@aws-sdk/client-iam 3.289.0 → 3.291.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/endpoint/ruleset.js +3 -3
- package/dist-es/endpoint/ruleset.js +3 -3
- package/dist-types/IAM.d.ts +36 -36
- package/dist-types/commands/AddClientIDToOpenIDConnectProviderCommand.d.ts +17 -0
- package/dist-types/commands/AddRoleToInstanceProfileCommand.d.ts +23 -0
- package/dist-types/commands/AddUserToGroupCommand.d.ts +13 -0
- package/dist-types/commands/AttachGroupPolicyCommand.d.ts +21 -0
- package/dist-types/commands/AttachRolePolicyCommand.d.ts +27 -0
- package/dist-types/commands/AttachUserPolicyCommand.d.ts +21 -0
- package/dist-types/commands/ChangePasswordCommand.d.ts +29 -2
- package/dist-types/commands/CreateAccessKeyCommand.d.ts +13 -0
- package/dist-types/commands/CreateAccountAliasCommand.d.ts +13 -0
- package/dist-types/commands/CreateGroupCommand.d.ts +17 -0
- package/dist-types/commands/CreateInstanceProfileCommand.d.ts +21 -0
- package/dist-types/commands/CreateLoginProfileCommand.d.ts +21 -0
- package/dist-types/commands/CreateOpenIDConnectProviderCommand.d.ts +24 -0
- package/dist-types/commands/CreatePolicyCommand.d.ts +25 -0
- package/dist-types/commands/CreatePolicyVersionCommand.d.ts +21 -0
- package/dist-types/commands/CreateRoleCommand.d.ts +25 -0
- package/dist-types/commands/CreateSAMLProviderCommand.d.ts +21 -0
- package/dist-types/commands/CreateServiceLinkedRoleCommand.d.ts +17 -0
- package/dist-types/commands/CreateServiceSpecificCredentialCommand.d.ts +12 -0
- package/dist-types/commands/CreateUserCommand.d.ts +25 -0
- package/dist-types/commands/CreateVirtualMFADeviceCommand.d.ts +21 -0
- package/dist-types/commands/DeactivateMFADeviceCommand.d.ts +19 -0
- package/dist-types/commands/DeleteAccessKeyCommand.d.ts +13 -0
- package/dist-types/commands/DeleteAccountAliasCommand.d.ts +13 -0
- package/dist-types/commands/DeleteAccountPasswordPolicyCommand.d.ts +13 -0
- package/dist-types/commands/DeleteGroupCommand.d.ts +17 -0
- package/dist-types/commands/DeleteGroupPolicyCommand.d.ts +13 -0
- package/dist-types/commands/DeleteInstanceProfileCommand.d.ts +17 -0
- package/dist-types/commands/DeleteLoginProfileCommand.d.ts +19 -0
- package/dist-types/commands/DeleteOpenIDConnectProviderCommand.d.ts +13 -0
- package/dist-types/commands/DeletePolicyCommand.d.ts +21 -0
- package/dist-types/commands/DeletePolicyVersionCommand.d.ts +21 -0
- package/dist-types/commands/DeleteRoleCommand.d.ts +27 -0
- package/dist-types/commands/DeleteRolePermissionsBoundaryCommand.d.ts +15 -0
- package/dist-types/commands/DeleteRolePolicyCommand.d.ts +19 -0
- package/dist-types/commands/DeleteSAMLProviderCommand.d.ts +17 -0
- package/dist-types/commands/DeleteSSHPublicKeyCommand.d.ts +5 -0
- package/dist-types/commands/DeleteServerCertificateCommand.d.ts +17 -0
- package/dist-types/commands/DeleteServiceLinkedRoleCommand.d.ts +13 -0
- package/dist-types/commands/DeleteServiceSpecificCredentialCommand.d.ts +5 -0
- package/dist-types/commands/DeleteSigningCertificateCommand.d.ts +13 -0
- package/dist-types/commands/DeleteUserCommand.d.ts +21 -0
- package/dist-types/commands/DeleteUserPermissionsBoundaryCommand.d.ts +9 -0
- package/dist-types/commands/DeleteUserPolicyCommand.d.ts +13 -0
- package/dist-types/commands/DeleteVirtualMFADeviceCommand.d.ts +17 -0
- package/dist-types/commands/DetachGroupPolicyCommand.d.ts +17 -0
- package/dist-types/commands/DetachRolePolicyCommand.d.ts +23 -0
- package/dist-types/commands/DetachUserPolicyCommand.d.ts +17 -0
- package/dist-types/commands/EnableMFADeviceCommand.d.ts +27 -0
- package/dist-types/commands/GenerateCredentialReportCommand.d.ts +9 -0
- package/dist-types/commands/GenerateOrganizationsAccessReportCommand.d.ts +10 -6
- package/dist-types/commands/GenerateServiceLastAccessedDetailsCommand.d.ts +9 -0
- package/dist-types/commands/GetAccessKeyLastUsedCommand.d.ts +5 -0
- package/dist-types/commands/GetAccountAuthorizationDetailsCommand.d.ts +5 -0
- package/dist-types/commands/GetAccountPasswordPolicyCommand.d.ts +9 -0
- package/dist-types/commands/GetAccountSummaryCommand.d.ts +5 -0
- package/dist-types/commands/GetContextKeysForCustomPolicyCommand.d.ts +5 -0
- package/dist-types/commands/GetContextKeysForPrincipalPolicyCommand.d.ts +9 -0
- package/dist-types/commands/GetCredentialReportCommand.d.ts +18 -0
- package/dist-types/commands/GetGroupCommand.d.ts +9 -0
- package/dist-types/commands/GetGroupPolicyCommand.d.ts +9 -0
- package/dist-types/commands/GetInstanceProfileCommand.d.ts +9 -0
- package/dist-types/commands/GetLoginProfileCommand.d.ts +9 -0
- package/dist-types/commands/GetOpenIDConnectProviderCommand.d.ts +13 -0
- package/dist-types/commands/GetOrganizationsAccessReportCommand.d.ts +10 -5
- package/dist-types/commands/GetPolicyCommand.d.ts +13 -0
- package/dist-types/commands/GetPolicyVersionCommand.d.ts +13 -0
- package/dist-types/commands/GetRoleCommand.d.ts +9 -0
- package/dist-types/commands/GetRolePolicyCommand.d.ts +9 -0
- package/dist-types/commands/GetSAMLProviderCommand.d.ts +13 -0
- package/dist-types/commands/GetSSHPublicKeyCommand.d.ts +9 -0
- package/dist-types/commands/GetServerCertificateCommand.d.ts +9 -0
- package/dist-types/commands/GetServiceLastAccessedDetailsCommand.d.ts +9 -0
- package/dist-types/commands/GetServiceLastAccessedDetailsWithEntitiesCommand.d.ts +9 -0
- package/dist-types/commands/GetServiceLinkedRoleDeletionStatusCommand.d.ts +13 -0
- package/dist-types/commands/GetUserCommand.d.ts +9 -0
- package/dist-types/commands/GetUserPolicyCommand.d.ts +9 -0
- package/dist-types/commands/ListAccessKeysCommand.d.ts +11 -3
