aws-sdk-iam 1.94.0 → 1.96.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8ab9625991b6f50258c11e826f62a322978de2cbe43c3465c85ef73d3fcea961
-  data.tar.gz: 3a27293575786f40911aace0393ab679f86501ba781df51d94432113fd75898f
+  metadata.gz: 32024a751eb6c81037a6c25684205e08cf683202cde4a1bfc4c317aa3dcca960
+  data.tar.gz: e941b2c5ed2f2bfc20c583ac521edab6894a50146683168184c6774d588d2cab
 SHA512:
-  metadata.gz: 63fdb3d81a24006417c075e96bf4bccf4c5431830154f7c5871df84cba645ef7a5a49001bfb630807ea4704563ce3aef9d06028a2f0736fd28310d51e6fec246
-  data.tar.gz: 8ad19cf33fb700fe603ef91a4bd94f951baca50a0a29ff277822ed5f7a322dae44fdcb1ab901747971abb9c3eef0249d48384f4b80699286cb98f882931ae77e
+  metadata.gz: 89d71bba4d7bcb07510e017fd947599b95b7607ad141cb3ef57804b414d2889d808ab054e86c06533e671034ff0ec537d9b35340b7c3d910b300292427af3547
+  data.tar.gz: a5260987542c4d1fcc70192b3fd4239b93119753c41b6b542469743e7b56591ed9846beef5b8cd49b9ca26e5d154d317307173953948ba9583fec56abaebea8c

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.96.0 (2024-04-16)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.95.0 (2024-04-11)
+------------------
+
+* Feature - For CreateOpenIDConnectProvider API, the ThumbprintList parameter is no longer required.
+
 1.94.0 (2024-01-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.94.0
+1.96.0

data/lib/aws-sdk-iam/client.rb

@@ -1372,20 +1372,23 @@ module Aws::IAM
     #   `CreateOpenIDConnectProviderRequest` operation accepts client IDs up
     #   to 255 characters long.
     #
-    # @option params [required, Array<String>] :thumbprint_list
+    # @option params [Array<String>] :thumbprint_list
     #   A list of server certificate thumbprints for the OpenID Connect (OIDC)
     #   identity provider's server certificates. Typically this list includes
     #   only one entry. However, IAM lets you have up to five thumbprints for
     #   an OIDC provider. This lets you maintain multiple thumbprints if the
     #   identity provider is rotating certificates.
     #
+    #   This parameter is optional. If it is not included, IAM will retrieve
+    #   and use the top intermediate certificate authority (CA) thumbprint of
+    #   the OpenID Connect identity provider server certificate.
+    #
     #   The server certificate thumbprint is the hex-encoded SHA-1 hash value
     #   of the X.509 certificate used by the domain where the OpenID Connect
     #   provider makes its keys available. It is always a 40-character string.
     #
-    #   You must provide at least one thumbprint when creating an IAM OIDC
-    #   provider. For example, assume that the OIDC provider is
-    #   `server.example.com` and the provider stores its keys at
+    #   For example, assume that the OIDC provider is `server.example.com` and
+    #   the provider stores its keys at
     #   https://keys.server.example.com/openid-connect. In that case, the
     #   thumbprint string would be the hex-encoded SHA-1 hash value of the
     #   certificate used by `https://keys.server.example.com.`
@@ -1445,7 +1448,7 @@ module Aws::IAM
     #   resp = client.create_open_id_connect_provider({
     #     url: "OpenIDConnectProviderUrlType", # required
     #     client_id_list: ["clientIDType"],
-    #     thumbprint_list: ["thumbprintType"], # required
+    #     thumbprint_list: ["thumbprintType"],
     #     tags: [
     #       {
     #         key: "tagKeyType", # required
@@ -9878,7 +9881,7 @@ module Aws::IAM
       req.send_request(options)
     end
 
