aws-sdk-iam 1.151.0 → 1.152.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 59940707d44914e9eb65207c8573302543b7da79bd82e820985728bb83d87597
-  data.tar.gz: bbac5202c1215454935c355c67c1a8838077c1e70c55ace28d80742f6fbcca5d
+  metadata.gz: f5ac6323772bbf9bc878f8ca7467bcc046acdbfb0dc327ccf07db4ad58a11ad8
+  data.tar.gz: ae23c4b71dbb8ebb83d005be79e7d0fc6fadc79a43234723fb54ee3998ae3eb4
 SHA512:
-  metadata.gz: 7cea49568f79e812f47cc5e764415fe4f153d82e2fb5872057ea1c64c2f3d2ccac86b688f9a1f5d5e315724ee58d3245ff9ce98136a54971adab71222296c3ac
-  data.tar.gz: c13d90b6a03a8d10019ce7baf0457b888de004a4ae862934e107ab9858adceab113e1c96e2b994d01f2422c5ee35ab236aa1a619132038f1f0b58d7ba84158fc
+  metadata.gz: '00209a100f5de3d6e941aa0da9743233322c11ddafd5cdf7166f65cd3e9127f3b37cdd743776c6b0284394c28a66b8476c5dd5794b845ea892ad5343e0025023'
+  data.tar.gz: 3c221bd71ccb9ecac03e3a90dc382ee345808931f93f0600b8c9567b1cd7c7f5b6c5edd1fdfcf0d8c42b584e8b7dc0f3859de4d0093e4aa24e488a1d721855d1

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.152.0 (2026-08-12)
+------------------
+
+* Feature - Introduced role manager, an IAM capability that automatically sets up the IAM roles your AWS services need. When you set up a supported service in the console, role manager creates a role for you or reuses an existing one from an AWS-managed template.
+
 1.151.0 (2026-08-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.151.0
+1.152.0

