aws-sdk-core 3.251.0 → 3.253.0

data/lib/aws-sdk-signin/client_api.rb

@@ -16,24 +16,81 @@ module Aws::Signin
 
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
     AccessToken = Shapes::StructureShape.new(name: 'AccessToken')
+    AccountId = Shapes::StringShape.new(name: 'AccountId')
     AuthorizationCode = Shapes::StringShape.new(name: 'AuthorizationCode')
+    BearerTokenType = Shapes::StringShape.new(name: 'BearerTokenType')
+    Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    ClientCredentialsGrantType = Shapes::StringShape.new(name: 'ClientCredentialsGrantType')
     ClientId = Shapes::StringShape.new(name: 'ClientId')
+    ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     CodeVerifier = Shapes::StringShape.new(name: 'CodeVerifier')
+    Condition = Shapes::MapShape.new(name: 'Condition')
+    ConditionBlock = Shapes::MapShape.new(name: 'ConditionBlock')
+    ConditionType = Shapes::StringShape.new(name: 'ConditionType')
+    ConditionValues = Shapes::ListShape.new(name: 'ConditionValues')
+    ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
+    ConsolePermissionMaxResults = Shapes::IntegerShape.new(name: 'ConsolePermissionMaxResults')
     CreateOAuth2TokenRequest = Shapes::StructureShape.new(name: 'CreateOAuth2TokenRequest')
     CreateOAuth2TokenRequestBody = Shapes::StructureShape.new(name: 'CreateOAuth2TokenRequestBody')
     CreateOAuth2TokenResponse = Shapes::StructureShape.new(name: 'CreateOAuth2TokenResponse')
     CreateOAuth2TokenResponseBody = Shapes::StructureShape.new(name: 'CreateOAuth2TokenResponseBody')
+    CreateOAuth2TokenWithIAMRequest = Shapes::StructureShape.new(name: 'CreateOAuth2TokenWithIAMRequest')
+    CreateOAuth2TokenWithIAMRequestResourceString = Shapes::StringShape.new(name: 'CreateOAuth2TokenWithIAMRequestResourceString')
+    CreateOAuth2TokenWithIAMResponse = Shapes::StructureShape.new(name: 'CreateOAuth2TokenWithIAMResponse')
+    DeleteConsoleAuthorizationConfigurationInput = Shapes::StructureShape.new(name: 'DeleteConsoleAuthorizationConfigurationInput')
+    DeleteConsoleAuthorizationConfigurationOutput = Shapes::StructureShape.new(name: 'DeleteConsoleAuthorizationConfigurationOutput')
+    DeleteResourcePermissionStatementInput = Shapes::StructureShape.new(name: 'DeleteResourcePermissionStatementInput')
+    DeleteResourcePermissionStatementOutput = Shapes::StructureShape.new(name: 'DeleteResourcePermissionStatementOutput')
+    ExcludedPrincipal = Shapes::StringShape.new(name: 'ExcludedPrincipal')
     ExpiresIn = Shapes::IntegerShape.new(name: 'ExpiresIn')
+    GetConsoleAuthorizationConfigurationInput = Shapes::StructureShape.new(name: 'GetConsoleAuthorizationConfigurationInput')
+    GetConsoleAuthorizationConfigurationOutput = Shapes::StructureShape.new(name: 'GetConsoleAuthorizationConfigurationOutput')
+    GetResourcePolicyInput = Shapes::StructureShape.new(name: 'GetResourcePolicyInput')
+    GetResourcePolicyOutput = Shapes::StructureShape.new(name: 'GetResourcePolicyOutput')
     GrantType = Shapes::StringShape.new(name: 'GrantType')
     IdToken = Shapes::StringShape.new(name: 'IdToken')
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
+    IntrospectOAuth2TokenWithIAMRequest = Shapes::StructureShape.new(name: 'IntrospectOAuth2TokenWithIAMRequest')
