aws-sdk-rolesanywhere 1.44.0 → 1.45.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -44,11 +44,31 @@ module Aws::RolesAnywhere
44
44
  include Aws::Structure
45
45
  end
46
46
 
47
- # @!attribute [rw] accept_role_session_name
48
- # Used to determine if a custom role session name will be accepted in
49
- # a temporary credential request.
47
+ # @!attribute [rw] name
48
+ # The name of the profile.
49
+ # @return [String]
50
+ #
51
+ # @!attribute [rw] require_instance_properties
52
+ # Unused, saved for future use. Will likely specify whether instance
53
+ # properties are required in temporary credential requests with this
54
+ # profile.
50
55
  # @return [Boolean]
51
56
  #
57
+ # @!attribute [rw] session_policy
58
+ # A session policy that applies to the trust boundary of the vended
59
+ # session credentials.
60
+ # @return [String]
61
+ #
62
+ # @!attribute [rw] role_arns
63
+ # A list of IAM roles that this profile can assume in a temporary
64
+ # credential request.
65
+ # @return [Array<String>]
66
+ #
67
+ # @!attribute [rw] managed_policy_arns
68
+ # A list of managed policy ARNs that apply to the vended session
69
+ # credentials.
70
+ # @return [Array<String>]
71
+ #
52
72
  # @!attribute [rw] duration_seconds
53
73
  # Used to determine how long sessions vended using this profile are
54
74
  # valid for. See the `Expiration` section of the [CreateSession API
@@ -64,79 +84,60 @@ module Aws::RolesAnywhere
64
84
  # Specifies whether the profile is enabled.
65
85
  # @return [Boolean]
66
86
  #
67
- # @!attribute [rw] managed_policy_arns
68
- # A list of managed policy ARNs that apply to the vended session
69
- # credentials.
70
- # @return [Array<String>]
71
- #
72
- # @!attribute [rw] name
73
- # The name of the profile.
74
- # @return [String]
75
- #
76
- # @!attribute [rw] require_instance_properties
77
- # Specifies whether instance properties are required in temporary
78
- # credential requests with this profile.
79
- # @return [Boolean]
80
- #
81
- # @!attribute [rw] role_arns
82
- # A list of IAM roles that this profile can assume in a temporary
83
- # credential request.
84
- # @return [Array<String>]
85
- #
86
- # @!attribute [rw] session_policy
87
- # A session policy that applies to the trust boundary of the vended
88
- # session credentials.
89
- # @return [String]
90
- #
91
87
  # @!attribute [rw] tags
92
88
  # The tags to attach to the profile.
93
89
  # @return [Array<Types::Tag>]
94
90
  #
91
+ # @!attribute [rw] accept_role_session_name
92
+ # Used to determine if a custom role session name will be accepted in
93
+ # a temporary credential request.
94
+ # @return [Boolean]
95
+ #
95
96
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CreateProfileRequest AWS API Documentation
96
97
  #
97
98
  class CreateProfileRequest < Struct.new(
98
- :accept_role_session_name,
99
- :duration_seconds,
100
- :enabled,
101
- :managed_policy_arns,
102
99
  :name,
103
100
  :require_instance_properties,
104
- :role_arns,
105
101
  :session_policy,
106
- :tags)
102
+ :role_arns,
103
+ :managed_policy_arns,
104
+ :duration_seconds,
105
+ :enabled,
106
+ :tags,
107
+ :accept_role_session_name)
107
108
  SENSITIVE = []
108
109
  include Aws::Structure
109
110
  end
110
111
 
