@aws-sdk/client-iam 3.290.0 → 3.291.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (84) hide show
  1. package/dist-cjs/endpoint/ruleset.js +3 -3
  2. package/dist-es/endpoint/ruleset.js +3 -3
  3. package/dist-types/IAM.d.ts +36 -36
  4. package/dist-types/commands/AddClientIDToOpenIDConnectProviderCommand.d.ts +2 -2
  5. package/dist-types/commands/AddRoleToInstanceProfileCommand.d.ts +2 -2
  6. package/dist-types/commands/AddUserToGroupCommand.d.ts +2 -2
  7. package/dist-types/commands/AttachGroupPolicyCommand.d.ts +2 -2
  8. package/dist-types/commands/AttachRolePolicyCommand.d.ts +2 -2
  9. package/dist-types/commands/AttachUserPolicyCommand.d.ts +2 -2
  10. package/dist-types/commands/ChangePasswordCommand.d.ts +4 -4
  11. package/dist-types/commands/CreateAccessKeyCommand.d.ts +2 -2
  12. package/dist-types/commands/CreateAccountAliasCommand.d.ts +2 -2
  13. package/dist-types/commands/CreateGroupCommand.d.ts +2 -2
  14. package/dist-types/commands/CreateInstanceProfileCommand.d.ts +2 -2
  15. package/dist-types/commands/CreateLoginProfileCommand.d.ts +2 -2
  16. package/dist-types/commands/CreateOpenIDConnectProviderCommand.d.ts +5 -2
  17. package/dist-types/commands/CreatePolicyCommand.d.ts +2 -2
  18. package/dist-types/commands/CreatePolicyVersionCommand.d.ts +2 -2
  19. package/dist-types/commands/CreateRoleCommand.d.ts +2 -2
  20. package/dist-types/commands/CreateSAMLProviderCommand.d.ts +2 -2
  21. package/dist-types/commands/CreateServiceLinkedRoleCommand.d.ts +2 -2
  22. package/dist-types/commands/CreateServiceSpecificCredentialCommand.d.ts +2 -2
  23. package/dist-types/commands/CreateUserCommand.d.ts +2 -2
  24. package/dist-types/commands/CreateVirtualMFADeviceCommand.d.ts +2 -2
  25. package/dist-types/commands/DeactivateMFADeviceCommand.d.ts +2 -2
  26. package/dist-types/commands/DeleteAccessKeyCommand.d.ts +2 -2
  27. package/dist-types/commands/DeleteAccountAliasCommand.d.ts +2 -2
  28. package/dist-types/commands/DeleteAccountPasswordPolicyCommand.d.ts +2 -2
  29. package/dist-types/commands/DeleteGroupCommand.d.ts +2 -2
  30. package/dist-types/commands/DeleteGroupPolicyCommand.d.ts +2 -2
  31. package/dist-types/commands/DeleteInstanceProfileCommand.d.ts +2 -2
  32. package/dist-types/commands/DeleteLoginProfileCommand.d.ts +2 -2
  33. package/dist-types/commands/DeletePolicyCommand.d.ts +2 -2
  34. package/dist-types/commands/DeletePolicyVersionCommand.d.ts +2 -2
  35. package/dist-types/commands/DeleteRoleCommand.d.ts +2 -2
  36. package/dist-types/commands/DeleteRolePolicyCommand.d.ts +2 -2
  37. package/dist-types/commands/DeleteSAMLProviderCommand.d.ts +2 -2
  38. package/dist-types/commands/DeleteServerCertificateCommand.d.ts +2 -2
  39. package/dist-types/commands/DeleteServiceLinkedRoleCommand.d.ts +2 -2
  40. package/dist-types/commands/DeleteSigningCertificateCommand.d.ts +2 -2
  41. package/dist-types/commands/DeleteUserCommand.d.ts +2 -2
  42. package/dist-types/commands/DeleteUserPolicyCommand.d.ts +2 -2
  43. package/dist-types/commands/DeleteVirtualMFADeviceCommand.d.ts +2 -2
  44. package/dist-types/commands/DetachGroupPolicyCommand.d.ts +2 -2
  45. package/dist-types/commands/DetachRolePolicyCommand.d.ts +2 -2
  46. package/dist-types/commands/DetachUserPolicyCommand.d.ts +2 -2
  47. package/dist-types/commands/EnableMFADeviceCommand.d.ts +2 -2
  48. package/dist-types/commands/GenerateCredentialReportCommand.d.ts +2 -2
  49. package/dist-types/commands/GenerateOrganizationsAccessReportCommand.d.ts +5 -6
  50. package/dist-types/commands/GetOrganizationsAccessReportCommand.d.ts +5 -5
  51. package/dist-types/commands/ListAccessKeysCommand.d.ts +2 -3
  52. package/dist-types/commands/ListSigningCertificatesCommand.d.ts +2 -2
  53. package/dist-types/commands/PutGroupPolicyCommand.d.ts +2 -2
  54. package/dist-types/commands/PutRolePolicyCommand.d.ts +2 -2
  55. package/dist-types/commands/PutUserPermissionsBoundaryCommand.d.ts +5 -5
  56. package/dist-types/commands/PutUserPolicyCommand.d.ts +2 -2
  57. package/dist-types/commands/RemoveRoleFromInstanceProfileCommand.d.ts +2 -2
  58. package/dist-types/commands/RemoveUserFromGroupCommand.d.ts +2 -2
  59. package/dist-types/commands/ResyncMFADeviceCommand.d.ts +2 -2
  60. package/dist-types/commands/SetDefaultPolicyVersionCommand.d.ts +2 -2
  61. package/dist-types/commands/TagInstanceProfileCommand.d.ts +2 -2
  62. package/dist-types/commands/TagMFADeviceCommand.d.ts +2 -2
  63. package/dist-types/commands/TagOpenIDConnectProviderCommand.d.ts +3 -3
  64. package/dist-types/commands/TagPolicyCommand.d.ts +2 -2
  65. package/dist-types/commands/TagRoleCommand.d.ts +2 -2
