aws-sdk-ssoadmin 1.19.0 → 1.20.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-ssoadmin/client.rb +211 -218
- data/lib/aws-sdk-ssoadmin/types.rb +200 -208
- data/lib/aws-sdk-ssoadmin.rb +1 -1
- metadata +2 -2
@@ -365,16 +365,16 @@ module Aws::SSOAdmin
|
|
365
365
|
# PermissionSet.
|
366
366
|
#
|
367
367
|
# @option params [required, String] :instance_arn
|
368
|
-
# The ARN of the
|
369
|
-
#
|
368
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
369
|
+
# will be executed.
|
370
370
|
#
|
371
371
|
# @option params [required, String] :permission_set_arn
|
372
372
|
# The ARN of the `PermissionSet`.
|
373
373
|
#
|
374
374
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
375
375
|
# Specifies the name and path of a customer managed policy. You must
|
376
|
-
# have an IAM policy that matches the name and path in each
|
377
|
-
#
|
376
|
+
# have an IAM policy that matches the name and path in each AWS account
|
377
|
+
# where you want to deploy your permission set.
|
378
378
|
#
|
379
379
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
380
380
|
#
|
@@ -398,8 +398,7 @@ module Aws::SSOAdmin
|
|
398
398
|
req.send_request(options)
|
399
399
|
end
|
400
400
|
|
401
|
-
# Attaches an
|
402
|
-
# set.
|
401
|
+
# Attaches an AWS managed policy ARN to a permission set.
|
403
402
|
#
|
404
403
|
# <note markdown="1"> If the permission set is already referenced by one or more account
|
405
404
|
# assignments, you will need to call ` ProvisionPermissionSet ` after
|
@@ -409,19 +408,18 @@ module Aws::SSOAdmin
|
|
409
408
|
# </note>
|
410
409
|
#
|
411
410
|
# @option params [required, String] :instance_arn
|
412
|
-
# The ARN of the
|
413
|
-
#
|
414
|
-
#
|
411
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
412
|
+
# will be executed. For more information about ARNs, see [Amazon
|
413
|
+
# Resource Names (ARNs) and AWS Service
|
415
414
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
416
|
-
# *
|
415
|
+
# *AWS General Reference*.
|
417
416
|
#
|
418
417
|
# @option params [required, String] :permission_set_arn
|
419
418
|
# The ARN of the PermissionSet that the managed policy should be
|
420
419
|
# attached to.
|
421
420
|
#
|
422
421
|
# @option params [required, String] :managed_policy_arn
|
423
|
-
# The
|
424
|
-
# permission set.
|
422
|
+
# The AWS managed policy ARN to be attached to a permission set.
|
425
423
|
#
|
426
424
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
427
425
|
#
|
@@ -442,21 +440,21 @@ module Aws::SSOAdmin
|
|
442
440
|
req.send_request(options)