111
- # @!attribute [rw] enabled
112
- # Specifies whether the trust anchor is enabled.
113
- # @return [Boolean]
114
- #
115
112
  # @!attribute [rw] name
116
113
  # The name of the trust anchor.
117
114
  # @return [String]
118
115
  #
119
- # @!attribute [rw] notification_settings
120
- # A list of notification settings to be associated to the trust
121
- # anchor.
122
- # @return [Array<Types::NotificationSetting>]
123
- #
124
116
  # @!attribute [rw] source
125
117
  # The trust anchor type and its related certificate data.
126
118
  # @return [Types::Source]
127
119
  #
120
+ # @!attribute [rw] enabled
121
+ # Specifies whether the trust anchor is enabled.
122
+ # @return [Boolean]
123
+ #
128
124
  # @!attribute [rw] tags
129
125
  # The tags to attach to the trust anchor.
130
126
  # @return [Array<Types::Tag>]
131
127
  #
128
+ # @!attribute [rw] notification_settings
129
+ # A list of notification settings to be associated to the trust
130
+ # anchor.
131
+ # @return [Array<Types::NotificationSetting>]
132
+ #
132
133
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CreateTrustAnchorRequest AWS API Documentation
133
134
  #
134
135
  class CreateTrustAnchorRequest < Struct.new(
135
- :enabled,
136
136
  :name,
137
- :notification_settings,
138
137
  :source,
139
- :tags)
138
+ :enabled,
139
+ :tags,
140
+ :notification_settings)
140
141
  SENSITIVE = []
141
142
  include Aws::Structure
142
143
  end
@@ -144,19 +145,6 @@ module Aws::RolesAnywhere
144
145
  # A record of a presented X509 credential from a temporary credential
145
146
  # request.
146
147
  #
147
- # @!attribute [rw] enabled
148
- # Indicates whether the credential is enabled.
149
- # @return [Boolean]
150
- #
151
- # @!attribute [rw] failed
152
- # Indicates whether the temporary credential request was successful.
153
- # @return [Boolean]
154
- #
155
- # @!attribute [rw] issuer
156
- # The fully qualified domain name of the issuing certificate for the
157
- # presented end-entity certificate.
158
- # @return [String]
159
- #
160
148
  # @!attribute [rw] seen_at
161
149
  # The ISO-8601 time stamp of when the certificate was last used in a
162
150
  # temporary credential request.
@@ -166,19 +154,32 @@ module Aws::RolesAnywhere
166
154
  # The serial number of the certificate.
167
155
  # @return [String]
168
156
  #
157
+ # @!attribute [rw] issuer
158
+ # The fully qualified domain name of the issuing certificate for the
159
+ # presented end-entity certificate.
160
+ # @return [String]
161
+ #
162
+ # @!attribute [rw] enabled
163
+ # Indicates whether the credential is enabled.
164
+ # @return [Boolean]
165
+ #
169
166
  # @!attribute [rw] x509_certificate_data
170
167
  # The PEM-encoded data of the certificate.
171
168
  # @return [String]
172
169
  #
170
+ # @!attribute [rw] failed
171
+ # Indicates whether the temporary credential request was successful.
172
+ # @return [Boolean]
173
+ #
173
174
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CredentialSummary AWS API Documentation
174
175
  #
175
176
  class CredentialSummary < Struct.new(
176
- :enabled,
177
- :failed,
178
- :issuer,
179
177
  :seen_at,
180
178
  :serial_number,
181
- :x509_certificate_data)
179
+ :issuer,
180
+ :enabled,
181
+ :x509_certificate_data,
182
+ :failed)
182
183
  SENSITIVE = []
183
184
  include Aws::Structure
184
185
  end
@@ -186,30 +187,25 @@ module Aws::RolesAnywhere
186
187
  # The state of the certificate revocation list (CRL) after a read or
187
188
  # write operation.
188
189
  #
189
- # @!attribute [rw] created_at
190
- # The ISO-8601 timestamp when the certificate revocation list (CRL)
191
- # was created.
192
- # @return [Time]
190
+ # @!attribute [rw] crl_id
191
+ # The unique identifier of the certificate revocation list (CRL).
192
+ # @return [String]
193
193
  #
194
194
  # @!attribute [rw] crl_arn
195
195
  # The ARN of the certificate revocation list (CRL).
196
196
  # @return [String]
197
197
  #
198
- # @!attribute [rw] crl_data
199
- # The state of the certificate revocation list (CRL) after a read or
200
- # write operation.
201
- # @return [String]
202
- #
203
- # @!attribute [rw] crl_id
204
- # The unique identifier of the certificate revocation list (CRL).
198
+ # @!attribute [rw] name
199
+ # The name of the certificate revocation list (CRL).
205
200
  # @return [String]
206
201
  #
207
202
  # @!attribute [rw] enabled
208
203
  # Indicates whether the certificate revocation list (CRL) is enabled.
209
204
  # @return [Boolean]
210
205
  #
211
- # @!attribute [rw] name
212
- # The name of the certificate revocation list (CRL).
206
+ # @!attribute [rw] crl_data
207
+ # The state of the certificate revocation list (CRL) after a read or
208
+ # write operation.
213
209
  # @return [String]
214
210
  #
215
211
  # @!attribute [rw] trust_anchor_arn
@@ -217,6 +213,11 @@ module Aws::RolesAnywhere
217
213
  # will provide revocation for.
218
214
  # @return [String]
219
215
  #
216
+ # @!attribute [rw] created_at
217
+ # The ISO-8601 timestamp when the certificate revocation list (CRL)
218
+ # was created.
219
+ # @return [Time]
220
+ #
220
221
  # @!attribute [rw] updated_at
221
222
  # The ISO-8601 timestamp when the certificate revocation list (CRL)
222
223
  # was last updated.
@@ -225,13 +226,13 @@ module Aws::RolesAnywhere
225
226
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/CrlDetail AWS API Documentation
226
227
  #
227
228
  class CrlDetail < Struct.new(
228
- :created_at,
229
- :crl_arn,
230
- :crl_data,
231
229
  :crl_id,
232
- :enabled,
230
+ :crl_arn,
233
231
  :name,
232
+ :enabled,
233
+ :crl_data,
234
234
  :trust_anchor_arn,
235
+ :created_at,
235
236
  :updated_at)
236
237
  SENSITIVE = []
237
238
  include Aws::Structure
@@ -250,15 +251,15 @@ module Aws::RolesAnywhere
250
251
  include Aws::Structure
251
252
  end
252
253
 
254
+ # @!attribute [rw] profile_id
255
+ # The unique identifier of the profile.
256
+ # @return [String]
257
+ #
253
258
  # @!attribute [rw] certificate_field
254
259
  # Fields (x509Subject, x509Issuer and x509SAN) within X.509
255
260
  # certificates.
256
261
  # @return [String]
257
262
  #
258
- # @!attribute [rw] profile_id
259
- # The unique identifier of the profile.
260
- # @return [String]
261
- #
262
263
  # @!attribute [rw] specifiers
263
264
  # A list of specifiers of a certificate field; for example, CN, OU,
264
265
  # UID from a Subject.
@@ -267,8 +268,8 @@ module Aws::RolesAnywhere
267
268
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/DeleteAttributeMappingRequest AWS API Documentation
268
269
  #
269
270
  class DeleteAttributeMappingRequest < Struct.new(
270
- :certificate_field,
271
271
  :profile_id,
272
+ :certificate_field,
272
273
  :specifiers)
273
274
  SENSITIVE = []
274
275
  include Aws::Structure
@@ -286,6 +287,10 @@ module Aws::RolesAnywhere
286
287
  include Aws::Structure
287
288
  end
288
289
 
