@aws-sdk/client-iam 3.262.0 → 3.264.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/endpoint/ruleset.js +3 -3
- package/dist-es/endpoint/ruleset.js +3 -3
- package/dist-types/IAM.d.ts +384 -351
- package/dist-types/commands/AddClientIDToOpenIDConnectProviderCommand.d.ts +1 -1
- package/dist-types/commands/AddRoleToInstanceProfileCommand.d.ts +3 -3
- package/dist-types/commands/AttachGroupPolicyCommand.d.ts +3 -3
- package/dist-types/commands/AttachRolePolicyCommand.d.ts +4 -4
- package/dist-types/commands/AttachUserPolicyCommand.d.ts +3 -3
- package/dist-types/commands/ChangePasswordCommand.d.ts +1 -1
- package/dist-types/commands/CreateAccessKeyCommand.d.ts +4 -4
- package/dist-types/commands/CreateGroupCommand.d.ts +1 -1
- package/dist-types/commands/CreateInstanceProfileCommand.d.ts +1 -1
- package/dist-types/commands/CreateLoginProfileCommand.d.ts +2 -2
- package/dist-types/commands/CreateOpenIDConnectProviderCommand.d.ts +15 -14
- package/dist-types/commands/CreatePolicyCommand.d.ts +3 -3
- package/dist-types/commands/CreatePolicyVersionCommand.d.ts +2 -2
- package/dist-types/commands/CreateSAMLProviderCommand.d.ts +5 -5
- package/dist-types/commands/CreateServiceLinkedRoleCommand.d.ts +1 -1
- package/dist-types/commands/CreateServiceSpecificCredentialCommand.d.ts +4 -4
- package/dist-types/commands/CreateUserCommand.d.ts +1 -1
- package/dist-types/commands/CreateVirtualMFADeviceCommand.d.ts +3 -3
- package/dist-types/commands/DeactivateMFADeviceCommand.d.ts +1 -1
- package/dist-types/commands/DeleteAccessKeyCommand.d.ts +1 -1
- package/dist-types/commands/DeleteGroupPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeleteInstanceProfileCommand.d.ts +3 -3
- package/dist-types/commands/DeleteLoginProfileCommand.d.ts +3 -3
- package/dist-types/commands/DeleteOpenIDConnectProviderCommand.d.ts +2 -2
- package/dist-types/commands/DeletePolicyCommand.d.ts +6 -6
- package/dist-types/commands/DeletePolicyVersionCommand.d.ts +2 -2
- package/dist-types/commands/DeleteRoleCommand.d.ts +21 -4
- package/dist-types/commands/DeleteRolePermissionsBoundaryCommand.d.ts +2 -2
- package/dist-types/commands/DeleteRolePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeleteSAMLProviderCommand.d.ts +3 -3
- package/dist-types/commands/DeleteSSHPublicKeyCommand.d.ts +1 -1
- package/dist-types/commands/DeleteServerCertificateCommand.d.ts +3 -3
- package/dist-types/commands/DeleteServiceLinkedRoleCommand.d.ts +2 -2
- package/dist-types/commands/DeleteSigningCertificateCommand.d.ts +1 -1
- package/dist-types/commands/DeleteUserCommand.d.ts +10 -10
- package/dist-types/commands/DeleteUserPermissionsBoundaryCommand.d.ts +2 -2
- package/dist-types/commands/DeleteUserPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DeleteVirtualMFADeviceCommand.d.ts +2 -2
- package/dist-types/commands/DetachGroupPolicyCommand.d.ts +1 -1
- package/dist-types/commands/DetachRolePolicyCommand.d.ts +1 -1
- package/dist-types/commands/DetachUserPolicyCommand.d.ts +1 -1
- package/dist-types/commands/GenerateOrganizationsAccessReportCommand.d.ts +22 -22
- package/dist-types/commands/GenerateServiceLastAccessedDetailsCommand.d.ts +12 -12
- package/dist-types/commands/GetAccountAuthorizationDetailsCommand.d.ts +2 -2
- package/dist-types/commands/GetAccountSummaryCommand.d.ts +1 -1
- package/dist-types/commands/GetContextKeysForCustomPolicyCommand.d.ts +1 -1
- package/dist-types/commands/GetContextKeysForPrincipalPolicyCommand.d.ts +3 -3
- package/dist-types/commands/GetGroupPolicyCommand.d.ts +3 -3
- package/dist-types/commands/GetLoginProfileCommand.d.ts +2 -2
- package/dist-types/commands/GetOrganizationsAccessReportCommand.d.ts +4 -4
- package/dist-types/commands/GetPolicyCommand.d.ts +2 -2
- package/dist-types/commands/GetPolicyVersionCommand.d.ts +5 -5
- package/dist-types/commands/GetRoleCommand.d.ts +1 -1
- package/dist-types/commands/GetRolePolicyCommand.d.ts +4 -4
- package/dist-types/commands/GetSAMLProviderCommand.d.ts +2 -2
- package/dist-types/commands/GetSSHPublicKeyCommand.d.ts +1 -1
- package/dist-types/commands/GetServerCertificateCommand.d.ts +1 -1
- package/dist-types/commands/GetServiceLastAccessedDetailsCommand.d.ts +12 -12
- package/dist-types/commands/GetServiceLastAccessedDetailsWithEntitiesCommand.d.ts +6 -6
- package/dist-types/commands/GetUserCommand.d.ts +1 -1
- package/dist-types/commands/GetUserPolicyCommand.d.ts +3 -3
- package/dist-types/commands/ListAccessKeysCommand.d.ts +4 -4
- package/dist-types/commands/ListAttachedGroupPoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListAttachedRolePoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListAttachedUserPoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListEntitiesForPolicyCommand.d.ts +2 -2
- package/dist-types/commands/ListGroupPoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListGroupsCommand.d.ts +1 -1