+    IntrospectOAuth2TokenWithIAMResponse = Shapes::StructureShape.new(name: 'IntrospectOAuth2TokenWithIAMResponse')
+    IntrospectedTokenType = Shapes::StringShape.new(name: 'IntrospectedTokenType')
+    IntrospectionToken = Shapes::StringShape.new(name: 'IntrospectionToken')
+    ListResourcePermissionStatementsInput = Shapes::StructureShape.new(name: 'ListResourcePermissionStatementsInput')
+    ListResourcePermissionStatementsOutput = Shapes::StructureShape.new(name: 'ListResourcePermissionStatementsOutput')
+    Long = Shapes::IntegerShape.new(name: 'Long')
+    NextToken = Shapes::StringShape.new(name: 'NextToken')
     OAuth2ErrorCode = Shapes::StringShape.new(name: 'OAuth2ErrorCode')
+    OAuthAccessToken = Shapes::StringShape.new(name: 'OAuthAccessToken')
+    PermissionStatementSummaries = Shapes::ListShape.new(name: 'PermissionStatementSummaries')
+    PermissionStatementSummary = Shapes::StructureShape.new(name: 'PermissionStatementSummary')
+    PolicyActions = Shapes::ListShape.new(name: 'PolicyActions')
+    PolicyStatement = Shapes::StructureShape.new(name: 'PolicyStatement')
+    PolicyStatements = Shapes::ListShape.new(name: 'PolicyStatements')
+    Principal = Shapes::MapShape.new(name: 'Principal')
+    PutConsoleAuthorizationConfigurationInput = Shapes::StructureShape.new(name: 'PutConsoleAuthorizationConfigurationInput')
+    PutConsoleAuthorizationConfigurationOutput = Shapes::StructureShape.new(name: 'PutConsoleAuthorizationConfigurationOutput')
+    PutResourcePermissionStatementInput = Shapes::StructureShape.new(name: 'PutResourcePermissionStatementInput')
+    PutResourcePermissionStatementOutput = Shapes::StructureShape.new(name: 'PutResourcePermissionStatementOutput')
     RedirectUri = Shapes::StringShape.new(name: 'RedirectUri')
     RefreshToken = Shapes::StringShape.new(name: 'RefreshToken')
+    RequestedRegion = Shapes::StringShape.new(name: 'RequestedRegion')
+    ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
+    RevocationToken = Shapes::StringShape.new(name: 'RevocationToken')
+    RevokeOAuth2TokenWithIAMRequest = Shapes::StructureShape.new(name: 'RevokeOAuth2TokenWithIAMRequest')
+    RevokeOAuth2TokenWithIAMResponse = Shapes::StructureShape.new(name: 'RevokeOAuth2TokenWithIAMResponse')
+    ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
+    SigninResourceBasedPolicy = Shapes::StructureShape.new(name: 'SigninResourceBasedPolicy')
+    SourceIp = Shapes::StringShape.new(name: 'SourceIp')
+    SourceVpc = Shapes::StringShape.new(name: 'SourceVpc')
+    SourceVpce = Shapes::StringShape.new(name: 'SourceVpce')
+    StatementId = Shapes::StringShape.new(name: 'StatementId')
     String = Shapes::StringShape.new(name: 'String')
+    TargetId = Shapes::StringShape.new(name: 'TargetId')
+    TokenExpiresIn = Shapes::IntegerShape.new(name: 'TokenExpiresIn')
     TokenType = Shapes::StringShape.new(name: 'TokenType')
+    TokenTypeHint = Shapes::StringShape.new(name: 'TokenTypeHint')
     TooManyRequestsError = Shapes::StructureShape.new(name: 'TooManyRequestsError')
     ValidationException = Shapes::StructureShape.new(name: 'ValidationException')
+    VpcSourceIp = Shapes::StringShape.new(name: 'VpcSourceIp')
 