-    # Removes the specified IAM role from the specified EC2 instance
+    # Removes the specified IAM role from the specified Amazon EC2 instance
     # profile.
     #
     # Make sure that you do not have any Amazon EC2 instances running with
@@ -10465,13 +10468,13 @@ module Aws::IAM
     #   following list shows each of the supported scenario values and the
     #   resources that you must define to run the simulation.
     #
-    #   Each of the EC2 scenarios requires that you specify instance, image,
-    #   and security group resources. If your scenario includes an EBS volume,
-    #   then you must specify that volume as a resource. If the EC2 scenario
-    #   includes VPC, then you must supply the network interface resource. If
-    #   it includes an IP subnet, then you must specify the subnet resource.
-    #   For more information on the EC2 scenario options, see [Supported
-    #   platforms][1] in the *Amazon EC2 User Guide*.
+    #   Each of the Amazon EC2 scenarios requires that you specify instance,
+    #   image, and security group resources. If your scenario includes an EBS
+    #   volume, then you must specify that volume as a resource. If the Amazon
+    #   EC2 scenario includes VPC, then you must supply the network interface
+    #   resource. If it includes an IP subnet, then you must specify the
+    #   subnet resource. For more information on the Amazon EC2 scenario
+    #   options, see [Supported platforms][1] in the *Amazon EC2 User Guide*.
     #
     #   * **EC2-VPC-InstanceStore**
     #
@@ -10830,13 +10833,13 @@ module Aws::IAM
     #   following list shows each of the supported scenario values and the
     #   resources that you must define to run the simulation.
     #
-    #   Each of the EC2 scenarios requires that you specify instance, image,
-    #   and security group resources. If your scenario includes an EBS volume,
-    #   then you must specify that volume as a resource. If the EC2 scenario
-    #   includes VPC, then you must supply the network interface resource. If
-    #   it includes an IP subnet, then you must specify the subnet resource.
-    #   For more information on the EC2 scenario options, see [Supported
-    #   platforms][1] in the *Amazon EC2 User Guide*.
+    #   Each of the Amazon EC2 scenarios requires that you specify instance,
+    #   image, and security group resources. If your scenario includes an EBS
+    #   volume, then you must specify that volume as a resource. If the Amazon
+    #   EC2 scenario includes VPC, then you must supply the network interface
+    #   resource. If it includes an IP subnet, then you must specify the
+    #   subnet resource. For more information on the Amazon EC2 scenario
+    #   options, see [Supported platforms][1] in the *Amazon EC2 User Guide*.
     #
     #   * **EC2-VPC-InstanceStore**
     #
@@ -12564,6 +12567,11 @@ module Aws::IAM
     #   when you use those operations to create a console URL. For more
     #   information, see [Using IAM roles][1] in the *IAM User Guide*.
     #
+    #   <note markdown="1"> IAM role credentials provided by Amazon EC2 instances assigned to the
+    #   role are not subject to the specified maximum session duration.
+    #
+    #    </note>
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html
@@ -13467,7 +13475,7 @@ module Aws::IAM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-iam'
-      context[:gem_version] = '1.94.0'
+      context[:gem_version] = '1.96.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-iam/client_api.rb

