardduty.rb +0 -6
- data/lib/aws-sdk-core/health.rb +0 -6
- data/lib/aws-sdk-core/honeycode.rb +0 -6
- data/lib/aws-sdk-core/iam.rb +0 -8
- data/lib/aws-sdk-core/identitystore.rb +0 -6
- data/lib/aws-sdk-core/imagebuilder.rb +0 -6
- data/lib/aws-sdk-core/importexport.rb +0 -5
- data/lib/aws-sdk-core/inspector.rb +0 -6
- data/lib/aws-sdk-core/iot.rb +0 -6
- data/lib/aws-sdk-core/iot1clickdevicesservice.rb +0 -4
- data/lib/aws-sdk-core/iot1clickprojects.rb +0 -6
- data/lib/aws-sdk-core/iotanalytics.rb +0 -6
- data/lib/aws-sdk-core/iotdataplane.rb +0 -6
- data/lib/aws-sdk-core/iotevents.rb +0 -6
- data/lib/aws-sdk-core/ioteventsdata.rb +0 -6
- data/lib/aws-sdk-core/iotjobsdataplane.rb +0 -6
- data/lib/aws-sdk-core/iotsecuretunneling.rb +0 -6
- data/lib/aws-sdk-core/iotsitewise.rb +0 -7
- data/lib/aws-sdk-core/iotthingsgraph.rb +0 -6
- data/lib/aws-sdk-core/ivs.rb +0 -6
- data/lib/aws-sdk-core/kafka.rb +0 -5
- data/lib/aws-sdk-core/kendra.rb +0 -6
- data/lib/aws-sdk-core/kinesis.rb +0 -7
- data/lib/aws-sdk-core/kinesisanalytics.rb +0 -6
- data/lib/aws-sdk-core/kinesisanalyticsv2.rb +0 -6
- data/lib/aws-sdk-core/kinesisvideo.rb +0 -6
- data/lib/aws-sdk-core/kinesisvideoarchivedmedia.rb +0 -6
- data/lib/aws-sdk-core/kinesisvideomedia.rb +0 -6
- data/lib/aws-sdk-core/kinesisvideosignalingchannels.rb +0 -6
- data/lib/aws-sdk-core/kms.rb +0 -6
- data/lib/aws-sdk-core/lakeformation.rb +0 -6
- data/lib/aws-sdk-core/lambda.rb +0 -7
- data/lib/aws-sdk-core/lambdapreview.rb +0 -5
- data/lib/aws-sdk-core/lex.rb +0 -6
- data/lib/aws-sdk-core/lexmodelbuildingservice.rb +0 -6
- data/lib/aws-sdk-core/licensemanager.rb +0 -6
- data/lib/aws-sdk-core/lightsail.rb +0 -6
- data/lib/aws-sdk-core/machinelearning.rb +0 -7
- data/lib/aws-sdk-core/macie.rb +0 -6
- data/lib/aws-sdk-core/macie2.rb +0 -5
- data/lib/aws-sdk-core/managedblockchain.rb +0 -6
- data/lib/aws-sdk-core/marketplacecatalog.rb +0 -6
- data/lib/aws-sdk-core/marketplacecommerceanalytics.rb +0 -6
- data/lib/aws-sdk-core/marketplaceentitlementservice.rb +0 -6
- data/lib/aws-sdk-core/marketplacemetering.rb +0 -6
- data/lib/aws-sdk-core/mediaconnect.rb +0 -5
- data/lib/aws-sdk-core/mediaconvert.rb +0 -5
- data/lib/aws-sdk-core/medialive.rb +0 -6
- data/lib/aws-sdk-core/mediapackage.rb +0 -5
- data/lib/aws-sdk-core/mediapackagevod.rb +0 -5
- data/lib/aws-sdk-core/mediastore.rb +0 -6
- data/lib/aws-sdk-core/mediastoredata.rb +0 -6
- data/lib/aws-sdk-core/mediatailor.rb +0 -5
- data/lib/aws-sdk-core/migrationhub.rb +0 -6
- data/lib/aws-sdk-core/migrationhubconfig.rb +0 -6
- data/lib/aws-sdk-core/mobile.rb +0 -6
- data/lib/aws-sdk-core/mq.rb +0 -5
- data/lib/aws-sdk-core/mturk.rb +0 -6
- data/lib/aws-sdk-core/neptune.rb +0 -7
- data/lib/aws-sdk-core/networkfirewall.rb +0 -6
- data/lib/aws-sdk-core/networkmanager.rb +0 -6
- data/lib/aws-sdk-core/opsworks.rb +0 -8
- data/lib/aws-sdk-core/opsworkscm.rb +0 -7
- data/lib/aws-sdk-core/organizations.rb +0 -6
- data/lib/aws-sdk-core/outposts.rb +0 -6
- data/lib/aws-sdk-core/partitions.rb +0 -174
- data/lib/aws-sdk-core/partitions/partition.rb +0 -95
- data/lib/aws-sdk-core/partitions/partition_list.rb +0 -60
- data/lib/aws-sdk-core/partitions/region.rb +0 -66
- data/lib/aws-sdk-core/partitions/service.rb +0 -75
- data/lib/aws-sdk-core/personalize.rb +0 -6
- data/lib/aws-sdk-core/personalizeevents.rb +0 -6
- data/lib/aws-sdk-core/personalizeruntime.rb +0 -6
- data/lib/aws-sdk-core/pi.rb +0 -6
- data/lib/aws-sdk-core/pinpoint.rb +0 -5
- data/lib/aws-sdk-core/pinpointemail.rb +0 -6
- data/lib/aws-sdk-core/pinpointsmsvoice.rb +0 -4
- data/lib/aws-sdk-core/plugins/api_gateway_header.rb +0 -19
- data/lib/aws-sdk-core/plugins/csd_conditional_signing.rb +0 -30
- data/lib/aws-sdk-core/plugins/csd_switch_to_post.rb +0 -36
- data/lib/aws-sdk-core/plugins/dynamodb_crc32_validation.rb +0 -52
- data/lib/aws-sdk-core/plugins/dynamodb_extended_retries.rb +0 -22
- data/lib/aws-sdk-core/plugins/dynamodb_simple_attributes.rb +0 -208
- data/lib/aws-sdk-core/plugins/ec2_copy_encrypted_snapshot.rb +0 -56
- data/lib/aws-sdk-core/plugins/ec2_region_validation.rb +0 -17
- data/lib/aws-sdk-core/plugins/endpoint_discovery.rb +0 -167
- data/lib/aws-sdk-core/plugins/endpoint_pattern.rb +0 -62
- data/lib/aws-sdk-core/plugins/glacier_account_id.rb +0 -19
- data/lib/aws-sdk-core/plugins/glacier_api_version.rb +0 -19
- data/lib/aws-sdk-core/plugins/glacier_checksums.rb +0 -87
- data/lib/aws-sdk-core/plugins/jsonvalue_converter.rb +0 -29
- data/lib/aws-sdk-core/plugins/machine_learning_predict_endpoint.rb +0 -20
- data/lib/aws-sdk-core/plugins/rds_cross_region_copying.rb +0 -69
- data/lib/aws-sdk-core/plugins/request_signer.rb +0 -150
- data/lib/aws-sdk-core/plugins/route_53_id_fix.rb +0 -55
- data/lib/aws-sdk-core/plugins/s3_accelerate.rb +0 -90
- data/lib/aws-sdk-core/plugins/s3_bucket_dns.rb +0 -86
- data/lib/aws-sdk-core/plugins/s3_bucket_name_restrictions.rb +0 -21
- data/lib/aws-sdk-core/plugins/s3_control_dns.rb +0 -25
- data/lib/aws-sdk-core/plugins/s3_control_dualstack.rb +0 -48
- data/lib/aws-sdk-core/plugins/s3_control_signer.rb +0 -53
- data/lib/aws-sdk-core/plugins/s3_dualstack.rb +0 -67
- data/lib/aws-sdk-core/plugins/s3_expect_100_continue.rb +0 -27
- data/lib/aws-sdk-core/plugins/s3_get_bucket_location_fix.rb +0 -21
- data/lib/aws-sdk-core/plugins/s3_host_id.rb +0 -26
- data/lib/aws-sdk-core/plugins/s3_http_200_errors.rb +0 -45
- data/lib/aws-sdk-core/plugins/s3_iad_regional_endpoint.rb +0 -58
- data/lib/aws-sdk-core/plugins/s3_location_constraint.rb +0 -31
- data/lib/aws-sdk-core/plugins/s3_md5s.rb +0 -50
- data/lib/aws-sdk-core/plugins/s3_redirects.rb +0 -37
- data/lib/aws-sdk-core/plugins/s3_request_signer.rb +0 -166
- data/lib/aws-sdk-core/plugins/s3_sse_cpk.rb +0 -64
- data/lib/aws-sdk-core/plugins/s3_url_encoded_keys.rb +0 -93
- data/lib/aws-sdk-core/plugins/sqs_md5s.rb +0 -164
- data/lib/aws-sdk-core/plugins/sqs_queue_urls.rb +0 -34
- data/lib/aws-sdk-core/plugins/sts_regional_endpoints.rb +0 -30
- data/lib/aws-sdk-core/plugins/swf_read_timeouts.rb +0 -23
- data/lib/aws-sdk-core/polly.rb +0 -14
- data/lib/aws-sdk-core/polly/presigner.rb +0 -70
- data/lib/aws-sdk-core/pricing.rb +0 -6
- data/lib/aws-sdk-core/qldb.rb +0 -6
- data/lib/aws-sdk-core/qldbsession.rb +0 -6
- data/lib/aws-sdk-core/quicksight.rb +0 -6
- data/lib/aws-sdk-core/ram.rb +0 -6
- data/lib/aws-sdk-core/rds.rb +0 -16
- data/lib/aws-sdk-core/rds/auth_token_generator.rb +0 -63
- data/lib/aws-sdk-core/rdsdataservice.rb +0 -6
- data/lib/aws-sdk-core/redshift.rb +0 -7
- data/lib/aws-sdk-core/redshiftdataapiservice.rb +0 -6
- data/lib/aws-sdk-core/rekognition.rb +0 -7
- data/lib/aws-sdk-core/resourcegroups.rb +0 -6
- data/lib/aws-sdk-core/resourcegroupstaggingapi.rb +0 -6
- data/lib/aws-sdk-core/robomaker.rb +0 -6
- data/lib/aws-sdk-core/route53.rb +0 -7
- data/lib/aws-sdk-core/route53domains.rb +0 -6
- data/lib/aws-sdk-core/route53resolver.rb +0 -6
- data/lib/aws-sdk-core/s3.rb +0 -26
- data/lib/aws-sdk-core/s3/bucket_region_cache.rb +0 -75
- data/lib/aws-sdk-core/s3/presigner.rb +0 -116
- data/lib/aws-sdk-core/s3control.rb +0 -6
- data/lib/aws-sdk-core/s3outposts.rb +0 -6
- data/lib/aws-sdk-core/sagemaker.rb +0 -7
- data/lib/aws-sdk-core/sagemakerruntime.rb +0 -6
- data/lib/aws-sdk-core/savingsplans.rb +0 -6
- data/lib/aws-sdk-core/schemas.rb +0 -6
- data/lib/aws-sdk-core/secretsmanager.rb +0 -6
- data/lib/aws-sdk-core/securityhub.rb +0 -6
- data/lib/aws-sdk-core/serverlessapplicationrepository.rb +0 -5
- data/lib/aws-sdk-core/service.rb +0 -4
- data/lib/aws-sdk-core/servicecatalog.rb +0 -6
- data/lib/aws-sdk-core/servicediscovery.rb +0 -6
- data/lib/aws-sdk-core/servicequotas.rb +0 -6
- data/lib/aws-sdk-core/ses.rb +0 -7
- data/lib/aws-sdk-core/sesv2.rb +0 -6
- data/lib/aws-sdk-core/shield.rb +0 -6
