aws-sdk-identitystore 1.59.0 → 1.60.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8865fb3b4b67962a0e2511d446aa612b775a8569eb0d265bc47ea0a33a523018
-  data.tar.gz: ee2cd44af56f884fd5f25c8830bc29ea23060fa7f2cd094456806aa58db7c462
+  metadata.gz: 19d32eabe615b4269f26d8ac54a14c670ee4d4b6595454eb700a8256df742966
+  data.tar.gz: 0ca1094d715a3f1378bd391fc8b41cb0834b8cab347774bf5cae4e4e8c91b5f0
 SHA512:
-  metadata.gz: df55ee00896df33da072a2149d92512b8d56c6798d3db1129e57e935702e1046c6b38f94ff6c74f5a1a2c302ff8692b84dd3f9f1867f6991d2dfc5e7aa8c51fe
-  data.tar.gz: 27cee6f4d5d100ec8bcde0613a88f5837cf6f73fb883c007475907a4db7b13c3e81dbb7b292e120580f311e586c9e2c4b982c5e9267271828cab6c6349e767d8
+  metadata.gz: 67edfb2400ef97c3bcb876b8d5e2f5dee87e207a0492cf618f911e6b93c2292ced7dfcfe0271d8c87d52a154479f960b44ba7012abb2580090d5b3af549cb2fe
+  data.tar.gz: f2f408a39e73cb451e0e48a68be6f4d56aabd68593766fc3355806e295ac26837cff86246bf8c42652582b0024be947000df7f71d6ef8cf180d84bfe7c29dca4

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.60.0 (2025-11-06)
+------------------
+
+* Feature - IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy.
+
 1.59.0 (2025-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.59.0
+1.60.0