@@ -36,7 +36,7 @@ module Aws::IAM
     CertificationValueType = Shapes::StringShape.new(name: 'CertificationValueType')
     ChangePasswordRequest = Shapes::StructureShape.new(name: 'ChangePasswordRequest')
     ColumnNumber = Shapes::IntegerShape.new(name: 'ColumnNumber')
-    ConcurrentModificationException = Shapes::StructureShape.new(name: 'ConcurrentModificationException')
+    ConcurrentModificationException = Shapes::StructureShape.new(name: 'ConcurrentModificationException', error: {"code"=>"ConcurrentModification", "httpStatusCode"=>409, "senderFault"=>true})
     ConcurrentModificationMessage = Shapes::StringShape.new(name: 'ConcurrentModificationMessage')
     ContextEntry = Shapes::StructureShape.new(name: 'ContextEntry')
     ContextEntryListType = Shapes::ListShape.new(name: 'ContextEntryListType')
@@ -72,13 +72,13 @@ module Aws::IAM
     CreateUserResponse = Shapes::StructureShape.new(name: 'CreateUserResponse')
     CreateVirtualMFADeviceRequest = Shapes::StructureShape.new(name: 'CreateVirtualMFADeviceRequest')
     CreateVirtualMFADeviceResponse = Shapes::StructureShape.new(name: 'CreateVirtualMFADeviceResponse')
-    CredentialReportExpiredException = Shapes::StructureShape.new(name: 'CredentialReportExpiredException')
-    CredentialReportNotPresentException = Shapes::StructureShape.new(name: 'CredentialReportNotPresentException')
-    CredentialReportNotReadyException = Shapes::StructureShape.new(name: 'CredentialReportNotReadyException')
+    CredentialReportExpiredException = Shapes::StructureShape.new(name: 'CredentialReportExpiredException', error: {"code"=>"ReportExpired", "httpStatusCode"=>410, "senderFault"=>true})
+    CredentialReportNotPresentException = Shapes::StructureShape.new(name: 'CredentialReportNotPresentException', error: {"code"=>"ReportNotPresent", "httpStatusCode"=>410, "senderFault"=>true})
+    CredentialReportNotReadyException = Shapes::StructureShape.new(name: 'CredentialReportNotReadyException', error: {"code"=>"ReportInProgress", "httpStatusCode"=>404, "senderFault"=>true})
     DeactivateMFADeviceRequest = Shapes::StructureShape.new(name: 'DeactivateMFADeviceRequest')
     DeleteAccessKeyRequest = Shapes::StructureShape.new(name: 'DeleteAccessKeyRequest')
     DeleteAccountAliasRequest = Shapes::StructureShape.new(name: 'DeleteAccountAliasRequest')
-    DeleteConflictException = Shapes::StructureShape.new(name: 'DeleteConflictException')
+    DeleteConflictException = Shapes::StructureShape.new(name: 'DeleteConflictException', error: {"code"=>"DeleteConflict", "httpStatusCode"=>409, "senderFault"=>true})
     DeleteGroupPolicyRequest = Shapes::StructureShape.new(name: 'DeleteGroupPolicyRequest')
     DeleteGroupRequest = Shapes::StructureShape.new(name: 'DeleteGroupRequest')
     DeleteInstanceProfileRequest = Shapes::StructureShape.new(name: 'DeleteInstanceProfileRequest')
@@ -106,13 +106,13 @@ module Aws::IAM
     DetachGroupPolicyRequest = Shapes::StructureShape.new(name: 'DetachGroupPolicyRequest')
     DetachRolePolicyRequest = Shapes::StructureShape.new(name: 'DetachRolePolicyRequest')
     DetachUserPolicyRequest = Shapes::StructureShape.new(name: 'DetachUserPolicyRequest')
-    DuplicateCertificateException = Shapes::StructureShape.new(name: 'DuplicateCertificateException')
-    DuplicateSSHPublicKeyException = Shapes::StructureShape.new(name: 'DuplicateSSHPublicKeyException')
+    DuplicateCertificateException = Shapes::StructureShape.new(name: 'DuplicateCertificateException', error: {"code"=>"DuplicateCertificate", "httpStatusCode"=>409, "senderFault"=>true})
+    DuplicateSSHPublicKeyException = Shapes::StructureShape.new(name: 'DuplicateSSHPublicKeyException', error: {"code"=>"DuplicateSSHPublicKey", "httpStatusCode"=>400, "senderFault"=>true})