  66. package/dist-types/commands/TagSAMLProviderCommand.d.ts +2 -2
  67. package/dist-types/commands/TagServerCertificateCommand.d.ts +2 -2
  68. package/dist-types/commands/TagUserCommand.d.ts +3 -3
  69. package/dist-types/commands/UpdateAccessKeyCommand.d.ts +4 -5
  70. package/dist-types/commands/UpdateAccountPasswordPolicyCommand.d.ts +2 -2
  71. package/dist-types/commands/UpdateAssumeRolePolicyCommand.d.ts +2 -2
  72. package/dist-types/commands/UpdateGroupCommand.d.ts +2 -2
  73. package/dist-types/commands/UpdateLoginProfileCommand.d.ts +2 -2
  74. package/dist-types/commands/UpdateSAMLProviderCommand.d.ts +2 -2
  75. package/dist-types/commands/UpdateServerCertificateCommand.d.ts +2 -2
  76. package/dist-types/commands/UpdateSigningCertificateCommand.d.ts +6 -6
  77. package/dist-types/commands/UpdateUserCommand.d.ts +4 -4
  78. package/dist-types/commands/UploadSSHPublicKeyCommand.d.ts +2 -2
  79. package/dist-types/commands/UploadServerCertificateCommand.d.ts +2 -2
  80. package/dist-types/commands/UploadSigningCertificateCommand.d.ts +4 -4
  81. package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
  82. package/dist-types/models/models_0.d.ts +11 -10
  83. package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
  84. package/package.json +1 -1
@@ -34,8 +34,8 @@ export interface DeleteAccessKeyCommandOutput extends __MetadataBearer {
34
34
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
35
35
  *
36
36
  * @throws {@link LimitExceededException} (client fault)
37
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
38
- * account limits. The error message describes the limit exceeded.</p>
37
+ * <p>The request was rejected because it attempted to create resources beyond the current
38
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
39
39
  *
40
40
  * @throws {@link NoSuchEntityException} (client fault)
41
41
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -32,8 +32,8 @@ export interface DeleteAccountAliasCommandOutput extends __MetadataBearer {
32
32
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
33
33
  *
34
34
  * @throws {@link LimitExceededException} (client fault)
35
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
36
- * account limits. The error message describes the limit exceeded.</p>
35
+ * <p>The request was rejected because it attempted to create resources beyond the current
36
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
37
37
  *
38
38
  * @throws {@link NoSuchEntityException} (client fault)
39
39
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -29,8 +29,8 @@ export interface DeleteAccountPasswordPolicyCommandOutput extends __MetadataBear
29
29
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
30
30
  *
31
31
  * @throws {@link LimitExceededException} (client fault)
32
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
33
- * account limits. The error message describes the limit exceeded.</p>
32
+ * <p>The request was rejected because it attempted to create resources beyond the current
33
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
34
34
  *
35
35
  * @throws {@link NoSuchEntityException} (client fault)
36
36
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -35,8 +35,8 @@ export interface DeleteGroupCommandOutput extends __MetadataBearer {
35
35
  * subordinate entities. The error message describes these entities.</p>
36
36
  *
37
37
  * @throws {@link LimitExceededException} (client fault)
38
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
39
- * account limits. The error message describes the limit exceeded.</p>
38
+ * <p>The request was rejected because it attempted to create resources beyond the current
39
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
40
40
  *
41
41
  * @throws {@link NoSuchEntityException} (client fault)
42
42
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -35,8 +35,8 @@ export interface DeleteGroupPolicyCommandOutput extends __MetadataBearer {
35
35
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
36
36
  *
37
37
  * @throws {@link LimitExceededException} (client fault)
38
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
39
- * account limits. The error message describes the limit exceeded.</p>
38
+ * <p>The request was rejected because it attempted to create resources beyond the current
39
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
40
40
  *
41
41
  * @throws {@link NoSuchEntityException} (client fault)
42
42
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -43,8 +43,8 @@ export interface DeleteInstanceProfileCommandOutput extends __MetadataBearer {
43
43
  * subordinate entities. The error message describes these entities.</p>
44
44
  *
45
