aws-sdk-rolesanywhere 1.44.0 → 1.45.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-rolesanywhere/client.rb +548 -365
- data/lib/aws-sdk-rolesanywhere/client_api.rb +62 -63
- data/lib/aws-sdk-rolesanywhere/types.rb +345 -343
- data/lib/aws-sdk-rolesanywhere/waiters.rb +15 -0
- data/lib/aws-sdk-rolesanywhere.rb +2 -1
- data/sig/client.rbs +46 -46
- data/sig/types.rbs +63 -63
- metadata +2 -1
|
@@ -44,11 +44,31 @@ module Aws::RolesAnywhere
|
|
|
44
44
|
include Aws::Structure
|
|
45
45
|
end
|
|
46
46
|
|
|
47
|
-
# @!attribute [rw]
|
|
48
|
-
#
|
|
49
|
-
#
|
|
47
|
+
# @!attribute [rw] name
|
|
48
|
+
# The name of the profile.
|
|
49
|
+
# @return [String]
|
|
50
|
+
#
|
|
51
|
+
# @!attribute [rw] require_instance_properties
|
|
52
|
+
# Unused, saved for future use. Will likely specify whether instance
|
|
53
|
+
# properties are required in temporary credential requests with this
|
|
54
|
+
# profile.
|
|
50
55
|
# @return [Boolean]
|
|
51
56
|
#
|
|
57
|
+
# @!attribute [rw] session_policy
|
|
58
|
+
# A session policy that applies to the trust boundary of the vended
|
|
59
|
+
# session credentials.
|
|
60
|
+
# @return [String]
|
|
61
|
+
#
|
|
62
|
+
# @!attribute [rw] role_arns
|
|
63
|
+
# A list of IAM roles that this profile can assume in a temporary
|
|
64
|
+
# credential request.
|
|
65
|
+
# @return [Array<String>]
|
|
66
|
+
#
|
|
67
|
+
# @!attribute [rw] managed_policy_arns
|
|
68
|
+
# A list of managed policy ARNs that apply to the vended session
|
|
69
|
+
# credentials.
|
|
70
|
+
# @return [Array<String>]
|
|
71
|
+
#
|
|
52
72
|
# @!attribute [rw] duration_seconds
|
|
53
73
|
# Used to determine how long sessions vended using this profile are
|
|
54
74
|
# valid for. See the `Expiration` section of the [CreateSession API
|
|
@@ -64,79 +84,60 @@ module Aws::RolesAnywhere
|
|
|
64
84
|
# Specifies whether the profile is enabled.
|
|
65
85
|
# @return [Boolean]
|
|
66
86
|
#
|
|
67
|
-
# @!attribute [rw] managed_policy_arns
|
|
68
|
-
# A list of managed policy ARNs that apply to the vended session
|
|
69
|
-
# credentials.
|
|
70
|
-
# @return [Array<String>]
|
|
71
|
-
#
|
|
72
|
-
# @!attribute [rw] name
|
|
73
|
-
# The name of the profile.
|
|
74
|
-
# @return [String]
|
|
75
|
-
#
|
|
76
|
-
# @!attribute [rw] require_instance_properties
|
|
77
|
-
# Specifies whether instance properties are required in temporary
|
|
78
|
-
# credential requests with this profile.
|
|
79
|
-
# @return [Boolean]
|
|
80
|
-
#
|
|
81
|
-
# @!attribute [rw] role_arns
|
|
82
|
-
# A list of IAM roles that this profile can assume in a temporary
|
|
83
|
-
# credential request.
|
|
84
|
-
# @return [Array<String>]
|
|
85
|
-
#
|
|
86
|
-
# @!attribute [rw] session_policy
|
|
87
|
-
# A session policy that applies to the trust boundary of the vended
|
|
88
|
-
# session credentials.
|
|
89
|
-
# @return [String]
|
|
90
|
-
#
|
|
91
87
|
# @!attribute [rw] tags
|
|
92
88
|
# The tags to attach to the profile.
|
|
93
89
|
# @return [Array<Types::Tag>]
|
|
94
90
|
#
|
|
91
|
+
# @!attribute [rw] accept_role_session_name
|
|
92
|
+
# Used to determine if a custom role session name will be accepted in
|
|
93
|
+
# a temporary credential request.
|
|
94
|
+
# @return [Boolean]
|
|
95
|
+
#
|
|
95
96
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CreateProfileRequest AWS API Documentation
|
|
96
97
|
#
|
|
97
98
|
class CreateProfileRequest < Struct.new(
|
|
98
|
-
:accept_role_session_name,
|
|
99
|
-
:duration_seconds,
|
|
100
|
-
:enabled,
|
|
101
|
-
:managed_policy_arns,
|
|
102
99
|
:name,
|
|
103
100
|
:require_instance_properties,
|
|
104
|
-
:role_arns,
|
|
105
101
|
:session_policy,
|
|
106
|
-
:
|
|
102
|
+
:role_arns,
|
|
103
|
+
:managed_policy_arns,
|
|
104
|
+
:duration_seconds,
|
|
105
|
+
:enabled,
|
|
106
|
+
:tags,
|
|
107
|
+
:accept_role_session_name)
|
|
107
108
|
SENSITIVE = []
|
|
108
109
|
include Aws::Structure
|
|
109
110
|
end
|
|
110
111
|
|
|
111
|
-
# @!attribute [rw] enabled
|
|
112
|
-
# Specifies whether the trust anchor is enabled.
|
|
113
|
-
# @return [Boolean]
|
|
114
|
-
#
|
|
115
112
|
# @!attribute [rw] name
|
|
116
113
|
# The name of the trust anchor.
|
|
117
114
|
# @return [String]
|
|
118
115
|
#
|
|
119
|
-
# @!attribute [rw] notification_settings
|
|
120
|
-
# A list of notification settings to be associated to the trust
|
|
121
|
-
# anchor.
|
|
122
|
-
# @return [Array<Types::NotificationSetting>]
|
|
123
|
-
#
|
|
124
116
|
# @!attribute [rw] source
|
|
125
117
|
# The trust anchor type and its related certificate data.
|
|
126
118
|
# @return [Types::Source]
|
|
127
119
|
#
|
|
120
|
+
# @!attribute [rw] enabled
|
|
121
|
+
# Specifies whether the trust anchor is enabled.
|
|
122
|
+
# @return [Boolean]
|
|
123
|
+
#
|
|
128
124
|
# @!attribute [rw] tags
|
|
129
125
|
# The tags to attach to the trust anchor.
|
|
130
126
|
# @return [Array<Types::Tag>]
|
|
131
127
|
#
|
|
128
|
+
# @!attribute [rw] notification_settings
|
|
129
|
+
# A list of notification settings to be associated to the trust
|
|
130
|
+
# anchor.
|
|
131
|
+
# @return [Array<Types::NotificationSetting>]
|
|
132
|
+
#
|
|
132
133
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CreateTrustAnchorRequest AWS API Documentation
|
|
133
134
|
#
|
|
134
135
|
class CreateTrustAnchorRequest < Struct.new(
|
|
135
|
-
:enabled,
|
|
136
136
|
:name,
|
|
137
|
-
:notification_settings,
|
|
138
137
|
:source,
|
|
139
|
-
:
|
|
138
|
+
:enabled,
|
|
139
|
+
:tags,
|
|
140
|
+
:notification_settings)
|
|
140
141
|
SENSITIVE = []