- data/lib/aws-sdk-core/signer.rb +0 -7
- data/lib/aws-sdk-core/signers/base.rb +0 -31
- data/lib/aws-sdk-core/signers/s3.rb +0 -185
- data/lib/aws-sdk-core/signers/v2.rb +0 -51
- data/lib/aws-sdk-core/signers/v3.rb +0 -34
- data/lib/aws-sdk-core/signers/v4.rb +0 -234
- data/lib/aws-sdk-core/simpledb.rb +0 -5
- data/lib/aws-sdk-core/sms.rb +0 -6
- data/lib/aws-sdk-core/snowball.rb +0 -6
- data/lib/aws-sdk-core/sns.rb +0 -7
- data/lib/aws-sdk-core/sqs.rb +0 -7
- data/lib/aws-sdk-core/ssm.rb +0 -7
- data/lib/aws-sdk-core/sso.rb +0 -6
- data/lib/aws-sdk-core/ssoadmin.rb +0 -6
- data/lib/aws-sdk-core/ssooidc.rb +0 -6
- data/lib/aws-sdk-core/states.rb +0 -6
- data/lib/aws-sdk-core/storagegateway.rb +0 -6
- data/lib/aws-sdk-core/sts.rb +0 -6
- data/lib/aws-sdk-core/support.rb +0 -6
- data/lib/aws-sdk-core/swf.rb +0 -6
- data/lib/aws-sdk-core/synthetics.rb +0 -6
- data/lib/aws-sdk-core/textract.rb +0 -6
- data/lib/aws-sdk-core/timestreamquery.rb +0 -6
- data/lib/aws-sdk-core/timestreamwrite.rb +0 -6
- data/lib/aws-sdk-core/transcribeservice.rb +0 -6
- data/lib/aws-sdk-core/transfer.rb +0 -6
- data/lib/aws-sdk-core/translate.rb +0 -6
- data/lib/aws-sdk-core/tree_hash.rb +0 -69
- data/lib/aws-sdk-core/waf.rb +0 -6
- data/lib/aws-sdk-core/wafregional.rb +0 -6
- data/lib/aws-sdk-core/wafv2.rb +0 -6
- data/lib/aws-sdk-core/waiters/null_provider.rb +0 -12
- data/lib/aws-sdk-core/waiters/provider.rb +0 -35
- data/lib/aws-sdk-core/workdocs.rb +0 -6
- data/lib/aws-sdk-core/worklink.rb +0 -6
- data/lib/aws-sdk-core/workmail.rb +0 -6
- data/lib/aws-sdk-core/workmailmessageflow.rb +0 -6
- data/lib/aws-sdk-core/workspaces.rb +0 -6
- data/lib/aws-sdk-core/xray.rb +0 -6
- data/lib/seahorse/client/plugins/restful_bindings.rb +0 -125
- data/service-models.json +0 -949
@@ -11,7 +11,11 @@ module Aws
|
|
11
11
|
|
12
12
|
# @return [Structure]
|
13
13
|
def stub
|
14
|
-
|
14
|
+
if @rules
|
15
|
+
stub_ref(@rules)
|
16
|
+
else
|
17
|
+
EmptyStructure.new
|
18
|
+
end
|
15
19
|
end
|
16
20
|
|
17
21
|
private
|
@@ -31,7 +35,7 @@ module Aws
|
|
31
35
|
end
|
32
36
|
|
33
37
|
def stub_structure(ref, visited)
|
34
|
-
ref.shape.members.inject(ref
|
38
|
+
ref.shape.members.inject(ref.shape.struct_class.new) do |struct, (mname, mref)|
|
35
39
|
struct[mname] = stub_ref(mref, visited)
|
36
40
|
struct
|
37
41
|
end
|
@@ -6,7 +6,7 @@ module Aws
|
|
6
6
|
def stub_data(api, operation, data)
|
7
7
|
resp = Seahorse::Client::Http::Response.new
|
8
8
|
resp.status_code = 200
|
9
|
-
resp.body = build_body(api, operation, data)
|
9
|
+
resp.body = build_body(api, operation, data) if operation.output
|
10
10
|
resp.headers['Content-Length'] = resp.body.size
|
11
11
|
resp.headers['Content-Type'] = 'text/xml;charset=UTF-8'
|
12
12
|
resp.headers['Server'] = 'AmazonEC2'
|
@@ -40,9 +40,7 @@ module Aws
|
|
40
40
|
|
41
41
|
def build_body(api, operation, data)
|
42
42
|
rules = operation.output
|
43
|
-
if
|
44
|
-
""
|
45
|
-
elsif streaming?(rules)
|
43
|
+
if streaming?(rules)
|
46
44
|
data[rules[:payload]]
|
47
45
|
elsif rules[:payload]
|
48
46
|
body_for(api, operation, rules[:payload_member], data[rules[:payload]])
|
@@ -70,10 +68,6 @@ module Aws
|
|
70
68
|
end
|
71
69
|
end
|
72
70
|
|
73
|
-
def head_operation(operation)
|
74
|
-
operation.http_method == "HEAD"
|
75
|
-
end
|
76
|
-
|
77
71
|
end
|
78
72
|
end
|
79
73
|
end
|
@@ -1,4 +1,5 @@
|
|
1
1
|
module Aws
|
2
|
+
# @api private
|
2
3
|
module Stubbing
|
3
4
|
class StubData
|
4
5
|
|
@@ -22,6 +23,9 @@ module Aws
|
|
22
23
|
key = path.split(/\b/)[0]
|
23
24
|
stub[key] = nil
|
24
25
|
end
|
26
|
+
if more_results = @pager.instance_variable_get('@more_results')
|
27
|
+
stub[more_results] = nil
|
28
|
+
end
|
25
29
|
end
|
26
30
|
end
|
27
31
|
|
@@ -0,0 +1,39 @@
|
|
1
|
+
require 'cgi'
|
2
|
+
|
3
|
+
module Aws
|
4
|
+
# @api private
|
5
|
+
module Util
|
6
|
+
class << self
|
7
|
+
|
8
|
+
def deep_merge(left, right)
|
9
|
+
case left
|
10
|
+
when Hash then left.merge(right) { |key, v1, v2| deep_merge(v1, v2) }
|
11
|
+
when Array then right + left
|
12
|
+
else right
|
13
|
+
end
|
14
|
+
end
|
15
|
+
|
16
|
+
def copy_hash(hash)
|
17
|
+
if Hash === hash
|
18
|
+
deep_copy(hash)
|
19
|
+
else
|
20
|
+
raise ArgumentError, "expected hash, got `#{hash.class}`"
|
21
|
+
end
|
22
|
+
end
|
23
|
+
|
24
|
+
def deep_copy(obj)
|
25
|
+
case obj
|
26
|
+
when Hash
|
27
|
+
obj.inject({}) do |h, (k,v)|
|
28
|
+
h[k] = deep_copy(v)
|
29
|
+
h
|
30
|
+
end
|
31
|
+
when Array
|
32
|
+
obj.map { |v| deep_copy(v) }
|
33
|
+
else
|
34
|
+
v
|
35
|
+
end
|
36
|
+
end
|
37
|
+
end
|
38
|
+
end
|
39
|
+
end
|
data/lib/aws-sdk-core/version.rb
CHANGED
@@ -9,10 +9,12 @@ module Aws
|
|
9
9
|
# @api private
|
10
10
|
RAISE_HANDLER = Seahorse::Client::Plugins::RaiseResponseErrors::Handler
|
11
11
|
|
12
|
+
# @option options [required, String] :operation_name
|
13
|
+
# @option options [required, Array<Hash>] :acceptors
|
12
14
|
# @api private
|
13
15
|
def initialize(options = {})
|
14
|
-
@operation_name =
|
15
|
-
@acceptors = options
|
16
|
+
@operation_name = options.fetch(:operation_name)
|
17
|
+
@acceptors = options.fetch(:acceptors)
|
16
18
|
end
|
17
19
|
|
18
20
|
# @return [Symbol]
|
@@ -95,9 +97,7 @@ module Aws
|
|
95
97
|
end
|
96
98
|
|
97
99
|
def path(acceptor)
|
98
|
-
acceptor['argument']
|
99
|
-
Seahorse::Util.underscore(str)
|
100
|
-
end
|
100
|
+
acceptor['argument']
|
101
101
|
end
|
102
102
|
|
103
103
|
def non_empty_array(acceptor, response, &block)
|
@@ -109,10 +109,6 @@ module Aws
|
|
109
109
|
end
|
110
110
|
end
|
111
111
|
|
112
|
-
def underscore(str)
|
113
|
-
Seahorse::Util.underscore(str)
|
114
|
-
end
|
115
|
-
|
116
112
|
end
|
117
113
|
end
|
118
114
|
end
|
@@ -1,5 +1,6 @@
|
|
1
1
|
module Aws
|
2
2
|
module Waiters
|
3
|
+
# @api private
|
3
4
|
class Waiter
|
4
5
|
|
5
6
|
# @api private
|
@@ -49,7 +50,7 @@ module Aws
|
|
49
50
|
#
|
50
51
|
# @yieldparam [Integer] attempts The number of attempts made.
|
51
52
|
def before_attempt(&block)
|
52
|
-
@before_attempt <<
|
53
|
+
@before_attempt << Proc.new
|
53
54
|
end
|
54
55
|
|
55
56
|
# Register a callback that is invoked after an attempt but before
|
@@ -80,7 +81,7 @@ module Aws
|
|
80
81
|
# @yieldparam [Seahorse::Client::Response] response The response from
|
81
82
|
# the previous polling attempts.
|
82
83
|
def before_wait(&block)
|
83
|
-
@before_wait <<
|
84
|
+
@before_wait << Proc.new
|
84
85
|
end
|
85
86
|
|
86
87
|
# @option options [Client] :client
|
@@ -0,0 +1,9 @@
|
|
1
|
+
require_relative 'xml/builder'
|
2
|
+
require_relative 'xml/default_list'
|
3
|
+
require_relative 'xml/default_map'
|
4
|
+
require_relative 'xml/doc_builder'
|
5
|
+
require_relative 'xml/error_handler'
|
6
|
+
require_relative 'xml/parser'
|
7
|
+
require_relative 'xml/parser/stack'
|
8
|
+
require_relative 'xml/parser/frame'
|
9
|
+
require_relative 'xml/parser/parsing_error'
|
@@ -46,7 +46,7 @@ module Aws
|
|
46
46
|
end
|
47
47
|
|
48
48
|
def list(name, ref, values)
|
49
|
-
if ref
|
49
|
+
if ref.shape.flattened
|
50
50
|
values.each do |value|
|
51
51
|
member(ref.shape.member.location_name || name, ref.shape.member, value)
|
52
52
|
end
|
@@ -63,7 +63,7 @@ module Aws
|
|
63
63
|
def map(name, ref, hash)
|
64
64
|
key_ref = ref.shape.key
|
65
65
|
value_ref = ref.shape.value
|
66
|
-
if ref
|
66
|
+
if ref.shape.flattened
|
67
67
|
hash.each do |key, value|
|
68
68
|
node(name, ref) do
|
69
69
|
member(key_ref.location_name || 'key', key_ref, key)
|
@@ -21,8 +21,7 @@ module Aws
|
|
21
21
|
else
|
22
22
|
code, message = extract_error(body, context)
|
23
23
|
end
|
24
|
-
|
25
|
-
errors_module = Aws.const_get(svc).const_get(:Errors)
|
24
|
+
errors_module = context.client.class.errors_module
|
26
25
|
errors_module.error_class(code).new(context, message)
