@alicloud/eiam20211201 2.17.1 → 2.17.2

package/src/models/AddApplicationAccountToUserRequest.ts

@@ -15,7 +15,7 @@ export class AddApplicationAccountToUserRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The name of the application account.
+   * The application account name.
    * 
    * This parameter is required.
    * 

package/src/models/AddApplicationAccountToUserResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AddApplicationAccountToUserResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application account.
+   * The application account ID.
    * 
    * @example
    * aac_m6z7awz5kresi2ezgajsbkxxxx

package/src/models/AuthorizeApplicationToGroupsRequest.ts

@@ -15,7 +15,7 @@ export class AuthorizeApplicationToGroupsRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * 应用角色ID。
+   * The application role ID.
    * 
    * @example
    * app_role_mkv7rgt4ds8d8v0qtzev2mxxxx
@@ -23,7 +23,7 @@ export class AuthorizeApplicationToGroupsRequest extends $dara.Model {
   applicationRoleId?: string;
   /**
    * @remarks
-   * The list of group IDs. You can specify up to 100 group IDs.
+   * The list of group IDs. You can specify up to 100 group IDs in a single request.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeApplicationToUsersRequest.ts

@@ -15,7 +15,7 @@ export class AuthorizeApplicationToUsersRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * 应用角色ID。
+   * The application role ID.
    * 
    * @example
    * app_role_mkv7rgt4ds8d8v0qtzev2mxxxx
@@ -33,7 +33,7 @@ export class AuthorizeApplicationToUsersRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The IDs of the users. A single request can contain up to 100 user IDs.
+   * The list of account IDs. You can specify up to 100 account IDs in a single request.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeResourceServerScopesToClientRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AuthorizeResourceServerScopesToClientRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the client application.
+   * The unique identifier of the Client application.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class AuthorizeResourceServerScopesToClientRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The ID of the resource server application.
+   * The unique identifier of the ResourceServer application.
    * 
    * This parameter is required.
    * 
@@ -35,7 +35,7 @@ export class AuthorizeResourceServerScopesToClientRequest extends $dara.Model {
   resourceServerApplicationId?: string;
   /**
    * @remarks
-   * The list of scope permission IDs for the resource server.
+   * The list of Scope permission IDs under the ResourceServer.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeResourceServerScopesToGroupRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AuthorizeResourceServerScopesToGroupRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the ResourceServer application.
+   * The application ID of the ResourceServer.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class AuthorizeResourceServerScopesToGroupRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * A client-generated token that you must make unique among different requests to ensure idempotence. ClientToken can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 
@@ -45,7 +45,7 @@ export class AuthorizeResourceServerScopesToGroupRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * A list of Scope permission IDs under the ResourceServer.
+   * The list of Scope permission IDs under the ResourceServer.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeResourceServerScopesToOrganizationalUnitRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AuthorizeResourceServerScopesToOrganizationalUnitRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the resource server application.
+   * The application ID of the ResourceServer.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class AuthorizeResourceServerScopesToOrganizationalUnitRequest extends $d
   applicationId?: string;
   /**
    * @remarks
-   * A client token to ensure the idempotence of the request. Generate a unique value from your client. This token can contain only ASCII characters and must be no more than 64 characters long. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 
@@ -35,7 +35,7 @@ export class AuthorizeResourceServerScopesToOrganizationalUnitRequest extends $d
   instanceId?: string;
   /**
    * @remarks
-   * The organization ID.
+   * The organizational unit ID.
    * 
    * This parameter is required.
    * 
@@ -45,7 +45,7 @@ export class AuthorizeResourceServerScopesToOrganizationalUnitRequest extends $d
   organizationalUnitId?: string;
   /**
    * @remarks
-   * A list of scope permission IDs for the resource server.
+   * The list of scope permission IDs under the ResourceServer.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeResourceServerScopesToUserRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AuthorizeResourceServerScopesToUserRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the resource server application.
+   * The application ID of the ResourceServer.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class AuthorizeResourceServerScopesToUserRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * Ensures the idempotence of the request. Generate a parameter value from your client to make sure that the value is unique among different requests. ClientToken can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/en/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 
@@ -35,7 +35,7 @@ export class AuthorizeResourceServerScopesToUserRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * A list of scope permission IDs under the resource server.
+   * The list of Scope permission IDs under the ResourceServer.
    * 
    * This parameter is required.
    * 
@@ -45,7 +45,7 @@ export class AuthorizeResourceServerScopesToUserRequest extends $dara.Model {
   resourceServerScopeIds?: string[];
   /**
    * @remarks
-   * The ID of the account.
+   * The account ID.
    * 
    * This parameter is required.
    * 

package/src/models/AuthorizeResourceServerToClientRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class AuthorizeResourceServerToClientRequest extends $dara.Model {
   /**
    * @remarks
-   * The unique ID of the client application.
+   * The unique identifier of the Client application.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class AuthorizeResourceServerToClientRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The ID of the resource server application.
+   * The ID of the ResourceServer application.
    * 
    * This parameter is required.
    * 

package/src/models/CheckApplicationProvisioningUserPrimaryOrganizationalUnitResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class CheckApplicationProvisioningUserPrimaryOrganizationalUnitResponseBodyCheckApplicationProvisioningUserPrimaryOuResult extends $dara.Model {
   /**
    * @remarks
-   * Indicates if the authorization is granted.
+   * Indicates whether authorization is allowed.
    */
   allowAuthorization?: boolean;
   /**

package/src/models/CreateApplicationClientSecretRequest.ts

@@ -15,7 +15,7 @@ export class CreateApplicationClientSecretRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The expiration time. This parameter is a UNIX timestamp. Unit: milliseconds. If you leave this parameter empty, the client secret does not expire. The minimum validity period is 1 day and the maximum validity period is 3 years.
+   * The expiration time in UNIX timestamp format, in milliseconds. If this parameter is left empty, the client secret is permanently valid. The minimum validity period that you can set is 1 day, and the maximum validity period is 3 years.
    * 
    * @example
    * 1735530123762

package/src/models/CreateApplicationClientSecretResponseBody.ts

@@ -13,7 +13,7 @@ export class CreateApplicationClientSecretResponseBodyApplicationClientSecret ex
   clientId?: string;
   /**
    * @remarks
-   * The value of the client secret.
+   * The client secret of the application.
    * 
    * @example
    * CSEHDcHcrUKHw1CuxkJEHPveWRXBGqVqRsxxxx
@@ -21,7 +21,7 @@ export class CreateApplicationClientSecretResponseBodyApplicationClientSecret ex
   clientSecret?: string;
   /**
    * @remarks
-   * The ID of the client secret.
+   * The client secret ID of the application.
    * 
    * @example
    * sci_k52x2ru63rlkflina5utgkxxxx
@@ -55,7 +55,7 @@ export class CreateApplicationClientSecretResponseBodyApplicationClientSecret ex
 export class CreateApplicationClientSecretResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The information about the client secret.
+   * The client secret information.
    */
   applicationClientSecret?: CreateApplicationClientSecretResponseBodyApplicationClientSecret;
   /**

package/src/models/CreateApplicationFederatedCredentialRequest.ts

@@ -42,10 +42,254 @@ export class CreateApplicationFederatedCredentialRequestAttributeMappings extend
   }
 }
 