|
|
141
142
|
include Aws::Structure
|
|
142
143
|
end
|
|
@@ -144,19 +145,6 @@ module Aws::RolesAnywhere
|
|
|
144
145
|
# A record of a presented X509 credential from a temporary credential
|
|
145
146
|
# request.
|
|
146
147
|
#
|
|
147
|
-
# @!attribute [rw] enabled
|
|
148
|
-
# Indicates whether the credential is enabled.
|
|
149
|
-
# @return [Boolean]
|
|
150
|
-
#
|
|
151
|
-
# @!attribute [rw] failed
|
|
152
|
-
# Indicates whether the temporary credential request was successful.
|
|
153
|
-
# @return [Boolean]
|
|
154
|
-
#
|
|
155
|
-
# @!attribute [rw] issuer
|
|
156
|
-
# The fully qualified domain name of the issuing certificate for the
|
|
157
|
-
# presented end-entity certificate.
|
|
158
|
-
# @return [String]
|
|
159
|
-
#
|
|
160
148
|
# @!attribute [rw] seen_at
|
|
161
149
|
# The ISO-8601 time stamp of when the certificate was last used in a
|
|
162
150
|
# temporary credential request.
|
|
@@ -166,19 +154,32 @@ module Aws::RolesAnywhere
|
|
|
166
154
|
# The serial number of the certificate.
|
|
167
155
|
# @return [String]
|
|
168
156
|
#
|
|
157
|
+
# @!attribute [rw] issuer
|
|
158
|
+
# The fully qualified domain name of the issuing certificate for the
|
|
159
|
+
# presented end-entity certificate.
|
|
160
|
+
# @return [String]
|
|
161
|
+
#
|
|
162
|
+
# @!attribute [rw] enabled
|
|
163
|
+
# Indicates whether the credential is enabled.
|
|
164
|
+
# @return [Boolean]
|
|
165
|
+
#
|
|
169
166
|
# @!attribute [rw] x509_certificate_data
|
|
170
167
|
# The PEM-encoded data of the certificate.
|
|
171
168
|
# @return [String]
|
|
172
169
|
#
|
|
170
|
+
# @!attribute [rw] failed
|
|
171
|
+
# Indicates whether the temporary credential request was successful.
|
|
172
|
+
# @return [Boolean]
|
|
173
|
+
#
|
|
173
174
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CredentialSummary AWS API Documentation
|
|
174
175
|
#
|
|
175
176
|
class CredentialSummary < Struct.new(
|
|
176
|
-
:enabled,
|
|
177
|
-
:failed,
|
|
178
|
-
:issuer,
|
|
179
177
|
:seen_at,
|
|
180
178
|
:serial_number,
|
|
181
|
-
:
|
|
179
|
+
:issuer,
|
|
180
|
+
:enabled,
|
|
181
|
+
:x509_certificate_data,
|
|
182
|
+
:failed)
|
|
182
183
|
SENSITIVE = []
|
|
183
184
|
include Aws::Structure
|
|
184
185
|
end
|
|
@@ -186,30 +187,25 @@ module Aws::RolesAnywhere
|
|
|
186
187
|
# The state of the certificate revocation list (CRL) after a read or
|
|
187
188
|
# write operation.
|
|
188
189
|
#
|
|
189
|
-
# @!attribute [rw]
|
|
190
|
-
# The
|
|
191
|
-
#
|
|
192
|
-
# @return [Time]
|
|
190
|
+
# @!attribute [rw] crl_id
|
|
191
|
+
# The unique identifier of the certificate revocation list (CRL).
|
|
192
|
+
# @return [String]
|
|
193
193
|
#
|
|
194
194
|
# @!attribute [rw] crl_arn
|
|
195
195
|
# The ARN of the certificate revocation list (CRL).
|
|
196
196
|
# @return [String]
|
|
197
197
|
#
|
|
198
|
-
# @!attribute [rw]
|
|
199
|
-
# The
|
|
200
|
-
# write operation.
|
|
201
|
-
# @return [String]
|
|
202
|
-
#
|
|
203
|
-
# @!attribute [rw] crl_id
|
|
204
|
-
# The unique identifier of the certificate revocation list (CRL).
|
|
198
|
+
# @!attribute [rw] name
|
|
199
|
+
# The name of the certificate revocation list (CRL).
|
|
205
200
|
# @return [String]
|
|
206
201
|
#
|
|
207
202
|
# @!attribute [rw] enabled
|
|
208
203
|
# Indicates whether the certificate revocation list (CRL) is enabled.
|
|
209
204
|
# @return [Boolean]
|
|
210
205
|
#
|
|
211
|
-
# @!attribute [rw]
|
|
212
|
-
# The
|
|
206
|
+
# @!attribute [rw] crl_data
|
|
207
|
+
# The state of the certificate revocation list (CRL) after a read or
|
|
208
|
+
# write operation.
|
|
213
209
|
# @return [String]
|
|
214
210
|
#
|
|
215
211
|
# @!attribute [rw] trust_anchor_arn
|
|
@@ -217,6 +213,11 @@ module Aws::RolesAnywhere
|
|
|
217
213
|
# will provide revocation for.
|
|
218
214
|
# @return [String]
|
|
219
215
|
#
|
|
216
|
+
# @!attribute [rw] created_at
|
|
217
|
+
# The ISO-8601 timestamp when the certificate revocation list (CRL)
|
|
218
|
+
# was created.
|
|
219
|
+
# @return [Time]
|
|
220
|
+
#
|
|
220
221
|
# @!attribute [rw] updated_at
|
|
221
222
|
# The ISO-8601 timestamp when the certificate revocation list (CRL)
|
|
222
223
|
# was last updated.
|
|
@@ -225,13 +226,13 @@ module Aws::RolesAnywhere
|
|
|
225
226
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CrlDetail AWS API Documentation
|
|
226
227
|
#
|
|
227
228
|
class CrlDetail < Struct.new(
|
|
228
|
-
:created_at,
|
|
229
|
-
:crl_arn,
|
|
230
|
-
:crl_data,
|
|
231
229
|
:crl_id,
|
|
232
|
-
:
|
|
230
|
+
:crl_arn,
|
|
233
231
|
:name,
|
|
232
|
+
:enabled,
|
|
233
|
+
:crl_data,
|
|
234
234
|
:trust_anchor_arn,
|
|
235
|
+
:created_at,
|
|
235
236
|
:updated_at)
|
|
236
237
|
SENSITIVE = []