290
+ # @!attribute [rw] name
291
+ # The name of the certificate revocation list (CRL).
292
+ # @return [String]
293
+ #
289
294
  # @!attribute [rw] crl_data
290
295
  # The x509 v3 specified certificate revocation list (CRL).
291
296
  # @return [String]
@@ -294,10 +299,6 @@ module Aws::RolesAnywhere
294
299
  # Specifies whether the certificate revocation list (CRL) is enabled.
295
300
  # @return [Boolean]
296
301
  #
297
- # @!attribute [rw] name
298
- # The name of the certificate revocation list (CRL).
299
- # @return [String]
300
- #
301
302
  # @!attribute [rw] tags
302
303
  # A list of tags to attach to the certificate revocation list (CRL).
303
304
  # @return [Array<Types::Tag>]
@@ -310,9 +311,9 @@ module Aws::RolesAnywhere
310
311
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ImportCrlRequest AWS API Documentation
311
312
  #
312
313
  class ImportCrlRequest < Struct.new(
314
+ :name,
313
315
  :crl_data,
314
316
  :enabled,
315
- :name,
316
317
  :tags,
317
318
  :trust_anchor_arn)
318
319
  SENSITIVE = []
@@ -322,44 +323,44 @@ module Aws::RolesAnywhere
322
323
  # A key-value pair you set that identifies a property of the
323
324
  # authenticating instance.
324
325
  #
325
- # @!attribute [rw] failed
326
- # Indicates whether the temporary credential request was successful.
327
- # @return [Boolean]
326
+ # @!attribute [rw] seen_at
327
+ # The ISO-8601 time stamp of when the certificate was last used in a
328
+ # temporary credential request.
329
+ # @return [Time]
328
330
  #
329
331
  # @!attribute [rw] properties
330
332
  # A list of instanceProperty objects.
331
333
  # @return [Hash<String,String>]
332
334
  #
333
- # @!attribute [rw] seen_at
334
- # The ISO-8601 time stamp of when the certificate was last used in a
335
- # temporary credential request.
336
- # @return [Time]
335
+ # @!attribute [rw] failed
336
+ # Indicates whether the temporary credential request was successful.
337
+ # @return [Boolean]
337
338
  #
338
339
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/InstanceProperty AWS API Documentation
339
340
  #
340
341
  class InstanceProperty < Struct.new(
341
- :failed,
342
+ :seen_at,
342
343
  :properties,
343
- :seen_at)
344
+ :failed)
344
345
  SENSITIVE = []
345
346
  include Aws::Structure
346
347
  end
347
348
 
348
- # @!attribute [rw] crls
349
- # A list of certificate revocation lists (CRL).
350
- # @return [Array<Types::CrlDetail>]
351
- #
352
349
  # @!attribute [rw] next_token
353
350
  # A token that indicates where the output should continue from, if a
354
351
  # previous request did not show all results. To get the next results,
355
352
  # make the request again with this value.
356
353
  # @return [String]
357
354
  #
355
+ # @!attribute [rw] crls
356
+ # A list of certificate revocation lists (CRL).
357
+ # @return [Array<Types::CrlDetail>]
358
+ #
358
359
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ListCrlsResponse AWS API Documentation
359
360
  #
360
361
  class ListCrlsResponse < Struct.new(
361
- :crls,
362
- :next_token)
362
+ :next_token,
363
+ :crls)
363
364
  SENSITIVE = []
364
365
  include Aws::Structure
365
366
  end
@@ -402,21 +403,21 @@ module Aws::RolesAnywhere
402
403
  include Aws::Structure
403
404
  end
404
405
 
