@alicloud/eiam20211201 2.17.7 → 2.18.0

package/src/models/ListCloudAccountRolesResponseBody.ts

@@ -13,7 +13,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRolesCloudAccountRoleH
   errorCode?: string;
   /**
    * @remarks
-   * The error description.
+   * The error message.
    * 
    * @example
    * There is no permission.
@@ -50,7 +50,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRolesCloudAccountRoleH
   errorReason?: ListCloudAccountRolesResponseBodyCloudAccountRolesCloudAccountRoleHealthCheckResultErrorReason;
   /**
    * @remarks
-   * The last check time, in UNIX timestamp format. Unit: milliseconds.
+   * The time of the last health check. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1649830226000
@@ -59,8 +59,8 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRolesCloudAccountRoleH
   /**
    * @remarks
    * The health check result of the cloud role. Valid values:
-   * - success: succeeded.
-   * - failed: failed.
+   * - success: Success.
+   * - failed: Failed.
    * 
    * @example
    * success
@@ -103,6 +103,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
    * ca_01kmegjc11qa1txxxxx
    */
   cloudAccountId?: string;
+  cloudAccountRoleCreationType?: string;
   /**
    * @remarks
    * The cloud role identifier.
@@ -114,9 +115,9 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   /**
    * @remarks
    * The health status of the cloud role. Valid values:
-   * - healthy: healthy.
-   * - unhealthy: unhealthy.
-   * - unknown: unknown.
+   * - healthy: Healthy.
+   * - unhealthy: Unhealthy.
+   * - unknown: Unknown.
    * 
    * @example
    * healthy
@@ -165,7 +166,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   cloudAccountRoleUsageType?: string;
   /**
    * @remarks
-   * The creation time, in UNIX timestamp format. Unit: milliseconds.
+   * The time when the cloud role was created. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1719320115000
@@ -173,7 +174,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   createTime?: number;
   /**
    * @remarks
-   * The cloud role description.
+   * The description of the cloud role.
    * 
    * @example
    * cloud_account_role_description
@@ -189,9 +190,9 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   instanceId?: string;
   /**
    * @remarks
-   * The cloud role status. Valid values:
-   * - enabled: enabled.
-   * - disable: disabled.
+   * The status of the cloud role. Valid values:
+   * - enabled: Enabled.
+   * - disable: Disabled.
    * 
    * @example
    * enabled
@@ -199,7 +200,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   status?: string;
   /**
    * @remarks
-   * The last update time, in UNIX timestamp format. Unit: milliseconds.
+   * The time when the cloud role was last updated. The value is a UNIX timestamp in milliseconds.
    * 
    * @example
    * 1719320117000
@@ -208,6 +209,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   static names(): { [key: string]: string } {
     return {
       cloudAccountId: 'CloudAccountId',
+      cloudAccountRoleCreationType: 'CloudAccountRoleCreationType',
       cloudAccountRoleExternalId: 'CloudAccountRoleExternalId',
       cloudAccountRoleHealth: 'CloudAccountRoleHealth',
       cloudAccountRoleHealthCheckResult: 'CloudAccountRoleHealthCheckResult',
@@ -226,6 +228,7 @@ export class ListCloudAccountRolesResponseBodyCloudAccountRoles extends $dara.Mo
   static types(): { [key: string]: any } {
     return {
       cloudAccountId: 'string',
+      cloudAccountRoleCreationType: 'string',
       cloudAccountRoleExternalId: 'string',
       cloudAccountRoleHealth: 'string',
       cloudAccountRoleHealthCheckResult: ListCloudAccountRolesResponseBodyCloudAccountRolesCloudAccountRoleHealthCheckResult,
@@ -261,7 +264,7 @@ export class ListCloudAccountRolesResponseBody extends $dara.Model {
   cloudAccountRoles?: ListCloudAccountRolesResponseBodyCloudAccountRoles[];
   /**
    * @remarks
-   * The number of rows per page in the paging query.
+   * The maximum number of rows per page in a paging query.
    * 
    * @example
    * 20
@@ -269,7 +272,7 @@ export class ListCloudAccountRolesResponseBody extends $dara.Model {
   maxResults?: number;
   /**
    * @remarks
-   * The pagination token returned in this call.
+   * The token returned for the current request.
    * 
    * @example
    * NTxxxexample
@@ -285,7 +288,7 @@ export class ListCloudAccountRolesResponseBody extends $dara.Model {
   requestId?: string;
   /**
    * @remarks
-   * The total number of records.
+   * The total number of entries returned.
    * 
    * @example
    * 100

