aws-sdk-ssoadmin 1.19.0 → 1.21.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-ssoadmin/client.rb +230 -220
- data/lib/aws-sdk-ssoadmin/endpoint_parameters.rb +66 -0
- data/lib/aws-sdk-ssoadmin/endpoint_provider.rb +111 -0
- data/lib/aws-sdk-ssoadmin/endpoints.rb +533 -0
- data/lib/aws-sdk-ssoadmin/plugins/endpoints.rb +142 -0
- data/lib/aws-sdk-ssoadmin/types.rb +200 -208
- data/lib/aws-sdk-ssoadmin.rb +5 -1
- metadata +8 -4
|
@@ -30,7 +30,7 @@ require 'aws-sdk-core/plugins/http_checksum.rb'
|
|
|
30
30
|
require 'aws-sdk-core/plugins/checksum_algorithm.rb'
|
|
31
31
|
require 'aws-sdk-core/plugins/defaults_mode.rb'
|
|
32
32
|
require 'aws-sdk-core/plugins/recursion_detection.rb'
|
|
33
|
-
require 'aws-sdk-core/plugins/
|
|
33
|
+
require 'aws-sdk-core/plugins/sign.rb'
|
|
34
34
|
require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
|
|
35
35
|
|
|
36
36
|
Aws::Plugins::GlobalConfiguration.add_identifier(:ssoadmin)
|
|
@@ -79,8 +79,9 @@ module Aws::SSOAdmin
|
|
|
79
79
|
add_plugin(Aws::Plugins::ChecksumAlgorithm)
|
|
80
80
|
add_plugin(Aws::Plugins::DefaultsMode)
|
|
81
81
|
add_plugin(Aws::Plugins::RecursionDetection)
|
|
82
|
-
add_plugin(Aws::Plugins::
|
|
82
|
+
add_plugin(Aws::Plugins::Sign)
|
|
83
83
|
add_plugin(Aws::Plugins::Protocols::JsonRpc)
|
|
84
|
+
add_plugin(Aws::SSOAdmin::Plugins::Endpoints)
|
|
84
85
|
|
|
85
86
|
# @overload initialize(options)
|
|
86
87
|
# @param [Hash] options
|
|
@@ -297,6 +298,19 @@ module Aws::SSOAdmin
|
|
|
297
298
|
# ** Please note ** When response stubbing is enabled, no HTTP
|
|
298
299
|
# requests are made, and retries are disabled.
|
|
299
300
|
#
|
|
301
|
+
# @option options [Aws::TokenProvider] :token_provider
|
|
302
|
+
# A Bearer Token Provider. This can be an instance of any one of the
|
|
303
|
+
# following classes:
|
|
304
|
+
#
|
|
305
|
+
# * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
|
|
306
|
+
# tokens.
|
|
307
|
+
#
|
|
308
|
+
# * `Aws::SSOTokenProvider` - Used for loading tokens from AWS SSO using an
|
|
309
|
+
# access token generated from `aws login`.
|
|
310
|
+
#
|
|
311
|
+
# When `:token_provider` is not configured directly, the `Aws::TokenProviderChain`
|
|
312
|
+
# will be used to search for tokens configured for your profile in shared configuration files.
|
|
313
|
+
#
|
|
300
314
|
# @option options [Boolean] :use_dualstack_endpoint
|
|
301
315
|
# When set to `true`, dualstack enabled endpoints (with `.aws` TLD)
|
|
302
316
|
# will be used if available.
|
|
@@ -310,6 +324,9 @@ module Aws::SSOAdmin
|
|
|
310
324
|
# When `true`, request parameters are validated before
|
|
311
325
|
# sending the request.
|
|
312
326
|
#
|
|
327
|
+
# @option options [Aws::SSOAdmin::EndpointProvider] :endpoint_provider
|
|
328
|
+
# The endpoint provider used to resolve endpoints. Any object that responds to `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to `Aws::SSOAdmin::EndpointParameters`
|
|
329
|
+
#
|
|
313
330
|
# @option options [URI::HTTP,String] :http_proxy A proxy to send
|
|
314
331
|
# requests through. Formatted like 'http://proxy.com:123'.
|
|
315
332
|
#
|
|
@@ -365,16 +382,16 @@ module Aws::SSOAdmin
|
|
|
365
382
|
# PermissionSet.
|
|
366
383
|
#
|
|
367
384
|
# @option params [required, String] :instance_arn
|
|
368
|
-
# The ARN of the
|
|
369
|
-
#
|
|
385
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
386
|
+
# will be executed.
|
|
370
387
|
#
|
|
371
388
|
# @option params [required, String] :permission_set_arn
|
|
372
389
|
# The ARN of the `PermissionSet`.
|
|
373
390
|
#
|
|
374
391
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
|
375
392
|
# Specifies the name and path of a customer managed policy. You must
|
|
376
|
-
# have an IAM policy that matches the name and path in each
|
|
377
|
-
#
|
|
393
|
+
# have an IAM policy that matches the name and path in each AWS account
|
|
394
|
+
# where you want to deploy your permission set.
|
|
378
395
|
#
|
|
379
396
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
380
397
|
#
|
|
@@ -398,8 +415,7 @@ module Aws::SSOAdmin
|
|
|
398
415
|
req.send_request(options)
