@aws-sdk/client-iam 3.552.0 → 3.554.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist-cjs/index.js CHANGED
@@ -170,6 +170,7 @@ __export(src_exports, {
170
170
  MalformedCertificateException: () => MalformedCertificateException,
171
171
  MalformedPolicyDocumentException: () => MalformedPolicyDocumentException,
172
172
  NoSuchEntityException: () => NoSuchEntityException,
173
+ OpenIdIdpCommunicationErrorException: () => OpenIdIdpCommunicationErrorException,
173
174
  PasswordPolicyViolationException: () => PasswordPolicyViolationException,
174
175
  PermissionsBoundaryAttachmentType: () => PermissionsBoundaryAttachmentType,
175
176
  PolicyEvaluationDecisionType: () => PolicyEvaluationDecisionType,
@@ -664,6 +665,23 @@ var _ConcurrentModificationException = class _ConcurrentModificationException ex
664
665
  };
665
666
  __name(_ConcurrentModificationException, "ConcurrentModificationException");
666
667
  var ConcurrentModificationException = _ConcurrentModificationException;
668
+ var _OpenIdIdpCommunicationErrorException = class _OpenIdIdpCommunicationErrorException extends IAMServiceException {
669
+ /**
670
+ * @internal
671
+ */
672
+ constructor(opts) {
673
+ super({
674
+ name: "OpenIdIdpCommunicationErrorException",
675
+ $fault: "client",
676
+ ...opts
677
+ });
678
+ this.name = "OpenIdIdpCommunicationErrorException";
679
+ this.$fault = "client";
680
+ Object.setPrototypeOf(this, _OpenIdIdpCommunicationErrorException.prototype);
681
+ }
682
+ };
683
+ __name(_OpenIdIdpCommunicationErrorException, "OpenIdIdpCommunicationErrorException");
684
+ var OpenIdIdpCommunicationErrorException = _OpenIdIdpCommunicationErrorException;
667
685
  var _MalformedPolicyDocumentException = class _MalformedPolicyDocumentException extends IAMServiceException {
668
686
  /**
669
687
  * @internal
@@ -4582,6 +4600,9 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
4582
4600
  case "ConcurrentModification":
4583
4601
  case "com.amazonaws.iam#ConcurrentModificationException":
4584
4602
  throw await de_ConcurrentModificationExceptionRes(parsedOutput, context);
4603
+ case "OpenIdIdpCommunicationError":
4604
+ case "com.amazonaws.iam#OpenIdIdpCommunicationErrorException":
4605
+ throw await de_OpenIdIdpCommunicationErrorExceptionRes(parsedOutput, context);
4585
4606
  case "MalformedPolicyDocument":
4586
4607
  case "com.amazonaws.iam#MalformedPolicyDocumentException":
4587
4608
  throw await de_MalformedPolicyDocumentExceptionRes(parsedOutput, context);
@@ -4810,6 +4831,15 @@ var de_NoSuchEntityExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, co
4810
4831
  });
4811
4832
  return (0, import_smithy_client.decorateServiceException)(exception, body);
4812
4833
  }, "de_NoSuchEntityExceptionRes");
4834
+ var de_OpenIdIdpCommunicationErrorExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
4835
+ const body = parsedOutput.body;
4836
+ const deserialized = de_OpenIdIdpCommunicationErrorException(body.Error, context);
4837
+ const exception = new OpenIdIdpCommunicationErrorException({
4838
+ $metadata: deserializeMetadata(parsedOutput),
4839
+ ...deserialized
4840
+ });
4841
+ return (0, import_smithy_client.decorateServiceException)(exception, body);
4842
+ }, "de_OpenIdIdpCommunicationErrorExceptionRes");
4813
4843
  var de_PasswordPolicyViolationExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
4814
4844
  const body = parsedOutput.body;
4815
4845
  const deserialized = de_PasswordPolicyViolationException(body.Error, context);
@@ -8720,6 +8750,13 @@ var de_OpenIDConnectProviderListType = /* @__PURE__ */ __name((output, context)
8720
8750
  return de_OpenIDConnectProviderListEntry(entry, context);
8721
8751
  });
8722
8752
  }, "de_OpenIDConnectProviderListType");