|
27
26
|
end
|
28
27
|
|
@@ -1,19 +1,9 @@
|
|
1
1
|
module Aws
|
2
|
+
# @api private
|
2
3
|
module Xml
|
3
|
-
|
4
4
|
# A SAX-style XML parser that uses a shape context to handle types.
|
5
5
|
class Parser
|
6
6
|
|
7
|
-
autoload :Stack, 'aws-sdk-core/xml/parser/stack'
|
8
|
-
autoload :Frame, 'aws-sdk-core/xml/parser/frame'
|
9
|
-
autoload :ParsingError, 'aws-sdk-core/xml/parser/parsing_error'
|
10
|
-
|
11
|
-
autoload :LibxmlEngine, 'aws-sdk-core/xml/parser/engines/libxml'
|
12
|
-
autoload :NokogiriEngine, 'aws-sdk-core/xml/parser/engines/nokogiri'
|
13
|
-
autoload :OgaEngine, 'aws-sdk-core/xml/parser/engines/oga'
|
14
|
-
autoload :OxEngine, 'aws-sdk-core/xml/parser/engines/ox'
|
15
|
-
autoload :RexmlEngine, 'aws-sdk-core/xml/parser/engines/rexml'
|
16
|
-
|
17
7
|
# @param [Seahorse::Model::ShapeRef] rules
|
18
8
|
def initialize(rules, options = {})
|
19
9
|
@rules = rules
|
@@ -24,9 +24,9 @@ module Aws
|
|
24
24
|
|
25
25
|
def frame_class(ref)
|
26
26
|
klass = FRAME_CLASSES[ref.shape.class]
|
27
|
-
if ListFrame == klass && ref
|
27
|
+
if ListFrame == klass && ref.shape.flattened
|
28
28
|
FlatListFrame
|
29
|
-
elsif MapFrame == klass && ref
|
29
|
+
elsif MapFrame == klass && ref.shape.flattened
|
30
30
|
MapEntryFrame
|
31
31
|
else
|
32
32
|
klass
|
@@ -79,7 +79,7 @@ module Aws
|
|
79
79
|
|
80
80
|
def initialize(xml_name, parent, ref, result = nil)
|
81
81
|
super
|
82
|
-
@result ||= ref
|
82
|
+
@result ||= ref.shape.struct_class.new
|
83
83
|
@members = {}
|
84
84
|
ref.shape.members.each do |member_name, member_ref|
|
85
85
|
apply_default_value(member_name, member_ref)
|
@@ -128,7 +128,7 @@ module Aws
|
|
128
128
|
end
|
129
129
|
|
130
130
|
def flattened_list?(shape)
|
131
|
-
ListShape === shape && shape
|
131
|
+
ListShape === shape && shape.flattened
|
132
132
|
end
|
133
133
|
|
134
134
|
end
|
data/lib/aws-sdk-sts.rb
ADDED
@@ -0,0 +1,45 @@
|
|
1
|
+
# WARNING ABOUT GENERATED CODE
|
2
|
+
#
|
3
|
+
# This file is generated. See the contributing for info on making contributions:
|
4
|
+
# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
|
5
|
+
#
|
6
|
+
# WARNING ABOUT GENERATED CODE
|
7
|
+
|
8
|
+
|
9
|
+
require_relative 'aws-sdk-sts/types'
|
10
|
+
require_relative 'aws-sdk-sts/client_api'
|
11
|
+
require_relative 'aws-sdk-sts/client'
|
12
|
+
require_relative 'aws-sdk-sts/errors'
|
13
|
+
require_relative 'aws-sdk-sts/resource'
|
14
|
+
require_relative 'aws-sdk-sts/customizations'
|
15
|
+
|
16
|
+
# This module provides support for AWS Security Token Service. This module is available in the
|
17
|
+
# `aws-sdk-core` gem.
|
18
|
+
#
|
19
|
+
# # Client
|
20
|
+
#
|
21
|
+
# The {Client} class provides one method for each API operation. Operation
|
22
|
+
# methods each accept a hash of request parameters and return a response
|
23
|
+
# structure.
|
24
|
+
#
|
25
|
+
# See {Client} for more information.
|
26
|
+
#
|
27
|
+
# # Errors
|
28
|
+
#
|
29
|
+
# Errors returned from AWS Security Token Service all
|
30
|
+
# extend {Errors::ServiceError}.
|
31
|
+
#
|
32
|
+
# begin
|
33
|
+
# # do stuff
|
34
|
+
# rescue Aws::STS::Errors::ServiceError
|
35
|
+
# # rescues all service API errors
|
36
|
+
# end
|
37
|
+
#
|
38
|
+
# See {Errors} for more information.
|
39
|
+
#
|
40
|
+
# @service
|
41
|
+
module Aws::STS
|
42
|
+
|
43
|
+
GEM_VERSION = '1.0.0.rc1'
|
44
|
+
|
45
|
+
end
|
@@ -0,0 +1,1198 @@
|
|
1
|
+
# WARNING ABOUT GENERATED CODE
|
2
|
+
#
|
3
|
+
# This file is generated. See the contributing for info on making contributions:
|
4
|
+
# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
|
5
|
+
#
|
6
|
+
# WARNING ABOUT GENERATED CODE
|
7
|
+
|
8
|
+
require 'seahorse/client/plugins/content_length.rb'
|
9
|
+
require 'aws-sdk-core/plugins/credentials_configuration.rb'
|
10
|
+
require 'aws-sdk-core/plugins/logging.rb'
|
11
|
+
require 'aws-sdk-core/plugins/param_converter.rb'
|
12
|
+
require 'aws-sdk-core/plugins/param_validator.rb'
|
13
|
+
require 'aws-sdk-core/plugins/user_agent.rb'
|
14
|
+
require 'aws-sdk-core/plugins/helpful_socket_errors.rb'
|
15
|
+
require 'aws-sdk-core/plugins/retry_errors.rb'
|
16
|
+
require 'aws-sdk-core/plugins/global_configuration.rb'
|
17
|
+
require 'aws-sdk-core/plugins/regional_endpoint.rb'
|
18
|
+
require 'aws-sdk-core/plugins/response_paging.rb'
|
19
|
+
require 'aws-sdk-core/plugins/stub_responses.rb'
|
20
|
+
require 'aws-sdk-core/plugins/idempotency_token.rb'
|
21
|
+
require 'aws-sdk-core/plugins/signature_v4.rb'
|
22
|
+
require 'aws-sdk-core/plugins/protocols/query.rb'
|
23
|
+
|
24
|
+
Aws::Plugins::GlobalConfiguration.add_identifier(:sts)
|
25
|
+
|
26
|
+
module Aws
|
27
|
+
module STS
|
28
|
+
class Client < Seahorse::Client::Base
|
29
|
+
|
30
|
+
include Aws::ClientStubs
|
31
|
+
|
32
|
+
@identifier = :sts
|
33
|
+
|
34
|
+
set_api(ClientApi::API)
|
35
|
+
|
36
|
+
add_plugin(Seahorse::Client::Plugins::ContentLength)
|
37
|
+
add_plugin(Aws::Plugins::CredentialsConfiguration)
|
38
|
+
add_plugin(Aws::Plugins::Logging)
|
39
|
+
add_plugin(Aws::Plugins::ParamConverter)
|
40
|
+
add_plugin(Aws::Plugins::ParamValidator)
|
41
|
+
add_plugin(Aws::Plugins::UserAgent)
|
42
|
+
add_plugin(Aws::Plugins::HelpfulSocketErrors)
|
43
|
+
add_plugin(Aws::Plugins::RetryErrors)
|
44
|
+
add_plugin(Aws::Plugins::GlobalConfiguration)
|
45
|
+
add_plugin(Aws::Plugins::RegionalEndpoint)
|
46
|
+
add_plugin(Aws::Plugins::ResponsePaging)
|
47
|
+
add_plugin(Aws::Plugins::StubResponses)
|
48
|
+
add_plugin(Aws::Plugins::IdempotencyToken)
|
49
|
+
add_plugin(Aws::Plugins::SignatureV4)
|
50
|
+
add_plugin(Aws::Plugins::Protocols::Query)
|
51
|
+
|
52
|
+
# @option options [required, Aws::CredentialProvider] :credentials
|
53
|
+
# Your AWS credentials. This can be an instance of any one of the
|
54
|
+
# following classes:
|
55
|
+
#
|
56
|
+
# * `Aws::Credentials` - Used for configuring static, non-refreshing
|
57
|
+
# credentials.
|
58
|
+
#
|
59
|
+
# * `Aws::InstanceProfileCredentials` - Used for loading credentials
|
60
|
+
# from an EC2 IMDS on an EC2 instance.
|
61
|
+
#
|
62
|
+
# * `Aws::SharedCredentials` - Used for loading credentials from a
|
63
|
+
# shared file, such as `~/.aws/config`.
|
64
|
+
#
|
65
|
+
# * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
|
66
|
+
#
|
67
|
+
# When `:credentials` are not configured directly, the following
|
68
|
+
# locations will be searched for credentials:
|
69
|
+
#
|
70
|
+
# * `Aws.config[:credentials]`
|
71
|
+
# * The `:access_key_id`, `:secret_access_key`, and `:session_token` options.
|
72
|
+
# * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
|
73
|
+
# * `~/.aws/credentials`
|
74
|
+
# * `~/.aws/config`
|
75
|
+
# * EC2 IMDS instance profile - When used by default, the timeouts are
|
76
|
+
# very aggressive. Construct and pass an instance of
|
77
|
+
# `Aws::InstanceProfileCredentails` to enable retries and extended
|
78
|
+
# timeouts.
|
79
|
+
# @option options [required, String] :region
|
80
|
+
# The AWS region to connect to. The configured `:region` is
|
81
|
+
# used to determine the service `:endpoint`. When not passed,
|
82
|
+
# a default `:region` is search for in the following locations:
|
83
|
+
#
|
84
|
+
# * `Aws.config[:region]`
|
85
|
+
# * `ENV['AWS_REGION']`
|
86
|
+
# * `ENV['AMAZON_REGION']`
|
87
|
+
# * `ENV['AWS_DEFAULT_REGION']`
|
88
|
+
# * `~/.aws/credentials`
|
89
|
+
# * `~/.aws/config`
|
90
|
+
# @option options [String] :access_key_id
|
91
|
+
# @option options [Boolean] :convert_params (true)
|
92
|
+
# When `true`, an attempt is made to coerce request parameters into
|
93
|
+
# the required types.
|
94
|
+
# @option options [String] :endpoint
|
95
|
+
# The client endpoint is normally constructed from the `:region`
|
96
|
+
# option. You should only configure an `:endpoint` when connecting
|
97
|
+
# to test endpoints. This should be avalid HTTP(S) URI.
|
98
|
+
# @option options [Aws::Log::Formatter] :log_formatter (Aws::Log::Formatter.default)
|
99
|
+
# The log formatter.
|
100
|
+
# @option options [Symbol] :log_level (:info)
|
101
|
+
# The log level to send messages to the `:logger` at.
|
102
|
+
# @option options [Logger] :logger
|
103
|
+
# The Logger instance to send log messages to. If this option
|
104
|
+
# is not set, logging will be disabled.
|
105
|
+
# @option options [String] :profile ("default")
|
106
|
+
# Used when loading credentials from the shared credentials file
|
107
|
+
# at HOME/.aws/credentials. When not specified, 'default' is used.
|
108
|
+
# @option options [Integer] :retry_limit (3)
|
109
|
+
# The maximum number of times to retry failed requests. Only
|
110
|
+
# ~ 500 level server errors and certain ~ 400 level client errors
|
111
|
+
# are retried. Generally, these are throttling errors, data
|
112
|
+
# checksum errors, networking errors, timeout errors and auth
|
113
|
+
# errors from expired credentials.
|
114
|
+
# @option options [String] :secret_access_key
|
115
|
+
# @option options [String] :session_token
|
116
|
+
# @option options [Boolean] :stub_responses (false)
|
117
|
+
# Causes the client to return stubbed responses. By default
|
118
|
+
# fake responses are generated and returned. You can specify
|
119
|
+
# the response data to return or errors to raise by calling
|
120
|
+
# {ClientStubs#stub_responses}. See {ClientStubs} for more information.
|
121
|
+
#
|
122
|
+
# ** Please note ** When response stubbing is enabled, no HTTP
|
123
|
+
# requests are made, and retries are disabled.
|
124
|
+
# @option options [Boolean] :validate_params (true)
|
125
|
+
# When `true`, request parameters are validated before
|
126
|
+
# sending the request.
|
127
|
+
def initialize(*args)
