aws-sdk-iam 1.32.0 → 1.33.0

Sign up to get free protection for your applications and to get access to all the features.
@@ -21,6 +21,7 @@ module Aws::IAM
21
21
  @name = extract_name(args, options)
22
22
  @data = options.delete(:data)
23
23
  @client = options.delete(:client) || Client.new(options)
24
+ @waiter_block_warned = false
24
25
  end
25
26
 
26
27
  # @!group Read-Only Attributes
@@ -351,8 +352,8 @@ module Aws::IAM
351
352
  # This parameter allows (through its [regex pattern][1]) a string of
352
353
  # characters consisting of either a forward slash (/) by itself or a
353
354
  # string that must begin and end with forward slashes. In addition, it
354
- # can contain any ASCII character from the ! (\\u0021) through the DEL
355
- # character (\\u007F), including most punctuation characters, digits,
355
+ # can contain any ASCII character from the ! (`\u0021`) through the DEL
356
+ # character (`\u007F`), including most punctuation characters, digits,
356
357
  # and upper and lowercased letters.
357
358
  #
358
359
  #
@@ -24,6 +24,7 @@ module Aws::IAM
24
24
  @name = extract_name(args, options)
25
25
  @data = options.delete(:data)
26
26
  @client = options.delete(:client) || Client.new(options)
27
+ @waiter_block_warned = false
27
28
  end
28
29
 
29
30
  # @!group Read-Only Attributes
@@ -217,13 +218,13 @@ module Aws::IAM
217
218
  # characters consisting of the following:
218
219
  #
219
220
  # * Any printable ASCII character ranging from the space character
220
- # (\\u0020) through the end of the ASCII character range
221
+ # (`\u0020`) through the end of the ASCII character range
221
222
  #
222
223
  # * The printable characters in the Basic Latin and Latin-1 Supplement
223
- # character set (through \\u00FF)
224
+ # character set (through `\u00FF`)
224
225
  #
225
- # * The special characters tab (\\u0009), line feed (\\u000A), and
226
- # carriage return (\\u000D)
226
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
227
+ # carriage return (`\u000D`)
227
228
  #
228
229
  #
229
230
  #
@@ -21,6 +21,7 @@ module Aws::IAM
21
21
  @arn = extract_arn(args, options)
22
22
  @data = options.delete(:data)
23
23
  @client = options.delete(:client) || Client.new(options)
24
+ @waiter_block_warned = false
24
25
  end
25
26
 
26
27
  # @!group Read-Only Attributes
@@ -21,6 +21,7 @@ module Aws::IAM
21
21
  @name = extract_name(args, options)
22
22
  @data = options.delete(:data)
23
23
  @client = options.delete(:client) || Client.new(options)
24
+ @waiter_block_warned = false
24
25
  end
25
26
 
26
27
  # @!group Read-Only Attributes
@@ -206,8 +207,8 @@ module Aws::IAM
206
207
  # This parameter allows (through its [regex pattern][1]) a string of
207
208
  # characters consisting of either a forward slash (/) by itself or a
208
209
  # string that must begin and end with forward slashes. In addition, it
209
- # can contain any ASCII character from the ! (\\u0021) through the DEL
210
- # character (\\u007F), including most punctuation characters, digits,
210
+ # can contain any ASCII character from the ! (`\u0021`) through the DEL
211
+ # character (`\u007F`), including most punctuation characters, digits,
211
212
  # and upper and lowercased letters.
212
213
  #
213
214
  #
@@ -24,6 +24,7 @@ module Aws::IAM
24
24
  @id = extract_id(args, options)
25
25
  @data = options.delete(:data)
26
26
  @client = options.delete(:client) || Client.new(options)
27
+ @waiter_block_warned = false
27
28
  end
28
29
 
29
30
  # @!group Read-Only Attributes
@@ -559,9 +559,9 @@ module Aws::IAM
559
559
  #
560
560
  # The [regex pattern][1] that is used to validate this parameter is a
561
561
  # string of characters. That string can include almost any printable
562
- # ASCII character from the space (\\u0020) through the end of the
563
- # ASCII character range (\\u00FF). You can also include the tab
564
- # (\\u0009), line feed (\\u000A), and carriage return (\\u000D)
562
+ # ASCII character from the space (`\u0020`) through the end of the
563
+ # ASCII character range (`\u00FF`). You can also include the tab
564
+ # (`\u0009`), line feed (`\u000A`), and carriage return (`\u000D`)
565
565
  # characters. Any of these characters are valid in a password.
566
566
  # However, many tools, such as the AWS Management Console, might
567
567
  # restrict the ability to type certain characters because they have
@@ -722,9 +722,9 @@ module Aws::IAM
722
722
  # This parameter allows (through its [regex pattern][2]) a string of
723
723
  # characters consisting of either a forward slash (/) by itself or a
724
724
  # string that must begin and end with forward slashes. In addition, it
725
- # can contain any ASCII character from the ! (\\u0021) through the DEL
726
- # character (\\u007F), including most punctuation characters, digits,
727
- # and upper and lowercased letters.
725
+ # can contain any ASCII character from the ! (`\u0021`) through the
726
+ # DEL character (`\u007F`), including most punctuation characters,
727
+ # digits, and upper and lowercased letters.
728
728
  #
729
729
  #
730
730
  #
@@ -794,9 +794,9 @@ module Aws::IAM
794
794
  # This parameter allows (through its [regex pattern][2]) a string of
795
795
  # characters consisting of either a forward slash (/) by itself or a
796
796
  # string that must begin and end with forward slashes. In addition, it
797
- # can contain any ASCII character from the ! (\\u0021) through the DEL
798
- # character (\\u007F), including most punctuation characters, digits,
799
- # and upper and lowercased letters.
