@aws-sdk/client-iam 3.262.0 → 3.263.0

package/dist-types/commands/PutRolePolicyCommand.d.ts

@@ -10,24 +10,24 @@ export interface PutRolePolicyCommandOutput extends __MetadataBearer {
 /**
  * <p>Adds or updates an inline policy document that is embedded in the specified IAM
  *             role.</p>
- *         <p>When you embed an inline policy in a role, the inline policy is used as part of the
+ *          <p>When you embed an inline policy in a role, the inline policy is used as part of the
  *             role's access (permissions) policy. The role's trust policy is created at the same time
  *             as the role, using <a>CreateRole</a>. You can update a role's trust policy
  *             using <a>UpdateAssumeRolePolicy</a>. For more information about IAM roles,
  *             see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html">Using roles to
  *                 delegate permissions and federate identities</a>.</p>
- *         <p>A role can also have a managed policy attached to it. To attach a managed policy to a
+ *          <p>A role can also have a managed policy attached to it. To attach a managed policy to a
  *             role, use <a>AttachRolePolicy</a>. To create a new managed policy, use <a>CreatePolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
  *                 policies and inline policies</a> in the
  *             <i>IAM User Guide</i>.</p>
- *         <p>For information about the maximum number of inline policies that you can embed with a
+ *          <p>For information about the maximum number of inline policies that you can embed with a
  *             role, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS quotas</a> in the <i>IAM User Guide</i>.</p>
- *         <note>
+ *          <note>
  *             <p>Because policy documents can be large, you should use POST rather than GET when
  *                 calling <code>PutRolePolicy</code>. For general information about using the Query
  *                 API with IAM, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_UsingQueryAPI.html">Making query requests</a> in the
  *                     <i>IAM User Guide</i>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutUserPermissionsBoundaryCommand.d.ts

@@ -13,12 +13,12 @@ export interface PutUserPermissionsBoundaryCommandOutput extends __MetadataBeare
  *             a user. Use the boundary to control the maximum permissions that the user can have.
  *             Setting a permissions boundary is an advanced feature that can affect the permissions
  *             for the user.</p>
- *         <important>
+ *          <important>
  *             <p>Policies that are used as permissions boundaries do not provide permissions. You
  *                 must also attach a permissions policy to the user. To learn how the effective
  *                 permissions for a user are evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy
  *                     evaluation logic</a> in the IAM User Guide. </p>
- *         </important>
+ *          </important>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutUserPolicyCommand.d.ts

@@ -10,19 +10,19 @@ export interface PutUserPolicyCommandOutput extends __MetadataBearer {
 /**
  * <p>Adds or updates an inline policy document that is embedded in the specified IAM
  *             user.</p>
- *         <p>An IAM user can also have a managed policy attached to it. To attach a managed
+ *          <p>An IAM user can also have a managed policy attached to it. To attach a managed
  *             policy to a user, use <a>AttachUserPolicy</a>. To create a new managed
  *             policy, use <a>CreatePolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
  *                 policies and inline policies</a> in the
  *             <i>IAM User Guide</i>.</p>
- *         <p>For information about the maximum number of inline policies that you can embed in a
+ *          <p>For information about the maximum number of inline policies that you can embed in a
  *             user, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS quotas</a> in the <i>IAM User Guide</i>.</p>
- *         <note>
+ *          <note>
  *             <p>Because policy documents can be large, you should use POST rather than GET when
  *                 calling <code>PutUserPolicy</code>. For general information about using the Query
  *                 API with IAM, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_UsingQueryAPI.html">Making query requests</a> in the
  *                     <i>IAM User Guide</i>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/RemoveClientIDFromOpenIDConnectProviderCommand.d.ts

@@ -11,7 +11,7 @@ export interface RemoveClientIDFromOpenIDConnectProviderCommandOutput extends __
  * <p>Removes the specified client ID (also known as audience) from the list of client IDs
  *             registered for the specified IAM OpenID Connect (OIDC) provider resource
  *             object.</p>
- *         <p>This operation is idempotent; it does not fail or return an error if you try to remove
+ *          <p>This operation is idempotent; it does not fail or return an error if you try to remove
  *             a client ID that does not exist.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/RemoveRoleFromInstanceProfileCommand.d.ts