- package/dist-types/commands/ListGroupsForUserCommand.d.ts +1 -1
- package/dist-types/commands/ListInstanceProfilesCommand.d.ts +3 -3
- package/dist-types/commands/ListInstanceProfilesForRoleCommand.d.ts +1 -1
- package/dist-types/commands/ListMFADevicesCommand.d.ts +1 -1
- package/dist-types/commands/ListOpenIDConnectProvidersCommand.d.ts +2 -2
- package/dist-types/commands/ListPoliciesCommand.d.ts +5 -5
- package/dist-types/commands/ListPoliciesGrantingServiceAccessCommand.d.ts +9 -9
- package/dist-types/commands/ListPolicyVersionsCommand.d.ts +1 -1
- package/dist-types/commands/ListRolePoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListRolesCommand.d.ts +3 -3
- package/dist-types/commands/ListSAMLProvidersCommand.d.ts +2 -2
- package/dist-types/commands/ListSSHPublicKeysCommand.d.ts +2 -2
- package/dist-types/commands/ListServerCertificatesCommand.d.ts +4 -4
- package/dist-types/commands/ListSigningCertificatesCommand.d.ts +2 -2
- package/dist-types/commands/ListUserPoliciesCommand.d.ts +2 -2
- package/dist-types/commands/ListUsersCommand.d.ts +3 -3
- package/dist-types/commands/ListVirtualMFADevicesCommand.d.ts +3 -3
- package/dist-types/commands/PutGroupPolicyCommand.d.ts +4 -4
- package/dist-types/commands/PutRolePermissionsBoundaryCommand.d.ts +3 -3
- package/dist-types/commands/PutRolePolicyCommand.d.ts +5 -5
- package/dist-types/commands/PutUserPermissionsBoundaryCommand.d.ts +2 -2
- package/dist-types/commands/PutUserPolicyCommand.d.ts +4 -4
- package/dist-types/commands/RemoveClientIDFromOpenIDConnectProviderCommand.d.ts +1 -1
- package/dist-types/commands/RemoveRoleFromInstanceProfileCommand.d.ts +3 -3
- package/dist-types/commands/ResyncMFADeviceCommand.d.ts +1 -1
- package/dist-types/commands/SetDefaultPolicyVersionCommand.d.ts +2 -2
- package/dist-types/commands/SetSecurityTokenServicePreferencesCommand.d.ts +3 -3
- package/dist-types/commands/SimulateCustomPolicyCommand.d.ts +14 -7
- package/dist-types/commands/SimulatePrincipalPolicyCommand.d.ts +17 -10
- package/dist-types/commands/UpdateAccessKeyCommand.d.ts +2 -2
- package/dist-types/commands/UpdateAccountPasswordPolicyCommand.d.ts +3 -3
- package/dist-types/commands/UpdateGroupCommand.d.ts +4 -4
- package/dist-types/commands/UpdateLoginProfileCommand.d.ts +6 -6
- package/dist-types/commands/UpdateOpenIDConnectProviderThumbprintCommand.d.ts +9 -8
- package/dist-types/commands/UpdateRoleDescriptionCommand.d.ts +1 -1
- package/dist-types/commands/UpdateSAMLProviderCommand.d.ts +2 -2
- package/dist-types/commands/UpdateSSHPublicKeyCommand.d.ts +1 -1
- package/dist-types/commands/UpdateServerCertificateCommand.d.ts +5 -5
- package/dist-types/commands/UpdateSigningCertificateCommand.d.ts +1 -1
- package/dist-types/commands/UpdateUserCommand.d.ts +4 -4
- package/dist-types/commands/UploadSSHPublicKeyCommand.d.ts +1 -1
- package/dist-types/commands/UploadServerCertificateCommand.d.ts +5 -5
- package/dist-types/commands/UploadSigningCertificateCommand.d.ts +4 -4
- package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +319 -282
- package/dist-types/models/models_1.d.ts +51 -51
- package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
- package/package.json +4 -4
|
@@ -14,51 +14,51 @@ export interface GetServiceLastAccessedDetailsCommandOutput extends GetServiceLa
|
|
|
14
14
|
* retrieve the status of your report job. When the report is complete, you can retrieve
|
|
15
15
|
* the generated report. The report includes a list of Amazon Web Services services that the resource
|
|
16
16
|
* (user, group, role, or managed policy) can access.</p>
|
|
17
|
-
*
|
|
17
|
+
* <note>
|
|
18
18
|
* <p>Service last accessed data does not use other policy types when determining
|
|
19
19
|
* whether a resource could access a service. These other policy types include
|
|
20
20
|
* resource-based policies, access control lists, Organizations policies, IAM permissions
|
|
21
21
|
* boundaries, and STS assume role policies. It only applies permissions policy
|
|
22
22
|
* logic. For more about the evaluation of policy types, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html#policy-eval-basics">Evaluating policies</a> in the
|
|
23
23
|
* <i>IAM User Guide</i>.</p>
|
|
24
|
-
*
|
|
25
|
-
*
|
|
24
|
+
* </note>
|
|
25
|
+
* <p>For each service that the resource could access using permissions policies, the
|
|
26
26
|
* operation returns details about the most recent access attempt. If there was no attempt,
|
|
27
27
|
* the service is listed without details about the most recent attempt to access the
|
|
28
28
|
* service. If the operation fails, the <code>GetServiceLastAccessedDetails</code>
|
|
29
29
|
* operation returns the reason that it failed.</p>
|
|
30
|
-
*
|
|
30
|
+
* <p>The <code>GetServiceLastAccessedDetails</code> operation returns a list of services.