45
  * @throws {@link LimitExceededException} (client fault)
46
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
47
- * account limits. The error message describes the limit exceeded.</p>
46
+ * <p>The request was rejected because it attempted to create resources beyond the current
47
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
48
48
  *
49
49
  * @throws {@link NoSuchEntityException} (client fault)
50
50
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -48,8 +48,8 @@ export interface DeleteLoginProfileCommandOutput extends __MetadataBearer {
48
48
  * describes the entity.</p>
49
49
  *
50
50
  * @throws {@link LimitExceededException} (client fault)
51
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
52
- * account limits. The error message describes the limit exceeded.</p>
51
+ * <p>The request was rejected because it attempted to create resources beyond the current
52
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
53
53
  *
54
54
  * @throws {@link NoSuchEntityException} (client fault)
55
55
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -62,8 +62,8 @@ export interface DeletePolicyCommandOutput extends __MetadataBearer {
62
62
  * input parameter.</p>
63
63
  *
64
64
  * @throws {@link LimitExceededException} (client fault)
65
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
66
- * account limits. The error message describes the limit exceeded.</p>
65
+ * <p>The request was rejected because it attempted to create resources beyond the current
66
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
67
67
  *
68
68
  * @throws {@link NoSuchEntityException} (client fault)
69
69
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -43,8 +43,8 @@ export interface DeletePolicyVersionCommandOutput extends __MetadataBearer {
43
43
  * input parameter.</p>
44
44
  *
45
45
  * @throws {@link LimitExceededException} (client fault)
46
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
47
- * account limits. The error message describes the limit exceeded.</p>
46
+ * <p>The request was rejected because it attempted to create resources beyond the current
47
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
48
48
  *
49
49
  * @throws {@link NoSuchEntityException} (client fault)
50
50
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -61,8 +61,8 @@ export interface DeleteRoleCommandOutput extends __MetadataBearer {
61
61
  * subordinate entities. The error message describes these entities.</p>
62
62
  *
63
63
  * @throws {@link LimitExceededException} (client fault)
64
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
65
- * account limits. The error message describes the limit exceeded.</p>
64
+ * <p>The request was rejected because it attempted to create resources beyond the current
65
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
66
66
  *
67
67
  * @throws {@link NoSuchEntityException} (client fault)
68
68
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -35,8 +35,8 @@ export interface DeleteRolePolicyCommandOutput extends __MetadataBearer {
35
35
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
36
36
  *
37
37
  * @throws {@link LimitExceededException} (client fault)
38
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
39
- * account limits. The error message describes the limit exceeded.</p>
38
+ * <p>The request was rejected because it attempted to create resources beyond the current
39
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
40
40
  *
41
41
  * @throws {@link NoSuchEntityException} (client fault)
42
42
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -40,8 +40,8 @@ export interface DeleteSAMLProviderCommandOutput extends __MetadataBearer {
40
40
  * input parameter.</p>
41
41
  *
42
42
  * @throws {@link LimitExceededException} (client fault)
43
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
44
- * account limits. The error message describes the limit exceeded.</p>
43
+ * <p>The request was rejected because it attempted to create resources beyond the current
44
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
45
45
  *
46
46
  * @throws {@link NoSuchEntityException} (client fault)
47
47
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -48,8 +48,8 @@ export interface DeleteServerCertificateCommandOutput extends __MetadataBearer {
48
48
  * subordinate entities. The error message describes these entities.</p>
49
49
  *
50
50
  * @throws {@link LimitExceededException} (client fault)
51
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
52
- * account limits. The error message describes the limit exceeded.</p>
51
+ * <p>The request was rejected because it attempted to create resources beyond the current
