@aws-sdk/client-directory-service-data 3.654.0

package/dist-types/models/models_0.d.ts

@@ -0,0 +1,1639 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { DirectoryServiceDataServiceException as __BaseException } from "./DirectoryServiceDataServiceException";
+/**
+ * @public
+ * @enum
+ */
+export declare const AccessDeniedReason: {
+    readonly DATA_DISABLED: "DATA_DISABLED";
+    readonly DIRECTORY_AUTH: "DIRECTORY_AUTH";
+    readonly IAM_AUTH: "IAM_AUTH";
+};
+/**
+ * @public
+ */
+export type AccessDeniedReason = (typeof AccessDeniedReason)[keyof typeof AccessDeniedReason];
+/**
+ * <p> You don't have permission to perform the request or access the directory. It can also
+ *       occur when the <code>DirectoryId</code> doesn't exist or the user, member, or group might be
+ *       outside of your organizational unit (OU). </p>
+ *          <p> Make sure that you have the authentication and authorization to perform the action.
+ *       Review the directory information in the request, and make sure that the object isn't outside
+ *       of your OU. </p>
+ * @public
+ */
+export declare class AccessDeniedException extends __BaseException {
+    readonly name: "AccessDeniedException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * <p> Reason the request was unauthorized. </p>
+     * @public
+     */
+    Reason?: AccessDeniedReason;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface AddGroupMemberRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    GroupName: string | undefined;
+    /**
+     * <p> The <code>SAMAccountName</code> of the user, group, or computer to add as a group member.
+     *     </p>
+     * @public
+     */
+    MemberName: string | undefined;
+    /**
+     * <p> The domain name that's associated with the group member. This parameter is required only
+     *       when adding a member outside of your Managed Microsoft AD domain to a group inside of your
+     *       Managed Microsoft AD domain. This parameter defaults to the Managed Microsoft AD domain. </p>
+     *          <note>
+     *             <p> This parameter is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface AddGroupMemberResult {
+}
+/**
+ * <p> This error will occur when you try to create a resource that conflicts with an existing
+ *       object. It can also occur when adding a member to a group that the member is already
+ *       in.</p>
+ *          <p> This error can be caused by a request sent within the 8-hour idempotency window with the
+ *       same client token but different input parameters. Client tokens should not be re-used across
+ *       different requests. After 8 hours, any request with the same client token is treated as a new
+ *       request. </p>
+ * @public
+ */
+export declare class ConflictException extends __BaseException {
+    readonly name: "ConflictException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const DirectoryUnavailableReason: {
+    readonly DIRECTORY_RESOURCES_EXCEEDED: "DIRECTORY_RESOURCES_EXCEEDED";
+    readonly DIRECTORY_TIMEOUT: "DIRECTORY_TIMEOUT";
+    readonly INVALID_DIRECTORY_STATE: "INVALID_DIRECTORY_STATE";
+    readonly NO_DISK_SPACE: "NO_DISK_SPACE";
+    readonly TRUST_AUTH_FAILURE: "TRUST_AUTH_FAILURE";
+};
+/**
+ * @public
+ */
+export type DirectoryUnavailableReason = (typeof DirectoryUnavailableReason)[keyof typeof DirectoryUnavailableReason];
+/**
+ * <p> The request could not be completed due to a problem in the configuration or current state
+ *       of the specified directory. </p>
+ * @public
+ */
+export declare class DirectoryUnavailableException extends __BaseException {
+    readonly name: "DirectoryUnavailableException";
+    readonly $fault: "client";
+    $retryable: {};
+    Message?: string;
+    /**
+     * <p> Reason the request failed for the specified directory. </p>
+     * @public
+     */
+    Reason?: DirectoryUnavailableReason;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<DirectoryUnavailableException, __BaseException>);
+}
+/**
+ * <p> The operation didn't succeed because an internal error occurred. Try again later. </p>
+ * @public
+ */
+export declare class InternalServerException extends __BaseException {
+    readonly name: "InternalServerException";
+    readonly $fault: "server";
+    $retryable: {};
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
+}
+/**
+ * <p> The resource couldn't be found. </p>
+ * @public
+ */
+export declare class ResourceNotFoundException extends __BaseException {
+    readonly name: "ResourceNotFoundException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
+}
+/**
+ * <p> The limit on the number of requests per second has been exceeded. </p>
+ * @public
+ */
+export declare class ThrottlingException extends __BaseException {
+    readonly name: "ThrottlingException";
+    readonly $fault: "client";
+    $retryable: {
+        throttling: boolean;