|
443
441
|
end
|
444
442
|
|
445
|
-
# Assigns access to a principal for a specified
|
446
|
-
#
|
443
|
+
# Assigns access to a principal for a specified AWS account using a
|
444
|
+
# specified permission set.
|
447
445
|
#
|
448
446
|
# <note markdown="1"> The term *principal* here refers to a user or group that is defined in
|
449
|
-
#
|
447
|
+
# IAM Identity Center.
|
450
448
|
#
|
451
449
|
# </note>
|
452
450
|
#
|
453
451
|
# <note markdown="1"> As part of a successful `CreateAccountAssignment` call, the specified
|
454
452
|
# permission set will automatically be provisioned to the account in the
|
455
453
|
# form of an IAM policy. That policy is attached to the IAM role created
|
456
|
-
# in
|
457
|
-
#
|
458
|
-
#
|
459
|
-
#
|
454
|
+
# in IAM Identity Center. If the permission set is subsequently updated,
|
455
|
+
# the corresponding IAM policies attached to roles in your accounts will
|
456
|
+
# not be updated automatically. In this case, you must call `
|
457
|
+
# ProvisionPermissionSet ` to make these updates.
|
460
458
|
#
|
461
459
|
# </note>
|
462
460
|
#
|
@@ -467,15 +465,15 @@ module Aws::SSOAdmin
|
|
467
465
|
# </note>
|
468
466
|
#
|
469
467
|
# @option params [required, String] :instance_arn
|
470
|
-
# The ARN of the
|
471
|
-
#
|
472
|
-
#
|
468
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
469
|
+
# will be executed. For more information about ARNs, see [Amazon
|
470
|
+
# Resource Names (ARNs) and AWS Service
|
473
471
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
474
|
-
# *
|
472
|
+
# *AWS General Reference*.
|
475
473
|
#
|
476
474
|
# @option params [required, String] :target_id
|
477
|
-
# TargetID is an
|
478
|
-
#
|
475
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
476
|
+
# (For example, 123456789012).
|
479
477
|
#
|
480
478
|
# @option params [required, String] :target_type
|
481
479
|
# The entity type for which the assignment will be created.
|
@@ -488,11 +486,11 @@ module Aws::SSOAdmin
|
|
488
486
|
# The entity type for which the assignment will be created.
|
489
487
|
#
|
490
488
|
# @option params [required, String] :principal_id
|
491
|
-
# An identifier for an object in
|
492
|
-
#
|
489
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
490
|
+
# group. PrincipalIds are GUIDs (For example,
|
493
491
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
494
|
-
# PrincipalIds in
|
495
|
-
#
|
492
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
493
|
+
# Identity Store API
|
496
494
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
497
495
|
#
|
498
496
|
# @return [Types::CreateAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -532,11 +530,11 @@ module Aws::SSOAdmin
|
|
532
530
|
end
|
533
531
|
|
534
532
|
# Enables the attributes-based access control (ABAC) feature for the
|
535
|
-
# specified
|
533
|
+
# specified IAM Identity Center instance. You can also specify new
|
536
534
|
# attributes to add to your ABAC configuration during the enabling
|
537
535
|
# process. For more information about ABAC, see [Attribute-Based Access
|
538
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
539
|
-
#
|
536
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
537
|
+
# Identity Center User Guide*.
|
540
538
|
#
|
541
539
|
# <note markdown="1"> After a successful response, call
|
542
540
|
# `DescribeInstanceAccessControlAttributeConfiguration` to validate that
|
@@ -545,18 +543,18 @@ module Aws::SSOAdmin
|
|
545
543
|
# </note>
|
546
544
|
#
|
547
545
|
# @option params [required, String] :instance_arn
|
548
|
-
# The ARN of the
|
549
|
-
#
|
546
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
547
|
+
# will be executed.
|
550
548
|
#
|
551
549
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
552
|
-
# Specifies the
|
553
|
-
#
|
554
|
-
#
|
550
|
+
# Specifies the IAM Identity Center identity store attributes to add to
|
551
|
+
# your ABAC configuration. When using an external identity provider as
|
552
|
+
# an identity source, you can pass attributes through the SAML
|
555
553
|
# assertion. Doing so provides an alternative to configuring attributes
|
556
|
-
# from the
|
557
|
-
# passes any of these attributes,
|
558
|
-
#
|
559
|
-
#
|
554
|
+
# from the IAM Identity Center identity store. If a SAML assertion
|
555
|
+
# passes any of these attributes, IAM Identity Center will replace the
|
556
|
+
# attribute value with the value from the IAM Identity Center identity
|
557
|
+
# store.
|
560
558
|
#
|
561
559
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
562
560
|
#
|
@@ -585,11 +583,11 @@ module Aws::SSOAdmin
|
|
585
583
|
req.send_request(options)
|
586
584
|
end
|
587
585
|
|
588
|
-
# Creates a permission set within a specified
|
586
|
+
# Creates a permission set within a specified IAM Identity Center
|
589
587
|
# instance.
|
590
588
|
#
|
591
|
-
# <note markdown="1"> To grant users and groups access to
|
592
|
-
#
|
589
|
+
# <note markdown="1"> To grant users and groups access to AWS account resources, use `
|
590
|
+
# CreateAccountAssignment `.
|
593
591
|
#
|
594
592
|
# </note>
|
595
593
|
#
|
@@ -600,11 +598,11 @@ module Aws::SSOAdmin
|
|
600
598
|
# The description of the PermissionSet.
|
601
599
|
#
|
602
600
|
# @option params [required, String] :instance_arn
|
603
|
-
# The ARN of the
|
604
|
-
#
|
605
|
-
#
|
601
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
602
|
+
# will be executed. For more information about ARNs, see [Amazon
|
603
|
+
# Resource Names (ARNs) and AWS Service
|
606
604
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
607
|
-
# *
|
605
|
+
# *AWS General Reference*.
|
608
606
|
#
|
609
607
|
# @option params [String] :session_duration
|
610
608
|
# The length of time that the application user sessions are valid in the
|
@@ -655,8 +653,8 @@ module Aws::SSOAdmin
|
|
655
653
|
req.send_request(options)