- package/dist-types/commands/ListAccountAliasesCommand.d.ts +5 -0
- package/dist-types/commands/ListAttachedGroupPoliciesCommand.d.ts +13 -0
- package/dist-types/commands/ListAttachedRolePoliciesCommand.d.ts +13 -0
- package/dist-types/commands/ListAttachedUserPoliciesCommand.d.ts +13 -0
- package/dist-types/commands/ListEntitiesForPolicyCommand.d.ts +13 -0
- package/dist-types/commands/ListGroupPoliciesCommand.d.ts +9 -0
- package/dist-types/commands/ListGroupsCommand.d.ts +5 -0
- package/dist-types/commands/ListGroupsForUserCommand.d.ts +9 -0
- package/dist-types/commands/ListInstanceProfileTagsCommand.d.ts +9 -0
- package/dist-types/commands/ListInstanceProfilesCommand.d.ts +5 -0
- package/dist-types/commands/ListInstanceProfilesForRoleCommand.d.ts +9 -0
- package/dist-types/commands/ListMFADeviceTagsCommand.d.ts +13 -0
- package/dist-types/commands/ListMFADevicesCommand.d.ts +9 -0
- package/dist-types/commands/ListOpenIDConnectProviderTagsCommand.d.ts +13 -0
- package/dist-types/commands/ListOpenIDConnectProvidersCommand.d.ts +5 -0
- package/dist-types/commands/ListPoliciesCommand.d.ts +5 -0
- package/dist-types/commands/ListPoliciesGrantingServiceAccessCommand.d.ts +9 -0
- package/dist-types/commands/ListPolicyTagsCommand.d.ts +13 -0
- package/dist-types/commands/ListPolicyVersionsCommand.d.ts +13 -0
- package/dist-types/commands/ListRolePoliciesCommand.d.ts +9 -0
- package/dist-types/commands/ListRoleTagsCommand.d.ts +9 -0
- package/dist-types/commands/ListRolesCommand.d.ts +5 -0
- package/dist-types/commands/ListSAMLProviderTagsCommand.d.ts +13 -0
- package/dist-types/commands/ListSAMLProvidersCommand.d.ts +5 -0
- package/dist-types/commands/ListSSHPublicKeysCommand.d.ts +5 -0
- package/dist-types/commands/ListServerCertificateTagsCommand.d.ts +9 -0
- package/dist-types/commands/ListServerCertificatesCommand.d.ts +5 -0
- package/dist-types/commands/ListServiceSpecificCredentialsCommand.d.ts +8 -0
- package/dist-types/commands/ListSigningCertificatesCommand.d.ts +11 -2
- package/dist-types/commands/ListUserPoliciesCommand.d.ts +9 -0
- package/dist-types/commands/ListUserTagsCommand.d.ts +9 -0
- package/dist-types/commands/ListUsersCommand.d.ts +5 -0
- package/dist-types/commands/ListVirtualMFADevicesCommand.d.ts +1 -0
- package/dist-types/commands/PutGroupPolicyCommand.d.ts +17 -0
- package/dist-types/commands/PutRolePermissionsBoundaryCommand.d.ts +23 -0
- package/dist-types/commands/PutRolePolicyCommand.d.ts +23 -0
- package/dist-types/commands/PutUserPermissionsBoundaryCommand.d.ts +22 -5
- package/dist-types/commands/PutUserPolicyCommand.d.ts +17 -0
- package/dist-types/commands/RemoveClientIDFromOpenIDConnectProviderCommand.d.ts +13 -0
- package/dist-types/commands/RemoveRoleFromInstanceProfileCommand.d.ts +19 -0
- package/dist-types/commands/RemoveUserFromGroupCommand.d.ts +13 -0
- package/dist-types/commands/ResetServiceSpecificCredentialCommand.d.ts +5 -0
- package/dist-types/commands/ResyncMFADeviceCommand.d.ts +17 -0
- package/dist-types/commands/SetDefaultPolicyVersionCommand.d.ts +17 -0
- package/dist-types/commands/SetSecurityTokenServicePreferencesCommand.d.ts +5 -0
- package/dist-types/commands/SimulateCustomPolicyCommand.d.ts +9 -0
- package/dist-types/commands/SimulatePrincipalPolicyCommand.d.ts +13 -0
- package/dist-types/commands/TagInstanceProfileCommand.d.ts +21 -0
- package/dist-types/commands/TagMFADeviceCommand.d.ts +21 -0
- package/dist-types/commands/TagOpenIDConnectProviderCommand.d.ts +22 -1
- package/dist-types/commands/TagPolicyCommand.d.ts +21 -0
- package/dist-types/commands/TagRoleCommand.d.ts +21 -0
- package/dist-types/commands/TagSAMLProviderCommand.d.ts +21 -0
- package/dist-types/commands/TagServerCertificateCommand.d.ts +21 -0
- package/dist-types/commands/TagUserCommand.d.ts +22 -1
- package/dist-types/commands/UntagInstanceProfileCommand.d.ts +17 -0
- package/dist-types/commands/UntagMFADeviceCommand.d.ts +17 -0
- package/dist-types/commands/UntagOpenIDConnectProviderCommand.d.ts +17 -0
- package/dist-types/commands/UntagPolicyCommand.d.ts +17 -0
- package/dist-types/commands/UntagRoleCommand.d.ts +13 -0
- package/dist-types/commands/UntagSAMLProviderCommand.d.ts +17 -0
- package/dist-types/commands/UntagServerCertificateCommand.d.ts +17 -0
- package/dist-types/commands/UntagUserCommand.d.ts +13 -0
- package/dist-types/commands/UpdateAccessKeyCommand.d.ts +15 -3
- package/dist-types/commands/UpdateAccountPasswordPolicyCommand.d.ts +17 -0
- package/dist-types/commands/UpdateAssumeRolePolicyCommand.d.ts +23 -0
- package/dist-types/commands/UpdateGroupCommand.d.ts +17 -0
- package/dist-types/commands/UpdateLoginProfileCommand.d.ts +23 -0
- package/dist-types/commands/UpdateOpenIDConnectProviderThumbprintCommand.d.ts +13 -0
- package/dist-types/commands/UpdateRoleCommand.d.ts +15 -0
- package/dist-types/commands/UpdateRoleDescriptionCommand.d.ts +15 -0
- package/dist-types/commands/UpdateSAMLProviderCommand.d.ts +17 -0
- package/dist-types/commands/UpdateSSHPublicKeyCommand.d.ts +5 -0
- package/dist-types/commands/UpdateServerCertificateCommand.d.ts +17 -0
- package/dist-types/commands/UpdateServiceSpecificCredentialCommand.d.ts +5 -0
- package/dist-types/commands/UpdateSigningCertificateCommand.d.ts +17 -4
- package/dist-types/commands/UpdateUserCommand.d.ts +29 -2
- package/dist-types/commands/UploadSSHPublicKeyCommand.d.ts +20 -0
- package/dist-types/commands/UploadServerCertificateCommand.d.ts +29 -0
- package/dist-types/commands/UploadSigningCertificateCommand.d.ts +30 -2
- package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +11 -10