797
+ # can contain any ASCII character from the ! (`\u0021`) through the
798
+ # DEL character (`\u007F`), including most punctuation characters,
799
+ # digits, and upper and lowercased letters.
800
800
  #
801
801
  #
802
802
  #
@@ -853,9 +853,9 @@ module Aws::IAM
853
853
  #
854
854
  # The [regex pattern][1] that is used to validate this parameter is a
855
855
  # string of characters. That string can include almost any printable
856
- # ASCII character from the space (\\u0020) through the end of the
857
- # ASCII character range (\\u00FF). You can also include the tab
858
- # (\\u0009), line feed (\\u000A), and carriage return (\\u000D)
856
+ # ASCII character from the space (`\u0020`) through the end of the
857
+ # ASCII character range (`\u00FF`). You can also include the tab
858
+ # (`\u0009`), line feed (`\u000A`), and carriage return (`\u000D`)
859
859
  # characters. Any of these characters are valid in a password.
860
860
  # However, many tools, such as the AWS Management Console, might
861
861
  # restrict the ability to type certain characters because they have
@@ -1016,9 +1016,9 @@ module Aws::IAM
1016
1016
  # This parameter allows (through its [regex pattern][2]) a string of
1017
1017
  # characters consisting of either a forward slash (/) by itself or a
1018
1018
  # string that must begin and end with forward slashes. In addition, it
1019
- # can contain any ASCII character from the ! (\\u0021) through the DEL
1020
- # character (\\u007F), including most punctuation characters, digits,
1021
- # and upper and lowercased letters.
1019
+ # can contain any ASCII character from the ! (`\u0021`) through the
1020
+ # DEL character (`\u007F`), including most punctuation characters,
1021
+ # digits, and upper and lowercased letters.
1022
1022
  #
1023
1023
  #
1024
1024
  #
@@ -1039,13 +1039,13 @@ module Aws::IAM
1039
1039
  # of characters consisting of the following:
1040
1040
  #
1041
1041
  # * Any printable ASCII character ranging from the space character
1042
- # (\\u0020) through the end of the ASCII character range
1042
+ # (`\u0020`) through the end of the ASCII character range
1043
1043
  #
1044
1044
  # * The printable characters in the Basic Latin and Latin-1 Supplement
1045
- # character set (through \\u00FF)
1045
+ # character set (through `\u00FF`)
1046
1046
  #
1047
- # * The special characters tab (\\u0009), line feed (\\u000A), and
1048
- # carriage return (\\u000D)
1047
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
1048
+ # carriage return (`\u000D`)
1049
1049
  #
1050
1050
  #
1051
1051
  #
@@ -1120,13 +1120,13 @@ module Aws::IAM
1120
1120
  # of characters consisting of the following:
1121
1121
  #
1122
1122
  # * Any printable ASCII character ranging from the space character
1123
- # (\\u0020) through the end of the ASCII character range
1123
+ # (`\u0020`) through the end of the ASCII character range
1124
1124
  #
1125
1125
  # * The printable characters in the Basic Latin and Latin-1 Supplement
1126
- # character set (through \\u00FF)
1126
+ # character set (through `\u00FF`)
1127
1127
  #
1128
- # * The special characters tab (\\u0009), line feed (\\u000A), and
1129
- # carriage return (\\u000D)
1128
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
1129
+ # carriage return (`\u000D`)
1130
1130
  #
1131
1131
  #
1132
1132
  #
@@ -1199,9 +1199,9 @@ module Aws::IAM
1199
1199
  # This parameter allows (through its [regex pattern][2]) a string of
1200
1200
  # characters consisting of either a forward slash (/) by itself or a
1201
1201
  # string that must begin and end with forward slashes. In addition, it
1202
- # can contain any ASCII character from the ! (\\u0021) through the DEL
1203
- # character (\\u007F), including most punctuation characters, digits,
1204
- # and upper and lowercased letters.
1202
+ # can contain any ASCII character from the ! (`\u0021`) through the
1203
+ # DEL character (`\u007F`), including most punctuation characters,
1204
+ # digits, and upper and lowercased letters.
1205
1205
  #
1206
1206
  #
1207
1207
  #
@@ -1232,13 +1232,13 @@ module Aws::IAM
1232
1232
  # of characters consisting of the following:
1233
1233
  #
1234
1234
  # * Any printable ASCII character ranging from the space character
1235
- # (\\u0020) through the end of the ASCII character range
1235
+ # (`\u0020`) through the end of the ASCII character range
1236
1236
  #
1237
1237
  # * The printable characters in the Basic Latin and Latin-1 Supplement
1238
- # character set (through \\u00FF)
1238
+ # character set (through `\u00FF`)
1239
1239
  #
1240
- # * The special characters tab (\\u0009), line feed (\\u000A), and
1241
- # carriage return (\\u000D)
1240
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
1241
+ # carriage return (`\u000D`)
1242
1242
  #
1243
1243
  # Upon success, the response includes the same trust policy in JSON
1244
1244
  # format.
@@ -1524,9 +1524,9 @@ module Aws::IAM
1524
1524
  # This parameter allows (through its [regex pattern][2]) a string of
1525
1525
  # characters consisting of either a forward slash (/) by itself or a
1526
1526
  # string that must begin and end with forward slashes. In addition, it
1527
- # can contain any ASCII character from the ! (\\u0021) through the DEL
1528
- # character (\\u007F), including most punctuation characters, digits,
1529
- # and upper and lowercased letters.
1527
+ # can contain any ASCII character from the ! (`\u0021`) through the
1528
+ # DEL character (`\u007F`), including most punctuation characters,
1529
+ # digits, and upper and lowercased letters.