|
|
399
416
|
end
|
|
400
417
|
|
|
401
|
-
# Attaches an
|
|
402
|
-
# set.
|
|
418
|
+
# Attaches an AWS managed policy ARN to a permission set.
|
|
403
419
|
#
|
|
404
420
|
# <note markdown="1"> If the permission set is already referenced by one or more account
|
|
405
421
|
# assignments, you will need to call ` ProvisionPermissionSet ` after
|
|
@@ -409,19 +425,18 @@ module Aws::SSOAdmin
|
|
|
409
425
|
# </note>
|
|
410
426
|
#
|
|
411
427
|
# @option params [required, String] :instance_arn
|
|
412
|
-
# The ARN of the
|
|
413
|
-
#
|
|
414
|
-
#
|
|
428
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
429
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
430
|
+
# Resource Names (ARNs) and AWS Service
|
|
415
431
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
416
|
-
# *
|
|
432
|
+
# *AWS General Reference*.
|
|
417
433
|
#
|
|
418
434
|
# @option params [required, String] :permission_set_arn
|
|
419
435
|
# The ARN of the PermissionSet that the managed policy should be
|
|
420
436
|
# attached to.
|
|
421
437
|
#
|
|
422
438
|
# @option params [required, String] :managed_policy_arn
|
|
423
|
-
# The
|
|
424
|
-
# permission set.
|
|
439
|
+
# The AWS managed policy ARN to be attached to a permission set.
|
|
425
440
|
#
|
|
426
441
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
427
442
|
#
|
|
@@ -442,21 +457,21 @@ module Aws::SSOAdmin
|
|
|
442
457
|
req.send_request(options)
