@aws-sdk/client-iam 3.295.0 → 3.297.0

package/dist-types/IAM.d.ts

@@ -159,6 +159,7 @@ import { UploadSigningCertificateCommandInput, UploadSigningCertificateCommandOu
 import { UploadSSHPublicKeyCommandInput, UploadSSHPublicKeyCommandOutput } from "./commands/UploadSSHPublicKeyCommand";
 import { IAMClient } from "./IAMClient";
 /**
+ * @public
  * <fullname>Identity and Access Management</fullname>
  *          <p>Identity and Access Management (IAM) is a web service for securely controlling
  *       access to Amazon Web Services services. With IAM, you can centrally manage users, security credentials
@@ -167,6 +168,7 @@ import { IAMClient } from "./IAMClient";
  */
 export declare class IAM extends IAMClient {
     /**
+     * @public
      * <p>Adds a new client ID (also known as audience) to the list of client IDs already
      *             registered for the specified IAM OpenID Connect (OIDC) provider resource.</p>
      *          <p>This operation is idempotent; it does not fail or return an error if you add an
@@ -176,6 +178,7 @@ export declare class IAM extends IAMClient {
     addClientIDToOpenIDConnectProvider(args: AddClientIDToOpenIDConnectProviderCommandInput, cb: (err: any, data?: AddClientIDToOpenIDConnectProviderCommandOutput) => void): void;
     addClientIDToOpenIDConnectProvider(args: AddClientIDToOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AddClientIDToOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds the specified IAM role to the specified instance profile. An instance profile
      *             can contain only one role, and this quota cannot be increased. You can remove the
      *             existing role and then add a different role to an instance profile. You must then wait
@@ -194,12 +197,14 @@ export declare class IAM extends IAMClient {
     addRoleToInstanceProfile(args: AddRoleToInstanceProfileCommandInput, cb: (err: any, data?: AddRoleToInstanceProfileCommandOutput) => void): void;
     addRoleToInstanceProfile(args: AddRoleToInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AddRoleToInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds the specified user to the specified group.</p>
      */
     addUserToGroup(args: AddUserToGroupCommandInput, options?: __HttpHandlerOptions): Promise<AddUserToGroupCommandOutput>;
     addUserToGroup(args: AddUserToGroupCommandInput, cb: (err: any, data?: AddUserToGroupCommandOutput) => void): void;
     addUserToGroup(args: AddUserToGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AddUserToGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p>Attaches the specified managed policy to the specified IAM group.</p>
      *          <p>You use this operation to attach a managed policy to a group. To embed an inline
      *             policy in a group, use <a>PutGroupPolicy</a>.</p>
@@ -213,6 +218,7 @@ export declare class IAM extends IAMClient {
     attachGroupPolicy(args: AttachGroupPolicyCommandInput, cb: (err: any, data?: AttachGroupPolicyCommandOutput) => void): void;
     attachGroupPolicy(args: AttachGroupPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachGroupPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Attaches the specified managed policy to the specified IAM role. When you attach a
      *             managed policy to a role, the managed policy becomes part of the role's permission
      *             (access) policy.</p>
@@ -233,6 +239,7 @@ export declare class IAM extends IAMClient {
     attachRolePolicy(args: AttachRolePolicyCommandInput, cb: (err: any, data?: AttachRolePolicyCommandOutput) => void): void;
     attachRolePolicy(args: AttachRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Attaches the specified managed policy to the specified user.</p>
      *          <p>You use this operation to attach a <i>managed</i> policy to a user. To
      *             embed an inline policy in a user, use <a>PutUserPolicy</a>.</p>
@@ -246,6 +253,7 @@ export declare class IAM extends IAMClient {
     attachUserPolicy(args: AttachUserPolicyCommandInput, cb: (err: any, data?: AttachUserPolicyCommandOutput) => void): void;
     attachUserPolicy(args: AttachUserPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachUserPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Changes the password of the IAM user who is calling this operation. This operation
      *             can be performed using the CLI, the Amazon Web Services API, or the <b>My
      *                 Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is
@@ -259,6 +267,7 @@ export declare class IAM extends IAMClient {
     changePassword(args: ChangePasswordCommandInput, cb: (err: any, data?: ChangePasswordCommandOutput) => void): void;
     changePassword(args: ChangePasswordCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ChangePasswordCommandOutput) => void): void;
     /**
+     * @public
      * <p> Creates a new Amazon Web Services secret access key and corresponding Amazon Web Services access key ID for the
      *             specified user. The default status for new keys is <code>Active</code>.</p>
      *          <p>If you do not specify a user name, IAM determines the user name implicitly based on
@@ -278,6 +287,7 @@ export declare class IAM extends IAMClient {
     createAccessKey(args: CreateAccessKeyCommandInput, cb: (err: any, data?: CreateAccessKeyCommandOutput) => void): void;
     createAccessKey(args: CreateAccessKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateAccessKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates an alias for your Amazon Web Services account. For information about using an Amazon Web Services account
      *             alias, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAlias.html">Using an
      *                 alias for your Amazon Web Services account ID</a> in the
@@ -287,6 +297,7 @@ export declare class IAM extends IAMClient {
     createAccountAlias(args: CreateAccountAliasCommandInput, cb: (err: any, data?: CreateAccountAliasCommandOutput) => void): void;
     createAccountAlias(args: CreateAccountAliasCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateAccountAliasCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new group.</p>
      *          <p> For information about the number of groups you can create, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS
      *                 quotas</a> in the <i>IAM User Guide</i>.</p>
@@ -295,6 +306,7 @@ export declare class IAM extends IAMClient {
     createGroup(args: CreateGroupCommandInput, cb: (err: any, data?: CreateGroupCommandOutput) => void): void;
     createGroup(args: CreateGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p> Creates a new instance profile. For information about instance profiles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html">Using
      *                 roles for applications on Amazon EC2</a> in the
      *                 <i>IAM User Guide</i>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#ec2-instance-profile">Instance profiles</a> in the <i>Amazon EC2 User Guide</i>.</p>
@@ -305,6 +317,7 @@ export declare class IAM extends IAMClient {
     createInstanceProfile(args: CreateInstanceProfileCommandInput, cb: (err: any, data?: CreateInstanceProfileCommandOutput) => void): void;
     createInstanceProfile(args: CreateInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a password for the specified IAM user. A password allows an IAM user to
      *             access Amazon Web Services services through the Amazon Web Services Management Console.</p>
      *          <p>You can use the CLI, the Amazon Web Services API, or the <b>Users</b>
@@ -316,6 +329,7 @@ export declare class IAM extends IAMClient {
     createLoginProfile(args: CreateLoginProfileCommandInput, cb: (err: any, data?: CreateLoginProfileCommandOutput) => void): void;
     createLoginProfile(args: CreateLoginProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateLoginProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates an IAM entity to describe an identity provider (IdP) that supports <a href="http://openid.net/connect/">OpenID Connect (OIDC)</a>.</p>
      *          <p>The OIDC provider that you create with this operation can be used as a principal in a
      *             role's trust policy. Such a policy establishes a trust relationship between Amazon Web Services and
@@ -363,6 +377,7 @@ export declare class IAM extends IAMClient {
     createOpenIDConnectProvider(args: CreateOpenIDConnectProviderCommandInput, cb: (err: any, data?: CreateOpenIDConnectProviderCommandOutput) => void): void;
     createOpenIDConnectProvider(args: CreateOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new managed policy for your Amazon Web Services account.</p>
      *          <p>This operation creates a policy version with a version identifier of <code>v1</code>
      *             and sets v1 as the policy's default version. For more information about policy versions,
@@ -379,6 +394,7 @@ export declare class IAM extends IAMClient {
     createPolicy(args: CreatePolicyCommandInput, cb: (err: any, data?: CreatePolicyCommandOutput) => void): void;
     createPolicy(args: CreatePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreatePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new version of the specified managed policy. To update a managed policy, you
      *             create a new policy version. A managed policy can have up to five versions. If the
      *             policy has five versions, you must delete an existing version using <a>DeletePolicyVersion</a> before you create a new version.</p>
@@ -392,6 +408,7 @@ export declare class IAM extends IAMClient {
     createPolicyVersion(args: CreatePolicyVersionCommandInput, cb: (err: any, data?: CreatePolicyVersionCommandOutput) => void): void;
     createPolicyVersion(args: CreatePolicyVersionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreatePolicyVersionCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new role for your Amazon Web Services account. For more information about roles, see
      *                 <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">IAM
      *                 roles</a>. For information about quotas for role names and the number of roles
@@ -402,6 +419,7 @@ export declare class IAM extends IAMClient {
     createRole(args: CreateRoleCommandInput, cb: (err: any, data?: CreateRoleCommandOutput) => void): void;
     createRole(args: CreateRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates an IAM resource that describes an identity provider (IdP) that supports SAML
      *             2.0.</p>
      *          <p>The SAML provider resource that you create with this operation can be used as a
@@ -425,6 +443,7 @@ export declare class IAM extends IAMClient {
     createSAMLProvider(args: CreateSAMLProviderCommandInput, cb: (err: any, data?: CreateSAMLProviderCommandOutput) => void): void;
     createSAMLProvider(args: CreateSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates an IAM role that is linked to a specific Amazon Web Services service. The service controls
      *             the attached policies and when the role can be deleted. This helps ensure that the
      *             service is not broken by an unexpectedly changed or deleted role, which could put your
@@ -439,6 +458,7 @@ export declare class IAM extends IAMClient {
     createServiceLinkedRole(args: CreateServiceLinkedRoleCommandInput, cb: (err: any, data?: CreateServiceLinkedRoleCommandOutput) => void): void;
     createServiceLinkedRole(args: CreateServiceLinkedRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateServiceLinkedRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Generates a set of credentials consisting of a user name and password that can be used
      *             to access the service specified in the request. These credentials are generated by
      *             IAM, and can be used only for the specified service. </p>
@@ -455,6 +475,7 @@ export declare class IAM extends IAMClient {
     createServiceSpecificCredential(args: CreateServiceSpecificCredentialCommandInput, cb: (err: any, data?: CreateServiceSpecificCredentialCommandOutput) => void): void;
     createServiceSpecificCredential(args: CreateServiceSpecificCredentialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateServiceSpecificCredentialCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new IAM user for your Amazon Web Services account.</p>
      *          <p> For information about quotas for the number of IAM users you can create, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS
      *                 quotas</a> in the <i>IAM User Guide</i>.</p>
@@ -463,6 +484,7 @@ export declare class IAM extends IAMClient {
     createUser(args: CreateUserCommandInput, cb: (err: any, data?: CreateUserCommandOutput) => void): void;
     createUser(args: CreateUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Creates a new virtual MFA device for the Amazon Web Services account. After creating the virtual
      *             MFA, use <a>EnableMFADevice</a> to attach the MFA device to an IAM user.
