aws-sdk-iam 1.39.0 → 1.44.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '086f8194faa4dda8254d6053c3c2606092a537a46624c9d6e5a159f5506431d5'
-  data.tar.gz: 62e40109086cdd1bb34a6cb886329219dc781e248ba791ac83d20a87ef0d8362
+  metadata.gz: 2cef364b17c59de953ba086a699ea0a75e8bb0f6ada6f67c25b84bb5c1031209
+  data.tar.gz: 7ae862facff9e3e7148aa22e6fe477ad2ecba6d4bdfbef7835736dd0792a46ea
 SHA512:
-  metadata.gz: 70434a577f415496951934e86db86a7653da7b5505d2f45d6532666155c1b2fc768e1eeadae1b9b35b1086c9115364b11c168b0b2d316ae3c06d560450933ba9
-  data.tar.gz: 284262a384e6dc7abee1508eb9604b42fe4d649b18e6c27b0b3130da0a78dcbc36307e6bf80597147169acf39dd74c766f6716fc5629a00c91d18754bb540957
+  metadata.gz: e5c862130dc821f106ccc534a8832afc82c840d4f6b006418fd2cf901eb888db2107bbb3d62ff397249e091dced18eb563c0d3d7852bf01885ac6e40485726f5
+  data.tar.gz: dc009c40980ad7b7f05e8207a2ff070ebe32d98430672ec0029b47512bffe5000247aa6b71c53ac9375e6bc5673dd941d49b4409e0445c2605c5492294b468dd

data/lib/aws-sdk-iam.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -64,9 +66,9 @@ require_relative 'aws-sdk-iam/customizations'
 #
 # See {Errors} for more information.
 #
-# @service
+# @!group service
 module Aws::IAM
 
-  GEM_VERSION = '1.39.0'
+  GEM_VERSION = '1.44.0'
 
 end

data/lib/aws-sdk-iam/access_key.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/access_key_pair.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/account_password_policy.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/account_summary.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/assume_role_policy.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/client.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -24,6 +26,7 @@ require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
 require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
+require 'aws-sdk-core/plugins/http_checksum.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
 require 'aws-sdk-core/plugins/protocols/query.rb'
 
@@ -69,6 +72,7 @@ module Aws::IAM
     add_plugin(Aws::Plugins::ClientMetricsPlugin)
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
+    add_plugin(Aws::Plugins::HttpChecksum)
     add_plugin(Aws::Plugins::SignatureV4)
     add_plugin(Aws::Plugins::Protocols::Query)
 
@@ -81,13 +85,28 @@ module Aws::IAM
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
     #       credentials.
     #
+    #     * `Aws::SharedCredentials` - Used for loading static credentials from a
+    #       shared file, such as `~/.aws/config`.
+    #
+    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #
+    #     * `Aws::AssumeRoleWebIdentityCredentials` - Used when you need to
+    #       assume a role after providing credentials via the web.
+    #
+    #     * `Aws::SSOCredentials` - Used for loading credentials from AWS SSO using an
+    #       access token generated from `aws login`.
+    #
+    #     * `Aws::ProcessCredentials` - Used for loading credentials from a
+    #       process that outputs to stdout.
+    #
     #     * `Aws::InstanceProfileCredentials` - Used for loading credentials
     #       from an EC2 IMDS on an EC2 instance.
     #
-    #     * `Aws::SharedCredentials` - Used for loading credentials from a
-    #       shared file, such as `~/.aws/config`.
+    #     * `Aws::ECSCredentials` - Used for loading credentials from
+    #       instances running in ECS.
     #
-    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #     * `Aws::CognitoIdentityCredentials` - Used for loading credentials
+    #       from the Cognito Identity service.
     #
     #     When `:credentials` are not configured directly, the following
     #     locations will be searched for credentials:
@@ -97,10 +116,10 @@ module Aws::IAM
     #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
-    #     * EC2 IMDS instance profile - When used by default, the timeouts are
-    #       very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` to enable retries and extended
-    #       timeouts.
+    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
+    #       are very aggressive. Construct and pass an instance of
+    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       enable retries and extended timeouts.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -161,7 +180,7 @@ module Aws::IAM
     #   @option options [String] :endpoint
     #     The client endpoint is normally constructed from the `:region`
     #     option. You should only configure an `:endpoint` when connecting
-    #     to test endpoints. This should be a valid HTTP(S) URI.
+    #     to test or custom endpoints. This should be a valid HTTP(S) URI.
     #
     #   @option options [Integer] :endpoint_cache_max_entries (1000)
     #     Used for the maximum size limit of the LRU cache storing endpoints data
@@ -354,30 +373,33 @@ module Aws::IAM
     end
 