|
|
31
31
|
* This list includes the number of entities that have attempted to access the service and
|
|
32
32
|
* the date and time of the last attempt. It also returns the ARN of the following entity,
|
|
33
33
|
* depending on the resource ARN that you used to generate the report:</p>
|
|
34
|
-
*
|
|
34
|
+
* <ul>
|
|
35
35
|
* <li>
|
|
36
|
-
*
|
|
36
|
+
* <p>
|
|
37
37
|
* <b>User</b> – Returns the user ARN that you
|
|
38
38
|
* used to generate the report</p>
|
|
39
39
|
* </li>
|
|
40
40
|
* <li>
|
|
41
|
-
*
|
|
41
|
+
* <p>
|
|
42
42
|
* <b>Group</b> – Returns the ARN of the group
|
|
43
43
|
* member (user) that last attempted to access the service</p>
|
|
44
44
|
* </li>
|
|
45
45
|
* <li>
|
|
46
|
-
*
|
|
46
|
+
* <p>
|
|
47
47
|
* <b>Role</b> – Returns the role ARN that you
|
|
48
48
|
* used to generate the report</p>
|
|
49
49
|
* </li>
|
|
50
50
|
* <li>
|
|
51
|
-
*
|
|
51
|
+
* <p>
|
|
52
52
|
* <b>Policy</b> – Returns the ARN of the user
|
|
53
53
|
* or role that last used the policy to attempt to access the service</p>
|
|
54
54
|
* </li>
|
|
55
55
|
* </ul>
|
|
56
|
-
*
|
|
57
|
-
*
|
|
56
|
+
* <p>By default, the list is sorted by service namespace.</p>
|
|
57
|
+
* <p>If you specified <code>ACTION_LEVEL</code> granularity when you generated the report,
|
|
58
58
|
* this operation returns service and action last accessed data. This includes the most
|
|
59
59
|
* recent access attempt for each tracked action within a service. Otherwise, this
|
|
60
60
|
* operation returns only service data.</p>
|
|
61
|
-
*
|
|
61
|
+
* <p>For more information about service and action last accessed data, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Reducing permissions using service last accessed data</a> in the
|
|
62
62
|
* <i>IAM User Guide</i>.</p>
|
|
63
63
|
* @example
|
|
64
64
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -14,25 +14,25 @@ export interface GetServiceLastAccessedDetailsWithEntitiesCommandOutput extends
|
|
|
14
14
|
* <code>GetServiceLastAccessedDetailsWithEntities</code>. This operation retrieves the
|
|
15
15
|
* status of your report job and a list of entities that could have used group or policy
|
|
16
16
|
* permissions to access the specified service.</p>
|
|
17
|
-
*
|
|
17
|
+
* <ul>
|
|
18
18
|
* <li>
|
|
19
|
-
*
|
|
19
|
+
* <p>
|
|
20
20
|
* <b>Group</b> – For a group report, this
|
|
21
21
|
* operation returns a list of users in the group that could have used the group’s
|
|
22
22
|
* policies in an attempt to access the service.</p>
|
|
23
23
|
* </li>
|
|
24
24
|
* <li>
|
|
25
|
-
*
|
|
25
|
+
* <p>
|
|
26
26
|
* <b>Policy</b> – For a policy report, this
|
|
27
27
|
* operation returns a list of entities (users or roles) that could have used the
|
|
28
28
|
* policy in an attempt to access the service.</p>
|
|
29
29
|
* </li>
|
|
30
30
|
* </ul>
|
|
31
|
-
*
|
|
31
|
+
* <p>You can also use this operation for user or role reports to retrieve details about
|
|
32
32
|
* those entities.</p>
|
|
33
|
-
*
|
|
33
|
+
* <p>If the operation fails, the <code>GetServiceLastAccessedDetailsWithEntities</code>
|
|
34
34
|
* operation returns the reason that it failed.</p>
|
|
35
|
-
*
|
|
35
|
+
* <p>By default, the list of associated entities is sorted by date, with the most recent
|
|
36
36
|
* access listed first.</p>
|
|
37
37
|
* @example
|
|
38
38
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,7 +10,7 @@ export interface GetUserCommandOutput extends GetUserResponse, __MetadataBearer
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Retrieves information about the specified IAM user, including the user's creation
|
|
12
12
|
* date, path, unique ID, and ARN.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>If you do not specify a user name, IAM determines the user name implicitly based on
|
|
14
14
|
* the Amazon Web Services access key ID used to sign the request to this operation.</p>
|
|
15
15
|
* @example
|
|
16
16
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,18 +10,18 @@ export interface GetUserPolicyCommandOutput extends GetUserPolicyResponse, __Met
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Retrieves the specified inline policy document that is embedded in the specified IAM
|
|
12
12
|
* user.</p>
|
|
13
|
-
*
|
|
13
|
+
* <note>
|
|
14
14
|
* <p>Policies returned by this operation are URL-encoded compliant
|
|
15
15
|
* with <a href="https://tools.ietf.org/html/rfc3986">RFC 3986</a>. You can use a URL
|
|
16
16
|
* decoding method to convert the policy back to plain JSON text. For example, if you use Java, you
|
|
17
17
|
* can use the <code>decode</code> method of the <code>java.net.URLDecoder</code> utility class in
|
|
18
18
|
* the Java SDK. Other languages and SDKs provide similar functionality.</p>
|
|
19
19
|
* </note>
|
|
20
|
-
*
|
|
20
|
+
* <p>An IAM user can also have managed policies attached to it. To retrieve a managed
|
|
21
21
|
* policy document that is attached to a user, use <a>GetPolicy</a> to determine
|
|
22
22
|
* the policy's default version. Then use <a>GetPolicyVersion</a> to retrieve
|
|
23
23
|
* the policy document.</p>
|
|
24
|
-
*
|
|
24
|
+
* <p>For more information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
25
25
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
26
26
|
* @example
|
|
27
27
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,19 +10,19 @@ export interface ListAccessKeysCommandOutput extends ListAccessKeysResponse, __M
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Returns information about the access key IDs associated with the specified IAM user.
|
|
12
12
|
* If there is none, the operation returns an empty list.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>Although each user is limited to a small number of keys, you can still paginate the
|
|
14
14
|
* results using the <code>MaxItems</code> and <code>Marker</code> parameters.</p>
|
|
15
|
-
*
|
|
15
|
+
* <p>If the <code>UserName</code> is not specified, the user name is determined implicitly
|
|
16
16
|
* based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
|
|
17
17
|
* used, then <code>UserName</code> is required. If a long-term key is assigned to the
|
|
18
18
|
* user, then <code>UserName</code> is not required. This operation works for access keys
|
|
19
19
|
* under the Amazon Web Services account. Consequently, you can use this operation to manage
|
|
20
20
|
* Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
|
|
21
21
|
* users.</p>
|
|
22
|
-
*
|
|
22
|
+
* <note>
|
|
23
23
|
* <p>To ensure the security of your Amazon Web Services account, the secret access key is accessible
|
|
24
24
|
* only during key and user creation.</p>
|
|
25
|
-
*
|
|
25
|
+
* </note>
|
|
26
26
|
* @example
|
|
27
27
|
* Use a bare-bones client and the command you need to make an API call.