|
656
654
|
end
|
657
655
|
|
658
|
-
# Deletes a principal's access from a specified
|
659
|
-
#
|
656
|
+
# Deletes a principal's access from a specified AWS account using a
|
657
|
+
# specified permission set.
|
660
658
|
#
|
661
659
|
# <note markdown="1"> After a successful response, call
|
662
660
|
# `DescribeAccountAssignmentCreationStatus` to describe the status of an
|
@@ -665,15 +663,15 @@ module Aws::SSOAdmin
|
|
665
663
|
# </note>
|
666
664
|
#
|
667
665
|
# @option params [required, String] :instance_arn
|
668
|
-
# The ARN of the
|
669
|
-
#
|
670
|
-
#
|
666
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
667
|
+
# will be executed. For more information about ARNs, see [Amazon
|
668
|
+
# Resource Names (ARNs) and AWS Service
|
671
669
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
672
|
-
# *
|
670
|
+
# *AWS General Reference*.
|
673
671
|
#
|
674
672
|
# @option params [required, String] :target_id
|
675
|
-
# TargetID is an
|
676
|
-
#
|
673
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
674
|
+
# (For example, 123456789012).
|
677
675
|
#
|
678
676
|
# @option params [required, String] :target_type
|
679
677
|
# The entity type for which the assignment will be deleted.
|
@@ -685,11 +683,11 @@ module Aws::SSOAdmin
|
|
685
683
|
# The entity type for which the assignment will be deleted.
|
686
684
|
#
|
687
685
|
# @option params [required, String] :principal_id
|
688
|
-
# An identifier for an object in
|
689
|
-
#
|
686
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
687
|
+
# group. PrincipalIds are GUIDs (For example,
|
690
688
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
691
|
-
# PrincipalIds in
|
692
|
-
#
|
689
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
690
|
+
# Identity Store API
|
693
691
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
694
692
|
#
|
695
693
|
# @return [Types::DeleteAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -731,11 +729,11 @@ module Aws::SSOAdmin
|
|
731
729
|
# Deletes the inline policy from a specified permission set.
|
732
730
|
#
|
733
731
|
# @option params [required, String] :instance_arn
|
734
|
-
# The ARN of the
|
735
|
-
#
|
736
|
-
#
|
732
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
733
|
+
# will be executed. For more information about ARNs, see [Amazon
|
734
|
+
# Resource Names (ARNs) and AWS Service
|
737
735
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
738
|
-
# *
|
736
|
+
# *AWS General Reference*.
|
739
737
|
#
|
740
738
|
# @option params [required, String] :permission_set_arn
|
741
739
|
# The ARN of the permission set that will be used to remove access.
|
@@ -759,17 +757,17 @@ module Aws::SSOAdmin
|
|
759
757
|
end
|
760
758
|
|
761
759
|
# Disables the attributes-based access control (ABAC) feature for the
|
762
|
-
# specified
|
760
|
+
# specified IAM Identity Center instance and deletes all of the
|
763
761
|
# attribute mappings that have been configured. Once deleted, any
|
764
762
|
# attributes that are received from an identity source and any custom
|
765
763
|
# attributes you have previously configured will not be passed. For more
|
766
764
|
# information about ABAC, see [Attribute-Based Access
|
767
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
768
|
-
#
|
765
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
766
|
+
# Identity Center User Guide*.
|
769
767
|
#
|
770
768
|
# @option params [required, String] :instance_arn
|
771
|
-
# The ARN of the
|
772
|
-
#
|
769
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
770
|
+
# will be executed.
|
773
771
|
#
|
774
772
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
775
773
|
#
|
@@ -791,11 +789,11 @@ module Aws::SSOAdmin
|
|
791
789
|
# Deletes the specified permission set.
|
792
790
|
#
|
793
791
|
# @option params [required, String] :instance_arn
|
794
|
-
# The ARN of the
|
795
|
-
#
|
796
|
-
#
|
792
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
793
|
+
# will be executed. For more information about ARNs, see [Amazon
|
794
|
+
# Resource Names (ARNs) and AWS Service
|
797
795
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
798
|
-
# *
|
796
|
+
# *AWS General Reference*.
|
799
797
|
#
|
800
798
|
# @option params [required, String] :permission_set_arn
|
801
799
|
# The ARN of the permission set that should be deleted.
|
@@ -821,8 +819,8 @@ module Aws::SSOAdmin
|
|
821
819
|
# Deletes the permissions boundary from a specified PermissionSet.
|
822
820
|
#
|
823
821
|
# @option params [required, String] :instance_arn
|
824
|
-
# The ARN of the
|
825
|
-
#
|
822
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
823
|
+
# will be executed.
|
826
824
|
#
|
827
825
|
# @option params [required, String] :permission_set_arn
|
828
826
|
# The ARN of the `PermissionSet`.
|
@@ -848,11 +846,11 @@ module Aws::SSOAdmin
|
|
848