     # Adds the specified IAM role to the specified instance profile. An
-    # instance profile can contain only one role, and this limit cannot be
-    # increased. You can remove the existing role and then add a different
-    # role to an instance profile. You must then wait for the change to
-    # appear across all of AWS because of [eventual consistency][1]. To
-    # force the change, you must [disassociate the instance profile][2] and
-    # then [associate the instance profile][3], or you can stop your
-    # instance and then restart it.
+    # instance profile can contain only one role. (The number and size of
+    # IAM resources in an AWS account are limited. For more information, see
+    # [IAM and STS Quotas][1] in the *IAM User Guide*.) You can remove the
+    # existing role and then add a different role to an instance profile.
+    # You must then wait for the change to appear across all of AWS because
+    # of [eventual consistency][2]. To force the change, you must
+    # [disassociate the instance profile][3] and then [associate the
+    # instance profile][4], or you can stop your instance and then restart
+    # it.
     #
     # <note markdown="1"> The caller of this API must be granted the `PassRole` permission on
     # the IAM role by a permissions policy.
     #
     #  </note>
     #
-    # For more information about roles, go to [Working with Roles][4]. For
+    # For more information about roles, go to [Working with Roles][5]. For
     # more information about instance profiles, go to [About Instance
-    # Profiles][5].
+    # Profiles][6].
     #
     #
     #
-    # [1]: https://en.wikipedia.org/wiki/Eventual_consistency
-    # [2]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIamInstanceProfile.html
-    # [3]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AssociateIamInstanceProfile.html
-    # [4]: https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html
-    # [5]: https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
+    # [2]: https://en.wikipedia.org/wiki/Eventual_consistency
+    # [3]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIamInstanceProfile.html
+    # [4]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AssociateIamInstanceProfile.html
+    # [5]: https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html
+    # [6]: https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html
     #
     # @option params [required, String] :instance_profile_name
     #   The name of the instance profile to update.
@@ -751,8 +773,9 @@ module Aws::IAM
     # credentials. This is true even if the AWS account has no associated
     # users.
     #
-    # For information about limits on the number of keys you can create, see
-    # [Limitations on IAM Entities][1] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][1] in the *IAM User
+    # Guide*.
     #
     # To ensure the security of your AWS account, the secret access key is
     # accessible only during key and user creation. You must save the key
@@ -762,7 +785,7 @@ module Aws::IAM
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [String] :user_name
     #   The name of the IAM user that the new key will belong to.
@@ -871,12 +894,13 @@ module Aws::IAM
 
     # Creates a new group.
     #
-    # For information about the number of groups you can create, see
-    # [Limitations on IAM Entities][1] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][1] in the *IAM User
+    # Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [String] :path
     #   The path to the group. For more information about paths, see [IAM
@@ -956,13 +980,14 @@ module Aws::IAM
     # Creates a new instance profile. For information about instance
     # profiles, go to [About Instance Profiles][1].
     #
-    # For information about the number of instance profiles you can create,
-    # see [Limitations on IAM Entities][2] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][2] in the *IAM User
+    # Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html
-    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [required, String] :instance_profile_name
     #   The name of the instance profile to create.
@@ -1492,14 +1517,14 @@ module Aws::IAM
     end
 
     # Creates a new role for your AWS account. For more information about
-    # roles, go to [IAM Roles][1]. For information about limitations on role
-    # names and the number of roles you can create, go to [Limitations on
-    # IAM Entities][2] in the *IAM User Guide*.
+    # roles, go to [IAM Roles][1]. The number and size of IAM resources in
+    # an AWS account are limited. For more information, see [IAM and STS
+    # Quotas][2] in the *IAM User Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html
-    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [String] :path
     #   The path to the role. For more information about paths, see [IAM
@@ -1912,12 +1937,13 @@ module Aws::IAM
 
     # Creates a new IAM user for your AWS account.
     #
-    # For information about limitations on the number of IAM users you can
-    # create, see [Limitations on IAM Entities][1] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][1] in the *IAM User
+    # Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [String] :path
     #   The path for the user name. For more information about paths, see [IAM
@@ -2032,8 +2058,9 @@ module Aws::IAM
     # MFA devices, go to [Using a Virtual MFA Device][1] in the *IAM User
     # Guide*.
     #
-    # For information about limits on the number of MFA devices you can
-    # create, see [Limitations on Entities][2] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][2] in the *IAM User
+    # Guide*.
     #
     # The seed information contained in the QR code and the Base32 string
     # should be treated like any other secret access information. In other
@@ -2044,7 +2071,7 @@ module Aws::IAM
     #
     #
     # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html
-    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @option params [String] :path
     #   The path for the virtual MFA device. For more information about paths,
@@ -4130,12 +4157,13 @@ module Aws::IAM
     # Retrieves information about IAM entity usage and IAM quotas in the AWS
     # account.
     #
-    # For information about limitations on IAM entities, see [Limitations on
-    # IAM Entities][1] in the *IAM User Guide*.
+    # The number and size of IAM resources in an AWS account are limited.
+    # For more information, see [IAM and STS Quotas][1] in the *IAM User
+    # Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/LimitationsOnEntities.html
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html
     #
     # @return [Types::GetAccountSummaryResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -11561,7 +11589,7 @@ module Aws::IAM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-iam'
-      context[:gem_version] = '1.39.0'
+      context[:gem_version] = '1.44.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-iam/client_api.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/current_user.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/customizations.rb

@@ -1,2 +1,4 @@
+# frozen_string_literal: true
+
 # customizations to generated classes
 require 'aws-sdk-iam/customizations/resource'

data/lib/aws-sdk-iam/customizations/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module Aws
   module IAM
     class Resource

data/lib/aws-sdk-iam/errors.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/group.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/group_policy.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/instance_profile.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/login_profile.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/mfa_device.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/policy.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/policy_version.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/role.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/role_policy.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/saml_provider.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/server_certificate.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/signing_certificate.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-iam/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -93,6 +95,7 @@ module Aws::IAM
       :entity_path,
       :last_authenticated_time,
       :total_authenticated_entities)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -137,6 +140,7 @@ module Aws::IAM
       :status,
       :secret_access_key,
       :create_date)
+      SENSITIVE = [:secret_access_key]
       include Aws::Structure
     end
 
