aws-sdk-ssoadmin 1.19.0 → 1.20.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-ssoadmin/client.rb +211 -218
- data/lib/aws-sdk-ssoadmin/types.rb +200 -208
- data/lib/aws-sdk-ssoadmin.rb +1 -1
- metadata +2 -2
@@ -365,16 +365,16 @@ module Aws::SSOAdmin
|
|
365
365
|
# PermissionSet.
|
366
366
|
#
|
367
367
|
# @option params [required, String] :instance_arn
|
368
|
-
# The ARN of the
|
369
|
-
#
|
368
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
369
|
+
# will be executed.
|
370
370
|
#
|
371
371
|
# @option params [required, String] :permission_set_arn
|
372
372
|
# The ARN of the `PermissionSet`.
|
373
373
|
#
|
374
374
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
375
375
|
# Specifies the name and path of a customer managed policy. You must
|
376
|
-
# have an IAM policy that matches the name and path in each
|
377
|
-
#
|
376
|
+
# have an IAM policy that matches the name and path in each AWS account
|
377
|
+
# where you want to deploy your permission set.
|
378
378
|
#
|
379
379
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
380
380
|
#
|
@@ -398,8 +398,7 @@ module Aws::SSOAdmin
|
|
398
398
|
req.send_request(options)
|
399
399
|
end
|
400
400
|
|
401
|
-
# Attaches an
|
402
|
-
# set.
|
401
|
+
# Attaches an AWS managed policy ARN to a permission set.
|
403
402
|
#
|
404
403
|
# <note markdown="1"> If the permission set is already referenced by one or more account
|
405
404
|
# assignments, you will need to call ` ProvisionPermissionSet ` after
|
@@ -409,19 +408,18 @@ module Aws::SSOAdmin
|
|
409
408
|
# </note>
|
410
409
|
#
|
411
410
|
# @option params [required, String] :instance_arn
|
412
|
-
# The ARN of the
|
413
|
-
#
|
414
|
-
#
|
411
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
412
|
+
# will be executed. For more information about ARNs, see [Amazon
|
413
|
+
# Resource Names (ARNs) and AWS Service
|
415
414
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
416
|
-
# *
|
415
|
+
# *AWS General Reference*.
|
417
416
|
#
|
418
417
|
# @option params [required, String] :permission_set_arn
|
419
418
|
# The ARN of the PermissionSet that the managed policy should be
|
420
419
|
# attached to.
|
421
420
|
#
|
422
421
|
# @option params [required, String] :managed_policy_arn
|
423
|
-
# The
|
424
|
-
# permission set.
|
422
|
+
# The AWS managed policy ARN to be attached to a permission set.
|
425
423
|
#
|
426
424
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
427
425
|
#
|
@@ -442,21 +440,21 @@ module Aws::SSOAdmin
|
|
442
440
|
req.send_request(options)