1530
1530
  #
1531
1531
  #
1532
1532
  #
@@ -1606,9 +1606,9 @@ module Aws::IAM
1606
1606
  # This parameter allows (through its [regex pattern][2]) a string of
1607
1607
  # characters consisting of either a forward slash (/) by itself or a
1608
1608
  # string that must begin and end with forward slashes. In addition, it
1609
- # can contain any ASCII character from the ! (\\u0021) through the DEL
1610
- # character (\\u007F), including most punctuation characters, digits,
1611
- # and upper and lowercased letters.
1609
+ # can contain any ASCII character from the ! (`\u0021`) through the
1610
+ # DEL character (`\u007F`), including most punctuation characters,
1611
+ # digits, and upper and lowercased letters.
1612
1612
  #
1613
1613
  #
1614
1614
  #
@@ -2881,18 +2881,37 @@ module Aws::IAM
2881
2881
  # simulated user's account is part of an organization.
2882
2882
  # @return [Types::OrganizationsDecisionDetail]
2883
2883
  #
2884
+ # @!attribute [rw] permissions_boundary_decision_detail
2885
+ # Contains information about the effect that a permissions boundary
2886
+ # has on a policy simulation when the boundary is applied to an IAM
2887
+ # entity.
2888
+ # @return [Types::PermissionsBoundaryDecisionDetail]
2889
+ #
2884
2890
  # @!attribute [rw] eval_decision_details
2885
- # Additional details about the results of the evaluation decision.
2886
- # When there are both IAM policies and resource policies, this
2887
- # parameter explains how each set of policies contributes to the final
2888
- # evaluation decision. When simulating cross-account access to a
2889
- # resource, both the resource-based policy and the caller's IAM
2890
- # policy must grant access. See [How IAM Roles Differ from
2891
- # Resource-based Policies][1]
2891
+ # Additional details about the results of the cross-account evaluation
2892
+ # decision. This parameter is populated for only cross-account
2893
+ # simulations. It contains a brief summary of how each policy type
2894
+ # contributes to the final evaluation decision.
2895
+ #
2896
+ # If the simulation evaluates policies within the same account and
2897
+ # includes a resource ARN, then the parameter is present but the
2898
+ # response is empty. If the simulation evaluates policies within the
2899
+ # same account and specifies all resources (`*`), then the parameter
2900
+ # is not returned.
2901
+ #
2902
+ # When you make a cross-account request, AWS evaluates the request in
2903
+ # the trusting account and the trusted account. The request is allowed
2904
+ # only if both evaluations return `true`. For more information about
2905
+ # how policies are evaluated, see [Evaluating Policies Within a Single
2906
+ # Account][1].
2907
+ #
2908
+ # If an AWS Organizations SCP included in the evaluation denies
2909
+ # access, the simulation ends. In this case, policy evaluation does
2910
+ # not proceed any further and this parameter is not returned.
2892
2911
  #
2893
2912
  #
2894
2913
  #
2895
- # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_compare-resource-policies.html
2914
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html#policy-eval-basics
2896
2915
  # @return [Hash<String,String>]
2897
2916
  #
2898
2917
  # @!attribute [rw] resource_specific_results
@@ -2909,6 +2928,7 @@ module Aws::IAM
2909
2928
  :matched_statements,
2910
2929
  :missing_context_values,
2911
2930
  :organizations_decision_detail,
2931
+ :permissions_boundary_decision_detail,
2912
2932
  :eval_decision_details,
2913
2933
  :resource_specific_results)
2914
2934
  include Aws::Structure
@@ -3198,13 +3218,13 @@ module Aws::IAM
3198
3218
  # of characters consisting of the following:
3199
3219
  #
3200
3220
  # * Any printable ASCII character ranging from the space character
3201
- # (\\u0020) through the end of the ASCII character range
3221
+ # (`\u0020`) through the end of the ASCII character range
3202
3222
  #
3203
3223
  # * The printable characters in the Basic Latin and Latin-1 Supplement
3204
- # character set (through \\u00FF)
3224
+ # character set (through `\u00FF`)
3205
3225
  #
3206
- # * The special characters tab (\\u0009), line feed (\\u000A), and
3207
- # carriage return (\\u000D)
3226
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
3227
+ # carriage return (`\u000D`)
3208
3228
  #
3209
3229
  #
3210
3230
  #
@@ -3267,13 +3287,13 @@ module Aws::IAM
3267
3287
  # of characters consisting of the following:
3268
3288
  #
3269
3289
  # * Any printable ASCII character ranging from the space character
3270
- # (\\u0020) through the end of the ASCII character range
3290
+ # (`\u0020`) through the end of the ASCII character range
3271
3291
  #
3272
3292
  # * The printable characters in the Basic Latin and Latin-1 Supplement
3273
- # character set (through \\u00FF)
3293
+ # character set (through `\u00FF`)
3274
3294
  #
3275
- # * The special characters tab (\\u0009), line feed (\\u000A), and
3276
- # carriage return (\\u000D)
3295
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
3296
+ # carriage return (`\u000D`)
3277
3297
  #
3278
3298
  #
3279
3299
  #
@@ -4984,9 +5004,9 @@ module Aws::IAM
4984
5004
  # This parameter allows (through its [regex pattern][1]) a string of
4985
5005
  # characters consisting of either a forward slash (/) by itself or a
4986
5006
  # string that must begin and end with forward slashes. In addition, it
4987
- # can contain any ASCII character from the ! (\\u0021) through the DEL
4988
- # character (\\u007F), including most punctuation characters, digits,
4989
- # and upper and lowercased letters.
5007
+ # can contain any ASCII character from the ! (`\u0021`) through the
5008
+ # DEL character (`\u007F`), including most punctuation characters,
5009
+ # digits, and upper and lowercased letters.
