aws-sdk-iamtoolbox 1.0.0

data/lib/aws-sdk-iamtoolbox/types.rb

@@ -0,0 +1,302 @@
+# frozen_string_literal: true
+
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws::IAMToolbox
+  module Types
+
+    # The caller does not have sufficient access to perform this action.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/AccessDeniedException AWS API Documentation
+    #
+    class AccessDeniedException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An entity that a policy is attached to, identified by its ARN.
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the entity that the policy is attached to. The ARN format
+    #   depends on the policy type:
+    #
+    #   * For identity, session, and permissions boundary policies, this is
+    #     the principal ARN (for example, an IAM role or user ARN).
+    #
+    #   * For resource-based policies, this is the resource ARN.
+    #
+    #   * For organization control policies (SCPs and RCPs), this is the AWS
+    #     Organizations ARN of the account, organizational unit, or root.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/AttachedTo AWS API Documentation
+    #
+    class AttachedTo < Struct.new(
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Represents an individual evaluation for a single action and resource
+    # pair. This includes the context, the resulting effect, and any
+    # policies that matched.
+    #
+    # @!attribute [rw] action
+    #   The action evaluated for this request (for example, `iam:PassRole`).
+    #   @return [String]
+    #
+    # @!attribute [rw] resource
+    #   The resource that the action targeted. This is typically a resource
+    #   ARN, but can be a wildcard ARN that matches multiple resources, or
+    #   empty for actions that are not resource-specific.
+    #   @return [String]
+    #
+    # @!attribute [rw] context
+    #   The context keys and values specific to this evaluation. These are
+    #   applied on top of the request context.
+    #   @return [Hash<String,Hash,Array,String,Numeric,Boolean>]
+    #
+    # @!attribute [rw] evaluated_effect
+    #   The result of the evaluation. Valid values:
+    #
+    #   * `ALLOW` - The action was allowed.
+    #
+    #   * `EXPLICIT_DENY` - The action was explicitly denied by a policy.
+    #
+    #   * `IMPLICIT_DENY` - The action was denied because no policy allowed
+    #     it.
+    #   @return [String]
+    #
+    # @!attribute [rw] matched_policies
+    #   The policies that matched during evaluation of this action and
+    #   resource. An implicit denial produces no matched policies.
+    #   @return [Array<Types::MatchedPolicy>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/Evaluation AWS API Documentation
+    #
+    class Evaluation < Struct.new(
+      :action,
+      :resource,
+      :context,
+      :evaluated_effect,
+      :matched_policies)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorization_id
+    #   The authorization ID received in the access denied error message.
+    #   This ID identifies the specific request to retrieve details for.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token from a previous call, used to retrieve the next
+    #   page of evaluations. Omit this value on the first call.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/GetRequestAuthorizationDetailsInput AWS API Documentation
+    #
+    class GetRequestAuthorizationDetailsInput < Struct.new(
+      :authorization_id,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] request_context
+    #   The request context is the set of context keys and values that apply
+    #   to the entire request and are shared by all evaluations.
+    #   @return [Hash<String,Hash,Array,String,Numeric,Boolean>]
+    #
+    # @!attribute [rw] evaluations
+    #   The list of evaluations for this request. Each evaluation shows how
+    #   a single action and resource pair was evaluated. This includes the
+    #   context, the effect, and any policies that matched.
+    #   @return [Array<Types::Evaluation>]
+    #
+    # @!attribute [rw] policies
+    #   The list of policies that were evaluated.
+    #   @return [Array<Types::PolicyInfo>]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token for retrieving the next page of evaluations.
+    #   This value is absent when there are no more results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/GetRequestAuthorizationDetailsOutput AWS API Documentation
+    #
+    class GetRequestAuthorizationDetailsOutput < Struct.new(
+      :request_context,
+      :evaluations,
+      :policies,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An unexpected error occurred while processing the request. Try again.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/InternalServerException AWS API Documentation