|
|
443
458
|
end
|
|
444
459
|
|
|
445
|
-
# Assigns access to a principal for a specified
|
|
446
|
-
#
|
|
460
|
+
# Assigns access to a principal for a specified AWS account using a
|
|
461
|
+
# specified permission set.
|
|
447
462
|
#
|
|
448
463
|
# <note markdown="1"> The term *principal* here refers to a user or group that is defined in
|
|
449
|
-
#
|
|
464
|
+
# IAM Identity Center.
|
|
450
465
|
#
|
|
451
466
|
# </note>
|
|
452
467
|
#
|
|
453
468
|
# <note markdown="1"> As part of a successful `CreateAccountAssignment` call, the specified
|
|
454
469
|
# permission set will automatically be provisioned to the account in the
|
|
455
470
|
# form of an IAM policy. That policy is attached to the IAM role created
|
|
456
|
-
# in
|
|
457
|
-
#
|
|
458
|
-
#
|
|
459
|
-
#
|
|
471
|
+
# in IAM Identity Center. If the permission set is subsequently updated,
|
|
472
|
+
# the corresponding IAM policies attached to roles in your accounts will
|
|
473
|
+
# not be updated automatically. In this case, you must call `
|
|
474
|
+
# ProvisionPermissionSet ` to make these updates.
|
|
460
475
|
#
|
|
461
476
|
# </note>
|
|
462
477
|
#
|
|
@@ -467,15 +482,15 @@ module Aws::SSOAdmin
|
|
|
467
482
|
# </note>
|
|
468
483
|
#
|
|
469
484
|
# @option params [required, String] :instance_arn
|
|
470
|
-
# The ARN of the
|
|
471
|
-
#
|
|
472
|
-
#
|
|
485
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
486
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
487
|
+
# Resource Names (ARNs) and AWS Service
|
|
473
488
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
474
|
-
# *
|
|
489
|
+
# *AWS General Reference*.
|
|
475
490
|
#
|
|
476
491
|
# @option params [required, String] :target_id
|
|
477
|
-
# TargetID is an
|
|
478
|
-
#
|
|
492
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
|
493
|
+
# (For example, 123456789012).
|
|
479
494
|
#
|
|
480
495
|
# @option params [required, String] :target_type
|
|
481
496
|
# The entity type for which the assignment will be created.
|
|
@@ -488,11 +503,11 @@ module Aws::SSOAdmin
|
|
|
488
503
|
# The entity type for which the assignment will be created.
|
|
489
504
|
#
|
|
490
505
|
# @option params [required, String] :principal_id
|
|
491
|
-
# An identifier for an object in
|
|
492
|
-
#
|
|
506
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
|
507
|
+
# group. PrincipalIds are GUIDs (For example,
|
|
493
508
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
|
494
|
-
# PrincipalIds in
|
|
495
|
-
#
|
|
509
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
|
510
|
+
# Identity Store API
|
|
496
511
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
|
497
512
|
#
|
|
498
513
|
# @return [Types::CreateAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
@@ -532,11 +547,11 @@ module Aws::SSOAdmin
|
|
|
532
547
|
end
|
|
533
548
|
|
|
534
549
|
# Enables the attributes-based access control (ABAC) feature for the
|
|
535
|
-
# specified
|
|
550
|
+
# specified IAM Identity Center instance. You can also specify new
|
|
536
551
|
# attributes to add to your ABAC configuration during the enabling
|
|
537
552
|
# process. For more information about ABAC, see [Attribute-Based Access
|
|
538
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
|
539
|
-
#
|
|
553
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
|
554
|
+
# Identity Center User Guide*.
|
|
540
555
|
#
|
|
541
556
|
# <note markdown="1"> After a successful response, call
|
|
542
557
|
# `DescribeInstanceAccessControlAttributeConfiguration` to validate that
|
|
@@ -545,18 +560,18 @@ module Aws::SSOAdmin
|
|
|
545
560
|
# </note>
|
|
546
561
|
#
|
|
547
562
|
# @option params [required, String] :instance_arn
|
|
548
|
-
# The ARN of the
|
|
549
|
-
#
|
|
563
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
564
|
+
# will be executed.
|
|
550
565
|
#
|
|
551
566
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
|
552
|
-
# Specifies the
|
|
553
|
-
#
|
|
554
|
-
#
|
|
567
|
+
# Specifies the IAM Identity Center identity store attributes to add to
|
|
568
|
+
# your ABAC configuration. When using an external identity provider as
|
|
569
|
+
# an identity source, you can pass attributes through the SAML
|
|
555
570
|
# assertion. Doing so provides an alternative to configuring attributes
|
|
556
|
-
# from the
|
|
557
|
-
# passes any of these attributes,
|
|
558
|
-
#
|
|
559
|
-
#
|
|
571
|
+
# from the IAM Identity Center identity store. If a SAML assertion
|
|
572
|
+
# passes any of these attributes, IAM Identity Center will replace the
|
|
573
|
+
# attribute value with the value from the IAM Identity Center identity
|
|
574
|
+
# store.
|
|
560
575
|
#
|
|
561
576
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
562
577
|
#
|
|
@@ -585,11 +600,11 @@ module Aws::SSOAdmin
|
|
|
585
600
|
req.send_request(options)
|
|
586
601
|
end
|
|
587
602
|
|
|
588
|
-
# Creates a permission set within a specified
|
|
603
|
+
# Creates a permission set within a specified IAM Identity Center
|
|
589
604
|
# instance.
|
|
590
605
|
#
|
|
591
|
-
# <note markdown="1"> To grant users and groups access to
|
|
592
|
-
#
|
|
606
|
+
# <note markdown="1"> To grant users and groups access to AWS account resources, use `
|
|
607
|
+
# CreateAccountAssignment `.
|
|
593
608
|
#
|
|
594
609
|
# </note>
|
|
595
610
|
#
|
|
@@ -600,11 +615,11 @@ module Aws::SSOAdmin
|
|
|
600
615
|
# The description of the PermissionSet.
|
|
601
616
|
#
|
|
602
617
|
# @option params [required, String] :instance_arn
|
|
603
|
-
# The ARN of the
|
|
604
|
-
#
|
|
605
|
-
#
|
|
618
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
619
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
620
|
+
# Resource Names (ARNs) and AWS Service
|
|
606
621
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
607
|
-
# *
|
|
622
|
+
# *AWS General Reference*.
|
|
608
623
|
#
|
|
609
624
|
# @option params [String] :session_duration
|
|
610
625
|
# The length of time that the application user sessions are valid in the
|
|
@@ -655,8 +670,8 @@ module Aws::SSOAdmin
|
|
|
655
670
|
req.send_request(options)