52
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
53
53
  *
54
54
  * @throws {@link NoSuchEntityException} (client fault)
55
55
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -46,8 +46,8 @@ export interface DeleteServiceLinkedRoleCommandOutput extends DeleteServiceLinke
46
46
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
47
47
  *
48
48
  * @throws {@link LimitExceededException} (client fault)
49
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
50
- * account limits. The error message describes the limit exceeded.</p>
49
+ * <p>The request was rejected because it attempted to create resources beyond the current
50
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
51
51
  *
52
52
  * @throws {@link NoSuchEntityException} (client fault)
53
53
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -34,8 +34,8 @@ export interface DeleteSigningCertificateCommandOutput extends __MetadataBearer
34
34
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
35
35
  *
36
36
  * @throws {@link LimitExceededException} (client fault)
37
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
38
- * account limits. The error message describes the limit exceeded.</p>
37
+ * <p>The request was rejected because it attempted to create resources beyond the current
38
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
39
39
  *
40
40
  * @throws {@link NoSuchEntityException} (client fault)
41
41
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -70,8 +70,8 @@ export interface DeleteUserCommandOutput extends __MetadataBearer {
70
70
  * subordinate entities. The error message describes these entities.</p>
71
71
  *
72
72
  * @throws {@link LimitExceededException} (client fault)
73
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
74
- * account limits. The error message describes the limit exceeded.</p>
73
+ * <p>The request was rejected because it attempted to create resources beyond the current
74
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
75
75
  *
76
76
  * @throws {@link NoSuchEntityException} (client fault)
77
77
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -35,8 +35,8 @@ export interface DeleteUserPolicyCommandOutput extends __MetadataBearer {
35
35
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
36
36
  *
37
37
  * @throws {@link LimitExceededException} (client fault)
38
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
39
- * account limits. The error message describes the limit exceeded.</p>
38
+ * <p>The request was rejected because it attempted to create resources beyond the current
39
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
40
40
  *
41
41
  * @throws {@link NoSuchEntityException} (client fault)
42
42
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -38,8 +38,8 @@ export interface DeleteVirtualMFADeviceCommandOutput extends __MetadataBearer {
38
38
  * subordinate entities. The error message describes these entities.</p>
39
39
  *
40
40
  * @throws {@link LimitExceededException} (client fault)
41
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
42
- * account limits. The error message describes the limit exceeded.</p>
41
+ * <p>The request was rejected because it attempted to create resources beyond the current
42
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
43
43
  *
44
44
  * @throws {@link NoSuchEntityException} (client fault)
45
45
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -38,8 +38,8 @@ export interface DetachGroupPolicyCommandOutput extends __MetadataBearer {
38
38
  * input parameter.</p>
39
39
  *
40
40
  * @throws {@link LimitExceededException} (client fault)
41
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
42
- * account limits. The error message describes the limit exceeded.</p>
41
+ * <p>The request was rejected because it attempted to create resources beyond the current
42
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
43
43
  *
44
44
  * @throws {@link NoSuchEntityException} (client fault)
45
45
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -38,8 +38,8 @@ export interface DetachRolePolicyCommandOutput extends __MetadataBearer {
38
38
  * input parameter.</p>
39
39
  *
40
40
  * @throws {@link LimitExceededException} (client fault)
41
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
42
- * account limits. The error message describes the limit exceeded.</p>
41
+ * <p>The request was rejected because it attempted to create resources beyond the current
42
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
43
43
  *
44
44
  * @throws {@link NoSuchEntityException} (client fault)
45
45