data/lib/aws-sdk-identitystore/client.rb

@@ -582,12 +582,13 @@ module Aws::IdentityStore
     #   reserved names and can't be used for users or groups.
     #
     # @option params [Types::Name] :name
-    #   An object containing the name of the user.
+    #   An object containing the name of the user. When used in IAM Identity
+    #   Center, this parameter is required.
     #
     # @option params [String] :display_name
     #   A string containing the name of the user. This value is typically
     #   formatted for display when the user is referenced. For example, "John
-    #   Doe."
+    #   Doe." When used in IAM Identity Center, this parameter is required.
     #
     # @option params [String] :nick_name
     #   A string containing an alternate name for the user.
@@ -625,10 +626,23 @@ module Aws::IdentityStore
     # @option params [String] :timezone
     #   A string containing the time zone of the user.
     #
+    # @option params [Array<Types::Photo>] :photos
+    #   A list of photos associated with the user. You can add up to 3 photos
+    #   per user. Each photo can include a value, type, display name, and
+    #   primary designation.
+    #
+    # @option params [String] :website
+    #   The user's personal website or blog URL. This field allows users to
+    #   provide a link to their personal or professional website.
+    #
+    # @option params [String] :birthdate
+    #   The user's birthdate in YYYY-MM-DD format. This field supports
+    #   standard date format for storing personal information.
+    #
     # @return [Types::CreateUserResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::CreateUserResponse#user_id #user_id} => String
     #   * {Types::CreateUserResponse#identity_store_id #identity_store_id} => String
+    #   * {Types::CreateUserResponse#user_id #user_id} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -677,12 +691,22 @@ module Aws::IdentityStore
     #     preferred_language: "SensitiveStringType",
     #     locale: "SensitiveStringType",
     #     timezone: "SensitiveStringType",
+    #     photos: [
+    #       {
+    #         value: "SensitiveStringType", # required
+    #         type: "SensitiveStringType",
+    #         display: "SensitiveStringType",
+    #         primary: false,
+    #       },
+    #     ],
+    #     website: "SensitiveStringType",
+    #     birthdate: "SensitiveStringType",
     #   })
     #
     # @example Response structure
     #
-    #   resp.user_id #=> String
     #   resp.identity_store_id #=> String
+    #   resp.user_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/CreateUser AWS API Documentation
     #
@@ -774,15 +798,16 @@ module Aws::IdentityStore
     # Retrieves the group metadata and attributes from `GroupId` in an
     # identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store, such as
@@ -800,6 +825,10 @@ module Aws::IdentityStore
     #   * {Types::DescribeGroupResponse#display_name #display_name} => String
     #   * {Types::DescribeGroupResponse#external_ids #external_ids} => Array&lt;Types::ExternalId&gt;
     #   * {Types::DescribeGroupResponse#description #description} => String
+    #   * {Types::DescribeGroupResponse#created_at #created_at} => Time
+    #   * {Types::DescribeGroupResponse#updated_at #updated_at} => Time
+    #   * {Types::DescribeGroupResponse#created_by #created_by} => String
+    #   * {Types::DescribeGroupResponse#updated_by #updated_by} => String
     #   * {Types::DescribeGroupResponse#identity_store_id #identity_store_id} => String
     #
     # @example Request syntax with placeholder values
@@ -817,6 +846,10 @@ module Aws::IdentityStore
     #   resp.external_ids[0].issuer #=> String
     #   resp.external_ids[0].id #=> String
     #   resp.description #=> String
+    #   resp.created_at #=> Time
+    #   resp.updated_at #=> Time
+    #   resp.created_by #=> String
+    #   resp.updated_by #=> String
     #   resp.identity_store_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeGroup AWS API Documentation
@@ -831,15 +864,16 @@ module Aws::IdentityStore
     # Retrieves membership metadata and attributes from `MembershipId` in an
     # identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -853,6 +887,10 @@ module Aws::IdentityStore
     #   * {Types::DescribeGroupMembershipResponse#membership_id #membership_id} => String
     #   * {Types::DescribeGroupMembershipResponse#group_id #group_id} => String
     #   * {Types::DescribeGroupMembershipResponse#member_id #member_id} => Types::MemberId
+    #   * {Types::DescribeGroupMembershipResponse#created_at #created_at} => Time
+    #   * {Types::DescribeGroupMembershipResponse#updated_at #updated_at} => Time
+    #   * {Types::DescribeGroupMembershipResponse#created_by #created_by} => String
+    #   * {Types::DescribeGroupMembershipResponse#updated_by #updated_by} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -867,6 +905,10 @@ module Aws::IdentityStore
     #   resp.membership_id #=> String
     #   resp.group_id #=> String
     #   resp.member_id.user_id #=> String
+    #   resp.created_at #=> Time
+    #   resp.updated_at #=> Time
+    #   resp.created_by #=> String
+    #   resp.updated_by #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeGroupMembership AWS API Documentation
     #
@@ -880,15 +922,16 @@ module Aws::IdentityStore
     # Retrieves the user metadata and attributes from the `UserId` in an
     # identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store, such as
@@ -902,8 +945,9 @@ module Aws::IdentityStore
     #
     # @return [Types::DescribeUserResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::DescribeUserResponse#user_name #user_name} => String
+    #   * {Types::DescribeUserResponse#identity_store_id #identity_store_id} => String
     #   * {Types::DescribeUserResponse#user_id #user_id} => String
+    #   * {Types::DescribeUserResponse#user_name #user_name} => String
     #   * {Types::DescribeUserResponse#external_ids #external_ids} => Array&lt;Types::ExternalId&gt;
     #   * {Types::DescribeUserResponse#name #name} => Types::Name
     #   * {Types::DescribeUserResponse#display_name #display_name} => String
@@ -917,7 +961,14 @@ module Aws::IdentityStore
     #   * {Types::DescribeUserResponse#preferred_language #preferred_language} => String
     #   * {Types::DescribeUserResponse#locale #locale} => String
     #   * {Types::DescribeUserResponse#timezone #timezone} => String
-    #   * {Types::DescribeUserResponse#identity_store_id #identity_store_id} => String
+    #   * {Types::DescribeUserResponse#user_status #user_status} => String
+    #   * {Types::DescribeUserResponse#photos #photos} => Array&lt;Types::Photo&gt;
+    #   * {Types::DescribeUserResponse#website #website} => String
+    #   * {Types::DescribeUserResponse#birthdate #birthdate} => String
+    #   * {Types::DescribeUserResponse#created_at #created_at} => Time
+    #   * {Types::DescribeUserResponse#created_by #created_by} => String
+    #   * {Types::DescribeUserResponse#updated_at #updated_at} => Time
+    #   * {Types::DescribeUserResponse#updated_by #updated_by} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -928,8 +979,9 @@ module Aws::IdentityStore
     #
     # @example Response structure
     #
-    #   resp.user_name #=> String
+    #   resp.identity_store_id #=> String
     #   resp.user_id #=> String
+    #   resp.user_name #=> String
     #   resp.external_ids #=> Array
     #   resp.external_ids[0].issuer #=> String
     #   resp.external_ids[0].id #=> String
@@ -964,7 +1016,18 @@ module Aws::IdentityStore
     #   resp.preferred_language #=> String
     #   resp.locale #=> String
     #   resp.timezone #=> String
-    #   resp.identity_store_id #=> String
+    #   resp.user_status #=> String, one of "ENABLED", "DISABLED"
+    #   resp.photos #=> Array
+    #   resp.photos[0].value #=> String
+    #   resp.photos[0].type #=> String
+    #   resp.photos[0].display #=> String
+    #   resp.photos[0].primary #=> Boolean
+    #   resp.website #=> String
+    #   resp.birthdate #=> String
+    #   resp.created_at #=> Time
+    #   resp.created_by #=> String
+    #   resp.updated_at #=> Time
+    #   resp.updated_by #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeUser AWS API Documentation
     #
@@ -977,15 +1040,16 @@ module Aws::IdentityStore
 