package/src/models/ListCloudAccountsRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class ListCloudAccountsRequestFilter extends $dara.Model {
   /**
    * @remarks
-   * The name of the filter field. Valid values:
+   * The filter field name. Valid values:
    * 
    * - CloudAccountId: the cloud account ID.
    * - CloudAccountExternalId: the external unique identifier of the cloud account.
@@ -17,7 +17,7 @@ export class ListCloudAccountsRequestFilter extends $dara.Model {
   name?: string;
   /**
    * @remarks
-   * The values of the filter field.
+   * The list of filter field values.
    */
   value?: string[];
   static names(): { [key: string]: string } {
@@ -64,11 +64,11 @@ export class ListCloudAccountsRequest extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The maximum number of records per page.
+   * The maximum number of entries per page.
    * 
-   * - Default value: 20.
+   * - If this parameter is not specified, the default value is 20.
    * 
-   * - Maximum value: 100.
+   * - The maximum value is 100.
    * 
    * @example
    * 20
@@ -76,9 +76,9 @@ export class ListCloudAccountsRequest extends $dara.Model {
   maxResults?: number;
   /**
    * @remarks
-   * The token that marks the starting position of the next page.
+   * The token that identifies the start position of the next page.
    * 
-   * - If you do not specify this parameter, the query starts from the first page.
+   * - If this parameter is not specified, the query starts from the first page.
    * 
    * @example
    * NTxxxxxexample

package/src/models/ListCloudAccountsResponseBody.ts

@@ -13,7 +13,7 @@ export class ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckRe
   errorCode?: string;
   /**
    * @remarks
-   * The error message.
+   * The error description.
    * 
    * @example
    * There is no permission.
@@ -50,7 +50,7 @@ export class ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckRe
   errorReason?: ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckResultErrorReason;
   /**
    * @remarks
-   * The time of the last health check. The value is a UNIX timestamp in milliseconds.
+   * The last check time, in UNIX timestamp format. Unit: milliseconds.
    * 
    * @example
    * 1649830226000
@@ -59,8 +59,8 @@ export class ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckRe
   /**
    * @remarks
    * The health check result of the cloud account. Valid values:
-   * - success: The health check succeeded.
-   * - failed: The health check failed.
+   * - success: Succeeded.
+   * - failed: Failed.
    * 
    * @example
    * success
@@ -94,6 +94,40 @@ export class ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckRe
   }
 }
 