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -38,8 +38,8 @@ export interface DetachUserPolicyCommandOutput extends __MetadataBearer {
38
38
  * input parameter.</p>
39
39
  *
40
40
  * @throws {@link LimitExceededException} (client fault)
41
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
42
- * account limits. The error message describes the limit exceeded.</p>
41
+ * <p>The request was rejected because it attempted to create resources beyond the current
42
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
43
43
  *
44
44
  * @throws {@link NoSuchEntityException} (client fault)
45
45
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -46,8 +46,8 @@ export interface EnableMFADeviceCommandOutput extends __MetadataBearer {
46
46
  * message describes the specific error.</p>
47
47
  *
48
48
  * @throws {@link LimitExceededException} (client fault)
49
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
50
- * account limits. The error message describes the limit exceeded.</p>
49
+ * <p>The request was rejected because it attempted to create resources beyond the current
50
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
51
51
  *
52
52
  * @throws {@link NoSuchEntityException} (client fault)
53
53
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -32,8 +32,8 @@ export interface GenerateCredentialReportCommandOutput extends GenerateCredentia
32
32
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
33
33
  *
34
34
  * @throws {@link LimitExceededException} (client fault)
35
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
36
- * account limits. The error message describes the limit exceeded.</p>
35
+ * <p>The request was rejected because it attempted to create resources beyond the current
36
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
37
37
  *
38
38
  * @throws {@link ServiceFailureException} (server fault)
39
39
  * <p>The request processing has failed because of an unknown error, exception or
@@ -18,12 +18,11 @@ export interface GenerateOrganizationsAccessReportCommandOutput extends Generate
18
18
  * report for any entities (organization root, organizational unit, or account) or policies
19
19
  * in your organization.</p>
20
20
  * <p>To call this operation, you must be signed in using your Organizations management account
21
- * credentials. You can use your long-term IAM user or root user credentials, or
22
- * temporary credentials from assuming an IAM role. SCPs must be enabled for your
23
- * organization root. You must have the required IAM and Organizations permissions. For more
24
- * information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Refining permissions using
25
- * service last accessed data</a> in the
26
- * <i>IAM User Guide</i>.</p>
21
+ * credentials. You can use your long-term IAM user or root user credentials, or temporary
22
+ * credentials from assuming an IAM role. SCPs must be enabled for your organization
23
+ * root. You must have the required IAM and Organizations permissions. For more information, see
24
+ * <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Refining permissions using service last accessed data</a> in the
25
+ * <i>IAM User Guide</i>.</p>
27
26
  * <p>You can generate a service last accessed data report for entities by specifying only
28
27
  * the entity's path. This data includes a list of services that are allowed by any service
29
28
  * control policies (SCPs) that apply to the entity.</p>
@@ -27,11 +27,11 @@ export interface GetOrganizationsAccessReportCommandOutput extends GetOrganizati
27
27
  * to perform this operation. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html">Refining permissions using
28
28
  * service last accessed data</a> in the
29
29
  * <i>IAM User Guide</i>.</p>
30
- * <p>For each service that principals in an account (root users, IAM users, or IAM
31
- * roles) could access using SCPs, the operation returns details about the most recent
32
- * access attempt. If there was no attempt, the service is listed without details about the
33
- * most recent attempt to access the service. If the operation fails, it returns the reason
34
- * that it failed.</p>
30
+ * <p>For each service that principals in an account (root user, IAM users, or IAM roles)
31
+ * could access using SCPs, the operation returns details about the most recent access
32
+ * attempt. If there was no attempt, the service is listed without details about the most
33
+ * recent attempt to access the service. If the operation fails, it returns the reason that
34
+ * it failed.</p>
35
35
  * <p>By default, the list is sorted by service namespace.</p>
36
36
  * @example
37
37
  * Use a bare-bones client and the command you need to make an API call.