      *             For more information about creating and working with virtual MFA devices, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html">Using a virtual MFA
@@ -481,6 +503,7 @@ export declare class IAM extends IAMClient {
     createVirtualMFADevice(args: CreateVirtualMFADeviceCommandInput, cb: (err: any, data?: CreateVirtualMFADeviceCommandOutput) => void): void;
     createVirtualMFADevice(args: CreateVirtualMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateVirtualMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deactivates the specified MFA device and removes it from association with the user
      *             name for which it was originally enabled.</p>
      *          <p>For more information about creating and working with virtual MFA devices, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html">Enabling a virtual
@@ -491,6 +514,7 @@ export declare class IAM extends IAMClient {
     deactivateMFADevice(args: DeactivateMFADeviceCommandInput, cb: (err: any, data?: DeactivateMFADeviceCommandOutput) => void): void;
     deactivateMFADevice(args: DeactivateMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeactivateMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the access key pair associated with the specified IAM user.</p>
      *          <p>If you do not specify a user name, IAM determines the user name implicitly based on
      *             the Amazon Web Services access key ID signing the request. This operation works for access keys under
@@ -501,6 +525,7 @@ export declare class IAM extends IAMClient {
     deleteAccessKey(args: DeleteAccessKeyCommandInput, cb: (err: any, data?: DeleteAccessKeyCommandOutput) => void): void;
     deleteAccessKey(args: DeleteAccessKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteAccessKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p> Deletes the specified Amazon Web Services account alias. For information about using an Amazon Web Services
      *             account alias, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAlias.html">Using an alias for your Amazon Web Services account ID</a> in the
      *                 <i>IAM User Guide</i>.</p>
@@ -509,12 +534,14 @@ export declare class IAM extends IAMClient {
     deleteAccountAlias(args: DeleteAccountAliasCommandInput, cb: (err: any, data?: DeleteAccountAliasCommandOutput) => void): void;
     deleteAccountAlias(args: DeleteAccountAliasCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteAccountAliasCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the password policy for the Amazon Web Services account. There are no parameters.</p>
      */
     deleteAccountPasswordPolicy(args: DeleteAccountPasswordPolicyCommandInput, options?: __HttpHandlerOptions): Promise<DeleteAccountPasswordPolicyCommandOutput>;
     deleteAccountPasswordPolicy(args: DeleteAccountPasswordPolicyCommandInput, cb: (err: any, data?: DeleteAccountPasswordPolicyCommandOutput) => void): void;
     deleteAccountPasswordPolicy(args: DeleteAccountPasswordPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteAccountPasswordPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified IAM group. The group must not contain any users or have any
      *             attached policies.</p>
      */
@@ -522,6 +549,7 @@ export declare class IAM extends IAMClient {
     deleteGroup(args: DeleteGroupCommandInput, cb: (err: any, data?: DeleteGroupCommandOutput) => void): void;
     deleteGroup(args: DeleteGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified inline policy that is embedded in the specified IAM
      *             group.</p>
      *          <p>A group can also have managed policies attached to it. To detach a managed policy from
@@ -533,6 +561,7 @@ export declare class IAM extends IAMClient {
     deleteGroupPolicy(args: DeleteGroupPolicyCommandInput, cb: (err: any, data?: DeleteGroupPolicyCommandOutput) => void): void;
     deleteGroupPolicy(args: DeleteGroupPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteGroupPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified instance profile. The instance profile must not have an
      *             associated role.</p>
      *          <important>
@@ -548,6 +577,7 @@ export declare class IAM extends IAMClient {
     deleteInstanceProfile(args: DeleteInstanceProfileCommandInput, cb: (err: any, data?: DeleteInstanceProfileCommandOutput) => void): void;
     deleteInstanceProfile(args: DeleteInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the password for the specified IAM user, For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_admin-change-user.html">Managing
      *                 passwords for IAM users</a>.</p>
      *          <p>You can use the CLI, the Amazon Web Services API, or the <b>Users</b>
@@ -566,6 +596,7 @@ export declare class IAM extends IAMClient {
     deleteLoginProfile(args: DeleteLoginProfileCommandInput, cb: (err: any, data?: DeleteLoginProfileCommandOutput) => void): void;
     deleteLoginProfile(args: DeleteLoginProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteLoginProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes an OpenID Connect identity provider (IdP) resource object in IAM.</p>
      *          <p>Deleting an IAM OIDC provider resource does not update any roles that reference the
      *             provider as a principal in their trust policies. Any attempt to assume a role that
@@ -577,6 +608,7 @@ export declare class IAM extends IAMClient {
     deleteOpenIDConnectProvider(args: DeleteOpenIDConnectProviderCommandInput, cb: (err: any, data?: DeleteOpenIDConnectProviderCommandOutput) => void): void;
     deleteOpenIDConnectProvider(args: DeleteOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified managed policy.</p>
      *          <p>Before you can delete a managed policy, you must first detach the policy from all
      *             users, groups, and roles that it is attached to. In addition, you must delete all the
@@ -607,6 +639,7 @@ export declare class IAM extends IAMClient {
     deletePolicy(args: DeletePolicyCommandInput, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
     deletePolicy(args: DeletePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified version from the specified managed policy.</p>
      *          <p>You cannot delete the default version from a policy using this operation. To delete
      *             the default version from a policy, use <a>DeletePolicy</a>. To find out which
@@ -618,6 +651,7 @@ export declare class IAM extends IAMClient {
     deletePolicyVersion(args: DeletePolicyVersionCommandInput, cb: (err: any, data?: DeletePolicyVersionCommandOutput) => void): void;
     deletePolicyVersion(args: DeletePolicyVersionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePolicyVersionCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified role. Unlike the Amazon Web Services Management Console, when you delete a role
      *             programmatically, you must delete the items attached to the role manually, or the
      *             deletion fails. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html#roles-managingrole-deleting-cli">Deleting an IAM role</a>. Before attempting to delete a role, remove the
@@ -647,17 +681,20 @@ export declare class IAM extends IAMClient {
     deleteRole(args: DeleteRoleCommandInput, cb: (err: any, data?: DeleteRoleCommandOutput) => void): void;
     deleteRole(args: DeleteRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the permissions boundary for the specified IAM role. </p>
+     *          <p>You cannot set the boundary for a service-linked role.</p>
      *          <important>
      *             <p>Deleting the permissions boundary for a role might increase its permissions. For
      *                 example, it might allow anyone who assumes the role to perform all the actions
-     *                 granted in its permissions policies. </p>
+     *                 granted in its permissions policies.</p>
      *          </important>
      */
     deleteRolePermissionsBoundary(args: DeleteRolePermissionsBoundaryCommandInput, options?: __HttpHandlerOptions): Promise<DeleteRolePermissionsBoundaryCommandOutput>;
     deleteRolePermissionsBoundary(args: DeleteRolePermissionsBoundaryCommandInput, cb: (err: any, data?: DeleteRolePermissionsBoundaryCommandOutput) => void): void;
     deleteRolePermissionsBoundary(args: DeleteRolePermissionsBoundaryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteRolePermissionsBoundaryCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified inline policy that is embedded in the specified IAM
      *             role.</p>
      *          <p>A role can also have managed policies attached to it. To detach a managed policy from
@@ -669,6 +706,7 @@ export declare class IAM extends IAMClient {
     deleteRolePolicy(args: DeleteRolePolicyCommandInput, cb: (err: any, data?: DeleteRolePolicyCommandOutput) => void): void;
     deleteRolePolicy(args: DeleteRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes a SAML provider resource in IAM.</p>
      *          <p>Deleting the provider resource from IAM does not update any roles that reference the
      *             SAML provider resource's ARN as a principal in their trust policies. Any attempt to
@@ -681,6 +719,7 @@ export declare class IAM extends IAMClient {
     deleteSAMLProvider(args: DeleteSAMLProviderCommandInput, cb: (err: any, data?: DeleteSAMLProviderCommandOutput) => void): void;
     deleteSAMLProvider(args: DeleteSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified server certificate.</p>
      *          <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
      *                 with server certificates</a> in the <i>IAM User Guide</i>. This
@@ -701,6 +740,7 @@ export declare class IAM extends IAMClient {
     deleteServerCertificate(args: DeleteServerCertificateCommandInput, cb: (err: any, data?: DeleteServerCertificateCommandOutput) => void): void;
     deleteServerCertificate(args: DeleteServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Submits a service-linked role deletion request and returns a
      *                 <code>DeletionTaskId</code>, which you can use to check the status of the deletion.