|
443
441
|
end
|
444
442
|
|
445
|
-
# Assigns access to a principal for a specified
|
446
|
-
#
|
443
|
+
# Assigns access to a principal for a specified AWS account using a
|
444
|
+
# specified permission set.
|
447
445
|
#
|
448
446
|
# <note markdown="1"> The term *principal* here refers to a user or group that is defined in
|
449
|
-
#
|
447
|
+
# IAM Identity Center.
|
450
448
|
#
|
451
449
|
# </note>
|
452
450
|
#
|
453
451
|
# <note markdown="1"> As part of a successful `CreateAccountAssignment` call, the specified
|
454
452
|
# permission set will automatically be provisioned to the account in the
|
455
453
|
# form of an IAM policy. That policy is attached to the IAM role created
|
456
|
-
# in
|
457
|
-
#
|
458
|
-
#
|
459
|
-
#
|
454
|
+
# in IAM Identity Center. If the permission set is subsequently updated,
|
455
|
+
# the corresponding IAM policies attached to roles in your accounts will
|
456
|
+
# not be updated automatically. In this case, you must call `
|
457
|
+
# ProvisionPermissionSet ` to make these updates.
|
460
458
|
#
|
461
459
|
# </note>
|
462
460
|
#
|
@@ -467,15 +465,15 @@ module Aws::SSOAdmin
|
|
467
465
|
# </note>
|
468
466
|
#
|
469
467
|
# @option params [required, String] :instance_arn
|
470
|
-
# The ARN of the
|
471
|
-
#
|
472
|
-
#
|
468
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
469
|
+
# will be executed. For more information about ARNs, see [Amazon
|
470
|
+
# Resource Names (ARNs) and AWS Service
|
473
471
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
474
|
-
# *
|
472
|
+
# *AWS General Reference*.
|
475
473
|
#
|
476
474
|
# @option params [required, String] :target_id
|
477
|
-
# TargetID is an
|
478
|
-
#
|
475
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
476
|
+
# (For example, 123456789012).
|
479
477
|
#
|
480
478
|
# @option params [required, String] :target_type
|
481
479
|
# The entity type for which the assignment will be created.
|
@@ -488,11 +486,11 @@ module Aws::SSOAdmin
|
|
488
486
|
# The entity type for which the assignment will be created.
|
489
487
|
#
|
490
488
|
# @option params [required, String] :principal_id
|
491
|
-
# An identifier for an object in
|
492
|
-
#
|
489
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
490
|
+
# group. PrincipalIds are GUIDs (For example,
|
493
491
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
494
|
-
# PrincipalIds in
|
495
|
-
#
|
492
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
493
|
+
# Identity Store API
|
496
494
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
497
495
|
#
|
498
496
|
# @return [Types::CreateAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -532,11 +530,11 @@ module Aws::SSOAdmin
|
|
532
530
|
end
|
533
531
|
|
534
532
|
# Enables the attributes-based access control (ABAC) feature for the
|
535
|
-
# specified
|
533
|
+
# specified IAM Identity Center instance. You can also specify new
|
536
534
|
# attributes to add to your ABAC configuration during the enabling
|
537
535
|
# process. For more information about ABAC, see [Attribute-Based Access
|
538
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
539
|
-
#
|
536
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
537
|
+
# Identity Center User Guide*.
|
540
538
|
#
|
541
539
|
# <note markdown="1"> After a successful response, call
|
542
540
|
# `DescribeInstanceAccessControlAttributeConfiguration` to validate that
|
@@ -545,18 +543,18 @@ module Aws::SSOAdmin
|
|
545
543
|
# </note>
|
546
544
|
#
|
547
545
|
# @option params [required, String] :instance_arn
|
548
|
-
# The ARN of the
|
549
|
-
#
|
546
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
547
|
+
# will be executed.
|
550
548
|
#
|
551
549
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
552
|
-
# Specifies the
|
553
|
-
#
|
554
|
-
#
|
550
|
+
# Specifies the IAM Identity Center identity store attributes to add to
|
551
|
+
# your ABAC configuration. When using an external identity provider as
|
552
|
+
# an identity source, you can pass attributes through the SAML
|
555
553
|
# assertion. Doing so provides an alternative to configuring attributes
|
556
|
-
# from the
|
557
|
-
# passes any of these attributes,
|
558
|
-
#
|
559
|
-
#
|
554
|
+
# from the IAM Identity Center identity store. If a SAML assertion
|
555
|
+
# passes any of these attributes, IAM Identity Center will replace the
|
556
|
+
# attribute value with the value from the IAM Identity Center identity
|
557
|
+
# store.
|
560
558
|
#
|
561
559
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
562
560
|
#
|
@@ -585,11 +583,11 @@ module Aws::SSOAdmin
|
|
585
583
|
req.send_request(options)
|
586
584
|
end
|
587
585
|
|
588
|
-
# Creates a permission set within a specified
|
586
|
+
# Creates a permission set within a specified IAM Identity Center
|
589
587
|
# instance.
|
590
588
|
#
|
591
|
-
# <note markdown="1"> To grant users and groups access to
|
592
|
-
#
|
589
|
+
# <note markdown="1"> To grant users and groups access to AWS account resources, use `
|
590
|
+
# CreateAccountAssignment `.
|
593
591
|
#
|
594
592
|
# </note>
|
595
593
|
#
|
@@ -600,11 +598,11 @@ module Aws::SSOAdmin
|
|
600
598
|
# The description of the PermissionSet.
|
601
599
|
#
|
602
600
|
# @option params [required, String] :instance_arn
|
603
|
-
# The ARN of the
|
604
|
-
#
|
605
|
-
#
|
601
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
602
|
+
# will be executed. For more information about ARNs, see [Amazon
|
603
|
+
# Resource Names (ARNs) and AWS Service
|
606
604
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
607
|
-
# *
|
605
|
+
# *AWS General Reference*.
|
608
606
|
#
|
609
607
|
# @option params [String] :session_duration
|
610
608
|
# The length of time that the application user sessions are valid in the
|
@@ -655,8 +653,8 @@ module Aws::SSOAdmin
|
|
655
653
|
req.send_request(options)