+    #
+    class InternalServerException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A policy that matched during evaluation, referenced by URI. The URI
+    # corresponds to a policy in the top-level policies list.
+    #
+    # @!attribute [rw] uri
+    #   The URI of the policy. This cross-references an entry in the
+    #   top-level policies list. The value depends on the policy type:
+    #
+    #   * For managed policies, this is the policy ARN.
+    #
+    #   * For inline policies, this is an opaque identifier.
+    #   @return [String]
+    #
+    # @!attribute [rw] matched_statements
+    #   The statements within the policy that matched during the evaluation.
+    #   @return [Array<Types::MatchedStatement>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/MatchedPolicy AWS API Documentation
+    #
+    class MatchedPolicy < Struct.new(
+      :uri,
+      :matched_statements)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A statement that matched during evaluation.
+    #
+    # @!attribute [rw] sid
+    #   The statement ID (Sid). If the statement has no Sid, one is
+    #   generated for reference.
+    #   @return [String]
+    #
+    # @!attribute [rw] evaluated_effect
+    #   The evaluated effect of this statement. Valid values:
+    #
+    #   * `ALLOW` - The statement allows the action.
+    #
+    #   * `DENY` - The statement denies the action.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/MatchedStatement AWS API Documentation
+    #
+    class MatchedStatement < Struct.new(
+      :sid,
+      :evaluated_effect)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains details about a policy evaluated during authorization.
+    # Details include the policy type, whether it is inline or managed, a
+    # URI that identifies it, and the entities it is attached to.
+    #
+    # @!attribute [rw] type
+    #   The type of policy. Valid values:
+    #
+    #   * `IDENTITY_BASED_POLICY` - An identity-based policy attached to an
+    #     IAM user, group, or role.
+    #
+    #   * `PERMISSIONS_BOUNDARY` - A permissions boundary for an IAM entity.
+    #
+    #   * `RESOURCE_BASED_POLICY` - A resource-based policy attached to a
+    #     resource.
+    #
+    #   * `RESOURCE_CONTROL_POLICY` - A resource control policy (RCP) in AWS
+    #     Organizations.
+    #
+    #   * `SERVICE_CONTROL_POLICY` - A service control policy (SCP) in AWS
+    #     Organizations.
+    #
+    #   * `SESSION_POLICY` - A session policy passed during role assumption
+    #     or federation.
+    #
+    #   * `VPC_ENDPOINT_POLICY` - A VPC endpoint policy.
+    #   @return [String]
+    #
+    # @!attribute [rw] inline
+    #   Specifies whether this is an inline policy (`true`) or a managed
+    #   policy (`false`).
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] uri
+    #   A URI that identifies the policy. Use this URI to cross-reference
+    #   the policy with the matching policies in each evaluation. The value
+    #   depends on the policy type:
+    #
+    #   * For managed policies, this is the policy ARN.
+    #
+    #   * For inline policies, which have no ARN, this is an opaque
+    #     identifier.
+    #   @return [String]
+    #
+    # @!attribute [rw] attached_to
+    #   The entities that the policy is attached to. For identity, session,
+    #   and resource-based policies, this is typically a single entity. For
+    #   organization control policies (SCPs and RCPs), it can be multiple
+    #   entities at different levels of the organization hierarchy.
+    #   @return [Array<Types::AttachedTo>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/PolicyInfo AWS API Documentation
+    #
+    class PolicyInfo < Struct.new(
+      :type,
+      :inline,
+      :uri,
+      :attached_to)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The requested authorization details do not exist in this region or
+    # have expired. Verify that the authorization ID from the access denied
+    # error message is correct and the call is made in the region where the
+    # denial occurred. Ensure that the calling principal belongs to the same
+    # account or organization as the original denied request.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/ResourceNotFoundException AWS API Documentation
+    #
+    class ResourceNotFoundException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The request is malformed or is missing one or more required
+    # parameters. Check the request parameters and try again.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/iam-toolbox-2018-05-10/ValidationException AWS API Documentation
+    #
+    class ValidationException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+  end
+end
+