@@ -201,6 +205,7 @@ module Aws::IAM
       :last_used_date,
       :service_name,
       :region)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -233,6 +238,7 @@ module Aws::IAM
       :access_key_id,
       :status,
       :create_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -261,6 +267,7 @@ module Aws::IAM
     class AddClientIDToOpenIDConnectProviderRequest < Struct.new(
       :open_id_connect_provider_arn,
       :client_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -303,6 +310,7 @@ module Aws::IAM
     class AddRoleToInstanceProfileRequest < Struct.new(
       :instance_profile_name,
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -345,6 +353,7 @@ module Aws::IAM
     class AddUserToGroupRequest < Struct.new(
       :group_name,
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -386,6 +395,7 @@ module Aws::IAM
     class AttachGroupPolicyRequest < Struct.new(
       :group_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -427,6 +437,7 @@ module Aws::IAM
     class AttachRolePolicyRequest < Struct.new(
       :role_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -468,6 +479,7 @@ module Aws::IAM
     class AttachUserPolicyRequest < Struct.new(
       :user_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -499,6 +511,7 @@ module Aws::IAM
     class AttachedPermissionsBoundary < Struct.new(
       :permissions_boundary_type,
       :permissions_boundary_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -538,6 +551,7 @@ module Aws::IAM
     class AttachedPolicy < Struct.new(
       :policy_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -577,6 +591,7 @@ module Aws::IAM
     class ChangePasswordRequest < Struct.new(
       :old_password,
       :new_password)
+      SENSITIVE = [:old_password, :new_password]
       include Aws::Structure
     end
 
@@ -591,6 +606,7 @@ module Aws::IAM
     #
     class ConcurrentModificationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -634,6 +650,7 @@ module Aws::IAM
       :context_key_name,
       :context_key_values,
       :context_key_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -661,6 +678,7 @@ module Aws::IAM
     #
     class CreateAccessKeyRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -674,6 +692,7 @@ module Aws::IAM
     #
     class CreateAccessKeyResponse < Struct.new(
       :access_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -701,6 +720,7 @@ module Aws::IAM
     #
     class CreateAccountAliasRequest < Struct.new(
       :account_alias)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -747,6 +767,7 @@ module Aws::IAM
     class CreateGroupRequest < Struct.new(
       :path,
       :group_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -760,6 +781,7 @@ module Aws::IAM
     #
     class CreateGroupResponse < Struct.new(
       :group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -809,6 +831,7 @@ module Aws::IAM
     class CreateInstanceProfileRequest < Struct.new(
       :instance_profile_name,
       :path)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -822,6 +845,7 @@ module Aws::IAM
     #
     class CreateInstanceProfileResponse < Struct.new(
       :instance_profile)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -877,6 +901,7 @@ module Aws::IAM
       :user_name,
       :password,
       :password_reset_required)
+      SENSITIVE = [:password]
       include Aws::Structure
     end
 