4990
5010
  #
4991
5011
  #
4992
5012
  #
@@ -5087,9 +5107,9 @@ module Aws::IAM
5087
5107
  # This parameter allows (through its [regex pattern][1]) a string of
5088
5108
  # characters consisting of either a forward slash (/) by itself or a
5089
5109
  # string that must begin and end with forward slashes. In addition, it
5090
- # can contain any ASCII character from the ! (\\u0021) through the DEL
5091
- # character (\\u007F), including most punctuation characters, digits,
5092
- # and upper and lowercased letters.
5110
+ # can contain any ASCII character from the ! (`\u0021`) through the
5111
+ # DEL character (`\u007F`), including most punctuation characters,
5112
+ # digits, and upper and lowercased letters.
5093
5113
  #
5094
5114
  #
5095
5115
  #
@@ -5190,9 +5210,9 @@ module Aws::IAM
5190
5210
  # This parameter allows (through its [regex pattern][1]) a string of
5191
5211
  # characters consisting of either a forward slash (/) by itself or a
5192
5212
  # string that must begin and end with forward slashes. In addition, it
5193
- # can contain any ASCII character from the ! (\\u0021) through the DEL
5194
- # character (\\u007F), including most punctuation characters, digits,
5195
- # and upper and lowercased letters.
5213
+ # can contain any ASCII character from the ! (`\u0021`) through the
5214
+ # DEL character (`\u007F`), including most punctuation characters,
5215
+ # digits, and upper and lowercased letters.
5196
5216
  #
5197
5217
  #
5198
5218
  #
@@ -5303,9 +5323,9 @@ module Aws::IAM
5303
5323
  # This parameter allows (through its [regex pattern][1]) a string of
5304
5324
  # characters consisting of either a forward slash (/) by itself or a
5305
5325
  # string that must begin and end with forward slashes. In addition, it
5306
- # can contain any ASCII character from the ! (\\u0021) through the DEL
5307
- # character (\\u007F), including most punctuation characters, digits,
5308
- # and upper and lowercased letters.
5326
+ # can contain any ASCII character from the ! (`\u0021`) through the
5327
+ # DEL character (`\u007F`), including most punctuation characters,
5328
+ # digits, and upper and lowercased letters.
5309
5329
  #
5310
5330
  #
5311
5331
  #
@@ -5589,9 +5609,9 @@ module Aws::IAM
5589
5609
  # [regex pattern][1]) a string of characters consisting of either a
5590
5610
  # forward slash (/) by itself or a string that must begin and end with
5591
5611
  # forward slashes. In addition, it can contain any ASCII character
5592
- # from the ! (\\u0021) through the DEL character (\\u007F), including
5593
- # most punctuation characters, digits, and upper and lowercased
5594
- # letters.
5612
+ # from the ! (`\u0021`) through the DEL character (`\u007F`),
5613
+ # including most punctuation characters, digits, and upper and
5614
+ # lowercased letters.
5595
5615
  #
5596
5616
  #
5597
5617
  #
@@ -5760,9 +5780,9 @@ module Aws::IAM
5760
5780
  # (through its [regex pattern][1]) a string of characters consisting
5761
5781
  # of either a forward slash (/) by itself or a string that must begin
5762
5782
  # and end with forward slashes. In addition, it can contain any ASCII
5763
- # character from the ! (\\u0021) through the DEL character (\\u007F),
5764
- # including most punctuation characters, digits, and upper and
5765
- # lowercased letters.
5783
+ # character from the ! (`\u0021`) through the DEL character
5784
+ # (`\u007F`), including most punctuation characters, digits, and upper
5785
+ # and lowercased letters.
5766
5786
  #
5767
5787
  #
5768
5788
  #
@@ -6083,8 +6103,8 @@ module Aws::IAM
6083
6103
  # all policies. This parameter allows (through its [regex pattern][1])
6084
6104
  # a string of characters consisting of either a forward slash (/) by
6085
6105
  # itself or a string that must begin and end with forward slashes. In
6086
- # addition, it can contain any ASCII character from the ! (\\u0021)
6087
- # through the DEL character (\\u007F), including most punctuation
6106
+ # addition, it can contain any ASCII character from the ! (`\u0021`)
6107
+ # through the DEL character (`\u007F`), including most punctuation
6088
6108
  # characters, digits, and upper and lowercased letters.
6089
6109
  #
6090
6110
  #
@@ -6438,9 +6458,9 @@ module Aws::IAM
6438
6458
  # [regex pattern][1]) a string of characters consisting of either a
6439
6459
  # forward slash (/) by itself or a string that must begin and end with
6440
6460
  # forward slashes. In addition, it can contain any ASCII character
6441
- # from the ! (\\u0021) through the DEL character (\\u007F), including
6442
- # most punctuation characters, digits, and upper and lowercased
6443
- # letters.
6461
+ # from the ! (`\u0021`) through the DEL character (`\u007F`),
6462
+ # including most punctuation characters, digits, and upper and
6463
+ # lowercased letters.
6444
6464
  #
6445
6465
  #
6446
6466
  #
@@ -6630,9 +6650,9 @@ module Aws::IAM
6630
6650
  # (through its [regex pattern][1]) a string of characters consisting
6631
6651
  # of either a forward slash (/) by itself or a string that must begin
6632
6652
  # and end with forward slashes. In addition, it can contain any ASCII
6633
- # character from the ! (\\u0021) through the DEL character (\\u007F),
6634
- # including most punctuation characters, digits, and upper and
6635
- # lowercased letters.
6653
+ # character from the ! (`\u0021`) through the DEL character
6654
+ # (`\u007F`), including most punctuation characters, digits, and upper
6655
+ # and lowercased letters.
6636
6656
  #
6637
6657
  #
6638
6658
  #
@@ -7015,9 +7035,9 @@ module Aws::IAM
7015
7035
  # its [regex pattern][1]) a string of characters consisting of either
7016
7036
  # a forward slash (/) by itself or a string that must begin and end
7017
7037
  # with forward slashes. In addition, it can contain any ASCII
7018
- # character from the ! (\\u0021) through the DEL character (\\u007F),
7019
- # including most punctuation characters, digits, and upper and
7020
- # lowercased letters.