- package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
- package/package.json +30 -30
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.ruleSet = void 0;
|
|
4
|
-
const G = "
|
|
5
|
-
const a =
|
|
6
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
4
|
+
const G = "required", H = "type", I = "rules", J = "conditions", K = "fn", L = "argv", M = "ref", N = "url", O = "properties", P = "headers", Q = "authSchemes", R = "name", S = "signingName", T = "signingRegion";
|
|
5
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [G]: false, [H]: "String" }, h = { [G]: true, "default": false, [H]: "Boolean" }, i = { [M]: "Endpoint" }, j = {}, k = { [M]: "Region" }, l = { [K]: "getAttr", [L]: [{ [M]: e }, "name"] }, m = { [J]: [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }, { [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], [H]: b, [I]: [{ [J]: [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }, { [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], [H]: b, [I]: [{ [d]: { [N]: "https://iam-fips.{Region}.api.aws", [O]: {}, [P]: {} }, [H]: d }] }, { [c]: "FIPS and DualStack are enabled, but this partition does not support one or both", [H]: c }] }, n = { [c]: "FIPS and DualStack are enabled, but this partition does not support one or both", [H]: c }, o = { [N]: "https://iam-fips.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-east-1" }] }, [P]: {} }, p = { [c]: "FIPS is enabled but this partition does not support FIPS", [H]: c }, q = { [J]: [{ [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], [H]: b, [I]: [{ [J]: [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], [H]: b, [I]: [{ [d]: { [N]: "https://iam.{Region}.api.aws", [O]: {}, [P]: {} }, [H]: d }] }, { [c]: "DualStack is enabled but this partition does not support DualStack", [H]: c }] }, r = { [c]: "DualStack is enabled but this partition does not support DualStack", [H]: c }, s = { [N]: "https://iam.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-east-1" }] }, [P]: {} }, t = { [N]: "https://iam.cn-north-1.amazonaws.com.cn", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "cn-north-1" }] }, [P]: {} }, u = { [d]: { [N]: "https://iam.us-gov.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-gov-west-1" }] }, [P]: {} }, [H]: d }, v = { [N]: "https://iam.us-iso-east-1.c2s.ic.gov", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-iso-east-1" }] }, [P]: {} }, w = { [N]: "https://iam.us-isob-east-1.sc2s.sgov.gov", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-isob-east-1" }] }, [P]: {} }, x = { [J]: [{ [K]: f, [L]: [k, "aws-us-gov-global"] }], [d]: { [N]: "https://iam.us-gov.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-gov-west-1" }] }, [P]: {} }, [H]: d }, y = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }], z = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], A = [k], B = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }, { [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], C = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }, { [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], D = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }], E = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], F = [{ [K]: f, [L]: [k, "aws-global"] }];
|
|
6
|
+
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, [I]: [{ [J]: [{ [K]: a, [L]: [i] }], [H]: b, [I]: [{ [J]: y, error: "Invalid Configuration: FIPS and custom endpoint are not supported", [H]: c }, { [H]: b, [I]: [{ [J]: z, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", [H]: c }, { endpoint: { [N]: i, [O]: j, [P]: j }, [H]: d }] }] }, { [H]: b, [I]: [{ [J]: [{ [K]: a, [L]: A }], [H]: b, [I]: [{ [J]: [{ [K]: "aws.partition", [L]: A, assign: e }], [H]: b, [I]: [{ [J]: [{ [K]: f, [L]: [l, "aws"] }], [H]: b, [I]: [m, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: o, [H]: d }] }, p] }, q, { endpoint: s, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-cn"] }], [H]: b, [I]: [{ [J]: B, [H]: b, [I]: [{ [J]: C, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.api.amazonwebservices.com.cn", [O]: j, [P]: j }, [H]: d }] }, n] }, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.amazonaws.com.cn", [O]: j, [P]: j }, [H]: d }] }, p] }, { [J]: z, [H]: b, [I]: [{ [J]: E, [H]: b, [I]: [{ endpoint: { [N]: "https://iam.{Region}.api.amazonwebservices.com.cn", [O]: j, [P]: j }, [H]: d }] }, r] }, { endpoint: t, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-us-gov"] }], [H]: b, [I]: [m, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [u] }, p] }, q, u] }, { [J]: [{ [K]: f, [L]: [l, "aws-iso"] }], [H]: b, [I]: [{ [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.c2s.ic.gov", [O]: j, [P]: j }, [H]: d }] }, p] }, { endpoint: v, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-iso-b"] }], [H]: b, [I]: [{ [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.sc2s.sgov.gov", [O]: j, [P]: j }, [H]: d }] }, p] }, { endpoint: w, [H]: d }] }, { [J]: B, [H]: b, [I]: [{ [J]: C, [H]: b, [I]: [{ [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, n] }, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ [H]: b, [I]: [{ [J]: F, endpoint: o, [H]: d }, x, { endpoint: { [N]: "https://iam-fips.{Region}.{PartitionResult#dnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, p] }, { [J]: z, [H]: b, [I]: [{ [J]: E, [H]: b, [I]: [{ [H]: b, [I]: [{ endpoint: { [N]: "https://iam.{Region}.{PartitionResult#dualStackDnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, r] }, { [H]: b, [I]: [{ [J]: F, endpoint: s, [H]: d }, { [J]: [{ [K]: f, [L]: [k, "aws-cn-global"] }], endpoint: t, [H]: d }, x, { [J]: [{ [K]: f, [L]: [k, "aws-iso-global"] }], endpoint: v, [H]: d }, { [J]: [{ [K]: f, [L]: [k, "aws-iso-b-global"] }], endpoint: w, [H]: d }, { endpoint: { [N]: "https://iam.{Region}.{PartitionResult#dnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }] }, { error: "Invalid Configuration: Missing Region", [H]: c }] }] };