      *             Before you call this operation, confirm that the role has no active sessions and that
@@ -723,12 +763,14 @@ export declare class IAM extends IAMClient {
     deleteServiceLinkedRole(args: DeleteServiceLinkedRoleCommandInput, cb: (err: any, data?: DeleteServiceLinkedRoleCommandOutput) => void): void;
     deleteServiceLinkedRole(args: DeleteServiceLinkedRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteServiceLinkedRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified service-specific credential.</p>
      */
     deleteServiceSpecificCredential(args: DeleteServiceSpecificCredentialCommandInput, options?: __HttpHandlerOptions): Promise<DeleteServiceSpecificCredentialCommandOutput>;
     deleteServiceSpecificCredential(args: DeleteServiceSpecificCredentialCommandInput, cb: (err: any, data?: DeleteServiceSpecificCredentialCommandOutput) => void): void;
     deleteServiceSpecificCredential(args: DeleteServiceSpecificCredentialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteServiceSpecificCredentialCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes a signing certificate associated with the specified IAM user.</p>
      *          <p>If you do not specify a user name, IAM determines the user name implicitly based on
      *             the Amazon Web Services access key ID signing the request. This operation works for access keys under
@@ -739,6 +781,7 @@ export declare class IAM extends IAMClient {
     deleteSigningCertificate(args: DeleteSigningCertificateCommandInput, cb: (err: any, data?: DeleteSigningCertificateCommandOutput) => void): void;
     deleteSigningCertificate(args: DeleteSigningCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteSigningCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified SSH public key.</p>
      *          <p>The SSH public key deleted by this operation is used only for authenticating the
      *             associated IAM user to an CodeCommit repository. For more information about using SSH keys
@@ -749,6 +792,7 @@ export declare class IAM extends IAMClient {
     deleteSSHPublicKey(args: DeleteSSHPublicKeyCommandInput, cb: (err: any, data?: DeleteSSHPublicKeyCommandOutput) => void): void;
     deleteSSHPublicKey(args: DeleteSSHPublicKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteSSHPublicKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified IAM user. Unlike the Amazon Web Services Management Console, when you delete a user
      *             programmatically, you must delete the items attached to the user manually, or the
      *             deletion fails. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_users_manage.html#id_users_deleting_cli">Deleting an IAM
@@ -787,6 +831,7 @@ export declare class IAM extends IAMClient {
     deleteUser(args: DeleteUserCommandInput, cb: (err: any, data?: DeleteUserCommandOutput) => void): void;
     deleteUser(args: DeleteUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the permissions boundary for the specified IAM user.</p>
      *          <important>
      *             <p>Deleting the permissions boundary for a user might increase its permissions by
@@ -798,6 +843,7 @@ export declare class IAM extends IAMClient {
     deleteUserPermissionsBoundary(args: DeleteUserPermissionsBoundaryCommandInput, cb: (err: any, data?: DeleteUserPermissionsBoundaryCommandOutput) => void): void;
     deleteUserPermissionsBoundary(args: DeleteUserPermissionsBoundaryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteUserPermissionsBoundaryCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes the specified inline policy that is embedded in the specified IAM
      *             user.</p>
      *          <p>A user can also have managed policies attached to it. To detach a managed policy from
@@ -809,6 +855,7 @@ export declare class IAM extends IAMClient {
     deleteUserPolicy(args: DeleteUserPolicyCommandInput, cb: (err: any, data?: DeleteUserPolicyCommandOutput) => void): void;
     deleteUserPolicy(args: DeleteUserPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteUserPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Deletes a virtual MFA device.</p>
      *          <note>
      *             <p> You must deactivate a user's virtual MFA device before you can delete it. For
@@ -819,6 +866,7 @@ export declare class IAM extends IAMClient {
     deleteVirtualMFADevice(args: DeleteVirtualMFADeviceCommandInput, cb: (err: any, data?: DeleteVirtualMFADeviceCommandOutput) => void): void;
     deleteVirtualMFADevice(args: DeleteVirtualMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteVirtualMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified managed policy from the specified IAM group.</p>
      *          <p>A group can also have inline policies embedded with it. To delete an inline policy,
      *             use <a>DeleteGroupPolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
@@ -829,6 +877,7 @@ export declare class IAM extends IAMClient {
     detachGroupPolicy(args: DetachGroupPolicyCommandInput, cb: (err: any, data?: DetachGroupPolicyCommandOutput) => void): void;
     detachGroupPolicy(args: DetachGroupPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachGroupPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified managed policy from the specified role.</p>
      *          <p>A role can also have inline policies embedded with it. To delete an inline policy, use
      *                 <a>DeleteRolePolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
@@ -839,6 +888,7 @@ export declare class IAM extends IAMClient {
     detachRolePolicy(args: DetachRolePolicyCommandInput, cb: (err: any, data?: DetachRolePolicyCommandOutput) => void): void;
     detachRolePolicy(args: DetachRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified managed policy from the specified user.</p>
      *          <p>A user can also have inline policies embedded with it. To delete an inline policy, use
      *                 <a>DeleteUserPolicy</a>. For information about policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed
@@ -849,6 +899,7 @@ export declare class IAM extends IAMClient {
     detachUserPolicy(args: DetachUserPolicyCommandInput, cb: (err: any, data?: DetachUserPolicyCommandOutput) => void): void;
     detachUserPolicy(args: DetachUserPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachUserPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Enables the specified MFA device and associates it with the specified IAM user. When
      *             enabled, the MFA device is required for every subsequent login by the IAM user
      *             associated with the device.</p>
@@ -857,6 +908,7 @@ export declare class IAM extends IAMClient {
     enableMFADevice(args: EnableMFADeviceCommandInput, cb: (err: any, data?: EnableMFADeviceCommandOutput) => void): void;
     enableMFADevice(args: EnableMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p> Generates a credential report for the Amazon Web Services account. For more information about the
      *             credential report, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/credential-reports.html">Getting credential reports</a> in
      *             the <i>IAM User Guide</i>.</p>
@@ -865,6 +917,7 @@ export declare class IAM extends IAMClient {
     generateCredentialReport(args: GenerateCredentialReportCommandInput, cb: (err: any, data?: GenerateCredentialReportCommandOutput) => void): void;
     generateCredentialReport(args: GenerateCredentialReportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateCredentialReportCommandOutput) => void): void;
     /**
+     * @public
      * <p>Generates a report for service last accessed data for Organizations. You can generate a
      *             report for any entities (organization root, organizational unit, or account) or policies
      *             in your organization.</p>
@@ -1001,6 +1054,7 @@ export declare class IAM extends IAMClient {
     generateOrganizationsAccessReport(args: GenerateOrganizationsAccessReportCommandInput, cb: (err: any, data?: GenerateOrganizationsAccessReportCommandOutput) => void): void;
     generateOrganizationsAccessReport(args: GenerateOrganizationsAccessReportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateOrganizationsAccessReportCommandOutput) => void): void;
     /**
+     * @public
      * <p>Generates a report that includes details about when an IAM resource (user, group,
      *             role, or policy) was last used in an attempt to access Amazon Web Services services. Recent activity
      *             usually appears within four hours. IAM reports activity for at least the last 400
@@ -1060,6 +1114,7 @@ export declare class IAM extends IAMClient {
     generateServiceLastAccessedDetails(args: GenerateServiceLastAccessedDetailsCommandInput, cb: (err: any, data?: GenerateServiceLastAccessedDetailsCommandOutput) => void): void;
     generateServiceLastAccessedDetails(args: GenerateServiceLastAccessedDetailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GenerateServiceLastAccessedDetailsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about when the specified access key was last used. The
      *             information includes the date and time of last use, along with the Amazon Web Services service and
      *             Region that were specified in the last request made with that key.</p>
@@ -1068,6 +1123,7 @@ export declare class IAM extends IAMClient {
     getAccessKeyLastUsed(args: GetAccessKeyLastUsedCommandInput, cb: (err: any, data?: GetAccessKeyLastUsedCommandOutput) => void): void;
     getAccessKeyLastUsed(args: GetAccessKeyLastUsedCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetAccessKeyLastUsedCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about all IAM users, groups, roles, and policies in your Amazon Web Services
      *             account, including their relationships to one another. Use this operation to obtain a
      *             snapshot of the configuration of IAM permissions (users, groups, roles, and policies)
@@ -1087,6 +1143,7 @@ export declare class IAM extends IAMClient {
     getAccountAuthorizationDetails(args: GetAccountAuthorizationDetailsCommandInput, cb: (err: any, data?: GetAccountAuthorizationDetailsCommandOutput) => void): void;
     getAccountAuthorizationDetails(args: GetAccountAuthorizationDetailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetAccountAuthorizationDetailsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the password policy for the Amazon Web Services account. This tells you the complexity
      *             requirements and mandatory rotation periods for the IAM user passwords in your account.
      *             For more information about using a password policy, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingPasswordPolicies.html">Managing an IAM password
@@ -1096,6 +1153,7 @@ export declare class IAM extends IAMClient {
     getAccountPasswordPolicy(args: GetAccountPasswordPolicyCommandInput, cb: (err: any, data?: GetAccountPasswordPolicyCommandOutput) => void): void;
     getAccountPasswordPolicy(args: GetAccountPasswordPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetAccountPasswordPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about IAM entity usage and IAM quotas in the Amazon Web Services
      *             account.</p>
      *          <p> For information about IAM quotas, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS quotas</a> in the
@@ -1105,6 +1163,7 @@ export declare class IAM extends IAMClient {
     getAccountSummary(args: GetAccountSummaryCommandInput, cb: (err: any, data?: GetAccountSummaryCommandOutput) => void): void;
     getAccountSummary(args: GetAccountSummaryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetAccountSummaryCommandOutput) => void): void;
     /**
+     * @public
      * <p>Gets a list of all of the context keys referenced in the input policies. The policies
      *             are supplied as a list of one or more strings. To get the context keys from policies
      *             associated with an IAM user, group, or role, use <a>GetContextKeysForPrincipalPolicy</a>.</p>
@@ -1120,6 +1179,7 @@ export declare class IAM extends IAMClient {
     getContextKeysForCustomPolicy(args: GetContextKeysForCustomPolicyCommandInput, cb: (err: any, data?: GetContextKeysForCustomPolicyCommandOutput) => void): void;
     getContextKeysForCustomPolicy(args: GetContextKeysForCustomPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetContextKeysForCustomPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Gets a list of all of the context keys referenced in all the IAM policies that are
      *             attached to the specified IAM entity. The entity can be an IAM user, group, or role.