|
|
237
238
|
include Aws::Structure
|
|
@@ -250,15 +251,15 @@ module Aws::RolesAnywhere
|
|
|
250
251
|
include Aws::Structure
|
|
251
252
|
end
|
|
252
253
|
|
|
254
|
+
# @!attribute [rw] profile_id
|
|
255
|
+
# The unique identifier of the profile.
|
|
256
|
+
# @return [String]
|
|
257
|
+
#
|
|
253
258
|
# @!attribute [rw] certificate_field
|
|
254
259
|
# Fields (x509Subject, x509Issuer and x509SAN) within X.509
|
|
255
260
|
# certificates.
|
|
256
261
|
# @return [String]
|
|
257
262
|
#
|
|
258
|
-
# @!attribute [rw] profile_id
|
|
259
|
-
# The unique identifier of the profile.
|
|
260
|
-
# @return [String]
|
|
261
|
-
#
|
|
262
263
|
# @!attribute [rw] specifiers
|
|
263
264
|
# A list of specifiers of a certificate field; for example, CN, OU,
|
|
264
265
|
# UID from a Subject.
|
|
@@ -267,8 +268,8 @@ module Aws::RolesAnywhere
|
|
|
267
268
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/DeleteAttributeMappingRequest AWS API Documentation
|
|
268
269
|
#
|
|
269
270
|
class DeleteAttributeMappingRequest < Struct.new(
|
|
270
|
-
:certificate_field,
|
|
271
271
|
:profile_id,
|
|
272
|
+
:certificate_field,
|
|
272
273
|
:specifiers)
|
|
273
274
|
SENSITIVE = []
|
|
274
275
|
include Aws::Structure
|
|
@@ -286,6 +287,10 @@ module Aws::RolesAnywhere
|
|
|
286
287
|
include Aws::Structure
|
|
287
288
|
end
|
|
288
289
|
|
|
290
|
+
# @!attribute [rw] name
|
|
291
|
+
# The name of the certificate revocation list (CRL).
|
|
292
|
+
# @return [String]
|
|
293
|
+
#
|
|
289
294
|
# @!attribute [rw] crl_data
|
|
290
295
|
# The x509 v3 specified certificate revocation list (CRL).
|
|
291
296
|
# @return [String]
|
|
@@ -294,10 +299,6 @@ module Aws::RolesAnywhere
|
|
|
294
299
|
# Specifies whether the certificate revocation list (CRL) is enabled.
|
|
295
300
|
# @return [Boolean]
|
|
296
301
|
#
|
|
297
|
-
# @!attribute [rw] name
|
|
298
|
-
# The name of the certificate revocation list (CRL).
|
|
299
|
-
# @return [String]
|
|
300
|
-
#
|
|
301
302
|
# @!attribute [rw] tags
|
|
302
303
|
# A list of tags to attach to the certificate revocation list (CRL).
|
|
303
304
|
# @return [Array<Types::Tag>]
|
|
@@ -310,9 +311,9 @@ module Aws::RolesAnywhere
|
|
|
310
311
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ImportCrlRequest AWS API Documentation
|
|
311
312
|
#
|
|
312
313
|
class ImportCrlRequest < Struct.new(
|
|
314
|
+
:name,
|
|
313
315
|
:crl_data,
|
|
314
316
|
:enabled,
|
|
315
|
-
:name,
|
|
316
317
|
:tags,
|
|
317
318
|
:trust_anchor_arn)
|
|
318
319
|
SENSITIVE = []
|
|
@@ -322,44 +323,44 @@ module Aws::RolesAnywhere
|
|
|
322
323
|
# A key-value pair you set that identifies a property of the
|
|
323
324
|
# authenticating instance.
|
|
324
325
|
#
|
|
325
|
-
# @!attribute [rw]
|
|
326
|
-
#
|
|
327
|
-
#
|
|
326
|
+
# @!attribute [rw] seen_at
|
|
327
|
+
# The ISO-8601 time stamp of when the certificate was last used in a
|
|
328
|
+
# temporary credential request.
|
|
329
|
+
# @return [Time]
|
|
328
330
|
#
|
|
329
331
|
# @!attribute [rw] properties
|
|
330
332
|
# A list of instanceProperty objects.
|
|
331
333
|
# @return [Hash<String,String>]
|
|
332
334
|
#
|
|
333
|
-
# @!attribute [rw]
|
|
334
|
-
#
|
|
335
|
-
#
|
|
336
|
-
# @return [Time]
|
|
335
|
+
# @!attribute [rw] failed
|
|
336
|
+
# Indicates whether the temporary credential request was successful.
|
|
337
|
+
# @return [Boolean]
|
|
337
338
|
#
|
|
338
339
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/InstanceProperty AWS API Documentation
|
|
339
340
|
#
|
|
340
341
|
class InstanceProperty < Struct.new(
|
|
341
|
-
:
|
|
342
|
+
:seen_at,
|
|
342
343
|
:properties,
|
|
343
|
-
:
|
|
344
|
+
:failed)
|
|
344
345
|
SENSITIVE = []
|
|
345
346
|
include Aws::Structure
|
|
346
347
|
end
|
|
347
348
|
|
|
348
|
-
# @!attribute [rw] crls
|
|
349
|
-
# A list of certificate revocation lists (CRL).
|
|
350
|
-
# @return [Array<Types::CrlDetail>]
|
|
351
|
-
#
|
|
352
349
|
# @!attribute [rw] next_token
|
|
353
350
|
# A token that indicates where the output should continue from, if a
|
|
354
351
|
# previous request did not show all results. To get the next results,
|
|
355
352
|
# make the request again with this value.
|
|
356
353
|
# @return [String]
|
|
357
354
|
#
|
|
355
|
+
# @!attribute [rw] crls
|
|
356
|
+
# A list of certificate revocation lists (CRL).
|
|
357
|
+
# @return [Array<Types::CrlDetail>]
|
|
358
|
+
#
|
|
358
359
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ListCrlsResponse AWS API Documentation
|
|
359
360
|
#
|
|
360
361
|
class ListCrlsResponse < Struct.new(
|
|
361
|
-
:
|
|
362
|
-
:
|
|
362
|
+
:next_token,
|
|
363
|
+
:crls)
|
|
363
364
|
SENSITIVE = []
|
|
364
365
|
include Aws::Structure
|
|
365
366
|
end
|
|
@@ -402,21 +403,21 @@ module Aws::RolesAnywhere
|
|
|
402
403
|
include Aws::Structure
|
|
403
404
|
end
|
|
404
405
|
|
|
406
|
+
# @!attribute [rw] subjects
|
|
407
|
+
# A list of subjects.
|
|
408
|
+
# @return [Array<Types::SubjectSummary>]
|
|
409
|
+
#
|
|
405
410
|
# @!attribute [rw] next_token
|
|
406
411
|
# A token that indicates where the output should continue from, if a
|
|
407
412
|
# previous request did not show all results. To get the next results,
|
|
408
413
|
# make the request again with this value.
|
|
409
414
|
# @return [String]
|
|
410
415
|
#
|
|
411
|
-
# @!attribute [rw] subjects
|
|
412
|
-
# A list of subjects.
|
|
413
|
-
# @return [Array<Types::SubjectSummary>]
|
|
414
|
-
#
|
|
415
416
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ListSubjectsResponse AWS API Documentation
|
|
416
417
|
#
|
|
417
418
|
class ListSubjectsResponse < Struct.new(
|
|
418
|
-
:
|
|
419
|
-
:
|
|
419
|
+
:subjects,
|
|
420
|
+
:next_token)
|
|
420
421
|
SENSITIVE = []