846
|
# Describes the status of the assignment creation request.
|
849
847
|
#
|
850
848
|
# @option params [required, String] :instance_arn
|
851
|
-
# The ARN of the
|
852
|
-
#
|
853
|
-
#
|
849
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
850
|
+
# will be executed. For more information about ARNs, see [Amazon
|
851
|
+
# Resource Names (ARNs) and AWS Service
|
854
852
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
855
|
-
# *
|
853
|
+
# *AWS General Reference*.
|
856
854
|
#
|
857
855
|
# @option params [required, String] :account_assignment_creation_request_id
|
858
856
|
# The identifier that is used to track the request operation progress.
|
@@ -892,11 +890,11 @@ module Aws::SSOAdmin
|
|
892
890
|
# Describes the status of the assignment deletion request.
|
893
891
|
#
|
894
892
|
# @option params [required, String] :instance_arn
|
895
|
-
# The ARN of the
|
896
|
-
#
|
897
|
-
#
|
893
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
894
|
+
# will be executed. For more information about ARNs, see [Amazon
|
895
|
+
# Resource Names (ARNs) and AWS Service
|
898
896
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
899
|
-
# *
|
897
|
+
# *AWS General Reference*.
|
900
898
|
#
|
901
899
|
# @option params [required, String] :account_assignment_deletion_request_id
|
902
900
|
# The identifier that is used to track the request operation progress.
|
@@ -933,17 +931,17 @@ module Aws::SSOAdmin
|
|
933
931
|
req.send_request(options)
|
934
932
|
end
|
935
933
|
|
936
|
-
# Returns the list of
|
937
|
-
#
|
938
|
-
# (ABAC) for the specified
|
939
|
-
#
|
934
|
+
# Returns the list of IAM Identity Center identity store attributes that
|
935
|
+
# have been configured to work with attributes-based access control
|
936
|
+
# (ABAC) for the specified IAM Identity Center instance. This will not
|
937
|
+
# return attributes configured and sent by an external identity
|
940
938
|
# provider. For more information about ABAC, see [Attribute-Based Access
|
941
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
942
|
-
#
|
939
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
940
|
+
# Identity Center User Guide*.
|
943
941
|
#
|
944
942
|
# @option params [required, String] :instance_arn
|
945
|
-
# The ARN of the
|
946
|
-
#
|
943
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
944
|
+
# will be executed.
|
947
945
|
#
|
948
946
|
# @return [Types::DescribeInstanceAccessControlAttributeConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
949
947
|
#
|
@@ -978,11 +976,11 @@ module Aws::SSOAdmin
|
|
978
976
|
# Gets the details of the permission set.
|
979
977
|
#
|
980
978
|
# @option params [required, String] :instance_arn
|
981
|
-
# The ARN of the
|
982
|
-
#
|
983
|
-
#
|
979
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
980
|
+
# will be executed. For more information about ARNs, see [Amazon
|
981
|
+
# Resource Names (ARNs) and AWS Service
|
984
982
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
985
|
-
# *
|
983
|
+
# *AWS General Reference*.
|
986
984
|
#
|
987
985
|
# @option params [required, String] :permission_set_arn
|
988
986
|
# The ARN of the permission set.
|
@@ -1020,11 +1018,11 @@ module Aws::SSOAdmin
|
|
1020
1018
|
# request.
|
1021
1019
|
#
|
1022
1020
|
# @option params [required, String] :instance_arn
|
1023
|
-
# The ARN of the
|
1024
|
-
#
|
1025
|
-
#
|
1021
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1022
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1023
|
+
# Resource Names (ARNs) and AWS Service
|
1026
1024
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1027
|
-
# *
|
1025
|
+
# *AWS General Reference*.
|
1028
1026
|
#
|
1029
1027
|
# @option params [required, String] :provision_permission_set_request_id
|
1030
1028
|
# The identifier that is provided by the ProvisionPermissionSet call to
|
@@ -1063,16 +1061,16 @@ module Aws::SSOAdmin
|
|
1063
1061
|
# PermissionSet.
|
1064
1062
|
#
|
1065
1063
|
# @option params [required, String] :instance_arn
|
1066
|
-
# The ARN of the
|
1067
|
-
#
|
1064
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1065
|
+
# will be executed.
|
1068
1066
|
#
|
1069
1067
|
# @option params [required, String] :permission_set_arn
|
1070
1068
|
# The ARN of the `PermissionSet`.
|
1071
1069
|
#
|
1072
1070
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
1073
1071
|
# Specifies the name and path of a customer managed policy. You must
|
1074
|
-
# have an IAM policy that matches the name and path in each
|
1075
|
-
#
|
1072
|
+
# have an IAM policy that matches the name and path in each AWS account
|
1073
|
+
# where you want to deploy your permission set.
|
1076
1074
|
#
|
1077
1075
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1078
1076
|
#
|
@@ -1096,22 +1094,21 @@ module Aws::SSOAdmin
|
|
1096
1094
|
req.send_request(options)