|
|
28
28
|
* ```javascript
|
|
@@ -9,11 +9,11 @@ export interface ListAttachedGroupPoliciesCommandOutput extends ListAttachedGrou
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists all managed policies that are attached to the specified IAM group.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p>An IAM group can also have inline policies embedded with it. To list the inline
|
|
13
13
|
* policies for a group, use <a>ListGroupPolicies</a>. For information about
|
|
14
14
|
* policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
15
15
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
16
|
-
*
|
|
16
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
17
17
|
* parameters. You can use the <code>PathPrefix</code> parameter to limit the list of
|
|
18
18
|
* policies to only those matching the specified path prefix. If there are no policies
|
|
19
19
|
* attached to the specified group (or none that match the specified path prefix), the
|
|
@@ -9,11 +9,11 @@ export interface ListAttachedRolePoliciesCommandOutput extends ListAttachedRoleP
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists all managed policies that are attached to the specified IAM role.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p>An IAM role can also have inline policies embedded with it. To list the inline
|
|
13
13
|
* policies for a role, use <a>ListRolePolicies</a>. For information about
|
|
14
14
|
* policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
15
15
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
16
|
-
*
|
|
16
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
17
17
|
* parameters. You can use the <code>PathPrefix</code> parameter to limit the list of
|
|
18
18
|
* policies to only those matching the specified path prefix. If there are no policies
|
|
19
19
|
* attached to the specified role (or none that match the specified path prefix), the
|
|
@@ -9,11 +9,11 @@ export interface ListAttachedUserPoliciesCommandOutput extends ListAttachedUserP
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists all managed policies that are attached to the specified IAM user.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p>An IAM user can also have inline policies embedded with it. To list the inline
|
|
13
13
|
* policies for a user, use <a>ListUserPolicies</a>. For information about
|
|
14
14
|
* policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
15
15
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
16
|
-
*
|
|
16
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
17
17
|
* parameters. You can use the <code>PathPrefix</code> parameter to limit the list of
|
|
18
18
|
* policies to only those matching the specified path prefix. If there are no policies
|
|
19
19
|
* attached to the specified group (or none that match the specified path prefix), the
|
|
@@ -10,11 +10,11 @@ export interface ListEntitiesForPolicyCommandOutput extends ListEntitiesForPolic
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists all IAM users, groups, and roles that the specified managed policy is attached
|
|
12
12
|
* to.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>You can use the optional <code>EntityFilter</code> parameter to limit the results to a
|
|
14
14
|
* particular type of entity (users, groups, or roles). For example, to list only the roles
|
|
15
15
|
* that are attached to the specified policy, set <code>EntityFilter</code> to
|
|
16
16
|
* <code>Role</code>.</p>
|
|
17
|
-
*
|
|
17
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
18
18
|
* parameters.</p>
|
|
19
19
|
* @example
|
|
20
20
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,11 +10,11 @@ export interface ListGroupPoliciesCommandOutput extends ListGroupPoliciesRespons
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the names of the inline policies that are embedded in the specified IAM
|
|
12
12
|
* group.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>An IAM group can also have managed policies attached to it. To list the managed
|
|
14
14
|
* policies that are attached to a group, use <a>ListAttachedGroupPolicies</a>.
|
|
15
15
|
* For more information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
16
16
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
17
|
-
*
|
|
17
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
18
18
|
* parameters. If there are no inline policies embedded with the specified group, the
|
|
19
19
|
* operation returns an empty list.</p>
|
|
20
20
|
* @example
|
|
@@ -9,7 +9,7 @@ export interface ListGroupsCommandOutput extends ListGroupsResponse, __MetadataB