|
656
654
|
end
|
657
655
|
|
658
|
-
# Deletes a principal's access from a specified
|
659
|
-
#
|
656
|
+
# Deletes a principal's access from a specified AWS account using a
|
657
|
+
# specified permission set.
|
660
658
|
#
|
661
659
|
# <note markdown="1"> After a successful response, call
|
662
660
|
# `DescribeAccountAssignmentCreationStatus` to describe the status of an
|
@@ -665,15 +663,15 @@ module Aws::SSOAdmin
|
|
665
663
|
# </note>
|
666
664
|
#
|
667
665
|
# @option params [required, String] :instance_arn
|
668
|
-
# The ARN of the
|
669
|
-
#
|
670
|
-
#
|
666
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
667
|
+
# will be executed. For more information about ARNs, see [Amazon
|
668
|
+
# Resource Names (ARNs) and AWS Service
|
671
669
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
672
|
-
# *
|
670
|
+
# *AWS General Reference*.
|
673
671
|
#
|
674
672
|
# @option params [required, String] :target_id
|
675
|
-
# TargetID is an
|
676
|
-
#
|
673
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
674
|
+
# (For example, 123456789012).
|
677
675
|
#
|
678
676
|
# @option params [required, String] :target_type
|
679
677
|
# The entity type for which the assignment will be deleted.
|
@@ -685,11 +683,11 @@ module Aws::SSOAdmin
|
|
685
683
|
# The entity type for which the assignment will be deleted.
|
686
684
|
#
|
687
685
|
# @option params [required, String] :principal_id
|
688
|
-
# An identifier for an object in
|
689
|
-
#
|
686
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
687
|
+
# group. PrincipalIds are GUIDs (For example,
|
690
688
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
691
|
-
# PrincipalIds in
|
692
|
-
#
|
689
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
690
|
+
# Identity Store API
|
693
691
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
694
692
|
#
|
695
693
|
# @return [Types::DeleteAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
@@ -731,11 +729,11 @@ module Aws::SSOAdmin
|
|
731
729
|
# Deletes the inline policy from a specified permission set.
|
732
730
|
#
|
733
731
|
# @option params [required, String] :instance_arn
|
734
|
-
# The ARN of the
|
735
|
-
#
|
736
|
-
#
|
732
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
733
|
+
# will be executed. For more information about ARNs, see [Amazon
|
734
|
+
# Resource Names (ARNs) and AWS Service
|
737
735
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
738
|
-
# *
|
736
|
+
# *AWS General Reference*.
|
739
737
|
#
|
740
738
|
# @option params [required, String] :permission_set_arn
|
741
739
|
# The ARN of the permission set that will be used to remove access.
|
@@ -759,17 +757,17 @@ module Aws::SSOAdmin
|
|
759
757
|
end
|
760
758
|
|
761
759
|
# Disables the attributes-based access control (ABAC) feature for the
|
762
|
-
# specified
|
760
|
+
# specified IAM Identity Center instance and deletes all of the
|
763
761
|
# attribute mappings that have been configured. Once deleted, any
|
764
762
|
# attributes that are received from an identity source and any custom
|
765
763
|
# attributes you have previously configured will not be passed. For more
|
766
764
|
# information about ABAC, see [Attribute-Based Access
|
767
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
768
|
-
#
|
765
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
766
|
+
# Identity Center User Guide*.
|
769
767
|
#
|
770
768
|
# @option params [required, String] :instance_arn
|
771
|
-
# The ARN of the
|
772
|
-
#
|
769
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
770
|
+
# will be executed.
|
773
771
|
#
|
774
772
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
775
773
|
#
|
@@ -791,11 +789,11 @@ module Aws::SSOAdmin
|
|
791
789
|
# Deletes the specified permission set.
|
792
790
|
#
|
793
791
|
# @option params [required, String] :instance_arn
|
794
|
-
# The ARN of the
|
795
|
-
#
|
796
|
-
#
|
792
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
793
|
+
# will be executed. For more information about ARNs, see [Amazon
|
794
|
+
# Resource Names (ARNs) and AWS Service
|
797
795
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
798
|
-
# *
|
796
|
+
# *AWS General Reference*.
|
799
797
|
#
|
800
798
|
# @option params [required, String] :permission_set_arn
|
801
799
|
# The ARN of the permission set that should be deleted.
|
@@ -821,8 +819,8 @@ module Aws::SSOAdmin
|
|
821
819
|
# Deletes the permissions boundary from a specified PermissionSet.
|
822
820
|
#
|
823
821
|
# @option params [required, String] :instance_arn
|
824
|
-
# The ARN of the
|
825
|
-
#
|
822
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
823
|
+
# will be executed.
|
826
824
|
#
|
827
825
|
# @option params [required, String] :permission_set_arn
|
828
826
|
# The ARN of the `PermissionSet`.
|
@@ -848,11 +846,11 @@ module Aws::SSOAdmin
|
|