|
128
|
+
super
|
129
|
+
end
|
130
|
+
|
131
|
+
# @!group API Operations
|
132
|
+
|
133
|
+
# Returns a set of temporary security credentials (consisting of an
|
134
|
+
# access key ID, a secret access key, and a security token) that you can
|
135
|
+
# use to access AWS resources that you might not normally have access
|
136
|
+
# to. Typically, you use `AssumeRole` for cross-account access or
|
137
|
+
# federation. For a comparison of `AssumeRole` with the other APIs that
|
138
|
+
# produce temporary credentials, see [Requesting Temporary Security
|
139
|
+
# Credentials][1] and [Comparing the AWS STS APIs][2] in the *IAM User
|
140
|
+
# Guide*.
|
141
|
+
#
|
142
|
+
# **Important:** You cannot call `AssumeRole` by using AWS root account
|
143
|
+
# credentials; access is denied. You must use credentials for an IAM
|
144
|
+
# user or an IAM role to call `AssumeRole`.
|
145
|
+
#
|
146
|
+
# For cross-account access, imagine that you own multiple accounts and
|
147
|
+
# need to access resources in each account. You could create long-term
|
148
|
+
# credentials in each account to access those resources. However,
|
149
|
+
# managing all those credentials and remembering which one can access
|
150
|
+
# which account can be time consuming. Instead, you can create one set
|
151
|
+
# of long-term credentials in one account and then use temporary
|
152
|
+
# security credentials to access all the other accounts by assuming
|
153
|
+
# roles in those accounts. For more information about roles, see [IAM
|
154
|
+
# Roles (Delegation and Federation)][3] in the *IAM User Guide*.
|
155
|
+
#
|
156
|
+
# For federation, you can, for example, grant single sign-on access to
|
157
|
+
# the AWS Management Console. If you already have an identity and
|
158
|
+
# authentication system in your corporate network, you don't have to
|
159
|
+
# recreate user identities in AWS in order to grant those user
|
160
|
+
# identities access to AWS. Instead, after a user has been
|
161
|
+
# authenticated, you call `AssumeRole` (and specify the role with the
|
162
|
+
# appropriate permissions) to get temporary security credentials for
|
163
|
+
# that user. With those temporary security credentials, you construct a
|
164
|
+
# sign-in URL that users can use to access the console. For more
|
165
|
+
# information, see [Common Scenarios for Temporary Credentials][4] in
|
166
|
+
# the *IAM User Guide*.
|
167
|
+
#
|
168
|
+
# The temporary security credentials are valid for the duration that you
|
169
|
+
# specified when calling `AssumeRole`, which can be from 900 seconds (15
|
170
|
+
# minutes) to a maximum of 3600 seconds (1 hour). The default is 1 hour.
|
171
|
+
#
|
172
|
+
# The temporary security credentials created by `AssumeRole` can be used
|
173
|
+
# to make API calls to any AWS service with the following exception: you
|
174
|
+
# cannot call the STS service's `GetFederationToken` or
|
175
|
+
# `GetSessionToken` APIs.
|
176
|
+
#
|
177
|
+
# Optionally, you can pass an IAM access policy to this operation. If
|
178
|
+
# you choose not to pass a policy, the temporary security credentials
|
179
|
+
# that are returned by the operation have the permissions that are
|
180
|
+
# defined in the access policy of the role that is being assumed. If you
|
181
|
+
# pass a policy to this operation, the temporary security credentials
|
182
|
+
# that are returned by the operation have the permissions that are
|
183
|
+
# allowed by both the access policy of the role that is being assumed,
|
184
|
+
# <i> <b>and</b> </i> the policy that you pass. This gives you a way to
|
185
|
+
# further restrict the permissions for the resulting temporary security
|
186
|
+
# credentials. You cannot use the passed policy to grant permissions
|
187
|
+
# that are in excess of those allowed by the access policy of the role
|
188
|
+
# that is being assumed. For more information, see [Permissions for
|
189
|
+
# AssumeRole, AssumeRoleWithSAML, and AssumeRoleWithWebIdentity][5] in
|
190
|
+
# the *IAM User Guide*.
|
191
|
+
#
|
192
|
+
# To assume a role, your AWS account must be trusted by the role. The
|
193
|
+
# trust relationship is defined in the role's trust policy when the
|
194
|
+
# role is created. That trust policy states which accounts are allowed
|
195
|
+
# to delegate access to this account's role.
|
196
|
+
#
|
197
|
+
# The user who wants to access the role must also have permissions
|
198
|
+
# delegated from the role's administrator. If the user is in a
|
199
|
+
# different account than the role, then the user's administrator must
|
200
|
+
# attach a policy that allows the user to call AssumeRole on the ARN of
|
201
|
+
# the role in the other account. If the user is in the same account as
|
202
|
+
# the role, then you can either attach a policy to the user (identical
|
203
|
+
# to the previous different account user), or you can add the user as a
|
204
|
+
# principal directly in the role's trust policy
|
205
|
+
#
|
206
|
+
# **Using MFA with AssumeRole**
|
207
|
+
#
|
208
|
+
# You can optionally include multi-factor authentication (MFA)
|
209
|
+
# information when you call `AssumeRole`. This is useful for
|
210
|
+
# cross-account scenarios in which you want to make sure that the user
|
211
|
+
# who is assuming the role has been authenticated using an AWS MFA
|
212
|
+
# device. In that scenario, the trust policy of the role being assumed
|
213
|
+
# includes a condition that tests for MFA authentication; if the caller
|
214
|
+
# does not include valid MFA information, the request to assume the role
|
215
|
+
# is denied. The condition in a trust policy that tests for MFA
|
216
|
+
# authentication might look like the following example.
|
217
|
+
#
|
218
|
+
# `"Condition": \{"Bool": \{"aws:MultiFactorAuthPresent": true\}\}`
|
219
|
+
#
|
220
|
+
# For more information, see [Configuring MFA-Protected API Access][6] in
|
221
|
+
# the *IAM User Guide* guide.
|
222
|
+
#
|
223
|
+
# To use MFA with `AssumeRole`, you pass values for the `SerialNumber`
|
224
|
+
# and `TokenCode` parameters. The `SerialNumber` value identifies the
|
225
|
+
# user's hardware or virtual MFA device. The `TokenCode` is the
|
226
|
+
# time-based one-time password (TOTP) that the MFA devices produces.
|
227
|
+
#
|
228
|
+
#
|
229
|
+
#
|
230
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html
|
231
|
+
# [2]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison
|
232
|
+
# [3]: http://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html
|
233
|
+
# [4]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html#sts-introduction
|
234
|
+
# [5]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
235
|
+
# [6]: http://docs.aws.amazon.com/IAM/latest/UserGuide/MFAProtectedAPI.html
|
236
|
+
# @option params [required, String] :role_arn
|
237
|
+
# The Amazon Resource Name (ARN) of the role to assume.
|
238
|
+
# @option params [required, String] :role_session_name
|
239
|
+
# An identifier for the assumed role session.
|
240
|
+
#
|
241
|
+
# Use the role session name to uniquely identify a session when the same
|
242
|
+
# role is assumed by different principals or for different reasons. In
|
243
|
+
# cross-account scenarios, the role session name is visible to, and can
|
244
|
+
# be logged by the account that owns the role. The role session name is
|
245
|
+
# also used in the ARN of the assumed role principal. This means that
|
246
|
+
# subsequent cross-account API requests using the temporary security
|
247
|
+
# credentials will expose the role session name to the external account
|
248
|
+
# in their CloudTrail logs.
|
249
|
+
#
|
250
|
+
# The format for this parameter, as described by its regex pattern, is a
|
251
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
252
|
+
# characters with no spaces. You can also include underscores or any of
|
253
|
+
# the following characters: =,.@-
|
254
|
+
# @option params [String] :policy
|
255
|
+
# An IAM policy in JSON format.
|
256
|
+
#
|
257
|
+
# This parameter is optional. If you pass a policy, the temporary
|
258
|
+
# security credentials that are returned by the operation have the
|
259
|
+
# permissions that are allowed by both (the intersection of) the access
|
260
|
+
# policy of the role that is being assumed, *and* the policy that you
|
261
|
+
# pass. This gives you a way to further restrict the permissions for the
|
262
|
+
# resulting temporary security credentials. You cannot use the passed
|
263
|
+
# policy to grant permissions that are in excess of those allowed by the
|
264
|
+
# access policy of the role that is being assumed. For more information,
|
265
|
+
# see [Permissions for AssumeRole, AssumeRoleWithSAML, and
|
266
|
+
# AssumeRoleWithWebIdentity][1] in the *IAM User Guide*.
|
267
|
+
#
|
268
|
+
# The format for this parameter, as described by its regex pattern, is a
|
269
|
+
# string of characters up to 2048 characters in length. The characters
|
270
|
+
# can be any ASCII character from the space character to the end of the
|
271
|
+
# valid character list (\\u0020-\\u00FF). It can also include the tab
|
272
|
+
# (\\u0009), linefeed (\\u000A), and carriage return (\\u000D)
|
273
|
+
# characters.
|
274
|
+
#
|
275
|
+
# <note markdown="1"> The policy plain text must be 2048 bytes or shorter. However, an
|
276
|
+
# internal conversion compresses it into a packed binary format with a
|
277
|
+
# separate limit. The PackedPolicySize response element indicates by
|
278
|
+
# percentage how close to the upper size limit the policy is, with 100%
|
279
|
+
# equaling the maximum allowed size.
|
280
|
+
#
|
281
|
+
# </note>
|
282
|
+
#
|
283
|
+
#
|
284
|
+
#
|
285
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
286
|
+
# @option params [Integer] :duration_seconds
|
287
|
+
# The duration, in seconds, of the role session. The value can range
|
288
|
+
# from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default,
|
289
|
+
# the value is set to 3600 seconds.
|
290
|
+
#
|
291
|
+
# <note markdown="1"> This is separate from the duration of a console session that you might
|
292
|
+
# request using the returned credentials. The request to the federation
|
293
|
+
# endpoint for a console sign-in token takes a `SessionDuration`
|
294
|
+
# parameter that specifies the maximum length of the console session,
|
295
|
+
# separately from the `DurationSeconds` parameter on this API. For more
|
296
|
+
# information, see [Creating a URL that Enables Federated Users to
|
297
|
+
# Access the AWS Management Console][1] in the *IAM User Guide*.
|
298
|
+
#
|
299
|
+
# </note>
|
300
|
+
#
|
301
|
+
#
|
302
|
+
#
|
303
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
|
304
|
+
# @option params [String] :external_id
|
305
|
+
# A unique identifier that is used by third parties when assuming roles
|
306
|
+
# in their customers' accounts. For each role that the third party can
|
307
|
+
# assume, they should instruct their customers to ensure the role's
|
308
|
+
# trust policy checks for the external ID that the third party
|
309
|
+
# generated. Each time the third party assumes the role, they should
|
310
|
+
# pass the customer's external ID. The external ID is useful in order
|
311
|
+
# to help third parties bind a role to the customer who created it. For
|
312
|
+
# more information about the external ID, see [How to Use an External ID
|
313
|
+
# When Granting Access to Your AWS Resources to a Third Party][1] in the
|
314
|
+
# *IAM User Guide*.
|
315
|
+
#
|
316
|
+
# The format for this parameter, as described by its regex pattern, is a
|
317
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
318
|
+
# characters with no spaces. You can also include underscores or any of
|
319
|
+
# the following characters: =,.@:\\/-
|
320
|
+
#
|
321
|
+
#
|
322
|
+
#
|
323
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html
|
324
|
+
# @option params [String] :serial_number
|
325
|
+
# The identification number of the MFA device that is associated with
|
326
|
+
# the user who is making the `AssumeRole` call. Specify this value if
|
327
|
+
# the trust policy of the role being assumed includes a condition that
|
328
|
+
# requires MFA authentication. The value is either the serial number for
|
329
|
+
# a hardware device (such as `GAHT12345678`) or an Amazon Resource Name
|
330
|
+
# (ARN) for a virtual device (such as
|
331
|
+
# `arn:aws:iam::123456789012:mfa/user`).
|
332
|
+
#
|
333
|
+
# The format for this parameter, as described by its regex pattern, is a
|
334
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
335
|
+
# characters with no spaces. You can also include underscores or any of
|
336
|
+
# the following characters: =,.@-
|
337
|
+
# @option params [String] :token_code
|
338
|
+