+    };
+    Message: string | undefined;
+    /**
+     * <p> The recommended amount of seconds to retry after a throttling exception. </p>
+     * @public
+     */
+    RetryAfterSeconds?: number;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const ValidationExceptionReason: {
+    readonly ATTRIBUTE_EXISTS: "ATTRIBUTE_EXISTS";
+    readonly DUPLICATE_ATTRIBUTE: "DUPLICATE_ATTRIBUTE";
+    readonly INVALID_ATTRIBUTE_FOR_GROUP: "INVALID_ATTRIBUTE_FOR_GROUP";
+    readonly INVALID_ATTRIBUTE_FOR_MODIFY: "INVALID_ATTRIBUTE_FOR_MODIFY";
+    readonly INVALID_ATTRIBUTE_FOR_SEARCH: "INVALID_ATTRIBUTE_FOR_SEARCH";
+    readonly INVALID_ATTRIBUTE_FOR_USER: "INVALID_ATTRIBUTE_FOR_USER";
+    readonly INVALID_ATTRIBUTE_NAME: "INVALID_ATTRIBUTE_NAME";
+    readonly INVALID_ATTRIBUTE_VALUE: "INVALID_ATTRIBUTE_VALUE";
+    readonly INVALID_DIRECTORY_TYPE: "INVALID_DIRECTORY_TYPE";
+    readonly INVALID_NEXT_TOKEN: "INVALID_NEXT_TOKEN";
+    readonly INVALID_REALM: "INVALID_REALM";
+    readonly INVALID_SECONDARY_REGION: "INVALID_SECONDARY_REGION";
+    readonly LDAP_SIZE_LIMIT_EXCEEDED: "LDAP_SIZE_LIMIT_EXCEEDED";
+    readonly LDAP_UNSUPPORTED_OPERATION: "LDAP_UNSUPPORTED_OPERATION";
+    readonly MISSING_ATTRIBUTE: "MISSING_ATTRIBUTE";
+};
+/**
+ * @public
+ */
+export type ValidationExceptionReason = (typeof ValidationExceptionReason)[keyof typeof ValidationExceptionReason];
+/**
+ * <p> The request isn't valid. Review the details in the error message to update the invalid
+ *       parameters or values in your request. </p>
+ * @public
+ */
+export declare class ValidationException extends __BaseException {
+    readonly name: "ValidationException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * <p> Reason the request failed validation. </p>
+     * @public
+     */
+    Reason?: ValidationExceptionReason;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
+}
+/**
+ * <p> The data type for an attribute. Each attribute value is described as a name-value pair.
+ *       The name is the AD schema name, and the value is the data itself. For a list of supported
+ *       attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data Attributes</a>.
+ *     </p>
+ * @public
+ */
+export type AttributeValue = AttributeValue.BOOLMember | AttributeValue.NMember | AttributeValue.SMember | AttributeValue.SSMember | AttributeValue.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace AttributeValue {
+    /**
+     * <p> Indicates that the attribute type value is a string. For example: </p>
+     *          <p>
+     *             <code>"S": "S Group"</code>
+     *          </p>
+     * @public
+     */
+    interface SMember {
+        S: string;
+        N?: never;
+        BOOL?: never;
+        SS?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p> Indicates that the attribute type value is a number. For example: </p>
+     *          <p>
+     *             <code>"N": "16"</code>
+     *          </p>
+     * @public
+     */
+    interface NMember {
+        S?: never;
+        N: number;
+        BOOL?: never;
+        SS?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p> Indicates that the attribute type value is a boolean. For example: </p>
+     *          <p>
+     *             <code>"BOOL": true</code>
+     *          </p>
+     * @public
+     */
+    interface BOOLMember {
+        S?: never;
+        N?: never;
+        BOOL: boolean;
+        SS?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p> Indicates that the attribute type value is a string set. For example: </p>
+     *          <p>
+     *             <code>"SS": ["sample_service_class/host.sample.com:1234/sample_service_name_1",
+     *         "sample_service_class/host.sample.com:1234/sample_service_name_2"]</code>
+     *          </p>
+     * @public
+     */
+    interface SSMember {
+        S?: never;
+        N?: never;
+        BOOL?: never;
+        SS: string[];
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        S?: never;
+        N?: never;
+        BOOL?: never;
+        SS?: never;
+        $unknown: [string, any];
+    }
+    interface Visitor<T> {
+        S: (value: string) => T;
+        N: (value: number) => T;
+        BOOL: (value: boolean) => T;
+        SS: (value: string[]) => T;
+        _: (name: string, value: any) => T;
+    }
+    const visit: <T>(value: AttributeValue, visitor: Visitor<T>) => T;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const GroupScope: {
+    readonly BUILTIN_LOCAL: "BuiltinLocal";
+    readonly DOMAIN_LOCAL: "DomainLocal";
+    readonly GLOBAL: "Global";
+    readonly UNIVERSAL: "Universal";
+};
+/**
+ * @public
+ */
+export type GroupScope = (typeof GroupScope)[keyof typeof GroupScope];
+/**
+ * @public
+ * @enum
+ */
+export declare const GroupType: {
+    readonly DISTRIBUTION: "Distribution";
+    readonly SECURITY: "Security";
+};
+/**
+ * @public