|
|
421
422
|
include Aws::Structure
|
|
422
423
|
end
|
|
@@ -484,17 +485,6 @@ module Aws::RolesAnywhere
|
|
|
484
485
|
# notifying across multiple channels - CloudWatch metrics, EventBridge,
|
|
485
486
|
# and Health Dashboard.
|
|
486
487
|
#
|
|
487
|
-
# @!attribute [rw] channel
|
|
488
|
-
# The specified channel of notification. IAM Roles Anywhere uses
|
|
489
|
-
# CloudWatch metrics, EventBridge, and Health Dashboard to notify for
|
|
490
|
-
# an event.
|
|
491
|
-
#
|
|
492
|
-
# <note markdown="1"> In the absence of a specific channel, IAM Roles Anywhere applies
|
|
493
|
-
# this setting to 'ALL' channels.
|
|
494
|
-
#
|
|
495
|
-
# </note>
|
|
496
|
-
# @return [String]
|
|
497
|
-
#
|
|
498
488
|
# @!attribute [rw] enabled
|
|
499
489
|
# Indicates whether the notification setting is enabled.
|
|
500
490
|
# @return [Boolean]
|
|
@@ -508,13 +498,24 @@ module Aws::RolesAnywhere
|
|
|
508
498
|
# required for a notification setting that is enabled.
|
|
509
499
|
# @return [Integer]
|
|
510
500
|
#
|
|
501
|
+
# @!attribute [rw] channel
|
|
502
|
+
# The specified channel of notification. IAM Roles Anywhere uses
|
|
503
|
+
# CloudWatch metrics, EventBridge, and Health Dashboard to notify for
|
|
504
|
+
# an event.
|
|
505
|
+
#
|
|
506
|
+
# <note markdown="1"> In the absence of a specific channel, IAM Roles Anywhere applies
|
|
507
|
+
# this setting to 'ALL' channels.
|
|
508
|
+
#
|
|
509
|
+
# </note>
|
|
510
|
+
# @return [String]
|
|
511
|
+
#
|
|
511
512
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSetting AWS API Documentation
|
|
512
513
|
#
|
|
513
514
|
class NotificationSetting < Struct.new(
|
|
514
|
-
:channel,
|
|
515
515
|
:enabled,
|
|
516
516
|
:event,
|
|
517
|
-
:threshold
|
|
517
|
+
:threshold,
|
|
518
|
+
:channel)
|
|
518
519
|
SENSITIVE = []
|
|
519
520
|
include Aws::Structure
|
|
520
521
|
end
|
|
@@ -525,6 +526,18 @@ module Aws::RolesAnywhere
|
|
|
525
526
|
# threshold, status of the notification setting, and the channel to
|
|
526
527
|
# notify.
|
|
527
528
|
#
|
|
529
|
+
# @!attribute [rw] enabled
|
|
530
|
+
# Indicates whether the notification setting is enabled.
|
|
531
|
+
# @return [Boolean]
|
|
532
|
+
#
|
|
533
|
+
# @!attribute [rw] event
|
|
534
|
+
# The event to which this notification setting is applied.
|
|
535
|
+
# @return [String]
|
|
536
|
+
#
|
|
537
|
+
# @!attribute [rw] threshold
|
|
538
|
+
# The number of days before a notification event.
|
|
539
|
+
# @return [Integer]
|
|
540
|
+
#
|
|
528
541
|
# @!attribute [rw] channel
|
|
529
542
|
# The specified channel of notification. IAM Roles Anywhere uses
|
|
530
543
|
# CloudWatch metrics, EventBridge, and Health Dashboard to notify for
|
|
@@ -543,26 +556,14 @@ module Aws::RolesAnywhere
|
|
|
543
556
|
# settings, it is the respective account ID.
|
|
544
557
|
# @return [String]
|
|
545
558
|
#
|
|
546
|
-
# @!attribute [rw] enabled
|
|
547
|
-
# Indicates whether the notification setting is enabled.
|
|
548
|
-
# @return [Boolean]
|
|
549
|
-
#
|
|
550
|
-
# @!attribute [rw] event
|
|
551
|
-
# The event to which this notification setting is applied.
|
|
552
|
-
# @return [String]
|
|
553
|
-
#
|
|
554
|
-
# @!attribute [rw] threshold
|
|
555
|
-
# The number of days before a notification event.
|
|
556
|
-
# @return [Integer]
|
|
557
|
-
#
|
|
558
559
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSettingDetail AWS API Documentation
|
|
559
560
|
#
|
|
560
561
|
class NotificationSettingDetail < Struct.new(
|
|
561
|
-
:channel,
|
|
562
|
-
:configured_by,
|
|
563
562
|
:enabled,
|
|
564
563
|
:event,
|
|
565
|
-
:threshold
|
|
564
|
+
:threshold,
|
|
565
|
+
:channel,
|
|
566
|
+
:configured_by)
|
|
566
567
|
SENSITIVE = []
|
|
567
568
|
include Aws::Structure
|
|
568
569
|
end
|
|
@@ -570,110 +571,111 @@ module Aws::RolesAnywhere
|
|
|
570
571
|
# A notification setting key to reset. A notification setting key
|
|
571
572
|
# includes the event and the channel.
|
|
572
573
|
#
|
|
573
|
-
# @!attribute [rw] channel
|
|
574
|
-
# The specified channel of notification.
|
|
575
|
-
# @return [String]
|
|
576
|
-
#
|
|
577
574
|
# @!attribute [rw] event
|
|
578
575
|
# The notification setting event to reset.
|
|
579
576
|
# @return [String]
|
|
580
577
|
#
|
|
578
|
+
# @!attribute [rw] channel
|
|
579
|
+
# The specified channel of notification.
|
|
580
|
+
# @return [String]
|
|
581
|
+
#
|
|
581
582
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSettingKey AWS API Documentation
|
|
582
583
|
#
|
|
583
584
|
class NotificationSettingKey < Struct.new(
|
|
584
|
-
:
|
|
585
|
-
:
|
|
585
|
+
:event,
|
|
586
|
+
:channel)
|
|
586
587
|
SENSITIVE = []