|
1097
1095
|
end
|
1098
1096
|
|
1099
|
-
# Detaches the attached
|
1100
|
-
#
|
1097
|
+
# Detaches the attached AWS managed policy ARN from the specified
|
1098
|
+
# permission set.
|
1101
1099
|
#
|
1102
1100
|
# @option params [required, String] :instance_arn
|
1103
|
-
# The ARN of the
|
1104
|
-
#
|
1105
|
-
#
|
1101
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1102
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1103
|
+
# Resource Names (ARNs) and AWS Service
|
1106
1104
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1107
|
-
# *
|
1105
|
+
# *AWS General Reference*.
|
1108
1106
|
#
|
1109
1107
|
# @option params [required, String] :permission_set_arn
|
1110
1108
|
# The ARN of the PermissionSet from which the policy should be detached.
|
1111
1109
|
#
|
1112
1110
|
# @option params [required, String] :managed_policy_arn
|
1113
|
-
# The
|
1114
|
-
# permission set.
|
1111
|
+
# The AWS managed policy ARN to be detached from a permission set.
|
1115
1112
|
#
|
1116
1113
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1117
1114
|
#
|
@@ -1135,11 +1132,11 @@ module Aws::SSOAdmin
|
|
1135
1132
|
# Obtains the inline policy assigned to the permission set.
|
1136
1133
|
#
|
1137
1134
|
# @option params [required, String] :instance_arn
|
1138
|
-
# The ARN of the
|
1139
|
-
#
|
1140
|
-
#
|
1135
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1136
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1137
|
+
# Resource Names (ARNs) and AWS Service
|
1141
1138
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1142
|
-
# *
|
1139
|
+
# *AWS General Reference*.
|
1143
1140
|
#
|
1144
1141
|
# @option params [required, String] :permission_set_arn
|
1145
1142
|
# The ARN of the permission set.
|
@@ -1171,8 +1168,8 @@ module Aws::SSOAdmin
|
|
1171
1168
|
# Obtains the permissions boundary for a specified PermissionSet.
|
1172
1169
|
#
|
1173
1170
|
# @option params [required, String] :instance_arn
|
1174
|
-
# The ARN of the
|
1175
|
-
#
|
1171
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1172
|
+
# will be executed.
|
1176
1173
|
#
|
1177
1174
|
# @option params [required, String] :permission_set_arn
|
1178
1175
|
# The ARN of the `PermissionSet`.
|
@@ -1203,15 +1200,15 @@ module Aws::SSOAdmin
|
|
1203
1200
|
req.send_request(options)
|
1204
1201
|
end
|
1205
1202
|
|
1206
|
-
# Lists the status of the
|
1207
|
-
#
|
1203
|
+
# Lists the status of the AWS account assignment creation requests for a
|
1204
|
+
# specified IAM Identity Center instance.
|
1208
1205
|
#
|
1209
1206
|
# @option params [required, String] :instance_arn
|
1210
|
-
# The ARN of the
|
1211
|
-
#
|
1212
|
-
#
|
1207
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1208
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1209
|
+
# Resource Names (ARNs) and AWS Service
|
1213
1210
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1214
|
-
# *
|
1211
|
+
# *AWS General Reference*.
|
1215
1212
|
#
|
1216
1213
|
# @option params [Integer] :max_results
|
1217
1214
|
# The maximum number of results to display for the assignment.
|
@@ -1258,15 +1255,15 @@ module Aws::SSOAdmin
|
|
1258
1255
|
req.send_request(options)
|
1259
1256
|
end
|
1260
1257
|
|
1261
|
-
# Lists the status of the
|
1262
|
-
#
|
1258
|
+
# Lists the status of the AWS account assignment deletion requests for a
|
1259
|
+
# specified IAM Identity Center instance.
|
1263
1260
|
#
|
1264
1261
|
# @option params [required, String] :instance_arn
|
1265
|
-
# The ARN of the
|
1266
|
-
#
|
1267
|
-
#
|
1262
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1263
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1264
|
+
# Resource Names (ARNs) and AWS Service
|
1268
1265
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1269
|
-
# *
|
1266
|
+
# *AWS General Reference*.
|
1270
1267
|
#
|
1271
1268
|
# @option params [Integer] :max_results
|
1272
1269
|
# The maximum number of results to display for the assignment.
|
@@ -1313,19 +1310,18 @@ module Aws::SSOAdmin
|
|
1313
1310
|
req.send_request(options)