+ */
+export type GroupType = (typeof GroupType)[keyof typeof GroupType];
+/**
+ * @public
+ */
+export interface CreateGroupRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The AD group type. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#how-active-directory-security-groups-work">Active Directory security group type</a>.</p>
+     * @public
+     */
+    GroupType?: GroupType;
+    /**
+     * <p> The scope of the AD group. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#group-scope">Active Directory security group scope</a>. </p>
+     * @public
+     */
+    GroupScope?: GroupScope;
+    /**
+     * <p> An expression that defines one or more attributes with the data type and value of each
+     *       attribute. </p>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface CreateGroupResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName?: string;
+    /**
+     * <p> The unique security identifier (SID) of the group. </p>
+     * @public
+     */
+    SID?: string;
+}
+/**
+ * @public
+ */
+export interface CreateUserRequest {
+    /**
+     * <p> The identifier (ID) of the directory that’s associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The email address of the user. </p>
+     * @public
+     */
+    EmailAddress?: string;
+    /**
+     * <p> The first name of the user. </p>
+     * @public
+     */
+    GivenName?: string;
+    /**
+     * <p> The last name of the user. </p>
+     * @public
+     */
+    Surname?: string;
+    /**
+     * <p> An expression that defines one or more attribute names with the data type and value of
+     *       each attribute. A key is an attribute name, and the value is a list of maps. For a list of
+     *       supported attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data Attributes</a>. </p>
+     *          <note>
+     *             <p> Attribute names are case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface CreateUserResult {
+    /**
+     * <p> The identifier (ID) of the directory where the address block is added. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The unique security identifier (SID) of the user. </p>
+     * @public
+     */
+    SID?: string;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName?: string;
+}
+/**
+ * @public
+ */
+export interface DeleteGroupRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface DeleteGroupResult {
+}
+/**
+ * @public
+ */
+export interface DeleteUserRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface DeleteUserResult {
+}
+/**
+ * @public
+ */
+export interface DescribeGroupRequest {
+    /**
+     * <p>The Identifier (ID) of the directory associated with the group.</p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return groups outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD groups are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> One or more attributes to be returned for the group. For a list of supported attributes,
+     *       see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data-attributes.html">Directory Service Data Attributes</a>.
+     *     </p>
+     * @public
+     */
+    OtherAttributes?: string[];
+}
+/**
+ * @public
+ */
+export interface DescribeGroupResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The unique security identifier (SID) of the group. </p>
+     * @public
+     */
+    SID?: string;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName?: string;
+    /**
+     * <p> The <a href="https://learn.microsoft.com/en-us/windows/win32/ad/object-names-and-identities#distinguished-name">distinguished name</a> of the object. </p>
+     * @public
+     */
+    DistinguishedName?: string;
+    /**
+     * <p> The AD group type. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#how-active-directory-security-groups-work">Active Directory security group type</a>. </p>
+     * @public
+     */
+    GroupType?: GroupType;
+    /**
+     * <p> The scope of the AD group. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#group-scope">Active Directory security groups</a>. </p>
+     * @public
+     */
+    GroupScope?: GroupScope;
+    /**
+     * <p> The attribute values that are returned for the attribute names that are included in the
+     *       request. </p>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+}
+/**
+ * @public
+ */
+export interface DescribeUserRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> One or more attribute names to be returned for the user. A key is an attribute name, and
+     *       the value is a list of maps. For a list of supported attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data Attributes</a>. </p>
+     * @public
+     */
+    OtherAttributes?: string[];
+    /**
+     * <p> The domain name that's associated with the user. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return users outside your Managed Microsoft AD domain.
