@aws-sdk/client-iam 3.552.0 → 3.556.0

package/dist-cjs/index.js

@@ -170,6 +170,7 @@ __export(src_exports, {
   MalformedCertificateException: () => MalformedCertificateException,
   MalformedPolicyDocumentException: () => MalformedPolicyDocumentException,
   NoSuchEntityException: () => NoSuchEntityException,
+  OpenIdIdpCommunicationErrorException: () => OpenIdIdpCommunicationErrorException,
   PasswordPolicyViolationException: () => PasswordPolicyViolationException,
   PermissionsBoundaryAttachmentType: () => PermissionsBoundaryAttachmentType,
   PolicyEvaluationDecisionType: () => PolicyEvaluationDecisionType,
@@ -664,6 +665,23 @@ var _ConcurrentModificationException = class _ConcurrentModificationException ex
 };
 __name(_ConcurrentModificationException, "ConcurrentModificationException");
 var ConcurrentModificationException = _ConcurrentModificationException;
+var _OpenIdIdpCommunicationErrorException = class _OpenIdIdpCommunicationErrorException extends IAMServiceException {
+  /**
+   * @internal
+   */
+  constructor(opts) {
+    super({
+      name: "OpenIdIdpCommunicationErrorException",
+      $fault: "client",
+      ...opts
+    });
+    this.name = "OpenIdIdpCommunicationErrorException";
+    this.$fault = "client";
+    Object.setPrototypeOf(this, _OpenIdIdpCommunicationErrorException.prototype);
+  }
+};
+__name(_OpenIdIdpCommunicationErrorException, "OpenIdIdpCommunicationErrorException");
+var OpenIdIdpCommunicationErrorException = _OpenIdIdpCommunicationErrorException;
 var _MalformedPolicyDocumentException = class _MalformedPolicyDocumentException extends IAMServiceException {
   /**
    * @internal
@@ -4582,6 +4600,9 @@ var de_CommandError = /* @__PURE__ */ __name(async (output, context) => {
     case "ConcurrentModification":
     case "com.amazonaws.iam#ConcurrentModificationException":
       throw await de_ConcurrentModificationExceptionRes(parsedOutput, context);
+    case "OpenIdIdpCommunicationError":
+    case "com.amazonaws.iam#OpenIdIdpCommunicationErrorException":
+      throw await de_OpenIdIdpCommunicationErrorExceptionRes(parsedOutput, context);
     case "MalformedPolicyDocument":
     case "com.amazonaws.iam#MalformedPolicyDocumentException":
       throw await de_MalformedPolicyDocumentExceptionRes(parsedOutput, context);
@@ -4810,6 +4831,15 @@ var de_NoSuchEntityExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, co
   });
   return (0, import_smithy_client.decorateServiceException)(exception, body);
 }, "de_NoSuchEntityExceptionRes");
+var de_OpenIdIdpCommunicationErrorExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
+  const body = parsedOutput.body;
+  const deserialized = de_OpenIdIdpCommunicationErrorException(body.Error, context);
+  const exception = new OpenIdIdpCommunicationErrorException({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...deserialized
+  });
+  return (0, import_smithy_client.decorateServiceException)(exception, body);
+}, "de_OpenIdIdpCommunicationErrorExceptionRes");
 var de_PasswordPolicyViolationExceptionRes = /* @__PURE__ */ __name(async (parsedOutput, context) => {
   const body = parsedOutput.body;
   const deserialized = de_PasswordPolicyViolationException(body.Error, context);
@@ -8720,6 +8750,13 @@ var de_OpenIDConnectProviderListType = /* @__PURE__ */ __name((output, context)
     return de_OpenIDConnectProviderListEntry(entry, context);
   });
 }, "de_OpenIDConnectProviderListType");
+var de_OpenIdIdpCommunicationErrorException = /* @__PURE__ */ __name((output, context) => {
+  const contents = {};
+  if (output[_m] != null) {
+    contents[_m] = (0, import_smithy_client.expectString)(output[_m]);
+  }
+  return contents;
+}, "de_OpenIdIdpCommunicationErrorException");
 var de_OrganizationsDecisionDetail = /* @__PURE__ */ __name((output, context) => {
   const contents = {};
   if (output[_ABO] != null) {
@@ -13371,6 +13408,7 @@ var waitUntilUserExists = /* @__PURE__ */ __name(async (params, input) => {
   InvalidUserTypeException,
   PasswordPolicyViolationException,
   ConcurrentModificationException,
+  OpenIdIdpCommunicationErrorException,
   MalformedPolicyDocumentException,
   ServiceNotSupportedException,
   DeleteConflictException,