|
1314
1311
|
end
|
1315
1312
|
|
1316
|
-
# Lists the assignee of the specified
|
1317
|
-
#
|
1313
|
+
# Lists the assignee of the specified AWS account with the specified
|
1314
|
+
# permission set.
|
1318
1315
|
#
|
1319
1316
|
# @option params [required, String] :instance_arn
|
1320
|
-
# The ARN of the
|
1321
|
-
#
|
1322
|
-
#
|
1317
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1318
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1319
|
+
# Resource Names (ARNs) and AWS Service
|
1323
1320
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1324
|
-
# *
|
1321
|
+
# *AWS General Reference*.
|
1325
1322
|
#
|
1326
1323
|
# @option params [required, String] :account_id
|
1327
|
-
# The identifier of the
|
1328
|
-
# the assignments.
|
1324
|
+
# The identifier of the AWS account from which to list the assignments.
|
1329
1325
|
#
|
1330
1326
|
# @option params [required, String] :permission_set_arn
|
1331
1327
|
# The ARN of the permission set from which to list assignments.
|
@@ -1372,23 +1368,22 @@ module Aws::SSOAdmin
|
|
1372
1368
|
req.send_request(options)
|
1373
1369
|
end
|
1374
1370
|
|
1375
|
-
# Lists all the
|
1376
|
-
#
|
1371
|
+
# Lists all the AWS accounts where the specified permission set is
|
1372
|
+
# provisioned.
|
1377
1373
|
#
|
1378
1374
|
# @option params [required, String] :instance_arn
|
1379
|
-
# The ARN of the
|
1380
|
-
#
|
1381
|
-
#
|
1375
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1376
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1377
|
+
# Resource Names (ARNs) and AWS Service
|
1382
1378
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1383
|
-
# *
|
1379
|
+
# *AWS General Reference*.
|
1384
1380
|
#
|
1385
1381
|
# @option params [required, String] :permission_set_arn
|
1386
|
-
# The ARN of the PermissionSet from which the associated
|
1387
|
-
#
|
1382
|
+
# The ARN of the PermissionSet from which the associated AWS accounts
|
1383
|
+
# will be listed.
|
1388
1384
|
#
|
1389
1385
|
# @option params [String] :provisioning_status
|
1390
|
-
# The permission set provisioning status for an
|
1391
|
-
# account.
|
1386
|
+
# The permission set provisioning status for an AWS account.
|
1392
1387
|
#
|
1393
1388
|
# @option params [Integer] :max_results
|
1394
1389
|
# The maximum number of results to display for the PermissionSet.
|
@@ -1433,8 +1428,8 @@ module Aws::SSOAdmin
|
|
1433
1428
|
# PermissionSet.
|
1434
1429
|
#
|
1435
1430
|
# @option params [required, String] :instance_arn
|
1436
|
-
# The ARN of the
|
1437
|
-
#
|
1431
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1432
|
+
# will be executed.
|
1438
1433
|
#
|
1439
1434
|
# @option params [required, String] :permission_set_arn
|
1440
1435
|
# The ARN of the `PermissionSet`.
|
@@ -1478,8 +1473,7 @@ module Aws::SSOAdmin
|
|
1478
1473
|
req.send_request(options)
|
1479
1474
|
end
|
1480
1475
|
|
1481
|
-
# Lists the
|
1482
|
-
# to.
|
1476
|
+
# Lists the IAM Identity Center instances that the caller has access to.
|
1483
1477
|
#
|
1484
1478
|
# @option params [Integer] :max_results
|
1485
1479
|
# The maximum number of results to display for the instance.
|
@@ -1518,15 +1512,15 @@ module Aws::SSOAdmin
|
|
1518
1512
|
req.send_request(options)