|
|
7
7
|
exports.ruleSet = _data;
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
const G = "
|
|
2
|
-
const a =
|
|
3
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
1
|
+
const G = "required", H = "type", I = "rules", J = "conditions", K = "fn", L = "argv", M = "ref", N = "url", O = "properties", P = "headers", Q = "authSchemes", R = "name", S = "signingName", T = "signingRegion";
|
|
2
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [G]: false, [H]: "String" }, h = { [G]: true, "default": false, [H]: "Boolean" }, i = { [M]: "Endpoint" }, j = {}, k = { [M]: "Region" }, l = { [K]: "getAttr", [L]: [{ [M]: e }, "name"] }, m = { [J]: [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }, { [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], [H]: b, [I]: [{ [J]: [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }, { [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], [H]: b, [I]: [{ [d]: { [N]: "https://iam-fips.{Region}.api.aws", [O]: {}, [P]: {} }, [H]: d }] }, { [c]: "FIPS and DualStack are enabled, but this partition does not support one or both", [H]: c }] }, n = { [c]: "FIPS and DualStack are enabled, but this partition does not support one or both", [H]: c }, o = { [N]: "https://iam-fips.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-east-1" }] }, [P]: {} }, p = { [c]: "FIPS is enabled but this partition does not support FIPS", [H]: c }, q = { [J]: [{ [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], [H]: b, [I]: [{ [J]: [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], [H]: b, [I]: [{ [d]: { [N]: "https://iam.{Region}.api.aws", [O]: {}, [P]: {} }, [H]: d }] }, { [c]: "DualStack is enabled but this partition does not support DualStack", [H]: c }] }, r = { [c]: "DualStack is enabled but this partition does not support DualStack", [H]: c }, s = { [N]: "https://iam.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-east-1" }] }, [P]: {} }, t = { [N]: "https://iam.cn-north-1.amazonaws.com.cn", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "cn-north-1" }] }, [P]: {} }, u = { [d]: { [N]: "https://iam.us-gov.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-gov-west-1" }] }, [P]: {} }, [H]: d }, v = { [N]: "https://iam.us-iso-east-1.c2s.ic.gov", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-iso-east-1" }] }, [P]: {} }, w = { [N]: "https://iam.us-isob-east-1.sc2s.sgov.gov", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-isob-east-1" }] }, [P]: {} }, x = { [J]: [{ [K]: f, [L]: [k, "aws-us-gov-global"] }], [d]: { [N]: "https://iam.us-gov.amazonaws.com", [O]: { [Q]: [{ [R]: "sigv4", [S]: "iam", [T]: "us-gov-west-1" }] }, [P]: {} }, [H]: d }, y = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }], z = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], A = [k], B = [{ [K]: "booleanEquals", [L]: [{ [M]: "UseFIPS" }, true] }, { [K]: "booleanEquals", [L]: [{ [M]: "UseDualStack" }, true] }], C = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }, { [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], D = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsFIPS"] }] }], E = [{ [K]: "booleanEquals", [L]: [true, { [K]: "getAttr", [L]: [{ [M]: e }, "supportsDualStack"] }] }], F = [{ [K]: f, [L]: [k, "aws-global"] }];
|
|
3
|
+
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, [I]: [{ [J]: [{ [K]: a, [L]: [i] }], [H]: b, [I]: [{ [J]: y, error: "Invalid Configuration: FIPS and custom endpoint are not supported", [H]: c }, { [H]: b, [I]: [{ [J]: z, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", [H]: c }, { endpoint: { [N]: i, [O]: j, [P]: j }, [H]: d }] }] }, { [H]: b, [I]: [{ [J]: [{ [K]: a, [L]: A }], [H]: b, [I]: [{ [J]: [{ [K]: "aws.partition", [L]: A, assign: e }], [H]: b, [I]: [{ [J]: [{ [K]: f, [L]: [l, "aws"] }], [H]: b, [I]: [m, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: o, [H]: d }] }, p] }, q, { endpoint: s, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-cn"] }], [H]: b, [I]: [{ [J]: B, [H]: b, [I]: [{ [J]: C, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.api.amazonwebservices.com.cn", [O]: j, [P]: j }, [H]: d }] }, n] }, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.amazonaws.com.cn", [O]: j, [P]: j }, [H]: d }] }, p] }, { [J]: z, [H]: b, [I]: [{ [J]: E, [H]: b, [I]: [{ endpoint: { [N]: "https://iam.{Region}.api.amazonwebservices.com.cn", [O]: j, [P]: j }, [H]: d }] }, r] }, { endpoint: t, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-us-gov"] }], [H]: b, [I]: [m, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [u] }, p] }, q, u] }, { [J]: [{ [K]: f, [L]: [l, "aws-iso"] }], [H]: b, [I]: [{ [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.c2s.ic.gov", [O]: j, [P]: j }, [H]: d }] }, p] }, { endpoint: v, [H]: d }] }, { [J]: [{ [K]: f, [L]: [l, "aws-iso-b"] }], [H]: b, [I]: [{ [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.sc2s.sgov.gov", [O]: j, [P]: j }, [H]: d }] }, p] }, { endpoint: w, [H]: d }] }, { [J]: B, [H]: b, [I]: [{ [J]: C, [H]: b, [I]: [{ [H]: b, [I]: [{ endpoint: { [N]: "https://iam-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, n] }, { [J]: y, [H]: b, [I]: [{ [J]: D, [H]: b, [I]: [{ [H]: b, [I]: [{ [J]: F, endpoint: o, [H]: d }, x, { endpoint: { [N]: "https://iam-fips.{Region}.{PartitionResult#dnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, p] }, { [J]: z, [H]: b, [I]: [{ [J]: E, [H]: b, [I]: [{ [H]: b, [I]: [{ endpoint: { [N]: "https://iam.{Region}.{PartitionResult#dualStackDnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }, r] }, { [H]: b, [I]: [{ [J]: F, endpoint: s, [H]: d }, { [J]: [{ [K]: f, [L]: [k, "aws-cn-global"] }], endpoint: t, [H]: d }, x, { [J]: [{ [K]: f, [L]: [k, "aws-iso-global"] }], endpoint: v, [H]: d }, { [J]: [{ [K]: f, [L]: [k, "aws-iso-b-global"] }], endpoint: w, [H]: d }, { endpoint: { [N]: "https://iam.{Region}.{PartitionResult#dnsSuffix}", [O]: j, [P]: j }, [H]: d }] }] }] }, { error: "Invalid Configuration: Missing Region", [H]: c }] }] };