@@ -22,9 +22,8 @@ export interface ListAccessKeysCommandOutput extends ListAccessKeysResponse, __M
22
22
  * based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
23
23
  * used, then <code>UserName</code> is required. If a long-term key is assigned to the
24
24
  * user, then <code>UserName</code> is not required. This operation works for access keys
25
- * under the Amazon Web Services account. Consequently, you can use this operation to manage
26
- * Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
27
- * users.</p>
25
+ * under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user
26
+ * credentials even if the Amazon Web Services account has no associated users.</p>
28
27
  * <note>
29
28
  * <p>To ensure the security of your Amazon Web Services account, the secret access key is accessible
30
29
  * only during key and user creation.</p>
@@ -22,8 +22,8 @@ export interface ListSigningCertificatesCommandOutput extends ListSigningCertifi
22
22
  * <p>If the <code>UserName</code> field is not specified, the user name is determined
23
23
  * implicitly based on the Amazon Web Services access key ID used to sign the request for this operation.
24
24
  * This operation works for access keys under the Amazon Web Services account. Consequently, you can use
25
- * this operation to manage Amazon Web Services account root user credentials even if the Amazon Web Services account
26
- * has no associated users.</p>
25
+ * this operation to manage Amazon Web Services account root user credentials even if the Amazon Web Services account has no
26
+ * associated users.</p>
27
27
  * @example
28
28
  * Use a bare-bones client and the command you need to make an API call.
29
29
  * ```javascript
@@ -44,8 +44,8 @@ export interface PutGroupPolicyCommandOutput extends __MetadataBearer {
44
44
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
45
45
  *
46
46
  * @throws {@link LimitExceededException} (client fault)
47
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
48
- * account limits. The error message describes the limit exceeded.</p>
47
+ * <p>The request was rejected because it attempted to create resources beyond the current
48
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
49
49
  *
50
50
  * @throws {@link MalformedPolicyDocumentException} (client fault)
51
51
  * <p>The request was rejected because the policy document was malformed. The error message
@@ -49,8 +49,8 @@ export interface PutRolePolicyCommandOutput extends __MetadataBearer {
49
49
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
50
50
  *
51
51
  * @throws {@link LimitExceededException} (client fault)
52
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
53
- * account limits. The error message describes the limit exceeded.</p>
52
+ * <p>The request was rejected because it attempted to create resources beyond the current
53
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
54
54
  *
55
55
  * @throws {@link MalformedPolicyDocumentException} (client fault)
56
56
  * <p>The request was rejected because the policy document was malformed. The error message
@@ -14,11 +14,11 @@ export interface PutUserPermissionsBoundaryCommandInput extends PutUserPermissio
14
14
  export interface PutUserPermissionsBoundaryCommandOutput extends __MetadataBearer {
15
15
  }
16
16
  /**
17
- * <p>Adds or updates the policy that is specified as the IAM user's permissions boundary.
18
- * You can use an Amazon Web Services managed policy or a customer managed policy to set the boundary for
19
- * a user. Use the boundary to control the maximum permissions that the user can have.