data/lib/aws-sdk-iam/client.rb

@@ -511,6 +511,86 @@ module Aws::IAM
       req.send_request(options)
     end
 
+    # Creates an IAM role from the specified role template. The new role
+    # takes its configuration—including its name, path, trust policy, inline
+    # and managed policies, permissions boundary, tags, and maximum session
+    # duration—from the role template version that you specify. For more
+    # information about roles, see [IAM roles][1] in the *IAM User Guide*.
+    #
+    # If the template version defines parameters, use the
+    # `ReplacementValues` parameter to supply the values that the service
+    # substitutes into the role during creation.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html
+    #
+    # @option params [required, String] :template_arn
+    #   The Amazon Resource Name (ARN) of the role template to create the role
+    #   from.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names (ARNs)][1]
+    #   in the *Amazon Web Services General Reference*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #
+    # @option params [Integer] :template_minor_version
+    #   The minor version of the role template to use. If you do not specify a
+    #   minor version, the service uses the template's default minor version.
+    #
+    # @option params [Hash<String,Types::ReplacementValueEntry>] :replacement_values
+    #   A map of values to substitute for the parameters that are defined in
+    #   the role template version. Each key is a parameter name from the
+    #   template, and each value is a structure that contains the replacement
+    #   values for that parameter.
+    #
+    # @return [Types::AcquireRoleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::AcquireRoleResponse#role #role} => Types::Role
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.acquire_role({
+    #     template_arn: "arnType", # required
+    #     template_minor_version: 1,
+    #     replacement_values: {
+    #       "stringType" => {
+    #         values: ["stringType"], # required
+    #       },
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.role.path #=> String
+    #   resp.role.role_name #=> String
+    #   resp.role.role_id #=> String
+    #   resp.role.arn #=> String
+    #   resp.role.create_date #=> Time
+    #   resp.role.assume_role_policy_document #=> String
+    #   resp.role.description #=> String
+    #   resp.role.max_session_duration #=> Integer
+    #   resp.role.permissions_boundary.permissions_boundary_type #=> String, one of "PermissionsBoundaryPolicy"
+    #   resp.role.permissions_boundary.permissions_boundary_arn #=> String
+    #   resp.role.tags #=> Array
+    #   resp.role.tags[0].key #=> String
+    #   resp.role.tags[0].value #=> String
+    #   resp.role.role_last_used.last_used_date #=> Time
+    #   resp.role.role_last_used.region #=> String
+    #   resp.role.source_role_template.template_arn #=> String
+    #   resp.role.source_role_template.template_minor_version #=> Integer
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/AcquireRole AWS API Documentation
+    #
+    # @overload acquire_role(params = {})
+    # @param [Hash] params ({})
+    def acquire_role(params = {}, options = {})
+      req = build_request(:acquire_role, params)
+      req.send_request(options)
+    end
+
     # Adds a new client ID (also known as audience) to the list of client
     # IDs already registered for the specified IAM OpenID Connect (OIDC)
     # provider resource.
@@ -1491,6 +1571,8 @@ module Aws::IAM
     #   resp.instance_profile.roles[0].tags[0].value #=> String
     #   resp.instance_profile.roles[0].role_last_used.last_used_date #=> Time
     #   resp.instance_profile.roles[0].role_last_used.region #=> String
+    #   resp.instance_profile.roles[0].source_role_template.template_arn #=> String
+    #   resp.instance_profile.roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.instance_profile.tags #=> Array
     #   resp.instance_profile.tags[0].key #=> String
     #   resp.instance_profile.tags[0].value #=> String
@@ -2256,6 +2338,8 @@ module Aws::IAM
     #   resp.role.tags[0].value #=> String
     #   resp.role.role_last_used.last_used_date #=> Time
     #   resp.role.role_last_used.region #=> String
+    #   resp.role.source_role_template.template_arn #=> String
+    #   resp.role.source_role_template.template_minor_version #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/CreateRole AWS API Documentation
     #
@@ -2461,6 +2545,8 @@ module Aws::IAM
     #   resp.role.tags[0].value #=> String
     #   resp.role.role_last_used.last_used_date #=> Time
     #   resp.role.role_last_used.region #=> String
+    #   resp.role.source_role_template.template_arn #=> String
+    #   resp.role.source_role_template.template_minor_version #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/CreateServiceLinkedRole AWS API Documentation
     #
@@ -5061,6 +5147,8 @@ module Aws::IAM
     #   resp.role_detail_list[0].instance_profile_list[0].roles[0].tags[0].value #=> String
     #   resp.role_detail_list[0].instance_profile_list[0].roles[0].role_last_used.last_used_date #=> Time
     #   resp.role_detail_list[0].instance_profile_list[0].roles[0].role_last_used.region #=> String
+    #   resp.role_detail_list[0].instance_profile_list[0].roles[0].source_role_template.template_arn #=> String
+    #   resp.role_detail_list[0].instance_profile_list[0].roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.role_detail_list[0].instance_profile_list[0].tags #=> Array
     #   resp.role_detail_list[0].instance_profile_list[0].tags[0].key #=> String
     #   resp.role_detail_list[0].instance_profile_list[0].tags[0].value #=> String
@@ -5166,6 +5254,37 @@ module Aws::IAM
       req.send_request(options)
     end
 
+    # Retrieves the account-level properties for the caller's Amazon Web
+    # Services account. Account properties are configuration settings that
+    # control account-wide IAM features such as Role Manager.
+    #
+    # The service returns properties as key-value pairs in
+    # `Namespace/PropertyName` format. Each namespace groups related
+    # configuration settings. Use [PutAccountProperties][1] to modify these
+    # properties.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutAccountProperties.html
+    #
+    # @return [Types::GetAccountPropertiesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetAccountPropertiesResponse#properties #properties} => Hash&lt;String,String&gt;
+    #
+    # @example Response structure
+    #
+    #   resp.properties #=> Hash
+    #   resp.properties["accountPropertyKeyType"] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/GetAccountProperties AWS API Documentation
+    #
+    # @overload get_account_properties(params = {})
+    # @param [Hash] params ({})
+    def get_account_properties(params = {}, options = {})
+      req = build_request(:get_account_properties, params)
+      req.send_request(options)
+    end
+
     # Retrieves information about IAM entity usage and IAM quotas in the
     # Amazon Web Services account.
     #
@@ -5808,6 +5927,8 @@ module Aws::IAM
     #   resp.instance_profile.roles[0].tags[0].value #=> String
     #   resp.instance_profile.roles[0].role_last_used.last_used_date #=> Time
     #   resp.instance_profile.roles[0].role_last_used.region #=> String
+    #   resp.instance_profile.roles[0].source_role_template.template_arn #=> String
+    #   resp.instance_profile.roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.instance_profile.tags #=> Array
     #   resp.instance_profile.tags[0].key #=> String
     #   resp.instance_profile.tags[0].value #=> String
@@ -6420,6 +6541,8 @@ module Aws::IAM
     #   resp.role.tags[0].value #=> String
     #   resp.role.role_last_used.last_used_date #=> Time
     #   resp.role.role_last_used.region #=> String
+    #   resp.role.source_role_template.template_arn #=> String
+    #   resp.role.source_role_template.template_minor_version #=> Integer
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -6518,6 +6641,93 @@ module Aws::IAM
       req.send_request(options)
     end
 