      *             If you specify a user, then the request also includes all of the policies attached to
@@ -1139,6 +1199,7 @@ export declare class IAM extends IAMClient {
     getContextKeysForPrincipalPolicy(args: GetContextKeysForPrincipalPolicyCommandInput, cb: (err: any, data?: GetContextKeysForPrincipalPolicyCommandOutput) => void): void;
     getContextKeysForPrincipalPolicy(args: GetContextKeysForPrincipalPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetContextKeysForPrincipalPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p> Retrieves a credential report for the Amazon Web Services account. For more information about the
      *             credential report, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/credential-reports.html">Getting credential reports</a> in
      *             the <i>IAM User Guide</i>.</p>
@@ -1147,6 +1208,7 @@ export declare class IAM extends IAMClient {
     getCredentialReport(args: GetCredentialReportCommandInput, cb: (err: any, data?: GetCredentialReportCommandOutput) => void): void;
     getCredentialReport(args: GetCredentialReportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetCredentialReportCommandOutput) => void): void;
     /**
+     * @public
      * <p> Returns a list of IAM users that are in the specified IAM group. You can paginate
      *             the results using the <code>MaxItems</code> and <code>Marker</code> parameters.</p>
      */
@@ -1154,6 +1216,7 @@ export declare class IAM extends IAMClient {
     getGroup(args: GetGroupCommandInput, cb: (err: any, data?: GetGroupCommandOutput) => void): void;
     getGroup(args: GetGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the specified inline policy document that is embedded in the specified IAM
      *             group.</p>
      *          <note>
@@ -1174,6 +1237,7 @@ export declare class IAM extends IAMClient {
     getGroupPolicy(args: GetGroupPolicyCommandInput, cb: (err: any, data?: GetGroupPolicyCommandOutput) => void): void;
     getGroupPolicy(args: GetGroupPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetGroupPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p> Retrieves information about the specified instance profile, including the instance
      *             profile's path, GUID, ARN, and role. For more information about instance profiles, see
      *                 <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About
@@ -1183,6 +1247,7 @@ export declare class IAM extends IAMClient {
     getInstanceProfile(args: GetInstanceProfileCommandInput, cb: (err: any, data?: GetInstanceProfileCommandOutput) => void): void;
     getInstanceProfile(args: GetInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the user name for the specified IAM user. A login profile is created when
      *             you create a password for the user to access the Amazon Web Services Management Console. If the user does not exist
      *             or does not have a password, the operation returns a 404 (<code>NoSuchEntity</code>)
@@ -1198,6 +1263,7 @@ export declare class IAM extends IAMClient {
     getLoginProfile(args: GetLoginProfileCommandInput, cb: (err: any, data?: GetLoginProfileCommandOutput) => void): void;
     getLoginProfile(args: GetLoginProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetLoginProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns information about the specified OpenID Connect (OIDC) provider resource object
      *             in IAM.</p>
      */
@@ -1205,6 +1271,7 @@ export declare class IAM extends IAMClient {
     getOpenIDConnectProvider(args: GetOpenIDConnectProviderCommandInput, cb: (err: any, data?: GetOpenIDConnectProviderCommandOutput) => void): void;
     getOpenIDConnectProvider(args: GetOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the service last accessed data report for Organizations that was previously
      *             generated using the <code>
      *                <a>GenerateOrganizationsAccessReport</a>
@@ -1229,6 +1296,7 @@ export declare class IAM extends IAMClient {
     getOrganizationsAccessReport(args: GetOrganizationsAccessReportCommandInput, cb: (err: any, data?: GetOrganizationsAccessReportCommandOutput) => void): void;
     getOrganizationsAccessReport(args: GetOrganizationsAccessReportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetOrganizationsAccessReportCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about the specified managed policy, including the policy's
      *             default version and the total number of IAM users, groups, and roles to which the
      *             policy is attached. To retrieve the list of the specific users, groups, and roles that
@@ -1244,6 +1312,7 @@ export declare class IAM extends IAMClient {
     getPolicy(args: GetPolicyCommandInput, cb: (err: any, data?: GetPolicyCommandOutput) => void): void;
     getPolicy(args: GetPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about the specified version of the specified managed policy,
      *             including the policy document.</p>
      *          <note>
@@ -1265,6 +1334,7 @@ export declare class IAM extends IAMClient {
     getPolicyVersion(args: GetPolicyVersionCommandInput, cb: (err: any, data?: GetPolicyVersionCommandOutput) => void): void;
     getPolicyVersion(args: GetPolicyVersionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPolicyVersionCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about the specified role, including the role's path, GUID, ARN,
      *             and the role's trust policy that grants permission to assume the role. For more
      *             information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">Working with roles</a>.</p>
@@ -1280,6 +1350,7 @@ export declare class IAM extends IAMClient {
     getRole(args: GetRoleCommandInput, cb: (err: any, data?: GetRoleCommandOutput) => void): void;
     getRole(args: GetRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the specified inline policy document that is embedded with the specified
      *             IAM role.</p>
      *          <note>
@@ -1302,6 +1373,7 @@ export declare class IAM extends IAMClient {
     getRolePolicy(args: GetRolePolicyCommandInput, cb: (err: any, data?: GetRolePolicyCommandOutput) => void): void;
     getRolePolicy(args: GetRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns the SAML provider metadocument that was uploaded when the IAM SAML provider
      *             resource object was created or updated.</p>
      *          <note>
@@ -1312,6 +1384,7 @@ export declare class IAM extends IAMClient {
     getSAMLProvider(args: GetSAMLProviderCommandInput, cb: (err: any, data?: GetSAMLProviderCommandOutput) => void): void;
     getSAMLProvider(args: GetSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about the specified server certificate stored in IAM.</p>
      *          <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
      *                 with server certificates</a> in the <i>IAM User Guide</i>. This
@@ -1322,6 +1395,7 @@ export declare class IAM extends IAMClient {
     getServerCertificate(args: GetServerCertificateCommandInput, cb: (err: any, data?: GetServerCertificateCommandOutput) => void): void;
     getServerCertificate(args: GetServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves a service last accessed report that was created using the
      *                 <code>GenerateServiceLastAccessedDetails</code> operation. You can use the
      *                 <code>JobId</code> parameter in <code>GetServiceLastAccessedDetails</code> to
@@ -1379,6 +1453,7 @@ export declare class IAM extends IAMClient {
     getServiceLastAccessedDetails(args: GetServiceLastAccessedDetailsCommandInput, cb: (err: any, data?: GetServiceLastAccessedDetailsCommandOutput) => void): void;
     getServiceLastAccessedDetails(args: GetServiceLastAccessedDetailsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetServiceLastAccessedDetailsCommandOutput) => void): void;
     /**
+     * @public
      * <p>After you generate a group or policy report using the
      *                 <code>GenerateServiceLastAccessedDetails</code> operation, you can use the
      *                 <code>JobId</code> parameter in
@@ -1410,6 +1485,7 @@ export declare class IAM extends IAMClient {
     getServiceLastAccessedDetailsWithEntities(args: GetServiceLastAccessedDetailsWithEntitiesCommandInput, cb: (err: any, data?: GetServiceLastAccessedDetailsWithEntitiesCommandOutput) => void): void;
     getServiceLastAccessedDetailsWithEntities(args: GetServiceLastAccessedDetailsWithEntitiesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetServiceLastAccessedDetailsWithEntitiesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the status of your service-linked role deletion. After you use <a>DeleteServiceLinkedRole</a> to submit a service-linked role for deletion,
      *             you can use the <code>DeletionTaskId</code> parameter in
      *                 <code>GetServiceLinkedRoleDeletionStatus</code> to check the status of the deletion.
@@ -1420,6 +1496,7 @@ export declare class IAM extends IAMClient {
     getServiceLinkedRoleDeletionStatus(args: GetServiceLinkedRoleDeletionStatusCommandInput, cb: (err: any, data?: GetServiceLinkedRoleDeletionStatusCommandOutput) => void): void;
     getServiceLinkedRoleDeletionStatus(args: GetServiceLinkedRoleDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetServiceLinkedRoleDeletionStatusCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the specified SSH public key, including metadata about the key.</p>
      *          <p>The SSH public key retrieved by this operation is used only for authenticating the
      *             associated IAM user to an CodeCommit repository. For more information about using SSH keys
@@ -1430,6 +1507,7 @@ export declare class IAM extends IAMClient {
     getSSHPublicKey(args: GetSSHPublicKeyCommandInput, cb: (err: any, data?: GetSSHPublicKeyCommandOutput) => void): void;
     getSSHPublicKey(args: GetSSHPublicKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetSSHPublicKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves information about the specified IAM user, including the user's creation
      *             date, path, unique ID, and ARN.</p>
      *          <p>If you do not specify a user name, IAM determines the user name implicitly based on
@@ -1439,6 +1517,7 @@ export declare class IAM extends IAMClient {
     getUser(args: GetUserCommandInput, cb: (err: any, data?: GetUserCommandOutput) => void): void;
     getUser(args: GetUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves the specified inline policy document that is embedded in the specified IAM
      *             user.</p>
      *          <note>
@@ -1459,6 +1538,7 @@ export declare class IAM extends IAMClient {
     getUserPolicy(args: GetUserPolicyCommandInput, cb: (err: any, data?: GetUserPolicyCommandOutput) => void): void;
     getUserPolicy(args: GetUserPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetUserPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns information about the access key IDs associated with the specified IAM user.