406
+ # @!attribute [rw] subjects
407
+ # A list of subjects.
408
+ # @return [Array<Types::SubjectSummary>]
409
+ #
405
410
  # @!attribute [rw] next_token
406
411
  # A token that indicates where the output should continue from, if a
407
412
  # previous request did not show all results. To get the next results,
408
413
  # make the request again with this value.
409
414
  # @return [String]
410
415
  #
411
- # @!attribute [rw] subjects
412
- # A list of subjects.
413
- # @return [Array<Types::SubjectSummary>]
414
- #
415
416
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ListSubjectsResponse AWS API Documentation
416
417
  #
417
418
  class ListSubjectsResponse < Struct.new(
418
- :next_token,
419
- :subjects)
419
+ :subjects,
420
+ :next_token)
420
421
  SENSITIVE = []
421
422
  include Aws::Structure
422
423
  end
@@ -484,17 +485,6 @@ module Aws::RolesAnywhere
484
485
  # notifying across multiple channels - CloudWatch metrics, EventBridge,
485
486
  # and Health Dashboard.
486
487
  #
487
- # @!attribute [rw] channel
488
- # The specified channel of notification. IAM Roles Anywhere uses
489
- # CloudWatch metrics, EventBridge, and Health Dashboard to notify for
490
- # an event.
491
- #
492
- # <note markdown="1"> In the absence of a specific channel, IAM Roles Anywhere applies
493
- # this setting to 'ALL' channels.
494
- #
495
- # </note>
496
- # @return [String]
497
- #
498
488
  # @!attribute [rw] enabled
499
489
  # Indicates whether the notification setting is enabled.
500
490
  # @return [Boolean]
@@ -508,13 +498,24 @@ module Aws::RolesAnywhere
508
498
  # required for a notification setting that is enabled.
509
499
  # @return [Integer]
510
500
  #
501
+ # @!attribute [rw] channel
502
+ # The specified channel of notification. IAM Roles Anywhere uses
503
+ # CloudWatch metrics, EventBridge, and Health Dashboard to notify for
504
+ # an event.
505
+ #
506
+ # <note markdown="1"> In the absence of a specific channel, IAM Roles Anywhere applies
507
+ # this setting to 'ALL' channels.
508
+ #
509
+ # </note>
510
+ # @return [String]
511
+ #
511
512
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSetting AWS API Documentation
512
513
  #
513
514
  class NotificationSetting < Struct.new(
514
- :channel,
515
515
  :enabled,
516
516
  :event,
517
- :threshold)
517
+ :threshold,
518
+ :channel)
518
519
  SENSITIVE = []
519
520
  include Aws::Structure
520
521
  end
@@ -525,6 +526,18 @@ module Aws::RolesAnywhere
525
526
  # threshold, status of the notification setting, and the channel to
526
527
  # notify.
527
528
  #
529
+ # @!attribute [rw] enabled
530
+ # Indicates whether the notification setting is enabled.
531
+ # @return [Boolean]
532
+ #
533
+ # @!attribute [rw] event
534
+ # The event to which this notification setting is applied.
535
+ # @return [String]
536
+ #
537
+ # @!attribute [rw] threshold
538
+ # The number of days before a notification event.
539
+ # @return [Integer]
540
+ #
528
541
  # @!attribute [rw] channel
529
542
  # The specified channel of notification. IAM Roles Anywhere uses
530
543
  # CloudWatch metrics, EventBridge, and Health Dashboard to notify for
@@ -543,26 +556,14 @@ module Aws::RolesAnywhere
543
556
  # settings, it is the respective account ID.
544
557
  # @return [String]
545
558
  #
546
- # @!attribute [rw] enabled
547
- # Indicates whether the notification setting is enabled.
548
- # @return [Boolean]
549
- #
550
- # @!attribute [rw] event
551
- # The event to which this notification setting is applied.
552
- # @return [String]
553
- #
554
- # @!attribute [rw] threshold
555
- # The number of days before a notification event.
556
- # @return [Integer]
557
- #
558
559
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSettingDetail AWS API Documentation
559
560
  #
560
561
  class NotificationSettingDetail < Struct.new(
561
- :channel,
562
- :configured_by,
563
562
  :enabled,
564
563
  :event,
565
- :threshold)
564
+ :threshold,
565
+ :channel,
566
+ :configured_by)
566
567
  SENSITIVE = []
567
568
  include Aws::Structure
568
569
  end
@@ -570,110 +571,111 @@ module Aws::RolesAnywhere
570
571
  # A notification setting key to reset. A notification setting key
571
572
  # includes the event and the channel.
572
573
  #
573
- # @!attribute [rw] channel
574
- # The specified channel of notification.
575
- # @return [String]
576
- #
577
574
  # @!attribute [rw] event
578
575
  # The notification setting event to reset.
579
576
  # @return [String]
580
577
  #
578
+ # @!attribute [rw] channel
579
+ # The specified channel of notification.
580
+ # @return [String]
581
+ #
581
582
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/NotificationSettingKey AWS API Documentation
582
583
  #
583
584
  class NotificationSettingKey < Struct.new(
584
- :channel,
585
- :event)
585
+ :event,
586
+ :channel)
586
587
  SENSITIVE = []
587
588
  include Aws::Structure
588
589
  end
589
590
 