+export class ListCloudAccountsResponseBodyCloudAccountsPrivilegeHostingError extends $dara.Model {
+  /**
+   * @remarks
+   * The failure error code.
+   */
+  errorCode?: string;
+  /**
+   * @remarks
+   * The failure message.
+   */
+  errorMessage?: string;
+  static names(): { [key: string]: string } {
+    return {
+      errorCode: 'ErrorCode',
+      errorMessage: 'ErrorMessage',
+    };
+  }
+
+  static types(): { [key: string]: any } {
+    return {
+      errorCode: 'string',
+      errorMessage: 'string',
+    };
+  }
+
+  validate() {
+    super.validate();
+  }
+
+  constructor(map?: { [key: string]: any }) {
+    super(map);
+  }
+}
+
 export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
   /**
    * @remarks
@@ -143,6 +177,10 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
    * idaas-eiam-oidc-provider
    */
   cloudAccountProviderName?: string;
+  /**
+   * @remarks
+   * The cloud account site.
+   */
   cloudAccountSite?: string;
   /**
    * @remarks
@@ -156,7 +194,7 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
   cloudAccountVendorType?: string;
   /**
    * @remarks
-   * The time when the cloud account was created. The value is a UNIX timestamp in milliseconds.
+   * The creation time, in UNIX timestamp format. Unit: milliseconds.
    * 
    * @example
    * 1649830225000
@@ -164,7 +202,7 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
   createTime?: number;
   /**
    * @remarks
-   * The description of the cloud account.
+   * The cloud account description.
    * 
    * @example
    * cloud_accout_description
@@ -180,7 +218,27 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
   instanceId?: string;
   /**
    * @remarks
-   * The time when the cloud account was last updated. The value is a UNIX timestamp in milliseconds.
+   * The list of associated privileged access application IDs.
+   */
+  privilegeApplicationIds?: string[];
+  /**
+   * @remarks
+   * The reason for the privilege hosting or removal failure.
+   */
+  privilegeHostingError?: ListCloudAccountsResponseBodyCloudAccountsPrivilegeHostingError;
+  /**
+   * @remarks
+   * The privilege hosting state, which indicates whether the account has privileged access capabilities.
+   */
+  privilegeHostingState?: string;
+  /**
+   * @remarks
+   * The privilege switch status, which indicates whether the privileged access capability is available.
+   */
+  privilegeStatus?: string;
+  /**
+   * @remarks
+   * The last update time, in UNIX timestamp format. Unit: milliseconds.
    * 
    * @example
    * 1649830227000
@@ -199,6 +257,10 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
       createTime: 'CreateTime',
       description: 'Description',
       instanceId: 'InstanceId',
+      privilegeApplicationIds: 'PrivilegeApplicationIds',
+      privilegeHostingError: 'PrivilegeHostingError',
+      privilegeHostingState: 'PrivilegeHostingState',
+      privilegeStatus: 'PrivilegeStatus',
       updateTime: 'UpdateTime',
     };
   }
@@ -216,6 +278,10 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
       createTime: 'number',
       description: 'string',
       instanceId: 'string',
+      privilegeApplicationIds: { 'type': 'array', 'itemType': 'string' },
+      privilegeHostingError: ListCloudAccountsResponseBodyCloudAccountsPrivilegeHostingError,
+      privilegeHostingState: 'string',
+      privilegeStatus: 'string',
       updateTime: 'number',
     };
   }
@@ -224,6 +290,12 @@ export class ListCloudAccountsResponseBodyCloudAccounts extends $dara.Model {
     if(this.cloudAccountHealthCheckResult && typeof (this.cloudAccountHealthCheckResult as any).validate === 'function') {
       (this.cloudAccountHealthCheckResult as any).validate();
     }
+    if(Array.isArray(this.privilegeApplicationIds)) {
+      $dara.Model.validateArray(this.privilegeApplicationIds);
+    }
+    if(this.privilegeHostingError && typeof (this.privilegeHostingError as any).validate === 'function') {
+      (this.privilegeHostingError as any).validate();
+    }
     super.validate();
   }
 
@@ -240,7 +312,7 @@ export class ListCloudAccountsResponseBody extends $dara.Model {
   cloudAccounts?: ListCloudAccountsResponseBodyCloudAccounts[];
   /**
    * @remarks
-   * The number of rows per page when paging is used.
+   * The maximum number of entries per page for paging.
    * 
    * @example
    * 20
@@ -248,7 +320,7 @@ export class ListCloudAccountsResponseBody extends $dara.Model {
   maxResults?: number;
   /**
    * @remarks
-   * The token returned for the current call to indicate the starting position of the next page.
+   * The token returned for the current call.
    * 
    * @example
    * NTxxxexample

package/src/models/RemoveGroupFromAuthorizationRuleRequest.ts

@@ -5,7 +5,7 @@ import * as $dara from '@darabonba/typescript';
 export class RemoveGroupFromAuthorizationRuleRequest extends $dara.Model {
   /**
    * @remarks
-   * The ID of the authorization rule.
+   * The authorization rule ID.
    * 
    * This parameter is required.
    * 