@@ -9,13 +9,13 @@ export interface RemoveRoleFromInstanceProfileCommandOutput extends __MetadataBe
 }
 /**
  * <p>Removes the specified IAM role from the specified EC2 instance profile.</p>
- *         <important>
+ *          <important>
  *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you
  *                 are about to remove from the instance profile. Removing a role from an instance
  *                 profile that is associated with a running instance might break any applications
  *                 running on the instance.</p>
- *         </important>
- *         <p> For more information about IAM roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">Working with roles</a>. For more
+ *          </important>
+ *          <p> For more information about IAM roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">Working with roles</a>. For more
  *             information about instance profiles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About instance
  *             profiles</a>.</p>
  * @example

package/dist-types/commands/ResyncMFADeviceCommand.d.ts

@@ -10,7 +10,7 @@ export interface ResyncMFADeviceCommandOutput extends __MetadataBearer {
 /**
  * <p>Synchronizes the specified MFA device with its IAM resource object on the Amazon Web Services
  *             servers.</p>
- *         <p>For more information about creating and working with virtual MFA devices, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html">Using a virtual MFA
+ *          <p>For more information about creating and working with virtual MFA devices, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html">Using a virtual MFA
  *                 device</a> in the <i>IAM User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/SetDefaultPolicyVersionCommand.d.ts

@@ -10,9 +10,9 @@ export interface SetDefaultPolicyVersionCommandOutput extends __MetadataBearer {
 /**
  * <p>Sets the specified version of the specified policy as the policy's default (operative)
  *             version.</p>
- *         <p>This operation affects all users, groups, and roles that the policy is attached to. To
+ *          <p>This operation affects all users, groups, and roles that the policy is attached to. To
  *             list the users, groups, and roles that the policy is attached to, use <a>ListEntitiesForPolicy</a>.</p>
- *         <p>For information about managed policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
+ *          <p>For information about managed policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
  *                 policies</a> in the <i>IAM User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/SetSecurityTokenServicePreferencesCommand.d.ts

@@ -10,13 +10,13 @@ export interface SetSecurityTokenServicePreferencesCommandOutput extends __Metad
 /**
  * <p>Sets the specified version of the global endpoint token as the token version used for
  *             the Amazon Web Services account.</p>
- *         <p>By default, Security Token Service (STS) is available as a global service, and all STS requests
+ *          <p>By default, Security Token Service (STS) is available as a global service, and all STS requests
  *             go to a single endpoint at <code>https://sts.amazonaws.com</code>. Amazon Web Services recommends
  *             using Regional STS endpoints to reduce latency, build in redundancy, and increase
  *             session token availability. For information about Regional endpoints for STS, see
  *                 <a href="https://docs.aws.amazon.com/general/latest/gr/sts.html">Security Token Service
  *                 endpoints and quotas</a> in the <i>Amazon Web Services General Reference</i>.</p>
- *         <p>If you make an STS call to the global endpoint, the resulting session tokens might
+ *          <p>If you make an STS call to the global endpoint, the resulting session tokens might
  *             be valid in some Regions but not others. It depends on the version that is set in this
  *             operation. Version 1 tokens are valid only in Amazon Web Services Regions that are
  *             available by default. These tokens do not work in manually enabled Regions, such as Asia
@@ -25,7 +25,7 @@ export interface SetSecurityTokenServicePreferencesCommandOutput extends __Metad
  *             information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html">Activating and
  *                 deactivating STS in an Amazon Web Services Region</a> in the
  *                 <i>IAM User Guide</i>.</p>
- *         <p>To view the current session token version, see the
+ *          <p>To view the current session token version, see the
  *                 <code>GlobalEndpointTokenVersion</code> entry in the response of the <a>GetAccountSummary</a> operation.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/SimulateCustomPolicyCommand.d.ts