590
591
  # The state of the profile after a read or write operation.
591
592
  #
592
- # @!attribute [rw] accept_role_session_name
593
- # Used to determine if a custom role session name will be accepted in
594
- # a temporary credential request.
595
- # @return [Boolean]
596
- #
597
- # @!attribute [rw] attribute_mappings
598
- # A mapping applied to the authenticating end-entity certificate.
599
- # @return [Array<Types::AttributeMapping>]
600
- #
601
- # @!attribute [rw] created_at
602
- # The ISO-8601 timestamp when the profile was created.
603
- # @return [Time]
604
- #
605
- # @!attribute [rw] created_by
606
- # The Amazon Web Services account that created the profile.
593
+ # @!attribute [rw] profile_id
594
+ # The unique identifier of the profile.
607
595
  # @return [String]
608
596
  #
609
- # @!attribute [rw] duration_seconds
610
- # Used to determine how long sessions vended using this profile are
611
- # valid for. See the `Expiration` section of the [CreateSession API
612
- # documentation][1] page for more details. In requests, if this value
613
- # is not provided, the default value will be 3600.
614
- #
597
+ # @!attribute [rw] profile_arn
598
+ # The ARN of the profile.
599
+ # @return [String]
615
600
  #
601
+ # @!attribute [rw] name
602
+ # The name of the profile.
603
+ # @return [String]
616
604
  #
617
- # [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
618
- # @return [Integer]
605
+ # @!attribute [rw] require_instance_properties
606
+ # Unused, saved for future use. Will likely specify whether instance
607
+ # properties are required in temporary credential requests with this
608
+ # profile.
609
+ # @return [Boolean]
619
610
  #
620
611
  # @!attribute [rw] enabled
621
612
  # Indicates whether the profile is enabled.
622
613
  # @return [Boolean]
623
614
  #
624
- # @!attribute [rw] managed_policy_arns
625
- # A list of managed policy ARNs that apply to the vended session
626
- # credentials.
627
- # @return [Array<String>]
628
- #
629
- # @!attribute [rw] name
630
- # The name of the profile.
631
- # @return [String]
632
- #
633
- # @!attribute [rw] profile_arn
634
- # The ARN of the profile.
615
+ # @!attribute [rw] created_by
616
+ # The Amazon Web Services account that created the profile.
635
617
  # @return [String]
636
618
  #
637
- # @!attribute [rw] profile_id
638
- # The unique identifier of the profile.
619
+ # @!attribute [rw] session_policy
620
+ # A session policy that applies to the trust boundary of the vended
621
+ # session credentials.
639
622
  # @return [String]
640
623
  #
641
- # @!attribute [rw] require_instance_properties
642
- # Specifies whether instance properties are required in temporary
643
- # credential requests with this profile.
644
- # @return [Boolean]
645
- #
646
624
  # @!attribute [rw] role_arns
647
625
  # A list of IAM roles that this profile can assume in a temporary
648
626
  # credential request.
649
627
  # @return [Array<String>]
650
628
  #
651
- # @!attribute [rw] session_policy
652
- # A session policy that applies to the trust boundary of the vended
653
- # session credentials.
654
- # @return [String]
629
+ # @!attribute [rw] managed_policy_arns
630
+ # A list of managed policy ARNs that apply to the vended session
631
+ # credentials.
632
+ # @return [Array<String>]
633
+ #
634
+ # @!attribute [rw] created_at
635
+ # The ISO-8601 timestamp when the profile was created.
636
+ # @return [Time]
655
637
  #
656
638
  # @!attribute [rw] updated_at
657
639
  # The ISO-8601 timestamp when the profile was last updated.
658
640
  # @return [Time]
659
641
  #
642
+ # @!attribute [rw] duration_seconds
643
+ # Used to determine how long sessions vended using this profile are
644
+ # valid for. See the `Expiration` section of the [CreateSession API
645
+ # documentation][1] page for more details. In requests, if this value
646
+ # is not provided, the default value will be 3600.
647
+ #
648
+ #
649
+ #
650
+ # [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
651
+ # @return [Integer]
652
+ #
653
+ # @!attribute [rw] accept_role_session_name
654
+ # Used to determine if a custom role session name will be accepted in
655
+ # a temporary credential request.
656
+ # @return [Boolean]
657
+ #
658
+ # @!attribute [rw] attribute_mappings
659
+ # A mapping applied to the authenticating end-entity certificate.
660
+ # @return [Array<Types::AttributeMapping>]
661
+ #
660
662
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ProfileDetail AWS API Documentation
661
663
  #
662
664
  class ProfileDetail < Struct.new(
663
- :accept_role_session_name,
664
- :attribute_mappings,
665
- :created_at,
666
- :created_by,
667
- :duration_seconds,
668
- :enabled,
669
- :managed_policy_arns,
670
- :name,
671
- :profile_arn,
672
665
  :profile_id,
666
+ :profile_arn,
667
+ :name,
673
668
  :require_instance_properties,
674
- :role_arns,
669
+ :enabled,
670
+ :created_by,
675
671
  :session_policy,
676
- :updated_at)
672
+ :role_arns,
673
+ :managed_policy_arns,
674
+ :created_at,
675
+ :updated_at,
676
+ :duration_seconds,
677
+ :accept_role_session_name,
678
+ :attribute_mappings)
677
679
  SENSITIVE = []
678
680
  include Aws::Structure
679
681
  end
@@ -690,6 +692,10 @@ module Aws::RolesAnywhere
690
692
  include Aws::Structure
691
693
  end
692
694
 
695
+ # @!attribute [rw] profile_id
696
+ # The unique identifier of the profile.
697
+ # @return [String]
698
+ #
693
699
  # @!attribute [rw] certificate_field
694
700
  # Fields (x509Subject, x509Issuer and x509SAN) within X.509
695
701
  # certificates.
@@ -700,16 +706,12 @@ module Aws::RolesAnywhere
700
706
  # sub-field.
701
707
  # @return [Array<Types::MappingRule>]
702
708
  #
703
- # @!attribute [rw] profile_id
704
- # The unique identifier of the profile.
705
- # @return [String]
706
- #
707
709
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/PutAttributeMappingRequest AWS API Documentation
708
710
  #
709
711
  class PutAttributeMappingRequest < Struct.new(
712
+ :profile_id,
710
713
  :certificate_field,
711
- :mapping_rules,
712
- :profile_id)
714
+ :mapping_rules)
713
715
  SENSITIVE = []
714
716
  include Aws::Structure
715
717
  end
@@ -726,20 +728,20 @@ module Aws::RolesAnywhere
726
728
  include Aws::Structure
727
729
  end
728
730
 
731
+ # @!attribute [rw] trust_anchor_id
732
+ # The unique identifier of the trust anchor.
733
+ # @return [String]
734
+ #
729
735
  # @!attribute [rw] notification_settings
730
736
  # A list of notification settings to be associated to the trust
731
737
  # anchor.
732
738
  # @return [Array<Types::NotificationSetting>]
733
739
  #
734
- # @!attribute [rw] trust_anchor_id
735
- # The unique identifier of the trust anchor.
736
- # @return [String]
737
- #
738
740
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/PutNotificationSettingsRequest AWS API Documentation
739
741
  #
740
742
  class PutNotificationSettingsRequest < Struct.new(
741
- :notification_settings,
742
- :trust_anchor_id)
743
+ :trust_anchor_id,
744
+ :notification_settings)
743
745
  SENSITIVE = []
744
746
  include Aws::Structure
745
747
  end
@@ -756,20 +758,20 @@ module Aws::RolesAnywhere
756
758
  include Aws::Structure
757
759
  end
758
760
 
761
+ # @!attribute [rw] trust_anchor_id
762
+ # The unique identifier of the trust anchor.
763
+ # @return [String]
764
+ #
759
765
  # @!attribute [rw] notification_setting_keys
760
766
  # A list of notification setting keys to reset. A notification setting
761
767
  # key includes the event and the channel.
762
768
  # @return [Array<Types::NotificationSettingKey>]
763
769
  #
764
- # @!attribute [rw] trust_anchor_id
765
- # The unique identifier of the trust anchor.
766
- # @return [String]
767
- #
768
770
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/ResetNotificationSettingsRequest AWS API Documentation
769
771
  #
770
772
  class ResetNotificationSettingsRequest < Struct.new(
771
- :notification_setting_keys,
772
- :trust_anchor_id)
773
+ :trust_anchor_id,
774
+ :notification_setting_keys)
773
775
  SENSITIVE = []
774
776
  include Aws::Structure
775
777
  end
@@ -849,19 +851,19 @@ module Aws::RolesAnywhere
849
851
 