     AccessDeniedException.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
     AccessDeniedException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
@@ -44,6 +101,18 @@ module Aws::Signin
     AccessToken.add_member(:session_token, Shapes::ShapeRef.new(shape: String, required: true, location_name: "sessionToken"))
     AccessToken.struct_class = Types::AccessToken
 
+    Condition.key = Shapes::ShapeRef.new(shape: String)
+    Condition.value = Shapes::ShapeRef.new(shape: ConditionValues)
+
+    ConditionBlock.key = Shapes::ShapeRef.new(shape: ConditionType)
+    ConditionBlock.value = Shapes::ShapeRef.new(shape: Condition)
+
+    ConditionValues.member = Shapes::ShapeRef.new(shape: String)
+
+    ConflictException.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
+    ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
+    ConflictException.struct_class = Types::ConflictException
+
     CreateOAuth2TokenRequest.add_member(:token_input, Shapes::ShapeRef.new(shape: CreateOAuth2TokenRequestBody, required: true, location_name: "tokenInput"))
     CreateOAuth2TokenRequest.struct_class = Types::CreateOAuth2TokenRequest
     CreateOAuth2TokenRequest[:payload] = :token_input
@@ -69,10 +138,132 @@ module Aws::Signin
     CreateOAuth2TokenResponseBody.add_member(:id_token, Shapes::ShapeRef.new(shape: IdToken, location_name: "idToken"))
     CreateOAuth2TokenResponseBody.struct_class = Types::CreateOAuth2TokenResponseBody
 
+    CreateOAuth2TokenWithIAMRequest.add_member(:grant_type, Shapes::ShapeRef.new(shape: ClientCredentialsGrantType, required: true, location_name: "grant_type"))
+    CreateOAuth2TokenWithIAMRequest.add_member(:resource, Shapes::ShapeRef.new(shape: CreateOAuth2TokenWithIAMRequestResourceString, required: true, location_name: "resource"))
+    CreateOAuth2TokenWithIAMRequest.struct_class = Types::CreateOAuth2TokenWithIAMRequest
+
+    CreateOAuth2TokenWithIAMResponse.add_member(:access_token, Shapes::ShapeRef.new(shape: OAuthAccessToken, required: true, location_name: "access_token"))
+    CreateOAuth2TokenWithIAMResponse.add_member(:token_type, Shapes::ShapeRef.new(shape: BearerTokenType, required: true, location_name: "token_type"))
+    CreateOAuth2TokenWithIAMResponse.add_member(:expires_in, Shapes::ShapeRef.new(shape: TokenExpiresIn, required: true, location_name: "expires_in"))
+    CreateOAuth2TokenWithIAMResponse.struct_class = Types::CreateOAuth2TokenWithIAMResponse
+
+    DeleteConsoleAuthorizationConfigurationInput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, location_name: "targetId"))
+    DeleteConsoleAuthorizationConfigurationInput.struct_class = Types::DeleteConsoleAuthorizationConfigurationInput
+
+    DeleteConsoleAuthorizationConfigurationOutput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, required: true, location_name: "targetId"))
+    DeleteConsoleAuthorizationConfigurationOutput.add_member(:scope, Shapes::ShapeRef.new(shape: String, required: true, location_name: "scope"))
+    DeleteConsoleAuthorizationConfigurationOutput.add_member(:console_authorization_enabled, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "consoleAuthorizationEnabled"))
+    DeleteConsoleAuthorizationConfigurationOutput.struct_class = Types::DeleteConsoleAuthorizationConfigurationOutput
+
+    DeleteResourcePermissionStatementInput.add_member(:statement_id, Shapes::ShapeRef.new(shape: StatementId, required: true, location_name: "statementId"))
+    DeleteResourcePermissionStatementInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
+    DeleteResourcePermissionStatementInput.struct_class = Types::DeleteResourcePermissionStatementInput
+
+    DeleteResourcePermissionStatementOutput.struct_class = Types::DeleteResourcePermissionStatementOutput
+
+    GetConsoleAuthorizationConfigurationInput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, location_name: "targetId"))
+    GetConsoleAuthorizationConfigurationInput.struct_class = Types::GetConsoleAuthorizationConfigurationInput
+
+    GetConsoleAuthorizationConfigurationOutput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, required: true, location_name: "targetId"))
+    GetConsoleAuthorizationConfigurationOutput.add_member(:scope, Shapes::ShapeRef.new(shape: String, required: true, location_name: "scope"))
+    GetConsoleAuthorizationConfigurationOutput.add_member(:console_authorization_enabled, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "consoleAuthorizationEnabled"))
+    GetConsoleAuthorizationConfigurationOutput.struct_class = Types::GetConsoleAuthorizationConfigurationOutput
+
+    GetResourcePolicyInput.struct_class = Types::GetResourcePolicyInput
+
+    GetResourcePolicyOutput.add_member(:signin_resource_based_policy, Shapes::ShapeRef.new(shape: SigninResourceBasedPolicy, required: true, location_name: "signinResourceBasedPolicy"))
+    GetResourcePolicyOutput.struct_class = Types::GetResourcePolicyOutput
+
     InternalServerException.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
     InternalServerException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     InternalServerException.struct_class = Types::InternalServerException
 