@@ -11,20 +11,27 @@ export interface SimulateCustomPolicyCommandOutput extends SimulatePolicyRespons
  * <p>Simulate how a set of IAM policies and optionally a resource-based policy works with
  *             a list of API operations and Amazon Web Services resources to determine the policies' effective
  *             permissions. The policies are provided as strings.</p>
- *         <p>The simulation does not perform the API operations; it only checks the authorization
+ *          <p>The simulation does not perform the API operations; it only checks the authorization
  *             to determine if the simulated policies allow or deny the operations. You can simulate
  *             resources that don't exist in your account.</p>
- *         <p>If you want to simulate existing policies that are attached to an IAM user, group,
+ *          <p>If you want to simulate existing policies that are attached to an IAM user, group,
  *             or role, use <a>SimulatePrincipalPolicy</a> instead.</p>
- *         <p>Context keys are variables that are maintained by Amazon Web Services and its services and which
+ *          <p>Context keys are variables that are maintained by Amazon Web Services and its services and which
  *             provide details about the context of an API query request. You can use the
  *                 <code>Condition</code> element of an IAM policy to evaluate context keys. To get
  *             the list of context keys that the policies require for correct simulation, use <a>GetContextKeysForCustomPolicy</a>.</p>
- *         <p>If the output is long, you can use <code>MaxItems</code> and <code>Marker</code>
+ *          <p>If the output is long, you can use <code>MaxItems</code> and <code>Marker</code>
  *             parameters to paginate the results.</p>
- *         <p>For more information about using the policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM policies
- *                 with the IAM policy simulator </a>in the
- *             <i>IAM User Guide</i>.</p>
+ *          <note>
+ *             <p>The IAM policy simulator evaluates statements in the identity-based policy and
+ *                 the inputs that you provide during simulation. The policy simulator results can
+ *                 differ from your live Amazon Web Services environment. We recommend that you check your policies
+ *                 against your live Amazon Web Services environment after testing using the policy simulator to
+ *                 confirm that you have the desired results. For more information about using the
+ *                 policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM
+ *                     policies with the IAM policy simulator </a>in the
+ *                     <i>IAM User Guide</i>.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/SimulatePrincipalPolicyCommand.d.ts

@@ -13,27 +13,34 @@ export interface SimulatePrincipalPolicyCommandOutput extends SimulatePolicyResp
  *             entity can be an IAM user, group, or role. If you specify a user, then the simulation
  *             also includes all of the policies that are attached to groups that the user belongs to.
  *             You can simulate resources that don't exist in your account.</p>
- *         <p>You can optionally include a list of one or more additional policies specified as
+ *          <p>You can optionally include a list of one or more additional policies specified as
  *             strings to include in the simulation. If you want to simulate only policies specified as
  *             strings, use <a>SimulateCustomPolicy</a> instead.</p>
- *         <p>You can also optionally include one resource-based policy to be evaluated with each of
- *             the resources included in the simulation.</p>
- *         <p>The simulation does not perform the API operations; it only checks the authorization
+ *          <p>You can also optionally include one resource-based policy to be evaluated with each of
+ *             the resources included in the simulation for IAM users only.</p>
+ *          <p>The simulation does not perform the API operations; it only checks the authorization
  *             to determine if the simulated policies allow or deny the operations.</p>
- *         <p>
+ *          <p>
  *             <b>Note:</b> This operation discloses information about the
  *             permissions granted to other users. If you do not want users to see other user's
  *             permissions, then consider allowing them to use <a>SimulateCustomPolicy</a>
  *             instead.</p>
- *         <p>Context keys are variables maintained by Amazon Web Services and its services that provide details
+ *          <p>Context keys are variables maintained by Amazon Web Services and its services that provide details
  *             about the context of an API query request. You can use the <code>Condition</code>
  *             element of an IAM policy to evaluate context keys. To get the list of context keys
  *             that the policies require for correct simulation, use <a>GetContextKeysForPrincipalPolicy</a>.</p>
- *         <p>If the output is long, you can use the <code>MaxItems</code> and <code>Marker</code>
+ *          <p>If the output is long, you can use the <code>MaxItems</code> and <code>Marker</code>
  *             parameters to paginate the results.</p>
- *         <p>For more information about using the policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM policies
- *                 with the IAM policy simulator </a>in the
- *             <i>IAM User Guide</i>.</p>
+ *          <note>
+ *             <p>The IAM policy simulator evaluates statements in the identity-based policy and
+ *                 the inputs that you provide during simulation. The policy simulator results can
+ *                 differ from your live Amazon Web Services environment. We recommend that you check your policies
+ *                 against your live Amazon Web Services environment after testing using the policy simulator to
+ *                 confirm that you have the desired results. For more information about using the
+ *                 policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM
+ *                     policies with the IAM policy simulator </a>in the
+ *                     <i>IAM User Guide</i>.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateAccessKeyCommand.d.ts