+export class CreateApplicationFederatedCredentialRequestOidcVerificationConfigAzureVmConfig extends $dara.Model {
+  principalId?: string;
+  resourceGroupName?: string;
+  subscriptionId?: string;
+  vmNames?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      principalId: 'PrincipalId',
+      resourceGroupName: 'ResourceGroupName',
+      subscriptionId: 'SubscriptionId',
+      vmNames: 'VmNames',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      principalId: 'string',
+      resourceGroupName: 'string',
+      subscriptionId: 'string',
+      vmNames: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.vmNames)) {
+      $dara.Model.validateArray(this.vmNames);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateApplicationFederatedCredentialRequestOidcVerificationConfigGcpVmConfig extends $dara.Model {
+  instanceIds?: string[];
+  projectId?: string;
+  /**
+   * @remarks
+   * The sub claim that corresponds to the service account.
+   * 
+   * @example
+   * 123456789
+   */
+  serviceAccountId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      instanceIds: 'InstanceIds',
+      projectId: 'ProjectId',
+      serviceAccountId: 'ServiceAccountId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      instanceIds: { 'type': 'array', 'itemType': 'string' },
+      projectId: 'string',
+      serviceAccountId: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.instanceIds)) {
+      $dara.Model.validateArray(this.instanceIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateApplicationFederatedCredentialRequestOidcVerificationConfigGenericConfig extends $dara.Model {
+  subject?: string;
+  static names(): { [key: string]: string } {
+    return {
+      subject: 'Subject',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      subject: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateApplicationFederatedCredentialRequestOidcVerificationConfigKubernetesConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The Kubernetes namespace.
+   * 
+   * @example
+   * default
+   */
+  namespace?: string;
+  /**
+   * @remarks
+   * The pod name prefix.
+   * 
+   * @example
+   * my-pod-
+   */
+  podNamePrefix?: string;
+  /**
+   * @remarks
+   * The Kubernetes service account name.
+   * 
+   * @example
+   * my-sa
+   */
+  serviceAccountName?: string;
+  static names(): { [key: string]: string } {
+    return {
+      namespace: 'Namespace',
+      podNamePrefix: 'PodNamePrefix',
+      serviceAccountName: 'ServiceAccountName',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      namespace: 'string',
+      podNamePrefix: 'string',
+      serviceAccountName: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateApplicationFederatedCredentialRequestOidcVerificationConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The Azure VM scenario configuration.
+   */
+  azureVmConfig?: CreateApplicationFederatedCredentialRequestOidcVerificationConfigAzureVmConfig;
+  /**
+   * @remarks
+   * The GCP VM scenario configuration.
+   */
+  gcpVmConfig?: CreateApplicationFederatedCredentialRequestOidcVerificationConfigGcpVmConfig;
+  genericConfig?: CreateApplicationFederatedCredentialRequestOidcVerificationConfigGenericConfig;
+  /**
+   * @remarks
+   * The Kubernetes scenario configuration.
+   */
+  kubernetesConfig?: CreateApplicationFederatedCredentialRequestOidcVerificationConfigKubernetesConfig;
+  /**
+   * @remarks
+   * The OIDC scenario profile. Valid values:
+   * 
+   * - generic
+   * - kubernetes
+   * - gcp_vm
+   * - azure_vm
+   * 
+   * @example
+   * kubernetes
+   */
+  profile?: string;
+  static names(): { [key: string]: string } {
+    return {
+      azureVmConfig: 'AzureVmConfig',
+      gcpVmConfig: 'GcpVmConfig',
+      genericConfig: 'GenericConfig',
+      kubernetesConfig: 'KubernetesConfig',
+      profile: 'Profile',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      azureVmConfig: CreateApplicationFederatedCredentialRequestOidcVerificationConfigAzureVmConfig,
+      gcpVmConfig: CreateApplicationFederatedCredentialRequestOidcVerificationConfigGcpVmConfig,
+      genericConfig: CreateApplicationFederatedCredentialRequestOidcVerificationConfigGenericConfig,
+      kubernetesConfig: CreateApplicationFederatedCredentialRequestOidcVerificationConfigKubernetesConfig,
+      profile: 'string',
+    };
+  }
+
+  validate() {
+    if(this.azureVmConfig && typeof (this.azureVmConfig as any).validate === 'function') {
+      (this.azureVmConfig as any).validate();
+    }
+    if(this.gcpVmConfig && typeof (this.gcpVmConfig as any).validate === 'function') {
+      (this.gcpVmConfig as any).validate();
+    }
+    if(this.genericConfig && typeof (this.genericConfig as any).validate === 'function') {
+      (this.genericConfig as any).validate();
+    }
+    if(this.kubernetesConfig && typeof (this.kubernetesConfig as any).validate === 'function') {
+      (this.kubernetesConfig as any).validate();
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class CreateApplicationFederatedCredentialRequestPkcs7VerificationConfig extends $dara.Model {
+  instanceIds?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      instanceIds: 'InstanceIds',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      instanceIds: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.instanceIds)) {
+      $dara.Model.validateArray(this.instanceIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
   /**
    * @remarks
-   * The name of the application federated credential.
+   * The name of the application federated identity credential.
    * 
    * This parameter is required.
    * 
@@ -55,7 +299,7 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
   applicationFederatedCredentialName?: string;
   /**
    * @remarks
-   * The type of the application federated credential.
+   * The type of the application federated identity credential.
    * 
    * This parameter is required.
    * 
@@ -88,7 +332,7 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
   description?: string;
   /**
    * @remarks
-   * The ID of the federated credential provider.
+   * The federated credential provider ID.
    * 
    * This parameter is required.
    * 
@@ -106,6 +350,16 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
    * idaas_ue2jvisn35ea5lmthk267xxxxx
    */
   instanceId?: string;
+  /**
+   * @remarks
+   * The OIDC structured configuration. This parameter applies when the verification mode is structured and the credential type is oidc.
+   */
+  oidcVerificationConfig?: CreateApplicationFederatedCredentialRequestOidcVerificationConfig;
+  /**
+   * @remarks
+   * The PKCS#7 structured configuration. This parameter applies when the verification mode is structured and the credential type is pkcs7.
+   */
+  pkcs7VerificationConfig?: CreateApplicationFederatedCredentialRequestPkcs7VerificationConfig;
   /**
    * @remarks
    * The verification condition.
@@ -114,6 +368,17 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
    * IsNullOrEmpty("jwt.issuer")
    */
   verificationCondition?: string;
+  /**
+   * @remarks
+   * The verification mode. Valid values:
+   * 
+   * - freedom (default)
+   * - structured
+   * 
+   * @example
+   * freedom
+   */
+  verificationMode?: string;
   static names(): { [key: string]: string } {
     return {
       applicationFederatedCredentialName: 'ApplicationFederatedCredentialName',
@@ -123,7 +388,10 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
       description: 'Description',
       federatedCredentialProviderId: 'FederatedCredentialProviderId',
       instanceId: 'InstanceId',
+      oidcVerificationConfig: 'OidcVerificationConfig',
+      pkcs7VerificationConfig: 'Pkcs7VerificationConfig',
       verificationCondition: 'VerificationCondition',
+      verificationMode: 'VerificationMode',
     };
   }
 