|
|
4
4
|
export const ruleSet = _data;
|
package/dist-types/IAM.d.ts
CHANGED
|
@@ -248,8 +248,8 @@ export declare class IAM extends IAMClient {
|
|
|
248
248
|
/**
|
|
249
249
|
* <p>Changes the password of the IAM user who is calling this operation. This operation
|
|
250
250
|
* can be performed using the CLI, the Amazon Web Services API, or the <b>My
|
|
251
|
-
* Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user
|
|
252
|
-
*
|
|
251
|
+
* Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is
|
|
252
|
+
* not affected by this operation.</p>
|
|
253
253
|
* <p>Use <a>UpdateLoginProfile</a> to use the CLI, the Amazon Web Services API, or the
|
|
254
254
|
* <b>Users</b> page in the IAM console to change the
|
|
255
255
|
* password for any IAM user. For more information about modifying passwords, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html">Managing
|
|
@@ -336,6 +336,9 @@ export declare class IAM extends IAMClient {
|
|
|
336
336
|
* or applications allowed to authenticate using the OIDC provider</p>
|
|
337
337
|
* </li>
|
|
338
338
|
* <li>
|
|
339
|
+
* <p>A list of tags that are attached to the specified IAM OIDC provider</p>
|
|
340
|
+
* </li>
|
|
341
|
+
* <li>
|
|
339
342
|
* <p>A list of thumbprints of one or more server certificates that the IdP
|
|
340
343
|
* uses</p>
|
|
341
344
|
* </li>
|
|
@@ -866,12 +869,11 @@ export declare class IAM extends IAMClient {
|
|
|
866
869
|
* report for any entities (organization root, organizational unit, or account) or policies
|
|
867
870
|
* in your organization.</p>
|
|
868
871
|
* <p>To call this operation, you must be signed in using your Organizations management account
|
|
869
|
-
* credentials. You can use your long-term IAM user or root user credentials, or
|
|
870
|
-
*
|
|
871
|
-
*
|
|
872
|
-
*
|
|
873
|
-
*
|
|
874
|
-
* <i>IAM User Guide</i>.</p>
|
|
872
|
+
* credentials. You can use your long-term IAM user or root user credentials, or temporary
|
|
873
|
+
* credentials from assuming an IAM role. SCPs must be enabled for your organization
|
|
874
|
+
* root. You must have the required IAM and Organizations permissions. For more information, see
|
|
875
|
+
* <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Refining permissions using service last accessed data</a> in the
|
|
876
|
+
* <i>IAM User Guide</i>.</p>
|
|
875
877
|
* <p>You can generate a service last accessed data report for entities by specifying only
|
|
876
878
|
* the entity's path. This data includes a list of services that are allowed by any service
|
|
877
879
|
* control policies (SCPs) that apply to the entity.</p>
|
|
@@ -1216,11 +1218,11 @@ export declare class IAM extends IAMClient {
|
|
|
1216
1218
|
* to perform this operation. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Refining permissions using
|
|
1217
1219
|
* service last accessed data</a> in the
|
|
1218
1220
|
* <i>IAM User Guide</i>.</p>
|
|
1219
|
-
* <p>For each service that principals in an account (root
|
|
1220
|
-
*
|
|
1221
|
-
*
|
|
1222
|
-
*
|
|
1223
|
-
*
|
|
1221
|
+
* <p>For each service that principals in an account (root user, IAM users, or IAM roles)
|
|
1222
|
+
* could access using SCPs, the operation returns details about the most recent access
|
|
1223
|
+
* attempt. If there was no attempt, the service is listed without details about the most
|
|
1224
|
+
* recent attempt to access the service. If the operation fails, it returns the reason that
|
|
1225
|
+
* it failed.</p>
|
|
1224
1226
|
* <p>By default, the list is sorted by service namespace.</p>
|
|
1225
1227
|
*/
|
|
1226
1228
|
getOrganizationsAccessReport(args: GetOrganizationsAccessReportCommandInput, options?: __HttpHandlerOptions): Promise<GetOrganizationsAccessReportCommandOutput>;
|
|
@@ -1465,9 +1467,8 @@ export declare class IAM extends IAMClient {
|
|
|
1465
1467
|
* based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
|
|
1466
1468
|
* used, then <code>UserName</code> is required. If a long-term key is assigned to the
|
|
1467
1469
|
* user, then <code>UserName</code> is not required. This operation works for access keys
|
|
1468
|
-
* under the Amazon Web Services account. Consequently, you can use this operation to manage
|
|
1469
|
-
*
|
|
1470
|
-
* users.</p>
|
|
1470
|
+
* under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user
|
|
1471
|
+
* credentials even if the Amazon Web Services account has no associated users.</p>
|
|
1471
1472
|
* <note>
|
|
1472
1473
|
* <p>To ensure the security of your Amazon Web Services account, the secret access key is accessible
|
|
1473
1474
|
* only during key and user creation.</p>
|
|
@@ -1838,8 +1839,8 @@ export declare class IAM extends IAMClient {
|
|
|
1838
1839
|
* <p>If the <code>UserName</code> field is not specified, the user name is determined
|
|
1839
1840
|
* implicitly based on the Amazon Web Services access key ID used to sign the request for this operation.