     EnableMFADeviceRequest = Shapes::StructureShape.new(name: 'EnableMFADeviceRequest')
-    EntityAlreadyExistsException = Shapes::StructureShape.new(name: 'EntityAlreadyExistsException')
+    EntityAlreadyExistsException = Shapes::StructureShape.new(name: 'EntityAlreadyExistsException', error: {"code"=>"EntityAlreadyExists", "httpStatusCode"=>409, "senderFault"=>true})
     EntityDetails = Shapes::StructureShape.new(name: 'EntityDetails')
     EntityInfo = Shapes::StructureShape.new(name: 'EntityInfo')
-    EntityTemporarilyUnmodifiableException = Shapes::StructureShape.new(name: 'EntityTemporarilyUnmodifiableException')
+    EntityTemporarilyUnmodifiableException = Shapes::StructureShape.new(name: 'EntityTemporarilyUnmodifiableException', error: {"code"=>"EntityTemporarilyUnmodifiable", "httpStatusCode"=>409, "senderFault"=>true})
     EntityType = Shapes::StringShape.new(name: 'EntityType')
     ErrorDetails = Shapes::StructureShape.new(name: 'ErrorDetails')
     EvalDecisionDetailsType = Shapes::MapShape.new(name: 'EvalDecisionDetailsType')
@@ -175,13 +175,13 @@ module Aws::IAM
     Group = Shapes::StructureShape.new(name: 'Group')
     GroupDetail = Shapes::StructureShape.new(name: 'GroupDetail')
     InstanceProfile = Shapes::StructureShape.new(name: 'InstanceProfile')
-    InvalidAuthenticationCodeException = Shapes::StructureShape.new(name: 'InvalidAuthenticationCodeException')
-    InvalidCertificateException = Shapes::StructureShape.new(name: 'InvalidCertificateException')
-    InvalidInputException = Shapes::StructureShape.new(name: 'InvalidInputException')
-    InvalidPublicKeyException = Shapes::StructureShape.new(name: 'InvalidPublicKeyException')
-    InvalidUserTypeException = Shapes::StructureShape.new(name: 'InvalidUserTypeException')
-    KeyPairMismatchException = Shapes::StructureShape.new(name: 'KeyPairMismatchException')
-    LimitExceededException = Shapes::StructureShape.new(name: 'LimitExceededException')
+    InvalidAuthenticationCodeException = Shapes::StructureShape.new(name: 'InvalidAuthenticationCodeException', error: {"code"=>"InvalidAuthenticationCode", "httpStatusCode"=>403, "senderFault"=>true})
+    InvalidCertificateException = Shapes::StructureShape.new(name: 'InvalidCertificateException', error: {"code"=>"InvalidCertificate", "httpStatusCode"=>400, "senderFault"=>true})
+    InvalidInputException = Shapes::StructureShape.new(name: 'InvalidInputException', error: {"code"=>"InvalidInput", "httpStatusCode"=>400, "senderFault"=>true})
+    InvalidPublicKeyException = Shapes::StructureShape.new(name: 'InvalidPublicKeyException', error: {"code"=>"InvalidPublicKey", "httpStatusCode"=>400, "senderFault"=>true})
+    InvalidUserTypeException = Shapes::StructureShape.new(name: 'InvalidUserTypeException', error: {"code"=>"InvalidUserType", "httpStatusCode"=>400, "senderFault"=>true})
+    KeyPairMismatchException = Shapes::StructureShape.new(name: 'KeyPairMismatchException', error: {"code"=>"KeyPairMismatch", "httpStatusCode"=>400, "senderFault"=>true})
+    LimitExceededException = Shapes::StructureShape.new(name: 'LimitExceededException', error: {"code"=>"LimitExceeded", "httpStatusCode"=>409, "senderFault"=>true})
     LineNumber = Shapes::IntegerShape.new(name: 'LineNumber')
     ListAccessKeysRequest = Shapes::StructureShape.new(name: 'ListAccessKeysRequest')
     ListAccessKeysResponse = Shapes::StructureShape.new(name: 'ListAccessKeysResponse')
@@ -254,28 +254,29 @@ module Aws::IAM
     ListVirtualMFADevicesResponse = Shapes::StructureShape.new(name: 'ListVirtualMFADevicesResponse')
     LoginProfile = Shapes::StructureShape.new(name: 'LoginProfile')
     MFADevice = Shapes::StructureShape.new(name: 'MFADevice')
-    MalformedCertificateException = Shapes::StructureShape.new(name: 'MalformedCertificateException')