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the IAM groups that have the specified path prefix.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p> You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
13
13
|
* parameters.</p>
|
|
14
14
|
* @example
|
|
15
15
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -9,7 +9,7 @@ export interface ListGroupsForUserCommandOutput extends ListGroupsForUserRespons
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the IAM groups that the specified IAM user belongs to.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
13
13
|
* parameters.</p>
|
|
14
14
|
* @example
|
|
15
15
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -12,11 +12,11 @@ export interface ListInstanceProfilesCommandOutput extends ListInstanceProfilesR
|
|
|
12
12
|
* the operation returns an empty list. For more information about instance profiles, see
|
|
13
13
|
* <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About
|
|
14
14
|
* instance profiles</a>.</p>
|
|
15
|
-
*
|
|
15
|
+
* <note>
|
|
16
16
|
* <p>IAM resource-listing operations return a subset of the available
|
|
17
17
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for an instance profile, see <a>GetInstanceProfile</a>.</p>
|
|
18
|
-
*
|
|
19
|
-
*
|
|
18
|
+
* </note>
|
|
19
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
20
20
|
* parameters.</p>
|
|
21
21
|
* @example
|
|
22
22
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -12,7 +12,7 @@ export interface ListInstanceProfilesForRoleCommandOutput extends ListInstancePr
|
|
|
12
12
|
* are none, the operation returns an empty list. For more information about instance
|
|
13
13
|
* profiles, go to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About instance
|
|
14
14
|
* profiles</a>.</p>
|
|
15
|
-
*
|
|
15
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
16
16
|
* parameters.</p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -12,7 +12,7 @@ export interface ListMFADevicesCommandOutput extends ListMFADevicesResponse, __M
|
|
|
12
12
|
* then this operation lists all the MFA devices associated with the specified user. If you
|
|
13
13
|
* do not specify a user name, IAM determines the user name implicitly based on the Amazon Web Services
|
|
14
14
|
* access key ID signing the request for this operation.</p>
|
|
15
|
-
*
|
|
15
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
16
16
|
* parameters.</p>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,10 +10,10 @@ export interface ListOpenIDConnectProvidersCommandOutput extends ListOpenIDConne
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists information about the IAM OpenID Connect (OIDC) provider resource objects
|
|
12
12
|
* defined in the Amazon Web Services account.</p>
|
|
13
|
-
*
|
|
13
|
+
* <note>
|
|
14
14
|
* <p>IAM resource-listing operations return a subset of the available
|
|
15
15
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for an OIDC provider, see <a>GetOpenIDConnectProvider</a>.</p>
|
|
16
|
-
*
|
|
16
|
+
* </note>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
19
19
|
* ```javascript
|
|
@@ -10,20 +10,20 @@ export interface ListPoliciesCommandOutput extends ListPoliciesResponse, __Metad
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists all the managed policies that are available in your Amazon Web Services account, including
|
|
12
12
|
* your own customer-defined managed policies and all Amazon Web Services managed policies.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>You can filter the list of policies that is returned using the optional
|
|
14
14
|
* <code>OnlyAttached</code>, <code>Scope</code>, and <code>PathPrefix</code>
|
|
15
15
|
* parameters. For example, to list only the customer managed policies in your Amazon Web Services
|
|
16
16
|
* account, set <code>Scope</code> to <code>Local</code>. To list only Amazon Web Services managed
|
|
17
17
|
* policies, set <code>Scope</code> to <code>AWS</code>.</p>
|
|
18
|
-
*
|
|
18
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
19
19
|
* parameters.</p>
|
|
20
|
-
*
|
|
20
|
+
* <p>For more information about managed policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
21
21
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
22
|
-
*
|
|
22
|
+
* <note>
|
|
23
23
|
* <p>IAM resource-listing operations return a subset of the available
|
|
24
24
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a customer manged policy, see
|
|
25
25
|
* <a>GetPolicy</a>.</p>
|
|
26
|
-
*
|
|
26
|
+
* </note>
|
|
27
27
|
* @example
|
|
28
28
|
* Use a bare-bones client and the command you need to make an API call.