@@ -890,6 +915,7 @@ module Aws::IAM
     #
     class CreateLoginProfileResponse < Struct.new(
       :login_profile)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -966,6 +992,7 @@ module Aws::IAM
       :url,
       :client_id_list,
       :thumbprint_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -982,6 +1009,7 @@ module Aws::IAM
     #
     class CreateOpenIDConnectProviderResponse < Struct.new(
       :open_id_connect_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1070,6 +1098,7 @@ module Aws::IAM
       :path,
       :policy_document,
       :description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1083,6 +1112,7 @@ module Aws::IAM
     #
     class CreatePolicyResponse < Struct.new(
       :policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1155,6 +1185,7 @@ module Aws::IAM
       :policy_arn,
       :policy_document,
       :set_as_default)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1168,6 +1199,7 @@ module Aws::IAM
     #
     class CreatePolicyVersionResponse < Struct.new(
       :policy_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1307,6 +1339,7 @@ module Aws::IAM
       :max_session_duration,
       :permissions_boundary,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1320,6 +1353,7 @@ module Aws::IAM
     #
     class CreateRoleResponse < Struct.new(
       :role)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1365,6 +1399,7 @@ module Aws::IAM
     class CreateSAMLProviderRequest < Struct.new(
       :saml_metadata_document,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1379,6 +1414,7 @@ module Aws::IAM
     #
     class CreateSAMLProviderResponse < Struct.new(
       :saml_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1431,6 +1467,7 @@ module Aws::IAM
       :aws_service_name,
       :description,
       :custom_suffix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1442,6 +1479,7 @@ module Aws::IAM
     #
     class CreateServiceLinkedRoleResponse < Struct.new(
       :role)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1480,6 +1518,7 @@ module Aws::IAM
     class CreateServiceSpecificCredentialRequest < Struct.new(
       :user_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1496,6 +1535,7 @@ module Aws::IAM
     #
     class CreateServiceSpecificCredentialResponse < Struct.new(
       :service_specific_credential)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1572,6 +1612,7 @@ module Aws::IAM
       :user_name,
       :permissions_boundary,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1585,6 +1626,7 @@ module Aws::IAM
     #
     class CreateUserResponse < Struct.new(
       :user)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1635,6 +1677,7 @@ module Aws::IAM
     class CreateVirtualMFADeviceRequest < Struct.new(
       :path,
       :virtual_mfa_device_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1648,6 +1691,7 @@ module Aws::IAM
     #
     class CreateVirtualMFADeviceResponse < Struct.new(
       :virtual_mfa_device)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1668,6 +1712,7 @@ module Aws::IAM
     #
     class CredentialReportExpiredException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1681,6 +1726,7 @@ module Aws::IAM
     #
     class CredentialReportNotPresentException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1694,6 +1740,7 @@ module Aws::IAM
     #
     class CredentialReportNotReadyException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1737,6 +1784,7 @@ module Aws::IAM
     class DeactivateMFADeviceRequest < Struct.new(
       :user_name,
       :serial_number)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1779,6 +1827,7 @@ module Aws::IAM
     class DeleteAccessKeyRequest < Struct.new(
       :user_name,
       :access_key_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1806,6 +1855,7 @@ module Aws::IAM
     #
     class DeleteAccountAliasRequest < Struct.new(
       :account_alias)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1820,6 +1870,7 @@ module Aws::IAM
     #
     class DeleteConflictException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1863,6 +1914,7 @@ module Aws::IAM
     class DeleteGroupPolicyRequest < Struct.new(
       :group_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1890,6 +1942,7 @@ module Aws::IAM
     #
     class DeleteGroupRequest < Struct.new(
       :group_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1917,6 +1970,7 @@ module Aws::IAM
     #
     class DeleteInstanceProfileRequest < Struct.new(
       :instance_profile_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1944,6 +1998,7 @@ module Aws::IAM
     #
     class DeleteLoginProfileRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1965,6 +2020,7 @@ module Aws::IAM
     #
     class DeleteOpenIDConnectProviderRequest < Struct.new(
       :open_id_connect_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1990,6 +2046,7 @@ module Aws::IAM
     #
     class DeletePolicyRequest < Struct.new(
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2035,6 +2092,7 @@ module Aws::IAM
     class DeletePolicyVersionRequest < Struct.new(
       :policy_arn,
       :version_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2054,6 +2112,7 @@ module Aws::IAM
     #
     class DeleteRolePermissionsBoundaryRequest < Struct.new(
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2097,6 +2156,7 @@ module Aws::IAM
     class DeleteRolePolicyRequest < Struct.new(
       :role_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2124,6 +2184,7 @@ module Aws::IAM
     #
     class DeleteRoleRequest < Struct.new(
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2142,6 +2203,7 @@ module Aws::IAM
     #
     class DeleteSAMLProviderRequest < Struct.new(
       :saml_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2183,6 +2245,7 @@ module Aws::IAM
     class DeleteSSHPublicKeyRequest < Struct.new(
       :user_name,
       :ssh_public_key_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2210,6 +2273,7 @@ module Aws::IAM
     #
     class DeleteServerCertificateRequest < Struct.new(
       :server_certificate_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2228,6 +2292,7 @@ module Aws::IAM
     #
     class DeleteServiceLinkedRoleRequest < Struct.new(
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2241,6 +2306,7 @@ module Aws::IAM
     #
     class DeleteServiceLinkedRoleResponse < Struct.new(
       :deletion_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2285,6 +2351,7 @@ module Aws::IAM
     class DeleteServiceSpecificCredentialRequest < Struct.new(
       :user_name,
       :service_specific_credential_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2326,6 +2393,7 @@ module Aws::IAM
     class DeleteSigningCertificateRequest < Struct.new(
       :user_name,
       :certificate_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2345,6 +2413,7 @@ module Aws::IAM
     #
     class DeleteUserPermissionsBoundaryRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2388,6 +2457,7 @@ module Aws::IAM
     class DeleteUserPolicyRequest < Struct.new(
       :user_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2415,6 +2485,7 @@ module Aws::IAM
     #
     class DeleteUserRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2443,6 +2514,7 @@ module Aws::IAM
     #
     class DeleteVirtualMFADeviceRequest < Struct.new(
       :serial_number)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2471,6 +2543,7 @@ module Aws::IAM
     class DeletionTaskFailureReasonType < Struct.new(
       :reason,
       :role_usage_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2512,6 +2585,7 @@ module Aws::IAM
     class DetachGroupPolicyRequest < Struct.new(
       :group_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2553,6 +2627,7 @@ module Aws::IAM
     class DetachRolePolicyRequest < Struct.new(
       :role_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2594,6 +2669,7 @@ module Aws::IAM
     class DetachUserPolicyRequest < Struct.new(
       :user_name,
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2607,6 +2683,7 @@ module Aws::IAM
     #
     class DuplicateCertificateException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2620,6 +2697,7 @@ module Aws::IAM
     #
     class DuplicateSSHPublicKeyException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2701,6 +2779,7 @@ module Aws::IAM
       :serial_number,
       :authentication_code_1,
       :authentication_code_2)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2714,6 +2793,7 @@ module Aws::IAM
     #
     class EntityAlreadyExistsException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2748,6 +2828,7 @@ module Aws::IAM
     class EntityDetails < Struct.new(
       :entity_info,
       :last_authenticated)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2796,6 +2877,7 @@ module Aws::IAM
       :type,
       :id,
       :path)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2812,6 +2894,7 @@ module Aws::IAM
     #
     class EntityTemporarilyUnmodifiableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2834,6 +2917,7 @@ module Aws::IAM
     class ErrorDetails < Struct.new(
       :message,
       :code)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2931,6 +3015,7 @@ module Aws::IAM
       :permissions_boundary_decision_detail,
       :eval_decision_details,
       :resource_specific_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2950,6 +3035,7 @@ module Aws::IAM
     class GenerateCredentialReportResponse < Struct.new(
       :state,
       :description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2985,6 +3071,7 @@ module Aws::IAM
     class GenerateOrganizationsAccessReportRequest < Struct.new(
       :entity_path,
       :organizations_policy_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2997,6 +3084,7 @@ module Aws::IAM
     #
     class GenerateOrganizationsAccessReportResponse < Struct.new(
       :job_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3029,6 +3117,7 @@ module Aws::IAM
     class GenerateServiceLastAccessedDetailsRequest < Struct.new(
       :arn,
       :granularity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3044,6 +3133,7 @@ module Aws::IAM
     #
     class GenerateServiceLastAccessedDetailsResponse < Struct.new(
       :job_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3070,6 +3160,7 @@ module Aws::IAM
     #
     class GetAccessKeyLastUsedRequest < Struct.new(
       :access_key_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3090,6 +3181,7 @@ module Aws::IAM
     class GetAccessKeyLastUsedResponse < Struct.new(
       :user_name,
       :access_key_last_used)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3138,6 +3230,7 @@ module Aws::IAM
