@alicloud/cloudsso20210515 1.5.2 → 1.5.4

package/src/models/GetMfaauthenticationSettingInfoResponseBody.ts

@@ -1,17 +1,72 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo } from "./GetMfaauthenticationSettingInfoResponseBodyMfaauthenticationSettingInfo";
 
 
+export class GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo extends $dara.Model {
+  allowedVerificationTypes?: string[];
+  /**
+   * @remarks
+   * The global MFA verification policy. Valid values:
+   * 
+   * - Enabled: MFA verification is enabled for all users.
+   * - Byuser: MFA verification depends on the independent MFA configuration of each user. For more information about user-specific MFA configuration, see [UpdateUserMFAAuthenticationSettings](https://help.aliyun.com/document_detail/450135.html).
+   * - Disabled: MFA verification is disabled for all users.
+   * - OnlyRiskyLogin: MFA verification is required only for unusual logon attempts.
+   * 
+   * @example
+   * OnlyRiskyLogin
+   */
+  mfaAuthenticationAdvanceSettings?: string;
+  /**
+   * @remarks
+   * The MFA verification policy for unusual logon attempts. Valid values:
+   * 
+   * - Autonomous: Users can skip MFA binding during unusual logon, but users who have already bound MFA must complete verification.
+   * - EnforceVerify: Users are required to bind or verify MFA during unusual logon.
+   * 
+   * > This parameter is displayed only when MfaAuthenticationAdvanceSettings is set to Byuser or OnlyRiskyLogin.
+   * 
+   * @example
+   * EnforceVerify
+   */
+  operationForRiskLogin?: string;
+  static names(): { [key: string]: string } {
+    return {
+      allowedVerificationTypes: 'AllowedVerificationTypes',
+      mfaAuthenticationAdvanceSettings: 'MfaAuthenticationAdvanceSettings',
+      operationForRiskLogin: 'OperationForRiskLogin',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      allowedVerificationTypes: { 'type': 'array', 'itemType': 'string' },
+      mfaAuthenticationAdvanceSettings: 'string',
+      operationForRiskLogin: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.allowedVerificationTypes)) {
+      $dara.Model.validateArray(this.allowedVerificationTypes);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetMFAAuthenticationSettingInfoResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The MFA setting of all users.
+   * The global MFA verification configuration.
    */
   MFAAuthenticationSettingInfo?: GetMFAAuthenticationSettingInfoResponseBodyMFAAuthenticationSettingInfo;
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 95D3B107-DA80-5B34-A3D0-9E82F8F0DA0E

package/src/models/GetPasswordPolicyResponseBody.ts

@@ -1,8 +1,179 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetPasswordPolicyResponseBodyPasswordPolicy } from "./GetPasswordPolicyResponseBodyPasswordPolicy";
 