+     *         When no value is defined, only your Managed Microsoft AD users are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+}
+/**
+ * @public
+ */
+export interface DescribeUserResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain name that's associated with the user. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The unique security identifier (SID) of the user. </p>
+     * @public
+     */
+    SID?: string;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName?: string;
+    /**
+     * <p> The <a href="https://learn.microsoft.com/en-us/windows/win32/ad/object-names-and-identities#distinguished-name">distinguished name</a> of the object. </p>
+     * @public
+     */
+    DistinguishedName?: string;
+    /**
+     * <p> The UPN that is an Internet-style login name for a user and is based on the Internet
+     *       standard <a href="https://www.ietf.org/rfc/rfc0822.txt">RFC 822</a>. The UPN is shorter
+     *       than the distinguished name and easier to remember. </p>
+     * @public
+     */
+    UserPrincipalName?: string;
+    /**
+     * <p> The email address of the user. </p>
+     * @public
+     */
+    EmailAddress?: string;
+    /**
+     * <p> The first name of the user. </p>
+     * @public
+     */
+    GivenName?: string;
+    /**
+     * <p> The last name of the user. </p>
+     * @public
+     */
+    Surname?: string;
+    /**
+     * <p> Indicates whether the user account is active. </p>
+     * @public
+     */
+    Enabled?: boolean;
+    /**
+     * <p> The attribute values that are returned for the attribute names that are included in the
+     *       request. </p>
+     *          <note>
+     *             <p> Attribute names are case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+}
+/**
+ * @public
+ */
+export interface DisableUserRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface DisableUserResult {
+}
+/**
+ * @public
+ */
+export interface ListGroupMembersRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return members from a group outside of your
+     *         Managed Microsoft AD domain. When no value is defined, only members of your Managed Microsoft AD groups are
+     *         returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The domain name that's associated with the group member. This parameter defaults to the
+     *       Managed Microsoft AD domain. </p>
+     *          <note>
+     *             <p> This parameter is optional and case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p>An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page.</p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const MemberType: {
+    readonly COMPUTER: "COMPUTER";
+    readonly GROUP: "GROUP";
+    readonly USER: "USER";
+};
+/**
+ * @public
+ */
+export type MemberType = (typeof MemberType)[keyof typeof MemberType];
+/**
+ * <p>A member object that contains identifying information for a specified member.</p>
+ * @public
+ */
+export interface Member {
+    /**
+     * <p> The unique security identifier (SID) of the group member. </p>
+     * @public
+     */
+    SID: string | undefined;
+    /**
+     * <p> The name of the group member. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The AD type of the member object.</p>
+     * @public
+     */
+    MemberType: MemberType | undefined;
+}
+/**
+ * @public
+ */
+export interface ListGroupMembersResult {
+    /**
+     * <p>Identifier (ID) of the directory associated with the group.</p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The domain name that's associated with the member. </p>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> The member information that the request returns. </p>
+     * @public
+     */
+    Members?: Member[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListGroupsRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name associated with the directory. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return groups outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD groups are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * <p>A structure containing a subset of fields of a group object from a directory.</p>
+ * @public
+ */
+export interface GroupSummary {
+    /**
+     * <p>The unique security identifier (SID) of the group.</p>
+     * @public
+     */
+    SID: string | undefined;
+    /**
+     * <p>The name of the group.</p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p>The AD group type. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#how-active-directory-security-groups-work">Active Directory security group type</a>.</p>
+     * @public
+     */
+    GroupType: GroupType | undefined;
+    /**
+     * <p>The scope of the AD group. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#group-scope">Active Directory security groups</a>.</p>
+     * @public
+     */
+    GroupScope: GroupScope | undefined;
+}
+/**
+ * @public
+ */
+export interface ListGroupsResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p>The domain name associated with the group.</p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The group information that the request returns. </p>
+     * @public
+     */
+    Groups?: GroupSummary[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListGroupsForMemberRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the member. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return groups outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD groups are returned. </p>
+     *             <p> This value is case insensitive and defaults to your Managed Microsoft AD domain. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The domain name that's associated with the group member. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can limit your results to the group members in a
+     *         specific domain. </p>
+     *             <p> This parameter is case insensitive and defaults to <code>Realm</code>
+     *             </p>
+     *          </note>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> The <code>SAMAccountName</code> of the user, group, or computer that's a member of the
+     *       group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * @public
+ */