       :filter,
       :max_items,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3185,6 +3278,7 @@ module Aws::IAM
       :policies,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3200,6 +3294,7 @@ module Aws::IAM
     #
     class GetAccountPasswordPolicyResponse < Struct.new(
       :password_policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3214,6 +3309,7 @@ module Aws::IAM
     #
     class GetAccountSummaryResponse < Struct.new(
       :summary_map)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3250,6 +3346,7 @@ module Aws::IAM
     #
     class GetContextKeysForCustomPolicyRequest < Struct.new(
       :policy_input_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3264,6 +3361,7 @@ module Aws::IAM
     #
     class GetContextKeysForPolicyResponse < Struct.new(
       :context_key_names)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3320,6 +3418,7 @@ module Aws::IAM
     class GetContextKeysForPrincipalPolicyRequest < Struct.new(
       :policy_source_arn,
       :policy_input_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3348,6 +3447,7 @@ module Aws::IAM
       :content,
       :report_format,
       :generated_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3390,6 +3490,7 @@ module Aws::IAM
     class GetGroupPolicyRequest < Struct.new(
       :group_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3418,6 +3519,7 @@ module Aws::IAM
       :group_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3469,6 +3571,7 @@ module Aws::IAM
       :group_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3505,6 +3608,7 @@ module Aws::IAM
       :users,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3532,6 +3636,7 @@ module Aws::IAM
     #
     class GetInstanceProfileRequest < Struct.new(
       :instance_profile_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3545,6 +3650,7 @@ module Aws::IAM
     #
     class GetInstanceProfileResponse < Struct.new(
       :instance_profile)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3572,6 +3678,7 @@ module Aws::IAM
     #
     class GetLoginProfileRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3586,6 +3693,7 @@ module Aws::IAM
     #
     class GetLoginProfileResponse < Struct.new(
       :login_profile)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3613,6 +3721,7 @@ module Aws::IAM
     #
     class GetOpenIDConnectProviderRequest < Struct.new(
       :open_id_connect_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3648,6 +3757,7 @@ module Aws::IAM
       :client_id_list,
       :thumbprint_list,
       :create_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3700,6 +3810,7 @@ module Aws::IAM
       :max_items,
       :marker,
       :sort_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3779,6 +3890,7 @@ module Aws::IAM
       :is_truncated,
       :marker,
       :error_details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3805,6 +3917,7 @@ module Aws::IAM
     #
     class GetPolicyRequest < Struct.new(
       :policy_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3818,6 +3931,7 @@ module Aws::IAM
     #
     class GetPolicyResponse < Struct.new(
       :policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3859,6 +3973,7 @@ module Aws::IAM
     class GetPolicyVersionRequest < Struct.new(
       :policy_arn,
       :version_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3872,6 +3987,7 @@ module Aws::IAM
     #
     class GetPolicyVersionResponse < Struct.new(
       :policy_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3914,6 +4030,7 @@ module Aws::IAM
     class GetRolePolicyRequest < Struct.new(
       :role_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3942,6 +4059,7 @@ module Aws::IAM
       :role_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3969,6 +4087,7 @@ module Aws::IAM
     #
     class GetRoleRequest < Struct.new(
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3982,6 +4101,7 @@ module Aws::IAM
     #
     class GetRoleResponse < Struct.new(
       :role)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4008,6 +4128,7 @@ module Aws::IAM
     #
     class GetSAMLProviderRequest < Struct.new(
       :saml_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4032,6 +4153,7 @@ module Aws::IAM
       :saml_metadata_document,
       :create_date,
       :valid_until)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4081,6 +4203,7 @@ module Aws::IAM
       :user_name,
       :ssh_public_key_id,
       :encoding)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4094,6 +4217,7 @@ module Aws::IAM
     #
     class GetSSHPublicKeyResponse < Struct.new(
       :ssh_public_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4122,6 +4246,7 @@ module Aws::IAM
     #
     class GetServerCertificateRequest < Struct.new(
       :server_certificate_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4135,6 +4260,7 @@ module Aws::IAM
     #
     class GetServerCertificateResponse < Struct.new(
       :server_certificate)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4181,6 +4307,7 @@ module Aws::IAM
       :job_id,
       :max_items,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4252,6 +4379,7 @@ module Aws::IAM
       :is_truncated,
       :marker,
       :error)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4316,6 +4444,7 @@ module Aws::IAM
       :service_namespace,
       :max_items,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4381,6 +4510,7 @@ module Aws::IAM
       :is_truncated,
       :marker,
       :error)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4401,6 +4531,7 @@ module Aws::IAM
     #
     class GetServiceLinkedRoleDeletionStatusRequest < Struct.new(
       :deletion_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4418,6 +4549,7 @@ module Aws::IAM
     class GetServiceLinkedRoleDeletionStatusResponse < Struct.new(
       :status,
       :reason)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4460,6 +4592,7 @@ module Aws::IAM
     class GetUserPolicyRequest < Struct.new(
       :user_name,
       :policy_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4488,6 +4621,7 @@ module Aws::IAM
       :user_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4516,6 +4650,7 @@ module Aws::IAM
     #
     class GetUserRequest < Struct.new(
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4552,6 +4687,7 @@ module Aws::IAM
     #
     class GetUserResponse < Struct.new(
       :user)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4616,6 +4752,7 @@ module Aws::IAM
       :group_id,
       :arn,
       :create_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4687,6 +4824,7 @@ module Aws::IAM
       :create_date,
       :group_policy_list,
       :attached_managed_policies)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4753,6 +4891,7 @@ module Aws::IAM
       :arn,
       :create_date,
       :roles)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4766,6 +4905,7 @@ module Aws::IAM
     #
     class InvalidAuthenticationCodeException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4778,6 +4918,7 @@ module Aws::IAM
     #
     class InvalidCertificateException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4791,6 +4932,7 @@ module Aws::IAM
     #
     class InvalidInputException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4804,6 +4946,7 @@ module Aws::IAM
     #
     class InvalidPublicKeyException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4817,6 +4960,7 @@ module Aws::IAM
     #
     class InvalidUserTypeException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4830,12 +4974,13 @@ module Aws::IAM
     #
     class KeyPairMismatchException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
     # The request was rejected because it attempted to create resources
-    # beyond the current AWS account limits. The error message describes the
-    # limit exceeded.
+    # beyond the current AWS account limitations. The error message
+    # describes the limit exceeded.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -4844,6 +4989,7 @@ module Aws::IAM
     #
     class LimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4895,6 +5041,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4926,6 +5073,7 @@ module Aws::IAM
       :access_key_metadata,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4962,6 +5110,7 @@ module Aws::IAM
     class ListAccountAliasesRequest < Struct.new(
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4994,6 +5143,7 @@ module Aws::IAM
       :account_aliases,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5065,6 +5215,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5097,6 +5248,7 @@ module Aws::IAM
       :attached_policies,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5168,6 +5320,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5200,6 +5353,7 @@ module Aws::IAM
       :attached_policies,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5271,6 +5425,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5303,6 +5458,7 @@ module Aws::IAM
       :attached_policies,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5398,6 +5554,7 @@ module Aws::IAM
       :policy_usage_filter,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5439,6 +5596,7 @@ module Aws::IAM
       :policy_roles,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5490,6 +5648,7 @@ module Aws::IAM
       :group_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5530,6 +5689,7 @@ module Aws::IAM
       :policy_names,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5581,6 +5741,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5612,6 +5773,7 @@ module Aws::IAM
       :groups,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5669,6 +5831,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5700,6 +5863,7 @@ module Aws::IAM
       :groups,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5751,6 +5915,7 @@ module Aws::IAM
       :role_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5783,6 +5948,7 @@ module Aws::IAM
       :instance_profiles,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5840,6 +6006,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5871,6 +6038,7 @@ module Aws::IAM
       :instance_profiles,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5922,6 +6090,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5953,6 +6122,7 @@ module Aws::IAM
       :mfa_devices,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5974,6 +6144,7 @@ module Aws::IAM
     #
     class ListOpenIDConnectProvidersResponse < Struct.new(
       :open_id_connect_provider_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6010,6 +6181,7 @@ module Aws::IAM