data/lib/aws-sdk-iamtoolbox/waiters.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+require 'aws-sdk-core/waiters'
+
+module Aws::IAMToolbox
+  module Waiters
+  end
+end

data/lib/aws-sdk-iamtoolbox.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+
+require 'aws-sdk-core'
+require 'aws-sigv4'
+
+Aws::Plugins::GlobalConfiguration.add_identifier(:iamtoolbox)
+
+# This module provides support for IAM Toolbox (Preview). This module is available in the
+# `aws-sdk-iamtoolbox` gem.
+#
+# # Client
+#
+# The {Client} class provides one method for each API operation. Operation
+# methods each accept a hash of request parameters and return a response
+# structure.
+#
+#     iam_toolbox = Aws::IAMToolbox::Client.new
+#     resp = iam_toolbox.get_request_authorization_details(params)
+#
+# See {Client} for more information.
+#
+# # Errors
+#
+# Errors returned from IAM Toolbox (Preview) are defined in the
+# {Errors} module and all extend {Errors::ServiceError}.
+#
+#     begin
+#       # do stuff
+#     rescue Aws::IAMToolbox::Errors::ServiceError
+#       # rescues all IAM Toolbox (Preview) API errors
+#     end
+#
+# See {Errors} for more information.
+#
+# @!group service
+module Aws::IAMToolbox
+  autoload :Types, 'aws-sdk-iamtoolbox/types'
+  autoload :ClientApi, 'aws-sdk-iamtoolbox/client_api'
+  module Plugins
+    autoload :Endpoints, 'aws-sdk-iamtoolbox/plugins/endpoints.rb'
+  end
+  autoload :Client, 'aws-sdk-iamtoolbox/client'
+  autoload :Errors, 'aws-sdk-iamtoolbox/errors'
+  autoload :Waiters, 'aws-sdk-iamtoolbox/waiters'
+  autoload :Resource, 'aws-sdk-iamtoolbox/resource'
+  autoload :EndpointParameters, 'aws-sdk-iamtoolbox/endpoint_parameters'
+  autoload :EndpointProvider, 'aws-sdk-iamtoolbox/endpoint_provider'
+  autoload :Endpoints, 'aws-sdk-iamtoolbox/endpoints'
+
+  GEM_VERSION = '1.0.0'
+
+end
+
+require_relative 'aws-sdk-iamtoolbox/customizations'