@@ -11,14 +11,14 @@ export interface UpdateAccessKeyCommandOutput extends __MetadataBearer {
  * <p>Changes the status of the specified access key from Active to Inactive, or vice versa.
  *             This operation can be used to disable a user's key as part of a key rotation
  *             workflow.</p>
- *         <p>If the <code>UserName</code> is not specified, the user name is determined implicitly
+ *          <p>If the <code>UserName</code> is not specified, the user name is determined implicitly
  *             based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
  *             used, then <code>UserName</code> is required. If a long-term key is assigned to the
  *             user, then <code>UserName</code> is not required. This operation works for access keys
  *             under the Amazon Web Services account. Consequently, you can use this operation to manage
  *             Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
  *             users.</p>
- *         <p>For information about rotating keys, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html">Managing keys and certificates</a>
+ *          <p>For information about rotating keys, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html">Managing keys and certificates</a>
  *             in the <i>IAM User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/UpdateAccountPasswordPolicyCommand.d.ts

@@ -9,15 +9,15 @@ export interface UpdateAccountPasswordPolicyCommandOutput extends __MetadataBear
 }
 /**
  * <p>Updates the password policy settings for the Amazon Web Services account.</p>
- *         <note>
+ *          <note>
  *             <p>This operation does not support partial updates. No parameters are required, but
  *                 if you do not specify a parameter, that parameter's value reverts to its default
  *                 value. See the <b>Request Parameters</b> section for each
  *                 parameter's default value. Also note that some parameters do not allow the default
  *                 parameter to be explicitly set. Instead, to invoke the default value, do not include
  *                 that parameter when you invoke the operation.</p>
- *         </note>
- *         <p> For more information about using a password policy, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html">Managing an IAM password
+ *          </note>
+ *          <p> For more information about using a password policy, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html">Managing an IAM password
  *                 policy</a> in the <i>IAM User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/UpdateGroupCommand.d.ts

@@ -9,12 +9,12 @@ export interface UpdateGroupCommandOutput extends __MetadataBearer {
 }
 /**
  * <p>Updates the name and/or the path of the specified IAM group.</p>
- *         <important>
+ *          <important>
  *             <p> You should understand the implications of changing a group's path or name. For
  *                 more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html">Renaming users and
  *                     groups</a> in the <i>IAM User Guide</i>.</p>
- *         </important>
- *         <note>
+ *          </important>
+ *          <note>
  *             <p>The person making the request (the principal), must have permission to change the
  *                 role group with the old name and the new name. For example, to change the group
  *                 named <code>Managers</code> to <code>MGRs</code>, the principal must have a policy
@@ -22,7 +22,7 @@ export interface UpdateGroupCommandOutput extends __MetadataBearer {
  *                 the <code>Managers</code> group, but not the <code>MGRs</code> group, then the
  *                 update fails. For more information about permissions, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access management</a>.
  *             </p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateLoginProfileCommand.d.ts