     class ListPoliciesGrantingServiceAccessEntry < Struct.new(
       :service_namespace,
       :policies)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6058,6 +6230,7 @@ module Aws::IAM
       :marker,
       :arn,
       :service_namespaces)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6087,6 +6260,7 @@ module Aws::IAM
       :policies_granting_service_access,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6178,6 +6352,7 @@ module Aws::IAM
       :policy_usage_filter,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6209,6 +6384,7 @@ module Aws::IAM
       :policies,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6259,6 +6435,7 @@ module Aws::IAM
       :policy_arn,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6297,6 +6474,7 @@ module Aws::IAM
       :versions,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6348,6 +6526,7 @@ module Aws::IAM
       :role_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6379,6 +6558,7 @@ module Aws::IAM
       :policy_names,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6430,6 +6610,7 @@ module Aws::IAM
       :role_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6461,6 +6642,7 @@ module Aws::IAM
       :tags,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6518,6 +6700,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6549,6 +6732,7 @@ module Aws::IAM
       :roles,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6569,6 +6753,7 @@ module Aws::IAM
     #
     class ListSAMLProvidersResponse < Struct.new(
       :saml_provider_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6622,6 +6807,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6653,6 +6839,7 @@ module Aws::IAM
       :ssh_public_keys,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6710,6 +6897,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6741,6 +6929,7 @@ module Aws::IAM
       :server_certificate_metadata_list,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6779,6 +6968,7 @@ module Aws::IAM
     class ListServiceSpecificCredentialsRequest < Struct.new(
       :user_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6791,6 +6981,7 @@ module Aws::IAM
     #
     class ListServiceSpecificCredentialsResponse < Struct.new(
       :service_specific_credentials)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6843,6 +7034,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6874,6 +7066,7 @@ module Aws::IAM
       :certificates,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6925,6 +7118,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6956,6 +7150,7 @@ module Aws::IAM
       :policy_names,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7007,6 +7202,7 @@ module Aws::IAM
       :user_name,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7038,6 +7234,7 @@ module Aws::IAM
       :tags,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7095,6 +7292,7 @@ module Aws::IAM
       :path_prefix,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7126,6 +7324,7 @@ module Aws::IAM
       :users,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7171,6 +7370,7 @@ module Aws::IAM
       :assignment_status,
       :marker,
       :max_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7203,6 +7403,7 @@ module Aws::IAM
       :virtual_mfa_devices,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7231,6 +7432,7 @@ module Aws::IAM
       :user_name,
       :create_date,
       :password_reset_required)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7258,6 +7460,7 @@ module Aws::IAM
       :user_name,
       :serial_number,
       :enable_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7271,6 +7474,7 @@ module Aws::IAM
     #
     class MalformedCertificateException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7284,6 +7488,7 @@ module Aws::IAM
     #
     class MalformedPolicyDocumentException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7419,6 +7624,7 @@ module Aws::IAM
       :create_date,
       :update_date,
       :policy_version_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7432,6 +7638,7 @@ module Aws::IAM
     #
     class NoSuchEntityException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7454,6 +7661,7 @@ module Aws::IAM
     #
     class OpenIDConnectProviderListEntry < Struct.new(
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7470,6 +7678,7 @@ module Aws::IAM
     #
     class OrganizationsDecisionDetail < Struct.new(
       :allowed_by_organizations)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7538,6 +7747,7 @@ module Aws::IAM
       :max_password_age,
       :password_reuse_prevention,
       :hard_expiry)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7551,6 +7761,7 @@ module Aws::IAM
     #
     class PasswordPolicyViolationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7574,6 +7785,7 @@ module Aws::IAM
     #
     class PermissionsBoundaryDecisionDetail < Struct.new(
       :allowed_by_permissions_boundary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7698,6 +7910,7 @@ module Aws::IAM
       :description,
       :create_date,
       :update_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7720,6 +7933,7 @@ module Aws::IAM
     class PolicyDetail < Struct.new(
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7734,6 +7948,7 @@ module Aws::IAM
     #
     class PolicyEvaluationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7802,6 +8017,7 @@ module Aws::IAM
       :policy_arn,
       :entity_type,
       :entity_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7837,6 +8053,7 @@ module Aws::IAM
     class PolicyGroup < Struct.new(
       :group_name,
       :group_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7850,6 +8067,7 @@ module Aws::IAM
     #
     class PolicyNotAttachableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7885,6 +8103,7 @@ module Aws::IAM
     class PolicyRole < Struct.new(
       :role_name,
       :role_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7920,6 +8139,7 @@ module Aws::IAM
     class PolicyUser < Struct.new(
       :user_name,
       :user_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7984,6 +8204,7 @@ module Aws::IAM
       :version_id,
       :is_default_version,
       :create_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8006,6 +8227,7 @@ module Aws::IAM
     class Position < Struct.new(
       :line,
       :column)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8075,6 +8297,7 @@ module Aws::IAM
       :group_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8101,6 +8324,7 @@ module Aws::IAM
     class PutRolePermissionsBoundaryRequest < Struct.new(
       :role_name,
       :permissions_boundary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8170,6 +8394,7 @@ module Aws::IAM
       :role_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8196,6 +8421,7 @@ module Aws::IAM
     class PutUserPermissionsBoundaryRequest < Struct.new(
       :user_name,
       :permissions_boundary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8265,6 +8491,7 @@ module Aws::IAM
       :user_name,
       :policy_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8300,6 +8527,7 @@ module Aws::IAM
     class RemoveClientIDFromOpenIDConnectProviderRequest < Struct.new(
       :open_id_connect_provider_arn,
       :client_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8342,6 +8570,7 @@ module Aws::IAM
     class RemoveRoleFromInstanceProfileRequest < Struct.new(
       :instance_profile_name,
       :role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8384,6 +8613,7 @@ module Aws::IAM
     class RemoveUserFromGroupRequest < Struct.new(
       :group_name,
       :user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8397,6 +8627,7 @@ module Aws::IAM
     #
     class ReportGenerationLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8440,6 +8671,7 @@ module Aws::IAM
     class ResetServiceSpecificCredentialRequest < Struct.new(
       :user_name,
       :service_specific_credential_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8455,6 +8687,7 @@ module Aws::IAM
     #
     class ResetServiceSpecificCredentialResponse < Struct.new(
       :service_specific_credential)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8516,6 +8749,7 @@ module Aws::IAM
       :missing_context_values,
       :eval_decision_details,
       :permissions_boundary_decision_detail)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8574,6 +8808,7 @@ module Aws::IAM
       :serial_number,
       :authentication_code_1,
       :authentication_code_2)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8687,6 +8922,7 @@ module Aws::IAM
       :permissions_boundary,
       :tags,
       :role_last_used)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8809,6 +9045,7 @@ module Aws::IAM
       :permissions_boundary,
       :tags,
       :role_last_used)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8850,6 +9087,7 @@ module Aws::IAM
     class RoleLastUsed < Struct.new(
       :last_used_date,
       :region)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8872,6 +9110,7 @@ module Aws::IAM
     class RoleUsageType < Struct.new(
       :region,
       :resources)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8895,6 +9134,7 @@ module Aws::IAM
       :arn,
       :valid_until,
       :create_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8943,6 +9183,7 @@ module Aws::IAM
       :ssh_public_key_body,
       :status,
       :upload_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8982,6 +9223,7 @@ module Aws::IAM
       :ssh_public_key_id,
       :status,
       :upload_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9009,6 +9251,7 @@ module Aws::IAM
       :server_certificate_metadata,
       :certificate_body,
       :certificate_chain)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9068,6 +9311,7 @@ module Aws::IAM
       :arn,
       :upload_date,
       :expiration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9081,6 +9325,7 @@ module Aws::IAM
     #
     class ServiceFailureException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9187,6 +9432,7 @@ module Aws::IAM
       :last_authenticated_region,
       :total_authenticated_entities,
       :tracked_actions_last_accessed)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9199,6 +9445,7 @@ module Aws::IAM
     #
     class ServiceNotSupportedException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9253,6 +9500,7 @@ module Aws::IAM
       :service_specific_credential_id,
       :user_name,
       :status)
+      SENSITIVE = [:service_password]
       include Aws::Structure
     end
 