package/src/models/UpdateCredentialProviderRequest.ts

@@ -14,7 +14,7 @@ export class UpdateCredentialProviderRequestCredentialProviderConfigJwtProviderC
   allowedTokenIssuers?: string[];
   /**
    * @remarks
-   * Specifies whether to enable the JWT derived short token capability.
+   * Specifies whether the JWT derived short token feature is enabled.
    * 
    * @example
    * false
@@ -30,7 +30,7 @@ export class UpdateCredentialProviderRequestCredentialProviderConfigJwtProviderC
   expiration?: number;
   /**
    * @remarks
-   * Specifies whether to enable JWT expiration cleanup.
+   * Specifies whether JWT expiration cleanup is enabled.
    * 
    * @example
    * true
@@ -69,14 +69,20 @@ export class UpdateCredentialProviderRequestCredentialProviderConfigJwtProviderC
 export class UpdateCredentialProviderRequestCredentialProviderConfigOAuthProviderConfig extends $dara.Model {
   /**
    * @remarks
-   * The endpoint URL used to guide users through authorization. Conditionally required: this parameter is required when AuthorizationFlow is set to user_federation and ProviderVendor is set to custom. For preset vendors, this value can be automatically populated through DiscoveryUrl.
+   * The authorization endpoint.
+   * 
+   * @example
+   * https://example.com/authorize
    */
   authorizationEndpoint?: string;
   /**
    * @remarks
    * The OAuth authorization flow type. Valid values:
-   * - m2m: Machine-to-machine (2LO, Client Credentials).
-   * - user_federation: User federation (3LO, Authorization Code).
+   * - m2m: machine-to-machine.
+   * - user_federation: user federation.
+   * 
+   * @example
+   * m2m
    */
   authorizationFlow?: string;
   /**
@@ -91,34 +97,61 @@ export class UpdateCredentialProviderRequestCredentialProviderConfigOAuthProvide
   clientSecret?: string;
   /**
    * @remarks
-   * The Discovery document URL used to automatically retrieve OAuth endpoint configurations. Conditionally optional: this parameter is used when AuthorizationFlow is set to user_federation. If DiscoveryUrl is not provided, you must manually configure fields such as TokenEndpoint and AuthorizationEndpoint.
+   * The auto-discovery URL.
+   * 
+   * @example
+   * https://example.com/.well-known/openid-configuration
    */
   discoveryUrl?: string;
+  /**
+   * @remarks
+   * The authorization server identifier URL.
+   * 
+   * @example
+   * https://example.com/issuer
+   */
   issuer?: string;
   /**
    * @remarks
-   * The PKCE code_challenge generation method. Default value: s256.
+   * The PKCE challenge method. Valid values:
+   * - S256.
+   * - plain.
+   * 
+   * @example
+   * S256
    */
   pkceChallengeMethod?: string;
   /**
    * @remarks
-   * Specifies whether to use the PKCE extension for enhanced security. We recommend that you always enable this feature.
+   * Specifies whether PKCE is enabled.
+   * 
+   * @example
+   * true
    */
   pkceEnabled?: boolean;
   /**
    * @remarks
-   * The preset vendor or custom configuration. This parameter is optional. Default value: custom.
+   * The vendor type. Valid values:
+   * - custom: custom.
+   * - dingtalk: DingTalk.
+   * - feishu: Lark.
+   * - github: GitHub.
+   * - microsoft: Microsoft.
+   * - google: Google.
+   * 
+   * @example
+   * custom
    */
   providerVendor?: string;
   /**
    * @remarks
    * The scope in the OAuth protocol, which specifies the permission scope.
    * 
-   * > The Scope configuration on the OAuth credential provider serves as a fallback value. If the scope parameter is not specified when calling the DeveloperAPI to obtain an OAuth Access Token, the Scope configuration on the credential provider is used for token issuance.
+   * > The Scope configuration on the credential provider serves as the fallback value. If the scope parameter is not specified when calling the DeveloperAPI to obtain an OAuth Access Token, the Scope configuration on the credential provider is used for issuance.
    * 
    * >Notice: Separate multiple Scope values with spaces. To clear the Scope configuration, pass an empty string.
    * 
-   * Restrictions for each individual Scope value:
+   * Restrictions on each individual Scope value:
    * 1. Allowed characters: lowercase letters, digits, and special characters `|/:_-.`
    * 2. Must contain at least one lowercase letter or digit.
    * 3. Must start with a special character `.`, a lowercase letter, or a digit.
@@ -222,7 +255,7 @@ export class UpdateCredentialProviderRequest extends $dara.Model {
    * @remarks
    * The idempotency token that ensures the idempotence of the request.
    * 
-   * Generate a unique parameter value from your client to ensure uniqueness across different requests. ClientToken supports only ASCII characters and cannot exceed 64 characters in length. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
+   * Generate a unique parameter value from your client to ensure uniqueness across different requests. ClientToken supports only ASCII characters and cannot exceed 64 characters. For more information, see References: [How to ensure idempotence](https://www.alibabacloud.com/help/zh/ecs/developer-reference/how-to-ensure-idempotence).
    * 
    * This parameter is required.
    * 