# The value provided by the MFA device, if the trust policy of the role
|
339
|
+
# being assumed requires MFA (that is, if the policy includes a
|
340
|
+
# condition that tests for MFA). If the role being assumed requires MFA
|
341
|
+
# and if the `TokenCode` value is missing or expired, the `AssumeRole`
|
342
|
+
# call returns an "access denied" error.
|
343
|
+
#
|
344
|
+
# The format for this parameter, as described by its regex pattern, is a
|
345
|
+
# sequence of six numeric digits.
|
346
|
+
# @return [Types::AssumeRoleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
347
|
+
#
|
348
|
+
# * {Types::AssumeRoleResponse#credentials #Credentials} => Types::Credentials
|
349
|
+
# * {Types::AssumeRoleResponse#assumed_role_user #AssumedRoleUser} => Types::AssumedRoleUser
|
350
|
+
# * {Types::AssumeRoleResponse#packed_policy_size #PackedPolicySize} => Integer
|
351
|
+
#
|
352
|
+
# @example Request syntax with placeholder values
|
353
|
+
# resp = client.assume_role({
|
354
|
+
# role_arn: "arnType", # required
|
355
|
+
# role_session_name: "roleSessionNameType", # required
|
356
|
+
# policy: "sessionPolicyDocumentType",
|
357
|
+
# duration_seconds: 1,
|
358
|
+
# external_id: "externalIdType",
|
359
|
+
# serial_number: "serialNumberType",
|
360
|
+
# token_code: "tokenCodeType",
|
361
|
+
# })
|
362
|
+
#
|
363
|
+
# @example Response structure
|
364
|
+
# resp.credentials.access_key_id #=> String
|
365
|
+
# resp.credentials.secret_access_key #=> String
|
366
|
+
# resp.credentials.session_token #=> String
|
367
|
+
# resp.credentials.expiration #=> Time
|
368
|
+
# resp.assumed_role_user.assumed_role_id #=> String
|
369
|
+
# resp.assumed_role_user.arn #=> String
|
370
|
+
# resp.packed_policy_size #=> Integer
|
371
|
+
# @overload assume_role(params = {})
|
372
|
+
# @param [Hash] params ({})
|
373
|
+
def assume_role(params = {}, options = {})
|
374
|
+
req = build_request(:assume_role, params)
|
375
|
+
req.send_request(options)
|
376
|
+
end
|
377
|
+
|
378
|
+
# Returns a set of temporary security credentials for users who have
|
379
|
+
# been authenticated via a SAML authentication response. This operation
|
380
|
+
# provides a mechanism for tying an enterprise identity store or
|
381
|
+
# directory to role-based AWS access without user-specific credentials
|
382
|
+
# or configuration. For a comparison of `AssumeRoleWithSAML` with the
|
383
|
+
# other APIs that produce temporary credentials, see [Requesting
|
384
|
+
# Temporary Security Credentials][1] and [Comparing the AWS STS APIs][2]
|
385
|
+
# in the *IAM User Guide*.
|
386
|
+
#
|
387
|
+
# The temporary security credentials returned by this operation consist
|
388
|
+
# of an access key ID, a secret access key, and a security token.
|
389
|
+
# Applications can use these temporary security credentials to sign
|
390
|
+
# calls to AWS services.
|
391
|
+
#
|
392
|
+
# The temporary security credentials are valid for the duration that you
|
393
|
+
# specified when calling `AssumeRole`, or until the time specified in
|
394
|
+
# the SAML authentication response's `SessionNotOnOrAfter` value,
|
395
|
+
# whichever is shorter. The duration can be from 900 seconds (15
|
396
|
+
# minutes) to a maximum of 3600 seconds (1 hour). The default is 1 hour.
|
397
|
+
#
|
398
|
+
# The temporary security credentials created by `AssumeRoleWithSAML` can
|
399
|
+
# be used to make API calls to any AWS service with the following
|
400
|
+
# exception: you cannot call the STS service's `GetFederationToken` or
|
401
|
+
# `GetSessionToken` APIs.
|
402
|
+
#
|
403
|
+
# Optionally, you can pass an IAM access policy to this operation. If
|
404
|
+
# you choose not to pass a policy, the temporary security credentials
|
405
|
+
# that are returned by the operation have the permissions that are
|
406
|
+
# defined in the access policy of the role that is being assumed. If you
|
407
|
+
# pass a policy to this operation, the temporary security credentials
|
408
|
+
# that are returned by the operation have the permissions that are
|
409
|
+
# allowed by the intersection of both the access policy of the role that
|
410
|
+
# is being assumed, <i> <b>and</b> </i> the policy that you pass. This
|
411
|
+
# means that both policies must grant the permission for the action to
|
412
|
+
# be allowed. This gives you a way to further restrict the permissions
|
413
|
+
# for the resulting temporary security credentials. You cannot use the
|
414
|
+
# passed policy to grant permissions that are in excess of those allowed
|
415
|
+
# by the access policy of the role that is being assumed. For more
|
416
|
+
# information, see [Permissions for AssumeRole, AssumeRoleWithSAML, and
|
417
|
+
# AssumeRoleWithWebIdentity][3] in the *IAM User Guide*.
|
418
|
+
#
|
419
|
+
# Before your application can call `AssumeRoleWithSAML`, you must
|
420
|
+
# configure your SAML identity provider (IdP) to issue the claims
|
421
|
+
# required by AWS. Additionally, you must use AWS Identity and Access
|
422
|
+
# Management (IAM) to create a SAML provider entity in your AWS account
|
423
|
+
# that represents your identity provider, and create an IAM role that
|
424
|
+
# specifies this SAML provider in its trust policy.
|
425
|
+
#
|
426
|
+
# Calling `AssumeRoleWithSAML` does not require the use of AWS security
|
427
|
+
# credentials. The identity of the caller is validated by using keys in
|
428
|
+
# the metadata document that is uploaded for the SAML provider entity
|
429
|
+
# for your identity provider.
|
430
|
+
#
|
431
|
+
# Calling `AssumeRoleWithSAML` can result in an entry in your AWS
|
432
|
+
# CloudTrail logs. The entry includes the value in the `NameID` element
|
433
|
+
# of the SAML assertion. We recommend that you use a NameIDType that is
|
434
|
+
# not associated with any personally identifiable information (PII). For
|
435
|
+
# example, you could instead use the Persistent Identifier
|
436
|
+
# (`urn:oasis:names:tc:SAML:2.0:nameid-format:persistent`).
|
437
|
+
#
|
438
|
+
# For more information, see the following resources:
|
439
|
+
#
|
440
|
+
# * [About SAML 2.0-based Federation][4] in the *IAM User Guide*.
|
441
|
+
#
|
442
|
+
# * [Creating SAML Identity Providers][5] in the *IAM User Guide*.
|
443
|
+
#
|
444
|
+
# * [Configuring a Relying Party and Claims][6] in the *IAM User Guide*.
|
445
|
+
#
|
446
|
+
# * [Creating a Role for SAML 2.0 Federation][7] in the *IAM User
|
447
|
+
# Guide*.
|
448
|
+
#
|
449
|
+
#
|
450
|
+
#
|
451
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html
|
452
|
+
# [2]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison
|
453
|
+
# [3]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
454
|
+
# [4]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html
|
455
|
+
# [5]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml.html
|
456
|
+
# [6]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_relying-party.html
|
457
|
+
# [7]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-idp_saml.html
|
458
|
+
# @option params [required, String] :role_arn
|
459
|
+
# The Amazon Resource Name (ARN) of the role that the caller is
|
460
|
+
# assuming.
|
461
|
+
# @option params [required, String] :principal_arn
|
462
|
+
# The Amazon Resource Name (ARN) of the SAML provider in IAM that
|
463
|
+
# describes the IdP.
|
464
|
+
# @option params [required, String] :saml_assertion
|
465
|
+
# The base-64 encoded SAML authentication response provided by the IdP.
|
466
|
+
#
|
467
|
+
# For more information, see [Configuring a Relying Party and Adding
|
468
|
+
# Claims][1] in the *Using IAM* guide.
|
469
|
+
#
|
470
|
+
#
|
471
|
+
#
|
472
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/create-role-saml-IdP-tasks.html
|
473
|
+
# @option params [String] :policy
|
474
|
+
# An IAM policy in JSON format.
|
475
|
+
#
|
476
|
+
# The policy parameter is optional. If you pass a policy, the temporary
|
477
|
+
# security credentials that are returned by the operation have the
|
478
|
+
# permissions that are allowed by both the access policy of the role
|
479
|
+
# that is being assumed, <i> <b>and</b> </i> the policy that you pass.
|
480
|
+
# This gives you a way to further restrict the permissions for the
|
481
|
+
# resulting temporary security credentials. You cannot use the passed
|
482
|
+
# policy to grant permissions that are in excess of those allowed by the
|
483
|
+
# access policy of the role that is being assumed. For more information,
|
484
|
+
# [Permissions for AssumeRole, AssumeRoleWithSAML, and
|
485
|
+
# AssumeRoleWithWebIdentity][1] in the *IAM User Guide*.
|
486
|
+
#
|
487
|
+
# The format for this parameter, as described by its regex pattern, is a
|
488
|
+
# string of characters up to 2048 characters in length. The characters
|
489
|
+
# can be any ASCII character from the space character to the end of the
|
490
|
+
# valid character list (\\u0020-\\u00FF). It can also include the tab
|
491
|
+
# (\\u0009), linefeed (\\u000A), and carriage return (\\u000D)
|
492
|
+
# characters.
|
493
|
+
#
|
494
|
+
# <note markdown="1"> The policy plain text must be 2048 bytes or shorter. However, an
|
495
|
+
# internal conversion compresses it into a packed binary format with a
|
496
|
+
# separate limit. The PackedPolicySize response element indicates by
|
497
|
+
# percentage how close to the upper size limit the policy is, with 100%
|
498
|
+
# equaling the maximum allowed size.
|
499
|
+
#
|
500
|
+
# </note>
|
501
|
+
#
|
502
|
+
#
|
503
|
+
#
|
504
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
505
|
+
# @option params [Integer] :duration_seconds
|
506
|
+
# The duration, in seconds, of the role session. The value can range
|
507
|
+
# from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default,
|
508
|
+
# the value is set to 3600 seconds. An expiration can also be specified
|
509
|
+
# in the SAML authentication response's `SessionNotOnOrAfter` value.
|
510
|
+
# The actual expiration time is whichever value is shorter.
|
511
|
+
#
|
512
|
+
# <note markdown="1"> This is separate from the duration of a console session that you might
|
513
|
+
# request using the returned credentials. The request to the federation
|
514
|
+
# endpoint for a console sign-in token takes a `SessionDuration`
|
515
|
+
# parameter that specifies the maximum length of the console session,
|
516
|
+
# separately from the `DurationSeconds` parameter on this API. For more
|
517
|
+
# information, see [Enabling SAML 2.0 Federated Users to Access the AWS
|
518
|
+
# Management Console][1] in the *IAM User Guide*.
|
519
|
+
#
|
520
|
+
# </note>
|
521
|
+
#
|
522
|
+
#
|
523
|
+
#
|
524
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-saml.html
|
525
|
+
# @return [Types::AssumeRoleWithSAMLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
526
|
+
#
|
527
|
+
# * {Types::AssumeRoleWithSAMLResponse#credentials #Credentials} => Types::Credentials
|
528
|
+
# * {Types::AssumeRoleWithSAMLResponse#assumed_role_user #AssumedRoleUser} => Types::AssumedRoleUser
|
529
|
+
# * {Types::AssumeRoleWithSAMLResponse#packed_policy_size #PackedPolicySize} => Integer
|
530
|
+
# * {Types::AssumeRoleWithSAMLResponse#subject #Subject} => String
|
531
|
+
# * {Types::AssumeRoleWithSAMLResponse#subject_type #SubjectType} => String
|
532
|
+
# * {Types::AssumeRoleWithSAMLResponse#issuer #Issuer} => String
|
533
|
+
# * {Types::AssumeRoleWithSAMLResponse#audience #Audience} => String
|
534
|
+
# * {Types::AssumeRoleWithSAMLResponse#name_qualifier #NameQualifier} => String
|
535
|
+
#
|
536
|
+
# @example Request syntax with placeholder values
|
537
|
+
# resp = client.assume_role_with_saml({
|
538
|
+
# role_arn: "arnType", # required
|
539
|
+
# principal_arn: "arnType", # required
|
540
|
+
# saml_assertion: "SAMLAssertionType", # required
|
541
|
+
# policy: "sessionPolicyDocumentType",
|
542
|
+
# duration_seconds: 1,
|
543
|
+
# })
|
544
|
+
#
|
545
|
+
# @example Response structure
|
546
|
+
# resp.credentials.access_key_id #=> String
|
547
|
+
# resp.credentials.secret_access_key #=> String
|
548
|
+
# resp.credentials.session_token #=> String
|
549
|
+
# resp.credentials.expiration #=> Time
|
550
|
+
# resp.assumed_role_user.assumed_role_id #=> String
|
551
|
+
# resp.assumed_role_user.arn #=> String
|
552
|
+
# resp.packed_policy_size #=> Integer
|
553
|
+
# resp.subject #=> String
|
554
|
+
# resp.subject_type #=> String
|
555
|
+
# resp.issuer #=> String
|
556
|
+
# resp.audience #=> String
|
557
|
+
# resp.name_qualifier #=> String
|
558
|
+
# @overload assume_role_with_saml(params = {})
|
559
|
+
# @param [Hash] params ({})
|
560
|
+
def assume_role_with_saml(params = {}, options = {})
|
561
|
+
req = build_request(:assume_role_with_saml, params)
|
562
|
+
req.send_request(options)