8753
+ var de_OpenIdIdpCommunicationErrorException = /* @__PURE__ */ __name((output, context) => {
8754
+ const contents = {};
8755
+ if (output[_m] != null) {
8756
+ contents[_m] = (0, import_smithy_client.expectString)(output[_m]);
8757
+ }
8758
+ return contents;
8759
+ }, "de_OpenIdIdpCommunicationErrorException");
8723
8760
  var de_OrganizationsDecisionDetail = /* @__PURE__ */ __name((output, context) => {
8724
8761
  const contents = {};
8725
8762
  if (output[_ABO] != null) {
@@ -13371,6 +13408,7 @@ var waitUntilUserExists = /* @__PURE__ */ __name(async (params, input) => {
13371
13408
  InvalidUserTypeException,
13372
13409
  PasswordPolicyViolationException,
13373
13410
  ConcurrentModificationException,
13411
+ OpenIdIdpCommunicationErrorException,
13374
13412
  MalformedPolicyDocumentException,
13375
13413
  ServiceNotSupportedException,
13376
13414
  DeleteConflictException,
@@ -148,6 +148,18 @@ export class ConcurrentModificationException extends __BaseException {
148
148
  Object.setPrototypeOf(this, ConcurrentModificationException.prototype);
149
149
  }
150
150
  }
151
+ export class OpenIdIdpCommunicationErrorException extends __BaseException {
152
+ constructor(opts) {
153
+ super({
154
+ name: "OpenIdIdpCommunicationErrorException",
155
+ $fault: "client",
156
+ ...opts,
157
+ });
158
+ this.name = "OpenIdIdpCommunicationErrorException";
159
+ this.$fault = "client";
160
+ Object.setPrototypeOf(this, OpenIdIdpCommunicationErrorException.prototype);
161
+ }
162
+ }
151
163
  export class MalformedPolicyDocumentException extends __BaseException {
152
164
  constructor(opts) {
153
165
  super({
@@ -2,7 +2,7 @@ import { parseXmlBody as parseBody, parseXmlErrorBody as parseErrorBody } from "
2
2
  import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
3
3
  import { collectBody, decorateServiceException as __decorateServiceException, expectNonNull as __expectNonNull, expectString as __expectString, extendedEncodeURIComponent as __extendedEncodeURIComponent, getArrayIfSingleItem as __getArrayIfSingleItem, parseBoolean as __parseBoolean, parseRfc3339DateTimeWithOffset as __parseRfc3339DateTimeWithOffset, strictParseInt32 as __strictParseInt32, withBaseException, } from "@smithy/smithy-client";
4
4
  import { IAMServiceException as __BaseException } from "../models/IAMServiceException";
5
- import { ConcurrentModificationException, CredentialReportExpiredException, CredentialReportNotPresentException, CredentialReportNotReadyException, DeleteConflictException, EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, InvalidInputException, InvalidUserTypeException, LimitExceededException, MalformedPolicyDocumentException, NoSuchEntityException, PasswordPolicyViolationException, PolicyEvaluationException, PolicyNotAttachableException, ReportGenerationLimitExceededException, ServiceFailureException, ServiceNotSupportedException, UnmodifiableEntityException, UnrecognizedPublicKeyEncodingException, } from "../models/models_0";
5
+ import { ConcurrentModificationException, CredentialReportExpiredException, CredentialReportNotPresentException, CredentialReportNotReadyException, DeleteConflictException, EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, InvalidInputException, InvalidUserTypeException, LimitExceededException, MalformedPolicyDocumentException, NoSuchEntityException, OpenIdIdpCommunicationErrorException, PasswordPolicyViolationException, PolicyEvaluationException, PolicyNotAttachableException, ReportGenerationLimitExceededException, ServiceFailureException, ServiceNotSupportedException, UnmodifiableEntityException, UnrecognizedPublicKeyEncodingException, } from "../models/models_0";
6
6