package/src/models/model.ts

@@ -105,6 +105,7 @@ export { GetClientPublicKeyResponseBodyClientPublicKey } from './GetClientPublic
 export { GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResultErrorReason } from './GetCloudAccountResponseBody';
 export { GetCloudAccountResponseBodyCloudAccountCloudAccountHealthCheckResult } from './GetCloudAccountResponseBody';
 export { GetCloudAccountResponseBodyCloudAccountCloudAccountProviderConfig } from './GetCloudAccountResponseBody';
+export { GetCloudAccountResponseBodyCloudAccountPrivilegeHostingError } from './GetCloudAccountResponseBody';
 export { GetCloudAccountResponseBodyCloudAccount } from './GetCloudAccountResponseBody';
 export { GetCloudAccountRoleResponseBodyCloudAccountRoleCloudAccountRoleHealthCheckResultErrorReason } from './GetCloudAccountRoleResponseBody';
 export { GetCloudAccountRoleResponseBodyCloudAccountRoleCloudAccountRoleHealthCheckResult } from './GetCloudAccountRoleResponseBody';
@@ -290,6 +291,7 @@ export { ListCloudAccountRolesResponseBodyCloudAccountRoles } from './ListCloudA
 export { ListCloudAccountsRequestFilter } from './ListCloudAccountsRequest';
 export { ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckResultErrorReason } from './ListCloudAccountsResponseBody';
 export { ListCloudAccountsResponseBodyCloudAccountsCloudAccountHealthCheckResult } from './ListCloudAccountsResponseBody';
+export { ListCloudAccountsResponseBodyCloudAccountsPrivilegeHostingError } from './ListCloudAccountsResponseBody';
 export { ListCloudAccountsResponseBodyCloudAccounts } from './ListCloudAccountsResponseBody';
 export { ListConditionalAccessPoliciesResponseBodyConditionalAccessPoliciesConditionsConfigApplications } from './ListConditionalAccessPoliciesResponseBody';
 export { ListConditionalAccessPoliciesResponseBodyConditionalAccessPoliciesConditionsConfigNetworkZones } from './ListConditionalAccessPoliciesResponseBody';
@@ -891,6 +893,9 @@ export { EnableUserResponse } from './EnableUserResponse';
 export { ExecIdentityProviderMetadataUrlResolutionRequest } from './ExecIdentityProviderMetadataUrlResolutionRequest';
 export { ExecIdentityProviderMetadataUrlResolutionResponseBody } from './ExecIdentityProviderMetadataUrlResolutionResponseBody';
 export { ExecIdentityProviderMetadataUrlResolutionResponse } from './ExecIdentityProviderMetadataUrlResolutionResponse';
+export { ExecuteInstanceFailoverRequest } from './ExecuteInstanceFailoverRequest';
+export { ExecuteInstanceFailoverResponseBody } from './ExecuteInstanceFailoverResponseBody';
+export { ExecuteInstanceFailoverResponse } from './ExecuteInstanceFailoverResponse';
 export { GenerateDownloadUrlForSynchronizationJobRequest } from './GenerateDownloadUrlForSynchronizationJobRequest';
 export { GenerateDownloadUrlForSynchronizationJobResponseBody } from './GenerateDownloadUrlForSynchronizationJobResponseBody';
 export { GenerateDownloadUrlForSynchronizationJobResponse } from './GenerateDownloadUrlForSynchronizationJobResponse';