      *             If there is none, the operation returns an empty list.</p>
      *          <p>Although each user is limited to a small number of keys, you can still paginate the
@@ -1478,6 +1558,7 @@ export declare class IAM extends IAMClient {
     listAccessKeys(args: ListAccessKeysCommandInput, cb: (err: any, data?: ListAccessKeysCommandOutput) => void): void;
     listAccessKeys(args: ListAccessKeysCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccessKeysCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the account alias associated with the Amazon Web Services account (Note: you can have only
      *             one). For information about using an Amazon Web Services account alias, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAlias.html">Using an alias for your
      *                 Amazon Web Services account ID</a> in the <i>IAM User Guide</i>.</p>
@@ -1486,6 +1567,7 @@ export declare class IAM extends IAMClient {
     listAccountAliases(args: ListAccountAliasesCommandInput, cb: (err: any, data?: ListAccountAliasesCommandOutput) => void): void;
     listAccountAliases(args: ListAccountAliasesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAliasesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists all managed policies that are attached to the specified IAM group.</p>
      *          <p>An IAM group can also have inline policies embedded with it. To list the inline
      *             policies for a group, use <a>ListGroupPolicies</a>. For information about
@@ -1501,6 +1583,7 @@ export declare class IAM extends IAMClient {
     listAttachedGroupPolicies(args: ListAttachedGroupPoliciesCommandInput, cb: (err: any, data?: ListAttachedGroupPoliciesCommandOutput) => void): void;
     listAttachedGroupPolicies(args: ListAttachedGroupPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAttachedGroupPoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists all managed policies that are attached to the specified IAM role.</p>
      *          <p>An IAM role can also have inline policies embedded with it. To list the inline
      *             policies for a role, use <a>ListRolePolicies</a>. For information about
@@ -1516,6 +1599,7 @@ export declare class IAM extends IAMClient {
     listAttachedRolePolicies(args: ListAttachedRolePoliciesCommandInput, cb: (err: any, data?: ListAttachedRolePoliciesCommandOutput) => void): void;
     listAttachedRolePolicies(args: ListAttachedRolePoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAttachedRolePoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists all managed policies that are attached to the specified IAM user.</p>
      *          <p>An IAM user can also have inline policies embedded with it. To list the inline
      *             policies for a user, use <a>ListUserPolicies</a>. For information about
@@ -1531,6 +1615,7 @@ export declare class IAM extends IAMClient {
     listAttachedUserPolicies(args: ListAttachedUserPoliciesCommandInput, cb: (err: any, data?: ListAttachedUserPoliciesCommandOutput) => void): void;
     listAttachedUserPolicies(args: ListAttachedUserPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAttachedUserPoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists all IAM users, groups, and roles that the specified managed policy is attached
      *             to.</p>
      *          <p>You can use the optional <code>EntityFilter</code> parameter to limit the results to a
@@ -1544,6 +1629,7 @@ export declare class IAM extends IAMClient {
     listEntitiesForPolicy(args: ListEntitiesForPolicyCommandInput, cb: (err: any, data?: ListEntitiesForPolicyCommandOutput) => void): void;
     listEntitiesForPolicy(args: ListEntitiesForPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListEntitiesForPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the names of the inline policies that are embedded in the specified IAM
      *             group.</p>
      *          <p>An IAM group can also have managed policies attached to it. To list the managed
@@ -1558,6 +1644,7 @@ export declare class IAM extends IAMClient {
     listGroupPolicies(args: ListGroupPoliciesCommandInput, cb: (err: any, data?: ListGroupPoliciesCommandOutput) => void): void;
     listGroupPolicies(args: ListGroupPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListGroupPoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the IAM groups that have the specified path prefix.</p>
      *          <p> You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
      *             parameters.</p>
@@ -1566,6 +1653,7 @@ export declare class IAM extends IAMClient {
     listGroups(args: ListGroupsCommandInput, cb: (err: any, data?: ListGroupsCommandOutput) => void): void;
     listGroups(args: ListGroupsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListGroupsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the IAM groups that the specified IAM user belongs to.</p>
      *          <p>You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
      *             parameters.</p>
@@ -1574,6 +1662,7 @@ export declare class IAM extends IAMClient {
     listGroupsForUser(args: ListGroupsForUserCommandInput, cb: (err: any, data?: ListGroupsForUserCommandOutput) => void): void;
     listGroupsForUser(args: ListGroupsForUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListGroupsForUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the instance profiles that have the specified path prefix. If there are none,
      *             the operation returns an empty list. For more information about instance profiles, see
      *                 <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About
@@ -1589,6 +1678,7 @@ export declare class IAM extends IAMClient {
     listInstanceProfiles(args: ListInstanceProfilesCommandInput, cb: (err: any, data?: ListInstanceProfilesCommandOutput) => void): void;
     listInstanceProfiles(args: ListInstanceProfilesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstanceProfilesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the instance profiles that have the specified associated IAM role. If there
      *             are none, the operation returns an empty list. For more information about instance
      *             profiles, go to <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AboutInstanceProfiles.html">About instance
@@ -1600,6 +1690,7 @@ export declare class IAM extends IAMClient {
     listInstanceProfilesForRole(args: ListInstanceProfilesForRoleCommandInput, cb: (err: any, data?: ListInstanceProfilesForRoleCommandOutput) => void): void;
     listInstanceProfilesForRole(args: ListInstanceProfilesForRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstanceProfilesForRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified IAM instance profile. The returned list of tags is sorted by tag key.
      *       For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -1608,6 +1699,7 @@ export declare class IAM extends IAMClient {
     listInstanceProfileTags(args: ListInstanceProfileTagsCommandInput, cb: (err: any, data?: ListInstanceProfileTagsCommandOutput) => void): void;
     listInstanceProfileTags(args: ListInstanceProfileTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstanceProfileTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the MFA devices for an IAM user. If the request includes a IAM user name,
      *             then this operation lists all the MFA devices associated with the specified user. If you
      *             do not specify a user name, IAM determines the user name implicitly based on the Amazon Web Services
@@ -1619,6 +1711,7 @@ export declare class IAM extends IAMClient {
     listMFADevices(args: ListMFADevicesCommandInput, cb: (err: any, data?: ListMFADevicesCommandOutput) => void): void;
     listMFADevices(args: ListMFADevicesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListMFADevicesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device. The returned list of tags is
      *       sorted by tag key. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -1627,6 +1720,7 @@ export declare class IAM extends IAMClient {
     listMFADeviceTags(args: ListMFADeviceTagsCommandInput, cb: (err: any, data?: ListMFADeviceTagsCommandOutput) => void): void;
     listMFADeviceTags(args: ListMFADeviceTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListMFADeviceTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists information about the IAM OpenID Connect (OIDC) provider resource objects
      *             defined in the Amazon Web Services account.</p>
      *          <note>
@@ -1638,6 +1732,7 @@ export declare class IAM extends IAMClient {
     listOpenIDConnectProviders(args: ListOpenIDConnectProvidersCommandInput, cb: (err: any, data?: ListOpenIDConnectProvidersCommandOutput) => void): void;
     listOpenIDConnectProviders(args: ListOpenIDConnectProvidersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListOpenIDConnectProvidersCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible
      *       identity provider. The returned list of tags is sorted by tag key. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html">About web identity
      *       federation</a>.</p>
@@ -1648,6 +1743,7 @@ export declare class IAM extends IAMClient {
     listOpenIDConnectProviderTags(args: ListOpenIDConnectProviderTagsCommandInput, cb: (err: any, data?: ListOpenIDConnectProviderTagsCommandOutput) => void): void;
     listOpenIDConnectProviderTags(args: ListOpenIDConnectProviderTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListOpenIDConnectProviderTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists all the managed policies that are available in your Amazon Web Services account, including
      *             your own customer-defined managed policies and all Amazon Web Services managed policies.</p>
      *          <p>You can filter the list of policies that is returned using the optional
@@ -1669,6 +1765,7 @@ export declare class IAM extends IAMClient {
     listPolicies(args: ListPoliciesCommandInput, cb: (err: any, data?: ListPoliciesCommandOutput) => void): void;
     listPolicies(args: ListPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Retrieves a list of policies that the IAM identity (user, group, or role) can use to
      *             access each specified service.</p>
      *          <note>
@@ -1714,6 +1811,7 @@ export declare class IAM extends IAMClient {
     listPoliciesGrantingServiceAccess(args: ListPoliciesGrantingServiceAccessCommandInput, cb: (err: any, data?: ListPoliciesGrantingServiceAccessCommandOutput) => void): void;
     listPoliciesGrantingServiceAccess(args: ListPoliciesGrantingServiceAccessCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPoliciesGrantingServiceAccessCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified IAM customer managed policy.
      *       The returned list of tags is sorted by tag key. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -1722,6 +1820,7 @@ export declare class IAM extends IAMClient {
     listPolicyTags(args: ListPolicyTagsCommandInput, cb: (err: any, data?: ListPolicyTagsCommandOutput) => void): void;
     listPolicyTags(args: ListPolicyTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPolicyTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists information about the versions of the specified managed policy, including the
      *             version that is currently set as the policy's default version.</p>
      *          <p>For more information about managed policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html">Managed policies and inline
@@ -1731,6 +1830,7 @@ export declare class IAM extends IAMClient {
     listPolicyVersions(args: ListPolicyVersionsCommandInput, cb: (err: any, data?: ListPolicyVersionsCommandOutput) => void): void;
     listPolicyVersions(args: ListPolicyVersionsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPolicyVersionsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the names of the inline policies that are embedded in the specified IAM
      *             role.</p>
      *          <p>An IAM role can also have managed policies attached to it. To list the managed
@@ -1745,6 +1845,7 @@ export declare class IAM extends IAMClient {
     listRolePolicies(args: ListRolePoliciesCommandInput, cb: (err: any, data?: ListRolePoliciesCommandOutput) => void): void;
     listRolePolicies(args: ListRolePoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListRolePoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the IAM roles that have the specified path prefix. If there are none, the
      *             operation returns an empty list. For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html">Working with
      *                 roles</a>.</p>
@@ -1759,6 +1860,7 @@ export declare class IAM extends IAMClient {
     listRoles(args: ListRolesCommandInput, cb: (err: any, data?: ListRolesCommandOutput) => void): void;
     listRoles(args: ListRolesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListRolesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified role. The returned list of tags is
      *       sorted by tag key. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -1767,6 +1869,7 @@ export declare class IAM extends IAMClient {
     listRoleTags(args: ListRoleTagsCommandInput, cb: (err: any, data?: ListRoleTagsCommandOutput) => void): void;
     listRoleTags(args: ListRoleTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListRoleTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the SAML provider resource objects defined in IAM in the account.