|
|
29
29
|
* ```javascript
|
|
@@ -10,41 +10,41 @@ export interface ListPoliciesGrantingServiceAccessCommandOutput extends ListPoli
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Retrieves a list of policies that the IAM identity (user, group, or role) can use to
|
|
12
12
|
* access each specified service.</p>
|
|
13
|
-
*
|
|
13
|
+
* <note>
|
|
14
14
|
* <p>This operation does not use other policy types when determining whether a resource
|
|
15
15
|
* could access a service. These other policy types include resource-based policies,
|
|
16
16
|
* access control lists, Organizations policies, IAM permissions boundaries, and STS
|
|
17
17
|
* assume role policies. It only applies permissions policy logic. For more about the
|
|
18
18
|
* evaluation of policy types, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html#policy-eval-basics">Evaluating policies</a> in the
|
|
19
19
|
* <i>IAM User Guide</i>.</p>
|
|
20
|
-
*
|
|
21
|
-
*
|
|
20
|
+
* </note>
|
|
21
|
+
* <p>The list of policies returned by the operation depends on the ARN of the identity that
|
|
22
22
|
* you provide.</p>
|
|
23
|
-
*
|
|
23
|
+
* <ul>
|
|
24
24
|
* <li>
|
|
25
|
-
*
|
|
25
|
+
* <p>
|
|
26
26
|
* <b>User</b> – The list of policies includes
|
|
27
27
|
* the managed and inline policies that are attached to the user directly. The list
|
|
28
28
|
* also includes any additional managed and inline policies that are attached to
|
|
29
29
|
* the group to which the user belongs. </p>
|
|
30
30
|
* </li>
|
|
31
31
|
* <li>
|
|
32
|
-
*
|
|
32
|
+
* <p>
|
|
33
33
|
* <b>Group</b> – The list of policies includes
|
|
34
34
|
* only the managed and inline policies that are attached to the group directly.
|
|
35
35
|
* Policies that are attached to the group’s user are not included.</p>
|
|
36
36
|
* </li>
|
|
37
37
|
* <li>
|
|
38
|
-
*
|
|
38
|
+
* <p>
|
|
39
39
|
* <b>Role</b> – The list of policies includes
|
|
40
40
|
* only the managed and inline policies that are attached to the role.</p>
|
|
41
41
|
* </li>
|
|
42
42
|
* </ul>
|
|
43
|
-
*
|
|
43
|
+
* <p>For each managed policy, this operation returns the ARN and policy name. For each
|
|
44
44
|
* inline policy, it returns the policy name and the entity to which it is attached. Inline
|
|
45
45
|
* policies do not have an ARN. For more information about these policy types, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html">Managed policies and inline policies</a> in the
|
|
46
46
|
* <i>IAM User Guide</i>.</p>
|
|
47
|
-
*
|
|
47
|
+
* <p>Policies that are attached to users and roles as permissions boundaries are not
|
|
48
48
|
* returned. To view which managed policy is currently used to set the permissions boundary
|
|
49
49
|
* for a user or role, use the <a>GetUser</a> or <a>GetRole</a>
|
|
50
50
|
* operations.</p>
|
|
@@ -10,7 +10,7 @@ export interface ListPolicyVersionsCommandOutput extends ListPolicyVersionsRespo
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists information about the versions of the specified managed policy, including the
|
|
12
12
|
* version that is currently set as the policy's default version.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>For more information about managed policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
14
14
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
15
15
|
* @example
|
|
16
16
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,11 +10,11 @@ export interface ListRolePoliciesCommandOutput extends ListRolePoliciesResponse,
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the names of the inline policies that are embedded in the specified IAM
|
|
12
12
|
* role.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>An IAM role can also have managed policies attached to it. To list the managed
|
|
14
14
|
* policies that are attached to a role, use <a>ListAttachedRolePolicies</a>.