+export interface ListGroupsForMemberResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the member. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain that's associated with the group. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The domain that's associated with the member. </p>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> The group information that the request returns. </p>
+     * @public
+     */
+    Groups?: GroupSummary[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ */
+export interface ListUsersRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name that's associated with the user. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return users outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD users are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * <p>A structure containing a subset of the fields of a user object from a directory.</p>
+ * @public
+ */
+export interface UserSummary {
+    /**
+     * <p> The unique security identifier (SID) of the user.</p>
+     * @public
+     */
+    SID: string | undefined;
+    /**
+     * <p>The name of the user.</p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p>The first name of the user. </p>
+     * @public
+     */
+    GivenName?: string;
+    /**
+     * <p>The last name of the user.</p>
+     * @public
+     */
+    Surname?: string;
+    /**
+     * <p>Indicates whether the user account is active.</p>
+     * @public
+     */
+    Enabled: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface ListUsersResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain that's associated with the user. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The user information that the request returns. </p>
+     * @public
+     */
+    Users?: UserSummary[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ */
+export interface RemoveGroupMemberRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the member. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    GroupName: string | undefined;
+    /**
+     * <p> The <code>SAMAccountName</code> of the user, group, or computer to remove from the group.
+     *     </p>
+     * @public
+     */
+    MemberName: string | undefined;
+    /**
+     * <p> The domain name that's associated with the group member. This parameter defaults to the
+     *       Managed Microsoft AD domain. </p>
+     *          <note>
+     *             <p> This parameter is optional and case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    MemberRealm?: string;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface RemoveGroupMemberResult {
+}
+/**
+ * @public
+ */
+export interface SearchGroupsRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The attribute value that you want to search for. </p>
+     *          <note>
+     *             <p> Wildcard <code>(*)</code> searches aren't supported. For a list of supported
+     *         attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data
+     *           Attributes</a>. </p>
+     *          </note>
+     * @public
+     */
+    SearchString: string | undefined;
+    /**
+     * <p> One or more data attributes that are used to search for a group. For a list of supported
+     *       attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data Attributes</a>.
+     *     </p>
+     * @public
+     */
+    SearchAttributes: string[] | undefined;
+    /**
+     * <p> The domain name that's associated with the group. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return groups outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD groups are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * <p> A group object that contains identifying information and attributes for a specified
+ *       group. </p>
+ * @public
+ */
+export interface Group {
+    /**
+     * <p> The unique security identifier (SID) of the group. </p>
+     * @public
+     */
+    SID?: string;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p>The <a href="https://learn.microsoft.com/en-us/windows/win32/ad/object-names-and-identities#distinguished-name">distinguished name</a> of the object. </p>
+     * @public
+     */
+    DistinguishedName?: string;
+    /**
+     * <p> The AD group type. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#how-active-directory-security-groups-work">Active Directory security group type</a>. </p>
+     * @public
+     */
+    GroupType?: GroupType;
+    /**
+     * <p> The scope of the AD group. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#group-scope">Active Directory security groups</a>
+     *          </p>
+     * @public
+     */
+    GroupScope?: GroupScope;
+    /**
+     * <p> An expression of one or more attributes, data types, and the values of a group. </p>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+}
+/**
+ * @public
+ */
+export interface SearchGroupsResult {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain that's associated with the group. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The group information that the request returns. </p>
+     * @public
+     */
+    Groups?: Group[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ */
+export interface SearchUsersRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The domain name that's associated with the user. </p>
+     *          <note>
+     *             <p> This parameter is optional, so you can return users outside of your Managed Microsoft AD
+     *         domain. When no value is defined, only your Managed Microsoft AD users are returned. </p>
+     *             <p> This value is case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The attribute value that you want to search for. </p>
+     *          <note>
+     *             <p> Wildcard <code>(*)</code> searches aren't supported. For a list of supported
+     *         attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data
+     *           Attributes</a>. </p>
+     *          </note>
+     * @public
+     */
+    SearchString: string | undefined;
+    /**
+     * <p> One or more data attributes that are used to search for a user. For a list of supported
+     *       attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data_attributes.html">Directory Service Data Attributes</a>.