|
|
1840
1841
|
* This operation works for access keys under the Amazon Web Services account. Consequently, you can use
|
|
1841
|
-
* this operation to manage Amazon Web Services account root user credentials even if the Amazon Web Services account
|
|
1842
|
-
*
|
|
1842
|
+
* this operation to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no
|
|
1843
|
+
* associated users.</p>
|
|
1843
1844
|
*/
|
|
1844
1845
|
listSigningCertificates(args: ListSigningCertificatesCommandInput, options?: __HttpHandlerOptions): Promise<ListSigningCertificatesCommandOutput>;
|
|
1845
1846
|
listSigningCertificates(args: ListSigningCertificatesCommandInput, cb: (err: any, data?: ListSigningCertificatesCommandOutput) => void): void;
|
|
@@ -1969,11 +1970,11 @@ export declare class IAM extends IAMClient {
|
|
|
1969
1970
|
putRolePolicy(args: PutRolePolicyCommandInput, cb: (err: any, data?: PutRolePolicyCommandOutput) => void): void;
|
|
1970
1971
|
putRolePolicy(args: PutRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutRolePolicyCommandOutput) => void): void;
|
|
1971
1972
|
/**
|
|
1972
|
-
* <p>Adds or updates the policy that is specified as the IAM user's permissions
|
|
1973
|
-
* You can use an Amazon Web Services managed policy or a customer managed policy to set the
|
|
1974
|
-
* a user. Use the boundary to control the maximum permissions that the user
|
|
1975
|
-
* Setting a permissions boundary is an advanced feature that can affect the
|
|
1976
|
-
* for the user.</p>
|
|
1973
|
+
* <p>Adds or updates the policy that is specified as the IAM user's permissions
|
|
1974
|
+
* boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the
|
|
1975
|
+
* boundary for a user. Use the boundary to control the maximum permissions that the user
|
|
1976
|
+
* can have. Setting a permissions boundary is an advanced feature that can affect the
|
|
1977
|
+
* permissions for the user.</p>
|
|
1977
1978
|
* <important>
|
|
1978
1979
|
* <p>Policies that are used as permissions boundaries do not provide permissions. You
|
|
1979
1980
|
* must also attach a permissions policy to the user. To learn how the effective
|
|
@@ -2256,7 +2257,7 @@ export declare class IAM extends IAMClient {
|
|
|
2256
2257
|
* </li>
|
|
2257
2258
|
* <li>
|
|
2258
2259
|
* <p>
|
|
2259
|
-
* <b>Access control</b> - Include tags in IAM
|
|
2260
|
+
* <b>Access control</b> - Include tags in IAM identity-based
|
|
2260
2261
|
* and resource-based policies. You can use tags to restrict access to only an OIDC provider
|
|
2261
2262
|
* that has a specified tag attached. For examples of policies that show how to use tags to
|
|
2262
2263
|
* control access, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Control access using IAM tags</a> in the
|
|
@@ -2484,7 +2485,7 @@ export declare class IAM extends IAMClient {
|
|
|
2484
2485
|
* </li>
|
|
2485
2486
|
* <li>
|
|
2486
2487
|
* <p>
|
|
2487
|
-
* <b>Access control</b> - Include tags in IAM
|
|
2488
|
+
* <b>Access control</b> - Include tags in IAM identity-based
|
|
2488
2489
|
* and resource-based policies. You can use tags to restrict access to only an IAM
|
|
2489
2490
|
* requesting user that has a specified tag attached. You can also restrict access to only
|
|
2490
2491
|
* those resources that have a certain tag attached. For examples of policies that show how
|
|
@@ -2594,9 +2595,8 @@ export declare class IAM extends IAMClient {
|
|
|
2594
2595
|
* based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
|
|
2595
2596
|
* used, then <code>UserName</code> is required. If a long-term key is assigned to the
|
|
2596
2597
|
* user, then <code>UserName</code> is not required. This operation works for access keys
|
|
2597
|
-
* under the Amazon Web Services account. Consequently, you can use this operation to manage
|
|
2598
|
-
*
|
|
2599
|
-
* users.</p>
|
|
2598
|
+
* under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user
|
|
2599
|
+
* credentials even if the Amazon Web Services account has no associated users.</p>
|
|
2600
2600
|
* <p>For information about rotating keys, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html">Managing keys and certificates</a>
|
|
2601
2601
|
* in the <i>IAM User Guide</i>.</p>
|
|
2602
2602
|
*/
|
|
@@ -2747,13 +2747,13 @@ export declare class IAM extends IAMClient {
|
|
|
2747
2747
|
updateServiceSpecificCredential(args: UpdateServiceSpecificCredentialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateServiceSpecificCredentialCommandOutput) => void): void;
|
|
2748
2748
|
/**
|
|
2749
2749
|
* <p>Changes the status of the specified user signing certificate from active to disabled,
|
|
2750
|
-
* or vice versa. This operation can be used to disable an IAM user's signing
|
|
2751
|
-
* as part of a certificate rotation work flow.</p>
|
|
2750
|
+
* or vice versa. This operation can be used to disable an IAM user's signing
|
|
2751
|
+
* certificate as part of a certificate rotation work flow.</p>
|
|
2752
2752
|
* <p>If the <code>UserName</code> field is not specified, the user name is determined
|
|
2753
2753
|
* implicitly based on the Amazon Web Services access key ID used to sign the request. This operation
|
|
2754
2754
|
* works for access keys under the Amazon Web Services account. Consequently, you can use this operation
|
|
2755
|
-
* to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no
|
|
2756
|
-
*
|
|
2755
|
+
* to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
|
|
2756
|
+
* users.</p>
|
|
2757
2757
|
*/
|
|
2758
2758
|
updateSigningCertificate(args: UpdateSigningCertificateCommandInput, options?: __HttpHandlerOptions): Promise<UpdateSigningCertificateCommandOutput>;
|
|
2759
2759
|
updateSigningCertificate(args: UpdateSigningCertificateCommandInput, cb: (err: any, data?: UpdateSigningCertificateCommandOutput) => void): void;
|
|
@@ -2773,8 +2773,8 @@ export declare class IAM extends IAMClient {
|
|
|
2773
2773
|
/**
|
|
2774
2774
|
* <p>Updates the name and/or the path of the specified IAM user.</p>
|
|
2775
2775
|
* <important>
|
|
2776
|
-
* <p> You should understand the implications of changing an IAM user's path or
|
|
2777
|
-
* For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_manage.html#id_users_renaming">Renaming an IAM
|
|
2776
|
+
* <p> You should understand the implications of changing an IAM user's path or
|
|
2777
|
+
* name. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_manage.html#id_users_renaming">Renaming an IAM
|
|
2778
2778
|
* user</a> and <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_groups_manage_rename.html">Renaming an IAM
|
|
2779
2779
|
* group</a> in the <i>IAM User Guide</i>.</p>
|
|
2780
2780
|
* </important>
|
|
@@ -2828,8 +2828,8 @@ export declare class IAM extends IAMClient {
|
|
|
2828
2828
|
* <p>If the <code>UserName</code> is not specified, the IAM user name is determined
|
|
2829
2829
|
* implicitly based on the Amazon Web Services access key ID used to sign the request. This operation
|
|
2830
2830
|
* works for access keys under the Amazon Web Services account. Consequently, you can use this operation
|
|
2831
|
-
* to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no
|
|
2832
|
-
*
|
|
2831
|
+
* to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
|
|
2832
|
+
* users.</p>
|
|
2833
2833
|
* <note>
|
|
2834
2834
|
* <p>Because the body of an X.509 certificate can be large, you should use POST rather
|
|
2835
2835
|
* than GET when calling <code>UploadSigningCertificate</code>. For information about
|
|
@@ -32,6 +32,23 @@ export interface AddClientIDToOpenIDConnectProviderCommandOutput extends __Metad
|
|
|
32
32
|
* @see {@link AddClientIDToOpenIDConnectProviderCommandOutput} for command's `response` shape.
|
|
33
33
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
34
34
|
*
|
|
35
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
36
|
+
* <p>The request was rejected because an invalid or out-of-range value was supplied for an
|
|
37
|
+
* input parameter.</p>
|
|
38
|
+
*
|
|
39
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
40
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
41
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
42
|
+
*
|
|
43
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
44
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
45
|
+
* error message describes the resource.</p>
|
|
46
|
+
*
|
|
47
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
48
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
49
|
+
* failure.</p>
|
|
50
|
+
*
|
|
51
|
+
*
|
|
35
52
|
* @example To add a client ID (audience) to an Open-ID Connect (OIDC) provider
|
|
36
53
|
* ```javascript
|
|
37
54
|
* // The following add-client-id-to-open-id-connect-provider command adds the client ID my-application-ID to the OIDC provider named server.example.com:
|
|
@@ -41,6 +41,29 @@ export interface AddRoleToInstanceProfileCommandOutput extends __MetadataBearer
|
|
|
41
41
|
* @see {@link AddRoleToInstanceProfileCommandOutput} for command's `response` shape.