 
+export class GetPasswordPolicyResponseBodyPasswordPolicy extends $dara.Model {
+  /**
+   * @remarks
+   * Indicates whether to disable logon after a password expires. Valid values:
+   * 
+   * *   true: disables logon after a password expires.
+   * *   false: does not disable logon after a password expires.
+   * 
+   * @example
+   * true
+   */
+  hardExpire?: boolean;
+  /**
+   * @remarks
+   * The number of password retries.
+   * 
+   * If wrong passwords are entered for the specified consecutive times, the account is locked for 1 hour.
+   * 
+   * Valid values: 0 to 32. The value 0 indicates that the number of password retries is not limited.
+   * 
+   * @example
+   * 5
+   */
+  maxLoginAttempts?: number;
+  /**
+   * @remarks
+   * The validity period of a password.
+   * 
+   * Valid values: 1 to 120. Unit: days.
+   * 
+   * @example
+   * 90
+   */
+  maxPasswordAge?: number;
+  /**
+   * @remarks
+   * The maximum password length.
+   * 
+   * @example
+   * 32
+   */
+  maxPasswordLength?: number;
+  /**
+   * @remarks
+   * The minimum number of different characters in a password.
+   * 
+   * The minimum value is 0, which indicates that the minimum number of different characters in a password is not limited. The maximum value is the value of the `MinPasswordLength` parameter.
+   * 
+   * @example
+   * 8
+   */
+  minPasswordDifferentChars?: number;
+  /**
+   * @remarks
+   * The minimum password length.
+   * 
+   * Valid values: 8 to 32 characters.
+   * 
+   * @example
+   * 8
+   */
+  minPasswordLength?: number;
+  /**
+   * @remarks
+   * Indicates whether to exclude the username from the password. Valid values:
+   * 
+   * *   true: A password cannot contain the username.
+   * *   false: A password can contain the username.
+   * 
+   * @example
+   * true
+   */
+  passwordNotContainUsername?: boolean;
+  /**
+   * @remarks
+   * The policy for password history check.
+   * 
+   * The previous N passwords cannot be reused. Valid values of N: 0 to 24. The value 0 indicates that all historical passwords can be reused.
+   * 
+   * >  Passwords that are generated before January 5, 2024 are not counted as historical passwords.
+   * 
+   * @example
+   * 1
+   */
+  passwordReusePrevention?: number;
+  /**
+   * @remarks
+   * Indicates whether lowercase letters are required in a password. Valid values:
+   * 
+   * *   true: Lowercase letters are required in a password.
+   * *   false: Lowercase letters are not required in a password.
+   * 
+   * @example
+   * true
+   */
+  requireLowerCaseChars?: boolean;
+  /**
+   * @remarks
+   * Indicates whether digits are required in a password. Valid values:
+   * 
+   * *   true: Digits are required in a password.
+   * *   false: Digits are not required in a password.
+   * 
+   * @example
+   * true
+   */
+  requireNumbers?: boolean;
+  /**
+   * @remarks
+   * Indicates whether special characters are required in a password. Valid values:
+   * 
+   * *   true: Special characters are required in a password.
+   * *   false: Special characters are not required in a password.
+   * 
+   * @example
+   * true
+   */
+  requireSymbols?: boolean;
+  /**
+   * @remarks
+   * Indicates whether uppercase letters are required in a password. Valid values:
+   * 
+   * *   true: Uppercase letters are required in a password.
+   * *   false: Uppercase letters are not required in a password.
+   * 
+   * @example
+   * true
+   */
+  requireUpperCaseChars?: boolean;
+  static names(): { [key: string]: string } {
+    return {
+      hardExpire: 'HardExpire',
+      maxLoginAttempts: 'MaxLoginAttempts',
+      maxPasswordAge: 'MaxPasswordAge',
+      maxPasswordLength: 'MaxPasswordLength',
+      minPasswordDifferentChars: 'MinPasswordDifferentChars',
+      minPasswordLength: 'MinPasswordLength',
+      passwordNotContainUsername: 'PasswordNotContainUsername',
+      passwordReusePrevention: 'PasswordReusePrevention',
+      requireLowerCaseChars: 'RequireLowerCaseChars',
+      requireNumbers: 'RequireNumbers',
+      requireSymbols: 'RequireSymbols',
+      requireUpperCaseChars: 'RequireUpperCaseChars',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      hardExpire: 'boolean',
+      maxLoginAttempts: 'number',
+      maxPasswordAge: 'number',
+      maxPasswordLength: 'number',
+      minPasswordDifferentChars: 'number',
+      minPasswordLength: 'number',
+      passwordNotContainUsername: 'boolean',
+      passwordReusePrevention: 'number',
+      requireLowerCaseChars: 'boolean',
+      requireNumbers: 'boolean',
+      requireSymbols: 'boolean',
+      requireUpperCaseChars: 'boolean',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetPasswordPolicyResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetServiceStatusResponseBody.ts

@@ -1,8 +1,77 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetServiceStatusResponseBodyServiceStatus } from "./GetServiceStatusResponseBodyServiceStatus";
 
 
+export class GetServiceStatusResponseBodyServiceStatus extends $dara.Model {
+  /**
+   * @remarks
+   * The ID of your Alibaba Cloud account.
+   * 
+   * @example
+   * 151266687691****
+   */
+  accountId?: string;
+  /**
+   * @remarks
+   * Indicates whether the prerequisites for enabling CloudSSO are met. Valid values:
+   * 
+   * - Success: The prerequisites are met.
+   * 
+   * - Failed: The prerequisites are not met.
+   * 
+   * > The value of this parameter is returned only if the value of `Status` is `Disabled`.
+   * 
+   * @example
+   * Success
+   */
+  prerequisiteCheckResult?: string;
+  /**
+   * @remarks
+   * The IDs of regions where directories are deployed.
+   */
+  regionsInUse?: string[];
+  /**
+   * @remarks
+   * The status of CloudSSO. Valid values:
+   * 
+   * - Enabled
+   * 
+   * - Disabled
+   * 
+   * @example
+   * Enabled
+   */
+  status?: string;
+  static names(): { [key: string]: string } {
+    return {
+      accountId: 'AccountId',
+      prerequisiteCheckResult: 'PrerequisiteCheckResult',
+      regionsInUse: 'RegionsInUse',
+      status: 'Status',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      accountId: 'string',
+      prerequisiteCheckResult: 'string',
+      regionsInUse: { 'type': 'array', 'itemType': 'string' },
+      status: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.regionsInUse)) {
+      $dara.Model.validateArray(this.regionsInUse);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetServiceStatusResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetTaskResponseBody.ts