20
- * Setting a permissions boundary is an advanced feature that can affect the permissions
21
- * for the user.</p>
17
+ * <p>Adds or updates the policy that is specified as the IAM user's permissions
18
+ * boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the
19
+ * boundary for a user. Use the boundary to control the maximum permissions that the user
20
+ * can have. Setting a permissions boundary is an advanced feature that can affect the
21
+ * permissions for the user.</p>
22
22
  * <important>
23
23
  * <p>Policies that are used as permissions boundaries do not provide permissions. You
24
24
  * must also attach a permissions policy to the user. To learn how the effective
@@ -44,8 +44,8 @@ export interface PutUserPolicyCommandOutput extends __MetadataBearer {
44
44
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
45
45
  *
46
46
  * @throws {@link LimitExceededException} (client fault)
47
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
48
- * account limits. The error message describes the limit exceeded.</p>
47
+ * <p>The request was rejected because it attempted to create resources beyond the current
48
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
49
49
  *
50
50
  * @throws {@link MalformedPolicyDocumentException} (client fault)
51
51
  * <p>The request was rejected because the policy document was malformed. The error message
@@ -39,8 +39,8 @@ export interface RemoveRoleFromInstanceProfileCommandOutput extends __MetadataBe
39
39
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
40
40
  *
41
41
  * @throws {@link LimitExceededException} (client fault)
42
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
43
- * account limits. The error message describes the limit exceeded.</p>
42
+ * <p>The request was rejected because it attempted to create resources beyond the current
43
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
44
44
  *
45
45
  * @throws {@link NoSuchEntityException} (client fault)
46
46
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -30,8 +30,8 @@ export interface RemoveUserFromGroupCommandOutput extends __MetadataBearer {
30
30
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
31
31
  *
32
32
  * @throws {@link LimitExceededException} (client fault)
33
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
34
- * account limits. The error message describes the limit exceeded.</p>
33
+ * <p>The request was rejected because it attempted to create resources beyond the current
34
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
35
35
  *
36
36
  * @throws {@link NoSuchEntityException} (client fault)
37
37
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -37,8 +37,8 @@ export interface ResyncMFADeviceCommandOutput extends __MetadataBearer {
37
37
  * message describes the specific error.</p>
38
38
  *
39
39
  * @throws {@link LimitExceededException} (client fault)
40
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
41
- * account limits. The error message describes the limit exceeded.</p>
40
+ * <p>The request was rejected because it attempted to create resources beyond the current
41
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
42
42
  *
43
43
  * @throws {@link NoSuchEntityException} (client fault)
44
44
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -39,8 +39,8 @@ export interface SetDefaultPolicyVersionCommandOutput extends __MetadataBearer {
39
39
  * input parameter.</p>
40
40
  *
41
41
  * @throws {@link LimitExceededException} (client fault)
42
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
43
- * account limits. The error message describes the limit exceeded.</p>
42
+ * <p>The request was rejected because it attempted to create resources beyond the current
43
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
44
44
  *
45
45
  * @throws {@link NoSuchEntityException} (client fault)
46
46
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -73,8 +73,8 @@ export interface TagInstanceProfileCommandOutput extends __MetadataBearer {
73
73
  * input parameter.</p>
74
74
  *
75
75
  * @throws {@link LimitExceededException} (client fault)
76
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
77
- * account limits. The error message describes the limit exceeded.</p>
76
+ * <p>The request was rejected because it attempted to create resources beyond the current
77
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
78
78
  *
79
79
  * @throws {@link NoSuchEntityException} (client fault)
80
80
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -74,8 +74,8 @@ export interface TagMFADeviceCommandOutput extends __MetadataBearer {
74
74
  * input parameter.</p>
75
75
  *
76
76
  * @throws {@link LimitExceededException} (client fault)
77
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
78
- * account limits. The error message describes the limit exceeded.</p>
77
+ * <p>The request was rejected because it attempted to create resources beyond the current
78
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
79
79
  *
80
80
  * @throws {@link NoSuchEntityException} (client fault)
81
81
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -31,7 +31,7 @@ export interface TagOpenIDConnectProviderCommandOutput extends __MetadataBearer
31
31
  * </li>
32
32
  * <li>
33
33
  * <p>
34
- * <b>Access control</b> - Include tags in IAM user-based
34
+ * <b>Access control</b> - Include tags in IAM identity-based
35
35
  * and resource-based policies. You can use tags to restrict access to only an OIDC provider
36
36
  * that has a specified tag attached. For examples of policies that show how to use tags to
37
37
  * control access, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Control access using IAM tags</a> in the
@@ -75,8 +75,8 @@ export interface TagOpenIDConnectProviderCommandOutput extends __MetadataBearer
75
75
