@aws-sdk/client-iam 3.295.0 → 3.297.0

package/dist-types/IAMClient.d.ts

@@ -166,15 +166,24 @@ import { UploadServerCertificateCommandInput, UploadServerCertificateCommandOutp
 import { UploadSigningCertificateCommandInput, UploadSigningCertificateCommandOutput } from "./commands/UploadSigningCertificateCommand";
 import { UploadSSHPublicKeyCommandInput, UploadSSHPublicKeyCommandOutput } from "./commands/UploadSSHPublicKeyCommand";
 import { ClientInputEndpointParameters, ClientResolvedEndpointParameters, EndpointParameters } from "./endpoint/EndpointParameters";
+/**
+ * @public
+ */
 export type ServiceInputTypes = AddClientIDToOpenIDConnectProviderCommandInput | AddRoleToInstanceProfileCommandInput | AddUserToGroupCommandInput | AttachGroupPolicyCommandInput | AttachRolePolicyCommandInput | AttachUserPolicyCommandInput | ChangePasswordCommandInput | CreateAccessKeyCommandInput | CreateAccountAliasCommandInput | CreateGroupCommandInput | CreateInstanceProfileCommandInput | CreateLoginProfileCommandInput | CreateOpenIDConnectProviderCommandInput | CreatePolicyCommandInput | CreatePolicyVersionCommandInput | CreateRoleCommandInput | CreateSAMLProviderCommandInput | CreateServiceLinkedRoleCommandInput | CreateServiceSpecificCredentialCommandInput | CreateUserCommandInput | CreateVirtualMFADeviceCommandInput | DeactivateMFADeviceCommandInput | DeleteAccessKeyCommandInput | DeleteAccountAliasCommandInput | DeleteAccountPasswordPolicyCommandInput | DeleteGroupCommandInput | DeleteGroupPolicyCommandInput | DeleteInstanceProfileCommandInput | DeleteLoginProfileCommandInput | DeleteOpenIDConnectProviderCommandInput | DeletePolicyCommandInput | DeletePolicyVersionCommandInput | DeleteRoleCommandInput | DeleteRolePermissionsBoundaryCommandInput | DeleteRolePolicyCommandInput | DeleteSAMLProviderCommandInput | DeleteSSHPublicKeyCommandInput | DeleteServerCertificateCommandInput | DeleteServiceLinkedRoleCommandInput | DeleteServiceSpecificCredentialCommandInput | DeleteSigningCertificateCommandInput | DeleteUserCommandInput | DeleteUserPermissionsBoundaryCommandInput | DeleteUserPolicyCommandInput | DeleteVirtualMFADeviceCommandInput | DetachGroupPolicyCommandInput | DetachRolePolicyCommandInput | DetachUserPolicyCommandInput | EnableMFADeviceCommandInput | GenerateCredentialReportCommandInput | GenerateOrganizationsAccessReportCommandInput | GenerateServiceLastAccessedDetailsCommandInput | GetAccessKeyLastUsedCommandInput | GetAccountAuthorizationDetailsCommandInput | GetAccountPasswordPolicyCommandInput | GetAccountSummaryCommandInput | GetContextKeysForCustomPolicyCommandInput | GetContextKeysForPrincipalPolicyCommandInput | GetCredentialReportCommandInput | GetGroupCommandInput | GetGroupPolicyCommandInput | GetInstanceProfileCommandInput | GetLoginProfileCommandInput | GetOpenIDConnectProviderCommandInput | GetOrganizationsAccessReportCommandInput | GetPolicyCommandInput | GetPolicyVersionCommandInput | GetRoleCommandInput | GetRolePolicyCommandInput | GetSAMLProviderCommandInput | GetSSHPublicKeyCommandInput | GetServerCertificateCommandInput | GetServiceLastAccessedDetailsCommandInput | GetServiceLastAccessedDetailsWithEntitiesCommandInput | GetServiceLinkedRoleDeletionStatusCommandInput | GetUserCommandInput | GetUserPolicyCommandInput | ListAccessKeysCommandInput | ListAccountAliasesCommandInput | ListAttachedGroupPoliciesCommandInput | ListAttachedRolePoliciesCommandInput | ListAttachedUserPoliciesCommandInput | ListEntitiesForPolicyCommandInput | ListGroupPoliciesCommandInput | ListGroupsCommandInput | ListGroupsForUserCommandInput | ListInstanceProfileTagsCommandInput | ListInstanceProfilesCommandInput | ListInstanceProfilesForRoleCommandInput | ListMFADeviceTagsCommandInput | ListMFADevicesCommandInput | ListOpenIDConnectProviderTagsCommandInput | ListOpenIDConnectProvidersCommandInput | ListPoliciesCommandInput | ListPoliciesGrantingServiceAccessCommandInput | ListPolicyTagsCommandInput | ListPolicyVersionsCommandInput | ListRolePoliciesCommandInput | ListRoleTagsCommandInput | ListRolesCommandInput | ListSAMLProviderTagsCommandInput | ListSAMLProvidersCommandInput | ListSSHPublicKeysCommandInput | ListServerCertificateTagsCommandInput | ListServerCertificatesCommandInput | ListServiceSpecificCredentialsCommandInput | ListSigningCertificatesCommandInput | ListUserPoliciesCommandInput | ListUserTagsCommandInput | ListUsersCommandInput | ListVirtualMFADevicesCommandInput | PutGroupPolicyCommandInput | PutRolePermissionsBoundaryCommandInput | PutRolePolicyCommandInput | PutUserPermissionsBoundaryCommandInput | PutUserPolicyCommandInput | RemoveClientIDFromOpenIDConnectProviderCommandInput | RemoveRoleFromInstanceProfileCommandInput | RemoveUserFromGroupCommandInput | ResetServiceSpecificCredentialCommandInput | ResyncMFADeviceCommandInput | SetDefaultPolicyVersionCommandInput | SetSecurityTokenServicePreferencesCommandInput | SimulateCustomPolicyCommandInput | SimulatePrincipalPolicyCommandInput | TagInstanceProfileCommandInput | TagMFADeviceCommandInput | TagOpenIDConnectProviderCommandInput | TagPolicyCommandInput | TagRoleCommandInput | TagSAMLProviderCommandInput | TagServerCertificateCommandInput | TagUserCommandInput | UntagInstanceProfileCommandInput | UntagMFADeviceCommandInput | UntagOpenIDConnectProviderCommandInput | UntagPolicyCommandInput | UntagRoleCommandInput | UntagSAMLProviderCommandInput | UntagServerCertificateCommandInput | UntagUserCommandInput | UpdateAccessKeyCommandInput | UpdateAccountPasswordPolicyCommandInput | UpdateAssumeRolePolicyCommandInput | UpdateGroupCommandInput | UpdateLoginProfileCommandInput | UpdateOpenIDConnectProviderThumbprintCommandInput | UpdateRoleCommandInput | UpdateRoleDescriptionCommandInput | UpdateSAMLProviderCommandInput | UpdateSSHPublicKeyCommandInput | UpdateServerCertificateCommandInput | UpdateServiceSpecificCredentialCommandInput | UpdateSigningCertificateCommandInput | UpdateUserCommandInput | UploadSSHPublicKeyCommandInput | UploadServerCertificateCommandInput | UploadSigningCertificateCommandInput;
+/**
+ * @public
+ */
 export type ServiceOutputTypes = AddClientIDToOpenIDConnectProviderCommandOutput | AddRoleToInstanceProfileCommandOutput | AddUserToGroupCommandOutput | AttachGroupPolicyCommandOutput | AttachRolePolicyCommandOutput | AttachUserPolicyCommandOutput | ChangePasswordCommandOutput | CreateAccessKeyCommandOutput | CreateAccountAliasCommandOutput | CreateGroupCommandOutput | CreateInstanceProfileCommandOutput | CreateLoginProfileCommandOutput | CreateOpenIDConnectProviderCommandOutput | CreatePolicyCommandOutput | CreatePolicyVersionCommandOutput | CreateRoleCommandOutput | CreateSAMLProviderCommandOutput | CreateServiceLinkedRoleCommandOutput | CreateServiceSpecificCredentialCommandOutput | CreateUserCommandOutput | CreateVirtualMFADeviceCommandOutput | DeactivateMFADeviceCommandOutput | DeleteAccessKeyCommandOutput | DeleteAccountAliasCommandOutput | DeleteAccountPasswordPolicyCommandOutput | DeleteGroupCommandOutput | DeleteGroupPolicyCommandOutput | DeleteInstanceProfileCommandOutput | DeleteLoginProfileCommandOutput | DeleteOpenIDConnectProviderCommandOutput | DeletePolicyCommandOutput | DeletePolicyVersionCommandOutput | DeleteRoleCommandOutput | DeleteRolePermissionsBoundaryCommandOutput | DeleteRolePolicyCommandOutput | DeleteSAMLProviderCommandOutput | DeleteSSHPublicKeyCommandOutput | DeleteServerCertificateCommandOutput | DeleteServiceLinkedRoleCommandOutput | DeleteServiceSpecificCredentialCommandOutput | DeleteSigningCertificateCommandOutput | DeleteUserCommandOutput | DeleteUserPermissionsBoundaryCommandOutput | DeleteUserPolicyCommandOutput | DeleteVirtualMFADeviceCommandOutput | DetachGroupPolicyCommandOutput | DetachRolePolicyCommandOutput | DetachUserPolicyCommandOutput | EnableMFADeviceCommandOutput | GenerateCredentialReportCommandOutput | GenerateOrganizationsAccessReportCommandOutput | GenerateServiceLastAccessedDetailsCommandOutput | GetAccessKeyLastUsedCommandOutput | GetAccountAuthorizationDetailsCommandOutput | GetAccountPasswordPolicyCommandOutput | GetAccountSummaryCommandOutput | GetContextKeysForCustomPolicyCommandOutput | GetContextKeysForPrincipalPolicyCommandOutput | GetCredentialReportCommandOutput | GetGroupCommandOutput | GetGroupPolicyCommandOutput | GetInstanceProfileCommandOutput | GetLoginProfileCommandOutput | GetOpenIDConnectProviderCommandOutput | GetOrganizationsAccessReportCommandOutput | GetPolicyCommandOutput | GetPolicyVersionCommandOutput | GetRoleCommandOutput | GetRolePolicyCommandOutput | GetSAMLProviderCommandOutput | GetSSHPublicKeyCommandOutput | GetServerCertificateCommandOutput | GetServiceLastAccessedDetailsCommandOutput | GetServiceLastAccessedDetailsWithEntitiesCommandOutput | GetServiceLinkedRoleDeletionStatusCommandOutput | GetUserCommandOutput | GetUserPolicyCommandOutput | ListAccessKeysCommandOutput | ListAccountAliasesCommandOutput | ListAttachedGroupPoliciesCommandOutput | ListAttachedRolePoliciesCommandOutput | ListAttachedUserPoliciesCommandOutput | ListEntitiesForPolicyCommandOutput | ListGroupPoliciesCommandOutput | ListGroupsCommandOutput | ListGroupsForUserCommandOutput | ListInstanceProfileTagsCommandOutput | ListInstanceProfilesCommandOutput | ListInstanceProfilesForRoleCommandOutput | ListMFADeviceTagsCommandOutput | ListMFADevicesCommandOutput | ListOpenIDConnectProviderTagsCommandOutput | ListOpenIDConnectProvidersCommandOutput | ListPoliciesCommandOutput | ListPoliciesGrantingServiceAccessCommandOutput | ListPolicyTagsCommandOutput | ListPolicyVersionsCommandOutput | ListRolePoliciesCommandOutput | ListRoleTagsCommandOutput | ListRolesCommandOutput | ListSAMLProviderTagsCommandOutput | ListSAMLProvidersCommandOutput | ListSSHPublicKeysCommandOutput | ListServerCertificateTagsCommandOutput | ListServerCertificatesCommandOutput | ListServiceSpecificCredentialsCommandOutput | ListSigningCertificatesCommandOutput | ListUserPoliciesCommandOutput | ListUserTagsCommandOutput | ListUsersCommandOutput | ListVirtualMFADevicesCommandOutput | PutGroupPolicyCommandOutput | PutRolePermissionsBoundaryCommandOutput | PutRolePolicyCommandOutput | PutUserPermissionsBoundaryCommandOutput | PutUserPolicyCommandOutput | RemoveClientIDFromOpenIDConnectProviderCommandOutput | RemoveRoleFromInstanceProfileCommandOutput | RemoveUserFromGroupCommandOutput | ResetServiceSpecificCredentialCommandOutput | ResyncMFADeviceCommandOutput | SetDefaultPolicyVersionCommandOutput | SetSecurityTokenServicePreferencesCommandOutput | SimulateCustomPolicyCommandOutput | SimulatePrincipalPolicyCommandOutput | TagInstanceProfileCommandOutput | TagMFADeviceCommandOutput | TagOpenIDConnectProviderCommandOutput | TagPolicyCommandOutput | TagRoleCommandOutput | TagSAMLProviderCommandOutput | TagServerCertificateCommandOutput | TagUserCommandOutput | UntagInstanceProfileCommandOutput | UntagMFADeviceCommandOutput | UntagOpenIDConnectProviderCommandOutput | UntagPolicyCommandOutput | UntagRoleCommandOutput | UntagSAMLProviderCommandOutput | UntagServerCertificateCommandOutput | UntagUserCommandOutput | UpdateAccessKeyCommandOutput | UpdateAccountPasswordPolicyCommandOutput | UpdateAssumeRolePolicyCommandOutput | UpdateGroupCommandOutput | UpdateLoginProfileCommandOutput | UpdateOpenIDConnectProviderThumbprintCommandOutput | UpdateRoleCommandOutput | UpdateRoleDescriptionCommandOutput | UpdateSAMLProviderCommandOutput | UpdateSSHPublicKeyCommandOutput | UpdateServerCertificateCommandOutput | UpdateServiceSpecificCredentialCommandOutput | UpdateSigningCertificateCommandOutput | UpdateUserCommandOutput | UploadSSHPublicKeyCommandOutput | UploadServerCertificateCommandOutput | UploadSigningCertificateCommandOutput;
+/**
+ * @public
+ */
 export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__HttpHandlerOptions>> {
     /**
      * The HTTP handler to use. Fetch in browser and Https in Nodejs.
      */
     requestHandler?: __HttpHandler;
     /**
-     * A constructor for a class implementing the {@link __Checksum} interface
+     * A constructor for a class implementing the {@link @aws-sdk/types#ChecksumConstructor} interface
      * that computes the SHA-256 HMAC or checksum of a string or binary buffer.
      * @internal
      */
@@ -264,23 +273,34 @@ export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__
      */
     logger?: __Logger;
     /**
-     * The {@link __DefaultsMode} that will be used to determine how certain default configuration options are resolved in the SDK.
+     * The {@link @aws-sdk/smithy-client#DefaultsMode} that will be used to determine how certain default configuration options are resolved in the SDK.
      */
     defaultsMode?: __DefaultsMode | __Provider<__DefaultsMode>;
 }
+/**
+ * @public
+ */
 type IAMClientConfigType = Partial<__SmithyConfiguration<__HttpHandlerOptions>> & ClientDefaults & RegionInputConfig & EndpointInputConfig<EndpointParameters> & RetryInputConfig & HostHeaderInputConfig & AwsAuthInputConfig & UserAgentInputConfig & ClientInputEndpointParameters;
 /**
- * The configuration interface of IAMClient class constructor that set the region, credentials and other options.
+ * @public
+ *
+ *  The configuration interface of IAMClient class constructor that set the region, credentials and other options.
  */
 export interface IAMClientConfig extends IAMClientConfigType {
 }
+/**
+ * @public
+ */
 type IAMClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHandlerOptions> & Required<ClientDefaults> & RegionResolvedConfig & EndpointResolvedConfig<EndpointParameters> & RetryResolvedConfig & HostHeaderResolvedConfig & AwsAuthResolvedConfig & UserAgentResolvedConfig & ClientResolvedEndpointParameters;
 /**
- * The resolved configuration interface of IAMClient class. This is resolved and normalized from the {@link IAMClientConfig | constructor configuration interface}.