     # Retrieves `GroupId` in an identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -994,8 +1058,8 @@ module Aws::IdentityStore
     #   A unique identifier for a user or group that is not the primary
     #   identifier. This value can be an identifier from an external identity
     #   provider (IdP) that is associated with the user, the group, or a
-    #   unique attribute. For the unique attribute, the only valid path is
-    #   `displayName`.
+    #   unique attribute. For the unique attribute, the only valid path is `
+    #   displayName`.
     #
     # @return [Types::GetGroupIdResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1034,15 +1098,16 @@ module Aws::IdentityStore
 
     # Retrieves the `MembershipId` in an identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1086,15 +1151,16 @@ module Aws::IdentityStore
 
     # Retrieves the `UserId` in an identity store.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1103,13 +1169,13 @@ module Aws::IdentityStore
     #   A unique identifier for a user or group that is not the primary
     #   identifier. This value can be an identifier from an external identity
     #   provider (IdP) that is associated with the user, the group, or a
-    #   unique attribute. For the unique attribute, the only valid paths are
-    #   `userName` and `emails.value`.
+    #   unique attribute. For the unique attribute, the only valid paths are `
+    #   userName` and `emails.value`.
     #
     # @return [Types::GetUserIdResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::GetUserIdResponse#user_id #user_id} => String
     #   * {Types::GetUserIdResponse#identity_store_id #identity_store_id} => String
+    #   * {Types::GetUserIdResponse#user_id #user_id} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -1129,8 +1195,8 @@ module Aws::IdentityStore
     #
     # @example Response structure
     #
-    #   resp.user_id #=> String
     #   resp.identity_store_id #=> String
+    #   resp.user_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/GetUserId AWS API Documentation
     #
@@ -1144,15 +1210,16 @@ module Aws::IdentityStore
     # Checks the user's membership in all requested groups and returns if
     # the member exists in all queried groups.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1194,18 +1261,19 @@ module Aws::IdentityStore
     end
 
     # For the specified group in the specified identity store, returns the
-    # list of all `GroupMembership` objects and returns results in paginated
-    # form.
+    # list of all ` GroupMembership` objects and returns results in
+    # paginated form.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1215,12 +1283,12 @@ module Aws::IdentityStore
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to be returned per request. This
-    #   parameter is used in all `List` requests to specify how many results
+    #   parameter is used in all ` List` requests to specify how many results
     #   to return in one page.
     #
     # @option params [String] :next_token
-    #   The pagination token used for the `ListUsers`, `ListGroups` and
-    #   `ListGroupMemberships` API operations. This value is generated by the
+    #   The pagination token used for the `ListUsers`, `ListGroups` and `
+    #   ListGroupMemberships` API operations. This value is generated by the
     #   identity store service. It is returned in the API response if the
     #   total results are more than the size of one page. This token is also
     #   returned when it is used in the API request to search for the next
@@ -1249,6 +1317,10 @@ module Aws::IdentityStore
     #   resp.group_memberships[0].membership_id #=> String
     #   resp.group_memberships[0].group_id #=> String
     #   resp.group_memberships[0].member_id.user_id #=> String
+    #   resp.group_memberships[0].created_at #=> Time
+    #   resp.group_memberships[0].updated_at #=> Time
+    #   resp.group_memberships[0].created_by #=> String
+    #   resp.group_memberships[0].updated_by #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/ListGroupMemberships AWS API Documentation
@@ -1261,18 +1333,19 @@ module Aws::IdentityStore
     end
 