+    # Retrieves information about a version of the specified role template.
+    # Role templates define a reusable configuration—including role name and
+    # path patterns, trust policy, inline and managed policies, permissions
+    # boundary, tags, and maximum session duration—that you use to create
+    # IAM roles with [AcquireRole][1].
+    #
+    # If you do not specify a minor version, the service returns the
+    # template's default minor version.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html
+    #
+    # @option params [required, String] :template_arn
+    #   The Amazon Resource Name (ARN) of the role template whose version you
+    #   want to retrieve.
+    #
+    #   For more information about ARNs, see [Amazon Resource Names (ARNs)][1]
+    #   in the *Amazon Web Services General Reference*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
+    #
+    # @option params [Integer] :minor_version
+    #   The minor version of the role template to retrieve. If you do not
+    #   specify a minor version, the service returns the template's default
+    #   minor version.
+    #
+    # @return [Types::GetRoleTemplateVersionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetRoleTemplateVersionResponse#role_template_version #role_template_version} => Types::RoleTemplateVersion
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_role_template_version({
+    #     template_arn: "arnType", # required
+    #     minor_version: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.role_template_version.template_arn #=> String
+    #   resp.role_template_version.template_name #=> String
+    #   resp.role_template_version.template_version_id #=> String
+    #   resp.role_template_version.description #=> String
+    #   resp.role_template_version.major_version #=> Integer
+    #   resp.role_template_version.default_minor_version #=> Integer
+    #   resp.role_template_version.managed_by_type #=> String, one of "Service"
+    #   resp.role_template_version.managed_by_value #=> String
+    #   resp.role_template_version.enabled #=> Boolean
+    #   resp.role_template_version.minor_version #=> Integer
+    #   resp.role_template_version.role_name_pattern #=> String
+    #   resp.role_template_version.role_path_pattern #=> String
+    #   resp.role_template_version.role_description_pattern #=> String
+    #   resp.role_template_version.assume_role_policy_document_template #=> String
+    #   resp.role_template_version.inline_policy_templates #=> Array
+    #   resp.role_template_version.inline_policy_templates[0].policy_name #=> String
+    #   resp.role_template_version.inline_policy_templates[0].policy_document #=> String
+    #   resp.role_template_version.managed_policy_arns #=> Array
+    #   resp.role_template_version.managed_policy_arns[0] #=> String
+    #   resp.role_template_version.permission_boundary_arn #=> String
+    #   resp.role_template_version.parameters_definition #=> Array
+    #   resp.role_template_version.parameters_definition[0].name #=> String
+    #   resp.role_template_version.parameters_definition[0].type #=> String, one of "String", "StringList", "Number", "NumberList", "Arn", "ArnList"
+    #   resp.role_template_version.parameters_definition[0].sub_type #=> String
+    #   resp.role_template_version.parameters_definition[0].description #=> String
+    #   resp.role_template_version.parameters_definition[0].is_required #=> Boolean
+    #   resp.role_template_version.parameters_definition[0].default_value #=> String
+    #   resp.role_template_version.parameters_definition[0].immutable #=> Boolean
+    #   resp.role_template_version.role_tags_template #=> Array
+    #   resp.role_template_version.role_tags_template[0].key #=> String
+    #   resp.role_template_version.role_tags_template[0].value #=> String
+    #   resp.role_template_version.max_session_duration #=> Integer
+    #   resp.role_template_version.version_enabled #=> Boolean
+    #   resp.role_template_version.create_timestamp #=> Time
+    #   resp.role_template_version.update_timestamp #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/GetRoleTemplateVersion AWS API Documentation
+    #
+    # @overload get_role_template_version(params = {})
+    # @param [Hash] params ({})
+    def get_role_template_version(params = {}, options = {})
+      req = build_request(:get_role_template_version, params)
+      req.send_request(options)
+    end
+
     # Returns the SAML provider metadocument that was uploaded when the IAM
     # SAML provider resource object was created or updated.
     #
@@ -8390,6 +8600,8 @@ module Aws::IAM
     #   resp.instance_profiles[0].roles[0].tags[0].value #=> String
     #   resp.instance_profiles[0].roles[0].role_last_used.last_used_date #=> Time
     #   resp.instance_profiles[0].roles[0].role_last_used.region #=> String
+    #   resp.instance_profiles[0].roles[0].source_role_template.template_arn #=> String
+    #   resp.instance_profiles[0].roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.instance_profiles[0].tags #=> Array
     #   resp.instance_profiles[0].tags[0].key #=> String
     #   resp.instance_profiles[0].tags[0].value #=> String
@@ -8486,6 +8698,8 @@ module Aws::IAM
     #   resp.instance_profiles[0].roles[0].tags[0].value #=> String
     #   resp.instance_profiles[0].roles[0].role_last_used.last_used_date #=> Time
     #   resp.instance_profiles[0].roles[0].role_last_used.region #=> String
+    #   resp.instance_profiles[0].roles[0].source_role_template.template_arn #=> String
+    #   resp.instance_profiles[0].roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.instance_profiles[0].tags #=> Array
     #   resp.instance_profiles[0].tags[0].key #=> String
     #   resp.instance_profiles[0].tags[0].value #=> String
@@ -9501,6 +9715,8 @@ module Aws::IAM
     #   resp.roles[0].tags[0].value #=> String
     #   resp.roles[0].role_last_used.last_used_date #=> Time
     #   resp.roles[0].role_last_used.region #=> String
+    #   resp.roles[0].source_role_template.template_arn #=> String
+    #   resp.roles[0].source_role_template.template_minor_version #=> Integer
     #   resp.is_truncated #=> Boolean
     #   resp.marker #=> String
     #
@@ -10498,6 +10714,49 @@ module Aws::IAM
       req.send_request(options)
     end
 