@@ -1,8 +1,202 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetTaskResponseBodyTask } from "./GetTaskResponseBodyTask";
 
 
+export class GetTaskResponseBodyTask extends $dara.Model {
+  /**
+   * @remarks
+   * The ID of the access configuration.
+   * 
+   * @example
+   * ac-00jhtfl8thteu6uj****
+   */
+  accessConfigurationId?: string;
+  /**
+   * @remarks
+   * The name of the access configuration.
+   * 
+   * @example
+   * ECS-Admin
+   */
+  accessConfigurationName?: string;
+  /**
+   * @remarks
+   * The end time of the task.
+   * 
+   * @example
+   * 2021-11-05T02:58:08Z
+   */
+  endTime?: string;
+  /**
+   * @remarks
+   * The cause of the task failure.
+   * 
+   * >  This parameter is returned only when the value of `Status` is `Failed`.
+   * 
+   * @example
+   * No Permission.
+   */
+  failureReason?: string;
+  /**
+   * @example
+   * 17xxxxxxxxxxxx73
+   */
+  originTargetId?: string;
+  /**
+   * @remarks
+   * The ID of the CloudSSO identity.
+   * 
+   * @example
+   * u-00q8wbq42wiltcrk****
+   */
+  principalId?: string;
+  /**
+   * @remarks
+   * The name of the CloudSSO identity.
+   * 
+   * @example
+   * Alice
+   */
+  principalName?: string;
+  /**
+   * @remarks
+   * The type of the CloudSSO identity. Valid values:
+   * 
+   * *   User
+   * *   Group
+   * 
+   * @example
+   * User
+   */
+  principalType?: string;
+  /**
+   * @remarks
+   * The start time of the task.
+   * 
+   * @example
+   * 2021-11-05T02:58:07Z
+   */
+  startTime?: string;
+  /**
+   * @remarks
+   * The task status. Valid values:
+   * 
+   * *   InProgress: The task is running.
+   * *   Success: The task is successful.
+   * *   Failed: The task failed.
+   * 
+   * @example
+   * Success
+   */
+  status?: string;
+  /**
+   * @remarks
+   * The ID of the task object.
+   * 
+   * @example
+   * 114240524784****
+   */
+  targetId?: string;
+  /**
+   * @remarks
+   * The name of the task object.
+   * 
+   * @example
+   * dev-test
+   */
+  targetName?: string;
+  /**
+   * @remarks
+   * The path ID of the task object in the resource directory.
+   */
+  targetPath?: string;
+  /**
+   * @remarks
+   * The path name of the task object in the resource directory.
+   */
+  targetPathName?: string;
+  /**
+   * @remarks
+   * The type of the task object. The value is fixed as RD-Account, which indicates the accounts in the resource directory.
+   * 
+   * @example
+   * RD-Account
+   */
+  targetType?: string;
+  /**
+   * @remarks
+   * The task ID.
+   * 
+   * @example
+   * t-shfqw1u1edszvxw5****
+   */
+  taskId?: string;
+  /**
+   * @remarks
+   * The task type. Valid values:
+   * 
+   * *   ProvisionAccessConfiguration: An access configuration is provisioned.
+   * *   DeprovisionAccessConfiguration: An access configuration is de-provisioned.
+   * *   CreateAccessAssignment: Access permissions on an account in the resource directory are assigned.
+   * *   DeleteAccessAssignment: Access permissions on an account in the resource directory are removed.
+   * 
+   * @example
+   * DeleteAccessAssignment
+   */
+  taskType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      accessConfigurationId: 'AccessConfigurationId',
+      accessConfigurationName: 'AccessConfigurationName',
+      endTime: 'EndTime',
+      failureReason: 'FailureReason',
+      originTargetId: 'OriginTargetId',
+      principalId: 'PrincipalId',
+      principalName: 'PrincipalName',
+      principalType: 'PrincipalType',
+      startTime: 'StartTime',
+      status: 'Status',
+      targetId: 'TargetId',
+      targetName: 'TargetName',
+      targetPath: 'TargetPath',
+      targetPathName: 'TargetPathName',
+      targetType: 'TargetType',
+      taskId: 'TaskId',
+      taskType: 'TaskType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      accessConfigurationId: 'string',
+      accessConfigurationName: 'string',
+      endTime: 'string',
+      failureReason: 'string',
+      originTargetId: 'string',
+      principalId: 'string',
+      principalName: 'string',
+      principalType: 'string',
+      startTime: 'string',
+      status: 'string',
+      targetId: 'string',
+      targetName: 'string',
+      targetPath: 'string',
+      targetPathName: 'string',
+      targetType: 'string',
+      taskId: 'string',
+      taskType: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetTaskResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetTaskStatusResponseBody.ts