|
|
15
15
|
* For more information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
16
16
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
17
|
-
*
|
|
17
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
18
18
|
* parameters. If there are no inline policies embedded with the specified role, the
|
|
19
19
|
* operation returns an empty list.</p>
|
|
20
20
|
* @example
|
|
@@ -11,11 +11,11 @@ export interface ListRolesCommandOutput extends ListRolesResponse, __MetadataBea
|
|
|
11
11
|
* <p>Lists the IAM roles that have the specified path prefix. If there are none, the
|
|
12
12
|
* operation returns an empty list. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">Working with
|
|
13
13
|
* roles</a>.</p>
|
|
14
|
-
*
|
|
14
|
+
* <note>
|
|
15
15
|
* <p>IAM resource-listing operations return a subset of the available
|
|
16
16
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a role, see <a>GetRole</a>.</p>
|
|
17
|
-
*
|
|
18
|
-
*
|
|
17
|
+
* </note>
|
|
18
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
19
19
|
* parameters.</p>
|
|
20
20
|
* @example
|
|
21
21
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -11,9 +11,9 @@ export interface ListSAMLProvidersCommandOutput extends ListSAMLProvidersRespons
|
|
|
11
11
|
* <p>Lists the SAML provider resource objects defined in IAM in the account.
|
|
12
12
|
* IAM resource-listing operations return a subset of the available
|
|
13
13
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a SAML provider, see <a>GetSAMLProvider</a>.</p>
|
|
14
|
-
*
|
|
14
|
+
* <important>
|
|
15
15
|
* <p> This operation requires <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version 4</a>.</p>
|
|
16
|
-
*
|
|
16
|
+
* </important>
|
|
17
17
|
* @example
|
|
18
18
|
* Use a bare-bones client and the command you need to make an API call.
|
|
19
19
|
* ```javascript
|
|
@@ -10,11 +10,11 @@ export interface ListSSHPublicKeysCommandOutput extends ListSSHPublicKeysRespons
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Returns information about the SSH public keys associated with the specified IAM
|
|
12
12
|
* user. If none exists, the operation returns an empty list.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>The SSH public keys returned by this operation are used only for authenticating the
|
|
14
14
|
* IAM user to an CodeCommit repository. For more information about using SSH keys to
|
|
15
15
|
* authenticate to an CodeCommit repository, see <a href="https://docs.aws.amazon.com/codecommit/latest/userguide/setting-up-credentials-ssh.html">Set up CodeCommit for
|
|
16
16
|
* SSH connections</a> in the <i>CodeCommit User Guide</i>.</p>
|
|
17
|
-
*
|
|
17
|
+
* <p>Although each user is limited to a small number of keys, you can still paginate the
|
|
18
18
|
* results using the <code>MaxItems</code> and <code>Marker</code> parameters.</p>
|
|
19
19
|
* @example
|
|
20
20
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,16 +10,16 @@ export interface ListServerCertificatesCommandOutput extends ListServerCertifica
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the server certificates stored in IAM that have the specified path prefix. If
|
|
12
12
|
* none exist, the operation returns an empty list.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p> You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
14
14
|
* parameters.</p>
|
|
15
|
-
*
|
|
15
|
+
* <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
|
|
16
16
|
* with server certificates</a> in the <i>IAM User Guide</i>. This
|
|
17
17
|
* topic also includes a list of Amazon Web Services services that can use the server certificates that
|
|
18
18
|
* you manage with IAM.</p>
|
|
19
|
-
*
|
|
19
|
+
* <note>
|
|
20
20
|
* <p>IAM resource-listing operations return a subset of the available
|
|
21
21
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a servercertificate, see <a>GetServerCertificate</a>.</p>
|
|
22
|
-
*
|
|
22
|
+
* </note>
|
|
23
23
|
* @example
|
|
24
24
|
* Use a bare-bones client and the command you need to make an API call.
|
|
25
25
|
* ```javascript
|
|
@@ -10,10 +10,10 @@ export interface ListSigningCertificatesCommandOutput extends ListSigningCertifi
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Returns information about the signing certificates associated with the specified IAM
|
|
12
12
|
* user. If none exists, the operation returns an empty list.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>Although each user is limited to a small number of signing certificates, you can still
|
|
14
14
|
* paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
15
15
|
* parameters.</p>
|
|
16
|
-
*
|
|
16
|
+
* <p>If the <code>UserName</code> field is not specified, the user name is determined
|
|
17
17
|
* implicitly based on the Amazon Web Services access key ID used to sign the request for this operation.
|
|
18
18
|
* This operation works for access keys under the Amazon Web Services account. Consequently, you can use
|
|
19
19
|
* this operation to manage Amazon Web Services account root user credentials even if the Amazon Web Services account
|
|
@@ -9,11 +9,11 @@ export interface ListUserPoliciesCommandOutput extends ListUserPoliciesResponse,
|
|
|
9
9
|
}
|
|
10
10
|
/**
|
|
11
11
|
* <p>Lists the names of the inline policies embedded in the specified IAM user.</p>
|
|
12
|
-
*
|
|
12
|
+
* <p>An IAM user can also have managed policies attached to it. To list the managed
|
|
13
13
|
* policies that are attached to a user, use <a>ListAttachedUserPolicies</a>.