|
|
656
671
|
end
|
|
657
672
|
|
|
658
|
-
# Deletes a principal's access from a specified
|
|
659
|
-
#
|
|
673
|
+
# Deletes a principal's access from a specified AWS account using a
|
|
674
|
+
# specified permission set.
|
|
660
675
|
#
|
|
661
676
|
# <note markdown="1"> After a successful response, call
|
|
662
677
|
# `DescribeAccountAssignmentCreationStatus` to describe the status of an
|
|
@@ -665,15 +680,15 @@ module Aws::SSOAdmin
|
|
|
665
680
|
# </note>
|
|
666
681
|
#
|
|
667
682
|
# @option params [required, String] :instance_arn
|
|
668
|
-
# The ARN of the
|
|
669
|
-
#
|
|
670
|
-
#
|
|
683
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
684
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
685
|
+
# Resource Names (ARNs) and AWS Service
|
|
671
686
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
672
|
-
# *
|
|
687
|
+
# *AWS General Reference*.
|
|
673
688
|
#
|
|
674
689
|
# @option params [required, String] :target_id
|
|
675
|
-
# TargetID is an
|
|
676
|
-
#
|
|
690
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
|
691
|
+
# (For example, 123456789012).
|
|
677
692
|
#
|
|
678
693
|
# @option params [required, String] :target_type
|
|
679
694
|
# The entity type for which the assignment will be deleted.
|
|
@@ -685,11 +700,11 @@ module Aws::SSOAdmin
|
|
|
685
700
|
# The entity type for which the assignment will be deleted.
|
|
686
701
|
#
|
|
687
702
|
# @option params [required, String] :principal_id
|
|
688
|
-
# An identifier for an object in
|
|
689
|
-
#
|
|
703
|
+
# An identifier for an object in IAM Identity Center, such as a user or
|
|
704
|
+
# group. PrincipalIds are GUIDs (For example,
|
|
690
705
|
# f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about
|
|
691
|
-
# PrincipalIds in
|
|
692
|
-
#
|
|
706
|
+
# PrincipalIds in IAM Identity Center, see the [IAM Identity Center
|
|
707
|
+
# Identity Store API
|
|
693
708
|
# Reference](/singlesignon/latest/IdentityStoreAPIReference/welcome.html).
|
|
694
709
|
#
|
|
695
710
|
# @return [Types::DeleteAccountAssignmentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
@@ -731,11 +746,11 @@ module Aws::SSOAdmin
|
|
|
731
746
|
# Deletes the inline policy from a specified permission set.
|
|
732
747
|
#
|
|
733
748
|
# @option params [required, String] :instance_arn
|
|
734
|
-
# The ARN of the
|
|
735
|
-
#
|
|
736
|
-
#
|
|
749
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
750
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
751
|
+
# Resource Names (ARNs) and AWS Service
|
|
737
752
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
738
|
-
# *
|
|
753
|
+
# *AWS General Reference*.
|
|
739
754
|
#
|
|
740
755
|
# @option params [required, String] :permission_set_arn
|
|
741
756
|
# The ARN of the permission set that will be used to remove access.
|
|
@@ -759,17 +774,17 @@ module Aws::SSOAdmin
|
|
|
759
774
|
end
|
|
760
775
|
|
|
761
776
|
# Disables the attributes-based access control (ABAC) feature for the
|
|
762
|
-
# specified
|
|
777
|
+
# specified IAM Identity Center instance and deletes all of the
|
|
763
778
|
# attribute mappings that have been configured. Once deleted, any
|
|
764
779
|
# attributes that are received from an identity source and any custom
|
|
765
780
|
# attributes you have previously configured will not be passed. For more
|
|
766
781
|
# information about ABAC, see [Attribute-Based Access
|
|
767
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
|
768
|
-
#
|
|
782
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
|
783
|
+
# Identity Center User Guide*.
|
|
769
784
|
#
|
|
770
785
|
# @option params [required, String] :instance_arn
|
|
771
|
-
# The ARN of the
|
|
772
|
-
#
|
|
786
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
787
|
+
# will be executed.
|
|
773
788
|
#
|
|
774
789
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
775
790
|
#
|
|
@@ -791,11 +806,11 @@ module Aws::SSOAdmin
|
|
|
791
806
|
# Deletes the specified permission set.
|
|
792
807
|
#
|
|
793
808
|
# @option params [required, String] :instance_arn
|
|
794
|
-
# The ARN of the
|
|
795
|
-
#
|
|
796
|
-
#
|
|
809
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
810
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
811
|
+
# Resource Names (ARNs) and AWS Service
|
|
797
812
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
798
|
-
# *
|
|
813
|
+
# *AWS General Reference*.
|
|
799
814
|
#
|
|
800
815
|
# @option params [required, String] :permission_set_arn
|
|
801
816
|
# The ARN of the permission set that should be deleted.
|
|
@@ -821,8 +836,8 @@ module Aws::SSOAdmin
|
|
|
821
836
|
# Deletes the permissions boundary from a specified PermissionSet.
|
|
822
837
|
#
|
|
823
838
|
# @option params [required, String] :instance_arn
|
|
824
|
-
# The ARN of the
|
|
825
|
-
#
|
|
839
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
840
|
+
# will be executed.
|
|
826
841
|
#
|
|
827
842
|
# @option params [required, String] :permission_set_arn
|
|
828
843
|
# The ARN of the `PermissionSet`.
|
|
@@ -848,11 +863,11 @@ module Aws::SSOAdmin
|
|
|
848
863
|
# Describes the status of the assignment creation request.
|
|
849
864
|
#
|
|
850
865
|
# @option params [required, String] :instance_arn
|
|
851
|
-
# The ARN of the
|
|
852
|
-
#
|
|
853
|
-
#
|
|
866
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
867
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
868
|
+
# Resource Names (ARNs) and AWS Service
|
|
854
869
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
855
|
-
# *
|
|
870
|
+
# *AWS General Reference*.
|
|
856
871
|
#
|
|
857
872
|
# @option params [required, String] :account_assignment_creation_request_id
|
|
858
873
|
# The identifier that is used to track the request operation progress.
|
|
@@ -892,11 +907,11 @@ module Aws::SSOAdmin
|
|
|
892
907
|
# Describes the status of the assignment deletion request.
|
|
893
908
|
#
|
|
894
909
|
# @option params [required, String] :instance_arn
|
|
895
|
-
# The ARN of the
|
|
896
|
-
#
|
|
897
|
-
#
|
|
910
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
911
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
912
|
+
# Resource Names (ARNs) and AWS Service
|
|
898
913
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
899
|
-
# *
|
|
914
|
+
# *AWS General Reference*.
|
|
900
915
|
#
|
|
901
916
|
# @option params [required, String] :account_assignment_deletion_request_id
|
|
902
917
|
# The identifier that is used to track the request operation progress.
|
|
@@ -933,17 +948,17 @@ module Aws::SSOAdmin
|
|
|
933
948
|
req.send_request(options)