  import { DuplicateCertificateException, DuplicateSSHPublicKeyException, InvalidCertificateException, InvalidPublicKeyException, KeyPairMismatchException, MalformedCertificateException, } from "../models/models_1";
7
7
  export const se_AddClientIDToOpenIDConnectProviderCommand = async (input, context) => {
8
8
  const headers = SHARED_HEADERS;
@@ -3472,6 +3472,9 @@ const de_CommandError = async (output, context) => {
3472
3472
  case "ConcurrentModification":
3473
3473
  case "com.amazonaws.iam#ConcurrentModificationException":
3474
3474
  throw await de_ConcurrentModificationExceptionRes(parsedOutput, context);
3475
+ case "OpenIdIdpCommunicationError":
3476
+ case "com.amazonaws.iam#OpenIdIdpCommunicationErrorException":
3477
+ throw await de_OpenIdIdpCommunicationErrorExceptionRes(parsedOutput, context);
3475
3478
  case "MalformedPolicyDocument":
3476
3479
  case "com.amazonaws.iam#MalformedPolicyDocumentException":
3477
3480
  throw await de_MalformedPolicyDocumentExceptionRes(parsedOutput, context);
@@ -3700,6 +3703,15 @@ const de_NoSuchEntityExceptionRes = async (parsedOutput, context) => {
3700
3703
  });
3701
3704
  return __decorateServiceException(exception, body);
3702
3705
  };
3706
+ const de_OpenIdIdpCommunicationErrorExceptionRes = async (parsedOutput, context) => {
3707
+ const body = parsedOutput.body;
3708
+ const deserialized = de_OpenIdIdpCommunicationErrorException(body.Error, context);
3709
+ const exception = new OpenIdIdpCommunicationErrorException({
3710
+ $metadata: deserializeMetadata(parsedOutput),
3711
+ ...deserialized,
3712
+ });
3713
+ return __decorateServiceException(exception, body);
3714
+ };
3703
3715
  const de_PasswordPolicyViolationExceptionRes = async (parsedOutput, context) => {
3704
3716
  const body = parsedOutput.body;
3705
3717
  const deserialized = de_PasswordPolicyViolationException(body.Error, context);
@@ -7675,6 +7687,13 @@ const de_OpenIDConnectProviderListType = (output, context) => {
7675
7687
  return de_OpenIDConnectProviderListEntry(entry, context);
7676
7688
  });
7677
7689
  };
7690
+ const de_OpenIdIdpCommunicationErrorException = (output, context) => {
7691
+ const contents = {};
7692
+ if (output[_m] != null) {
7693
+ contents[_m] = __expectString(output[_m]);
7694
+ }
7695
+ return contents;
7696
+ };
7678
7697
  const de_OrganizationsDecisionDetail = (output, context) => {
7679
7698
  const contents = {};
7680
7699
  if (output[_ABO] != null) {
@@ -28,7 +28,7 @@ declare const CreateInstanceProfileCommand_base: {
28
28
  /**
29
29
  * <p> Creates a new instance profile. For information about instance profiles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html">Using
30
30
  * roles for applications on Amazon EC2</a> in the
31
- * <i>IAM User Guide</i>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#ec2-instance-profile">Instance profiles</a> in the <i>Amazon EC2 User Guide</i>.</p>
31
+ * <i>IAM User Guide</i>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#ec2-instance-profile">Instance profiles</a> in the <i>Amazon EC2 User Guide</i>.</p>
32
32
  * <p> For information about the number of instance profiles you can create, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM object
33
33
  * quotas</a> in the <i>IAM User Guide</i>.</p>
34
34
  * @example
@@ -57,11 +57,11 @@ declare const CreateOpenIDConnectProviderCommand_base: {
57
57
  * Amazon Web Services.</p>
58
58
  * <note>
59
59
  * <p>Amazon Web Services secures communication with some OIDC identity providers (IdPs) through our library
60
- * of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
61
- * verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
62
- * configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
63
- * GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