7038
+ # character from the ! (`\u0021`) through the DEL character
7039
+ # (`\u007F`), including most punctuation characters, digits, and upper
7040
+ # and lowercased letters.
7021
7041
  #
7022
7042
  #
7023
7043
  #
@@ -7509,6 +7529,29 @@ module Aws::IAM
7509
7529
  include Aws::Structure
7510
7530
  end
7511
7531
 
7532
+ # Contains information about the effect that a permissions boundary has
7533
+ # on a policy simulation when the boundary is applied to an IAM entity.
7534
+ #
7535
+ # @!attribute [rw] allowed_by_permissions_boundary
7536
+ # Specifies whether an action is allowed by a permissions boundary
7537
+ # that is applied to an IAM entity (user or role). A value of `true`
7538
+ # means that the permissions boundary does not deny the action. This
7539
+ # means that the policy includes an `Allow` statement that matches the
7540
+ # request. In this case, if an identity-based policy also allows the
7541
+ # action, the request is allowed. A value of `false` means that either
7542
+ # the requested action is not allowed (implicitly denied) or that the
7543
+ # action is explicitly denied by the permissions boundary. In both of
7544
+ # these cases, the action is not allowed, regardless of the
7545
+ # identity-based policy.
7546
+ # @return [Boolean]
7547
+ #
7548
+ # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/PermissionsBoundaryDecisionDetail AWS API Documentation
7549
+ #
7550
+ class PermissionsBoundaryDecisionDetail < Struct.new(
7551
+ :allowed_by_permissions_boundary)
7552
+ include Aws::Structure
7553
+ end
7554
+
7512
7555
  # Contains information about a managed policy.
7513
7556
  #
7514
7557
  # This data type is used as a response element in the CreatePolicy,
@@ -7988,13 +8031,13 @@ module Aws::IAM
7988
8031
  # of characters consisting of the following:
7989
8032
  #
7990
8033
  # * Any printable ASCII character ranging from the space character
7991
- # (\\u0020) through the end of the ASCII character range
8034
+ # (`\u0020`) through the end of the ASCII character range
7992
8035
  #
7993
8036
  # * The printable characters in the Basic Latin and Latin-1 Supplement
7994
- # character set (through \\u00FF)
8037
+ # character set (through `\u00FF`)
7995
8038
  #
7996
- # * The special characters tab (\\u0009), line feed (\\u000A), and
7997
- # carriage return (\\u000D)
8039
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
8040
+ # carriage return (`\u000D`)
7998
8041
  #
7999
8042
  #
8000
8043
  #
@@ -8083,13 +8126,13 @@ module Aws::IAM
8083
8126
  # of characters consisting of the following:
8084
8127
  #
8085
8128
  # * Any printable ASCII character ranging from the space character
8086
- # (\\u0020) through the end of the ASCII character range
8129
+ # (`\u0020`) through the end of the ASCII character range
8087
8130
  #
8088
8131
  # * The printable characters in the Basic Latin and Latin-1 Supplement
8089
- # character set (through \\u00FF)
8132
+ # character set (through `\u00FF`)
8090
8133
  #
8091
- # * The special characters tab (\\u0009), line feed (\\u000A), and
8092
- # carriage return (\\u000D)
8134
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
8135
+ # carriage return (`\u000D`)
8093
8136
  #
8094
8137
  #
8095
8138
  #
@@ -8178,13 +8221,13 @@ module Aws::IAM
8178
8221
  # of characters consisting of the following:
8179
8222
  #
8180
8223
  # * Any printable ASCII character ranging from the space character
8181
- # (\\u0020) through the end of the ASCII character range
8224
+ # (`\u0020`) through the end of the ASCII character range
8182
8225
  #
8183
8226
  # * The printable characters in the Basic Latin and Latin-1 Supplement
8184
- # character set (through \\u00FF)
8227
+ # character set (through `\u00FF`)
8185
8228
  #
8186
- # * The special characters tab (\\u0009), line feed (\\u000A), and
8187
- # carriage return (\\u000D)
8229
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
8230
+ # carriage return (`\u000D`)
8188
8231
  #
8189
8232
  #
8190
8233
  #
@@ -8427,14 +8470,18 @@ module Aws::IAM
8427
8470
  # @return [Array<String>]
8428
8471
  #
8429
8472
  # @!attribute [rw] eval_decision_details
8430
- # Additional details about the results of the evaluation decision.
8431
- # When there are both IAM policies and resource policies, this
8432
- # parameter explains how each set of policies contributes to the final
8433
- # evaluation decision. When simulating cross-account access to a
8434
- # resource, both the resource-based policy and the caller's IAM
8435
- # policy must grant access.
8473
+ # Additional details about the results of the evaluation decision on a
8474
+ # single resource. This parameter is returned only for cross-account
8475
+ # simulations. This parameter explains how each policy type
8476
+ # contributes to the resource-specific evaluation decision.
8436
8477
  # @return [Hash<String,String>]
8437
8478
  #
8479
+ # @!attribute [rw] permissions_boundary_decision_detail
8480
+ # Contains information about the effect that a permissions boundary
8481
+ # has on a policy simulation when that boundary is applied to an IAM
8482
+ # entity.