+    # Sets account-level properties for the caller's Amazon Web Services
+    # account. Account properties are configuration settings that control
+    # account-wide IAM features such as Role Manager.
+    #
+    # Specify properties as key-value pairs in `Namespace/PropertyName`
+    # format. All properties in a single request must belong to the same
+    # namespace. Use [GetAccountProperties][1] to view the current
+    # properties.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccountProperties.html
+    #
+    # @option params [required, Hash<String,String>] :properties
+    #   A map of property key-value pairs to set. All keys must belong to the
+    #   same namespace.
+    #
+    #   Each key uses the format `Namespace/PropertyName`. The key must
+    #   contain exactly one `/` separating the namespace from the property
+    #   name, and cannot start or end with `/`.
+    #
+    #   The service validates each value based on the property key's expected
+    #   type. For example, boolean properties expect `true` or `false`.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_account_properties({
+    #     properties: { # required
+    #       "accountPropertyKeyType" => "accountPropertyValueType",
+    #     },
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/PutAccountProperties AWS API Documentation
+    #
+    # @overload put_account_properties(params = {})
+    # @param [Hash] params ({})
+    def put_account_properties(params = {}, options = {})
+      req = build_request(:put_account_properties, params)
+      req.send_request(options)
+    end
+
     # Adds or updates an inline policy document that is embedded in the
     # specified IAM group.
     #
@@ -13944,6 +14203,8 @@ module Aws::IAM
     #   resp.role.tags[0].value #=> String
     #   resp.role.role_last_used.last_used_date #=> Time
     #   resp.role.role_last_used.region #=> String
+    #   resp.role.source_role_template.template_arn #=> String
+    #   resp.role.source_role_template.template_minor_version #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/iam-2010-05-08/UpdateRoleDescription AWS API Documentation
     #
@@ -14796,7 +15057,7 @@ module Aws::IAM
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-iam'
-      context[:gem_version] = '1.151.0'
+      context[:gem_version] = '1.152.0'
       Seahorse::Client::Request.new(handlers, context)
     end