64
- * endpoint.</p>
60
+ * of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
61
+ * verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
62
+ * configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
63
+ * GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
64
+ * endpoint.</p>
65
65
  * </note>
66
66
  * <note>
67
67
  * <p>The trust for the OIDC provider is derived from the IAM provider that this
@@ -79,7 +79,7 @@ declare const CreateOpenIDConnectProviderCommand_base: {
79
79
  * ClientIDList: [ // clientIDListType
80
80
  * "STRING_VALUE",
81
81
  * ],
82
- * ThumbprintList: [ // thumbprintListType // required
82
+ * ThumbprintList: [ // thumbprintListType
83
83
  * "STRING_VALUE",
84
84
  * ],
85
85
  * Tags: [ // tagListType
@@ -125,6 +125,9 @@ declare const CreateOpenIDConnectProviderCommand_base: {
125
125
  * <p>The request was rejected because it attempted to create resources beyond the current
126
126
  * Amazon Web Services account limits. The error message describes the limit exceeded.</p>
127
127
  *
128
+ * @throws {@link OpenIdIdpCommunicationErrorException} (client fault)
129
+ * <p>The request failed because IAM cannot connect to the OpenID Connect identity provider URL.</p>
130
+ *
128
131
  * @throws {@link ServiceFailureException} (server fault)
129
132
  * <p>The request processing has failed because of an unknown error, exception or
130
133
  * failure.</p>
@@ -46,8 +46,8 @@ declare const DeleteRoleCommand_base: {
46
46
  * </li>
47
47
  * </ul>
48
48
  * <important>
49
- * <p>Make sure that you do not have any Amazon EC2 instances running with the role you
50
- * are about to delete. Deleting a role or instance profile that is associated with a
49
+ * <p>Make sure that you do not have any Amazon EC2 instances running with the role you are
50
+ * about to delete. Deleting a role or instance profile that is associated with a
51
51
  * running instance will break any applications running on the instance.</p>
52
52
  * </important>
53
53
  * @example
@@ -26,12 +26,12 @@ declare const RemoveRoleFromInstanceProfileCommand_base: {
26
26
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
27
27
  };
28
28
  /**
29
- * <p>Removes the specified IAM role from the specified EC2 instance profile.</p>
29
+ * <p>Removes the specified IAM role from the specified Amazon EC2 instance profile.</p>
30
30
  * <important>
31
- * <p>Make sure that you do not have any Amazon EC2 instances running with the role you
32
- * are about to remove from the instance profile. Removing a role from an instance
33
- * profile that is associated with a running instance might break any applications
34
- * running on the instance.</p>
31
+ * <p>Make sure that you do not have any Amazon EC2 instances running with the role you are
32
+ * about to remove from the instance profile. Removing a role from an instance profile
33
+ * that is associated with a running instance might break any applications running on
34
+ * the instance.</p>
35
35
  * </important>
36
36
  * <p> For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html">IAM roles</a> in the
37
37
  * <i>IAM User Guide</i>. For more information about instance profiles,
@@ -1,7 +1,7 @@
1
1
  import { Command as $Command } from "@smithy/smithy-client";
2
2
  import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
3
  import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
4
- import { UntagInstanceProfileRequest } from "../models/models_0";
4
+ import { UntagInstanceProfileRequest } from "../models/models_1";
5
5
  /**
6
6
  * @public
7
7
  */
@@ -37,11 +37,11 @@ declare const UpdateOpenIDConnectProviderThumbprintCommand_base: {
37
37
  * updated.</p>
38
38
  * <note>
39
39