848
846
|
# Describes the status of the assignment creation request.
|
849
847
|
#
|
850
848
|
# @option params [required, String] :instance_arn
|
851
|
-
# The ARN of the
|
852
|
-
#
|
853
|
-
#
|
849
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
850
|
+
# will be executed. For more information about ARNs, see [Amazon
|
851
|
+
# Resource Names (ARNs) and AWS Service
|
854
852
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
855
|
-
# *
|
853
|
+
# *AWS General Reference*.
|
856
854
|
#
|
857
855
|
# @option params [required, String] :account_assignment_creation_request_id
|
858
856
|
# The identifier that is used to track the request operation progress.
|
@@ -892,11 +890,11 @@ module Aws::SSOAdmin
|
|
892
890
|
# Describes the status of the assignment deletion request.
|
893
891
|
#
|
894
892
|
# @option params [required, String] :instance_arn
|
895
|
-
# The ARN of the
|
896
|
-
#
|
897
|
-
#
|
893
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
894
|
+
# will be executed. For more information about ARNs, see [Amazon
|
895
|
+
# Resource Names (ARNs) and AWS Service
|
898
896
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
899
|
-
# *
|
897
|
+
# *AWS General Reference*.
|
900
898
|
#
|
901
899
|
# @option params [required, String] :account_assignment_deletion_request_id
|
902
900
|
# The identifier that is used to track the request operation progress.
|
@@ -933,17 +931,17 @@ module Aws::SSOAdmin
|
|
933
931
|
req.send_request(options)
|
934
932
|
end
|
935
933
|
|
936
|
-
# Returns the list of
|
937
|
-
#
|
938
|
-
# (ABAC) for the specified
|
939
|
-
#
|
934
|
+
# Returns the list of IAM Identity Center identity store attributes that
|
935
|
+
# have been configured to work with attributes-based access control
|
936
|
+
# (ABAC) for the specified IAM Identity Center instance. This will not
|
937
|
+
# return attributes configured and sent by an external identity
|
940
938
|
# provider. For more information about ABAC, see [Attribute-Based Access
|
941
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
942
|
-
#
|
939
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
940
|
+
# Identity Center User Guide*.
|
943
941
|
#
|
944
942
|
# @option params [required, String] :instance_arn
|
945
|
-
# The ARN of the
|
946
|
-
#
|
943
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
944
|
+
# will be executed.
|
947
945
|
#
|
948
946
|
# @return [Types::DescribeInstanceAccessControlAttributeConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
949
947
|
#
|
@@ -978,11 +976,11 @@ module Aws::SSOAdmin
|
|
978
976
|
# Gets the details of the permission set.
|
979
977
|
#
|
980
978
|
# @option params [required, String] :instance_arn
|
981
|
-
# The ARN of the
|
982
|
-
#
|
983
|
-
#
|
979
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
980
|
+
# will be executed. For more information about ARNs, see [Amazon
|
981
|
+
# Resource Names (ARNs) and AWS Service
|
984
982
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
985
|
-
# *
|
983
|
+
# *AWS General Reference*.
|
986
984
|
#
|
987
985
|
# @option params [required, String] :permission_set_arn
|
988
986
|
# The ARN of the permission set.
|
@@ -1020,11 +1018,11 @@ module Aws::SSOAdmin
|
|
1020
1018
|
# request.
|
1021
1019
|
#
|
1022
1020
|
# @option params [required, String] :instance_arn
|
1023
|
-
# The ARN of the
|
1024
|
-
#
|
1025
|
-
#
|
1021
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1022
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1023
|
+
# Resource Names (ARNs) and AWS Service
|
1026
1024
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1027
|
-
# *
|
1025
|
+
# *AWS General Reference*.
|
1028
1026
|
#
|
1029
1027
|
# @option params [required, String] :provision_permission_set_request_id
|
1030
1028
|
# The identifier that is provided by the ProvisionPermissionSet call to
|
@@ -1063,16 +1061,16 @@ module Aws::SSOAdmin
|
|
1063
1061
|
# PermissionSet.
|
1064
1062
|
#
|
1065
1063
|
# @option params [required, String] :instance_arn
|
1066
|
-
# The ARN of the
|
1067
|
-
#
|
1064
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1065
|
+
# will be executed.
|
1068
1066
|
#
|
1069
1067
|
# @option params [required, String] :permission_set_arn
|
1070
1068
|
# The ARN of the `PermissionSet`.
|
1071
1069
|
#
|
1072
1070
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
1073
1071
|
# Specifies the name and path of a customer managed policy. You must
|
1074
|
-
# have an IAM policy that matches the name and path in each
|
1075
|
-
#
|
1072
|
+
# have an IAM policy that matches the name and path in each AWS account
|
1073
|
+
# where you want to deploy your permission set.
|
1076
1074
|
#
|
1077
1075
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1078
1076
|
#
|
@@ -1096,22 +1094,21 @@ module Aws::SSOAdmin
|
|
1096
1094
|
req.send_request(options)