850
852
  # The trust anchor type and its related certificate data.
851
853
  #
852
- # @!attribute [rw] source_data
853
- # The data field of the trust anchor depending on its type.
854
- # @return [Types::SourceData]
855
- #
856
854
  # @!attribute [rw] source_type
857
855
  # The type of the trust anchor.
858
856
  # @return [String]
859
857
  #
858
+ # @!attribute [rw] source_data
859
+ # The data field of the trust anchor depending on its type.
860
+ # @return [Types::SourceData]
861
+ #
860
862
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/Source AWS API Documentation
861
863
  #
862
864
  class Source < Struct.new(
863
- :source_data,
864
- :source_type)
865
+ :source_type,
866
+ :source_data)
865
867
  SENSITIVE = []
866
868
  include Aws::Structure
867
869
  end
@@ -872,84 +874,84 @@ module Aws::RolesAnywhere
872
874
  #
873
875
  # @note SourceData is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of SourceData corresponding to the set member.
874
876
  #
877
+ # @!attribute [rw] x509_certificate_data
878
+ # The PEM-encoded data for the certificate anchor. Included for trust
879
+ # anchors of type `CERTIFICATE_BUNDLE`.
880
+ # @return [String]
881
+ #
875
882
  # @!attribute [rw] acm_pca_arn
876
883
  # The root certificate of the Private Certificate Authority specified
877
884
  # by this ARN is used in trust validation for temporary credential
878
885
  # requests. Included for trust anchors of type `AWS_ACM_PCA`.
879
886
  # @return [String]
880
887
  #
881
- # @!attribute [rw] x509_certificate_data
882
- # The PEM-encoded data for the certificate anchor. Included for trust
883
- # anchors of type `CERTIFICATE_BUNDLE`.
884
- # @return [String]
885
- #
886
888
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SourceData AWS API Documentation
887
889
  #
888
890
  class SourceData < Struct.new(
889
- :acm_pca_arn,
890
891
  :x509_certificate_data,
892
+ :acm_pca_arn,
891
893
  :unknown)
892
894
  SENSITIVE = []
893
895
  include Aws::Structure
894
896
  include Aws::Structure::Union
895
897
 
896
- class AcmPcaArn < SourceData; end
897
898
  class X509CertificateData < SourceData; end
899
+ class AcmPcaArn < SourceData; end
898
900
  class Unknown < SourceData; end
899
901
  end
900
902
 
901
903
  # The state of the subject after a read or write operation.
902
904
  #
903
- # @!attribute [rw] created_at
904
- # The ISO-8601 timestamp when the subject was created.
905
- # @return [Time]
905
+ # @!attribute [rw] subject_arn
906
+ # The ARN of the resource.
907
+ # @return [String]
906
908
  #
907
- # @!attribute [rw] credentials
908
- # The temporary session credentials vended at the last authenticating
909
- # call with this subject.
910
- # @return [Array<Types::CredentialSummary>]
909
+ # @!attribute [rw] subject_id
910
+ # The id of the resource
911
+ # @return [String]
911
912
  #
912
913
  # @!attribute [rw] enabled
913
914
  # The enabled status of the subject.
914
915
  # @return [Boolean]
915
916
  #
916
- # @!attribute [rw] instance_properties
917
- # The specified instance properties associated with the request.
918
- # @return [Array<Types::InstanceProperty>]
917
+ # @!attribute [rw] x509_subject
918
+ # The x509 principal identifier of the authenticating certificate.
919
+ # @return [String]
919
920
  #
920
921
  # @!attribute [rw] last_seen_at
921
922
  # The ISO-8601 timestamp of the last time this subject requested
922
923
  # temporary session credentials.
923
924
  # @return [Time]
924
925
  #
925
- # @!attribute [rw] subject_arn
926
- # The ARN of the resource.
927
- # @return [String]
928
- #
929
- # @!attribute [rw] subject_id
930
- # The id of the resource
931
- # @return [String]
926
+ # @!attribute [rw] created_at
927
+ # The ISO-8601 timestamp when the subject was created.
928
+ # @return [Time]
932
929
  #
933
930
  # @!attribute [rw] updated_at
934
931
  # The ISO-8601 timestamp when the subject was last updated.
935
932
  # @return [Time]
936
933
  #
937
- # @!attribute [rw] x509_subject
938
- # The x509 principal identifier of the authenticating certificate.
939
- # @return [String]
934
+ # @!attribute [rw] credentials
935
+ # The temporary session credentials vended at the last authenticating
936
+ # call with this subject.
937
+ # @return [Array<Types::CredentialSummary>]
938
+ #
939
+ # @!attribute [rw] instance_properties
940
+ # The specified instance properties associated with the request.
941
+ # @return [Array<Types::InstanceProperty>]
940
942
  #
941
943
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SubjectDetail AWS API Documentation
942
944
  #
943
945
  class SubjectDetail < Struct.new(
944
- :created_at,
945
- :credentials,
946
- :enabled,
947
- :instance_properties,
948
- :last_seen_at,
949
946
  :subject_arn,
950
947
  :subject_id,
948
+ :enabled,
949
+ :x509_subject,
950
+ :last_seen_at,
951
+ :created_at,
951
952
  :updated_at,
952
- :x509_subject)
953
+ :credentials,
954
+ :instance_properties)
953
955
  SENSITIVE = []
954
956
  include Aws::Structure
955
957
  end
@@ -968,46 +970,46 @@ module Aws::RolesAnywhere
968
970
 