  * <p>Amazon Web Services secures communication with some OIDC identity providers (IdPs) through our library
40
- * of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
41
- * verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
42
- * configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
43
- * GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
44
- * endpoint.</p>
40
+ * of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
41
+ * verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
42
+ * configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
43
+ * GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
44
+ * endpoint.</p>
45
45
  * </note>
46
46
  * <note>
47
47
  * <p>Trust for the OIDC provider is derived from the provider certificate and is
@@ -1037,11 +1037,13 @@ export interface CreateOpenIDConnectProviderRequest {
1037
1037
  * provider's server certificates. Typically this list includes only one entry. However,
1038
1038
  * IAM lets you have up to five thumbprints for an OIDC provider. This lets you maintain
1039
1039
  * multiple thumbprints if the identity provider is rotating certificates.</p>
1040
+ * <p>This parameter is optional. If it is not included, IAM will retrieve and use the top
1041
+ * intermediate certificate authority (CA) thumbprint of the OpenID Connect identity
1042
+ * provider server certificate.</p>
1040
1043
  * <p>The server certificate thumbprint is the hex-encoded SHA-1 hash value of the X.509
1041
1044
  * certificate used by the domain where the OpenID Connect provider makes its keys
1042
1045
  * available. It is always a 40-character string.</p>
1043
- * <p>You must provide at least one thumbprint when creating an IAM OIDC provider. For
1044
- * example, assume that the OIDC provider is <code>server.example.com</code> and the
1046
+ * <p>For example, assume that the OIDC provider is <code>server.example.com</code> and the
1045
1047
  * provider stores its keys at https://keys.server.example.com/openid-connect. In that
1046
1048
  * case, the thumbprint string would be the hex-encoded SHA-1 hash value of the certificate
1047
1049
  * used by <code>https://keys.server.example.com.</code>
@@ -1051,7 +1053,7 @@ export interface CreateOpenIDConnectProviderRequest {
1051
1053
  * Guide</i>.</p>
1052
1054
  * @public
1053
1055
  */
1054
- ThumbprintList: string[] | undefined;
1056
+ ThumbprintList?: string[];
1055
1057
  /**
1056
1058
  * <p>A list of tags that you want to attach to the new IAM OpenID Connect (OIDC) provider.
1057
1059
  * Each tag consists of a key name and an associated value. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
@@ -1085,6 +1087,18 @@ export interface CreateOpenIDConnectProviderResponse {
1085
1087
  */
1086
1088
  Tags?: Tag[];
1087
1089
  }
1090
+ /**
1091
+ * <p>The request failed because IAM cannot connect to the OpenID Connect identity provider URL.</p>
1092
+ * @public
1093
+ */
1094
+ export declare class OpenIdIdpCommunicationErrorException extends __BaseException {
1095
+ readonly name: "OpenIdIdpCommunicationErrorException";
1096
+ readonly $fault: "client";
1097
+ /**
1098
+ * @internal
1099
+ */
1100
+ constructor(opts: __ExceptionOptionType<OpenIdIdpCommunicationErrorException, __BaseException>);
1101
+ }
1088
1102
  /**
1089
1103
  * @public
1090
1104
  */
@@ -7483,12 +7497,11 @@ export interface SimulateCustomPolicyRequest {
7483
7497
  * not match one of the following scenarios, then you can omit this parameter. The
7484
7498
  * following list shows each of the supported scenario values and the resources that you
7485
7499
  * must define to run the simulation.</p>
7486
- * <p>Each of the EC2 scenarios requires that you specify instance, image, and security
7500