@@ -8,12 +8,12 @@ export interface UpdateLoginProfileCommandInput extends UpdateLoginProfileReques
 export interface UpdateLoginProfileCommandOutput extends __MetadataBearer {
 }
 /**
- * <p>Changes the password for the specified IAM user. You can use the CLI,
- *             the Amazon Web Services API, or the <b>Users</b> page in the IAM console
- *             to change the password for any IAM user. Use <a>ChangePassword</a> to
- *             change your own password in the <b>My Security Credentials</b>
- *             page in the Amazon Web Services Management Console.</p>
- *         <p>For more information about modifying passwords, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html">Managing passwords</a> in the
+ * <p>Changes the password for the specified IAM user. You can use the CLI, the Amazon Web Services
+ *             API, or the <b>Users</b> page in the IAM console to change
+ *             the password for any IAM user. Use <a>ChangePassword</a> to change your own
+ *             password in the <b>My Security Credentials</b> page in the
+ *             Amazon Web Services Management Console.</p>
+ *          <p>For more information about modifying passwords, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html">Managing passwords</a> in the
  *                 <i>IAM User Guide</i>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/UpdateOpenIDConnectProviderThumbprintCommand.d.ts

@@ -10,26 +10,27 @@ export interface UpdateOpenIDConnectProviderThumbprintCommandOutput extends __Me
 /**
  * <p>Replaces the existing list of server certificate thumbprints associated with an OpenID
  *             Connect (OIDC) provider resource object with a new list of thumbprints.</p>
- *         <p>The list that you pass with this operation completely replaces the existing list of
+ *          <p>The list that you pass with this operation completely replaces the existing list of
  *             thumbprints. (The lists are not merged.)</p>
- *         <p>Typically, you need to update a thumbprint only when the identity provider certificate
+ *          <p>Typically, you need to update a thumbprint only when the identity provider certificate
  *             changes, which occurs rarely. However, if the provider's certificate
  *                 <i>does</i> change, any attempt to assume an IAM role that specifies
  *             the OIDC provider as a principal fails until the certificate thumbprint is
  *             updated.</p>
- *         <note>
+ *          <note>
  *             <p>Amazon Web Services secures communication with some OIDC identity providers (IdPs) through our
  *             library of trusted certificate authorities (CAs) instead of using a certificate
- *             thumbprint to verify your IdP server certificate. These OIDC IdPs include Google, and
- *             those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS) endpoint. In these
- *             cases, your legacy thumbprint remains in your configuration, but is no longer used for validation.</p>
+ *             thumbprint to verify your IdP server certificate. These OIDC IdPs include Google, Auth0,
+ *             and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS) endpoint. In these
+ *             cases, your legacy thumbprint remains in your configuration, but is no longer used for
+ *             validation.</p>
  *          </note>
- *         <note>
+ *          <note>
  *             <p>Trust for the OIDC provider is derived from the provider certificate and is
  *                 validated by the thumbprint. Therefore, it is best to limit access to the
  *                     <code>UpdateOpenIDConnectProviderThumbprint</code> operation to highly
  *                 privileged users.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateRoleDescriptionCommand.d.ts

@@ -9,7 +9,7 @@ export interface UpdateRoleDescriptionCommandOutput extends UpdateRoleDescriptio
 }
 /**
  * <p>Use <a>UpdateRole</a> instead.</p>
- *         <p>Modifies only the description of a role. This operation performs the same function as
+ *          <p>Modifies only the description of a role. This operation performs the same function as
  *             the <code>Description</code> parameter in the <code>UpdateRole</code> operation.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/UpdateSAMLProviderCommand.d.ts

@@ -9,9 +9,9 @@ export interface UpdateSAMLProviderCommandOutput extends UpdateSAMLProviderRespo
 }
 /**
  * <p>Updates the metadata document for an existing SAML provider resource object.</p>
- *         <note>
+ *          <note>
  *             <p>This operation requires <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version 4</a>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateSSHPublicKeyCommand.d.ts

@@ -11,7 +11,7 @@ export interface UpdateSSHPublicKeyCommandOutput extends __MetadataBearer {
  * <p>Sets the status of an IAM user's SSH public key to active or inactive. SSH public
  *             keys that are inactive cannot be used for authentication. This operation can be used to
  *             disable a user's SSH public key as part of a key rotation work flow.</p>
- *         <p>The SSH public key affected by this operation is used only for authenticating the
+ *          <p>The SSH public key affected by this operation is used only for authenticating the
  *             associated IAM user to an CodeCommit repository. For more information about using SSH keys
  *             to authenticate to an CodeCommit repository, see <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-credentials-ssh.html">Set up CodeCommit for
  *                 SSH connections</a> in the <i>CodeCommit User Guide</i>.</p>

package/dist-types/commands/UpdateServerCertificateCommand.d.ts

@@ -10,16 +10,16 @@ export interface UpdateServerCertificateCommandOutput extends __MetadataBearer {
 /**
  * <p>Updates the name and/or the path of the specified server certificate stored in
  *             IAM.</p>
- *         <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
+ *          <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
  *                 with server certificates</a> in the <i>IAM User Guide</i>. This
  *             topic also includes a list of Amazon Web Services services that can use the server certificates that
  *             you manage with IAM.</p>
- *         <important>
+ *          <important>
  *             <p>You should understand the implications of changing a server certificate's path or
  *                 name. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs_manage.html#RenamingServerCerts">Renaming a server certificate</a> in the
  *                     <i>IAM User Guide</i>.</p>
- *         </important>
- *         <note>
+ *          </important>
+ *          <note>
  *             <p>The person making the request (the principal), must have permission to change the
  *                 server certificate with the old name and the new name. For example, to change the
  *                 certificate named <code>ProductionCert</code> to <code>ProdCert</code>, the
@@ -27,7 +27,7 @@ export interface UpdateServerCertificateCommandOutput extends __MetadataBearer {
  *                 principal has permission to update the <code>ProductionCert</code> group, but not
  *                 the <code>ProdCert</code> certificate, then the update fails. For more information
  *                 about permissions, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html">Access management</a> in the <i>IAM User Guide</i>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateSigningCertificateCommand.d.ts

@@ -11,7 +11,7 @@ export interface UpdateSigningCertificateCommandOutput extends __MetadataBearer
  * <p>Changes the status of the specified user signing certificate from active to disabled,
  *             or vice versa. This operation can be used to disable an IAM user's signing certificate
  *             as part of a certificate rotation work flow.</p>
- *         <p>If the <code>UserName</code> field is not specified, the user name is determined
+ *          <p>If the <code>UserName</code> field is not specified, the user name is determined
  *             implicitly based on the Amazon Web Services access key ID used to sign the request. This operation
  *             works for access keys under the Amazon Web Services account. Consequently, you can use this operation
  *             to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no

package/dist-types/commands/UpdateUserCommand.d.ts

@@ -9,18 +9,18 @@ export interface UpdateUserCommandOutput extends __MetadataBearer {
 }
 /**
  * <p>Updates the name and/or the path of the specified IAM user.</p>
- *         <important>
+ *          <important>
  *             <p> You should understand the implications of changing an IAM user's path or name.
  *                 For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_manage.html#id_users_renaming">Renaming an IAM
  *                     user</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_groups_manage_rename.html">Renaming an IAM
  *                     group</a> in the <i>IAM User Guide</i>.</p>
- *         </important>
- *         <note>
+ *          </important>
+ *          <note>
  *             <p> To change a user name, the requester must have appropriate permissions on both
  *                 the source object and the target object. For example, to change Bob to Robert, the
  *                 entity making the request must have permission on Bob and Robert, or must have
  *                 permission on all (*). For more information about permissions, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/PermissionsAndPolicies.html">Permissions and policies</a>. </p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UploadSSHPublicKeyCommand.d.ts