|
1519
1513
|
end
|
1520
1514
|
|
1521
|
-
# Lists the
|
1522
|
-
#
|
1515
|
+
# Lists the AWS managed policy that is attached to a specified
|
1516
|
+
# permission set.
|
1523
1517
|
#
|
1524
1518
|
# @option params [required, String] :instance_arn
|
1525
|
-
# The ARN of the
|
1526
|
-
#
|
1527
|
-
#
|
1519
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1520
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1521
|
+
# Resource Names (ARNs) and AWS Service
|
1528
1522
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1529
|
-
# *
|
1523
|
+
# *AWS General Reference*.
|
1530
1524
|
#
|
1531
1525
|
# @option params [required, String] :permission_set_arn
|
1532
1526
|
# The ARN of the PermissionSet whose managed policies will be listed.
|
@@ -1571,14 +1565,14 @@ module Aws::SSOAdmin
|
|
1571
1565
|
end
|
1572
1566
|
|
1573
1567
|
# Lists the status of the permission set provisioning requests for a
|
1574
|
-
# specified
|
1568
|
+
# specified IAM Identity Center instance.
|
1575
1569
|
#
|
1576
1570
|
# @option params [required, String] :instance_arn
|
1577
|
-
# The ARN of the
|
1578
|
-
#
|
1579
|
-
#
|
1571
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1572
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1573
|
+
# Resource Names (ARNs) and AWS Service
|
1580
1574
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1581
|
-
# *
|
1575
|
+
# *AWS General Reference*.
|
1582
1576
|
#
|
1583
1577
|
# @option params [Integer] :max_results
|
1584
1578
|
# The maximum number of results to display for the assignment.
|
@@ -1625,14 +1619,14 @@ module Aws::SSOAdmin
|
|
1625
1619
|
req.send_request(options)
|
1626
1620
|
end
|
1627
1621
|
|
1628
|
-
# Lists the PermissionSets in an
|
1622
|
+
# Lists the PermissionSets in an IAM Identity Center instance.
|
1629
1623
|
#
|
1630
1624
|
# @option params [required, String] :instance_arn
|
1631
|
-
# The ARN of the
|
1632
|
-
#
|
1633
|
-
#
|
1625
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1626
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1627
|
+
# Resource Names (ARNs) and AWS Service
|
1634
1628
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1635
|
-
# *
|
1629
|
+
# *AWS General Reference*.
|
1636
1630
|
#
|
1637
1631
|
# @option params [String] :next_token
|
1638
1632
|
# The pagination token for the list API. Initially the value is null.
|
@@ -1671,19 +1665,18 @@ module Aws::SSOAdmin
|
|
1671
1665
|
req.send_request(options)
|
1672
1666
|
end
|
1673
1667
|
|
1674
|
-
# Lists all the permission sets that are provisioned to a specified
|
1675
|
-
#
|
1668
|
+
# Lists all the permission sets that are provisioned to a specified AWS
|
1669
|
+
# account.
|
1676
1670
|
#
|
1677
1671
|
# @option params [required, String] :instance_arn
|
1678
|
-
# The ARN of the
|
1679
|
-
#
|
1680
|
-
#
|
1672
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1673
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1674
|
+
# Resource Names (ARNs) and AWS Service
|
1681
1675
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1682
|
-
# *
|
1676
|
+
# *AWS General Reference*.
|
1683
1677
|
#
|
1684
1678
|
# @option params [required, String] :account_id
|
1685
|
-
# The identifier of the
|
1686
|
-
# the assignments.
|
1679
|
+
# The identifier of the AWS account from which to list the assignments.
|
1687
1680
|
#
|
1688
1681
|
# @option params [String] :provisioning_status
|
1689
1682
|
# The status object for the permission set provisioning operation.
|
@@ -1730,11 +1723,11 @@ module Aws::SSOAdmin
|
|
1730
1723
|
# Lists the tags that are attached to a specified resource.
|
1731
1724
|
#
|
1732
1725
|
# @option params [required, String] :instance_arn
|
1733
|
-
# The ARN of the
|
1734
|
-
#
|
1735
|
-
#
|
1726
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1727
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1728
|
+
# Resource Names (ARNs) and AWS Service
|
1736
1729
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1737
|
-
# *
|
1730
|
+
# *AWS General Reference*.
|
1738
1731
|
#
|
1739
1732
|
# @option params [required, String] :resource_arn
|
1740
1733
|
# The ARN of the resource with the tags to be listed.
|
@@ -1778,18 +1771,18 @@ module Aws::SSOAdmin
|
|
1778
1771
|
# specified target.
|
1779
1772
|
#
|
1780
1773
|
# @option params [required, String] :instance_arn
|
1781
|
-
# The ARN of the
|
1782
|
-
#
|
1783
|
-
#
|
1774
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1775
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1776
|
+
# Resource Names (ARNs) and AWS Service
|
1784
1777
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1785
|
-
# *
|
1778
|
+
# *AWS General Reference*.
|
1786
1779
|
#
|
1787
1780
|
# @option params [required, String] :permission_set_arn
|
1788
1781
|
# The ARN of the permission set.
|
1789
1782
|
#
|
1790
1783
|
# @option params [String] :target_id
|
1791
|
-
# TargetID is an
|
1792
|
-
#
|
1784
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
1785
|
+
# (For example, 123456789012).
|
1793
1786
|
#
|
1794
1787
|
# @option params [required, String] :target_type
|
1795
1788
|
# The entity type for which the assignment will be created.
|
@@ -1835,11 +1828,11 @@ module Aws::SSOAdmin
|
|
1835
1828
|
# </note>
|
1836
1829
|
#
|
1837
1830
|
# @option params [required, String] :instance_arn
|
1838
|
-
# The ARN of the
|
1839
|
-
#
|
1840
|
-
#
|
1831
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1832
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1833
|
+
# Resource Names (ARNs) and AWS Service
|
1841
1834
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1842
|
-
# *
|
1835
|
+
# *AWS General Reference*.
|
1843
1836
|
#
|
1844
1837
|
# @option params [required, String] :permission_set_arn
|
1845
1838
|
# The ARN of the permission set.
|
@@ -1866,12 +1859,12 @@ module Aws::SSOAdmin
|
|
1866
1859
|
req.send_request(options)