|
|
587
588
|
include Aws::Structure
|
|
588
589
|
end
|
|
589
590
|
|
|
590
591
|
# The state of the profile after a read or write operation.
|
|
591
592
|
#
|
|
592
|
-
# @!attribute [rw]
|
|
593
|
-
#
|
|
594
|
-
# a temporary credential request.
|
|
595
|
-
# @return [Boolean]
|
|
596
|
-
#
|
|
597
|
-
# @!attribute [rw] attribute_mappings
|
|
598
|
-
# A mapping applied to the authenticating end-entity certificate.
|
|
599
|
-
# @return [Array<Types::AttributeMapping>]
|
|
600
|
-
#
|
|
601
|
-
# @!attribute [rw] created_at
|
|
602
|
-
# The ISO-8601 timestamp when the profile was created.
|
|
603
|
-
# @return [Time]
|
|
604
|
-
#
|
|
605
|
-
# @!attribute [rw] created_by
|
|
606
|
-
# The Amazon Web Services account that created the profile.
|
|
593
|
+
# @!attribute [rw] profile_id
|
|
594
|
+
# The unique identifier of the profile.
|
|
607
595
|
# @return [String]
|
|
608
596
|
#
|
|
609
|
-
# @!attribute [rw]
|
|
610
|
-
#
|
|
611
|
-
#
|
|
612
|
-
# documentation][1] page for more details. In requests, if this value
|
|
613
|
-
# is not provided, the default value will be 3600.
|
|
614
|
-
#
|
|
597
|
+
# @!attribute [rw] profile_arn
|
|
598
|
+
# The ARN of the profile.
|
|
599
|
+
# @return [String]
|
|
615
600
|
#
|
|
601
|
+
# @!attribute [rw] name
|
|
602
|
+
# The name of the profile.
|
|
603
|
+
# @return [String]
|
|
616
604
|
#
|
|
617
|
-
#
|
|
618
|
-
#
|
|
605
|
+
# @!attribute [rw] require_instance_properties
|
|
606
|
+
# Unused, saved for future use. Will likely specify whether instance
|
|
607
|
+
# properties are required in temporary credential requests with this
|
|
608
|
+
# profile.
|
|
609
|
+
# @return [Boolean]
|
|
619
610
|
#
|
|
620
611
|
# @!attribute [rw] enabled
|
|
621
612
|
# Indicates whether the profile is enabled.
|
|
622
613
|
# @return [Boolean]
|
|
623
614
|
#
|
|
624
|
-
# @!attribute [rw]
|
|
625
|
-
#
|
|
626
|
-
# credentials.
|
|
627
|
-
# @return [Array<String>]
|
|
628
|
-
#
|
|
629
|
-
# @!attribute [rw] name
|
|
630
|
-
# The name of the profile.
|
|
631
|
-
# @return [String]
|
|
632
|
-
#
|
|
633
|
-
# @!attribute [rw] profile_arn
|
|
634
|
-
# The ARN of the profile.
|
|
615
|
+
# @!attribute [rw] created_by
|
|
616
|
+
# The Amazon Web Services account that created the profile.
|
|
635
617
|
# @return [String]
|
|
636
618
|
#
|
|
637
|
-
# @!attribute [rw]
|
|
638
|
-
#
|
|
619
|
+
# @!attribute [rw] session_policy
|
|
620
|
+
# A session policy that applies to the trust boundary of the vended
|
|
621
|
+
# session credentials.
|
|
639
622
|
# @return [String]
|
|
640
623
|
#
|
|
641
|
-
# @!attribute [rw] require_instance_properties
|
|
642
|
-
# Specifies whether instance properties are required in temporary
|
|
643
|
-
# credential requests with this profile.
|
|
644
|
-
# @return [Boolean]
|
|
645
|
-
#
|
|
646
624
|
# @!attribute [rw] role_arns
|
|
647
625
|
# A list of IAM roles that this profile can assume in a temporary
|
|
648
626
|
# credential request.
|
|
649
627
|
# @return [Array<String>]
|
|
650
628
|
#
|
|
651
|
-
# @!attribute [rw]
|
|
652
|
-
# A
|
|
653
|
-
#
|
|
654
|
-
# @return [String]
|
|
629
|
+
# @!attribute [rw] managed_policy_arns
|
|
630
|
+
# A list of managed policy ARNs that apply to the vended session
|
|
631
|
+
# credentials.
|
|
632
|
+
# @return [Array<String>]
|
|
633
|
+
#
|
|
634
|
+
# @!attribute [rw] created_at
|
|
635
|
+
# The ISO-8601 timestamp when the profile was created.
|
|
636
|
+
# @return [Time]
|
|
655
637
|
#
|
|
656
638
|
# @!attribute [rw] updated_at
|
|
657
639
|
# The ISO-8601 timestamp when the profile was last updated.
|
|
658
640
|
# @return [Time]
|
|
659
641
|
#
|
|
642
|
+
# @!attribute [rw] duration_seconds
|
|
643
|
+
# Used to determine how long sessions vended using this profile are
|
|
644
|
+
# valid for. See the `Expiration` section of the [CreateSession API
|
|
645
|
+
# documentation][1] page for more details. In requests, if this value
|
|
646
|
+
# is not provided, the default value will be 3600.
|
|
647
|
+
#
|
|
648
|
+
#
|
|
649
|
+
#
|
|
650
|
+
# [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
|
|
651
|
+
# @return [Integer]
|
|
652
|
+
#
|
|
653
|
+
# @!attribute [rw] accept_role_session_name
|
|
654
|
+
# Used to determine if a custom role session name will be accepted in
|
|
655
|
+
# a temporary credential request.
|
|
656
|
+
# @return [Boolean]
|
|
657
|
+
#
|
|
658
|
+
# @!attribute [rw] attribute_mappings
|
|
659
|
+
# A mapping applied to the authenticating end-entity certificate.
|
|
660
|
+
# @return [Array<Types::AttributeMapping>]
|
|
661
|
+
#
|
|
660
662
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ProfileDetail AWS API Documentation
|
|
661
663
|
#
|
|
662
664
|
class ProfileDetail < Struct.new(
|
|
663
|
-
:accept_role_session_name,
|
|
664
|
-
:attribute_mappings,
|
|
665
|
-
:created_at,
|
|
666
|
-
:created_by,
|
|
667
|
-
:duration_seconds,
|
|
668
|
-
:enabled,
|
|
669
|
-
:managed_policy_arns,
|
|
670
|
-
:name,
|
|
671
|
-
:profile_arn,
|
|
672
665
|
:profile_id,
|
|
666
|
+
:profile_arn,
|
|
667
|
+
:name,
|
|
673
668
|
:require_instance_properties,
|
|
674
|
-
:
|
|
669
|
+
:enabled,
|
|
670
|
+
:created_by,
|
|
675
671
|
:session_policy,
|
|
676
|
-
:
|
|
672
|
+
:role_arns,
|
|
673
|
+
:managed_policy_arns,
|
|
674
|
+
:created_at,
|
|
675
|
+
:updated_at,
|
|
676
|
+
:duration_seconds,
|
|
677
|
+
:accept_role_session_name,
|
|
678
|
+
:attribute_mappings)
|
|
677
679
|
SENSITIVE = []
|
|
678
680
|
include Aws::Structure
|
|
679
681
|
end
|
|
@@ -690,6 +692,10 @@ module Aws::RolesAnywhere
|
|
|
690
692
|
include Aws::Structure
|
|
691
693
|
end
|
|
692
694
|
|
|
695
|
+
# @!attribute [rw] profile_id
|
|
696
|
+
# The unique identifier of the profile.
|
|
697
|
+
# @return [String]
|
|
698
|
+
#
|
|
693
699
|
# @!attribute [rw] certificate_field
|
|
694
700
|
# Fields (x509Subject, x509Issuer and x509SAN) within X.509
|
|
695
701
|
# certificates.
|
|
@@ -700,16 +706,12 @@ module Aws::RolesAnywhere
|
|
|
700
706
|
# sub-field.
|
|
701
707
|
# @return [Array<Types::MappingRule>]
|
|
702
708
|
#
|
|
703
|
-
# @!attribute [rw] profile_id
|
|
704
|
-
# The unique identifier of the profile.
|
|
705
|
-
# @return [String]
|
|
706
|
-
#
|
|
707
709
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/PutAttributeMappingRequest AWS API Documentation
|
|
708
710
|
#
|
|
709
711
|
class PutAttributeMappingRequest < Struct.new(
|
|
712
|
+
:profile_id,
|
|
710
713
|
:certificate_field,
|
|
711
|
-
:mapping_rules
|
|
712
|
-
:profile_id)
|
|
714
|
+
:mapping_rules)
|
|
713
715
|
SENSITIVE = []
|
|
714
716
|
include Aws::Structure
|
|
715
717
|
end
|
|
@@ -726,20 +728,20 @@ module Aws::RolesAnywhere
|
|
|
726
728
|
include Aws::Structure
|
|
727
729
|
end
|
|
728
730
|
|
|
731
|
+
# @!attribute [rw] trust_anchor_id
|
|
732
|
+
# The unique identifier of the trust anchor.
|
|
733
|
+
# @return [String]
|
|
734
|
+
#
|
|
729
735
|
# @!attribute [rw] notification_settings
|
|
730
736
|
# A list of notification settings to be associated to the trust
|
|
731
737
|
# anchor.
|
|
732
738
|
# @return [Array<Types::NotificationSetting>]
|
|
733
739
|
#
|
|
734
|
-
# @!attribute [rw] trust_anchor_id
|
|
735
|
-
# The unique identifier of the trust anchor.
|
|
736
|
-
# @return [String]
|
|
737
|
-
#
|
|
738
740
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/PutNotificationSettingsRequest AWS API Documentation
|
|
739
741
|
#
|
|
740
742
|
class PutNotificationSettingsRequest < Struct.new(
|
|
741
|
-
:
|
|
742
|
-
:
|
|
743
|
+
:trust_anchor_id,
|
|
744
|
+
:notification_settings)
|
|
743
745
|
SENSITIVE = []