+    IntrospectOAuth2TokenWithIAMRequest.add_member(:token, Shapes::ShapeRef.new(shape: IntrospectionToken, required: true, location_name: "token"))
+    IntrospectOAuth2TokenWithIAMRequest.add_member(:token_type_hint, Shapes::ShapeRef.new(shape: TokenTypeHint, location_name: "token_type_hint"))
+    IntrospectOAuth2TokenWithIAMRequest.struct_class = Types::IntrospectOAuth2TokenWithIAMRequest
+
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:active, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "active"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:client_id, Shapes::ShapeRef.new(shape: String, location_name: "client_id"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:user_id, Shapes::ShapeRef.new(shape: String, location_name: "user_id"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:token_type, Shapes::ShapeRef.new(shape: IntrospectedTokenType, location_name: "token_type"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:exp, Shapes::ShapeRef.new(shape: Long, location_name: "exp"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:iat, Shapes::ShapeRef.new(shape: Long, location_name: "iat"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:nbf, Shapes::ShapeRef.new(shape: Long, location_name: "nbf"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:sub, Shapes::ShapeRef.new(shape: String, location_name: "sub"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:aud, Shapes::ShapeRef.new(shape: String, location_name: "aud"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:iss, Shapes::ShapeRef.new(shape: String, location_name: "iss"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:jti, Shapes::ShapeRef.new(shape: String, location_name: "jti"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:account_id, Shapes::ShapeRef.new(shape: AccountId, location_name: "account_id"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:signin_session, Shapes::ShapeRef.new(shape: String, location_name: "signin_session"))
+    IntrospectOAuth2TokenWithIAMResponse.add_member(:resource, Shapes::ShapeRef.new(shape: String, location_name: "resource"))
+    IntrospectOAuth2TokenWithIAMResponse.struct_class = Types::IntrospectOAuth2TokenWithIAMResponse
+
+    ListResourcePermissionStatementsInput.add_member(:max_results, Shapes::ShapeRef.new(shape: ConsolePermissionMaxResults, location_name: "maxResults"))
+    ListResourcePermissionStatementsInput.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    ListResourcePermissionStatementsInput.struct_class = Types::ListResourcePermissionStatementsInput
+
+    ListResourcePermissionStatementsOutput.add_member(:permission_statements, Shapes::ShapeRef.new(shape: PermissionStatementSummaries, required: true, location_name: "permissionStatements"))
+    ListResourcePermissionStatementsOutput.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    ListResourcePermissionStatementsOutput.struct_class = Types::ListResourcePermissionStatementsOutput
+
+    PermissionStatementSummaries.member = Shapes::ShapeRef.new(shape: PermissionStatementSummary)
+
+    PermissionStatementSummary.add_member(:sid, Shapes::ShapeRef.new(shape: StatementId, required: true, location_name: "sid"))
+    PermissionStatementSummary.add_member(:condition, Shapes::ShapeRef.new(shape: ConditionBlock, location_name: "condition"))
+    PermissionStatementSummary.struct_class = Types::PermissionStatementSummary
+
+    PolicyActions.member = Shapes::ShapeRef.new(shape: String)
+
+    PolicyStatement.add_member(:effect, Shapes::ShapeRef.new(shape: String, location_name: "Effect"))
+    PolicyStatement.add_member(:principal, Shapes::ShapeRef.new(shape: Principal, location_name: "Principal"))
+    PolicyStatement.add_member(:action, Shapes::ShapeRef.new(shape: PolicyActions, location_name: "Action"))
+    PolicyStatement.add_member(:resource, Shapes::ShapeRef.new(shape: String, location_name: "Resource"))
+    PolicyStatement.add_member(:condition, Shapes::ShapeRef.new(shape: ConditionBlock, location_name: "Condition"))
+    PolicyStatement.struct_class = Types::PolicyStatement
+
+    PolicyStatements.member = Shapes::ShapeRef.new(shape: PolicyStatement)
+