|
563
|
+
end
|
564
|
+
|
565
|
+
# Returns a set of temporary security credentials for users who have
|
566
|
+
# been authenticated in a mobile or web application with a web identity
|
567
|
+
# provider, such as Amazon Cognito, Login with Amazon, Facebook, Google,
|
568
|
+
# or any OpenID Connect-compatible identity provider.
|
569
|
+
#
|
570
|
+
# <note markdown="1"> For mobile applications, we recommend that you use Amazon Cognito. You
|
571
|
+
# can use Amazon Cognito with the [AWS SDK for iOS][1] and the [AWS SDK
|
572
|
+
# for Android][2] to uniquely identify a user and supply the user with a
|
573
|
+
# consistent identity throughout the lifetime of an application.
|
574
|
+
#
|
575
|
+
# To learn more about Amazon Cognito, see [Amazon Cognito Overview][3]
|
576
|
+
# in the *AWS SDK for Android Developer Guide* guide and [Amazon Cognito
|
577
|
+
# Overview][4] in the *AWS SDK for iOS Developer Guide*.
|
578
|
+
#
|
579
|
+
# </note>
|
580
|
+
#
|
581
|
+
# Calling `AssumeRoleWithWebIdentity` does not require the use of AWS
|
582
|
+
# security credentials. Therefore, you can distribute an application
|
583
|
+
# (for example, on mobile devices) that requests temporary security
|
584
|
+
# credentials without including long-term AWS credentials in the
|
585
|
+
# application, and without deploying server-based proxy services that
|
586
|
+
# use long-term AWS credentials. Instead, the identity of the caller is
|
587
|
+
# validated by using a token from the web identity provider. For a
|
588
|
+
# comparison of `AssumeRoleWithWebIdentity` with the other APIs that
|
589
|
+
# produce temporary credentials, see [Requesting Temporary Security
|
590
|
+
# Credentials][5] and [Comparing the AWS STS APIs][6] in the *IAM User
|
591
|
+
# Guide*.
|
592
|
+
#
|
593
|
+
# The temporary security credentials returned by this API consist of an
|
594
|
+
# access key ID, a secret access key, and a security token. Applications
|
595
|
+
# can use these temporary security credentials to sign calls to AWS
|
596
|
+
# service APIs.
|
597
|
+
#
|
598
|
+
# The credentials are valid for the duration that you specified when
|
599
|
+
# calling `AssumeRoleWithWebIdentity`, which can be from 900 seconds (15
|
600
|
+
# minutes) to a maximum of 3600 seconds (1 hour). The default is 1 hour.
|
601
|
+
#
|
602
|
+
# The temporary security credentials created by
|
603
|
+
# `AssumeRoleWithWebIdentity` can be used to make API calls to any AWS
|
604
|
+
# service with the following exception: you cannot call the STS
|
605
|
+
# service's `GetFederationToken` or `GetSessionToken` APIs.
|
606
|
+
#
|
607
|
+
# Optionally, you can pass an IAM access policy to this operation. If
|
608
|
+
# you choose not to pass a policy, the temporary security credentials
|
609
|
+
# that are returned by the operation have the permissions that are
|
610
|
+
# defined in the access policy of the role that is being assumed. If you
|
611
|
+
# pass a policy to this operation, the temporary security credentials
|
612
|
+
# that are returned by the operation have the permissions that are
|
613
|
+
# allowed by both the access policy of the role that is being assumed,
|
614
|
+
# <i> <b>and</b> </i> the policy that you pass. This gives you a way to
|
615
|
+
# further restrict the permissions for the resulting temporary security
|
616
|
+
# credentials. You cannot use the passed policy to grant permissions
|
617
|
+
# that are in excess of those allowed by the access policy of the role
|
618
|
+
# that is being assumed. For more information, see [Permissions for
|
619
|
+
# AssumeRole, AssumeRoleWithSAML, and AssumeRoleWithWebIdentity][7] in
|
620
|
+
# the *IAM User Guide*.
|
621
|
+
#
|
622
|
+
# Before your application can call `AssumeRoleWithWebIdentity`, you must
|
623
|
+
# have an identity token from a supported identity provider and create a
|
624
|
+
# role that the application can assume. The role that your application
|
625
|
+
# assumes must trust the identity provider that is associated with the
|
626
|
+
# identity token. In other words, the identity provider must be
|
627
|
+
# specified in the role's trust policy.
|
628
|
+
#
|
629
|
+
# Calling `AssumeRoleWithWebIdentity` can result in an entry in your AWS
|
630
|
+
# CloudTrail logs. The entry includes the [Subject][8] of the provided
|
631
|
+
# Web Identity Token. We recommend that you avoid using any personally
|
632
|
+
# identifiable information (PII) in this field. For example, you could
|
633
|
+
# instead use a GUID or a pairwise identifier, as [suggested in the OIDC
|
634
|
+
# specification][9].
|
635
|
+
#
|
636
|
+
# For more information about how to use web identity federation and the
|
637
|
+
# `AssumeRoleWithWebIdentity` API, see the following resources:
|
638
|
+
#
|
639
|
+
# * [Using Web Identity Federation APIs for Mobile Apps][10] and
|
640
|
+
# [Federation Through a Web-based Identity Provider][11].
|
641
|
+
#
|
642
|
+
# * [ Web Identity Federation Playground][12]. This interactive website
|
643
|
+
# lets you walk through the process of authenticating via Login with
|
644
|
+
# Amazon, Facebook, or Google, getting temporary security credentials,
|
645
|
+
# and then using those credentials to make a request to AWS.
|
646
|
+
#
|
647
|
+
# * [AWS SDK for iOS][1] and [AWS SDK for Android][2]. These toolkits
|
648
|
+
# contain sample apps that show how to invoke the identity providers,
|
649
|
+
# and then how to use the information from these providers to get and
|
650
|
+
# use temporary security credentials.
|
651
|
+
#
|
652
|
+
# * [Web Identity Federation with Mobile Applications][13]. This article
|
653
|
+
# discusses web identity federation and shows an example of how to use
|
654
|
+
# web identity federation to get access to content in Amazon S3.
|
655
|
+
#
|
656
|
+
#
|
657
|
+
#
|
658
|
+
# [1]: http://aws.amazon.com/sdkforios/
|
659
|
+
# [2]: http://aws.amazon.com/sdkforandroid/
|
660
|
+
# [3]: http://docs.aws.amazon.com/mobile/sdkforandroid/developerguide/cognito-auth.html#d0e840
|
661
|
+
# [4]: http://docs.aws.amazon.com/mobile/sdkforios/developerguide/cognito-auth.html#d0e664
|
662
|
+
# [5]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html
|
663
|
+
# [6]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison
|
664
|
+
# [7]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
665
|
+
# [8]: http://openid.net/specs/openid-connect-core-1_0.html#Claims
|
666
|
+
# [9]: http://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes
|
667
|
+
# [10]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc_manual
|
668
|
+
# [11]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity
|
669
|
+
# [12]: https://web-identity-federation-playground.s3.amazonaws.com/index.html
|
670
|
+
# [13]: http://aws.amazon.com/articles/4617974389850313
|
671
|
+
# @option params [required, String] :role_arn
|
672
|
+
# The Amazon Resource Name (ARN) of the role that the caller is
|
673
|
+
# assuming.
|
674
|
+
# @option params [required, String] :role_session_name
|
675
|
+
# An identifier for the assumed role session. Typically, you pass the
|
676
|
+
# name or identifier that is associated with the user who is using your
|
677
|
+
# application. That way, the temporary security credentials that your
|
678
|
+
# application will use are associated with that user. This session name
|
679
|
+
# is included as part of the ARN and assumed role ID in the
|
680
|
+
# `AssumedRoleUser` response element.
|
681
|
+
#
|
682
|
+
# The format for this parameter, as described by its regex pattern, is a
|
683
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
684
|
+
# characters with no spaces. You can also include underscores or any of
|
685
|
+
# the following characters: =,.@-
|
686
|
+
# @option params [required, String] :web_identity_token
|
687
|
+
# The OAuth 2.0 access token or OpenID Connect ID token that is provided
|
688
|
+
# by the identity provider. Your application must get this token by
|
689
|
+
# authenticating the user who is using your application with a web
|
690
|
+
# identity provider before the application makes an
|
691
|
+
# `AssumeRoleWithWebIdentity` call.
|
692
|
+
# @option params [String] :provider_id
|
693
|
+
# The fully qualified host component of the domain name of the identity
|
694
|
+
# provider.
|
695
|
+
#
|
696
|
+
# Specify this value only for OAuth 2.0 access tokens. Currently
|
697
|
+
# `www.amazon.com` and `graph.facebook.com` are the only supported
|
698
|
+
# identity providers for OAuth 2.0 access tokens. Do not include URL
|
699
|
+
# schemes and port numbers.
|
700
|
+
#
|
701
|
+
# Do not specify this value for OpenID Connect ID tokens.
|
702
|
+
# @option params [String] :policy
|
703
|
+
# An IAM policy in JSON format.
|
704
|
+
#
|
705
|
+
# The policy parameter is optional. If you pass a policy, the temporary
|
706
|
+
# security credentials that are returned by the operation have the
|
707
|
+
# permissions that are allowed by both the access policy of the role
|
708
|
+
# that is being assumed, <i> <b>and</b> </i> the policy that you pass.
|
709
|
+
# This gives you a way to further restrict the permissions for the
|
710
|
+
# resulting temporary security credentials. You cannot use the passed
|
711
|
+
# policy to grant permissions that are in excess of those allowed by the
|
712
|
+
# access policy of the role that is being assumed. For more information,
|
713
|
+
# see [Permissions for AssumeRoleWithWebIdentity][1] in the *IAM User
|
714
|
+
# Guide*.
|
715
|
+
#
|
716
|
+
# The format for this parameter, as described by its regex pattern, is a
|
717
|
+
# string of characters up to 2048 characters in length. The characters
|
718
|
+
# can be any ASCII character from the space character to the end of the
|
719
|
+
# valid character list (\\u0020-\\u00FF). It can also include the tab
|
720
|
+
# (\\u0009), linefeed (\\u000A), and carriage return (\\u000D)
|
721
|
+
# characters.
|
722
|
+
#
|
723
|
+
# <note markdown="1"> The policy plain text must be 2048 bytes or shorter. However, an
|
724
|
+
# internal conversion compresses it into a packed binary format with a
|
725
|
+
# separate limit. The PackedPolicySize response element indicates by
|
726
|
+
# percentage how close to the upper size limit the policy is, with 100%
|
727
|
+
# equaling the maximum allowed size.
|
728
|
+
#
|
729
|
+
# </note>
|
730
|
+
#
|
731
|
+
#
|
732
|
+
#
|
733
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_assumerole.html
|
734
|
+
# @option params [Integer] :duration_seconds
|
735
|
+
# The duration, in seconds, of the role session. The value can range
|
736
|
+
# from 900 seconds (15 minutes) to 3600 seconds (1 hour). By default,
|
737
|
+
# the value is set to 3600 seconds.
|
738
|
+
#
|
739
|
+
# <note markdown="1"> This is separate from the duration of a console session that you might
|
740
|
+
# request using the returned credentials. The request to the federation
|
741
|
+
# endpoint for a console sign-in token takes a `SessionDuration`
|
742
|
+
# parameter that specifies the maximum length of the console session,
|
743
|
+
# separately from the `DurationSeconds` parameter on this API. For more
|
744
|
+
# information, see [Creating a URL that Enables Federated Users to
|
745
|
+
# Access the AWS Management Console][1] in the *IAM User Guide*.
|
746
|
+
#
|
747
|
+
# </note>
|
748
|
+
#
|
749
|
+
#
|
750
|
+
#
|
751
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
|
752
|
+
# @return [Types::AssumeRoleWithWebIdentityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
753
|
+
#
|
754
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#credentials #Credentials} => Types::Credentials
|
755
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#subject_from_web_identity_token #SubjectFromWebIdentityToken} => String
|
756
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#assumed_role_user #AssumedRoleUser} => Types::AssumedRoleUser
|
757
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#packed_policy_size #PackedPolicySize} => Integer
|
758
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#provider #Provider} => String
|
759
|
+
# * {Types::AssumeRoleWithWebIdentityResponse#audience #Audience} => String
|
760
|
+
#
|
761
|
+
# @example Request syntax with placeholder values
|
762
|
+
# resp = client.assume_role_with_web_identity({
|
763
|
+
# role_arn: "arnType", # required
|
764
|
+
# role_session_name: "roleSessionNameType", # required
|
765
|
+
# web_identity_token: "clientTokenType", # required
|
766
|
+
# provider_id: "urlType",
|
767
|
+
# policy: "sessionPolicyDocumentType",
|
768
|
+
# duration_seconds: 1,
|
769
|
+
# })
|
770
|
+
#
|
771
|
+
# @example Response structure
|
772
|
+
# resp.credentials.access_key_id #=> String
|
773
|
+
# resp.credentials.secret_access_key #=> String
|
774
|
+
# resp.credentials.session_token #=> String
|
775
|
+
# resp.credentials.expiration #=> Time
|
776
|
+
# resp.subject_from_web_identity_token #=> String
|
777
|
+
# resp.assumed_role_user.assumed_role_id #=> String
|
778
|
+
# resp.assumed_role_user.arn #=> String
|
779
|
+
# resp.packed_policy_size #=> Integer
|
780
|
+
# resp.provider #=> String
|
781
|
+
# resp.audience #=> String
|
782
|
+
# @overload assume_role_with_web_identity(params = {})
|
783
|
+
# @param [Hash] params ({})
|
784
|
+
def assume_role_with_web_identity(params = {}, options = {})
|
785
|
+
req = build_request(:assume_role_with_web_identity, params)
|
786
|
+
req.send_request(options)
|
787
|
+
end
|
788
|
+
|
789
|
+
# Decodes additional information about the authorization status of a
|
790
|
+
# request from an encoded message returned in response to an AWS
|
791
|
+
# request.
|
792
|
+
#
|
793
|
+
# For example, if a user is not authorized to perform an action that he
|
794
|
+
# or she has requested, the request returns a
|
795
|
+
# `Client.UnauthorizedOperation` response (an HTTP 403 response). Some
|
796
|
+
# AWS actions additionally return an encoded message that can provide
|
797
|
+
# details about this authorization failure.
|
798
|
+
#
|
799
|
+
# <note markdown="1"> Only certain AWS actions return an encoded authorization message. The
|
800
|
+
# documentation for an individual action indicates whether that action
|
801
|
+
# returns an encoded message in addition to returning an HTTP code.
|
802
|
+
#
|
803
|
+
# </note>
|
804
|
+
#
|
805
|
+
# The message is encoded because the details of the authorization status
|
806
|
+
# can constitute privileged information that the user who requested the
|
807
|
+
# action should not see. To decode an authorization status message, a
|
808
|
+
# user must be granted permissions via an IAM policy to request the
|
809
|
+
# `DecodeAuthorizationMessage` (`sts:DecodeAuthorizationMessage`)
|
810
|
+
# action.
|
811
|
+
#
|
812
|
+
# The decoded message includes the following type of information:
|
813
|
+
#
|
814
|
+
# * Whether the request was denied due to an explicit deny or due to the
|
815
|
+
# absence of an explicit allow. For more information, see [Determining
|
816
|
+
# Whether a Request is Allowed or Denied][1] in the *IAM User Guide*.
|
817
|
+
#
|
818
|
+
# * The principal who made the request.
|
819
|
+
#
|
820
|
+
# * The requested action.
|
821
|
+
#
|
822
|
+
# * The requested resource.
|
823
|
+
#
|
824
|
+
# * The values of condition keys in the context of the user's request.
|
825
|
+
#
|
826
|
+
#
|
827
|
+
#
|
828
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html#policy-eval-denyallow
|
829
|
+
# @option params [required, String] :encoded_message
|
830
|
+
# The encoded message that was returned with the response.
|
831
|
+
# @return [Types::DecodeAuthorizationMessageResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
832
|
+
#
|
833
|
+
# * {Types::DecodeAuthorizationMessageResponse#decoded_message #DecodedMessage} => String
|
834
|
+
#
|
835
|
+
# @example Request syntax with placeholder values
|
836
|
+
# resp = client.decode_authorization_message({
|
837
|
+
# encoded_message: "encodedMessageType", # required
|
838
|
+
# })
|
839
|
+
#
|
840
|
+
# @example Response structure
|
841
|
+
# resp.decoded_message #=> String
|
842
|
+
# @overload decode_authorization_message(params = {})
|
843
|
+
# @param [Hash] params ({})
|
844
|
+
def decode_authorization_message(params = {}, options = {})
|
845
|
+
req = build_request(:decode_authorization_message, params)
|
846
|
+
req.send_request(options)
|
847
|
+
end
|
848
|
+
|
849
|
+
# Returns details about the IAM identity whose credentials are used to
|
850
|
+
# call the API.
|
851
|
+
# @return [Types::GetCallerIdentityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
852
|
+
#
|
853
|
+
# * {Types::GetCallerIdentityResponse#user_id #UserId} => String
|
854
|
+
# * {Types::GetCallerIdentityResponse#account #Account} => String
|
855
|
+
# * {Types::GetCallerIdentityResponse#arn #Arn} => String
|
856
|
+
#
|
857
|
+
# @example Request syntax with placeholder values
|
858
|
+
# resp = client.get_caller_identity()
|
859
|
+
#
|
860
|
+
# @example Response structure
|
861
|
+
# resp.user_id #=> String
|
862
|
+
# resp.account #=> String
|
863
|
+
# resp.arn #=> String
|
864
|
+
# @overload get_caller_identity(params = {})
|
865
|
+
# @param [Hash] params ({})
|
866
|
+
def get_caller_identity(params = {}, options = {})
|
867
|
+
req = build_request(:get_caller_identity, params)
|
868
|
+
req.send_request(options)