|
1097
1095
|
end
|
1098
1096
|
|
1099
|
-
# Detaches the attached
|
1100
|
-
#
|
1097
|
+
# Detaches the attached AWS managed policy ARN from the specified
|
1098
|
+
# permission set.
|
1101
1099
|
#
|
1102
1100
|
# @option params [required, String] :instance_arn
|
1103
|
-
# The ARN of the
|
1104
|
-
#
|
1105
|
-
#
|
1101
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1102
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1103
|
+
# Resource Names (ARNs) and AWS Service
|
1106
1104
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1107
|
-
# *
|
1105
|
+
# *AWS General Reference*.
|
1108
1106
|
#
|
1109
1107
|
# @option params [required, String] :permission_set_arn
|
1110
1108
|
# The ARN of the PermissionSet from which the policy should be detached.
|
1111
1109
|
#
|
1112
1110
|
# @option params [required, String] :managed_policy_arn
|
1113
|
-
# The
|
1114
|
-
# permission set.
|
1111
|
+
# The AWS managed policy ARN to be detached from a permission set.
|
1115
1112
|
#
|
1116
1113
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
1117
1114
|
#
|
@@ -1135,11 +1132,11 @@ module Aws::SSOAdmin
|
|
1135
1132
|
# Obtains the inline policy assigned to the permission set.
|
1136
1133
|
#
|
1137
1134
|
# @option params [required, String] :instance_arn
|
1138
|
-
# The ARN of the
|
1139
|
-
#
|
1140
|
-
#
|
1135
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1136
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1137
|
+
# Resource Names (ARNs) and AWS Service
|
1141
1138
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1142
|
-
# *
|
1139
|
+
# *AWS General Reference*.
|
1143
1140
|
#
|
1144
1141
|
# @option params [required, String] :permission_set_arn
|
1145
1142
|
# The ARN of the permission set.
|
@@ -1171,8 +1168,8 @@ module Aws::SSOAdmin
|
|
1171
1168
|
# Obtains the permissions boundary for a specified PermissionSet.
|
1172
1169
|
#
|
1173
1170
|
# @option params [required, String] :instance_arn
|
1174
|
-
# The ARN of the
|
1175
|
-
#
|
1171
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1172
|
+
# will be executed.
|
1176
1173
|
#
|
1177
1174
|
# @option params [required, String] :permission_set_arn
|
1178
1175
|
# The ARN of the `PermissionSet`.
|
@@ -1203,15 +1200,15 @@ module Aws::SSOAdmin
|
|
1203
1200
|
req.send_request(options)
|
1204
1201
|
end
|
1205
1202
|
|
1206
|
-
# Lists the status of the
|
1207
|
-
#
|
1203
|
+
# Lists the status of the AWS account assignment creation requests for a
|
1204
|
+
# specified IAM Identity Center instance.
|
1208
1205
|
#
|
1209
1206
|
# @option params [required, String] :instance_arn
|
1210
|
-
# The ARN of the
|
1211
|
-
#
|
1212
|
-
#
|
1207
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1208
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1209
|
+
# Resource Names (ARNs) and AWS Service
|
1213
1210
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1214
|
-
# *
|
1211
|
+
# *AWS General Reference*.
|
1215
1212
|
#
|
1216
1213
|
# @option params [Integer] :max_results
|
1217
1214
|
# The maximum number of results to display for the assignment.
|
@@ -1258,15 +1255,15 @@ module Aws::SSOAdmin
|
|
1258
1255
|
req.send_request(options)
|
1259
1256
|
end
|
1260
1257
|
|
1261
|
-
# Lists the status of the
|
1262
|
-
#
|
1258
|
+
# Lists the status of the AWS account assignment deletion requests for a
|
1259
|
+
# specified IAM Identity Center instance.
|
1263
1260
|
#
|
1264
1261
|
# @option params [required, String] :instance_arn
|
1265
|
-
# The ARN of the
|
1266
|
-
#
|
1267
|
-
#
|
1262
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1263
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1264
|
+
# Resource Names (ARNs) and AWS Service
|
1268
1265
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1269
|
-
# *
|
1266
|
+
# *AWS General Reference*.
|
1270
1267
|
#
|
1271
1268
|
# @option params [Integer] :max_results
|
1272
1269
|
# The maximum number of results to display for the assignment.
|
@@ -1313,19 +1310,18 @@ module Aws::SSOAdmin
|
|
1313
1310
|
req.send_request(options)