|
|
934
949
|
end
|
|
935
950
|
|
|
936
|
-
# Returns the list of
|
|
937
|
-
#
|
|
938
|
-
# (ABAC) for the specified
|
|
939
|
-
#
|
|
951
|
+
# Returns the list of IAM Identity Center identity store attributes that
|
|
952
|
+
# have been configured to work with attributes-based access control
|
|
953
|
+
# (ABAC) for the specified IAM Identity Center instance. This will not
|
|
954
|
+
# return attributes configured and sent by an external identity
|
|
940
955
|
# provider. For more information about ABAC, see [Attribute-Based Access
|
|
941
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
|
942
|
-
#
|
|
956
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
|
957
|
+
# Identity Center User Guide*.
|
|
943
958
|
#
|
|
944
959
|
# @option params [required, String] :instance_arn
|
|
945
|
-
# The ARN of the
|
|
946
|
-
#
|
|
960
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
961
|
+
# will be executed.
|
|
947
962
|
#
|
|
948
963
|
# @return [Types::DescribeInstanceAccessControlAttributeConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
|
|
949
964
|
#
|
|
@@ -978,11 +993,11 @@ module Aws::SSOAdmin
|
|
|
978
993
|
# Gets the details of the permission set.
|
|
979
994
|
#
|
|
980
995
|
# @option params [required, String] :instance_arn
|
|
981
|
-
# The ARN of the
|
|
982
|
-
#
|
|
983
|
-
#
|
|
996
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
997
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
998
|
+
# Resource Names (ARNs) and AWS Service
|
|
984
999
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
985
|
-
# *
|
|
1000
|
+
# *AWS General Reference*.
|
|
986
1001
|
#
|
|
987
1002
|
# @option params [required, String] :permission_set_arn
|
|
988
1003
|
# The ARN of the permission set.
|
|
@@ -1020,11 +1035,11 @@ module Aws::SSOAdmin
|
|
|
1020
1035
|
# request.
|
|
1021
1036
|
#
|
|
1022
1037
|
# @option params [required, String] :instance_arn
|
|
1023
|
-
# The ARN of the
|
|
1024
|
-
#
|
|
1025
|
-
#
|
|
1038
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1039
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1040
|
+
# Resource Names (ARNs) and AWS Service
|
|
1026
1041
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1027
|
-
# *
|
|
1042
|
+
# *AWS General Reference*.
|
|
1028
1043
|
#
|
|
1029
1044
|
# @option params [required, String] :provision_permission_set_request_id
|
|
1030
1045
|
# The identifier that is provided by the ProvisionPermissionSet call to
|
|
@@ -1063,16 +1078,16 @@ module Aws::SSOAdmin
|
|
|
1063
1078
|
# PermissionSet.
|
|
1064
1079
|
#
|
|
1065
1080
|
# @option params [required, String] :instance_arn
|
|
1066
|
-
# The ARN of the
|
|
1067
|
-
#
|
|
1081
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1082
|
+
# will be executed.
|
|
1068
1083
|
#
|
|
1069
1084
|
# @option params [required, String] :permission_set_arn
|
|
1070
1085
|
# The ARN of the `PermissionSet`.
|
|
1071
1086
|
#
|
|
1072
1087
|
# @option params [required, Types::CustomerManagedPolicyReference] :customer_managed_policy_reference
|
|
1073
1088
|
# Specifies the name and path of a customer managed policy. You must
|
|
1074
|
-
# have an IAM policy that matches the name and path in each
|
|
1075
|
-
#
|
|
1089
|
+
# have an IAM policy that matches the name and path in each AWS account
|
|
1090
|
+
# where you want to deploy your permission set.
|
|
1076
1091
|
#
|
|
1077
1092
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
1078
1093
|
#
|
|
@@ -1096,22 +1111,21 @@ module Aws::SSOAdmin
|
|
|
1096
1111
|
req.send_request(options)
|
|
1097
1112
|
end
|
|
1098
1113
|
|
|
1099
|
-
# Detaches the attached
|
|
1100
|
-
#
|
|
1114
|
+
# Detaches the attached AWS managed policy ARN from the specified
|
|
1115
|
+
# permission set.
|
|
1101
1116
|
#
|
|
1102
1117
|
# @option params [required, String] :instance_arn
|
|
1103
|
-
# The ARN of the
|
|
1104
|
-
#
|
|
1105
|
-
#
|
|
1118
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1119
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1120
|
+
# Resource Names (ARNs) and AWS Service
|
|
1106
1121
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1107
|
-
# *
|
|
1122
|
+
# *AWS General Reference*.
|
|
1108
1123
|
#
|
|
1109
1124
|
# @option params [required, String] :permission_set_arn
|
|
1110
1125
|
# The ARN of the PermissionSet from which the policy should be detached.
|
|
1111
1126
|
#
|
|
1112
1127
|
# @option params [required, String] :managed_policy_arn
|
|
1113
|
-
# The
|
|
1114
|
-
# permission set.
|
|
1128
|
+
# The AWS managed policy ARN to be detached from a permission set.
|
|
1115
1129
|
#
|
|
1116
1130
|
# @return [Struct] Returns an empty {Seahorse::Client::Response response}.
|
|
1117
1131
|
#
|
|
@@ -1135,11 +1149,11 @@ module Aws::SSOAdmin
|
|
|
1135
1149
|
# Obtains the inline policy assigned to the permission set.
|
|
1136
1150
|
#
|
|
1137
1151
|
# @option params [required, String] :instance_arn
|
|
1138
|
-
# The ARN of the
|
|
1139
|
-
#
|
|
1140
|
-
#
|
|
1152
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1153
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1154
|
+
# Resource Names (ARNs) and AWS Service
|
|
1141
1155
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1142
|
-
# *
|
|
1156
|
+
# *AWS General Reference*.
|
|
1143
1157
|
#
|
|
1144
1158
|
# @option params [required, String] :permission_set_arn
|
|
1145
1159
|
# The ARN of the permission set.
|
|
@@ -1171,8 +1185,8 @@ module Aws::SSOAdmin
|
|
|
1171
1185
|
# Obtains the permissions boundary for a specified PermissionSet.
|
|
1172
1186
|
#
|
|
1173
1187
|
# @option params [required, String] :instance_arn
|
|
1174
|
-
# The ARN of the
|
|
1175
|
-
#
|
|
1188
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1189
|
+
# will be executed.
|
|
1176
1190
|
#
|
|
1177
1191
|
# @option params [required, String] :permission_set_arn
|
|
1178
1192
|
# The ARN of the `PermissionSet`.
|
|
@@ -1203,15 +1217,15 @@ module Aws::SSOAdmin
|
|
|
1203
1217
|
req.send_request(options)
|
|
1204
1218
|
end
|
|
1205
1219
|
|
|
1206
|
-
# Lists the status of the
|
|
1207
|
-
#
|
|
1220
|
+
# Lists the status of the AWS account assignment creation requests for a
|
|
1221
|
+
# specified IAM Identity Center instance.
|
|
1208
1222
|
#
|
|
1209
1223
|
# @option params [required, String] :instance_arn
|
|
1210
|
-
# The ARN of the
|
|
1211
|
-
#
|
|
1212
|
-
#
|
|
1224
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1225
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1226
|
+
# Resource Names (ARNs) and AWS Service
|
|
1213
1227
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1214
|
-
# *
|
|
1228
|
+
# *AWS General Reference*.
|
|
1215
1229
|
#
|
|
1216
1230
|
# @option params [Integer] :max_results
|
|
1217
1231
|
# The maximum number of results to display for the assignment.
|
|
@@ -1258,15 +1272,15 @@ module Aws::SSOAdmin
|
|
|
1258
1272
|
req.send_request(options)