|
|
42
42
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
43
43
|
*
|
|
44
|
+
* @throws {@link EntityAlreadyExistsException} (client fault)
|
|
45
|
+
* <p>The request was rejected because it attempted to create a resource that already
|
|
46
|
+
* exists.</p>
|
|
47
|
+
*
|
|
48
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
49
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
50
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
51
|
+
*
|
|
52
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
53
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
54
|
+
* error message describes the resource.</p>
|
|
55
|
+
*
|
|
56
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
57
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
58
|
+
* failure.</p>
|
|
59
|
+
*
|
|
60
|
+
* @throws {@link UnmodifiableEntityException} (client fault)
|
|
61
|
+
* <p>The request was rejected because only the service that depends on the service-linked role
|
|
62
|
+
* can modify or delete the role on your behalf. The error message includes the name of the
|
|
63
|
+
* service that depends on this service-linked role. You must request the change through that
|
|
64
|
+
* service.</p>
|
|
65
|
+
*
|
|
66
|
+
*
|
|
44
67
|
* @example To add a role to an instance profile
|
|
45
68
|
* ```javascript
|
|
46
69
|
* // The following command adds the role named S3Access to the instance profile named Webserver:
|
|
@@ -29,6 +29,19 @@ export interface AddUserToGroupCommandOutput extends __MetadataBearer {
|
|
|
29
29
|
* @see {@link AddUserToGroupCommandOutput} for command's `response` shape.
|
|
30
30
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
31
31
|
*
|
|
32
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
33
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
34
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
35
|
+
*
|
|
36
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
37
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
38
|
+
* error message describes the resource.</p>
|
|
39
|
+
*
|
|
40
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
41
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
42
|
+
* failure.</p>
|
|
43
|
+
*
|
|
44
|
+
*
|
|
32
45
|
* @example To add a user to an IAM group
|
|
33
46
|
* ```javascript
|
|
34
47
|
* // The following command adds an IAM user named Bob to the IAM group named Admins:
|
|
@@ -36,6 +36,27 @@ export interface AttachGroupPolicyCommandOutput extends __MetadataBearer {
|
|
|
36
36
|
* @see {@link AttachGroupPolicyCommandOutput} for command's `response` shape.
|
|
37
37
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
38
38
|
*
|
|
39
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
40
|
+
* <p>The request was rejected because an invalid or out-of-range value was supplied for an
|
|
41
|
+
* input parameter.</p>
|
|
42
|
+
*
|
|
43
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
44
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
45
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
46
|
+
*
|
|
47
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
48
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
49
|
+
* error message describes the resource.</p>
|
|
50
|
+
*
|
|
51
|
+
* @throws {@link PolicyNotAttachableException} (client fault)
|
|
52
|
+
* <p>The request failed because Amazon Web Services service role policies can only be attached to the
|
|
53
|
+
* service-linked role for that service.</p>
|
|
54
|
+
*
|
|
55
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
56
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
57
|
+
* failure.</p>
|
|
58
|
+
*
|
|
59
|
+
*
|
|
39
60
|
* @example To attach a managed policy to an IAM group
|
|
40
61
|
* ```javascript
|
|
41
62
|
* // The following command attaches the AWS managed policy named ReadOnlyAccess to the IAM group named Finance.
|
|
@@ -43,6 +43,33 @@ export interface AttachRolePolicyCommandOutput extends __MetadataBearer {
|
|
|
43
43
|
* @see {@link AttachRolePolicyCommandOutput} for command's `response` shape.
|
|
44
44
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
45
45
|
*
|
|
46
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
47
|
+
* <p>The request was rejected because an invalid or out-of-range value was supplied for an
|
|
48
|
+
* input parameter.</p>
|
|
49
|
+
*
|
|
50
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
51
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
52
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
53
|
+
*
|
|
54
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
55
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
56
|
+
* error message describes the resource.</p>
|
|
57
|
+
*
|
|
58
|
+
* @throws {@link PolicyNotAttachableException} (client fault)
|
|
59
|
+
* <p>The request failed because Amazon Web Services service role policies can only be attached to the
|
|
60
|
+
* service-linked role for that service.</p>
|
|
61
|
+
*
|
|
62
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
63
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
64
|
+
* failure.</p>
|
|
65
|
+
*
|
|
66
|
+
* @throws {@link UnmodifiableEntityException} (client fault)
|
|
67
|
+
* <p>The request was rejected because only the service that depends on the service-linked role
|
|
68
|
+
* can modify or delete the role on your behalf. The error message includes the name of the
|
|
69
|
+
* service that depends on this service-linked role. You must request the change through that
|
|
70
|
+
* service.</p>
|
|
71
|
+
*
|
|
72
|
+
*
|
|
46
73
|
* @example To attach a managed policy to an IAM role
|
|
47
74
|
* ```javascript
|
|
48
75
|
* // The following command attaches the AWS managed policy named ReadOnlyAccess to the IAM role named ReadOnlyRole.
|
|
@@ -36,6 +36,27 @@ export interface AttachUserPolicyCommandOutput extends __MetadataBearer {
|
|
|
36
36
|
* @see {@link AttachUserPolicyCommandOutput} for command's `response` shape.
|
|
37
37
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
38
38
|
*
|
|
39
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
40
|
+
* <p>The request was rejected because an invalid or out-of-range value was supplied for an
|
|
41
|
+
* input parameter.</p>
|
|
42
|
+
*
|
|
43
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
44
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
45
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
46
|
+
*
|
|
47
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
48
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
49
|
+
* error message describes the resource.</p>
|
|
50
|
+
*
|
|
51
|
+
* @throws {@link PolicyNotAttachableException} (client fault)
|
|
52
|
+
* <p>The request failed because Amazon Web Services service role policies can only be attached to the
|
|
53
|
+
* service-linked role for that service.</p>
|
|
54
|
+
*
|
|
55
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
56
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
57
|
+
* failure.</p>
|
|
58
|
+
*
|
|
59
|
+
*
|
|
39
60
|
* @example To attach a managed policy to an IAM user
|
|
40
61
|
* ```javascript
|
|
41
62
|
* // The following command attaches the AWS managed policy named AdministratorAccess to the IAM user named Alice.