|
1314
1311
|
end
|
1315
1312
|
|
1316
|
-
# Lists the assignee of the specified
|
1317
|
-
#
|
1313
|
+
# Lists the assignee of the specified AWS account with the specified
|
1314
|
+
# permission set.
|
1318
1315
|
#
|
1319
1316
|
# @option params [required, String] :instance_arn
|
1320
|
-
# The ARN of the
|
1321
|
-
#
|
1322
|
-
#
|
1317
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1318
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1319
|
+
# Resource Names (ARNs) and AWS Service
|
1323
1320
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1324
|
-
# *
|
1321
|
+
# *AWS General Reference*.
|
1325
1322
|
#
|
1326
1323
|
# @option params [required, String] :account_id
|
1327
|
-
# The identifier of the
|
1328
|
-
# the assignments.
|
1324
|
+
# The identifier of the AWS account from which to list the assignments.
|
1329
1325
|
#
|
1330
1326
|
# @option params [required, String] :permission_set_arn
|
1331
1327
|
# The ARN of the permission set from which to list assignments.
|
@@ -1372,23 +1368,22 @@ module Aws::SSOAdmin
|
|
1372
1368
|
req.send_request(options)
|
1373
1369
|
end
|
1374
1370
|
|
1375
|
-
# Lists all the
|
1376
|
-
#
|
1371
|
+
# Lists all the AWS accounts where the specified permission set is
|
1372
|
+
# provisioned.
|
1377
1373
|
#
|
1378
1374
|
# @option params [required, String] :instance_arn
|
1379
|
-
# The ARN of the
|
1380
|
-
#
|
1381
|
-
#
|
1375
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1376
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1377
|
+
# Resource Names (ARNs) and AWS Service
|
1382
1378
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1383
|
-
# *
|
1379
|
+
# *AWS General Reference*.
|
1384
1380
|
#
|
1385
1381
|
# @option params [required, String] :permission_set_arn
|
1386
|
-
# The ARN of the PermissionSet from which the associated
|
1387
|
-
#
|
1382
|
+
# The ARN of the PermissionSet from which the associated AWS accounts
|
1383
|
+
# will be listed.
|
1388
1384
|
#
|
1389
1385
|
# @option params [String] :provisioning_status
|
1390
|
-
# The permission set provisioning status for an
|
1391
|
-
# account.
|
1386
|
+
# The permission set provisioning status for an AWS account.
|
1392
1387
|
#
|
1393
1388
|
# @option params [Integer] :max_results
|
1394
1389
|
# The maximum number of results to display for the PermissionSet.
|
@@ -1433,8 +1428,8 @@ module Aws::SSOAdmin
|
|
1433
1428
|
# PermissionSet.
|
1434
1429
|
#
|
1435
1430
|
# @option params [required, String] :instance_arn
|
1436
|
-
# The ARN of the
|
1437
|
-
#
|
1431
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1432
|
+
# will be executed.
|
1438
1433
|
#
|
1439
1434
|
# @option params [required, String] :permission_set_arn
|
1440
1435
|
# The ARN of the `PermissionSet`.
|
@@ -1478,8 +1473,7 @@ module Aws::SSOAdmin
|
|
1478
1473
|
req.send_request(options)
|
1479
1474
|
end
|
1480
1475
|
|
1481
|
-
# Lists the
|
1482
|
-
# to.
|
1476
|
+
# Lists the IAM Identity Center instances that the caller has access to.
|
1483
1477
|
#
|
1484
1478
|
# @option params [Integer] :max_results
|
1485
1479
|
# The maximum number of results to display for the instance.
|
@@ -1518,15 +1512,15 @@ module Aws::SSOAdmin
|
|
1518
1512
|
req.send_request(options)