+ * @public
+ *
+ *  The resolved configuration interface of IAMClient class. This is resolved and normalized from the {@link IAMClientConfig | constructor configuration interface}.
  */
 export interface IAMClientResolvedConfig extends IAMClientResolvedConfigType {
 }
 /**
+ * @public
  * <fullname>Identity and Access Management</fullname>
  *          <p>Identity and Access Management (IAM) is a web service for securely controlling
  *       access to Amazon Web Services services. With IAM, you can centrally manage users, security credentials

package/dist-types/commands/AddClientIDToOpenIDConnectProviderCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AddClientIDToOpenIDConnectProviderRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AddClientIDToOpenIDConnectProviderCommand}.
  */
 export interface AddClientIDToOpenIDConnectProviderCommandInput extends AddClientIDToOpenIDConnectProviderRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AddClientIDToOpenIDConnectProviderCommand}.
  */
 export interface AddClientIDToOpenIDConnectProviderCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Adds a new client ID (also known as audience) to the list of client IDs already
  *             registered for the specified IAM OpenID Connect (OIDC) provider resource.</p>
  *          <p>This operation is idempotent; it does not fail or return an error if you add an
@@ -28,6 +33,8 @@ export interface AddClientIDToOpenIDConnectProviderCommandOutput extends __Metad
  * const response = await client.send(command);
  * ```
  *
+ * @param AddClientIDToOpenIDConnectProviderCommandInput - {@link AddClientIDToOpenIDConnectProviderCommandInput}
+ * @returns {@link AddClientIDToOpenIDConnectProviderCommandOutput}
  * @see {@link AddClientIDToOpenIDConnectProviderCommandInput} for command's `input` shape.
  * @see {@link AddClientIDToOpenIDConnectProviderCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -65,11 +72,20 @@ export interface AddClientIDToOpenIDConnectProviderCommandOutput extends __Metad
 export declare class AddClientIDToOpenIDConnectProviderCommand extends $Command<AddClientIDToOpenIDConnectProviderCommandInput, AddClientIDToOpenIDConnectProviderCommandOutput, IAMClientResolvedConfig> {
     readonly input: AddClientIDToOpenIDConnectProviderCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AddClientIDToOpenIDConnectProviderCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AddClientIDToOpenIDConnectProviderCommandInput, AddClientIDToOpenIDConnectProviderCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/AddRoleToInstanceProfileCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AddRoleToInstanceProfileRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AddRoleToInstanceProfileCommand}.
  */
 export interface AddRoleToInstanceProfileCommandInput extends AddRoleToInstanceProfileRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AddRoleToInstanceProfileCommand}.
  */
 export interface AddRoleToInstanceProfileCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Adds the specified IAM role to the specified instance profile. An instance profile
  *             can contain only one role, and this quota cannot be increased. You can remove the
  *             existing role and then add a different role to an instance profile. You must then wait
@@ -37,6 +42,8 @@ export interface AddRoleToInstanceProfileCommandOutput extends __MetadataBearer
  * const response = await client.send(command);
  * ```
  *
+ * @param AddRoleToInstanceProfileCommandInput - {@link AddRoleToInstanceProfileCommandInput}
+ * @returns {@link AddRoleToInstanceProfileCommandOutput}
  * @see {@link AddRoleToInstanceProfileCommandInput} for command's `input` shape.
  * @see {@link AddRoleToInstanceProfileCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -58,10 +65,10 @@ export interface AddRoleToInstanceProfileCommandOutput extends __MetadataBearer
  *       failure.</p>
  *
  * @throws {@link UnmodifiableEntityException} (client fault)
- *  <p>The request was rejected because only the service that depends on the service-linked role
- *       can modify or delete the role on your behalf. The error message includes the name of the
- *       service that depends on this service-linked role. You must request the change through that
- *       service.</p>
+ *  <p>The request was rejected because service-linked roles are protected Amazon Web Services resources. Only
+ *       the service that depends on the service-linked role can modify or delete the role on your
+ *       behalf. The error message includes the name of the service that depends on this service-linked
+ *       role. You must request the change through that service.</p>
  *
  *
  * @example To add a role to an instance profile
@@ -80,11 +87,20 @@ export interface AddRoleToInstanceProfileCommandOutput extends __MetadataBearer
 export declare class AddRoleToInstanceProfileCommand extends $Command<AddRoleToInstanceProfileCommandInput, AddRoleToInstanceProfileCommandOutput, IAMClientResolvedConfig> {
     readonly input: AddRoleToInstanceProfileCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AddRoleToInstanceProfileCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AddRoleToInstanceProfileCommandInput, AddRoleToInstanceProfileCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/AddUserToGroupCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AddUserToGroupRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AddUserToGroupCommand}.