|
|
744
746
|
include Aws::Structure
|
|
745
747
|
end
|
|
@@ -756,20 +758,20 @@ module Aws::RolesAnywhere
|
|
|
756
758
|
include Aws::Structure
|
|
757
759
|
end
|
|
758
760
|
|
|
761
|
+
# @!attribute [rw] trust_anchor_id
|
|
762
|
+
# The unique identifier of the trust anchor.
|
|
763
|
+
# @return [String]
|
|
764
|
+
#
|
|
759
765
|
# @!attribute [rw] notification_setting_keys
|
|
760
766
|
# A list of notification setting keys to reset. A notification setting
|
|
761
767
|
# key includes the event and the channel.
|
|
762
768
|
# @return [Array<Types::NotificationSettingKey>]
|
|
763
769
|
#
|
|
764
|
-
# @!attribute [rw] trust_anchor_id
|
|
765
|
-
# The unique identifier of the trust anchor.
|
|
766
|
-
# @return [String]
|
|
767
|
-
#
|
|
768
770
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ResetNotificationSettingsRequest AWS API Documentation
|
|
769
771
|
#
|
|
770
772
|
class ResetNotificationSettingsRequest < Struct.new(
|
|
771
|
-
:
|
|
772
|
-
:
|
|
773
|
+
:trust_anchor_id,
|
|
774
|
+
:notification_setting_keys)
|
|
773
775
|
SENSITIVE = []
|
|
774
776
|
include Aws::Structure
|
|
775
777
|
end
|
|
@@ -849,19 +851,19 @@ module Aws::RolesAnywhere
|
|
|
849
851
|
|
|
850
852
|
# The trust anchor type and its related certificate data.
|
|
851
853
|
#
|
|
852
|
-
# @!attribute [rw] source_data
|
|
853
|
-
# The data field of the trust anchor depending on its type.
|
|
854
|
-
# @return [Types::SourceData]
|
|
855
|
-
#
|
|
856
854
|
# @!attribute [rw] source_type
|
|
857
855
|
# The type of the trust anchor.
|
|
858
856
|
# @return [String]
|
|
859
857
|
#
|
|
858
|
+
# @!attribute [rw] source_data
|
|
859
|
+
# The data field of the trust anchor depending on its type.
|
|
860
|
+
# @return [Types::SourceData]
|
|
861
|
+
#
|
|
860
862
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/Source AWS API Documentation
|
|
861
863
|
#
|
|
862
864
|
class Source < Struct.new(
|
|
863
|
-
:
|
|
864
|
-
:
|
|
865
|
+
:source_type,
|
|
866
|
+
:source_data)
|
|
865
867
|
SENSITIVE = []
|
|
866
868
|
include Aws::Structure
|
|
867
869
|
end
|
|
@@ -872,84 +874,84 @@ module Aws::RolesAnywhere
|
|
|
872
874
|
#
|
|
873
875
|
# @note SourceData is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of SourceData corresponding to the set member.
|
|
874
876
|
#
|
|
877
|
+
# @!attribute [rw] x509_certificate_data
|
|
878
|
+
# The PEM-encoded data for the certificate anchor. Included for trust
|
|
879
|
+
# anchors of type `CERTIFICATE_BUNDLE`.
|
|
880
|
+
# @return [String]
|
|
881
|
+
#
|
|
875
882
|
# @!attribute [rw] acm_pca_arn
|
|
876
883
|
# The root certificate of the Private Certificate Authority specified
|
|
877
884
|
# by this ARN is used in trust validation for temporary credential
|
|
878
885
|
# requests. Included for trust anchors of type `AWS_ACM_PCA`.
|
|
879
886
|
# @return [String]
|
|
880
887
|
#
|
|
881
|
-
# @!attribute [rw] x509_certificate_data
|
|
882
|
-
# The PEM-encoded data for the certificate anchor. Included for trust
|
|
883
|
-
# anchors of type `CERTIFICATE_BUNDLE`.
|
|
884
|
-
# @return [String]
|
|
885
|
-
#
|
|
886
888
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SourceData AWS API Documentation
|
|
887
889
|
#
|
|
888
890
|
class SourceData < Struct.new(
|
|
889
|
-
:acm_pca_arn,
|
|
890
891
|
:x509_certificate_data,
|
|
892
|
+
:acm_pca_arn,
|
|
891
893
|
:unknown)
|
|
892
894
|
SENSITIVE = []