@@ -9,7 +9,7 @@ export interface UploadSSHPublicKeyCommandOutput extends UploadSSHPublicKeyRespo
 }
 /**
  * <p>Uploads an SSH public key and associates it with the specified IAM user.</p>
- *         <p>The SSH public key uploaded by this operation can be used only for authenticating the
+ *          <p>The SSH public key uploaded by this operation can be used only for authenticating the
  *             associated IAM user to an CodeCommit repository. For more information about using SSH keys
  *             to authenticate to an CodeCommit repository, see <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-credentials-ssh.html">Set up CodeCommit for
  *                 SSH connections</a> in the <i>CodeCommit User Guide</i>.</p>

package/dist-types/commands/UploadServerCertificateCommand.d.ts

@@ -11,19 +11,19 @@ export interface UploadServerCertificateCommandOutput extends UploadServerCertif
  * <p>Uploads a server certificate entity for the Amazon Web Services account. The server certificate
  *             entity includes a public key certificate, a private key, and an optional certificate
  *             chain, which should all be PEM-encoded.</p>
- *         <p>We recommend that you use <a href="https://docs.aws.amazon.com/acm/">Certificate Manager</a> to
+ *          <p>We recommend that you use <a href="https://docs.aws.amazon.com/acm/">Certificate Manager</a> to
  *             provision, manage, and deploy your server certificates. With ACM you can request a
  *             certificate, deploy it to Amazon Web Services resources, and let ACM handle certificate renewals for
  *             you. Certificates provided by ACM are free. For more information about using ACM,
  *             see the <a href="https://docs.aws.amazon.com/acm/latest/userguide/">Certificate Manager User
  *                 Guide</a>.</p>
- *         <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
+ *          <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
  *                 with server certificates</a> in the <i>IAM User Guide</i>. This
  *             topic includes a list of Amazon Web Services services that can use the server certificates that you
  *             manage with IAM.</p>
- *         <p>For information about the number of server certificates you can upload, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS
+ *          <p>For information about the number of server certificates you can upload, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS
  *                 quotas</a> in the <i>IAM User Guide</i>.</p>
- *         <note>
+ *          <note>
  *             <p>Because the body of the public key certificate, private key, and the certificate
  *                 chain can be large, you should use POST rather than GET when calling
  *                     <code>UploadServerCertificate</code>. For information about setting up
@@ -31,7 +31,7 @@ export interface UploadServerCertificateCommandOutput extends UploadServerCertif
  *                     requests</a> in the <i>Amazon Web Services General Reference</i>. For general
  *                 information about using the Query API with IAM, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/programming.html">Calling the API by making HTTP query
  *                     requests</a> in the <i>IAM User Guide</i>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UploadSigningCertificateCommand.d.ts

@@ -12,22 +12,22 @@ export interface UploadSigningCertificateCommandOutput extends UploadSigningCert
  *             Some Amazon Web Services services require you to use certificates to validate requests that are signed
  *             with a corresponding private key. When you upload the certificate, its default status is
  *                 <code>Active</code>.</p>
- *         <p>For information about when you would use an X.509 signing certificate, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Managing
+ *          <p>For information about when you would use an X.509 signing certificate, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Managing
  *                 server certificates in IAM</a> in the
  *             <i>IAM User Guide</i>.</p>
- *         <p>If the <code>UserName</code> is not specified, the IAM user name is determined
+ *          <p>If the <code>UserName</code> is not specified, the IAM user name is determined
  *             implicitly based on the Amazon Web Services access key ID used to sign the request. This operation
  *             works for access keys under the Amazon Web Services account. Consequently, you can use this operation
  *             to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no
  *             associated users.</p>
- *         <note>
+ *          <note>
  *             <p>Because the body of an X.509 certificate can be large, you should use POST rather
  *                 than GET when calling <code>UploadSigningCertificate</code>. For information about
  *                 setting up signatures and authorization through the API, see <a href="https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html">Signing
  *                     Amazon Web Services API requests</a> in the <i>Amazon Web Services General Reference</i>. For
  *                 general information about using the Query API with IAM, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_UsingQueryAPI.html">Making query
  *                     requests</a> in the <i>IAM User Guide</i>.</p>
- *         </note>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/endpoint/EndpointParameters.d.ts

@@ -12,7 +12,7 @@ export declare const resolveClientEndpointParameters: <T>(options: T & ClientInp
     defaultSigningName: string;
 };
 export interface EndpointParameters extends __EndpointParameters {
-    Region?: string;
+    Region: string;
     UseDualStack?: boolean;
     UseFIPS?: boolean;
     Endpoint?: string;