|
1519
1513
|
end
|
1520
1514
|
|
1521
|
-
# Lists the
|
1522
|
-
#
|
1515
|
+
# Lists the AWS managed policy that is attached to a specified
|
1516
|
+
# permission set.
|
1523
1517
|
#
|
1524
1518
|
# @option params [required, String] :instance_arn
|
1525
|
-
# The ARN of the
|
1526
|
-
#
|
1527
|
-
#
|
1519
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1520
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1521
|
+
# Resource Names (ARNs) and AWS Service
|
1528
1522
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1529
|
-
# *
|
1523
|
+
# *AWS General Reference*.
|
1530
1524
|
#
|
1531
1525
|
# @option params [required, String] :permission_set_arn
|
1532
1526
|
# The ARN of the PermissionSet whose managed policies will be listed.
|
@@ -1571,14 +1565,14 @@ module Aws::SSOAdmin
|
|
1571
1565
|
end
|
1572
1566
|
|
1573
1567
|
# Lists the status of the permission set provisioning requests for a
|
1574
|
-
# specified
|
1568
|
+
# specified IAM Identity Center instance.
|
1575
1569
|
#
|
1576
1570
|
# @option params [required, String] :instance_arn
|
1577
|
-
# The ARN of the
|
1578
|
-
#
|
1579
|
-
#
|
1571
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1572
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1573
|
+
# Resource Names (ARNs) and AWS Service
|
1580
1574
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1581
|
-
# *
|
1575
|
+
# *AWS General Reference*.
|
1582
1576
|
#
|
1583
1577
|
# @option params [Integer] :max_results
|
1584
1578
|
# The maximum number of results to display for the assignment.
|
@@ -1625,14 +1619,14 @@ module Aws::SSOAdmin
|
|
1625
1619
|
req.send_request(options)
|
1626
1620
|
end
|
1627
1621
|
|
1628
|
-
# Lists the PermissionSets in an
|
1622
|
+
# Lists the PermissionSets in an IAM Identity Center instance.
|
1629
1623
|
#
|
1630
1624
|
# @option params [required, String] :instance_arn
|
1631
|
-
# The ARN of the
|
1632
|
-
#
|
1633
|
-
#
|
1625
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1626
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1627
|
+
# Resource Names (ARNs) and AWS Service
|
1634
1628
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1635
|
-
# *
|
1629
|
+
# *AWS General Reference*.
|
1636
1630
|
#
|
1637
1631
|
# @option params [String] :next_token
|
1638
1632
|
# The pagination token for the list API. Initially the value is null.
|
@@ -1671,19 +1665,18 @@ module Aws::SSOAdmin
|
|
1671
1665
|
req.send_request(options)
|
1672
1666
|
end
|
1673
1667
|
|
1674
|
-
# Lists all the permission sets that are provisioned to a specified
|
1675
|
-
#
|
1668
|
+
# Lists all the permission sets that are provisioned to a specified AWS
|
1669
|
+
# account.
|
1676
1670
|
#
|
1677
1671
|
# @option params [required, String] :instance_arn
|
1678
|
-
# The ARN of the
|
1679
|
-
#
|
1680
|
-
#
|
1672
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1673
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1674
|
+
# Resource Names (ARNs) and AWS Service
|
1681
1675
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1682
|
-
# *
|
1676
|
+
# *AWS General Reference*.
|
1683
1677
|
#
|
1684
1678
|
# @option params [required, String] :account_id
|
1685
|
-
# The identifier of the
|
1686
|
-
# the assignments.
|
1679
|
+
# The identifier of the AWS account from which to list the assignments.
|
1687
1680
|
#
|
1688
1681
|
# @option params [String] :provisioning_status
|
1689
1682
|
# The status object for the permission set provisioning operation.
|
@@ -1730,11 +1723,11 @@ module Aws::SSOAdmin
|
|
1730
1723
|
# Lists the tags that are attached to a specified resource.
|
1731
1724
|
#
|
1732
1725
|
# @option params [required, String] :instance_arn
|
1733
|
-
# The ARN of the
|
1734
|
-
#
|
1735
|
-
#
|
1726
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1727
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1728
|
+
# Resource Names (ARNs) and AWS Service
|
1736
1729
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1737
|
-
# *
|
1730
|
+
# *AWS General Reference*.
|
1738
1731
|
#
|
1739
1732
|
# @option params [required, String] :resource_arn
|
1740
1733
|
# The ARN of the resource with the tags to be listed.
|
@@ -1778,18 +1771,18 @@ module Aws::SSOAdmin
|
|
1778
1771
|
# specified target.
|
1779
1772
|
#
|
1780
1773
|
# @option params [required, String] :instance_arn
|
1781
|
-
# The ARN of the
|
1782
|
-
#
|
1783
|
-
#
|
1774
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1775
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1776
|
+
# Resource Names (ARNs) and AWS Service
|
1784
1777
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1785
|
-
# *
|
1778
|
+
# *AWS General Reference*.
|
1786
1779
|
#
|
1787
1780
|
# @option params [required, String] :permission_set_arn
|
1788
1781
|
# The ARN of the permission set.
|
1789
1782
|
#
|
1790
1783
|
# @option params [String] :target_id
|
1791
|
-
# TargetID is an
|
1792
|
-
#
|
1784
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
1785
|
+
# (For example, 123456789012).
|
1793
1786
|
#
|
1794
1787
|
# @option params [required, String] :target_type
|
1795
1788
|
# The entity type for which the assignment will be created.
|
@@ -1835,11 +1828,11 @@ module Aws::SSOAdmin
|
|
1835
1828
|
# </note>
|
1836
1829
|
#
|
1837
1830
|
# @option params [required, String] :instance_arn
|
1838
|
-
# The ARN of the
|
1839
|
-
#
|
1840
|
-
#
|
1831
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1832
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1833
|
+
# Resource Names (ARNs) and AWS Service
|
1841
1834
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1842
|
-
# *
|
1835
|
+
# *AWS General Reference*.
|
1843
1836
|
#
|
1844
1837
|
# @option params [required, String] :permission_set_arn
|
1845
1838
|
# The ARN of the permission set.
|
@@ -1866,12 +1859,12 @@ module Aws::SSOAdmin
|
|
1866
1859
|
req.send_request(options)