8483
+ # @return [Types::PermissionsBoundaryDecisionDetail]
8484
+ #
8438
8485
  # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/ResourceSpecificResult AWS API Documentation
8439
8486
  #
8440
8487
  class ResourceSpecificResult < Struct.new(
@@ -8442,7 +8489,8 @@ module Aws::IAM
8442
8489
  :eval_resource_decision,
8443
8490
  :matched_statements,
8444
8491
  :missing_context_values,
8445
- :eval_decision_details)
8492
+ :eval_decision_details,
8493
+ :permissions_boundary_decision_detail)
8446
8494
  include Aws::Structure
8447
8495
  end
8448
8496
 
@@ -9310,6 +9358,7 @@ module Aws::IAM
9310
9358
  #
9311
9359
  # {
9312
9360
  # policy_input_list: ["policyDocumentType"], # required
9361
+ # permissions_boundary_policy_input_list: ["policyDocumentType"],
9313
9362
  # action_names: ["ActionNameType"], # required
9314
9363
  # resource_arns: ["ResourceNameType"],
9315
9364
  # resource_policy: "policyDocumentType",
@@ -9342,13 +9391,13 @@ module Aws::IAM
9342
9391
  # of characters consisting of the following:
9343
9392
  #
9344
9393
  # * Any printable ASCII character ranging from the space character
9345
- # (\\u0020) through the end of the ASCII character range
9394
+ # (`\u0020`) through the end of the ASCII character range
9346
9395
  #
9347
9396
  # * The printable characters in the Basic Latin and Latin-1 Supplement
9348
- # character set (through \\u00FF)
9397
+ # character set (through `\u00FF`)
9349
9398
  #
9350
- # * The special characters tab (\\u0009), line feed (\\u000A), and
9351
- # carriage return (\\u000D)
9399
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9400
+ # carriage return (`\u000D`)
9352
9401
  #
9353
9402
  #
9354
9403
  #
@@ -9357,6 +9406,34 @@ module Aws::IAM
9357
9406
  # [3]: http://wikipedia.org/wiki/regex
9358
9407
  # @return [Array<String>]
9359
9408
  #
9409
+ # @!attribute [rw] permissions_boundary_policy_input_list
9410
+ # The IAM permissions boundary policy to simulate. The permissions
9411
+ # boundary sets the maximum permissions that an IAM entity can have.
9412
+ # You can input only one permissions boundary when you pass a policy
9413
+ # to this operation. For more information about permissions
9414
+ # boundaries, see [Permissions Boundaries for IAM Entities][1] in the
9415
+ # *IAM User Guide*. The policy input is specified as a string that
9416
+ # contains the complete, valid JSON text of a permissions boundary
9417
+ # policy.
9418
+ #
9419
+ # The [regex pattern][2] used to validate this parameter is a string
9420
+ # of characters consisting of the following:
9421
+ #
9422
+ # * Any printable ASCII character ranging from the space character
9423
+ # (`\u0020`) through the end of the ASCII character range
9424
+ #
9425
+ # * The printable characters in the Basic Latin and Latin-1 Supplement
9426
+ # character set (through `\u00FF`)
9427
+ #
9428
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9429
+ # carriage return (`\u000D`)
9430
+ #
9431
+ #
9432
+ #
9433
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
9434
+ # [2]: http://wikipedia.org/wiki/regex
9435
+ # @return [Array<String>]
9436
+ #
9360
9437
  # @!attribute [rw] action_names
9361
9438
  # A list of names of API operations to evaluate in the simulation.
9362
9439
  # Each operation is evaluated against each resource. Each operation
@@ -9399,13 +9476,13 @@ module Aws::IAM
9399
9476
  # of characters consisting of the following:
9400
9477
  #
9401
9478
  # * Any printable ASCII character ranging from the space character
9402
- # (\\u0020) through the end of the ASCII character range
9479
+ # (`\u0020`) through the end of the ASCII character range
9403
9480
  #
9404
9481
  # * The printable characters in the Basic Latin and Latin-1 Supplement
9405
- # character set (through \\u00FF)
9482
+ # character set (through `\u00FF`)
9406
9483
  #
9407
- # * The special characters tab (\\u0009), line feed (\\u000A), and
9408
- # carriage return (\\u000D)
9484
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9485
+ # carriage return (`\u000D`)
9409
9486
  #
9410
9487
  #
9411
9488
  #
@@ -9519,6 +9596,7 @@ module Aws::IAM
9519
9596
  #
9520
9597
  class SimulateCustomPolicyRequest < Struct.new(
9521
9598
  :policy_input_list,
9599
+ :permissions_boundary_policy_input_list,
9522
9600
  :action_names,
9523
9601
  :resource_arns,
9524
9602
  :resource_policy,
@@ -9569,6 +9647,7 @@ module Aws::IAM
9569
9647
  # {
9570
9648
  # policy_source_arn: "arnType", # required
9571
9649
  # policy_input_list: ["policyDocumentType"],
9650
+ # permissions_boundary_policy_input_list: ["policyDocumentType"],
9572
9651
  # action_names: ["ActionNameType"], # required
9573
9652
  # resource_arns: ["ResourceNameType"],
9574
9653
  # resource_policy: "policyDocumentType",
@@ -9611,19 +9690,51 @@ module Aws::IAM
9611
9690
  # of characters consisting of the following:
9612
9691
  #
9613
9692
  # * Any printable ASCII character ranging from the space character
9614
- # (\\u0020) through the end of the ASCII character range
9693
+ # (`\u0020`) through the end of the ASCII character range
9615
9694
  #
9616
9695
  # * The printable characters in the Basic Latin and Latin-1 Supplement
9617
- # character set (through \\u00FF)
9696
+ # character set (through `\u00FF`)
9618
9697
  #
9619
- # * The special characters tab (\\u0009), line feed (\\u000A), and
9620
- # carriage return (\\u000D)
9698
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9699
+ # carriage return (`\u000D`)
9621
9700
  #
9622
9701
  #
9623
9702
  #
9624
9703
  # [1]: http://wikipedia.org/wiki/regex
9625
9704
  # @return [Array<String>]
9626
9705
  #
9706
+ # @!attribute [rw] permissions_boundary_policy_input_list
9707
+ # The IAM permissions boundary policy to simulate. The permissions
9708
+ # boundary sets the maximum permissions that the entity can have. You
9709
+ # can input only one permissions boundary when you pass a policy to
9710
+ # this operation. An IAM entity can only have one permissions boundary
9711
+ # in effect at a time. For example, if a permissions boundary is
9712
+ # attached to an entity and you pass in a different permissions
9713
+ # boundary policy using this parameter, then the new permission
9714
+ # boundary policy is used for the simulation. For more information
9715
+ # about permissions boundaries, see [Permissions Boundaries for IAM
9716
+ # Entities][1] in the *IAM User Guide*. The policy input is specified
9717
+ # as a string containing the complete, valid JSON text of a
9718
+ # permissions boundary policy.