  */
 export interface AddUserToGroupCommandInput extends AddUserToGroupRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AddUserToGroupCommand}.
  */
 export interface AddUserToGroupCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Adds the specified user to the specified group.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
@@ -25,6 +30,8 @@ export interface AddUserToGroupCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param AddUserToGroupCommandInput - {@link AddUserToGroupCommandInput}
+ * @returns {@link AddUserToGroupCommandOutput}
  * @see {@link AddUserToGroupCommandInput} for command's `input` shape.
  * @see {@link AddUserToGroupCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -58,11 +65,20 @@ export interface AddUserToGroupCommandOutput extends __MetadataBearer {
 export declare class AddUserToGroupCommand extends $Command<AddUserToGroupCommandInput, AddUserToGroupCommandOutput, IAMClientResolvedConfig> {
     readonly input: AddUserToGroupCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AddUserToGroupCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AddUserToGroupCommandInput, AddUserToGroupCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/AttachGroupPolicyCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AttachGroupPolicyRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AttachGroupPolicyCommand}.
  */
 export interface AttachGroupPolicyCommandInput extends AttachGroupPolicyRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AttachGroupPolicyCommand}.
  */
 export interface AttachGroupPolicyCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Attaches the specified managed policy to the specified IAM group.</p>
  *          <p>You use this operation to attach a managed policy to a group. To embed an inline
  *             policy in a group, use <a>PutGroupPolicy</a>.</p>
@@ -32,6 +37,8 @@ export interface AttachGroupPolicyCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param AttachGroupPolicyCommandInput - {@link AttachGroupPolicyCommandInput}
+ * @returns {@link AttachGroupPolicyCommandOutput}
  * @see {@link AttachGroupPolicyCommandInput} for command's `input` shape.
  * @see {@link AttachGroupPolicyCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -73,11 +80,20 @@ export interface AttachGroupPolicyCommandOutput extends __MetadataBearer {
 export declare class AttachGroupPolicyCommand extends $Command<AttachGroupPolicyCommandInput, AttachGroupPolicyCommandOutput, IAMClientResolvedConfig> {
     readonly input: AttachGroupPolicyCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AttachGroupPolicyCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AttachGroupPolicyCommandInput, AttachGroupPolicyCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/AttachRolePolicyCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AttachRolePolicyRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AttachRolePolicyCommand}.
  */
 export interface AttachRolePolicyCommandInput extends AttachRolePolicyRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AttachRolePolicyCommand}.
  */
 export interface AttachRolePolicyCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Attaches the specified managed policy to the specified IAM role. When you attach a
  *             managed policy to a role, the managed policy becomes part of the role's permission
  *             (access) policy.</p>
@@ -39,6 +44,8 @@ export interface AttachRolePolicyCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param AttachRolePolicyCommandInput - {@link AttachRolePolicyCommandInput}
+ * @returns {@link AttachRolePolicyCommandOutput}
  * @see {@link AttachRolePolicyCommandInput} for command's `input` shape.