|
|
893
895
|
include Aws::Structure
|
|
894
896
|
include Aws::Structure::Union
|
|
895
897
|
|
|
896
|
-
class AcmPcaArn < SourceData; end
|
|
897
898
|
class X509CertificateData < SourceData; end
|
|
899
|
+
class AcmPcaArn < SourceData; end
|
|
898
900
|
class Unknown < SourceData; end
|
|
899
901
|
end
|
|
900
902
|
|
|
901
903
|
# The state of the subject after a read or write operation.
|
|
902
904
|
#
|
|
903
|
-
# @!attribute [rw]
|
|
904
|
-
# The
|
|
905
|
-
# @return [
|
|
905
|
+
# @!attribute [rw] subject_arn
|
|
906
|
+
# The ARN of the resource.
|
|
907
|
+
# @return [String]
|
|
906
908
|
#
|
|
907
|
-
# @!attribute [rw]
|
|
908
|
-
# The
|
|
909
|
-
#
|
|
910
|
-
# @return [Array<Types::CredentialSummary>]
|
|
909
|
+
# @!attribute [rw] subject_id
|
|
910
|
+
# The id of the resource
|
|
911
|
+
# @return [String]
|
|
911
912
|
#
|
|
912
913
|
# @!attribute [rw] enabled
|
|
913
914
|
# The enabled status of the subject.
|
|
914
915
|
# @return [Boolean]
|
|
915
916
|
#
|
|
916
|
-
# @!attribute [rw]
|
|
917
|
-
# The
|
|
918
|
-
# @return [
|
|
917
|
+
# @!attribute [rw] x509_subject
|
|
918
|
+
# The x509 principal identifier of the authenticating certificate.
|
|
919
|
+
# @return [String]
|
|
919
920
|
#
|
|
920
921
|
# @!attribute [rw] last_seen_at
|
|
921
922
|
# The ISO-8601 timestamp of the last time this subject requested
|
|
922
923
|
# temporary session credentials.
|
|
923
924
|
# @return [Time]
|
|
924
925
|
#
|
|
925
|
-
# @!attribute [rw]
|
|
926
|
-
# The
|
|
927
|
-
# @return [
|
|
928
|
-
#
|
|
929
|
-
# @!attribute [rw] subject_id
|
|
930
|
-
# The id of the resource
|
|
931
|
-
# @return [String]
|
|
926
|
+
# @!attribute [rw] created_at
|
|
927
|
+
# The ISO-8601 timestamp when the subject was created.
|
|
928
|
+
# @return [Time]
|
|
932
929
|
#
|
|
933
930
|
# @!attribute [rw] updated_at
|
|
934
931
|
# The ISO-8601 timestamp when the subject was last updated.
|
|
935
932
|
# @return [Time]
|
|
936
933
|
#
|
|
937
|
-
# @!attribute [rw]
|
|
938
|
-
# The
|
|
939
|
-
#
|
|
934
|
+
# @!attribute [rw] credentials
|
|
935
|
+
# The temporary session credentials vended at the last authenticating
|
|
936
|
+
# call with this subject.
|
|
937
|
+
# @return [Array<Types::CredentialSummary>]
|
|
938
|
+
#
|
|
939
|
+
# @!attribute [rw] instance_properties
|
|
940
|
+
# The specified instance properties associated with the request.
|
|
941
|
+
# @return [Array<Types::InstanceProperty>]
|
|
940
942
|
#
|
|
941
943
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SubjectDetail AWS API Documentation
|
|
942
944
|
#
|
|
943
945
|
class SubjectDetail < Struct.new(
|
|
944
|
-
:created_at,
|
|
945
|
-
:credentials,
|
|
946
|
-
:enabled,
|
|
947
|
-
:instance_properties,
|
|
948
|
-
:last_seen_at,
|
|
949
946
|
:subject_arn,
|
|
950
947
|
:subject_id,
|
|
948
|
+
:enabled,
|
|
949
|
+
:x509_subject,
|
|
950
|
+
:last_seen_at,
|
|
951
|
+
:created_at,
|
|
951
952
|
:updated_at,
|
|
952
|
-
:
|
|
953
|
+
:credentials,
|
|
954
|
+
:instance_properties)
|
|
953
955
|
SENSITIVE = []
|
|
954
956
|
include Aws::Structure
|
|
955
957
|
end
|
|
@@ -968,46 +970,46 @@ module Aws::RolesAnywhere
|
|
|
968
970
|
|
|
969
971
|
# A summary representation of subjects.
|
|
970
972
|
#
|
|
971
|
-
# @!attribute [rw]
|
|
972
|
-
# The
|
|
973
|
-
#
|
|
974
|
-
#
|
|
973
|
+
# @!attribute [rw] subject_arn
|
|
974
|
+
# The ARN of the resource.
|
|
975
|
+
# @return [String]
|
|
976
|
+
#
|
|
977
|
+
# @!attribute [rw] subject_id
|
|
978
|
+
# The id of the resource.
|
|
979
|
+
# @return [String]
|
|
975
980
|
#
|
|
976
981
|
# @!attribute [rw] enabled
|
|
977
982
|
# The enabled status of the subject.
|
|
978
983
|
# @return [Boolean]
|
|
979
984
|
#
|
|
985
|
+
# @!attribute [rw] x509_subject
|
|
986
|
+
# The x509 principal identifier of the authenticating certificate.
|
|
987
|
+
# @return [String]
|
|
988
|
+
#
|
|
980
989
|
# @!attribute [rw] last_seen_at
|
|
981
990
|
# The ISO-8601 time stamp of when the certificate was last used in a
|
|
982
991
|
# temporary credential request.
|
|
983
992
|
# @return [Time]
|
|
984
993
|
#
|
|
985
|
-
# @!attribute [rw]
|
|
986
|
-
# The
|
|
987
|
-
#
|
|
988
|
-
#
|
|
989
|
-
# @!attribute [rw] subject_id
|
|
990
|
-
# The id of the resource.
|
|
991
|
-
# @return [String]
|
|
994
|
+
# @!attribute [rw] created_at
|
|
995
|
+
# The ISO-8601 time stamp of when the certificate was first used in a
|
|
996
|
+
# temporary credential request.
|
|
997
|
+
# @return [Time]
|
|
992
998
|
#
|
|
993
999
|
# @!attribute [rw] updated_at
|
|
994
1000
|
# The ISO-8601 timestamp when the subject was last updated.
|
|
995
1001
|
# @return [Time]
|
|
996
1002
|
#
|
|
997
|
-
# @!attribute [rw] x509_subject
|
|
998
|
-
# The x509 principal identifier of the authenticating certificate.
|
|
999
|
-
# @return [String]
|
|
1000
|
-
#
|
|
1001
1003
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SubjectSummary AWS API Documentation
|
|
1002
1004
|
#
|
|
1003
1005
|
class SubjectSummary < Struct.new(
|
|
1004
|
-
:created_at,
|
|
1005
|
-
:enabled,
|
|
1006
|
-
:last_seen_at,
|
|
1007
1006
|
:subject_arn,
|
|
1008
1007
|
:subject_id,
|
|
1009
|
-
:
|
|
1010
|
-
:x509_subject
|
|
1008
|
+
:enabled,
|
|
1009
|
+
:x509_subject,
|
|
1010
|
+
:last_seen_at,
|
|
1011
|
+
:created_at,
|
|
1012
|
+
:updated_at)
|
|
1011
1013
|
SENSITIVE = []
|
|
1012
1014
|
include Aws::Structure
|
|
1013
1015
|
end
|
|
@@ -1067,50 +1069,50 @@ module Aws::RolesAnywhere
|
|
|
1067
1069
|
|
|
1068
1070
|
# The state of the trust anchor after a read or write operation.
|
|
1069
1071
|
#
|
|
1070
|
-
# @!attribute [rw]
|
|
1071
|
-
# The
|
|
1072
|
-
# @return [
|
|
1072
|
+
# @!attribute [rw] trust_anchor_id
|
|
1073
|
+
# The unique identifier of the trust anchor.
|
|
1074
|
+
# @return [String]
|
|
1073
1075
|
#
|
|
1074
|
-
# @!attribute [rw]
|
|
1075
|
-
#
|
|
1076
|
-
# @return [
|
|
1076
|
+
# @!attribute [rw] trust_anchor_arn
|
|
1077
|
+
# The ARN of the trust anchor.
|
|
1078
|
+
# @return [String]
|
|
1077
1079
|
#
|
|
1078
1080
|
# @!attribute [rw] name
|
|
1079
1081
|
# The name of the trust anchor.
|
|
1080
1082
|
# @return [String]
|
|
1081
1083
|
#
|
|
1082
|
-
# @!attribute [rw] notification_settings
|
|
1083
|
-
# A list of notification settings to be associated to the trust
|
|
1084
|
-
# anchor.
|
|
1085
|
-
# @return [Array<Types::NotificationSettingDetail>]
|
|
1086
|
-
#
|
|
1087
1084
|
# @!attribute [rw] source
|
|
1088
1085
|
# The trust anchor type and its related certificate data.
|
|
1089
1086
|
# @return [Types::Source]
|
|
1090
1087
|
#
|
|
1091
|
-
# @!attribute [rw]
|
|
1092
|
-
#
|
|
1093
|
-
# @return [
|
|
1088
|
+
# @!attribute [rw] enabled
|
|
1089
|
+
# Indicates whether the trust anchor is enabled.
|
|
1090
|
+
# @return [Boolean]
|
|
1094
1091
|
#
|
|
1095
|
-
# @!attribute [rw]
|
|
1096
|
-
# The
|
|
1097
|
-
# @return [
|
|
1092
|
+
# @!attribute [rw] created_at
|
|
1093
|
+
# The ISO-8601 timestamp when the trust anchor was created.
|
|
1094
|
+
# @return [Time]
|
|
1098
1095
|
#
|
|
1099
1096
|
# @!attribute [rw] updated_at
|
|
1100
1097
|
# The ISO-8601 timestamp when the trust anchor was last updated.
|
|
1101
1098
|
# @return [Time]
|
|
1102
1099
|
#
|
|
1100
|
+
# @!attribute [rw] notification_settings
|
|
1101
|
+
# A list of notification settings to be associated to the trust
|
|
1102
|
+
# anchor.
|
|
1103
|
+
# @return [Array<Types::NotificationSettingDetail>]
|
|
1104
|
+
#
|
|
1103
1105
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/TrustAnchorDetail AWS API Documentation
|
|
1104
1106
|
#
|
|
1105
1107
|
class TrustAnchorDetail < Struct.new(
|
|
1106
|
-
:
|
|
1107
|
-
:
|
|
1108
|
+
:trust_anchor_id,
|
|
1109
|
+
:trust_anchor_arn,
|
|
1108
1110
|
:name,
|
|
1109
|
-
:notification_settings,
|
|
1110
1111
|
:source,
|
|
1111
|
-
:
|
|
1112
|
-
:
|
|
1113
|
-
:updated_at
|
|
1112
|
+
:enabled,
|
|
1113
|
+
:created_at,
|
|
1114
|
+
:updated_at,
|
|
1115
|
+
:notification_settings)
|
|
1114
1116
|
SENSITIVE = []