|
|
1259
1273
|
end
|
|
1260
1274
|
|
|
1261
|
-
# Lists the status of the
|
|
1262
|
-
#
|
|
1275
|
+
# Lists the status of the AWS account assignment deletion requests for a
|
|
1276
|
+
# specified IAM Identity Center instance.
|
|
1263
1277
|
#
|
|
1264
1278
|
# @option params [required, String] :instance_arn
|
|
1265
|
-
# The ARN of the
|
|
1266
|
-
#
|
|
1267
|
-
#
|
|
1279
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1280
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1281
|
+
# Resource Names (ARNs) and AWS Service
|
|
1268
1282
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1269
|
-
# *
|
|
1283
|
+
# *AWS General Reference*.
|
|
1270
1284
|
#
|
|
1271
1285
|
# @option params [Integer] :max_results
|
|
1272
1286
|
# The maximum number of results to display for the assignment.
|
|
@@ -1313,19 +1327,18 @@ module Aws::SSOAdmin
|
|
|
1313
1327
|
req.send_request(options)
|
|
1314
1328
|
end
|
|
1315
1329
|
|
|
1316
|
-
# Lists the assignee of the specified
|
|
1317
|
-
#
|
|
1330
|
+
# Lists the assignee of the specified AWS account with the specified
|
|
1331
|
+
# permission set.
|
|
1318
1332
|
#
|
|
1319
1333
|
# @option params [required, String] :instance_arn
|
|
1320
|
-
# The ARN of the
|
|
1321
|
-
#
|
|
1322
|
-
#
|
|
1334
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1335
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1336
|
+
# Resource Names (ARNs) and AWS Service
|
|
1323
1337
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1324
|
-
# *
|
|
1338
|
+
# *AWS General Reference*.
|
|
1325
1339
|
#
|
|
1326
1340
|
# @option params [required, String] :account_id
|
|
1327
|
-
# The identifier of the
|
|
1328
|
-
# the assignments.
|
|
1341
|
+
# The identifier of the AWS account from which to list the assignments.
|
|
1329
1342
|
#
|
|
1330
1343
|
# @option params [required, String] :permission_set_arn
|
|
1331
1344
|
# The ARN of the permission set from which to list assignments.
|
|
@@ -1372,23 +1385,22 @@ module Aws::SSOAdmin
|
|
|
1372
1385
|
req.send_request(options)
|
|
1373
1386
|
end
|
|
1374
1387
|
|
|
1375
|
-
# Lists all the
|
|
1376
|
-
#
|
|
1388
|
+
# Lists all the AWS accounts where the specified permission set is
|
|
1389
|
+
# provisioned.
|
|
1377
1390
|
#
|
|
1378
1391
|
# @option params [required, String] :instance_arn
|
|
1379
|
-
# The ARN of the
|
|
1380
|
-
#
|
|
1381
|
-
#
|
|
1392
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1393
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1394
|
+
# Resource Names (ARNs) and AWS Service
|
|
1382
1395
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1383
|
-
# *
|
|
1396
|
+
# *AWS General Reference*.
|
|
1384
1397
|
#
|
|
1385
1398
|
# @option params [required, String] :permission_set_arn
|
|
1386
|
-
# The ARN of the PermissionSet from which the associated
|
|
1387
|
-
#
|
|
1399
|
+
# The ARN of the PermissionSet from which the associated AWS accounts
|
|
1400
|
+
# will be listed.
|
|
1388
1401
|
#
|
|
1389
1402
|
# @option params [String] :provisioning_status
|
|
1390
|
-
# The permission set provisioning status for an
|
|
1391
|
-
# account.
|
|
1403
|
+
# The permission set provisioning status for an AWS account.
|
|
1392
1404
|
#
|
|
1393
1405
|
# @option params [Integer] :max_results
|
|
1394
1406
|
# The maximum number of results to display for the PermissionSet.
|
|
@@ -1433,8 +1445,8 @@ module Aws::SSOAdmin
|
|
|
1433
1445
|
# PermissionSet.
|
|
1434
1446
|
#
|
|
1435
1447
|
# @option params [required, String] :instance_arn
|
|
1436
|
-
# The ARN of the
|
|
1437
|
-
#
|
|
1448
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1449
|
+
# will be executed.
|
|
1438
1450
|
#
|
|
1439
1451
|
# @option params [required, String] :permission_set_arn
|
|
1440
1452
|
# The ARN of the `PermissionSet`.
|
|
@@ -1478,8 +1490,7 @@ module Aws::SSOAdmin
|
|
|
1478
1490
|
req.send_request(options)
|
|
1479
1491
|
end
|
|
1480
1492
|
|
|
1481
|
-
# Lists the
|
|
1482
|
-
# to.
|
|
1493
|
+
# Lists the IAM Identity Center instances that the caller has access to.
|
|
1483
1494
|
#
|
|
1484
1495
|
# @option params [Integer] :max_results
|
|
1485
1496
|
# The maximum number of results to display for the instance.
|
|
@@ -1518,15 +1529,15 @@ module Aws::SSOAdmin
|
|
|
1518
1529
|
req.send_request(options)