+     *     </p>
+     * @public
+     */
+    SearchAttributes: string[] | undefined;
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+    /**
+     * <p> The maximum number of results to be returned per request. </p>
+     * @public
+     */
+    MaxResults?: number;
+}
+/**
+ * <p> A user object that contains identifying information and attributes for a specified user.
+ *     </p>
+ * @public
+ */
+export interface User {
+    /**
+     * <p> The unique security identifier (SID) of the user. </p>
+     * @public
+     */
+    SID?: string;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The <a href="https://learn.microsoft.com/en-us/windows/win32/ad/object-names-and-identities#distinguished-name">distinguished name</a> of the object. </p>
+     * @public
+     */
+    DistinguishedName?: string;
+    /**
+     * <p> The UPN that is an internet-style login name for a user and based on the internet
+     *       standard <a href="https://www.ietf.org/rfc/rfc0822.txt">RFC 822</a>. The UPN is shorter
+     *       than the distinguished name and easier to remember. </p>
+     * @public
+     */
+    UserPrincipalName?: string;
+    /**
+     * <p> The email address of the user. </p>
+     * @public
+     */
+    EmailAddress?: string;
+    /**
+     * <p> The first name of the user. </p>
+     * @public
+     */
+    GivenName?: string;
+    /**
+     * <p> The last name of the user. </p>
+     * @public
+     */
+    Surname?: string;
+    /**
+     * <p> Indicates whether the user account is active. </p>
+     * @public
+     */
+    Enabled?: boolean;
+    /**
+     * <p> An expression that includes one or more attributes, data types, and values of a
+     *       user.</p>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+}
+/**
+ * @public
+ */
+export interface SearchUsersResult {
+    /**
+     * <p> The identifier (ID) of the directory where the address block is added. </p>
+     * @public
+     */
+    DirectoryId?: string;
+    /**
+     * <p> The domain that's associated with the user. </p>
+     * @public
+     */
+    Realm?: string;
+    /**
+     * <p> The user information that the request returns. </p>
+     * @public
+     */
+    Users?: User[];
+    /**
+     * <p> An encoded paging token for paginated calls that can be passed back to retrieve the next
+     *       page. </p>
+     * @public
+     */
+    NextToken?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const UpdateType: {
+    readonly ADD: "ADD";
+    readonly REMOVE: "REMOVE";
+    readonly REPLACE: "REPLACE";
+};
+/**
+ * @public
+ */
+export type UpdateType = (typeof UpdateType)[keyof typeof UpdateType];
+/**
+ * @public
+ */
+export interface UpdateGroupRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the group. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the group. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The AD group type. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#how-active-directory-security-groups-work">Active Directory security group type</a>. </p>
+     * @public
+     */
+    GroupType?: GroupType;
+    /**
+     * <p> The scope of the AD group. For details, see <a href="https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#group-scope">Active Directory security groups</a>. </p>
+     * @public
+     */
+    GroupScope?: GroupScope;
+    /**
+     * <p> An expression that defines one or more attributes with the data type and the value of
+     *       each attribute. </p>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+    /**
+     * <p> The type of update to be performed. If no value exists for the attribute, use
+     *         <code>ADD</code>. Otherwise, use <code>REPLACE</code> to change an attribute value or
+     *         <code>REMOVE</code> to clear the attribute value. </p>
+     * @public
+     */
+    UpdateType?: UpdateType;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface UpdateGroupResult {
+}
+/**
+ * @public
+ */
+export interface UpdateUserRequest {
+    /**
+     * <p> The identifier (ID) of the directory that's associated with the user. </p>
+     * @public
+     */
+    DirectoryId: string | undefined;
+    /**
+     * <p> The name of the user. </p>
+     * @public
+     */
+    SAMAccountName: string | undefined;
+    /**
+     * <p> The email address of the user. </p>
+     * @public
+     */
+    EmailAddress?: string;
+    /**
+     * <p> The first name of the user. </p>
+     * @public
+     */
+    GivenName?: string;