|
1867
1860
|
end
|
1868
1861
|
|
1869
|
-
# Attaches an
|
1870
|
-
#
|
1862
|
+
# Attaches an AWS managed or customer managed policy to the specified
|
1863
|
+
# PermissionSet as a permissions boundary.
|
1871
1864
|
#
|
1872
1865
|
# @option params [required, String] :instance_arn
|
1873
|
-
# The ARN of the
|
1874
|
-
#
|
1866
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1867
|
+
# will be executed.
|
1875
1868
|
#
|
1876
1869
|
# @option params [required, String] :permission_set_arn
|
1877
1870
|
# The ARN of the `PermissionSet`.
|
@@ -1907,11 +1900,11 @@ module Aws::SSOAdmin
|
|
1907
1900
|
# Associates a set of tags with a specified resource.
|
1908
1901
|
#
|
1909
1902
|
# @option params [required, String] :instance_arn
|
1910
|
-
# The ARN of the
|
1911
|
-
#
|
1912
|
-
#
|
1903
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1904
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1905
|
+
# Resource Names (ARNs) and AWS Service
|
1913
1906
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1914
|
-
# *
|
1907
|
+
# *AWS General Reference*.
|
1915
1908
|
#
|
1916
1909
|
# @option params [required, String] :resource_arn
|
1917
1910
|
# The ARN of the resource with the tags to be listed.
|
@@ -1946,11 +1939,11 @@ module Aws::SSOAdmin
|
|
1946
1939
|
# Disassociates a set of tags from a specified resource.
|
1947
1940
|
#
|
1948
1941
|
# @option params [required, String] :instance_arn
|
1949
|
-
# The ARN of the
|
1950
|
-
#
|
1951
|
-
#
|
1942
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1943
|
+
# will be executed. For more information about ARNs, see [Amazon
|
1944
|
+
# Resource Names (ARNs) and AWS Service
|
1952
1945
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
1953
|
-
# *
|
1946
|
+
# *AWS General Reference*.
|
1954
1947
|
#
|
1955
1948
|
# @option params [required, String] :resource_arn
|
1956
1949
|
# The ARN of the resource with the tags to be listed.
|
@@ -1977,21 +1970,21 @@ module Aws::SSOAdmin
|
|
1977
1970
|
req.send_request(options)
|
1978
1971
|
end
|
1979
1972
|
|
1980
|
-
# Updates the
|
1981
|
-
#
|
1982
|
-
#
|
1973
|
+
# Updates the IAM Identity Center identity store attributes that you can
|
1974
|
+
# use with the IAM Identity Center instance for attributes-based access
|
1975
|
+
# control (ABAC). When using an external identity provider as an
|
1983
1976
|
# identity source, you can pass attributes through the SAML assertion as
|
1984
|
-
# an alternative to configuring attributes from the
|
1985
|
-
#
|
1986
|
-
#
|
1987
|
-
# the
|
1988
|
-
#
|
1989
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
1990
|
-
#
|
1977
|
+
# an alternative to configuring attributes from the IAM Identity Center
|
1978
|
+
# identity store. If a SAML assertion passes any of these attributes,
|
1979
|
+
# IAM Identity Center replaces the attribute value with the value from
|
1980
|
+
# the IAM Identity Center identity store. For more information about
|
1981
|
+
# ABAC, see [Attribute-Based Access
|
1982
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
1983
|
+
# Identity Center User Guide*.
|
1991
1984
|
#
|
1992
1985
|
# @option params [required, String] :instance_arn
|
1993
|
-
# The ARN of the
|
1994
|
-
#
|
1986
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
1987
|
+
# will be executed.
|
1995
1988
|
#
|
1996
1989
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
1997
1990
|
# Updates the attributes for your ABAC configuration.
|
@@ -2026,11 +2019,11 @@ module Aws::SSOAdmin
|
|
2026
2019
|
# Updates an existing permission set.
|
2027
2020
|
#
|
2028
2021
|
# @option params [required, String] :instance_arn
|
2029
|
-
# The ARN of the
|
2030
|
-
#
|
2031
|
-
#
|
2022
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
2023
|
+
# will be executed. For more information about ARNs, see [Amazon
|
2024
|
+
# Resource Names (ARNs) and AWS Service
|
2032
2025
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
2033
|
-
# *
|
2026
|
+
# *AWS General Reference*.
|
2034
2027
|
#
|
2035
2028
|
# @option params [required, String] :permission_set_arn
|
2036
2029
|
# The ARN of the permission set.
|
@@ -2080,7 +2073,7 @@ module Aws::SSOAdmin
|
|
2080
2073
|
params: params,
|
2081
2074
|
config: config)
|
2082
2075
|
context[:gem_name] = 'aws-sdk-ssoadmin'
|
2083
|
-
context[:gem_version] = '1.
|
2076
|
+
context[:gem_version] = '1.20.0'
|
2084
2077
|
Seahorse::Client::Request.new(handlers, context)
|
2085
2078
|
end
|
2086
2079
|
|