|
|
1115
1117
|
include Aws::Structure
|
|
1116
1118
|
end
|
|
@@ -1148,10 +1150,6 @@ module Aws::RolesAnywhere
|
|
|
1148
1150
|
#
|
|
1149
1151
|
class UntagResourceResponse < Aws::EmptyStructure; end
|
|
1150
1152
|
|
|
1151
|
-
# @!attribute [rw] crl_data
|
|
1152
|
-
# The x509 v3 specified certificate revocation list (CRL).
|
|
1153
|
-
# @return [String]
|
|
1154
|
-
#
|
|
1155
1153
|
# @!attribute [rw] crl_id
|
|
1156
1154
|
# The unique identifier of the certificate revocation list (CRL).
|
|
1157
1155
|
# @return [String]
|
|
@@ -1160,43 +1158,31 @@ module Aws::RolesAnywhere
|
|
|
1160
1158
|
# The name of the Crl.
|
|
1161
1159
|
# @return [String]
|
|
1162
1160
|
#
|
|
1161
|
+
# @!attribute [rw] crl_data
|
|
1162
|
+
# The x509 v3 specified certificate revocation list (CRL).
|
|
1163
|
+
# @return [String]
|
|
1164
|
+
#
|
|
1163
1165
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateCrlRequest AWS API Documentation
|
|
1164
1166
|
#
|
|
1165
1167
|
class UpdateCrlRequest < Struct.new(
|
|
1166
|
-
:crl_data,
|
|
1167
1168
|
:crl_id,
|
|
1168
|
-
:name
|
|
1169
|
+
:name,
|
|
1170
|
+
:crl_data)
|
|
1169
1171
|
SENSITIVE = []
|
|
1170
1172
|
include Aws::Structure
|
|
1171
1173
|
end
|
|
1172
1174
|
|
|
1173
|
-
# @!attribute [rw]
|
|
1174
|
-
#
|
|
1175
|
-
#
|
|
1176
|
-
# @return [Boolean]
|
|
1177
|
-
#
|
|
1178
|
-
# @!attribute [rw] duration_seconds
|
|
1179
|
-
# Used to determine how long sessions vended using this profile are
|
|
1180
|
-
# valid for. See the `Expiration` section of the [CreateSession API
|
|
1181
|
-
# documentation][1] page for more details. In requests, if this value
|
|
1182
|
-
# is not provided, the default value will be 3600.
|
|
1183
|
-
#
|
|
1184
|
-
#
|
|
1185
|
-
#
|
|
1186
|
-
# [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
|
|
1187
|
-
# @return [Integer]
|
|
1188
|
-
#
|
|
1189
|
-
# @!attribute [rw] managed_policy_arns
|
|
1190
|
-
# A list of managed policy ARNs that apply to the vended session
|
|
1191
|
-
# credentials.
|
|
1192
|
-
# @return [Array<String>]
|
|
1175
|
+
# @!attribute [rw] profile_id
|
|
1176
|
+
# The unique identifier of the profile.
|
|
1177
|
+
# @return [String]
|
|
1193
1178
|
#
|
|
1194
1179
|
# @!attribute [rw] name
|
|
1195
1180
|
# The name of the profile.
|
|
1196
1181
|
# @return [String]
|
|
1197
1182
|
#
|
|
1198
|
-
# @!attribute [rw]
|
|
1199
|
-
#
|
|
1183
|
+
# @!attribute [rw] session_policy
|
|
1184
|
+
# A session policy that applies to the trust boundary of the vended
|
|
1185
|
+
# session credentials.
|
|
1200
1186
|
# @return [String]
|
|
1201
1187
|
#
|
|
1202
1188
|
# @!attribute [rw] role_arns
|
|
@@ -1204,25 +1190,45 @@ module Aws::RolesAnywhere
|
|
|
1204
1190
|
# credential request.
|
|
1205
1191
|
# @return [Array<String>]
|
|
1206
1192
|
#
|
|
1207
|
-
# @!attribute [rw]
|
|
1208
|
-
# A
|
|
1209
|
-
#
|
|
1210
|
-
# @return [String]
|
|
1193
|
+
# @!attribute [rw] managed_policy_arns
|
|
1194
|
+
# A list of managed policy ARNs that apply to the vended session
|
|
1195
|
+
# credentials.
|
|
1196
|
+
# @return [Array<String>]
|
|
1197
|
+
#
|
|
1198
|
+
# @!attribute [rw] duration_seconds
|
|
1199
|
+
# Used to determine how long sessions vended using this profile are
|
|
1200
|
+
# valid for. See the `Expiration` section of the [CreateSession API
|
|
1201
|
+
# documentation][1] page for more details. In requests, if this value
|
|
1202
|
+
# is not provided, the default value will be 3600.
|
|
1203
|
+
#
|
|
1204
|
+
#
|
|
1205
|
+
#
|
|
1206
|
+
# [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
|
|
1207
|
+
# @return [Integer]
|
|
1208
|
+
#
|
|
1209
|
+
# @!attribute [rw] accept_role_session_name
|
|
1210
|
+
# Used to determine if a custom role session name will be accepted in
|
|
1211
|
+
# a temporary credential request.
|
|
1212
|
+
# @return [Boolean]
|
|
1211
1213
|
#
|
|
1212
1214
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateProfileRequest AWS API Documentation
|
|
1213
1215
|
#
|
|
1214
1216
|
class UpdateProfileRequest < Struct.new(
|
|
1215
|
-
:accept_role_session_name,
|
|
1216
|
-
:duration_seconds,
|
|
1217
|
-
:managed_policy_arns,
|
|
1218
|
-
:name,
|
|
1219
1217
|
:profile_id,
|
|
1218
|
+
:name,
|
|
1219
|
+
:session_policy,
|
|
1220
1220
|
:role_arns,
|
|
1221
|
-
:
|
|
1221
|
+
:managed_policy_arns,
|
|
1222
|
+
:duration_seconds,
|
|
1223
|
+
:accept_role_session_name)
|
|
1222
1224
|
SENSITIVE = []
|
|
1223
1225
|
include Aws::Structure
|
|
1224
1226
|
end
|
|
1225
1227
|
|
|
1228
|
+
# @!attribute [rw] trust_anchor_id
|
|
1229
|
+
# The unique identifier of the trust anchor.
|
|
1230
|
+
# @return [String]
|
|
1231
|
+
#
|
|
1226
1232
|
# @!attribute [rw] name
|
|
1227
1233
|
# The name of the trust anchor.
|
|
1228
1234
|
# @return [String]
|
|
@@ -1231,16 +1237,12 @@ module Aws::RolesAnywhere
|
|
|
1231
1237
|
# The trust anchor type and its related certificate data.
|
|
1232
1238
|
# @return [Types::Source]
|
|
1233
1239
|
#
|
|
1234
|
-
# @!attribute [rw] trust_anchor_id
|
|
1235
|
-
# The unique identifier of the trust anchor.
|
|
1236
|
-
# @return [String]
|
|
1237
|
-
#
|
|
1238
1240
|
# @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateTrustAnchorRequest AWS API Documentation
|
|
1239
1241
|
#
|
|
1240
1242
|
class UpdateTrustAnchorRequest < Struct.new(
|
|
1243
|
+
:trust_anchor_id,
|
|
1241
1244
|
:name,
|
|
1242
|
-
:source
|
|
1243
|
-
:trust_anchor_id)
|
|
1245
|
+
:source)
|
|
1244
1246
|
SENSITIVE = []
|
|
1245
1247
|
include Aws::Structure
|
|
1246
1248
|
end
|