|
|
14
14
|
* For more information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
|
|
15
15
|
* policies</a> in the <i>IAM User Guide</i>.</p>
|
|
16
|
-
*
|
|
16
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
17
17
|
* parameters. If there are no inline policies embedded with the specified user, the
|
|
18
18
|
* operation returns an empty list.</p>
|
|
19
19
|
* @example
|
|
@@ -11,11 +11,11 @@ export interface ListUsersCommandOutput extends ListUsersResponse, __MetadataBea
|
|
|
11
11
|
* <p>Lists the IAM users that have the specified path prefix. If no path prefix is
|
|
12
12
|
* specified, the operation returns all users in the Amazon Web Services account. If there are none, the
|
|
13
13
|
* operation returns an empty list.</p>
|
|
14
|
-
*
|
|
14
|
+
* <note>
|
|
15
15
|
* <p>IAM resource-listing operations return a subset of the available
|
|
16
16
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a user, see <a>GetUser</a>.</p>
|
|
17
|
-
*
|
|
18
|
-
*
|
|
17
|
+
* </note>
|
|
18
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
19
19
|
* parameters.</p>
|
|
20
20
|
* @example
|
|
21
21
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -12,11 +12,11 @@ export interface ListVirtualMFADevicesCommandOutput extends ListVirtualMFADevice
|
|
|
12
12
|
* you do not specify an assignment status, the operation returns a list of all virtual MFA
|
|
13
13
|
* devices. Assignment status can be <code>Assigned</code>, <code>Unassigned</code>, or
|
|
14
14
|
* <code>Any</code>.</p>
|
|
15
|
-
*
|
|
15
|
+
* <note>
|
|
16
16
|
* <p>IAM resource-listing operations return a subset of the available
|
|
17
17
|
* attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view tag information for a virtual MFA device, see <a>ListMFADeviceTags</a>.</p>
|
|
18
|
-
*
|
|
19
|
-
*
|
|
18
|
+
* </note>
|
|
19
|
+
* <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
|
|
20
20
|
* parameters.</p>
|
|
21
21
|
* @example
|
|
22
22
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -10,19 +10,19 @@ export interface PutGroupPolicyCommandOutput extends __MetadataBearer {
|
|
|
10
10
|
/**
|
|
11
11
|
* <p>Adds or updates an inline policy document that is embedded in the specified IAM
|
|
12
12
|
* group.</p>
|
|
13
|
-
*
|
|
13
|
+
* <p>A user can also have managed policies attached to it. To attach a managed policy to a
|
|
14
14
|
* group, use <a>AttachGroupPolicy</a>. To create a new managed policy, use
|
|
15
15
|
* <a>CreatePolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
|
|
16
16
|
* policies and inline policies</a> in the
|
|
17
17
|
* <i>IAM User Guide</i>.</p>
|
|
18
|
-
*
|
|
18
|
+
* <p>For information about the maximum number of inline policies that you can embed in a
|
|
19
19
|
* group, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS quotas</a> in the <i>IAM User Guide</i>.</p>
|
|
20
|
-
*
|
|
20
|
+
* <note>
|
|
21
21
|
* <p>Because policy documents can be large, you should use POST rather than GET when
|
|
22
22
|
* calling <code>PutGroupPolicy</code>. For general information about using the Query
|
|
23
23
|
* API with IAM, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/IAM_UsingQueryAPI.html">Making query requests</a> in the
|
|
24
24
|
* <i>IAM User Guide</i>.</p>
|
|
25
|
-
*
|
|
25
|
+
* </note>
|
|
26
26
|
* @example
|
|
27
27
|
* Use a bare-bones client and the command you need to make an API call.
|
|
28
28
|
* ```javascript
|
|
@@ -13,13 +13,13 @@ export interface PutRolePermissionsBoundaryCommandOutput extends __MetadataBeare
|
|
|
13
13
|
* a role. Use the boundary to control the maximum permissions that the role can have.
|
|
14
14
|
* Setting a permissions boundary is an advanced feature that can affect the permissions
|
|
15
15
|
* for the role.</p>
|
|
16
|
-
*
|
|
17
|
-
*
|
|
16
|
+
* <p>You cannot set the boundary for a service-linked role. </p>
|
|
17
|
+
* <important>
|
|
18
18
|
* <p>Policies used as permissions boundaries do not provide permissions. You must also
|
|
19
19
|
* attach a permissions policy to the role. To learn how the effective permissions for
|
|
20
20
|
* a role are evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy
|
|
21
21
|
* evaluation logic</a> in the IAM User Guide. </p>
|
|
22
|
-
*
|
|
22
|
+
* </important>
|
|
23
23
|
* @example
|
|
24
24
|
* Use a bare-bones client and the command you need to make an API call.
|
|
25
25
|
* ```javascript
|