@@ -1,8 +1,98 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetTaskStatusResponseBodyTaskStatus } from "./GetTaskStatusResponseBodyTaskStatus";
 
 
+export class GetTaskStatusResponseBodyTaskStatus extends $dara.Model {
+  /**
+   * @remarks
+   * The end time of the task.
+   * 
+   * @example
+   * 2021-11-05T02:58:08Z
+   */
+  endTime?: string;
+  /**
+   * @remarks
+   * The cause of the task failure.
+   * 
+   * >  This parameter is returned only when the value of `Status` is `Failed`.
+   * 
+   * @example
+   * No Permission.
+   */
+  failureReason?: string;
+  /**
+   * @remarks
+   * The start time of the task.
+   * 
+   * @example
+   * 2021-11-05T02:58:07Z
+   */
+  startTime?: string;
+  /**
+   * @remarks
+   * The task status. Valid values:
+   * 
+   * *   InProgress: The task is running.
+   * *   Success: The task is successful.
+   * *   Failed: The task failed.
+   * 
+   * @example
+   * Success
+   */
+  status?: string;
+  /**
+   * @remarks
+   * The task ID.
+   * 
+   * @example
+   * t-shfqw1u1edszvxw5****
+   */
+  taskId?: string;
+  /**
+   * @remarks
+   * The task type. Valid values:
+   * 
+   * *   ProvisionAccessConfiguration: An access configuration is provisioned.
+   * *   DeprovisionAccessConfiguration: An access configuration is de-provisioned.
+   * *   CreateAccessAssignment: Access permissions on an account in the resource directory are assigned.
+   * *   DeleteAccessAssignment: Access permissions on an account in the resource directory are removed.
+   * 
+   * @example
+   * DeleteAccessAssignment
+   */
+  taskType?: string;
+  static names(): { [key: string]: string } {
+    return {
+      endTime: 'EndTime',
+      failureReason: 'FailureReason',
+      startTime: 'StartTime',
+      status: 'Status',
+      taskId: 'TaskId',
+      taskType: 'TaskType',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      endTime: 'string',
+      failureReason: 'string',
+      startTime: 'string',
+      status: 'string',
+      taskId: 'string',
+      taskType: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetTaskStatusResponseBody extends $dara.Model {
   /**
    * @remarks

package/src/models/GetUserIdRequest.ts

@@ -1,8 +1,47 @@
 // This file is auto-generated, don't edit it
 import * as $dara from '@darabonba/typescript';
-import { GetUserIdRequestExternalId } from "./GetUserIdRequestExternalId";
 
 
+export class GetUserIdRequestExternalId extends $dara.Model {
+  /**
+   * @remarks
+   * The identifier of the user that is synchronized from an external IdP.
+   * 
+   * @example
+   * c73******a5fdd5
+   */
+  id?: string;
+  /**
+   * @remarks
+   * The method for external identity synchronization. Only System for Cross-domain Identity Management (SCIM) synchronization is supported.
+   * 
+   * @example
+   * SCIM
+   */
+  issuer?: string;
+  static names(): { [key: string]: string } {
+    return {
+      id: 'Id',
+      issuer: 'Issuer',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      id: 'string',
+      issuer: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetUserIdRequest extends $dara.Model {
   /**
    * @remarks