-    MalformedPolicyDocumentException = Shapes::StructureShape.new(name: 'MalformedPolicyDocumentException')
+    MalformedCertificateException = Shapes::StructureShape.new(name: 'MalformedCertificateException', error: {"code"=>"MalformedCertificate", "httpStatusCode"=>400, "senderFault"=>true})
+    MalformedPolicyDocumentException = Shapes::StructureShape.new(name: 'MalformedPolicyDocumentException', error: {"code"=>"MalformedPolicyDocument", "httpStatusCode"=>400, "senderFault"=>true})
     ManagedPolicyDetail = Shapes::StructureShape.new(name: 'ManagedPolicyDetail')
     ManagedPolicyDetailListType = Shapes::ListShape.new(name: 'ManagedPolicyDetailListType')
-    NoSuchEntityException = Shapes::StructureShape.new(name: 'NoSuchEntityException')
+    NoSuchEntityException = Shapes::StructureShape.new(name: 'NoSuchEntityException', error: {"code"=>"NoSuchEntity", "httpStatusCode"=>404, "senderFault"=>true})
     OpenIDConnectProviderListEntry = Shapes::StructureShape.new(name: 'OpenIDConnectProviderListEntry')
     OpenIDConnectProviderListType = Shapes::ListShape.new(name: 'OpenIDConnectProviderListType')
     OpenIDConnectProviderUrlType = Shapes::StringShape.new(name: 'OpenIDConnectProviderUrlType')
+    OpenIdIdpCommunicationErrorException = Shapes::StructureShape.new(name: 'OpenIdIdpCommunicationErrorException', error: {"code"=>"OpenIdIdpCommunicationError", "httpStatusCode"=>400, "senderFault"=>true})
     OrganizationsDecisionDetail = Shapes::StructureShape.new(name: 'OrganizationsDecisionDetail')
     PasswordPolicy = Shapes::StructureShape.new(name: 'PasswordPolicy')
-    PasswordPolicyViolationException = Shapes::StructureShape.new(name: 'PasswordPolicyViolationException')
+    PasswordPolicyViolationException = Shapes::StructureShape.new(name: 'PasswordPolicyViolationException', error: {"code"=>"PasswordPolicyViolation", "httpStatusCode"=>400, "senderFault"=>true})
     PermissionsBoundaryAttachmentType = Shapes::StringShape.new(name: 'PermissionsBoundaryAttachmentType')
     PermissionsBoundaryDecisionDetail = Shapes::StructureShape.new(name: 'PermissionsBoundaryDecisionDetail')
     Policy = Shapes::StructureShape.new(name: 'Policy')
     PolicyDetail = Shapes::StructureShape.new(name: 'PolicyDetail')
     PolicyEvaluationDecisionType = Shapes::StringShape.new(name: 'PolicyEvaluationDecisionType')
-    PolicyEvaluationException = Shapes::StructureShape.new(name: 'PolicyEvaluationException')
+    PolicyEvaluationException = Shapes::StructureShape.new(name: 'PolicyEvaluationException', error: {"code"=>"PolicyEvaluation", "httpStatusCode"=>500})
     PolicyGrantingServiceAccess = Shapes::StructureShape.new(name: 'PolicyGrantingServiceAccess')
     PolicyGroup = Shapes::StructureShape.new(name: 'PolicyGroup')
     PolicyGroupListType = Shapes::ListShape.new(name: 'PolicyGroupListType')
     PolicyIdentifierType = Shapes::StringShape.new(name: 'PolicyIdentifierType')
-    PolicyNotAttachableException = Shapes::StructureShape.new(name: 'PolicyNotAttachableException')
+    PolicyNotAttachableException = Shapes::StructureShape.new(name: 'PolicyNotAttachableException', error: {"code"=>"PolicyNotAttachable", "httpStatusCode"=>400, "senderFault"=>true})
     PolicyRole = Shapes::StructureShape.new(name: 'PolicyRole')
     PolicyRoleListType = Shapes::ListShape.new(name: 'PolicyRoleListType')
     PolicySourceType = Shapes::StringShape.new(name: 'PolicySourceType')
@@ -296,7 +297,7 @@ module Aws::IAM
     RemoveUserFromGroupRequest = Shapes::StructureShape.new(name: 'RemoveUserFromGroupRequest')
     ReportContentType = Shapes::BlobShape.new(name: 'ReportContentType')
     ReportFormatType = Shapes::StringShape.new(name: 'ReportFormatType')