969
971
  # A summary representation of subjects.
970
972
  #
971
- # @!attribute [rw] created_at
972
- # The ISO-8601 time stamp of when the certificate was first used in a
973
- # temporary credential request.
974
- # @return [Time]
973
+ # @!attribute [rw] subject_arn
974
+ # The ARN of the resource.
975
+ # @return [String]
976
+ #
977
+ # @!attribute [rw] subject_id
978
+ # The id of the resource.
979
+ # @return [String]
975
980
  #
976
981
  # @!attribute [rw] enabled
977
982
  # The enabled status of the subject.
978
983
  # @return [Boolean]
979
984
  #
985
+ # @!attribute [rw] x509_subject
986
+ # The x509 principal identifier of the authenticating certificate.
987
+ # @return [String]
988
+ #
980
989
  # @!attribute [rw] last_seen_at
981
990
  # The ISO-8601 time stamp of when the certificate was last used in a
982
991
  # temporary credential request.
983
992
  # @return [Time]
984
993
  #
985
- # @!attribute [rw] subject_arn
986
- # The ARN of the resource.
987
- # @return [String]
988
- #
989
- # @!attribute [rw] subject_id
990
- # The id of the resource.
991
- # @return [String]
994
+ # @!attribute [rw] created_at
995
+ # The ISO-8601 time stamp of when the certificate was first used in a
996
+ # temporary credential request.
997
+ # @return [Time]
992
998
  #
993
999
  # @!attribute [rw] updated_at
994
1000
  # The ISO-8601 timestamp when the subject was last updated.
995
1001
  # @return [Time]
996
1002
  #
997
- # @!attribute [rw] x509_subject
998
- # The x509 principal identifier of the authenticating certificate.
999
- # @return [String]
1000
- #
1001
1003
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/SubjectSummary AWS API Documentation
1002
1004
  #
1003
1005
  class SubjectSummary < Struct.new(
1004
- :created_at,
1005
- :enabled,
1006
- :last_seen_at,
1007
1006
  :subject_arn,
1008
1007
  :subject_id,
1009
- :updated_at,
1010
- :x509_subject)
1008
+ :enabled,
1009
+ :x509_subject,
1010
+ :last_seen_at,
1011
+ :created_at,
1012
+ :updated_at)
1011
1013
  SENSITIVE = []
1012
1014
  include Aws::Structure
1013
1015
  end
@@ -1067,50 +1069,50 @@ module Aws::RolesAnywhere
1067
1069
 
1068
1070
  # The state of the trust anchor after a read or write operation.
1069
1071
  #
1070
- # @!attribute [rw] created_at
1071
- # The ISO-8601 timestamp when the trust anchor was created.
1072
- # @return [Time]
1072
+ # @!attribute [rw] trust_anchor_id
1073
+ # The unique identifier of the trust anchor.
1074
+ # @return [String]
1073
1075
  #
1074
- # @!attribute [rw] enabled
1075
- # Indicates whether the trust anchor is enabled.
1076
- # @return [Boolean]
1076
+ # @!attribute [rw] trust_anchor_arn
1077
+ # The ARN of the trust anchor.
1078
+ # @return [String]
1077
1079
  #
1078
1080
  # @!attribute [rw] name
1079
1081
  # The name of the trust anchor.
1080
1082
  # @return [String]
1081
1083
  #
1082
- # @!attribute [rw] notification_settings
1083
- # A list of notification settings to be associated to the trust
1084
- # anchor.
1085
- # @return [Array<Types::NotificationSettingDetail>]
1086
- #
1087
1084
  # @!attribute [rw] source
1088
1085
  # The trust anchor type and its related certificate data.
1089
1086
  # @return [Types::Source]
1090
1087
  #
1091
- # @!attribute [rw] trust_anchor_arn
1092
- # The ARN of the trust anchor.
1093
- # @return [String]
1088
+ # @!attribute [rw] enabled
1089
+ # Indicates whether the trust anchor is enabled.
1090
+ # @return [Boolean]
1094
1091
  #
1095
- # @!attribute [rw] trust_anchor_id
1096
- # The unique identifier of the trust anchor.
1097
- # @return [String]
1092
+ # @!attribute [rw] created_at
1093
+ # The ISO-8601 timestamp when the trust anchor was created.
1094
+ # @return [Time]
1098
1095
  #
1099
1096
  # @!attribute [rw] updated_at
1100
1097
  # The ISO-8601 timestamp when the trust anchor was last updated.
1101
1098
  # @return [Time]
1102
1099
  #
1100
+ # @!attribute [rw] notification_settings
1101
+ # A list of notification settings to be associated to the trust
1102
+ # anchor.
1103
+ # @return [Array<Types::NotificationSettingDetail>]
1104
+ #
1103
1105
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/TrustAnchorDetail AWS API Documentation
1104
1106
  #
1105
1107
  class TrustAnchorDetail < Struct.new(
1106
- :created_at,
1107
- :enabled,
1108
+ :trust_anchor_id,
1109
+ :trust_anchor_arn,
1108
1110
  :name,
1109
- :notification_settings,
1110
1111
  :source,
1111
- :trust_anchor_arn,
1112
- :trust_anchor_id,
1113
- :updated_at)
1112
+ :enabled,
1113
+ :created_at,
1114
+ :updated_at,
1115
+ :notification_settings)
1114
1116
  SENSITIVE = []
1115
1117
  include Aws::Structure
1116
1118
  end
@@ -1148,10 +1150,6 @@ module Aws::RolesAnywhere
1148
1150
  #
1149
1151
  class UntagResourceResponse < Aws::EmptyStructure; end
1150
1152
 