|
|
1519
1530
|
end
|
|
1520
1531
|
|
|
1521
|
-
# Lists the
|
|
1522
|
-
#
|
|
1532
|
+
# Lists the AWS managed policy that is attached to a specified
|
|
1533
|
+
# permission set.
|
|
1523
1534
|
#
|
|
1524
1535
|
# @option params [required, String] :instance_arn
|
|
1525
|
-
# The ARN of the
|
|
1526
|
-
#
|
|
1527
|
-
#
|
|
1536
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1537
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1538
|
+
# Resource Names (ARNs) and AWS Service
|
|
1528
1539
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1529
|
-
# *
|
|
1540
|
+
# *AWS General Reference*.
|
|
1530
1541
|
#
|
|
1531
1542
|
# @option params [required, String] :permission_set_arn
|
|
1532
1543
|
# The ARN of the PermissionSet whose managed policies will be listed.
|
|
@@ -1571,14 +1582,14 @@ module Aws::SSOAdmin
|
|
|
1571
1582
|
end
|
|
1572
1583
|
|
|
1573
1584
|
# Lists the status of the permission set provisioning requests for a
|
|
1574
|
-
# specified
|
|
1585
|
+
# specified IAM Identity Center instance.
|
|
1575
1586
|
#
|
|
1576
1587
|
# @option params [required, String] :instance_arn
|
|
1577
|
-
# The ARN of the
|
|
1578
|
-
#
|
|
1579
|
-
#
|
|
1588
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1589
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1590
|
+
# Resource Names (ARNs) and AWS Service
|
|
1580
1591
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1581
|
-
# *
|
|
1592
|
+
# *AWS General Reference*.
|
|
1582
1593
|
#
|
|
1583
1594
|
# @option params [Integer] :max_results
|
|
1584
1595
|
# The maximum number of results to display for the assignment.
|
|
@@ -1625,14 +1636,14 @@ module Aws::SSOAdmin
|
|
|
1625
1636
|
req.send_request(options)
|
|
1626
1637
|
end
|
|
1627
1638
|
|
|
1628
|
-
# Lists the PermissionSets in an
|
|
1639
|
+
# Lists the PermissionSets in an IAM Identity Center instance.
|
|
1629
1640
|
#
|
|
1630
1641
|
# @option params [required, String] :instance_arn
|
|
1631
|
-
# The ARN of the
|
|
1632
|
-
#
|
|
1633
|
-
#
|
|
1642
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1643
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1644
|
+
# Resource Names (ARNs) and AWS Service
|
|
1634
1645
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1635
|
-
# *
|
|
1646
|
+
# *AWS General Reference*.
|
|
1636
1647
|
#
|
|
1637
1648
|
# @option params [String] :next_token
|
|
1638
1649
|
# The pagination token for the list API. Initially the value is null.
|
|
@@ -1671,19 +1682,18 @@ module Aws::SSOAdmin
|
|
|
1671
1682
|
req.send_request(options)