      *             IAM resource-listing operations return a subset of the available
      *    attributes for the resource. For example, this operation does not return tags, even though they are an attribute of the returned object. To view all of the information for a SAML provider, see <a>GetSAMLProvider</a>.</p>
@@ -1778,6 +1881,7 @@ export declare class IAM extends IAMClient {
     listSAMLProviders(args: ListSAMLProvidersCommandInput, cb: (err: any, data?: ListSAMLProvidersCommandOutput) => void): void;
     listSAMLProviders(args: ListSAMLProvidersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSAMLProvidersCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified Security Assertion Markup Language
      *       (SAML) identity provider. The returned list of tags is sorted by tag key. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html">About SAML 2.0-based
      *       federation</a>.</p>
@@ -1788,6 +1892,7 @@ export declare class IAM extends IAMClient {
     listSAMLProviderTags(args: ListSAMLProviderTagsCommandInput, cb: (err: any, data?: ListSAMLProviderTagsCommandOutput) => void): void;
     listSAMLProviderTags(args: ListSAMLProviderTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSAMLProviderTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the server certificates stored in IAM that have the specified path prefix. If
      *             none exist, the operation returns an empty list.</p>
      *          <p> You can paginate the results using the <code>MaxItems</code> and <code>Marker</code>
@@ -1805,6 +1910,7 @@ export declare class IAM extends IAMClient {
     listServerCertificates(args: ListServerCertificatesCommandInput, cb: (err: any, data?: ListServerCertificatesCommandOutput) => void): void;
     listServerCertificates(args: ListServerCertificatesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListServerCertificatesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified IAM server certificate. The
      *       returned list of tags is sorted by tag key. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -1820,6 +1926,7 @@ export declare class IAM extends IAMClient {
     listServerCertificateTags(args: ListServerCertificateTagsCommandInput, cb: (err: any, data?: ListServerCertificateTagsCommandOutput) => void): void;
     listServerCertificateTags(args: ListServerCertificateTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListServerCertificateTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns information about the service-specific credentials associated with the
      *             specified IAM user. If none exists, the operation returns an empty list. The
      *             service-specific credentials returned by this operation are used only for authenticating
@@ -1831,6 +1938,7 @@ export declare class IAM extends IAMClient {
     listServiceSpecificCredentials(args: ListServiceSpecificCredentialsCommandInput, cb: (err: any, data?: ListServiceSpecificCredentialsCommandOutput) => void): void;
     listServiceSpecificCredentials(args: ListServiceSpecificCredentialsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListServiceSpecificCredentialsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns information about the signing certificates associated with the specified IAM
      *             user. If none exists, the operation returns an empty list.</p>
      *          <p>Although each user is limited to a small number of signing certificates, you can still
@@ -1846,6 +1954,7 @@ export declare class IAM extends IAMClient {
     listSigningCertificates(args: ListSigningCertificatesCommandInput, cb: (err: any, data?: ListSigningCertificatesCommandOutput) => void): void;
     listSigningCertificates(args: ListSigningCertificatesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSigningCertificatesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Returns information about the SSH public keys associated with the specified IAM
      *             user. If none exists, the operation returns an empty list.</p>
      *          <p>The SSH public keys returned by this operation are used only for authenticating the
@@ -1859,6 +1968,7 @@ export declare class IAM extends IAMClient {
     listSSHPublicKeys(args: ListSSHPublicKeysCommandInput, cb: (err: any, data?: ListSSHPublicKeysCommandOutput) => void): void;
     listSSHPublicKeys(args: ListSSHPublicKeysCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSSHPublicKeysCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the names of the inline policies embedded in the specified IAM user.</p>
      *          <p>An IAM user can also have managed policies attached to it. To list the managed
      *             policies that are attached to a user, use <a>ListAttachedUserPolicies</a>.
@@ -1872,6 +1982,7 @@ export declare class IAM extends IAMClient {
     listUserPolicies(args: ListUserPoliciesCommandInput, cb: (err: any, data?: ListUserPoliciesCommandOutput) => void): void;
     listUserPolicies(args: ListUserPoliciesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListUserPoliciesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the IAM users that have the specified path prefix. If no path prefix is
      *             specified, the operation returns all users in the Amazon Web Services account. If there are none, the
      *             operation returns an empty list.</p>
@@ -1886,6 +1997,7 @@ export declare class IAM extends IAMClient {
     listUsers(args: ListUsersCommandInput, cb: (err: any, data?: ListUsersCommandOutput) => void): void;
     listUsers(args: ListUsersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListUsersCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the tags that are attached to the specified IAM user. The returned list of tags is sorted by tag key. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
      */
@@ -1893,6 +2005,7 @@ export declare class IAM extends IAMClient {
     listUserTags(args: ListUserTagsCommandInput, cb: (err: any, data?: ListUserTagsCommandOutput) => void): void;
     listUserTags(args: ListUserTagsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListUserTagsCommandOutput) => void): void;
     /**
+     * @public
      * <p>Lists the virtual MFA devices defined in the Amazon Web Services account by assignment status. If
      *             you do not specify an assignment status, the operation returns a list of all virtual MFA
      *             devices. Assignment status can be <code>Assigned</code>, <code>Unassigned</code>, or
@@ -1908,6 +2021,7 @@ export declare class IAM extends IAMClient {
     listVirtualMFADevices(args: ListVirtualMFADevicesCommandInput, cb: (err: any, data?: ListVirtualMFADevicesCommandOutput) => void): void;
     listVirtualMFADevices(args: ListVirtualMFADevicesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListVirtualMFADevicesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds or updates an inline policy document that is embedded in the specified IAM
      *             group.</p>
      *          <p>A user can also have managed policies attached to it. To attach a managed policy to a
@@ -1928,12 +2042,13 @@ export declare class IAM extends IAMClient {
     putGroupPolicy(args: PutGroupPolicyCommandInput, cb: (err: any, data?: PutGroupPolicyCommandOutput) => void): void;
     putGroupPolicy(args: PutGroupPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutGroupPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds or updates the policy that is specified as the IAM role's permissions boundary.
      *             You can use an Amazon Web Services managed policy or a customer managed policy to set the boundary for
      *             a role. Use the boundary to control the maximum permissions that the role can have.