data/sig/client.rbs

@@ -0,0 +1,97 @@
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws
+  module IAMToolbox
+    class Client < ::Seahorse::Client::Base
+      include ::Aws::ClientStubs
+
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IAMToolbox/Client.html#initialize-instance_method
+      def self.new: (
+                      ?credentials: untyped,
+                      ?region: String,
+                      ?access_key_id: String,
+                      ?account_id: String,
+                      ?active_endpoint_cache: bool,
+                      ?adaptive_retry_wait_to_fill: bool,
+                      ?auth_scheme_preference: Array[String],
+                      ?client_side_monitoring: bool,
+                      ?client_side_monitoring_client_id: String,
+                      ?client_side_monitoring_host: String,
+                      ?client_side_monitoring_port: Integer,
+                      ?client_side_monitoring_publisher: untyped,
+                      ?convert_params: bool,
+                      ?correct_clock_skew: bool,
+                      ?defaults_mode: String,
+                      ?disable_host_prefix_injection: bool,
+                      ?disable_request_compression: bool,
+                      ?endpoint: String,
+                      ?endpoint_cache_max_entries: Integer,
+                      ?endpoint_cache_max_threads: Integer,
+                      ?endpoint_cache_poll_interval: Integer,
+                      ?endpoint_discovery: bool,
+                      ?ignore_configured_endpoint_urls: bool,
+                      ?log_formatter: untyped,
+                      ?log_level: Symbol,
+                      ?logger: untyped,
+                      ?max_attempts: Integer,
+                      ?profile: String,
+                      ?request_checksum_calculation: String,
+                      ?request_min_compression_size_bytes: Integer,
+                      ?response_checksum_validation: String,
+                      ?retry_backoff: Proc,
+                      ?retry_base_delay: Float,
+                      ?retry_jitter: (:none | :equal | :full | ^(Integer) -> Integer),
+                      ?retry_limit: Integer,
+                      ?retry_max_delay: Integer,
+                      ?retry_mode: ("legacy" | "standard" | "adaptive"),
+                      ?sdk_ua_app_id: String,
+                      ?secret_access_key: String,
+                      ?session_token: String,
+                      ?sigv4a_signing_region_set: Array[String],
+                      ?stub_responses: untyped,
+                      ?telemetry_provider: Aws::Telemetry::TelemetryProviderBase,
+                      ?token_provider: untyped,
+                      ?use_dualstack_endpoint: bool,
+                      ?use_fips_endpoint: bool,
+                      ?validate_params: bool,
+                      ?endpoint_provider: untyped,
+                      ?http_proxy: String,
+                      ?http_open_timeout: (Float | Integer),
+                      ?http_read_timeout: (Float | Integer),
+                      ?http_idle_timeout: (Float | Integer),
+                      ?http_continue_timeout: (Float | Integer),
+                      ?ssl_timeout: (Float | Integer | nil),
+                      ?http_wire_trace: bool,
+                      ?ssl_verify_peer: bool,
+                      ?ssl_ca_bundle: String,
+                      ?ssl_ca_directory: String,
+                      ?ssl_ca_store: String,
+                      ?on_chunk_received: Proc,
+                      ?on_chunk_sent: Proc,
+                      ?raise_response_errors: bool
+                    ) -> instance
+                  | (?Hash[Symbol, untyped]) -> instance
+
+
+      interface _GetRequestAuthorizationDetailsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetRequestAuthorizationDetailsOutput]
+        def request_context: () -> ::Hash[::String, untyped]
+        def evaluations: () -> ::Array[Types::Evaluation]
+        def policies: () -> ::Array[Types::PolicyInfo]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IAMToolbox/Client.html#get_request_authorization_details-instance_method
+      def get_request_authorization_details: (
+                                               authorization_id: ::String,
+                                               ?next_token: ::String
+                                             ) -> _GetRequestAuthorizationDetailsResponseSuccess
+                                           | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetRequestAuthorizationDetailsResponseSuccess
+    end
+  end
+end
+

data/sig/errors.rbs

@@ -0,0 +1,28 @@
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws
+  module IAMToolbox
+    module Errors
+      class ServiceError < ::Aws::Errors::ServiceError
+      end
+
+      class AccessDeniedException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
+      class InternalServerException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
+      class ResourceNotFoundException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
+      class ValidationException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
+    end
+  end
+end