+ * <p>Each of the Amazon EC2 scenarios requires that you specify instance, image, and security
7487
7501
  * group resources. If your scenario includes an EBS volume, then you must specify that
7488
- * volume as a resource. If the EC2 scenario includes VPC, then you must supply the network
7489
- * interface resource. If it includes an IP subnet, then you must specify the subnet
7490
- * resource. For more information on the EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User
7491
- * Guide</i>.</p>
7502
+ * volume as a resource. If the Amazon EC2 scenario includes VPC, then you must supply the
7503
+ * network interface resource. If it includes an IP subnet, then you must specify the
7504
+ * subnet resource. For more information on the Amazon EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User Guide</i>.</p>
7492
7505
  * <ul>
7493
7506
  * <li>
7494
7507
  * <p>
@@ -7984,12 +7997,11 @@ export interface SimulatePrincipalPolicyRequest {
7984
7997
  * not match one of the following scenarios, then you can omit this parameter. The
7985
7998
  * following list shows each of the supported scenario values and the resources that you
7986
7999
  * must define to run the simulation.</p>
7987
- * <p>Each of the EC2 scenarios requires that you specify instance, image, and security
8000
+ * <p>Each of the Amazon EC2 scenarios requires that you specify instance, image, and security
7988
8001
  * group resources. If your scenario includes an EBS volume, then you must specify that
7989
- * volume as a resource. If the EC2 scenario includes VPC, then you must supply the network
7990
- * interface resource. If it includes an IP subnet, then you must specify the subnet
7991
- * resource. For more information on the EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User
7992
- * Guide</i>.</p>
8002
+ * volume as a resource. If the Amazon EC2 scenario includes VPC, then you must supply the
8003
+ * network interface resource. If it includes an IP subnet, then you must specify the
8004
+ * subnet resource. For more information on the Amazon EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User Guide</i>.</p>
7993
8005
  * <ul>
7994
8006
  * <li>
7995
8007
  * <p>
@@ -8183,24 +8195,6 @@ export interface TagUserRequest {
8183
8195
  */
8184
8196
  Tags: Tag[] | undefined;
8185
8197
  }
8186
- /**
8187
- * @public
8188
- */
8189
- export interface UntagInstanceProfileRequest {
8190
- /**
8191
- * <p>The name of the IAM instance profile from which you want to remove tags.</p>
8192
- * <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
8193
- * characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
8194
- * @public
8195
- */
8196
- InstanceProfileName: string | undefined;
8197
- /**
8198
- * <p>A list of key names as a simple array of strings. The tags with matching keys are
8199
- * removed from the specified instance profile.</p>
8200
- * @public
8201
- */
8202
- TagKeys: string[] | undefined;
8203
- }
8204
8198
  /**
8205
8199
  * @internal
8206
8200
  */
@@ -1,6 +1,24 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
2
  import { IAMServiceException as __BaseException } from "./IAMServiceException";
3
3
  import { Role, ServerCertificateMetadata, SigningCertificate, SSHPublicKey, StatusType, Tag } from "./models_0";
4
+ /**
5
+ * @public
6
+ */
7
+ export interface UntagInstanceProfileRequest {
8
+ /**
9
+ * <p>The name of the IAM instance profile from which you want to remove tags.</p>
10
+ * <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
11
+ * characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
12
+ * @public
13
+ */
14
+ InstanceProfileName: string | undefined;
15
+ /**
16
+ * <p>A list of key names as a simple array of strings. The tags with matching keys are