      *             Setting a permissions boundary is an advanced feature that can affect the permissions
      *             for the role.</p>
-     *          <p>You cannot set the boundary for a service-linked role. </p>
+     *          <p>You cannot set the boundary for a service-linked role.</p>
      *          <important>
      *             <p>Policies used as permissions boundaries do not provide permissions. You must also
      *                 attach a permissions policy to the role. To learn how the effective permissions for
@@ -1945,6 +2060,7 @@ export declare class IAM extends IAMClient {
     putRolePermissionsBoundary(args: PutRolePermissionsBoundaryCommandInput, cb: (err: any, data?: PutRolePermissionsBoundaryCommandOutput) => void): void;
     putRolePermissionsBoundary(args: PutRolePermissionsBoundaryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutRolePermissionsBoundaryCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds or updates an inline policy document that is embedded in the specified IAM
      *             role.</p>
      *          <p>When you embed an inline policy in a role, the inline policy is used as part of the
@@ -1970,6 +2086,7 @@ export declare class IAM extends IAMClient {
     putRolePolicy(args: PutRolePolicyCommandInput, cb: (err: any, data?: PutRolePolicyCommandOutput) => void): void;
     putRolePolicy(args: PutRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds or updates the policy that is specified as the IAM user's permissions
      *             boundary. You can use an Amazon Web Services managed policy or a customer managed policy to set the
      *             boundary for a user. Use the boundary to control the maximum permissions that the user
@@ -1986,6 +2103,7 @@ export declare class IAM extends IAMClient {
     putUserPermissionsBoundary(args: PutUserPermissionsBoundaryCommandInput, cb: (err: any, data?: PutUserPermissionsBoundaryCommandOutput) => void): void;
     putUserPermissionsBoundary(args: PutUserPermissionsBoundaryCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutUserPermissionsBoundaryCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds or updates an inline policy document that is embedded in the specified IAM
      *             user.</p>
      *          <p>An IAM user can also have a managed policy attached to it. To attach a managed
@@ -2006,6 +2124,7 @@ export declare class IAM extends IAMClient {
     putUserPolicy(args: PutUserPolicyCommandInput, cb: (err: any, data?: PutUserPolicyCommandOutput) => void): void;
     putUserPolicy(args: PutUserPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutUserPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified client ID (also known as audience) from the list of client IDs
      *             registered for the specified IAM OpenID Connect (OIDC) provider resource
      *             object.</p>
@@ -2016,6 +2135,7 @@ export declare class IAM extends IAMClient {
     removeClientIDFromOpenIDConnectProvider(args: RemoveClientIDFromOpenIDConnectProviderCommandInput, cb: (err: any, data?: RemoveClientIDFromOpenIDConnectProviderCommandOutput) => void): void;
     removeClientIDFromOpenIDConnectProvider(args: RemoveClientIDFromOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveClientIDFromOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified IAM role from the specified EC2 instance profile.</p>
      *          <important>
      *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you
@@ -2031,12 +2151,14 @@ export declare class IAM extends IAMClient {
     removeRoleFromInstanceProfile(args: RemoveRoleFromInstanceProfileCommandInput, cb: (err: any, data?: RemoveRoleFromInstanceProfileCommandOutput) => void): void;
     removeRoleFromInstanceProfile(args: RemoveRoleFromInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveRoleFromInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified user from the specified group.</p>
      */
     removeUserFromGroup(args: RemoveUserFromGroupCommandInput, options?: __HttpHandlerOptions): Promise<RemoveUserFromGroupCommandOutput>;
     removeUserFromGroup(args: RemoveUserFromGroupCommandInput, cb: (err: any, data?: RemoveUserFromGroupCommandOutput) => void): void;
     removeUserFromGroup(args: RemoveUserFromGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: RemoveUserFromGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p>Resets the password for a service-specific credential. The new password is Amazon Web Services
      *             generated and cryptographically strong. It cannot be configured by the user. Resetting
      *             the password immediately invalidates the previous password associated with this
@@ -2046,6 +2168,7 @@ export declare class IAM extends IAMClient {
     resetServiceSpecificCredential(args: ResetServiceSpecificCredentialCommandInput, cb: (err: any, data?: ResetServiceSpecificCredentialCommandOutput) => void): void;
     resetServiceSpecificCredential(args: ResetServiceSpecificCredentialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ResetServiceSpecificCredentialCommandOutput) => void): void;
     /**
+     * @public
      * <p>Synchronizes the specified MFA device with its IAM resource object on the Amazon Web Services
      *             servers.</p>
      *          <p>For more information about creating and working with virtual MFA devices, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_VirtualMFA.html">Using a virtual MFA
@@ -2055,6 +2178,7 @@ export declare class IAM extends IAMClient {
     resyncMFADevice(args: ResyncMFADeviceCommandInput, cb: (err: any, data?: ResyncMFADeviceCommandOutput) => void): void;
     resyncMFADevice(args: ResyncMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ResyncMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Sets the specified version of the specified policy as the policy's default (operative)
      *             version.</p>
      *          <p>This operation affects all users, groups, and roles that the policy is attached to. To
@@ -2066,6 +2190,7 @@ export declare class IAM extends IAMClient {
     setDefaultPolicyVersion(args: SetDefaultPolicyVersionCommandInput, cb: (err: any, data?: SetDefaultPolicyVersionCommandOutput) => void): void;
     setDefaultPolicyVersion(args: SetDefaultPolicyVersionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetDefaultPolicyVersionCommandOutput) => void): void;
     /**
+     * @public
      * <p>Sets the specified version of the global endpoint token as the token version used for
      *             the Amazon Web Services account.</p>
      *          <p>By default, Security Token Service (STS) is available as a global service, and all STS requests
@@ -2090,6 +2215,7 @@ export declare class IAM extends IAMClient {
     setSecurityTokenServicePreferences(args: SetSecurityTokenServicePreferencesCommandInput, cb: (err: any, data?: SetSecurityTokenServicePreferencesCommandOutput) => void): void;
     setSecurityTokenServicePreferences(args: SetSecurityTokenServicePreferencesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SetSecurityTokenServicePreferencesCommandOutput) => void): void;
     /**
+     * @public
      * <p>Simulate how a set of IAM policies and optionally a resource-based policy works with
      *             a list of API operations and Amazon Web Services resources to determine the policies' effective
      *             permissions. The policies are provided as strings.</p>
@@ -2119,6 +2245,7 @@ export declare class IAM extends IAMClient {
     simulateCustomPolicy(args: SimulateCustomPolicyCommandInput, cb: (err: any, data?: SimulateCustomPolicyCommandOutput) => void): void;
     simulateCustomPolicy(args: SimulateCustomPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SimulateCustomPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Simulate how a set of IAM policies attached to an IAM entity works with a list of
      *             API operations and Amazon Web Services resources to determine the policies' effective permissions. The
      *             entity can be an IAM user, group, or role. If you specify a user, then the simulation
@@ -2157,6 +2284,7 @@ export declare class IAM extends IAMClient {
     simulatePrincipalPolicy(args: SimulatePrincipalPolicyCommandInput, cb: (err: any, data?: SimulatePrincipalPolicyCommandOutput) => void): void;
     simulatePrincipalPolicy(args: SimulatePrincipalPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: SimulatePrincipalPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM instance profile. If a tag with the same key name
      *       already exists, then that tag is overwritten with the new value.</p>
      *          <p>Each tag consists of a key name and an associated value. By assigning tags to your resources, you can do the
@@ -2198,6 +2326,7 @@ export declare class IAM extends IAMClient {
     tagInstanceProfile(args: TagInstanceProfileCommandInput, cb: (err: any, data?: TagInstanceProfileCommandOutput) => void): void;
     tagInstanceProfile(args: TagInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM virtual multi-factor authentication (MFA) device. If
      *       a tag with the same key name already exists, then that tag is overwritten with the new
      *       value.</p>
@@ -2240,6 +2369,7 @@ export declare class IAM extends IAMClient {
     tagMFADevice(args: TagMFADeviceCommandInput, cb: (err: any, data?: TagMFADeviceCommandOutput) => void): void;
     tagMFADevice(args: TagMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an OpenID Connect (OIDC)-compatible identity provider. For
      *       more information about these providers, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html">About web identity federation</a>. If
      *       a tag with the same key name already exists, then that tag is overwritten with the new
@@ -2283,6 +2413,7 @@ export declare class IAM extends IAMClient {
     tagOpenIDConnectProvider(args: TagOpenIDConnectProviderCommandInput, cb: (err: any, data?: TagOpenIDConnectProviderCommandOutput) => void): void;
     tagOpenIDConnectProvider(args: TagOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM customer managed policy. If a tag with the same key
      *       name already exists, then that tag is overwritten with the new value.</p>
      *          <p>A tag consists of a key name and an associated value. By assigning tags to your
@@ -2324,6 +2455,7 @@ export declare class IAM extends IAMClient {
     tagPolicy(args: TagPolicyCommandInput, cb: (err: any, data?: TagPolicyCommandOutput) => void): void;
     tagPolicy(args: TagPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM role. The role can be a regular role or a
      *       service-linked role. If a tag with the same key name already exists, then that tag is
      *       overwritten with the new value.</p>
@@ -2374,6 +2506,7 @@ export declare class IAM extends IAMClient {
     tagRole(args: TagRoleCommandInput, cb: (err: any, data?: TagRoleCommandOutput) => void): void;
     tagRole(args: TagRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to a Security Assertion Markup Language (SAML) identity provider.
      *       For more information about these providers, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_saml.html">About SAML 2.0-based federation </a>.
      *       If a tag with the same key name already exists, then that tag is overwritten with the new
@@ -2417,6 +2550,7 @@ export declare class IAM extends IAMClient {
     tagSAMLProvider(args: TagSAMLProviderCommandInput, cb: (err: any, data?: TagSAMLProviderCommandOutput) => void): void;
     tagSAMLProvider(args: TagSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM server certificate. If a tag with the same key name
      *       already exists, then that tag is overwritten with the new value.</p>
      *          <note>
@@ -2470,6 +2604,7 @@ export declare class IAM extends IAMClient {
     tagServerCertificate(args: TagServerCertificateCommandInput, cb: (err: any, data?: TagServerCertificateCommandOutput) => void): void;
     tagServerCertificate(args: TagServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Adds one or more tags to an IAM user. If a tag with the same key name already exists,
      *       then that tag is overwritten with the new value.</p>
      *          <p>A tag consists of a key name and an associated value. By assigning tags to your
@@ -2519,6 +2654,7 @@ export declare class IAM extends IAMClient {
     tagUser(args: TagUserCommandInput, cb: (err: any, data?: TagUserCommandOutput) => void): void;
     tagUser(args: TagUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the IAM instance profile. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
      */
@@ -2526,6 +2662,7 @@ export declare class IAM extends IAMClient {
     untagInstanceProfile(args: UntagInstanceProfileCommandInput, cb: (err: any, data?: UntagInstanceProfileCommandOutput) => void): void;
     untagInstanceProfile(args: UntagInstanceProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagInstanceProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the IAM virtual multi-factor authentication (MFA)
      *       device. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -2534,6 +2671,7 @@ export declare class IAM extends IAMClient {
     untagMFADevice(args: UntagMFADeviceCommandInput, cb: (err: any, data?: UntagMFADeviceCommandOutput) => void): void;
     untagMFADevice(args: UntagMFADeviceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagMFADeviceCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the specified OpenID Connect (OIDC)-compatible identity
      *       provider in IAM. For more information about OIDC providers, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html">About web identity federation</a>.
      *       For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
@@ -2543,6 +2681,7 @@ export declare class IAM extends IAMClient {
     untagOpenIDConnectProvider(args: UntagOpenIDConnectProviderCommandInput, cb: (err: any, data?: UntagOpenIDConnectProviderCommandOutput) => void): void;
     untagOpenIDConnectProvider(args: UntagOpenIDConnectProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagOpenIDConnectProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the customer managed policy. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
      */
@@ -2550,6 +2689,7 @@ export declare class IAM extends IAMClient {
     untagPolicy(args: UntagPolicyCommandInput, cb: (err: any, data?: UntagPolicyCommandOutput) => void): void;
     untagPolicy(args: UntagPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the role. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
      */
@@ -2557,6 +2697,7 @@ export declare class IAM extends IAMClient {
     untagRole(args: UntagRoleCommandInput, cb: (err: any, data?: UntagRoleCommandOutput) => void): void;
     untagRole(args: UntagRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the specified Security Assertion Markup Language (SAML)
      *       identity provider in IAM. For more information about these providers, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_oidc.html">About web identity
      *         federation</a>. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
@@ -2566,6 +2707,7 @@ export declare class IAM extends IAMClient {
     untagSAMLProvider(args: UntagSAMLProviderCommandInput, cb: (err: any, data?: UntagSAMLProviderCommandOutput) => void): void;
     untagSAMLProvider(args: UntagSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the IAM server certificate.