-    ReportGenerationLimitExceededException = Shapes::StructureShape.new(name: 'ReportGenerationLimitExceededException')
+    ReportGenerationLimitExceededException = Shapes::StructureShape.new(name: 'ReportGenerationLimitExceededException', error: {"code"=>"ReportGenerationLimitExceeded", "httpStatusCode"=>409, "senderFault"=>true})
     ReportStateDescriptionType = Shapes::StringShape.new(name: 'ReportStateDescriptionType')
     ReportStateType = Shapes::StringShape.new(name: 'ReportStateType')
     ResetServiceSpecificCredentialRequest = Shapes::StructureShape.new(name: 'ResetServiceSpecificCredentialRequest')
@@ -321,9 +322,9 @@ module Aws::IAM
     SSHPublicKeyMetadata = Shapes::StructureShape.new(name: 'SSHPublicKeyMetadata')
     ServerCertificate = Shapes::StructureShape.new(name: 'ServerCertificate')
     ServerCertificateMetadata = Shapes::StructureShape.new(name: 'ServerCertificateMetadata')
-    ServiceFailureException = Shapes::StructureShape.new(name: 'ServiceFailureException')
+    ServiceFailureException = Shapes::StructureShape.new(name: 'ServiceFailureException', error: {"code"=>"ServiceFailure", "httpStatusCode"=>500})
     ServiceLastAccessed = Shapes::StructureShape.new(name: 'ServiceLastAccessed')
-    ServiceNotSupportedException = Shapes::StructureShape.new(name: 'ServiceNotSupportedException')
+    ServiceNotSupportedException = Shapes::StructureShape.new(name: 'ServiceNotSupportedException', error: {"code"=>"NotSupportedService", "httpStatusCode"=>404, "senderFault"=>true})
     ServiceSpecificCredential = Shapes::StructureShape.new(name: 'ServiceSpecificCredential')
     ServiceSpecificCredentialMetadata = Shapes::StructureShape.new(name: 'ServiceSpecificCredentialMetadata')
     ServiceSpecificCredentialsListType = Shapes::ListShape.new(name: 'ServiceSpecificCredentialsListType')
@@ -348,8 +349,8 @@ module Aws::IAM
     TagUserRequest = Shapes::StructureShape.new(name: 'TagUserRequest')
     TrackedActionLastAccessed = Shapes::StructureShape.new(name: 'TrackedActionLastAccessed')
     TrackedActionsLastAccessed = Shapes::ListShape.new(name: 'TrackedActionsLastAccessed')
-    UnmodifiableEntityException = Shapes::StructureShape.new(name: 'UnmodifiableEntityException')
-    UnrecognizedPublicKeyEncodingException = Shapes::StructureShape.new(name: 'UnrecognizedPublicKeyEncodingException')
+    UnmodifiableEntityException = Shapes::StructureShape.new(name: 'UnmodifiableEntityException', error: {"code"=>"UnmodifiableEntity", "httpStatusCode"=>400, "senderFault"=>true})
+    UnrecognizedPublicKeyEncodingException = Shapes::StructureShape.new(name: 'UnrecognizedPublicKeyEncodingException', error: {"code"=>"UnrecognizedPublicKeyEncoding", "httpStatusCode"=>400, "senderFault"=>true})
     UntagInstanceProfileRequest = Shapes::StructureShape.new(name: 'UntagInstanceProfileRequest')
     UntagMFADeviceRequest = Shapes::StructureShape.new(name: 'UntagMFADeviceRequest')
     UntagOpenIDConnectProviderRequest = Shapes::StructureShape.new(name: 'UntagOpenIDConnectProviderRequest')
@@ -444,6 +445,7 @@ module Aws::IAM
     mfaDeviceListType = Shapes::ListShape.new(name: 'mfaDeviceListType')
     minimumPasswordLengthType = Shapes::IntegerShape.new(name: 'minimumPasswordLengthType')
     noSuchEntityMessage = Shapes::StringShape.new(name: 'noSuchEntityMessage')
+    openIdIdpCommunicationErrorExceptionMessage = Shapes::StringShape.new(name: 'openIdIdpCommunicationErrorExceptionMessage')
     organizationsEntityPathType = Shapes::StringShape.new(name: 'organizationsEntityPathType')
     organizationsPolicyIdType = Shapes::StringShape.new(name: 'organizationsPolicyIdType')
     passwordPolicyViolationMessage = Shapes::StringShape.new(name: 'passwordPolicyViolationMessage')
@@ -628,7 +630,7 @@ module Aws::IAM
 