  * input parameter.</p>
76
76
  *
77
77
  * @throws {@link LimitExceededException} (client fault)
78
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
79
- * account limits. The error message describes the limit exceeded.</p>
78
+ * <p>The request was rejected because it attempted to create resources beyond the current
79
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
80
80
  *
81
81
  * @throws {@link NoSuchEntityException} (client fault)
82
82
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -73,8 +73,8 @@ export interface TagPolicyCommandOutput extends __MetadataBearer {
73
73
  * input parameter.</p>
74
74
  *
75
75
  * @throws {@link LimitExceededException} (client fault)
76
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
77
- * account limits. The error message describes the limit exceeded.</p>
76
+ * <p>The request was rejected because it attempted to create resources beyond the current
77
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
78
78
  *
79
79
  * @throws {@link NoSuchEntityException} (client fault)
80
80
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -82,8 +82,8 @@ export interface TagRoleCommandOutput extends __MetadataBearer {
82
82
  * input parameter.</p>
83
83
  *
84
84
  * @throws {@link LimitExceededException} (client fault)
85
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
86
- * account limits. The error message describes the limit exceeded.</p>
85
+ * <p>The request was rejected because it attempted to create resources beyond the current
86
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
87
87
  *
88
88
  * @throws {@link NoSuchEntityException} (client fault)
89
89
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -75,8 +75,8 @@ export interface TagSAMLProviderCommandOutput extends __MetadataBearer {
75
75
  * input parameter.</p>
76
76
  *
77
77
  * @throws {@link LimitExceededException} (client fault)
78
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
79
- * account limits. The error message describes the limit exceeded.</p>
78
+ * <p>The request was rejected because it attempted to create resources beyond the current
79
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
80
80
  *
81
81
  * @throws {@link NoSuchEntityException} (client fault)
82
82
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -85,8 +85,8 @@ export interface TagServerCertificateCommandOutput extends __MetadataBearer {
85
85
  * input parameter.</p>
86
86
  *
87
87
  * @throws {@link LimitExceededException} (client fault)
88
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
89
- * account limits. The error message describes the limit exceeded.</p>
88
+ * <p>The request was rejected because it attempted to create resources beyond the current
89
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
90
90
  *
91
91
  * @throws {@link NoSuchEntityException} (client fault)
92
92
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -29,7 +29,7 @@ export interface TagUserCommandOutput extends __MetadataBearer {
29
29
  * </li>
30
30
  * <li>
31
31
  * <p>
32
- * <b>Access control</b> - Include tags in IAM user-based
32
+ * <b>Access control</b> - Include tags in IAM identity-based
33
33
  * and resource-based policies. You can use tags to restrict access to only an IAM
34
34
  * requesting user that has a specified tag attached. You can also restrict access to only
35
35
  * those resources that have a certain tag attached. For examples of policies that show how
@@ -81,8 +81,8 @@ export interface TagUserCommandOutput extends __MetadataBearer {
81
81
  * input parameter.</p>
82
82
  *
83
83
  * @throws {@link LimitExceededException} (client fault)
84
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
85
- * account limits. The error message describes the limit exceeded.</p>
84
+ * <p>The request was rejected because it attempted to create resources beyond the current
85
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
86
86
  *
87
87
  * @throws {@link NoSuchEntityException} (client fault)
88
88
  * <p>The request was rejected because it referenced a resource entity that does not exist. The
@@ -21,9 +21,8 @@ export interface UpdateAccessKeyCommandOutput extends __MetadataBearer {
21
21
  * based on the Amazon Web Services access key ID used to sign the request. If a temporary access key is
22
22
  * used, then <code>UserName</code> is required. If a long-term key is assigned to the
23
23
  * user, then <code>UserName</code> is not required. This operation works for access keys
24
- * under the Amazon Web Services account. Consequently, you can use this operation to manage
25
- * Amazon Web Services account root user credentials even if the Amazon Web Services account has no associated
26
- * users.</p>
24
+ * under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user
25
+ * credentials even if the Amazon Web Services account has no associated users.</p>
27
26
  * <p>For information about rotating keys, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/ManagingCredentials.html">Managing keys and certificates</a>
28
27
  * in the <i>IAM User Guide</i>.</p>
29
28
  * @example
@@ -41,8 +40,8 @@ export interface UpdateAccessKeyCommandOutput extends __MetadataBearer {
41
40
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
42
41
  *
43
42
  * @throws {@link LimitExceededException} (client fault)
44
- * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
45
- * account limits. The error message describes the limit exceeded.</p>
43
+ * <p>The request was rejected because it attempted to create resources beyond the current
44
+ * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
46
45
  *
47
46
  * @throws {@link NoSuchEntityException} (client fault)
48
47
  * <p>The request was rejected because it referenced a resource entity that does not exist. The