@alicloud/eiam20211201 2.17.1 → 2.17.2

package/src/models/DeleteApplicationTokenRequest.ts

@@ -15,7 +15,7 @@ export class DeleteApplicationTokenRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the application token.
+   * The application token ID.
    * 
    * This parameter is required.
    * 

package/src/models/DeleteCredentialProviderRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DeleteCredentialProviderRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the credential provider.
+   * The credential provider ID.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class DeleteCredentialProviderRequest extends $dara.Model {
   credentialProviderId?: string;
   /**
    * @remarks
-   * The ID of the instance.
+   * The instance ID.
    * 
    * This parameter is required.
    * 

package/src/models/DeleteCredentialProviderResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DeleteCredentialProviderResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 0441BD79-92F3-53AA-8657-F8CE4A2B912A

package/src/models/DeleteResourceServerScopeRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DeleteResourceServerScopeRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application.
+   * The application ID.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class DeleteResourceServerScopeRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the instance.
+   * The instance ID.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class DeleteResourceServerScopeRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The ID of the scope permission.
+   * The scope permission ID under the ResourceServer.
    * 
    * This parameter is required.
    * 

package/src/models/DeleteResourceServerScopeResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DeleteResourceServerScopeResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 0441BD79-92F3-53AA-8657-F8CE4A2B912A

package/src/models/DisableApplicationFederatedCredentialRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DisableApplicationFederatedCredentialRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the federated credential for the application.
+   * The application federated identity credential ID.
    * 
    * This parameter is required.
    * 

package/src/models/DisableApplicationRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DisableApplicationRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application that you want to disable.
+   * The application ID.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class DisableApplicationRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the instance.
+   * The instance ID.
    * 
    * This parameter is required.
    * 

package/src/models/DisableApplicationResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class DisableApplicationResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 0441BD79-92F3-53AA-8657-F8CE4A2B912A

package/src/models/DisableApplicationTokenRequest.ts

@@ -15,7 +15,7 @@ export class DisableApplicationTokenRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the application token.
+   * The application token ID.
    * 
    * This parameter is required.
    * 

package/src/models/DisableClientPublicKeyRequest.ts

@@ -15,7 +15,7 @@ export class DisableClientPublicKeyRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the ClientPublicKey for the application.
+   * The ID of the application ClientPublicKey.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class DisableClientPublicKeyRequest extends $dara.Model {
   clientPublicKeyId?: string;
   /**
    * @remarks
-   * A client-generated token that you can use to ensure the idempotence of the request. Make sure that the token is unique for each request. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The ClientToken value can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 

package/src/models/EnableClientPublicKeyRequest.ts

@@ -15,7 +15,7 @@ export class EnableClientPublicKeyRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the ClientPublicKey for the application.
+   * The ID of the application ClientPublicKey.
    * 
    * This parameter is required.
    * 
@@ -25,7 +25,7 @@ export class EnableClientPublicKeyRequest extends $dara.Model {
   clientPublicKeyId?: string;
   /**
    * @remarks
-   * The client token that is used to ensure the idempotence of the request. Generate a unique value from your client for this parameter. The value can contain only ASCII characters and must be no more than 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but you must make sure that the value is unique among different requests. The ClientToken value can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 

package/src/models/EnableCredentialRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class EnableCredentialRequest extends $dara.Model {
   /**
    * @remarks
-   * A client-generated token that ensures the idempotence of the request. Make sure that the token is unique for each request. The ClientToken parameter supports only ASCII characters and cannot exceed 64 characters in length. For more information, see [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * The client token that is used to ensure the idempotence of the request. You can use the client to generate a parameter value, but make sure that the value is unique among different requests. The token can contain only ASCII characters and cannot exceed 64 characters in length. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 

package/src/models/GenerateOauthTokenRequest.ts

@@ -35,7 +35,7 @@ export class GenerateOauthTokenRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The scope of permissions.
+   * The permission scopes.
    * 
    * This parameter is required.
    */

package/src/models/GenerateOauthTokenResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class GenerateOauthTokenResponseBodyTokenResponse extends $dara.Model {
   /**
    * @remarks
-   * The access token.
+   * Access Token。
    * 
    * @example
    * ***
@@ -13,7 +13,7 @@ export class GenerateOauthTokenResponseBodyTokenResponse extends $dara.Model {
   accessToken?: string;
   /**
    * @remarks
-   * The expiration time, in Unix timestamp format (seconds since epoch).
+   * The expiration time, in UNIX timestamp format. Unit: seconds.
    * 
    * @example
    * 1770186372
@@ -29,7 +29,7 @@ export class GenerateOauthTokenResponseBodyTokenResponse extends $dara.Model {
   expiresIn?: number;
   /**
    * @remarks
-   * The token type. Only Bearer is supported.
+   * The token type. Currently, only Bearer is supported.
    * 
    * @example
    * Bearer

package/src/models/GetApplicationFederatedCredentialRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class GetApplicationFederatedCredentialRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application\\"s federated credential.
+   * The application federated credential ID.
    * 
    * This parameter is required.
    * 

package/src/models/GetApplicationFederatedCredentialResponseBody.ts

@@ -42,10 +42,242 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   }
 }
 
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigAzureVmConfig extends $dara.Model {
+  principalId?: string;
+  resourceGroupName?: string;
+  subscriptionId?: string;
+  vmNames?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      principalId: 'PrincipalId',
+      resourceGroupName: 'ResourceGroupName',
+      subscriptionId: 'SubscriptionId',
+      vmNames: 'VmNames',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      principalId: 'string',
+      resourceGroupName: 'string',
+      subscriptionId: 'string',
+      vmNames: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.vmNames)) {
+      $dara.Model.validateArray(this.vmNames);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGcpVmConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The list of VM instance IDs. A maximum of 10 instance IDs are supported.
+   */
+  instanceIds?: string[];
+  projectId?: string;
+  /**
+   * @remarks
+   * The service account ID that corresponds to the sub claim.
+   */
+  serviceAccountId?: string;
+  static names(): { [key: string]: string } {
+    return {
+      instanceIds: 'InstanceIds',
+      projectId: 'ProjectId',
+      serviceAccountId: 'ServiceAccountId',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      instanceIds: { 'type': 'array', 'itemType': 'string' },
+      projectId: 'string',
+      serviceAccountId: 'string',
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.instanceIds)) {
+      $dara.Model.validateArray(this.instanceIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGenericConfig extends $dara.Model {
+  subject?: string;
+  static names(): { [key: string]: string } {
+    return {
+      subject: 'Subject',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      subject: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigKubernetesConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The Kubernetes namespace.
+   */
+  namespace?: string;
+  /**
+   * @remarks
+   * The pod name prefix.
+   */
+  podNamePrefix?: string;
+  /**
+   * @remarks
+   * The Kubernetes service account name.
+   */
+  serviceAccountName?: string;
+  static names(): { [key: string]: string } {
+    return {
+      namespace: 'Namespace',
+      podNamePrefix: 'PodNamePrefix',
+      serviceAccountName: 'ServiceAccountName',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      namespace: 'string',
+      podNamePrefix: 'string',
+      serviceAccountName: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The Azure VM scenario configuration.
+   */
+  azureVmConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigAzureVmConfig;
+  /**
+   * @remarks
+   * The GCP VM scenario configuration.
+   */
+  gcpVmConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGcpVmConfig;
+  genericConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGenericConfig;
+  /**
+   * @remarks
+   * The Kubernetes scenario configuration.
+   */
+  kubernetesConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigKubernetesConfig;
+  /**
+   * @remarks
+   * The OIDC scenario profile. Valid values: generic, kubernetes, gcp_vm, and azure_vm.
+   */
+  profile?: string;
+  static names(): { [key: string]: string } {
+    return {
+      azureVmConfig: 'AzureVmConfig',
+      gcpVmConfig: 'GcpVmConfig',
+      genericConfig: 'GenericConfig',
+      kubernetesConfig: 'KubernetesConfig',
+      profile: 'Profile',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      azureVmConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigAzureVmConfig,
+      gcpVmConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGcpVmConfig,
+      genericConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigGenericConfig,
+      kubernetesConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfigKubernetesConfig,
+      profile: 'string',
+    };
+  }
+
+  validate() {
+    if(this.azureVmConfig && typeof (this.azureVmConfig as any).validate === 'function') {
+      (this.azureVmConfig as any).validate();
+    }
+    if(this.gcpVmConfig && typeof (this.gcpVmConfig as any).validate === 'function') {
+      (this.gcpVmConfig as any).validate();
+    }
+    if(this.genericConfig && typeof (this.genericConfig as any).validate === 'function') {
+      (this.genericConfig as any).validate();
+    }
+    if(this.kubernetesConfig && typeof (this.kubernetesConfig as any).validate === 'function') {
+      (this.kubernetesConfig as any).validate();
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
+export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialPkcs7VerificationConfig extends $dara.Model {
+  /**
+   * @remarks
+   * The list of allowed instance IDs. A maximum of 10 instance IDs are supported.
+   */
+  instanceIds?: string[];
+  static names(): { [key: string]: string } {
+    return {
+      instanceIds: 'InstanceIds',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      instanceIds: { 'type': 'array', 'itemType': 'string' },
+    };
+  }
+
+  validate() {
+    if(Array.isArray(this.instanceIds)) {
+      $dara.Model.validateArray(this.instanceIds);
+    }
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredential extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application\\"s federated credential.
+   * The application federated credential ID.
    * 
    * @example
    * afc_aaaaa1111
@@ -53,7 +285,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   applicationFederatedCredentialId?: string;
   /**
    * @remarks
-   * The name of the application\\"s federated credential.
+   * The application federated credential name.
    * 
    * @example
    * test
@@ -61,7 +293,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   applicationFederatedCredentialName?: string;
   /**
    * @remarks
-   * The type of the application\\"s federated credential.
+   * The application federated credential type.
    * 
    * @example
    * oidc
@@ -90,7 +322,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   createTime?: number;
   /**
    * @remarks
-   * The description of the application\\"s federated credential.
+   * The application federated credential description.
    * 
    * @example
    * test
@@ -98,7 +330,7 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   description?: string;
   /**
    * @remarks
-   * The ID of the federated credential provider.
+   * The federated trust source ID.
    * 
    * @example
    * fcp_asda1dasdxxxx
@@ -122,7 +354,17 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
   lastUsedTime?: number;
   /**
    * @remarks
-   * The status of the application\\"s federated credential.
+   * The OIDC structured configuration. This parameter applies when the verification mode is structured and the credential type is oidc.
+   */
+  oidcVerificationConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfig;
+  /**
+   * @remarks
+   * The PKCS#7 structured configuration. This parameter applies when the verification mode is structured and the credential type is pkcs7.
+   */
+  pkcs7VerificationConfig?: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialPkcs7VerificationConfig;
+  /**
+   * @remarks
+   * The application federated credential status.
    * 
    * @example
    * enabled
@@ -144,6 +386,11 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
    * Equals(cert.subject.CN, "test")
    */
   verificationCondition?: string;
+  /**
+   * @remarks
+   * The verification mode. Valid values: freedom and structured.
+   */
+  verificationMode?: string;
   static names(): { [key: string]: string } {
     return {
       applicationFederatedCredentialId: 'ApplicationFederatedCredentialId',
@@ -156,9 +403,12 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
       federatedCredentialProviderId: 'FederatedCredentialProviderId',
       instanceId: 'InstanceId',
       lastUsedTime: 'LastUsedTime',
+      oidcVerificationConfig: 'OidcVerificationConfig',
+      pkcs7VerificationConfig: 'Pkcs7VerificationConfig',
       status: 'Status',
       updateTime: 'UpdateTime',
       verificationCondition: 'VerificationCondition',
+      verificationMode: 'VerificationMode',
     };
   }
 