     # For the specified member in the specified identity store, returns the
-    # list of all `GroupMembership` objects and returns results in paginated
-    # form.
+    # list of all ` GroupMembership` objects and returns results in
+    # paginated form.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1284,13 +1357,13 @@ module Aws::IdentityStore
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to be returned per request. This
-    #   parameter is used in the `ListUsers` and `ListGroups` requests to
+    #   parameter is used in the ` ListUsers` and `ListGroups` requests to
     #   specify how many results to return in one page. The length limit is 50
     #   characters.
     #
     # @option params [String] :next_token
-    #   The pagination token used for the `ListUsers`, `ListGroups`, and
-    #   `ListGroupMemberships` API operations. This value is generated by the
+    #   The pagination token used for the `ListUsers`, `ListGroups`, and `
+    #   ListGroupMemberships` API operations. This value is generated by the
     #   identity store service. It is returned in the API response if the
     #   total results are more than the size of one page. This token is also
     #   returned when it is used in the API request to search for the next
@@ -1321,6 +1394,10 @@ module Aws::IdentityStore
     #   resp.group_memberships[0].membership_id #=> String
     #   resp.group_memberships[0].group_id #=> String
     #   resp.group_memberships[0].member_id.user_id #=> String
+    #   resp.group_memberships[0].created_at #=> Time
+    #   resp.group_memberships[0].updated_at #=> Time
+    #   resp.group_memberships[0].created_by #=> String
+    #   resp.group_memberships[0].updated_by #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/ListGroupMembershipsForMember AWS API Documentation
@@ -1336,15 +1413,16 @@ module Aws::IdentityStore
     # complete `Group` objects. Filtering for a `Group` by the `DisplayName`
     # attribute is deprecated. Instead, use the `GetGroupId` API action.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store, such as
@@ -1355,7 +1433,7 @@ module Aws::IdentityStore
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to be returned per request. This
-    #   parameter is used in the `ListUsers` and `ListGroups` requests to
+    #   parameter is used in the ` ListUsers` and `ListGroups` requests to
     #   specify how many results to return in one page. The length limit is 50
     #   characters.
     #
@@ -1367,8 +1445,8 @@ module Aws::IdentityStore
     #   API request to search for the next page.
     #
     # @option params [Array<Types::Filter>] :filters
-    #   A list of `Filter` objects, which is used in the `ListUsers` and
-    #   `ListGroups` requests.
+    #   A list of `Filter` objects, which is used in the `ListUsers` and `
+    #   ListGroups` requests.
     #
     # @return [Types::ListGroupsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1400,6 +1478,10 @@ module Aws::IdentityStore
     #   resp.groups[0].external_ids[0].issuer #=> String
     #   resp.groups[0].external_ids[0].id #=> String
     #   resp.groups[0].description #=> String
+    #   resp.groups[0].created_at #=> Time
+    #   resp.groups[0].updated_at #=> Time
+    #   resp.groups[0].created_by #=> String
+    #   resp.groups[0].updated_by #=> String
     #   resp.groups[0].identity_store_id #=> String
     #   resp.next_token #=> String
     #
@@ -1416,15 +1498,16 @@ module Aws::IdentityStore
     # complete `User` objects. Filtering for a `User` by the `UserName`
     # attribute is deprecated. Instead, use the `GetUserId` API action.
     #
-    # <note markdown="1"> If you have administrator access to a member account, you can use this
-    # API from the member account. Read about [member accounts][1] in the
-    # *Organizations User Guide*.
+    # <note markdown="1"> If you have access to a member account, you can use this API operation
+    # from the member account. For more information, see [Limiting access to
+    # the identity store from member accounts][1] in the <i> IAM Identity
+    # Center User Guide</i>.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html
+    # [1]: https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store, such as
@@ -1435,7 +1518,7 @@ module Aws::IdentityStore
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to be returned per request. This
-    #   parameter is used in the `ListUsers` and `ListGroups` requests to
+    #   parameter is used in the ` ListUsers` and `ListGroups` requests to
     #   specify how many results to return in one page. The length limit is 50
     #   characters.
     #
@@ -1447,8 +1530,8 @@ module Aws::IdentityStore
     #   API request to search for the next page.
     #
     # @option params [Array<Types::Filter>] :filters
-    #   A list of `Filter` objects, which is used in the `ListUsers` and
-    #   `ListGroups` requests.
+    #   A list of `Filter` objects, which is used in the `ListUsers` and `
+    #   ListGroups` requests.
     #
     # @return [Types::ListUsersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1474,8 +1557,9 @@ module Aws::IdentityStore
     # @example Response structure
     #
     #   resp.users #=> Array
-    #   resp.users[0].user_name #=> String
+    #   resp.users[0].identity_store_id #=> String
     #   resp.users[0].user_id #=> String
+    #   resp.users[0].user_name #=> String
     #   resp.users[0].external_ids #=> Array
     #   resp.users[0].external_ids[0].issuer #=> String
     #   resp.users[0].external_ids[0].id #=> String
@@ -1510,7 +1594,18 @@ module Aws::IdentityStore
     #   resp.users[0].preferred_language #=> String
     #   resp.users[0].locale #=> String
     #   resp.users[0].timezone #=> String
-    #   resp.users[0].identity_store_id #=> String
+    #   resp.users[0].user_status #=> String, one of "ENABLED", "DISABLED"
+    #   resp.users[0].photos #=> Array
+    #   resp.users[0].photos[0].value #=> String
+    #   resp.users[0].photos[0].type #=> String
+    #   resp.users[0].photos[0].display #=> String
+    #   resp.users[0].photos[0].primary #=> Boolean
+    #   resp.users[0].website #=> String
+    #   resp.users[0].birthdate #=> String
+    #   resp.users[0].created_at #=> Time
+    #   resp.users[0].created_by #=> String
+    #   resp.users[0].updated_at #=> Time
+    #   resp.users[0].updated_by #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/ListUsers AWS API Documentation
@@ -1522,8 +1617,8 @@ module Aws::IdentityStore
       req.send_request(options)
     end
 