|
869
|
+
end
|
870
|
+
|
871
|
+
# Returns a set of temporary security credentials (consisting of an
|
872
|
+
# access key ID, a secret access key, and a security token) for a
|
873
|
+
# federated user. A typical use is in a proxy application that gets
|
874
|
+
# temporary security credentials on behalf of distributed applications
|
875
|
+
# inside a corporate network. Because you must call the
|
876
|
+
# `GetFederationToken` action using the long-term security credentials
|
877
|
+
# of an IAM user, this call is appropriate in contexts where those
|
878
|
+
# credentials can be safely stored, usually in a server-based
|
879
|
+
# application. For a comparison of `GetFederationToken` with the other
|
880
|
+
# APIs that produce temporary credentials, see [Requesting Temporary
|
881
|
+
# Security Credentials][1] and [Comparing the AWS STS APIs][2] in the
|
882
|
+
# *IAM User Guide*.
|
883
|
+
#
|
884
|
+
# <note markdown="1"> If you are creating a mobile-based or browser-based app that can
|
885
|
+
# authenticate users using a web identity provider like Login with
|
886
|
+
# Amazon, Facebook, Google, or an OpenID Connect-compatible identity
|
887
|
+
# provider, we recommend that you use [Amazon Cognito][3] or
|
888
|
+
# `AssumeRoleWithWebIdentity`. For more information, see [Federation
|
889
|
+
# Through a Web-based Identity Provider][4].
|
890
|
+
#
|
891
|
+
# </note>
|
892
|
+
#
|
893
|
+
# The `GetFederationToken` action must be called by using the long-term
|
894
|
+
# AWS security credentials of an IAM user. You can also call
|
895
|
+
# `GetFederationToken` using the security credentials of an AWS root
|
896
|
+
# account, but we do not recommended it. Instead, we recommend that you
|
897
|
+
# create an IAM user for the purpose of the proxy application and then
|
898
|
+
# attach a policy to the IAM user that limits federated users to only
|
899
|
+
# the actions and resources that they need access to. For more
|
900
|
+
# information, see [IAM Best Practices][5] in the *IAM User Guide*.
|
901
|
+
#
|
902
|
+
# The temporary security credentials that are obtained by using the
|
903
|
+
# long-term credentials of an IAM user are valid for the specified
|
904
|
+
# duration, from 900 seconds (15 minutes) up to a maximium of 129600
|
905
|
+
# seconds (36 hours). The default is 43200 seconds (12 hours). Temporary
|
906
|
+
# credentials that are obtained by using AWS root account credentials
|
907
|
+
# have a maximum duration of 3600 seconds (1 hour).
|
908
|
+
#
|
909
|
+
# The temporary security credentials created by `GetFederationToken` can
|
910
|
+
# be used to make API calls to any AWS service with the following
|
911
|
+
# exceptions:
|
912
|
+
#
|
913
|
+
# * You cannot use these credentials to call any IAM APIs.
|
914
|
+
#
|
915
|
+
# * You cannot call any STS APIs.
|
916
|
+
#
|
917
|
+
# **Permissions**
|
918
|
+
#
|
919
|
+
# The permissions for the temporary security credentials returned by
|
920
|
+
# `GetFederationToken` are determined by a combination of the following:
|
921
|
+
#
|
922
|
+
# * The policy or policies that are attached to the IAM user whose
|
923
|
+
# credentials are used to call `GetFederationToken`.
|
924
|
+
#
|
925
|
+
# * The policy that is passed as a parameter in the call.
|
926
|
+
#
|
927
|
+
# The passed policy is attached to the temporary security credentials
|
928
|
+
# that result from the `GetFederationToken` API call--that is, to the
|
929
|
+
# *federated user*. When the federated user makes an AWS request, AWS
|
930
|
+
# evaluates the policy attached to the federated user in combination
|
931
|
+
# with the policy or policies attached to the IAM user whose credentials
|
932
|
+
# were used to call `GetFederationToken`. AWS allows the federated
|
933
|
+
# user's request only when both the federated user <i> <b>and</b> </i>
|
934
|
+
# the IAM user are explicitly allowed to perform the requested action.
|
935
|
+
# The passed policy cannot grant more permissions than those that are
|
936
|
+
# defined in the IAM user policy.
|
937
|
+
#
|
938
|
+
# A typical use case is that the permissions of the IAM user whose
|
939
|
+
# credentials are used to call `GetFederationToken` are designed to
|
940
|
+
# allow access to all the actions and resources that any federated user
|
941
|
+
# will need. Then, for individual users, you pass a policy to the
|
942
|
+
# operation that scopes down the permissions to a level that's
|
943
|
+
# appropriate to that individual user, using a policy that allows only a
|
944
|
+
# subset of permissions that are granted to the IAM user.
|
945
|
+
#
|
946
|
+
# If you do not pass a policy, the resulting temporary security
|
947
|
+
# credentials have no effective permissions. The only exception is when
|
948
|
+
# the temporary security credentials are used to access a resource that
|
949
|
+
# has a resource-based policy that specifically allows the federated
|
950
|
+
# user to access the resource.
|
951
|
+
#
|
952
|
+
# For more information about how permissions work, see [Permissions for
|
953
|
+
# GetFederationToken][6]. For information about using
|
954
|
+
# `GetFederationToken` to create temporary security credentials, see
|
955
|
+
# [GetFederationToken—Federation Through a Custom Identity Broker][7].
|
956
|
+
#
|
957
|
+
#
|
958
|
+
#
|
959
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html
|
960
|
+
# [2]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison
|
961
|
+
# [3]: http://aws.amazon.com/cognito/
|
962
|
+
# [4]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity
|
963
|
+
# [5]: http://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
|
964
|
+
# [6]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_getfederationtoken.html
|
965
|
+
# [7]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken
|
966
|
+
# @option params [required, String] :name
|
967
|
+
# The name of the federated user. The name is used as an identifier for
|
968
|
+
# the temporary security credentials (such as `Bob`). For example, you
|
969
|
+
# can reference the federated user name in a resource-based policy, such
|
970
|
+
# as in an Amazon S3 bucket policy.
|
971
|
+
#
|
972
|
+
# The format for this parameter, as described by its regex pattern, is a
|
973
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
974
|
+
# characters with no spaces. You can also include underscores or any of
|
975
|
+
# the following characters: =,.@-
|
976
|
+
# @option params [String] :policy
|
977
|
+
# An IAM policy in JSON format that is passed with the
|
978
|
+
# `GetFederationToken` call and evaluated along with the policy or
|
979
|
+
# policies that are attached to the IAM user whose credentials are used
|
980
|
+
# to call `GetFederationToken`. The passed policy is used to scope down
|
981
|
+
# the permissions that are available to the IAM user, by allowing only a
|
982
|
+
# subset of the permissions that are granted to the IAM user. The passed
|
983
|
+
# policy cannot grant more permissions than those granted to the IAM
|
984
|
+
# user. The final permissions for the federated user are the most
|
985
|
+
# restrictive set based on the intersection of the passed policy and the
|
986
|
+
# IAM user policy.
|
987
|
+
#
|
988
|
+
# If you do not pass a policy, the resulting temporary security
|
989
|
+
# credentials have no effective permissions. The only exception is when
|
990
|
+
# the temporary security credentials are used to access a resource that
|
991
|
+
# has a resource-based policy that specifically allows the federated
|
992
|
+
# user to access the resource.
|
993
|
+
#
|
994
|
+
# The format for this parameter, as described by its regex pattern, is a
|
995
|
+
# string of characters up to 2048 characters in length. The characters
|
996
|
+
# can be any ASCII character from the space character to the end of the
|
997
|
+
# valid character list (\\u0020-\\u00FF). It can also include the tab
|
998
|
+
# (\\u0009), linefeed (\\u000A), and carriage return (\\u000D)
|
999
|
+
# characters.
|
1000
|
+
#
|
1001
|
+
# <note markdown="1"> The policy plain text must be 2048 bytes or shorter. However, an
|
1002
|
+
# internal conversion compresses it into a packed binary format with a
|
1003
|
+
# separate limit. The PackedPolicySize response element indicates by
|
1004
|
+
# percentage how close to the upper size limit the policy is, with 100%
|
1005
|
+
# equaling the maximum allowed size.
|
1006
|
+
#
|
1007
|
+
# </note>
|
1008
|
+
#
|
1009
|
+
# For more information about how permissions work, see [Permissions for
|
1010
|
+
# GetFederationToken][1].
|
1011
|
+
#
|
1012
|
+
#
|
1013
|
+
#
|
1014
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_getfederationtoken.html
|
1015
|
+
# @option params [Integer] :duration_seconds
|
1016
|
+
# The duration, in seconds, that the session should last. Acceptable
|
1017
|
+
# durations for federation sessions range from 900 seconds (15 minutes)
|
1018
|
+
# to 129600 seconds (36 hours), with 43200 seconds (12 hours) as the
|
1019
|
+
# default. Sessions obtained using AWS account (root) credentials are
|
1020
|
+
# restricted to a maximum of 3600 seconds (one hour). If the specified
|
1021
|
+
# duration is longer than one hour, the session obtained by using AWS
|