+    Principal.key = Shapes::ShapeRef.new(shape: String)
+    Principal.value = Shapes::ShapeRef.new(shape: String)
+
+    PutConsoleAuthorizationConfigurationInput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, location_name: "targetId"))
+    PutConsoleAuthorizationConfigurationInput.struct_class = Types::PutConsoleAuthorizationConfigurationInput
+
+    PutConsoleAuthorizationConfigurationOutput.add_member(:target_id, Shapes::ShapeRef.new(shape: TargetId, required: true, location_name: "targetId"))
+    PutConsoleAuthorizationConfigurationOutput.add_member(:scope, Shapes::ShapeRef.new(shape: String, required: true, location_name: "scope"))
+    PutConsoleAuthorizationConfigurationOutput.add_member(:console_authorization_enabled, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "consoleAuthorizationEnabled"))
+    PutConsoleAuthorizationConfigurationOutput.struct_class = Types::PutConsoleAuthorizationConfigurationOutput
+
+    PutResourcePermissionStatementInput.add_member(:source_vpc, Shapes::ShapeRef.new(shape: SourceVpc, location_name: "sourceVpc"))
+    PutResourcePermissionStatementInput.add_member(:signin_source_vpce, Shapes::ShapeRef.new(shape: SourceVpce, location_name: "signinSourceVpce"))
+    PutResourcePermissionStatementInput.add_member(:console_source_vpce, Shapes::ShapeRef.new(shape: SourceVpce, location_name: "consoleSourceVpce"))
+    PutResourcePermissionStatementInput.add_member(:vpc_source_ip, Shapes::ShapeRef.new(shape: VpcSourceIp, location_name: "vpcSourceIp"))
+    PutResourcePermissionStatementInput.add_member(:source_ip, Shapes::ShapeRef.new(shape: SourceIp, location_name: "sourceIp"))
+    PutResourcePermissionStatementInput.add_member(:requested_region, Shapes::ShapeRef.new(shape: RequestedRegion, location_name: "requestedRegion"))
+    PutResourcePermissionStatementInput.add_member(:excluded_principal, Shapes::ShapeRef.new(shape: ExcludedPrincipal, location_name: "excludedPrincipal"))
+    PutResourcePermissionStatementInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
+    PutResourcePermissionStatementInput.struct_class = Types::PutResourcePermissionStatementInput
+
+    PutResourcePermissionStatementOutput.add_member(:statement_id, Shapes::ShapeRef.new(shape: StatementId, required: true, location_name: "statementId"))
+    PutResourcePermissionStatementOutput.struct_class = Types::PutResourcePermissionStatementOutput
+
+    ResourceNotFoundException.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
+    ResourceNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
+    ResourceNotFoundException.struct_class = Types::ResourceNotFoundException
+
+    RevokeOAuth2TokenWithIAMRequest.add_member(:token, Shapes::ShapeRef.new(shape: RevocationToken, required: true, location_name: "token"))
+    RevokeOAuth2TokenWithIAMRequest.struct_class = Types::RevokeOAuth2TokenWithIAMRequest
+
+    RevokeOAuth2TokenWithIAMResponse.struct_class = Types::RevokeOAuth2TokenWithIAMResponse
+
+    ServiceQuotaExceededException.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
+    ServiceQuotaExceededException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
+    ServiceQuotaExceededException.struct_class = Types::ServiceQuotaExceededException
+
+    SigninResourceBasedPolicy.add_member(:version, Shapes::ShapeRef.new(shape: String, location_name: "Version"))
+    SigninResourceBasedPolicy.add_member(:statement, Shapes::ShapeRef.new(shape: PolicyStatements, location_name: "Statement"))
+    SigninResourceBasedPolicy.struct_class = Types::SigninResourceBasedPolicy
+
     TooManyRequestsError.add_member(:error, Shapes::ShapeRef.new(shape: OAuth2ErrorCode, required: true, location_name: "error"))
     TooManyRequestsError.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     TooManyRequestsError.struct_class = Types::TooManyRequestsError
@@ -113,6 +304,140 @@ module Aws::Signin
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
       end)
+
+      api.add_operation(:create_o_auth_2_token_with_iam, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CreateOAuth2TokenWithIAM"
+        o.http_method = "POST"
+        o.http_request_uri = "/v1/token?x-amz-client-auth-method=iam"