9719
+ #
9720
+ # The [regex pattern][2] used to validate this parameter is a string
9721
+ # of characters consisting of the following:
9722
+ #
9723
+ # * Any printable ASCII character ranging from the space character
9724
+ # (`\u0020`) through the end of the ASCII character range
9725
+ #
9726
+ # * The printable characters in the Basic Latin and Latin-1 Supplement
9727
+ # character set (through `\u00FF`)
9728
+ #
9729
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9730
+ # carriage return (`\u000D`)
9731
+ #
9732
+ #
9733
+ #
9734
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
9735
+ # [2]: http://wikipedia.org/wiki/regex
9736
+ # @return [Array<String>]
9737
+ #
9627
9738
  # @!attribute [rw] action_names
9628
9739
  # A list of names of API operations to evaluate in the simulation.
9629
9740
  # Each operation is evaluated for each resource. Each operation must
@@ -9661,13 +9772,13 @@ module Aws::IAM
9661
9772
  # of characters consisting of the following:
9662
9773
  #
9663
9774
  # * Any printable ASCII character ranging from the space character
9664
- # (\\u0020) through the end of the ASCII character range
9775
+ # (`\u0020`) through the end of the ASCII character range
9665
9776
  #
9666
9777
  # * The printable characters in the Basic Latin and Latin-1 Supplement
9667
- # character set (through \\u00FF)
9778
+ # character set (through `\u00FF`)
9668
9779
  #
9669
- # * The special characters tab (\\u0009), line feed (\\u000A), and
9670
- # carriage return (\\u000D)
9780
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
9781
+ # carriage return (`\u000D`)
9671
9782
  #
9672
9783
  #
9673
9784
  #
@@ -9794,6 +9905,7 @@ module Aws::IAM
9794
9905
  class SimulatePrincipalPolicyRequest < Struct.new(
9795
9906
  :policy_source_arn,
9796
9907
  :policy_input_list,
9908
+ :permissions_boundary_policy_input_list,
9797
9909
  :action_names,
9798
9910
  :resource_arns,
9799
9911
  :resource_policy,
@@ -10261,13 +10373,13 @@ module Aws::IAM
10261
10373
  # of characters consisting of the following:
10262
10374
  #
10263
10375
  # * Any printable ASCII character ranging from the space character
10264
- # (\\u0020) through the end of the ASCII character range
10376
+ # (`\u0020`) through the end of the ASCII character range
10265
10377
  #
10266
10378
  # * The printable characters in the Basic Latin and Latin-1 Supplement
10267
- # character set (through \\u00FF)
10379
+ # character set (through `\u00FF`)
10268
10380
  #
10269
- # * The special characters tab (\\u0009), line feed (\\u000A), and
10270
- # carriage return (\\u000D)
10381
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
10382
+ # carriage return (`\u000D`)
10271
10383
  #
10272
10384
  #
10273
10385
  #
@@ -10312,9 +10424,9 @@ module Aws::IAM
10312
10424
  # This parameter allows (through its [regex pattern][1]) a string of
10313
10425
  # characters consisting of either a forward slash (/) by itself or a
10314
10426
  # string that must begin and end with forward slashes. In addition, it
10315
- # can contain any ASCII character from the ! (\\u0021) through the DEL
10316
- # character (\\u007F), including most punctuation characters, digits,
10317
- # and upper and lowercased letters.
10427
+ # can contain any ASCII character from the ! (`\u0021`) through the
10428
+ # DEL character (`\u007F`), including most punctuation characters,
10429
+ # digits, and upper and lowercased letters.
10318
10430
  #
10319
10431
  #
10320
10432
  #
@@ -10369,13 +10481,13 @@ module Aws::IAM
10369
10481
  # of characters consisting of the following:
10370
10482
  #
10371
10483
  # * Any printable ASCII character ranging from the space character
10372
- # (\\u0020) through the end of the ASCII character range
10484
+ # (`\u0020`) through the end of the ASCII character range
10373
10485
  #
10374
10486
  # * The printable characters in the Basic Latin and Latin-1 Supplement
10375
- # character set (through \\u00FF)
10487
+ # character set (through `\u00FF`)
10376
10488
  #
10377
- # * The special characters tab (\\u0009), line feed (\\u000A), and
10378
- # carriage return (\\u000D)
10489
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
10490
+ # carriage return (`\u000D`)
10379
10491
  #
10380
10492
  # However, the format can be further restricted by the account
10381
10493
  # administrator by setting a password policy on the AWS account. For
@@ -10652,9 +10764,9 @@ module Aws::IAM
10652
10764
  # This parameter allows (through its [regex pattern][1]) a string of
10653
10765
  # characters consisting of either a forward slash (/) by itself or a
10654
10766
  # string that must begin and end with forward slashes. In addition, it
10655
- # can contain any ASCII character from the ! (\\u0021) through the DEL
10656
- # character (\\u007F), including most punctuation characters, digits,
10657
- # and upper and lowercased letters.