-    # For the specified group in the specified identity store, updates the
-    # group metadata and attributes.
+    # Updates the specified group metadata and attributes in the specified
+    # identity store.
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1534,6 +1629,12 @@ module Aws::IdentityStore
     # @option params [required, Array<Types::AttributeOperation>] :operations
     #   A list of `AttributeOperation` objects to apply to the requested
     #   group. These operations might add, replace, or remove an attribute.
+    #   For more information on the attributes that can be added, replaced, or
+    #   removed, see [Group][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_Group.html
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -1559,8 +1660,8 @@ module Aws::IdentityStore
       req.send_request(options)
     end
 
-    # For the specified user in the specified identity store, updates the
-    # user metadata and attributes.
+    # Updates the specified user metadata and attributes in the specified
+    # identity store.
     #
     # @option params [required, String] :identity_store_id
     #   The globally unique identifier for the identity store.
@@ -1570,7 +1671,13 @@ module Aws::IdentityStore
     #
     # @option params [required, Array<Types::AttributeOperation>] :operations
     #   A list of `AttributeOperation` objects to apply to the requested user.
-    #   These operations might add, replace, or remove an attribute.
+    #   These operations might add, replace, or remove an attribute. For more
+    #   information on the attributes that can be added, replaced, or removed,
+    #   see [User][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_User.html
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -1614,7 +1721,7 @@ module Aws::IdentityStore
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-identitystore'
-      context[:gem_version] = '1.59.0'
+      context[:gem_version] = '1.60.0'
       Seahorse::Client::Request.new(handlers, context)
     end