+        o.input = Shapes::ShapeRef.new(shape: CreateOAuth2TokenWithIAMRequest)
+        o.output = Shapes::ShapeRef.new(shape: CreateOAuth2TokenWithIAMResponse)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:delete_console_authorization_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteConsoleAuthorizationConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/delete-console-authorization-configuration"
+        o.input = Shapes::ShapeRef.new(shape: DeleteConsoleAuthorizationConfigurationInput)
+        o.output = Shapes::ShapeRef.new(shape: DeleteConsoleAuthorizationConfigurationOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:delete_resource_permission_statement, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteResourcePermissionStatement"
+        o.http_method = "POST"
+        o.http_request_uri = "/delete-resource-permission-statement"
+        o.input = Shapes::ShapeRef.new(shape: DeleteResourcePermissionStatementInput)
+        o.output = Shapes::ShapeRef.new(shape: DeleteResourcePermissionStatementOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:get_console_authorization_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetConsoleAuthorizationConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/get-console-authorization-configuration"
+        o.input = Shapes::ShapeRef.new(shape: GetConsoleAuthorizationConfigurationInput)
+        o.output = Shapes::ShapeRef.new(shape: GetConsoleAuthorizationConfigurationOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:get_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetResourcePolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/get-resource-policy"
+        o.input = Shapes::ShapeRef.new(shape: GetResourcePolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: GetResourcePolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:introspect_o_auth_2_token_with_iam, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "IntrospectOAuth2TokenWithIAM"
+        o.http_method = "POST"
+        o.http_request_uri = "/v1/introspect?x-amz-client-auth-method=iam"
+        o.input = Shapes::ShapeRef.new(shape: IntrospectOAuth2TokenWithIAMRequest)
+        o.output = Shapes::ShapeRef.new(shape: IntrospectOAuth2TokenWithIAMResponse)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:list_resource_permission_statements, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListResourcePermissionStatements"
+        o.http_method = "POST"
+        o.http_request_uri = "/list-resource-permission-statements"
+        o.input = Shapes::ShapeRef.new(shape: ListResourcePermissionStatementsInput)
+        o.output = Shapes::ShapeRef.new(shape: ListResourcePermissionStatementsOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
+      api.add_operation(:put_console_authorization_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutConsoleAuthorizationConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/put-console-authorization-configuration"
+        o.input = Shapes::ShapeRef.new(shape: PutConsoleAuthorizationConfigurationInput)
+        o.output = Shapes::ShapeRef.new(shape: PutConsoleAuthorizationConfigurationOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:put_resource_permission_statement, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutResourcePermissionStatement"
+        o.http_method = "POST"
+        o.http_request_uri = "/put-resource-permission-statement"
+        o.input = Shapes::ShapeRef.new(shape: PutResourcePermissionStatementInput)
+        o.output = Shapes::ShapeRef.new(shape: PutResourcePermissionStatementOutput)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:revoke_o_auth_2_token_with_iam, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "RevokeOAuth2TokenWithIAM"
+        o.http_method = "POST"
+        o.http_request_uri = "/v1/revoke?x-amz-client-auth-method=iam"
+        o.input = Shapes::ShapeRef.new(shape: RevokeOAuth2TokenWithIAMRequest)
+        o.output = Shapes::ShapeRef.new(shape: RevokeOAuth2TokenWithIAMResponse)
+        o.errors << Shapes::ShapeRef.new(shape: TooManyRequestsError)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
     end
 