@@ -9299,6 +9547,7 @@ module Aws::IAM
       :create_date,
       :service_specific_credential_id,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9338,6 +9587,7 @@ module Aws::IAM
     class SetDefaultPolicyVersionRequest < Struct.new(
       :policy_arn,
       :version_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9368,6 +9618,7 @@ module Aws::IAM
     #
     class SetSecurityTokenServicePreferencesRequest < Struct.new(
       :global_endpoint_token_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9405,6 +9656,7 @@ module Aws::IAM
       :certificate_body,
       :status,
       :upload_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9661,6 +9913,7 @@ module Aws::IAM
       :resource_handling_option,
       :max_items,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9693,6 +9946,7 @@ module Aws::IAM
       :evaluation_results,
       :is_truncated,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9970,6 +10224,7 @@ module Aws::IAM
       :resource_handling_option,
       :max_items,
       :marker)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10003,6 +10258,7 @@ module Aws::IAM
       :source_policy_type,
       :start_position,
       :end_position)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10049,6 +10305,7 @@ module Aws::IAM
     class Tag < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10089,6 +10346,7 @@ module Aws::IAM
     class TagRoleRequest < Struct.new(
       :role_name,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10128,6 +10386,7 @@ module Aws::IAM
     class TagUserRequest < Struct.new(
       :user_name,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10188,6 +10447,7 @@ module Aws::IAM
       :last_accessed_entity,
       :last_accessed_time,
       :last_accessed_region)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10203,6 +10463,7 @@ module Aws::IAM
     #
     class UnmodifiableEntityException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10216,6 +10477,7 @@ module Aws::IAM
     #
     class UnrecognizedPublicKeyEncodingException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10250,6 +10512,7 @@ module Aws::IAM
     class UntagRoleRequest < Struct.new(
       :role_name,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10284,6 +10547,7 @@ module Aws::IAM
     class UntagUserRequest < Struct.new(
       :user_name,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10333,6 +10597,7 @@ module Aws::IAM
       :user_name,
       :access_key_id,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10452,6 +10717,7 @@ module Aws::IAM
       :max_password_age,
       :password_reuse_prevention,
       :hard_expiry)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10506,6 +10772,7 @@ module Aws::IAM
     class UpdateAssumeRolePolicyRequest < Struct.new(
       :role_name,
       :policy_document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10564,6 +10831,7 @@ module Aws::IAM
       :group_name,
       :new_path,
       :new_group_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10624,6 +10892,7 @@ module Aws::IAM
       :user_name,
       :password,
       :password_reset_required)
+      SENSITIVE = [:password]
       include Aws::Structure
     end
 