@@ -136,7 +404,10 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
       description: 'string',
       federatedCredentialProviderId: 'string',
       instanceId: 'string',
+      oidcVerificationConfig: CreateApplicationFederatedCredentialRequestOidcVerificationConfig,
+      pkcs7VerificationConfig: CreateApplicationFederatedCredentialRequestPkcs7VerificationConfig,
       verificationCondition: 'string',
+      verificationMode: 'string',
     };
   }
 
@@ -144,6 +415,12 @@ export class CreateApplicationFederatedCredentialRequest extends $dara.Model {
     if(Array.isArray(this.attributeMappings)) {
       $dara.Model.validateArray(this.attributeMappings);
     }
+    if(this.oidcVerificationConfig && typeof (this.oidcVerificationConfig as any).validate === 'function') {
+      (this.oidcVerificationConfig as any).validate();
+    }
+    if(this.pkcs7VerificationConfig && typeof (this.pkcs7VerificationConfig as any).validate === 'function') {
+      (this.pkcs7VerificationConfig as any).validate();
+    }
     super.validate();
   }
 

package/src/models/CreateApplicationFederatedCredentialResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class CreateApplicationFederatedCredentialResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application federated credential.
+   * The application federated identity credential ID.
    * 
    * @example
    * afc_asd123daxxxx

package/src/models/CreateApplicationRequest.ts

@@ -63,11 +63,9 @@ export class CreateApplicationRequestCustomFields extends $dara.Model {
 export class CreateApplicationRequest extends $dara.Model {
   /**
    * @remarks
-   * The identity type of the application. The default value is application. Valid values:
-   * 
-   * - application: A standard application.
-   * 
-   * - agent: An automated agent.
+   * The application identity type. Default value: application. Valid values:
+   * - application: application.
+   * - agent: agent.
    * 
    * @example
    * application
@@ -86,11 +84,9 @@ export class CreateApplicationRequest extends $dara.Model {
   applicationOwner?: CreateApplicationRequestApplicationOwner;
   /**
    * @remarks
-   * Specifies how the application is created. Valid values:
-   * 
-   * - urn:alibaba:idaas:app:source:template: Creates the application from an application template.
-   * 
-   * - urn:alibaba:idaas:app:source:standard: Creates the application from a standard protocol.
+   * The source from which the application is created. Valid values:
+   * - urn:alibaba:idaas:app:source:template: application template.
+   * - urn:alibaba:idaas:app:source:standard: standard protocol.
    * 
    * This parameter is required.
    * 
@@ -100,7 +96,7 @@ export class CreateApplicationRequest extends $dara.Model {
   applicationSourceType?: string;
   /**
    * @remarks
-   * The ID of the application template. This parameter is required if ApplicationSourceType is urn:alibaba:idaas:app:source:template.
+   * The application template ID. This parameter is required when ApplicationSourceType is set to urn:alibaba:idaas:app:source:template.
    * 
    * @example
    * apt_ramuser_mjqrsi
@@ -135,11 +131,9 @@ export class CreateApplicationRequest extends $dara.Model {
   logoUrl?: string;
   /**
    * @remarks
-   * The single sign-on (SSO) protocol. Valid values:
-   * 
-   * - saml2: SAML 2.0
-   * 
-   * - oidc: OpenID Connect
+   * The single sign-on protocol. Valid values:
+   * - saml2: SAML 2.0 protocol.
+   * - oidc: OpenID Connect protocol.
    * 
    * This parameter is required.
    * 

package/src/models/CreateApplicationRoleRequest.ts

@@ -15,7 +15,7 @@ export class CreateApplicationRoleRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The name of the application role.
+   * The application role name.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class CreateApplicationRoleRequest extends $dara.Model {
   applicationRoleName?: string;
   /**
    * @remarks
-   * The value of the application role.
+   * The application role value.
    * 
    * This parameter is required.
    * 
@@ -35,7 +35,7 @@ export class CreateApplicationRoleRequest extends $dara.Model {
   applicationRoleValue?: string;
   /**
    * @remarks
-   * A client token used to ensure the idempotence of the request. Generate a unique value for this parameter from your client. The client token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The ClientToken value can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    *