   end

data/lib/aws-sdk-signin/endpoint_parameters.rb

@@ -30,11 +30,23 @@ module Aws::Signin
   #
   #   @return [string]
   #
+  # @!attribute is_control_plane
+  #   Indicates if the operation targets the control plane endpoint
+  #
+  #   @return [boolean]
+  #
+  # @!attribute is_o_auth_endpoint
+  #   Indicates if the operation targets the OAuth token endpoint
+  #
+  #   @return [boolean]
+  #
   EndpointParameters = Struct.new(
     :use_dual_stack,
     :use_fips,
     :endpoint,
     :region,
+    :is_control_plane,
+    :is_o_auth_endpoint,
   ) do
     include Aws::Structure
 
@@ -45,6 +57,8 @@ module Aws::Signin
         'UseFIPS' => :use_fips,
         'Endpoint' => :endpoint,
         'Region' => :region,
+        'IsControlPlane' => :is_control_plane,
+        'IsOAuthEndpoint' => :is_o_auth_endpoint,
       }.freeze
     end
 
@@ -55,6 +69,8 @@ module Aws::Signin
       self[:use_fips] = false if self[:use_fips].nil?
       self[:endpoint] = options[:endpoint]
       self[:region] = options[:region]
+      self[:is_control_plane] = options[:is_control_plane]
+      self[:is_o_auth_endpoint] = options[:is_o_auth_endpoint]
     end
 
     def self.create(config, options={})