@@ -10660,6 +10929,7 @@ module Aws::IAM
     class UpdateOpenIDConnectProviderThumbprintRequest < Struct.new(
       :open_id_connect_provider_arn,
       :thumbprint_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10684,6 +10954,7 @@ module Aws::IAM
     class UpdateRoleDescriptionRequest < Struct.new(
       :role_name,
       :description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10695,6 +10966,7 @@ module Aws::IAM
     #
     class UpdateRoleDescriptionResponse < Struct.new(
       :role)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10744,6 +11016,7 @@ module Aws::IAM
       :role_name,
       :description,
       :max_session_duration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10784,6 +11057,7 @@ module Aws::IAM
     class UpdateSAMLProviderRequest < Struct.new(
       :saml_metadata_document,
       :saml_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10798,6 +11072,7 @@ module Aws::IAM
     #
     class UpdateSAMLProviderResponse < Struct.new(
       :saml_provider_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10847,6 +11122,7 @@ module Aws::IAM
       :user_name,
       :ssh_public_key_id,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10909,6 +11185,7 @@ module Aws::IAM
       :server_certificate_name,
       :new_path,
       :new_server_certificate_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10958,6 +11235,7 @@ module Aws::IAM
       :user_name,
       :service_specific_credential_id,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11007,6 +11285,7 @@ module Aws::IAM
       :user_name,
       :certificate_id,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11065,6 +11344,7 @@ module Aws::IAM
       :user_name,
       :new_path,
       :new_user_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11117,6 +11397,7 @@ module Aws::IAM
     class UploadSSHPublicKeyRequest < Struct.new(
       :user_name,
       :ssh_public_key_body)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11130,6 +11411,7 @@ module Aws::IAM
     #
     class UploadSSHPublicKeyResponse < Struct.new(
       :ssh_public_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11253,6 +11535,7 @@ module Aws::IAM
       :certificate_body,
       :private_key,
       :certificate_chain)
+      SENSITIVE = [:private_key]
       include Aws::Structure
     end
 
@@ -11267,6 +11550,7 @@ module Aws::IAM
     #
     class UploadServerCertificateResponse < Struct.new(
       :server_certificate_metadata)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11316,6 +11600,7 @@ module Aws::IAM
     class UploadSigningCertificateRequest < Struct.new(
       :user_name,
       :certificate_body)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11330,6 +11615,7 @@ module Aws::IAM
     #
     class UploadSigningCertificateResponse < Struct.new(
       :certificate)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11447,6 +11733,7 @@ module Aws::IAM
       :password_last_used,
       :permissions_boundary,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11547,6 +11834,7 @@ module Aws::IAM
       :attached_managed_policies,
       :permissions_boundary,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11590,6 +11878,7 @@ module Aws::IAM
       :qr_code_png,
       :user,
       :enable_date)
+      SENSITIVE = [:base_32_string_seed, :qr_code_png]
       include Aws::Structure
     end