data/sig/resource.rbs

@@ -0,0 +1,85 @@
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws
+  module IAMToolbox
+    # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IAMToolbox/Resource.html
+    class Resource
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IAMToolbox/Resource.html#initialize-instance_method
+      def initialize: (
+                        ?client: Client,
+                        ?credentials: untyped,
+                        ?region: String,
+                        ?access_key_id: String,
+                        ?account_id: String,
+                        ?active_endpoint_cache: bool,
+                        ?adaptive_retry_wait_to_fill: bool,
+                        ?auth_scheme_preference: Array[String],
+                        ?client_side_monitoring: bool,
+                        ?client_side_monitoring_client_id: String,
+                        ?client_side_monitoring_host: String,
+                        ?client_side_monitoring_port: Integer,
+                        ?client_side_monitoring_publisher: untyped,
+                        ?convert_params: bool,
+                        ?correct_clock_skew: bool,
+                        ?defaults_mode: String,
+                        ?disable_host_prefix_injection: bool,
+                        ?disable_request_compression: bool,
+                        ?endpoint: String,
+                        ?endpoint_cache_max_entries: Integer,
+                        ?endpoint_cache_max_threads: Integer,
+                        ?endpoint_cache_poll_interval: Integer,
+                        ?endpoint_discovery: bool,
+                        ?ignore_configured_endpoint_urls: bool,
+                        ?log_formatter: untyped,
+                        ?log_level: Symbol,
+                        ?logger: untyped,
+                        ?max_attempts: Integer,
+                        ?profile: String,
+                        ?request_checksum_calculation: String,
+                        ?request_min_compression_size_bytes: Integer,
+                        ?response_checksum_validation: String,
+                        ?retry_backoff: Proc,
+                        ?retry_base_delay: Float,
+                        ?retry_jitter: (:none | :equal | :full | ^(Integer) -> Integer),
+                        ?retry_limit: Integer,
+                        ?retry_max_delay: Integer,
+                        ?retry_mode: ("legacy" | "standard" | "adaptive"),
+                        ?sdk_ua_app_id: String,
+                        ?secret_access_key: String,
+                        ?session_token: String,
+                        ?sigv4a_signing_region_set: Array[String],
+                        ?stub_responses: untyped,
+                        ?telemetry_provider: Aws::Telemetry::TelemetryProviderBase,
+                        ?token_provider: untyped,
+                        ?use_dualstack_endpoint: bool,
+                        ?use_fips_endpoint: bool,
+                        ?validate_params: bool,
+                        ?endpoint_provider: untyped,
+                        ?http_proxy: String,
+                        ?http_open_timeout: (Float | Integer),
+                        ?http_read_timeout: (Float | Integer),
+                        ?http_idle_timeout: (Float | Integer),
+                        ?http_continue_timeout: (Float | Integer),
+                        ?ssl_timeout: (Float | Integer | nil),
+                        ?http_wire_trace: bool,
+                        ?ssl_verify_peer: bool,
+                        ?ssl_ca_bundle: String,
+                        ?ssl_ca_directory: String,
+                        ?ssl_ca_store: String,
+                        ?on_chunk_received: Proc,
+                        ?on_chunk_sent: Proc,
+                        ?raise_response_errors: bool
+                      ) -> void
+                    | (?Hash[Symbol, untyped]) -> void
+
+      def client: () -> Client
+
+
+    end
+  end
+end

data/sig/types.rbs

@@ -0,0 +1,79 @@
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws::IAMToolbox
+  module Types
+
+    class AccessDeniedException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
+    class AttachedTo
+      attr_accessor arn: ::String
+      SENSITIVE: []
+    end
+
+    class Evaluation
+      attr_accessor action: ::String
+      attr_accessor resource: ::String
+      attr_accessor context: ::Hash[::String, untyped]
+      attr_accessor evaluated_effect: ("ALLOW" | "EXPLICIT_DENY" | "IMPLICIT_DENY")
+      attr_accessor matched_policies: ::Array[Types::MatchedPolicy]
+      SENSITIVE: []
+    end
+
+    class GetRequestAuthorizationDetailsInput
+      attr_accessor authorization_id: ::String
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class GetRequestAuthorizationDetailsOutput
+      attr_accessor request_context: ::Hash[::String, untyped]
+      attr_accessor evaluations: ::Array[Types::Evaluation]
+      attr_accessor policies: ::Array[Types::PolicyInfo]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class InternalServerException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
+    class MatchedPolicy
+      attr_accessor uri: ::String
+      attr_accessor matched_statements: ::Array[Types::MatchedStatement]
+      SENSITIVE: []
+    end
+
+    class MatchedStatement
+      attr_accessor sid: ::String
+      attr_accessor evaluated_effect: ("ALLOW" | "DENY")
+      SENSITIVE: []
+    end
+
+    class PolicyInfo
+      attr_accessor type: ("IDENTITY_BASED_POLICY" | "RESOURCE_BASED_POLICY" | "PERMISSIONS_BOUNDARY" | "SESSION_POLICY" | "SERVICE_CONTROL_POLICY" | "RESOURCE_CONTROL_POLICY" | "VPC_ENDPOINT_POLICY")
+      attr_accessor inline: bool
+      attr_accessor uri: ::String
+      attr_accessor attached_to: ::Array[Types::AttachedTo]
+      SENSITIVE: []
+    end
+
+    class ResourceNotFoundException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
+    class ValidationException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+  end
+end

data/sig/waiters.rbs

@@ -0,0 +1,13 @@
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+module Aws
+  module IAMToolbox
+    module Waiters
+    end
+  end
+end