  * @see {@link AttachRolePolicyCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -64,10 +71,10 @@ export interface AttachRolePolicyCommandOutput extends __MetadataBearer {
  *       failure.</p>
  *
  * @throws {@link UnmodifiableEntityException} (client fault)
- *  <p>The request was rejected because only the service that depends on the service-linked role
- *       can modify or delete the role on your behalf. The error message includes the name of the
- *       service that depends on this service-linked role. You must request the change through that
- *       service.</p>
+ *  <p>The request was rejected because service-linked roles are protected Amazon Web Services resources. Only
+ *       the service that depends on the service-linked role can modify or delete the role on your
+ *       behalf. The error message includes the name of the service that depends on this service-linked
+ *       role. You must request the change through that service.</p>
  *
  *
  * @example To attach a managed policy to an IAM role
@@ -86,11 +93,20 @@ export interface AttachRolePolicyCommandOutput extends __MetadataBearer {
 export declare class AttachRolePolicyCommand extends $Command<AttachRolePolicyCommandInput, AttachRolePolicyCommandOutput, IAMClientResolvedConfig> {
     readonly input: AttachRolePolicyCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AttachRolePolicyCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AttachRolePolicyCommandInput, AttachRolePolicyCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/AttachUserPolicyCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { AttachUserPolicyRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link AttachUserPolicyCommand}.
  */
 export interface AttachUserPolicyCommandInput extends AttachUserPolicyRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link AttachUserPolicyCommand}.
  */
 export interface AttachUserPolicyCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Attaches the specified managed policy to the specified user.</p>
  *          <p>You use this operation to attach a <i>managed</i> policy to a user. To
  *             embed an inline policy in a user, use <a>PutUserPolicy</a>.</p>
@@ -32,6 +37,8 @@ export interface AttachUserPolicyCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param AttachUserPolicyCommandInput - {@link AttachUserPolicyCommandInput}
+ * @returns {@link AttachUserPolicyCommandOutput}
  * @see {@link AttachUserPolicyCommandInput} for command's `input` shape.
  * @see {@link AttachUserPolicyCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -73,11 +80,20 @@ export interface AttachUserPolicyCommandOutput extends __MetadataBearer {
 export declare class AttachUserPolicyCommand extends $Command<AttachUserPolicyCommandInput, AttachUserPolicyCommandOutput, IAMClientResolvedConfig> {
     readonly input: AttachUserPolicyCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: AttachUserPolicyCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<AttachUserPolicyCommandInput, AttachUserPolicyCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/ChangePasswordCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { ChangePasswordRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link ChangePasswordCommand}.
  */
 export interface ChangePasswordCommandInput extends ChangePasswordRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link ChangePasswordCommand}.
  */
 export interface ChangePasswordCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Changes the password of the IAM user who is calling this operation. This operation
  *             can be performed using the CLI, the Amazon Web Services API, or the <b>My
  *                 Security Credentials</b> page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is
@@ -32,6 +37,8 @@ export interface ChangePasswordCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param ChangePasswordCommandInput - {@link ChangePasswordCommandInput}
+ * @returns {@link ChangePasswordCommandOutput}
  * @see {@link ChangePasswordCommandInput} for command's `input` shape.
  * @see {@link ChangePasswordCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -79,11 +86,20 @@ export interface ChangePasswordCommandOutput extends __MetadataBearer {
 export declare class ChangePasswordCommand extends $Command<ChangePasswordCommandInput, ChangePasswordCommandOutput, IAMClientResolvedConfig> {
     readonly input: ChangePasswordCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: ChangePasswordCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<ChangePasswordCommandInput, ChangePasswordCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/CreateAccessKeyCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { CreateAccessKeyRequest, CreateAccessKeyResponse } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link CreateAccessKeyCommand}.
  */
 export interface CreateAccessKeyCommandInput extends CreateAccessKeyRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link CreateAccessKeyCommand}.
  */
 export interface CreateAccessKeyCommandOutput extends CreateAccessKeyResponse, __MetadataBearer {
 }
 /**
+ * @public
  * <p> Creates a new Amazon Web Services secret access key and corresponding Amazon Web Services access key ID for the
  *             specified user. The default status for new keys is <code>Active</code>.</p>
  *          <p>If you do not specify a user name, IAM determines the user name implicitly based on
@@ -38,6 +43,8 @@ export interface CreateAccessKeyCommandOutput extends CreateAccessKeyResponse, _
  * const response = await client.send(command);
  * ```
  *
+ * @param CreateAccessKeyCommandInput - {@link CreateAccessKeyCommandInput}
+ * @returns {@link CreateAccessKeyCommandOutput}
  * @see {@link CreateAccessKeyCommandInput} for command's `input` shape.