17
+ * removed from the specified instance profile.</p>
18
+ * @public
19
+ */
20
+ TagKeys: string[] | undefined;
21
+ }
4
22
  /**
5
23
  * @public
6
24
  */
@@ -406,6 +424,10 @@ export interface UpdateRoleRequest {
406
424
  * or the <code>assume-role*</code> CLI operations but does not apply when you use those
407
425
  * operations to create a console URL. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html">Using IAM
408
426
  * roles</a> in the <i>IAM User Guide</i>.</p>
427
+ * <note>
428
+ * <p>IAM role credentials provided by Amazon EC2 instances assigned to the role are not
429
+ * subject to the specified maximum session duration.</p>
430
+ * </note>
409
431
  * @public
410
432
  */
411
433
  MaxSessionDuration?: number;
@@ -5,7 +5,7 @@ import {
5
5
  ServiceInputTypes,
6
6
  ServiceOutputTypes,
7
7
  } from "../IAMClient";
8
- import { UntagInstanceProfileRequest } from "../models/models_0";
8
+ import { UntagInstanceProfileRequest } from "../models/models_1";
9
9
  export { __MetadataBearer, $Command };
10
10
  export interface UntagInstanceProfileCommandInput
11
11
  extends UntagInstanceProfileRequest {}
@@ -248,13 +248,23 @@ export interface CreateLoginProfileResponse {
248
248
  export interface CreateOpenIDConnectProviderRequest {
249
249
  Url: string | undefined;
250
250
  ClientIDList?: string[];
251
- ThumbprintList: string[] | undefined;
251
+ ThumbprintList?: string[];
252
252
  Tags?: Tag[];
253
253
  }
254
254
  export interface CreateOpenIDConnectProviderResponse {
255
255
  OpenIDConnectProviderArn?: string;
256
256
  Tags?: Tag[];
257
257
  }
258
+ export declare class OpenIdIdpCommunicationErrorException extends __BaseException {
259
+ readonly name: "OpenIdIdpCommunicationErrorException";
260
+ readonly $fault: "client";
261
+ constructor(
262
+ opts: __ExceptionOptionType<
263
+ OpenIdIdpCommunicationErrorException,
264
+ __BaseException
265
+ >
266
+ );
267
+ }
258
268
  export interface CreatePolicyRequest {
259
269
  PolicyName: string | undefined;
260
270
  Path?: string;
@@ -1613,10 +1623,6 @@ export interface TagUserRequest {
1613
1623
  UserName: string | undefined;
1614
1624
  Tags: Tag[] | undefined;
1615
1625
  }
1616
- export interface UntagInstanceProfileRequest {
1617
- InstanceProfileName: string | undefined;
1618
- TagKeys: string[] | undefined;
1619
- }
1620
1626
  export declare const AccessKeyFilterSensitiveLog: (obj: AccessKey) => any;
1621
1627
  export declare const ChangePasswordRequestFilterSensitiveLog: (
1622
1628
  obj: ChangePasswordRequest
@@ -8,6 +8,10 @@ import {
8
8
  StatusType,
9
9
  Tag,
10
10
  } from "./models_0";
11
+ export interface UntagInstanceProfileRequest {
12
+ InstanceProfileName: string | undefined;
13
+ TagKeys: string[] | undefined;
14
+ }
11
15
  export interface UntagMFADeviceRequest {
12
16
  SerialNumber: string | undefined;
13
17
  TagKeys: string[] | undefined;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-iam",
3
3
  "description": "AWS SDK for JavaScript Iam Client for Node.js, Browser and React Native",
4
- "version": "3.552.0",
4
+ "version": "3.554.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-iam",
@@ -20,9 +20,9 @@
20
20
  "dependencies": {
21
21
  "@aws-crypto/sha256-browser": "3.0.0",
22
22
  "@aws-crypto/sha256-js": "3.0.0",
23
- "@aws-sdk/client-sts": "3.552.0",
24
- "@aws-sdk/core": "3.552.0",
25
- "@aws-sdk/credential-provider-node": "3.552.0",
23
+ "@aws-sdk/client-sts": "3.554.0",
24
+ "@aws-sdk/core": "3.554.0",
25
+ "@aws-sdk/credential-provider-node": "3.554.0",
26
26
  "@aws-sdk/middleware-host-header": "3.535.0",
27
27
  "@aws-sdk/middleware-logger": "3.535.0",
28
28
  "@aws-sdk/middleware-recursion-detection": "3.535.0",