      *       For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
@@ -2581,6 +2723,7 @@ export declare class IAM extends IAMClient {
     untagServerCertificate(args: UntagServerCertificateCommandInput, cb: (err: any, data?: UntagServerCertificateCommandOutput) => void): void;
     untagServerCertificate(args: UntagServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Removes the specified tags from the user. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
      *       <i>IAM User Guide</i>.</p>
      */
@@ -2588,6 +2731,7 @@ export declare class IAM extends IAMClient {
     untagUser(args: UntagUserCommandInput, cb: (err: any, data?: UntagUserCommandOutput) => void): void;
     untagUser(args: UntagUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Changes the status of the specified access key from Active to Inactive, or vice versa.
      *             This operation can be used to disable a user's key as part of a key rotation
      *             workflow.</p>
@@ -2604,6 +2748,7 @@ export declare class IAM extends IAMClient {
     updateAccessKey(args: UpdateAccessKeyCommandInput, cb: (err: any, data?: UpdateAccessKeyCommandOutput) => void): void;
     updateAccessKey(args: UpdateAccessKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateAccessKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the password policy settings for the Amazon Web Services account.</p>
      *          <note>
      *             <p>This operation does not support partial updates. No parameters are required, but
@@ -2620,6 +2765,7 @@ export declare class IAM extends IAMClient {
     updateAccountPasswordPolicy(args: UpdateAccountPasswordPolicyCommandInput, cb: (err: any, data?: UpdateAccountPasswordPolicyCommandOutput) => void): void;
     updateAccountPasswordPolicy(args: UpdateAccountPasswordPolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateAccountPasswordPolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the policy that grants an IAM entity permission to assume a role. This is
      *             typically referred to as the "role trust policy". For more information about roles, see
      *                 <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/roles-toplevel.html">Using roles to
@@ -2629,6 +2775,7 @@ export declare class IAM extends IAMClient {
     updateAssumeRolePolicy(args: UpdateAssumeRolePolicyCommandInput, cb: (err: any, data?: UpdateAssumeRolePolicyCommandOutput) => void): void;
     updateAssumeRolePolicy(args: UpdateAssumeRolePolicyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateAssumeRolePolicyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the name and/or the path of the specified IAM group.</p>
      *          <important>
      *             <p> You should understand the implications of changing a group's path or name. For
@@ -2649,6 +2796,7 @@ export declare class IAM extends IAMClient {
     updateGroup(args: UpdateGroupCommandInput, cb: (err: any, data?: UpdateGroupCommandOutput) => void): void;
     updateGroup(args: UpdateGroupCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateGroupCommandOutput) => void): void;
     /**
+     * @public
      * <p>Changes the password for the specified IAM user. You can use the CLI, the Amazon Web Services
      *             API, or the <b>Users</b> page in the IAM console to change
      *             the password for any IAM user. Use <a>ChangePassword</a> to change your own
@@ -2661,6 +2809,7 @@ export declare class IAM extends IAMClient {
     updateLoginProfile(args: UpdateLoginProfileCommandInput, cb: (err: any, data?: UpdateLoginProfileCommandOutput) => void): void;
     updateLoginProfile(args: UpdateLoginProfileCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateLoginProfileCommandOutput) => void): void;
     /**
+     * @public
      * <p>Replaces the existing list of server certificate thumbprints associated with an OpenID
      *             Connect (OIDC) provider resource object with a new list of thumbprints.</p>
      *          <p>The list that you pass with this operation completely replaces the existing list of
@@ -2689,12 +2838,14 @@ export declare class IAM extends IAMClient {
     updateOpenIDConnectProviderThumbprint(args: UpdateOpenIDConnectProviderThumbprintCommandInput, cb: (err: any, data?: UpdateOpenIDConnectProviderThumbprintCommandOutput) => void): void;
     updateOpenIDConnectProviderThumbprint(args: UpdateOpenIDConnectProviderThumbprintCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateOpenIDConnectProviderThumbprintCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the description or maximum session duration setting of a role.</p>
      */
     updateRole(args: UpdateRoleCommandInput, options?: __HttpHandlerOptions): Promise<UpdateRoleCommandOutput>;
     updateRole(args: UpdateRoleCommandInput, cb: (err: any, data?: UpdateRoleCommandOutput) => void): void;
     updateRole(args: UpdateRoleCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateRoleCommandOutput) => void): void;
     /**
+     * @public
      * <p>Use <a>UpdateRole</a> instead.</p>
      *          <p>Modifies only the description of a role. This operation performs the same function as
      *             the <code>Description</code> parameter in the <code>UpdateRole</code> operation.</p>
@@ -2703,6 +2854,7 @@ export declare class IAM extends IAMClient {
     updateRoleDescription(args: UpdateRoleDescriptionCommandInput, cb: (err: any, data?: UpdateRoleDescriptionCommandOutput) => void): void;
     updateRoleDescription(args: UpdateRoleDescriptionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateRoleDescriptionCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the metadata document for an existing SAML provider resource object.</p>
      *          <note>
      *             <p>This operation requires <a href="https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html">Signature Version 4</a>.</p>
@@ -2712,6 +2864,7 @@ export declare class IAM extends IAMClient {
     updateSAMLProvider(args: UpdateSAMLProviderCommandInput, cb: (err: any, data?: UpdateSAMLProviderCommandOutput) => void): void;
     updateSAMLProvider(args: UpdateSAMLProviderCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateSAMLProviderCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the name and/or the path of the specified server certificate stored in
      *             IAM.</p>
      *          <p>For more information about working with server certificates, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_server-certs.html">Working
@@ -2737,6 +2890,7 @@ export declare class IAM extends IAMClient {
     updateServerCertificate(args: UpdateServerCertificateCommandInput, cb: (err: any, data?: UpdateServerCertificateCommandOutput) => void): void;
     updateServerCertificate(args: UpdateServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Sets the status of a service-specific credential to <code>Active</code> or
      *                 <code>Inactive</code>. Service-specific credentials that are inactive cannot be used
      *             for authentication to the service. This operation can be used to disable a user's
@@ -2746,6 +2900,7 @@ export declare class IAM extends IAMClient {
     updateServiceSpecificCredential(args: UpdateServiceSpecificCredentialCommandInput, cb: (err: any, data?: UpdateServiceSpecificCredentialCommandOutput) => void): void;
     updateServiceSpecificCredential(args: UpdateServiceSpecificCredentialCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateServiceSpecificCredentialCommandOutput) => void): void;
     /**
+     * @public
      * <p>Changes the status of the specified user signing certificate from active to disabled,
      *             or vice versa. This operation can be used to disable an IAM user's signing
      *             certificate as part of a certificate rotation work flow.</p>
@@ -2759,6 +2914,7 @@ export declare class IAM extends IAMClient {
     updateSigningCertificate(args: UpdateSigningCertificateCommandInput, cb: (err: any, data?: UpdateSigningCertificateCommandOutput) => void): void;
     updateSigningCertificate(args: UpdateSigningCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateSigningCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Sets the status of an IAM user's SSH public key to active or inactive. SSH public
      *             keys that are inactive cannot be used for authentication. This operation can be used to
      *             disable a user's SSH public key as part of a key rotation work flow.</p>
@@ -2771,6 +2927,7 @@ export declare class IAM extends IAMClient {
     updateSSHPublicKey(args: UpdateSSHPublicKeyCommandInput, cb: (err: any, data?: UpdateSSHPublicKeyCommandOutput) => void): void;
     updateSSHPublicKey(args: UpdateSSHPublicKeyCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateSSHPublicKeyCommandOutput) => void): void;
     /**
+     * @public
      * <p>Updates the name and/or the path of the specified IAM user.</p>
      *          <important>
      *             <p> You should understand the implications of changing an IAM user's path or
@@ -2789,6 +2946,7 @@ export declare class IAM extends IAMClient {
     updateUser(args: UpdateUserCommandInput, cb: (err: any, data?: UpdateUserCommandOutput) => void): void;
     updateUser(args: UpdateUserCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateUserCommandOutput) => void): void;
     /**
+     * @public
      * <p>Uploads a server certificate entity for the Amazon Web Services account. The server certificate
      *             entity includes a public key certificate, a private key, and an optional certificate
      *             chain, which should all be PEM-encoded.</p>
@@ -2818,6 +2976,7 @@ export declare class IAM extends IAMClient {
     uploadServerCertificate(args: UploadServerCertificateCommandInput, cb: (err: any, data?: UploadServerCertificateCommandOutput) => void): void;
     uploadServerCertificate(args: UploadServerCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UploadServerCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Uploads an X.509 signing certificate and associates it with the specified IAM user.
      *             Some Amazon Web Services services require you to use certificates to validate requests that are signed
      *             with a corresponding private key. When you upload the certificate, its default status is
@@ -2843,6 +3002,7 @@ export declare class IAM extends IAMClient {
     uploadSigningCertificate(args: UploadSigningCertificateCommandInput, cb: (err: any, data?: UploadSigningCertificateCommandOutput) => void): void;
     uploadSigningCertificate(args: UploadSigningCertificateCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UploadSigningCertificateCommandOutput) => void): void;
     /**
+     * @public
      * <p>Uploads an SSH public key and associates it with the specified IAM user.</p>
      *          <p>The SSH public key uploaded by this operation can be used only for authenticating the
      *             associated IAM user to an CodeCommit repository. For more information about using SSH keys