data/lib/aws-sdk-signin/endpoint_provider.rb

@@ -10,6 +10,54 @@
 module Aws::Signin
   class EndpointProvider
     def resolve_endpoint(parameters)
+      if Aws::Endpoints::Matchers.set?(parameters.is_control_plane) && Aws::Endpoints::Matchers.boolean_equals?(parameters.is_control_plane, true) && Aws::Endpoints::Matchers.set?(parameters.region) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
+        if Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws")
+          return Aws::Endpoints::Endpoint.new(url: "https://signin.#{parameters.region}.api.aws", headers: {}, properties: {"authSchemes" => [{"name" => "sigv4", "signingName" => "signin", "signingRegion" => "#{parameters.region}"}]})
+        end
+        if Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-cn")
+          return Aws::Endpoints::Endpoint.new(url: "https://signin.#{parameters.region}.api.amazonwebservices.com.cn", headers: {}, properties: {"authSchemes" => [{"name" => "sigv4", "signingName" => "signin", "signingRegion" => "#{parameters.region}"}]})
+        end
+        return Aws::Endpoints::Endpoint.new(url: "https://signin.#{parameters.region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {"authSchemes" => [{"name" => "sigv4", "signingName" => "signin", "signingRegion" => "#{parameters.region}"}]})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.is_o_auth_endpoint) && Aws::Endpoints::Matchers.boolean_equals?(parameters.is_o_auth_endpoint, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
+        raise ArgumentError, "FIPS endpoints are not supported for OAuth operations. Disable FIPS or use a non-OAuth operation."
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.is_o_auth_endpoint) && Aws::Endpoints::Matchers.boolean_equals?(parameters.is_o_auth_endpoint, true) && Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.oauth.signin.aws", headers: {}, properties: {"authSchemes" => [{"name" => "sigv4", "signingName" => "signin", "signingRegion" => "#{parameters.region}"}]})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.aws.amazon.com", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-cn")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.amazonaws.cn", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-us-gov")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.amazonaws-us-gov.com", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-iso")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.c2shome.ic.gov", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-iso-b")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.sc2shome.sgov.gov", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-iso-f")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.csphome.hci.ic.gov", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-iso-e")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.csphome.adc-e.uk", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-eusc")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.amazonaws-eusc.eu", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && Aws::Endpoints::Matchers.string_equals?(parameters.region, "us-gov-west-1")
+        return Aws::Endpoints::Endpoint.new(url: "https://signin-fips.amazonaws-us-gov.com", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region)) && Aws::Endpoints::Matchers.string_equals?(Aws::Endpoints::Matchers.attr(partition_result, "name"), "aws-us-gov")
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin-fips.amazonaws-us-gov.com", headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(parameters.region) && Aws::Endpoints::Matchers.not(Aws::Endpoints::Matchers.set?(parameters.endpoint)) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, false) && Aws::Endpoints::Matchers.boolean_equals?(parameters.use_dual_stack, false) && (partition_result = Aws::Endpoints::Matchers.aws_partition(parameters.region))
+        return Aws::Endpoints::Endpoint.new(url: "https://#{parameters.region}.signin.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+      end
       if Aws::Endpoints::Matchers.set?(parameters.endpoint)
         if Aws::Endpoints::Matchers.boolean_equals?(parameters.use_fips, true)
           raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"

data/lib/aws-sdk-signin/endpoints.rb

@@ -12,9 +12,122 @@ module Aws::Signin
   # @api private
   module Endpoints
 
+    class CreateOAuth2TokenWithIAM
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_o_auth_endpoint: true,
+        )
+      end
+    end
+
+    class DeleteConsoleAuthorizationConfiguration
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class DeleteResourcePermissionStatement
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class GetConsoleAuthorizationConfiguration
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class GetResourcePolicy
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class IntrospectOAuth2TokenWithIAM
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_o_auth_endpoint: true,
+        )
+      end
+    end
+
+    class ListResourcePermissionStatements
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class PutConsoleAuthorizationConfiguration
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class PutResourcePermissionStatement
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_control_plane: true,
+        )
+      end
+    end
+
+    class RevokeOAuth2TokenWithIAM
+      def self.build(context)
+        Aws::Signin::EndpointParameters.create(
+          context.config,
+          is_o_auth_endpoint: true,
+        )
+      end
+    end
+
 
     def self.parameters_for_operation(context)
-      Aws::Signin::EndpointParameters.create(context.config)
+      case context.operation_name
+      when :create_o_auth_2_token_with_iam
+        CreateOAuth2TokenWithIAM.build(context)
+      when :delete_console_authorization_configuration
+        DeleteConsoleAuthorizationConfiguration.build(context)
+      when :delete_resource_permission_statement
+        DeleteResourcePermissionStatement.build(context)
+      when :get_console_authorization_configuration
+        GetConsoleAuthorizationConfiguration.build(context)
+      when :get_resource_policy
+        GetResourcePolicy.build(context)
+      when :introspect_o_auth_2_token_with_iam
+        IntrospectOAuth2TokenWithIAM.build(context)
+      when :list_resource_permission_statements
+        ListResourcePermissionStatements.build(context)
+      when :put_console_authorization_configuration
+        PutConsoleAuthorizationConfiguration.build(context)
+      when :put_resource_permission_statement
+        PutResourcePermissionStatement.build(context)
+      when :revoke_o_auth_2_token_with_iam
+        RevokeOAuth2TokenWithIAM.build(context)
+      else
+        Aws::Signin::EndpointParameters.create(context.config)
+      end
     end
   end
 end