|
1867
1860
|
end
|
1868
1861
|
|
1869
|
-
# Attaches an
|
1870
|
-
#
|
1862
|
+
# Attaches an AWS managed or customer managed policy to the specified
|
1863
|
+
# PermissionSet as a permissions boundary.
|
1871
1864
|
#
|
1872
1865
|
# @option params [required, String] :instance_arn
|
1873
|
-
# The ARN of the
|
1874
|
-
#
|
1866
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1867
|
+
# will be executed.
|
1875
1868
|
#
|
1876
1869
|
# @option params [required, String] :permission_set_arn
|
1877
1870
|
# The ARN of the `PermissionSet`.
|
@@ -1907,11 +1900,11 @@ module Aws::SSOAdmin
|
|
1907
1900
|
# Associates a set of tags with a specified resource.
|
1908
1901
|
#
|
1909
1902
|
# @option params [required, String] :instance_arn
|
1910
|
-
# The ARN of the
|
1911
|
-
#
|
1912
|
-
#
|
1903
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1904
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1905
|
+
# Resource Names (ARNs) and AWS Service
|
1913
1906
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1914
|
-
# *
|
1907
|
+
# *AWS General Reference*.
|
1915
1908
|
#
|
1916
1909
|
# @option params [required, String] :resource_arn
|
1917
1910
|
# The ARN of the resource with the tags to be listed.
|
@@ -1946,11 +1939,11 @@ module Aws::SSOAdmin
|
|
1946
1939
|
# Disassociates a set of tags from a specified resource.
|
1947
1940
|
#
|
1948
1941
|
# @option params [required, String] :instance_arn
|
1949
|
-
# The ARN of the
|
1950
|
-
#
|
1951
|
-
#
|
1942
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1943
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1944
|
+
# Resource Names (ARNs) and AWS Service
|
1952
1945
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1953
|
-
# *
|
1946
|
+
# *AWS General Reference*.
|
1954
1947
|
#
|
1955
1948
|
# @option params [required, String] :resource_arn
|
1956
1949
|
# The ARN of the resource with the tags to be listed.
|
@@ -1977,21 +1970,21 @@ module Aws::SSOAdmin
|
|
1977
1970
|
req.send_request(options)
|
1978
1971
|
end
|
1979
1972
|
|
1980
|
-
# Updates the
|
1981
|
-
#
|
1982
|
-
#
|
1973
|
+
# Updates the IAM Identity Center identity store attributes that you can
|
1974
|
+
# use with the IAM Identity Center instance for attributes-based access
|
1975
|
+
# control (ABAC). When using an external identity provider as an
|
1983
1976
|
# identity source, you can pass attributes through the SAML assertion as
|
1984
|
-
# an alternative to configuring attributes from the
|
1985
|
-
#
|
1986
|
-
#
|
1987
|
-
# the
|
1988
|
-
#
|
1989
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
1990
|
-
#
|
1977
|
+
# an alternative to configuring attributes from the IAM Identity Center
|
1978
|
+
# identity store. If a SAML assertion passes any of these attributes,
|
1979
|
+
# IAM Identity Center replaces the attribute value with the value from
|
1980
|
+
# the IAM Identity Center identity store. For more information about
|
1981
|
+
# ABAC, see [Attribute-Based Access
|
1982
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
1983
|
+
# Identity Center User Guide*.
|
1991
1984
|
#
|
1992
1985
|
# @option params [required, String] :instance_arn
|
1993
|
-
# The ARN of the
|
1994
|
-
#
|
1986
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1987
|
+
# will be executed.
|
1995
1988
|
#
|
1996
1989
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
1997
1990
|
# Updates the attributes for your ABAC configuration.
|
@@ -2026,11 +2019,11 @@ module Aws::SSOAdmin
|
|
2026
2019
|
# Updates an existing permission set.
|
2027
2020
|
#
|
2028
2021
|
# @option params [required, String] :instance_arn
|
2029
|
-
# The ARN of the
|
2030
|
-
#
|
2031
|
-
#
|
2022
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
2023
|
+
# will be executed. For more information about ARNs, see [Amazon
|
2024
|
+
# Resource Names (ARNs) and AWS Service
|
2032
2025
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2033
|
-
# *
|
2026
|
+
# *AWS General Reference*.
|
2034
2027
|
#
|
2035
2028
|
# @option params [required, String] :permission_set_arn
|
2036
2029
|
# The ARN of the permission set.
|
@@ -2080,7 +2073,7 @@ module Aws::SSOAdmin
|
|
2080
2073
|
params: params,
|
2081
2074
|
config: config)
|
2082
2075
|
context[:gem_name] = 'aws-sdk-ssoadmin'
|
2083
|
-
context[:gem_version] = '1.
|
2076
|
+
context[:gem_version] = '1.20.0'
|
2084
2077
|
Seahorse::Client::Request.new(handlers, context)
|
2085
2078
|
end
|
2086
2079
|
|