  * @see {@link CreateAccessKeyCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -81,11 +88,20 @@ export interface CreateAccessKeyCommandOutput extends CreateAccessKeyResponse, _
 export declare class CreateAccessKeyCommand extends $Command<CreateAccessKeyCommandInput, CreateAccessKeyCommandOutput, IAMClientResolvedConfig> {
     readonly input: CreateAccessKeyCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: CreateAccessKeyCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<CreateAccessKeyCommandInput, CreateAccessKeyCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/CreateAccountAliasCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { CreateAccountAliasRequest } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link CreateAccountAliasCommand}.
  */
 export interface CreateAccountAliasCommandInput extends CreateAccountAliasRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link CreateAccountAliasCommand}.
  */
 export interface CreateAccountAliasCommandOutput extends __MetadataBearer {
 }
 /**
+ * @public
  * <p>Creates an alias for your Amazon Web Services account. For information about using an Amazon Web Services account
  *             alias, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/AccountAlias.html">Using an
  *                 alias for your Amazon Web Services account ID</a> in the
@@ -28,6 +33,8 @@ export interface CreateAccountAliasCommandOutput extends __MetadataBearer {
  * const response = await client.send(command);
  * ```
  *
+ * @param CreateAccountAliasCommandInput - {@link CreateAccountAliasCommandInput}
+ * @returns {@link CreateAccountAliasCommandOutput}
  * @see {@link CreateAccountAliasCommandInput} for command's `input` shape.
  * @see {@link CreateAccountAliasCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -60,11 +67,20 @@ export interface CreateAccountAliasCommandOutput extends __MetadataBearer {
 export declare class CreateAccountAliasCommand extends $Command<CreateAccountAliasCommandInput, CreateAccountAliasCommandOutput, IAMClientResolvedConfig> {
     readonly input: CreateAccountAliasCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: CreateAccountAliasCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<CreateAccountAliasCommandInput, CreateAccountAliasCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }

package/dist-types/commands/CreateGroupCommand.d.ts

@@ -4,16 +4,21 @@ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
 import { CreateGroupRequest, CreateGroupResponse } from "../models/models_0";
 /**
+ * @public
+ *
  * The input for {@link CreateGroupCommand}.
  */
 export interface CreateGroupCommandInput extends CreateGroupRequest {
 }
 /**
+ * @public
+ *
  * The output of {@link CreateGroupCommand}.
  */
 export interface CreateGroupCommandOutput extends CreateGroupResponse, __MetadataBearer {
 }
 /**
+ * @public
  * <p>Creates a new group.</p>
  *          <p> For information about the number of groups you can create, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM and STS
  *                 quotas</a> in the <i>IAM User Guide</i>.</p>
@@ -27,6 +32,8 @@ export interface CreateGroupCommandOutput extends CreateGroupResponse, __Metadat
  * const response = await client.send(command);
  * ```
  *
+ * @param CreateGroupCommandInput - {@link CreateGroupCommandInput}
+ * @returns {@link CreateGroupCommandOutput}
  * @see {@link CreateGroupCommandInput} for command's `input` shape.
  * @see {@link CreateGroupCommandOutput} for command's `response` shape.
  * @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
@@ -74,11 +81,20 @@ export interface CreateGroupCommandOutput extends CreateGroupResponse, __Metadat
 export declare class CreateGroupCommand extends $Command<CreateGroupCommandInput, CreateGroupCommandOutput, IAMClientResolvedConfig> {
     readonly input: CreateGroupCommandInput;
     static getEndpointParameterInstructions(): EndpointParameterInstructions;
+    /**
+     * @public
+     */
     constructor(input: CreateGroupCommandInput);
     /**
      * @internal
      */
     resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: IAMClientResolvedConfig, options?: __HttpHandlerOptions): Handler<CreateGroupCommandInput, CreateGroupCommandOutput>;
+    /**
+     * @internal
+     */
     private serialize;
+    /**
+     * @internal
+     */
     private deserialize;
 }