     CreateOpenIDConnectProviderRequest.add_member(:url, Shapes::ShapeRef.new(shape: OpenIDConnectProviderUrlType, required: true, location_name: "Url"))
     CreateOpenIDConnectProviderRequest.add_member(:client_id_list, Shapes::ShapeRef.new(shape: clientIDListType, location_name: "ClientIDList"))
-    CreateOpenIDConnectProviderRequest.add_member(:thumbprint_list, Shapes::ShapeRef.new(shape: thumbprintListType, required: true, location_name: "ThumbprintList"))
+    CreateOpenIDConnectProviderRequest.add_member(:thumbprint_list, Shapes::ShapeRef.new(shape: thumbprintListType, location_name: "ThumbprintList"))
     CreateOpenIDConnectProviderRequest.add_member(:tags, Shapes::ShapeRef.new(shape: tagListType, location_name: "Tags"))
     CreateOpenIDConnectProviderRequest.struct_class = Types::CreateOpenIDConnectProviderRequest
 
@@ -1523,6 +1525,9 @@ module Aws::IAM
 
     OpenIDConnectProviderListType.member = Shapes::ShapeRef.new(shape: OpenIDConnectProviderListEntry)
 
+    OpenIdIdpCommunicationErrorException.add_member(:message, Shapes::ShapeRef.new(shape: openIdIdpCommunicationErrorExceptionMessage, location_name: "message"))
+    OpenIdIdpCommunicationErrorException.struct_class = Types::OpenIdIdpCommunicationErrorException
+
     OrganizationsDecisionDetail.add_member(:allowed_by_organizations, Shapes::ShapeRef.new(shape: booleanType, location_name: "AllowedByOrganizations"))
     OrganizationsDecisionDetail.struct_class = Types::OrganizationsDecisionDetail
 
@@ -2290,6 +2295,7 @@ module Aws::IAM
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: ConcurrentModificationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceFailureException)
+        o.errors << Shapes::ShapeRef.new(shape: OpenIdIdpCommunicationErrorException)
       end)
 
       api.add_operation(:create_policy, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-iam/errors.rb

@@ -46,6 +46,7 @@ module Aws::IAM
   # * {MalformedCertificateException}
   # * {MalformedPolicyDocumentException}
   # * {NoSuchEntityException}
+  # * {OpenIdIdpCommunicationErrorException}
   # * {PasswordPolicyViolationException}
   # * {PolicyEvaluationException}
   # * {PolicyNotAttachableException}
@@ -346,6 +347,21 @@ module Aws::IAM
       end
     end
 
+    class OpenIdIdpCommunicationErrorException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::IAM::Types::OpenIdIdpCommunicationErrorException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class PasswordPolicyViolationException < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-iam/types.rb

@@ -877,14 +877,17 @@ module Aws::IAM
     #   thumbprints for an OIDC provider. This lets you maintain multiple
     #   thumbprints if the identity provider is rotating certificates.
     #
+    #   This parameter is optional. If it is not included, IAM will retrieve
+    #   and use the top intermediate certificate authority (CA) thumbprint
+    #   of the OpenID Connect identity provider server certificate.
+    #
     #   The server certificate thumbprint is the hex-encoded SHA-1 hash
     #   value of the X.509 certificate used by the domain where the OpenID
     #   Connect provider makes its keys available. It is always a
     #   40-character string.
     #
-    #   You must provide at least one thumbprint when creating an IAM OIDC
-    #   provider. For example, assume that the OIDC provider is
-    #   `server.example.com` and the provider stores its keys at
+    #   For example, assume that the OIDC provider is `server.example.com`
+    #   and the provider stores its keys at
     #   https://keys.server.example.com/openid-connect. In that case, the
     #   thumbprint string would be the hex-encoded SHA-1 hash value of the
     #   certificate used by `https://keys.server.example.com.`
@@ -7573,6 +7576,20 @@ module Aws::IAM
       include Aws::Structure
     end
 