10767
+ # can contain any ASCII character from the ! (`\u0021`) through the
10768
+ # DEL character (`\u007F`), including most punctuation characters,
10769
+ # digits, and upper and lowercased letters.
10658
10770
  #
10659
10771
  #
10660
10772
  #
@@ -10813,9 +10925,9 @@ module Aws::IAM
10813
10925
  # This parameter allows (through its [regex pattern][1]) a string of
10814
10926
  # characters consisting of either a forward slash (/) by itself or a
10815
10927
  # string that must begin and end with forward slashes. In addition, it
10816
- # can contain any ASCII character from the ! (\\u0021) through the DEL
10817
- # character (\\u007F), including most punctuation characters, digits,
10818
- # and upper and lowercased letters.
10928
+ # can contain any ASCII character from the ! (`\u0021`) through the
10929
+ # DEL character (`\u007F`), including most punctuation characters,
10930
+ # digits, and upper and lowercased letters.
10819
10931
  #
10820
10932
  #
10821
10933
  #
@@ -10872,13 +10984,13 @@ module Aws::IAM
10872
10984
  # of characters consisting of the following:
10873
10985
  #
10874
10986
  # * Any printable ASCII character ranging from the space character
10875
- # (\\u0020) through the end of the ASCII character range
10987
+ # (`\u0020`) through the end of the ASCII character range
10876
10988
  #
10877
10989
  # * The printable characters in the Basic Latin and Latin-1 Supplement
10878
- # character set (through \\u00FF)
10990
+ # character set (through `\u00FF`)
10879
10991
  #
10880
- # * The special characters tab (\\u0009), line feed (\\u000A), and
10881
- # carriage return (\\u000D)
10992
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
10993
+ # carriage return (`\u000D`)
10882
10994
  #
10883
10995
  #
10884
10996
  #
@@ -10925,8 +11037,8 @@ module Aws::IAM
10925
11037
  # slash (/). This parameter allows (through its [regex pattern][2]) a
10926
11038
  # string of characters consisting of either a forward slash (/) by
10927
11039
  # itself or a string that must begin and end with forward slashes. In
10928
- # addition, it can contain any ASCII character from the ! (\\u0021)
10929
- # through the DEL character (\\u007F), including most punctuation
11040
+ # addition, it can contain any ASCII character from the ! (`\u0021`)
11041
+ # through the DEL character (`\u007F`), including most punctuation
10930
11042
  # characters, digits, and upper and lowercased letters.
10931
11043
  #
10932
11044
  # <note markdown="1"> If you are uploading a server certificate specifically for use with
@@ -10963,13 +11075,13 @@ module Aws::IAM
10963
11075
  # of characters consisting of the following:
10964
11076
  #
10965
11077
  # * Any printable ASCII character ranging from the space character
10966
- # (\\u0020) through the end of the ASCII character range
11078
+ # (`\u0020`) through the end of the ASCII character range
10967
11079
  #
10968
11080
  # * The printable characters in the Basic Latin and Latin-1 Supplement
10969
- # character set (through \\u00FF)
11081
+ # character set (through `\u00FF`)
10970
11082
  #
10971
- # * The special characters tab (\\u0009), line feed (\\u000A), and
10972
- # carriage return (\\u000D)
11083
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
11084
+ # carriage return (`\u000D`)
10973
11085
  #
10974
11086
  #
10975
11087
  #
@@ -10983,13 +11095,13 @@ module Aws::IAM
10983
11095
  # of characters consisting of the following:
10984
11096
  #
10985
11097
  # * Any printable ASCII character ranging from the space character
10986
- # (\\u0020) through the end of the ASCII character range
11098
+ # (`\u0020`) through the end of the ASCII character range
10987
11099
  #
10988
11100
  # * The printable characters in the Basic Latin and Latin-1 Supplement
10989
- # character set (through \\u00FF)
11101
+ # character set (through `\u00FF`)
10990
11102
  #
10991
- # * The special characters tab (\\u0009), line feed (\\u000A), and
10992
- # carriage return (\\u000D)
11103
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
11104
+ # carriage return (`\u000D`)
10993
11105
  #
10994
11106
  #
10995
11107
  #
@@ -11005,13 +11117,13 @@ module Aws::IAM
11005
11117
  # of characters consisting of the following:
11006
11118
  #
11007
11119
  # * Any printable ASCII character ranging from the space character
11008
- # (\\u0020) through the end of the ASCII character range
11120
+ # (`\u0020`) through the end of the ASCII character range
11009
11121
  #
11010
11122
  # * The printable characters in the Basic Latin and Latin-1 Supplement
11011
- # character set (through \\u00FF)
11123
+ # character set (through `\u00FF`)
11012
11124
  #
11013
- # * The special characters tab (\\u0009), line feed (\\u000A), and
11014
- # carriage return (\\u000D)
11125
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
11126
+ # carriage return (`\u000D`)
11015
11127
  #
11016
11128
  #
11017
11129
  #
@@ -11071,13 +11183,13 @@ module Aws::IAM
11071
11183
  # of characters consisting of the following:
11072
11184
  #
11073
11185
  # * Any printable ASCII character ranging from the space character
11074
- # (\\u0020) through the end of the ASCII character range
11186
+ # (`\u0020`) through the end of the ASCII character range
11075
11187
  #
11076
11188
  # * The printable characters in the Basic Latin and Latin-1 Supplement
11077
- # character set (through \\u00FF)
11189
+ # character set (through `\u00FF`)
11078
11190
  #
11079
- # * The special characters tab (\\u0009), line feed (\\u000A), and
11080
- # carriage return (\\u000D)
11191
+ # * The special characters tab (`\u0009`), line feed (`\u000A`), and
11192
+ # carriage return (`\u000D`)
11081
11193
  #
11082
11194
  #
11083
11195
  #