+    /**
+     * <p> The last name of the user. </p>
+     * @public
+     */
+    Surname?: string;
+    /**
+     * <p> An expression that defines one or more attribute names with the data type and value of
+     *       each attribute. A key is an attribute name, and the value is a list of maps. For a list of
+     *       supported attributes, see <a href="https://docs.aws.amazon.com/directoryservice/latest/admin-guide/ad_data-attributes.html">Directory Service Data Attributes</a>. </p>
+     *          <note>
+     *             <p> Attribute names are case insensitive. </p>
+     *          </note>
+     * @public
+     */
+    OtherAttributes?: Record<string, AttributeValue>;
+    /**
+     * <p> The type of update to be performed. If no value exists for the attribute, use
+     *         <code>ADD</code>. Otherwise, use <code>REPLACE</code> to change an attribute value or
+     *         <code>REMOVE</code> to clear the attribute value. </p>
+     * @public
+     */
+    UpdateType?: UpdateType;
+    /**
+     * <p> A unique and case-sensitive identifier that you provide to make sure the idempotency of
+     *       the request, so multiple identical calls have the same effect as one single call. </p>
+     *          <p> A client token is valid for 8 hours after the first request that uses it completes. After
+     *       8 hours, any request with the same client token is treated as a new request. If the request
+     *       succeeds, any future uses of that token will be idempotent for another 8 hours. </p>
+     *          <p> If you submit a request with the same client token but change one of the other parameters
+     *       within the 8-hour idempotency window, Directory Service Data returns an <code>ConflictException</code>. </p>
+     *          <note>
+     *             <p> This parameter is optional when using the CLI or SDK. </p>
+     *          </note>
+     * @public
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ */
+export interface UpdateUserResult {
+}
+/**
+ * @internal
+ */
+export declare const AttributeValueFilterSensitiveLog: (obj: AttributeValue) => any;
+/**
+ * @internal
+ */
+export declare const CreateGroupRequestFilterSensitiveLog: (obj: CreateGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const CreateUserRequestFilterSensitiveLog: (obj: CreateUserRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeGroupResultFilterSensitiveLog: (obj: DescribeGroupResult) => any;
+/**
+ * @internal
+ */
+export declare const DescribeUserResultFilterSensitiveLog: (obj: DescribeUserResult) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupMembersRequestFilterSensitiveLog: (obj: ListGroupMembersRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupMembersResultFilterSensitiveLog: (obj: ListGroupMembersResult) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupsRequestFilterSensitiveLog: (obj: ListGroupsRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupsResultFilterSensitiveLog: (obj: ListGroupsResult) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupsForMemberRequestFilterSensitiveLog: (obj: ListGroupsForMemberRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListGroupsForMemberResultFilterSensitiveLog: (obj: ListGroupsForMemberResult) => any;
+/**
+ * @internal
+ */
+export declare const ListUsersRequestFilterSensitiveLog: (obj: ListUsersRequest) => any;
+/**
+ * @internal
+ */
+export declare const UserSummaryFilterSensitiveLog: (obj: UserSummary) => any;
+/**
+ * @internal
+ */
+export declare const ListUsersResultFilterSensitiveLog: (obj: ListUsersResult) => any;
+/**
+ * @internal
+ */
+export declare const SearchGroupsRequestFilterSensitiveLog: (obj: SearchGroupsRequest) => any;
+/**
+ * @internal
+ */
+export declare const GroupFilterSensitiveLog: (obj: Group) => any;
+/**
+ * @internal
+ */
+export declare const SearchGroupsResultFilterSensitiveLog: (obj: SearchGroupsResult) => any;
+/**
+ * @internal
+ */
+export declare const SearchUsersRequestFilterSensitiveLog: (obj: SearchUsersRequest) => any;
+/**
+ * @internal
+ */
+export declare const UserFilterSensitiveLog: (obj: User) => any;
+/**
+ * @internal
+ */
+export declare const SearchUsersResultFilterSensitiveLog: (obj: SearchUsersResult) => any;
+/**
+ * @internal
+ */
+export declare const UpdateGroupRequestFilterSensitiveLog: (obj: UpdateGroupRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateUserRequestFilterSensitiveLog: (obj: UpdateUserRequest) => any;