+    # The request failed because IAM cannot connect to the OpenID Connect
+    # identity provider URL.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/OpenIdIdpCommunicationErrorException AWS API Documentation
+    #
+    class OpenIdIdpCommunicationErrorException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains information about the effect that Organizations has on a
     # policy simulation.
     #
@@ -9723,13 +9740,14 @@ module Aws::IAM
     #   scenario values and the resources that you must define to run the
     #   simulation.
     #
-    #   Each of the EC2 scenarios requires that you specify instance, image,
-    #   and security group resources. If your scenario includes an EBS
-    #   volume, then you must specify that volume as a resource. If the EC2
-    #   scenario includes VPC, then you must supply the network interface
-    #   resource. If it includes an IP subnet, then you must specify the
-    #   subnet resource. For more information on the EC2 scenario options,
-    #   see [Supported platforms][1] in the *Amazon EC2 User Guide*.
+    #   Each of the Amazon EC2 scenarios requires that you specify instance,
+    #   image, and security group resources. If your scenario includes an
+    #   EBS volume, then you must specify that volume as a resource. If the
+    #   Amazon EC2 scenario includes VPC, then you must supply the network
+    #   interface resource. If it includes an IP subnet, then you must
+    #   specify the subnet resource. For more information on the Amazon EC2
+    #   scenario options, see [Supported platforms][1] in the *Amazon EC2
+    #   User Guide*.
     #
     #   * **EC2-VPC-InstanceStore**
     #
@@ -10030,13 +10048,14 @@ module Aws::IAM
     #   scenario values and the resources that you must define to run the
     #   simulation.
     #
-    #   Each of the EC2 scenarios requires that you specify instance, image,
-    #   and security group resources. If your scenario includes an EBS
-    #   volume, then you must specify that volume as a resource. If the EC2
-    #   scenario includes VPC, then you must supply the network interface
-    #   resource. If it includes an IP subnet, then you must specify the
-    #   subnet resource. For more information on the EC2 scenario options,
-    #   see [Supported platforms][1] in the *Amazon EC2 User Guide*.
+    #   Each of the Amazon EC2 scenarios requires that you specify instance,
+    #   image, and security group resources. If your scenario includes an
+    #   EBS volume, then you must specify that volume as a resource. If the
+    #   Amazon EC2 scenario includes VPC, then you must supply the network
+    #   interface resource. If it includes an IP subnet, then you must
+    #   specify the subnet resource. For more information on the Amazon EC2
+    #   scenario options, see [Supported platforms][1] in the *Amazon EC2
+    #   User Guide*.
     #
     #   * **EC2-VPC-InstanceStore**
     #
@@ -11104,6 +11123,11 @@ module Aws::IAM
     #   URL. For more information, see [Using IAM roles][1] in the *IAM User
     #   Guide*.
     #
+    #   <note markdown="1"> IAM role credentials provided by Amazon EC2 instances assigned to
+    #   the role are not subject to the specified maximum session duration.
+    #
+    #    </note>
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html

data/lib/aws-sdk-iam.rb

@@ -74,6 +74,6 @@ require_relative 'aws-sdk-iam/customizations'
 # @!group service
 module Aws::IAM
 
-  GEM_VERSION = '1.94.0'
+  GEM_VERSION = '1.96.0'
 
 end

data/sig/client.rbs

@@ -186,7 +186,7 @@ module Aws
       def create_open_id_connect_provider: (
                                              url: ::String,
                                              ?client_id_list: Array[::String],
-                                             thumbprint_list: Array[::String],
+                                             ?thumbprint_list: Array[::String],
                                              ?tags: Array[
                                                {
                                                  key: ::String,

data/sig/errors.rbs

@@ -68,6 +68,9 @@ module Aws
       class NoSuchEntityException < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end
+      class OpenIdIdpCommunicationErrorException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
       class PasswordPolicyViolationException < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end

data/sig/types.rbs

@@ -1440,6 +1440,11 @@ module Aws::IAM
       SENSITIVE: []
     end
 
+    class OpenIdIdpCommunicationErrorException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
     class OrganizationsDecisionDetail
       attr_accessor allowed_by_organizations: bool
       SENSITIVE: []

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-iam
 version: !ruby/object:Gem::Version
-  version: 1.94.0
+  version: 1.96.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-26 00:00:00.000000000 Z
+date: 2024-04-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core