|
|
@@ -16,8 +16,8 @@ export interface ChangePasswordCommandOutput extends __MetadataBearer {
|
|
|
16
16
|
/**
|
|
17
17
|
* <p>Changes the password of the IAM user who is calling this operation. This operation
|
|
18
18
|
* can be performed using the CLI, the Amazon Web Services API, or the <b>My
|
|
19
|
-
* Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user
|
|
20
|
-
*
|
|
19
|
+
* Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is
|
|
20
|
+
* not affected by this operation.</p>
|
|
21
21
|
* <p>Use <a>UpdateLoginProfile</a> to use the CLI, the Amazon Web Services API, or the
|
|
22
22
|
* <b>Users</b> page in the IAM console to change the
|
|
23
23
|
* password for any IAM user. For more information about modifying passwords, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html">Managing
|
|
@@ -36,6 +36,33 @@ export interface ChangePasswordCommandOutput extends __MetadataBearer {
|
|
|
36
36
|
* @see {@link ChangePasswordCommandOutput} for command's `response` shape.
|
|
37
37
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
38
38
|
*
|
|
39
|
+
* @throws {@link EntityTemporarilyUnmodifiableException} (client fault)
|
|
40
|
+
* <p>The request was rejected because it referenced an entity that is temporarily unmodifiable,
|
|
41
|
+
* such as a user name that was deleted and then recreated. The error indicates that the request
|
|
42
|
+
* is likely to succeed if you try again after waiting several minutes. The error message
|
|
43
|
+
* describes the entity.</p>
|
|
44
|
+
*
|
|
45
|
+
* @throws {@link InvalidUserTypeException} (client fault)
|
|
46
|
+
* <p>The request was rejected because the type of user for the transaction was
|
|
47
|
+
* incorrect.</p>
|
|
48
|
+
*
|
|
49
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
50
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
51
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
52
|
+
*
|
|
53
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
54
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
55
|
+
* error message describes the resource.</p>
|
|
56
|
+
*
|
|
57
|
+
* @throws {@link PasswordPolicyViolationException} (client fault)
|
|
58
|
+
* <p>The request was rejected because the provided password did not meet the requirements
|
|
59
|
+
* imposed by the account password policy.</p>
|
|
60
|
+
*
|
|
61
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
62
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
63
|
+
* failure.</p>
|
|
64
|
+
*
|
|
65
|
+
*
|
|
39
66
|
* @example To change the password for your IAM user
|
|
40
67
|
* ```javascript
|
|
41
68
|
* // The following command changes the password for the current IAM user.
|
|
@@ -42,6 +42,19 @@ export interface CreateAccessKeyCommandOutput extends CreateAccessKeyResponse, _
|
|
|
42
42
|
* @see {@link CreateAccessKeyCommandOutput} for command's `response` shape.
|
|
43
43
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
44
44
|
*
|
|
45
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
46
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
47
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
48
|
+
*
|
|
49
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
50
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
51
|
+
* error message describes the resource.</p>
|
|
52
|
+
*
|
|
53
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
54
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
55
|
+
* failure.</p>
|
|
56
|
+
*
|
|
57
|
+
*
|
|
45
58
|
* @example To create an access key for an IAM user
|
|
46
59
|
* ```javascript
|
|
47
60
|
* // The following command creates an access key (access key ID and secret access key) for the IAM user named Bob.
|
|
@@ -32,6 +32,19 @@ export interface CreateAccountAliasCommandOutput extends __MetadataBearer {
|
|
|
32
32
|
* @see {@link CreateAccountAliasCommandOutput} for command's `response` shape.
|
|
33
33
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
34
34
|
*
|
|
35
|
+
* @throws {@link EntityAlreadyExistsException} (client fault)
|
|
36
|
+
* <p>The request was rejected because it attempted to create a resource that already
|
|
37
|
+
* exists.</p>
|
|
38
|
+
*
|
|
39
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
40
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
41
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
42
|
+
*
|
|
43
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
44
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
45
|
+
* failure.</p>
|
|
46
|
+
*
|
|
47
|
+
*
|
|
35
48
|
* @example To create an account alias
|
|
36
49
|
* ```javascript
|
|
37
50
|
* // The following command associates the alias examplecorp to your AWS account.
|
|
@@ -31,6 +31,23 @@ export interface CreateGroupCommandOutput extends CreateGroupResponse, __Metadat
|
|
|
31
31
|
* @see {@link CreateGroupCommandOutput} for command's `response` shape.
|
|
32
32
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
33
33
|
*
|
|
34
|
+
* @throws {@link EntityAlreadyExistsException} (client fault)
|
|
35
|
+
* <p>The request was rejected because it attempted to create a resource that already
|
|
36
|
+
* exists.</p>
|
|
37
|
+
*
|
|
38
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
39
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
40
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
41
|
+
*
|
|
42
|
+
* @throws {@link NoSuchEntityException} (client fault)
|
|
43
|
+
* <p>The request was rejected because it referenced a resource entity that does not exist. The
|
|
44
|
+
* error message describes the resource.</p>
|
|
45
|
+
*
|
|
46
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
47
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
48
|
+
* failure.</p>
|
|
49
|
+
*
|
|
50
|
+
*
|
|
34
51
|
* @example To create an IAM group
|
|
35
52
|
* ```javascript
|
|
36
53
|
* // The following command creates an IAM group named Admins.
|
|
@@ -33,6 +33,27 @@ export interface CreateInstanceProfileCommandOutput extends CreateInstanceProfil
|
|
|
33
33
|
* @see {@link CreateInstanceProfileCommandOutput} for command's `response` shape.
|
|
34
34
|
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
|
|
35
35
|
*
|
|
36
|
+
* @throws {@link ConcurrentModificationException} (client fault)
|
|
37
|
+
* <p>The request was rejected because multiple requests to change this object were submitted
|
|
38
|
+
* simultaneously. Wait a few minutes and submit your request again.</p>
|
|
39
|
+
*
|
|
40
|
+
* @throws {@link EntityAlreadyExistsException} (client fault)
|
|
41
|
+
* <p>The request was rejected because it attempted to create a resource that already
|
|
42
|
+
* exists.</p>
|
|
43
|
+
*
|
|
44
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
45
|
+
* <p>The request was rejected because an invalid or out-of-range value was supplied for an
|
|
46
|
+
* input parameter.</p>
|
|
47
|
+
*
|
|
48
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
49
|
+
* <p>The request was rejected because it attempted to create resources beyond the current
|
|
50
|
+
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
|
|
51
|
+
*
|
|
52
|
+
* @throws {@link ServiceFailureException} (server fault)
|
|
53
|
+
* <p>The request processing has failed because of an unknown error, exception or
|
|
54
|
+
* failure.</p>
|
|
55
|
+
*
|
|
56
|
+
*
|
|
36
57
|
* @example To create an instance profile
|
|
37
58
|
* ```javascript
|
|
38
59
|
* // The following command creates an instance profile named Webserver that is ready to have a role attached and then be associated with an EC2 instance.
|