|
|
1672
1683
|
end
|
|
1673
1684
|
|
|
1674
|
-
# Lists all the permission sets that are provisioned to a specified
|
|
1675
|
-
#
|
|
1685
|
+
# Lists all the permission sets that are provisioned to a specified AWS
|
|
1686
|
+
# account.
|
|
1676
1687
|
#
|
|
1677
1688
|
# @option params [required, String] :instance_arn
|
|
1678
|
-
# The ARN of the
|
|
1679
|
-
#
|
|
1680
|
-
#
|
|
1689
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1690
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1691
|
+
# Resource Names (ARNs) and AWS Service
|
|
1681
1692
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1682
|
-
# *
|
|
1693
|
+
# *AWS General Reference*.
|
|
1683
1694
|
#
|
|
1684
1695
|
# @option params [required, String] :account_id
|
|
1685
|
-
# The identifier of the
|
|
1686
|
-
# the assignments.
|
|
1696
|
+
# The identifier of the AWS account from which to list the assignments.
|
|
1687
1697
|
#
|
|
1688
1698
|
# @option params [String] :provisioning_status
|
|
1689
1699
|
# The status object for the permission set provisioning operation.
|
|
@@ -1730,11 +1740,11 @@ module Aws::SSOAdmin
|
|
|
1730
1740
|
# Lists the tags that are attached to a specified resource.
|
|
1731
1741
|
#
|
|
1732
1742
|
# @option params [required, String] :instance_arn
|
|
1733
|
-
# The ARN of the
|
|
1734
|
-
#
|
|
1735
|
-
#
|
|
1743
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1744
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1745
|
+
# Resource Names (ARNs) and AWS Service
|
|
1736
1746
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1737
|
-
# *
|
|
1747
|
+
# *AWS General Reference*.
|
|
1738
1748
|
#
|
|
1739
1749
|
# @option params [required, String] :resource_arn
|
|
1740
1750
|
# The ARN of the resource with the tags to be listed.
|
|
@@ -1778,18 +1788,18 @@ module Aws::SSOAdmin
|
|
|
1778
1788
|
# specified target.
|
|
1779
1789
|
#
|
|
1780
1790
|
# @option params [required, String] :instance_arn
|
|
1781
|
-
# The ARN of the
|
|
1782
|
-
#
|
|
1783
|
-
#
|
|
1791
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1792
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1793
|
+
# Resource Names (ARNs) and AWS Service
|
|
1784
1794
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1785
|
-
# *
|
|
1795
|
+
# *AWS General Reference*.
|
|
1786
1796
|
#
|
|
1787
1797
|
# @option params [required, String] :permission_set_arn
|
|
1788
1798
|
# The ARN of the permission set.
|
|
1789
1799
|
#
|
|
1790
1800
|
# @option params [String] :target_id
|
|
1791
|
-
# TargetID is an
|
|
1792
|
-
#
|
|
1801
|
+
# TargetID is an AWS account identifier, typically a 10-12 digit string
|
|
1802
|
+
# (For example, 123456789012).
|
|
1793
1803
|
#
|
|
1794
1804
|
# @option params [required, String] :target_type
|
|
1795
1805
|
# The entity type for which the assignment will be created.
|
|
@@ -1835,11 +1845,11 @@ module Aws::SSOAdmin
|
|
|
1835
1845
|
# </note>
|
|
1836
1846
|
#
|
|
1837
1847
|
# @option params [required, String] :instance_arn
|
|
1838
|
-
# The ARN of the
|
|
1839
|
-
#
|
|
1840
|
-
#
|
|
1848
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1849
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1850
|
+
# Resource Names (ARNs) and AWS Service
|
|
1841
1851
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1842
|
-
# *
|
|
1852
|
+
# *AWS General Reference*.
|
|
1843
1853
|
#
|
|
1844
1854
|
# @option params [required, String] :permission_set_arn
|
|
1845
1855
|
# The ARN of the permission set.
|
|
@@ -1866,12 +1876,12 @@ module Aws::SSOAdmin
|
|
|
1866
1876
|
req.send_request(options)
|
|
1867
1877
|
end
|
|
1868
1878
|
|
|
1869
|
-
# Attaches an
|
|
1870
|
-
#
|
|
1879
|
+
# Attaches an AWS managed or customer managed policy to the specified
|
|
1880
|
+
# PermissionSet as a permissions boundary.
|
|
1871
1881
|
#
|
|
1872
1882
|
# @option params [required, String] :instance_arn
|
|
1873
|
-
# The ARN of the
|
|
1874
|
-
#
|
|
1883
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1884
|
+
# will be executed.
|
|
1875
1885
|
#
|
|
1876
1886
|
# @option params [required, String] :permission_set_arn
|
|
1877
1887
|
# The ARN of the `PermissionSet`.
|
|
@@ -1907,11 +1917,11 @@ module Aws::SSOAdmin
|
|
|
1907
1917
|
# Associates a set of tags with a specified resource.
|
|
1908
1918
|
#
|
|
1909
1919
|
# @option params [required, String] :instance_arn
|
|
1910
|
-
# The ARN of the
|
|
1911
|
-
#
|
|
1912
|
-
#
|
|
1920
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1921
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1922
|
+
# Resource Names (ARNs) and AWS Service
|
|
1913
1923
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1914
|
-
# *
|
|
1924
|
+
# *AWS General Reference*.
|
|
1915
1925
|
#
|
|
1916
1926
|
# @option params [required, String] :resource_arn
|
|
1917
1927
|
# The ARN of the resource with the tags to be listed.
|
|
@@ -1946,11 +1956,11 @@ module Aws::SSOAdmin
|
|
|
1946
1956
|
# Disassociates a set of tags from a specified resource.
|
|
1947
1957
|
#
|
|
1948
1958
|
# @option params [required, String] :instance_arn
|
|
1949
|
-
# The ARN of the
|
|
1950
|
-
#
|
|
1951
|
-
#
|
|
1959
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
1960
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
1961
|
+
# Resource Names (ARNs) and AWS Service
|
|
1952
1962
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
1953
|
-
# *
|
|
1963
|
+
# *AWS General Reference*.
|
|
1954
1964
|
#
|
|
1955
1965
|
# @option params [required, String] :resource_arn
|
|
1956
1966
|
# The ARN of the resource with the tags to be listed.
|
|
@@ -1977,21 +1987,21 @@ module Aws::SSOAdmin
|
|
|
1977
1987
|
req.send_request(options)
|
|
1978
1988
|
end
|
|
1979
1989
|
|
|
1980
|
-
# Updates the
|
|
1981
|
-
#
|
|
1982
|
-
#
|
|
1990
|
+
# Updates the IAM Identity Center identity store attributes that you can
|
|
1991
|
+
# use with the IAM Identity Center instance for attributes-based access
|
|
1992
|
+
# control (ABAC). When using an external identity provider as an
|
|
1983
1993
|
# identity source, you can pass attributes through the SAML assertion as
|
|
1984
|
-
# an alternative to configuring attributes from the
|
|
1985
|
-
#
|
|
1986
|
-
#
|
|
1987
|
-
# the
|
|
1988
|
-
#
|
|
1989
|
-
# Control](/singlesignon/latest/userguide/abac.html) in the *
|
|
1990
|
-
#
|
|
1994
|
+
# an alternative to configuring attributes from the IAM Identity Center
|
|
1995
|
+
# identity store. If a SAML assertion passes any of these attributes,
|
|
1996
|
+
# IAM Identity Center replaces the attribute value with the value from
|
|
1997
|
+
# the IAM Identity Center identity store. For more information about
|
|
1998
|
+
# ABAC, see [Attribute-Based Access
|
|
1999
|
+
# Control](/singlesignon/latest/userguide/abac.html) in the *IAM
|
|
2000
|
+
# Identity Center User Guide*.
|
|
1991
2001
|
#
|
|
1992
2002
|
# @option params [required, String] :instance_arn
|
|
1993
|
-
# The ARN of the
|
|
1994
|
-
#
|
|
2003
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
2004
|
+
# will be executed.
|
|
1995
2005
|
#
|
|
1996
2006
|
# @option params [required, Types::InstanceAccessControlAttributeConfiguration] :instance_access_control_attribute_configuration
|
|
1997
2007
|
# Updates the attributes for your ABAC configuration.
|
|
@@ -2026,11 +2036,11 @@ module Aws::SSOAdmin
|
|
|
2026
2036
|
# Updates an existing permission set.
|
|
2027
2037
|
#
|
|
2028
2038
|
# @option params [required, String] :instance_arn
|
|
2029
|
-
# The ARN of the
|
|
2030
|
-
#
|
|
2031
|
-
#
|
|
2039
|
+
# The ARN of the IAM Identity Center instance under which the operation
|
|
2040
|
+
# will be executed. For more information about ARNs, see [Amazon
|
|
2041
|
+
# Resource Names (ARNs) and AWS Service
|
|
2032
2042
|
# Namespaces](/general/latest/gr/aws-arns-and-namespaces.html) in the
|
|
2033
|
-
# *
|
|
2043
|
+
# *AWS General Reference*.
|
|
2034
2044
|
#
|
|
2035
2045
|
# @option params [required, String] :permission_set_arn
|
|
2036
2046
|
# The ARN of the permission set.
|
|
@@ -2080,7 +2090,7 @@ module Aws::SSOAdmin
|
|
|
2080
2090
|
params: params,
|
|
2081
2091
|
config: config)
|
|
2082
2092
|
context[:gem_name] = 'aws-sdk-ssoadmin'
|
|
2083
|
-
context[:gem_version] = '1.
|
|
2093
|
+
context[:gem_version] = '1.21.0'
|
|
2084
2094
|
Seahorse::Client::Request.new(handlers, context)
|
|
2085
2095
|
end
|
|
2086
2096
|
|