1022
|
+
# account (root) credentials defaults to one hour.
|
1023
|
+
# @return [Types::GetFederationTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1024
|
+
#
|
1025
|
+
# * {Types::GetFederationTokenResponse#credentials #Credentials} => Types::Credentials
|
1026
|
+
# * {Types::GetFederationTokenResponse#federated_user #FederatedUser} => Types::FederatedUser
|
1027
|
+
# * {Types::GetFederationTokenResponse#packed_policy_size #PackedPolicySize} => Integer
|
1028
|
+
#
|
1029
|
+
# @example Request syntax with placeholder values
|
1030
|
+
# resp = client.get_federation_token({
|
1031
|
+
# name: "userNameType", # required
|
1032
|
+
# policy: "sessionPolicyDocumentType",
|
1033
|
+
# duration_seconds: 1,
|
1034
|
+
# })
|
1035
|
+
#
|
1036
|
+
# @example Response structure
|
1037
|
+
# resp.credentials.access_key_id #=> String
|
1038
|
+
# resp.credentials.secret_access_key #=> String
|
1039
|
+
# resp.credentials.session_token #=> String
|
1040
|
+
# resp.credentials.expiration #=> Time
|
1041
|
+
# resp.federated_user.federated_user_id #=> String
|
1042
|
+
# resp.federated_user.arn #=> String
|
1043
|
+
# resp.packed_policy_size #=> Integer
|
1044
|
+
# @overload get_federation_token(params = {})
|
1045
|
+
# @param [Hash] params ({})
|
1046
|
+
def get_federation_token(params = {}, options = {})
|
1047
|
+
req = build_request(:get_federation_token, params)
|
1048
|
+
req.send_request(options)
|
1049
|
+
end
|
1050
|
+
|
1051
|
+
# Returns a set of temporary credentials for an AWS account or IAM user.
|
1052
|
+
# The credentials consist of an access key ID, a secret access key, and
|
1053
|
+
# a security token. Typically, you use `GetSessionToken` if you want to
|
1054
|
+
# use MFA to protect programmatic calls to specific AWS APIs like Amazon
|
1055
|
+
# EC2 `StopInstances`. MFA-enabled IAM users would need to call
|
1056
|
+
# `GetSessionToken` and submit an MFA code that is associated with their
|
1057
|
+
# MFA device. Using the temporary security credentials that are returned
|
1058
|
+
# from the call, IAM users can then make programmatic calls to APIs that
|
1059
|
+
# require MFA authentication. If you do not supply a correct MFA code,
|
1060
|
+
# then the API returns an access denied error. For a comparison of
|
1061
|
+
# `GetSessionToken` with the other APIs that produce temporary
|
1062
|
+
# credentials, see [Requesting Temporary Security Credentials][1] and
|
1063
|
+
# [Comparing the AWS STS APIs][2] in the *IAM User Guide*.
|
1064
|
+
#
|
1065
|
+
# The `GetSessionToken` action must be called by using the long-term AWS
|
1066
|
+
# security credentials of the AWS account or an IAM user. Credentials
|
1067
|
+
# that are created by IAM users are valid for the duration that you
|
1068
|
+
# specify, from 900 seconds (15 minutes) up to a maximum of 129600
|
1069
|
+
# seconds (36 hours), with a default of 43200 seconds (12 hours);
|
1070
|
+
# credentials that are created by using account credentials can range
|
1071
|
+
# from 900 seconds (15 minutes) up to a maximum of 3600 seconds (1
|
1072
|
+
# hour), with a default of 1 hour.
|
1073
|
+
#
|
1074
|
+
# The temporary security credentials created by `GetSessionToken` can be
|
1075
|
+
# used to make API calls to any AWS service with the following
|
1076
|
+
# exceptions:
|
1077
|
+
#
|
1078
|
+
# * You cannot call any IAM APIs unless MFA authentication information
|
1079
|
+
# is included in the request.
|
1080
|
+
#
|
1081
|
+
# * You cannot call any STS API *except* `AssumeRole`.
|
1082
|
+
#
|
1083
|
+
# <note markdown="1"> We recommend that you do not call `GetSessionToken` with root account
|
1084
|
+
# credentials. Instead, follow our [best practices][3] by creating one
|
1085
|
+
# or more IAM users, giving them the necessary permissions, and using
|
1086
|
+
# IAM users for everyday interaction with AWS.
|
1087
|
+
#
|
1088
|
+
# </note>
|
1089
|
+
#
|
1090
|
+
# The permissions associated with the temporary security credentials
|
1091
|
+
# returned by `GetSessionToken` are based on the permissions associated
|
1092
|
+
# with account or IAM user whose credentials are used to call the
|
1093
|
+
# action. If `GetSessionToken` is called using root account credentials,
|
1094
|
+
# the temporary credentials have root account permissions. Similarly, if
|
1095
|
+
# `GetSessionToken` is called using the credentials of an IAM user, the
|
1096
|
+
# temporary credentials have the same permissions as the IAM user.
|
1097
|
+
#
|
1098
|
+
# For more information about using `GetSessionToken` to create temporary
|
1099
|
+
# credentials, go to [Temporary Credentials for Users in Untrusted
|
1100
|
+
# Environments][4] in the *IAM User Guide*.
|
1101
|
+
#
|
1102
|
+
#
|
1103
|
+
#
|
1104
|
+
# [1]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html
|
1105
|
+
# [2]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison
|
1106
|
+
# [3]: http://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#create-iam-users
|
1107
|
+
# [4]: http://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getsessiontoken
|
1108
|
+
# @option params [Integer] :duration_seconds
|
1109
|
+
# The duration, in seconds, that the credentials should remain valid.
|
1110
|
+
# Acceptable durations for IAM user sessions range from 900 seconds (15
|
1111
|
+
# minutes) to 129600 seconds (36 hours), with 43200 seconds (12 hours)
|
1112
|
+
# as the default. Sessions for AWS account owners are restricted to a
|
1113
|
+
# maximum of 3600 seconds (one hour). If the duration is longer than one
|
1114
|
+
# hour, the session for AWS account owners defaults to one hour.
|
1115
|
+
# @option params [String] :serial_number
|
1116
|
+
# The identification number of the MFA device that is associated with
|
1117
|
+
# the IAM user who is making the `GetSessionToken` call. Specify this
|
1118
|
+
# value if the IAM user has a policy that requires MFA authentication.
|
1119
|
+
# The value is either the serial number for a hardware device (such as
|
1120
|
+
# `GAHT12345678`) or an Amazon Resource Name (ARN) for a virtual device
|
1121
|
+
# (such as `arn:aws:iam::123456789012:mfa/user`). You can find the
|
1122
|
+
# device for an IAM user by going to the AWS Management Console and
|
1123
|
+
# viewing the user's security credentials.
|
1124
|
+
#
|
1125
|
+
# The format for this parameter, as described by its regex pattern, is a
|
1126
|
+
# string of characters consisting of upper- and lower-case alphanumeric
|
1127
|
+
# characters with no spaces. You can also include underscores or any of
|
1128
|
+
# the following characters: =,.@-
|
1129
|
+
# @option params [String] :token_code
|
1130
|
+
# The value provided by the MFA device, if MFA is required. If any
|
1131
|
+
# policy requires the IAM user to submit an MFA code, specify this
|
1132
|
+
# value. If MFA authentication is required, and the user does not
|
1133
|
+
# provide a code when requesting a set of temporary security
|
1134
|
+
# credentials, the user will receive an "access denied" response when
|
1135
|
+
# requesting resources that require MFA authentication.
|
1136
|
+
#
|
1137
|
+
# The format for this parameter, as described by its regex pattern, is a
|
1138
|
+
# sequence of six numeric digits.
|
1139
|
+
# @return [Types::GetSessionTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
1140
|
+
#
|
1141
|
+
# * {Types::GetSessionTokenResponse#credentials #Credentials} => Types::Credentials
|
1142
|
+
#
|
1143
|
+
# @example Request syntax with placeholder values
|
1144
|
+
# resp = client.get_session_token({
|
1145
|
+
# duration_seconds: 1,
|
1146
|
+
# serial_number: "serialNumberType",
|
1147
|
+
# token_code: "tokenCodeType",
|
1148
|
+
# })
|
1149
|
+
#
|
1150
|
+
# @example Response structure
|
1151
|
+
# resp.credentials.access_key_id #=> String
|
1152
|
+
# resp.credentials.secret_access_key #=> String
|
1153
|
+
# resp.credentials.session_token #=> String
|
1154
|
+
# resp.credentials.expiration #=> Time
|
1155
|
+
# @overload get_session_token(params = {})
|
1156
|
+
# @param [Hash] params ({})
|
1157
|
+
def get_session_token(params = {}, options = {})
|
1158
|
+
req = build_request(:get_session_token, params)
|
1159
|
+
req.send_request(options)
|
1160
|
+
end
|
1161
|
+
|
1162
|
+
# @!endgroup
|
1163
|
+
|
1164
|
+
# @param params ({})
|
1165
|
+
# @api private
|
1166
|
+
def build_request(operation_name, params = {})
|
1167
|
+
handlers = @handlers.for(operation_name)
|
1168
|
+
context = Seahorse::Client::RequestContext.new(
|
1169
|
+
operation_name: operation_name,
|
1170
|
+
operation: config.api.operation(operation_name),
|
1171
|
+
client: self,
|
1172
|
+
params: params,
|
1173
|
+
config: config)
|
1174
|
+
context[:gem_name] = 'aws-sdk-core'
|
1175
|
+
context[:gem_version] = '1.0.0.rc1'
|
1176
|
+
Seahorse::Client::Request.new(handlers, context)
|
1177
|
+
end
|
1178
|
+
|
1179
|
+
# @api private
|
1180
|
+
# @deprecated
|
1181
|
+
def waiter_names
|
1182
|
+
[]
|
1183
|
+
end
|
1184
|
+
|
1185
|
+
class << self
|
1186
|
+
|
1187
|
+
# @api private
|
1188
|
+
attr_reader :identifier
|
1189
|
+
|
1190
|
+
# @api private
|
1191
|
+
def errors_module
|
1192
|
+
Errors
|
1193
|
+
end
|
1194
|
+
|
1195
|
+
end
|
1196
|
+
end
|
1197
|
+
end
|
1198
|
+
end
|