1151
- # @!attribute [rw] crl_data
1152
- # The x509 v3 specified certificate revocation list (CRL).
1153
- # @return [String]
1154
- #
1155
1153
  # @!attribute [rw] crl_id
1156
1154
  # The unique identifier of the certificate revocation list (CRL).
1157
1155
  # @return [String]
@@ -1160,43 +1158,31 @@ module Aws::RolesAnywhere
1160
1158
  # The name of the Crl.
1161
1159
  # @return [String]
1162
1160
  #
1161
+ # @!attribute [rw] crl_data
1162
+ # The x509 v3 specified certificate revocation list (CRL).
1163
+ # @return [String]
1164
+ #
1163
1165
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateCrlRequest AWS API Documentation
1164
1166
  #
1165
1167
  class UpdateCrlRequest < Struct.new(
1166
- :crl_data,
1167
1168
  :crl_id,
1168
- :name)
1169
+ :name,
1170
+ :crl_data)
1169
1171
  SENSITIVE = []
1170
1172
  include Aws::Structure
1171
1173
  end
1172
1174
 
1173
- # @!attribute [rw] accept_role_session_name
1174
- # Used to determine if a custom role session name will be accepted in
1175
- # a temporary credential request.
1176
- # @return [Boolean]
1177
- #
1178
- # @!attribute [rw] duration_seconds
1179
- # Used to determine how long sessions vended using this profile are
1180
- # valid for. See the `Expiration` section of the [CreateSession API
1181
- # documentation][1] page for more details. In requests, if this value
1182
- # is not provided, the default value will be 3600.
1183
- #
1184
- #
1185
- #
1186
- # [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
1187
- # @return [Integer]
1188
- #
1189
- # @!attribute [rw] managed_policy_arns
1190
- # A list of managed policy ARNs that apply to the vended session
1191
- # credentials.
1192
- # @return [Array<String>]
1175
+ # @!attribute [rw] profile_id
1176
+ # The unique identifier of the profile.
1177
+ # @return [String]
1193
1178
  #
1194
1179
  # @!attribute [rw] name
1195
1180
  # The name of the profile.
1196
1181
  # @return [String]
1197
1182
  #
1198
- # @!attribute [rw] profile_id
1199
- # The unique identifier of the profile.
1183
+ # @!attribute [rw] session_policy
1184
+ # A session policy that applies to the trust boundary of the vended
1185
+ # session credentials.
1200
1186
  # @return [String]
1201
1187
  #
1202
1188
  # @!attribute [rw] role_arns
@@ -1204,25 +1190,45 @@ module Aws::RolesAnywhere
1204
1190
  # credential request.
1205
1191
  # @return [Array<String>]
1206
1192
  #
1207
- # @!attribute [rw] session_policy
1208
- # A session policy that applies to the trust boundary of the vended
1209
- # session credentials.
1210
- # @return [String]
1193
+ # @!attribute [rw] managed_policy_arns
1194
+ # A list of managed policy ARNs that apply to the vended session
1195
+ # credentials.
1196
+ # @return [Array<String>]
1197
+ #
1198
+ # @!attribute [rw] duration_seconds
1199
+ # Used to determine how long sessions vended using this profile are
1200
+ # valid for. See the `Expiration` section of the [CreateSession API
1201
+ # documentation][1] page for more details. In requests, if this value
1202
+ # is not provided, the default value will be 3600.
1203
+ #
1204
+ #
1205
+ #
1206
+ # [1]: https://docs.aws.amazon.com/rolesanywhere/latest/userguide/authentication-create-session.html#credentials-object
1207
+ # @return [Integer]
1208
+ #
1209
+ # @!attribute [rw] accept_role_session_name
1210
+ # Used to determine if a custom role session name will be accepted in
1211
+ # a temporary credential request.
1212
+ # @return [Boolean]
1211
1213
  #
1212
1214
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateProfileRequest AWS API Documentation
1213
1215
  #
1214
1216
  class UpdateProfileRequest < Struct.new(
1215
- :accept_role_session_name,
1216
- :duration_seconds,
1217
- :managed_policy_arns,
1218
- :name,
1219
1217
  :profile_id,
1218
+ :name,
1219
+ :session_policy,
1220
1220
  :role_arns,
1221
- :session_policy)
1221
+ :managed_policy_arns,
1222
+ :duration_seconds,
1223
+ :accept_role_session_name)
1222
1224
  SENSITIVE = []
1223
1225
  include Aws::Structure
1224
1226
  end
1225
1227
 
1228
+ # @!attribute [rw] trust_anchor_id
1229
+ # The unique identifier of the trust anchor.
1230
+ # @return [String]
1231
+ #
1226
1232
  # @!attribute [rw] name
1227
1233
  # The name of the trust anchor.
1228
1234
  # @return [String]
@@ -1231,16 +1237,12 @@ module Aws::RolesAnywhere
1231
1237
  # The trust anchor type and its related certificate data.
1232
1238
  # @return [Types::Source]
1233
1239
  #
1234
- # @!attribute [rw] trust_anchor_id
1235
- # The unique identifier of the trust anchor.
1236
- # @return [String]
1237
- #
1238
1240
  # @see http://docs.aws.amazon.com/goto/WebAPI/rolesanywhere-2018-05-10/UpdateTrustAnchorRequest AWS API Documentation
1239
1241
  #
1240
1242
  class UpdateTrustAnchorRequest < Struct.new(
1243
+ :trust_anchor_id,
1241
1244
  :name,
1242
- :source,
1243
- :trust_anchor_id)
1245
+ :source)
1244
1246
  SENSITIVE = []
1245
1247
  include Aws::Structure
1246
1248
  end