@@ -174,9 +424,12 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
       federatedCredentialProviderId: 'string',
       instanceId: 'string',
       lastUsedTime: 'number',
+      oidcVerificationConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialOidcVerificationConfig,
+      pkcs7VerificationConfig: GetApplicationFederatedCredentialResponseBodyApplicationFederatedCredentialPkcs7VerificationConfig,
       status: 'string',
       updateTime: 'number',
       verificationCondition: 'string',
+      verificationMode: 'string',
     };
   }
 
@@ -184,6 +437,12 @@ export class GetApplicationFederatedCredentialResponseBodyApplicationFederatedCr
     if(Array.isArray(this.attributeMappings)) {
       $dara.Model.validateArray(this.attributeMappings);
     }
+    if(this.oidcVerificationConfig && typeof (this.oidcVerificationConfig as any).validate === 'function') {
+      (this.oidcVerificationConfig as any).validate();
+    }
+    if(this.pkcs7VerificationConfig && typeof (this.pkcs7VerificationConfig as any).validate === 'function') {
+      (this.pkcs7VerificationConfig as any).validate();
+    }
     super.validate();
   }
 

package/src/models/GetApplicationGrantScopeRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class GetApplicationGrantScopeRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the application.
+   * The application ID.
    * 
    * This parameter is required.
    * 
@@ -15,7 +15,7 @@ export class GetApplicationGrantScopeRequest extends $dara.Model {
   applicationId?: string;
   /**
    * @remarks
-   * The ID of the instance.
+   * The instance ID.
    * 
    * This parameter is required.
    * 

package/src/models/GetApplicationGrantScopeResponseBody.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class GetApplicationGrantScopeResponseBodyApplicationGrantScope extends $dara.Model {
   /**
    * @remarks
-   * The permissions of the Developer API feature.
+   * The collection of API authorization scopes.
    */
   grantScopes?: string[];
   static names(): { [key: string]: string } {
@@ -35,12 +35,12 @@ export class GetApplicationGrantScopeResponseBodyApplicationGrantScope extends $
 export class GetApplicationGrantScopeResponseBody extends $dara.Model {
   /**
    * @remarks
-   * The permissions of the Developer API feature.
+   * The authorization scope.
    */
   applicationGrantScope?: GetApplicationGrantScopeResponseBodyApplicationGrantScope;
   /**
    * @remarks
-   * The ID of the request.
+   * The request ID.
    * 
    * @example
    * 0441BD79-92F3-53AA-8657-F8CE4A2B912A