package/dist-es/models/models_0.js

@@ -148,6 +148,18 @@ export class ConcurrentModificationException extends __BaseException {
         Object.setPrototypeOf(this, ConcurrentModificationException.prototype);
     }
 }
+export class OpenIdIdpCommunicationErrorException extends __BaseException {
+    constructor(opts) {
+        super({
+            name: "OpenIdIdpCommunicationErrorException",
+            $fault: "client",
+            ...opts,
+        });
+        this.name = "OpenIdIdpCommunicationErrorException";
+        this.$fault = "client";
+        Object.setPrototypeOf(this, OpenIdIdpCommunicationErrorException.prototype);
+    }
+}
 export class MalformedPolicyDocumentException extends __BaseException {
     constructor(opts) {
         super({

package/dist-es/protocols/Aws_query.js

@@ -2,7 +2,7 @@ import { parseXmlBody as parseBody, parseXmlErrorBody as parseErrorBody } from "
 import { HttpRequest as __HttpRequest } from "@smithy/protocol-http";
 import { collectBody, decorateServiceException as __decorateServiceException, expectNonNull as __expectNonNull, expectString as __expectString, extendedEncodeURIComponent as __extendedEncodeURIComponent, getArrayIfSingleItem as __getArrayIfSingleItem, parseBoolean as __parseBoolean, parseRfc3339DateTimeWithOffset as __parseRfc3339DateTimeWithOffset, strictParseInt32 as __strictParseInt32, withBaseException, } from "@smithy/smithy-client";
 import { IAMServiceException as __BaseException } from "../models/IAMServiceException";
-import { ConcurrentModificationException, CredentialReportExpiredException, CredentialReportNotPresentException, CredentialReportNotReadyException, DeleteConflictException, EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, InvalidInputException, InvalidUserTypeException, LimitExceededException, MalformedPolicyDocumentException, NoSuchEntityException, PasswordPolicyViolationException, PolicyEvaluationException, PolicyNotAttachableException, ReportGenerationLimitExceededException, ServiceFailureException, ServiceNotSupportedException, UnmodifiableEntityException, UnrecognizedPublicKeyEncodingException, } from "../models/models_0";
+import { ConcurrentModificationException, CredentialReportExpiredException, CredentialReportNotPresentException, CredentialReportNotReadyException, DeleteConflictException, EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, InvalidInputException, InvalidUserTypeException, LimitExceededException, MalformedPolicyDocumentException, NoSuchEntityException, OpenIdIdpCommunicationErrorException, PasswordPolicyViolationException, PolicyEvaluationException, PolicyNotAttachableException, ReportGenerationLimitExceededException, ServiceFailureException, ServiceNotSupportedException, UnmodifiableEntityException, UnrecognizedPublicKeyEncodingException, } from "../models/models_0";
 import { DuplicateCertificateException, DuplicateSSHPublicKeyException, InvalidCertificateException, InvalidPublicKeyException, KeyPairMismatchException, MalformedCertificateException, } from "../models/models_1";
 export const se_AddClientIDToOpenIDConnectProviderCommand = async (input, context) => {
     const headers = SHARED_HEADERS;
@@ -3472,6 +3472,9 @@ const de_CommandError = async (output, context) => {
         case "ConcurrentModification":
         case "com.amazonaws.iam#ConcurrentModificationException":
             throw await de_ConcurrentModificationExceptionRes(parsedOutput, context);
+        case "OpenIdIdpCommunicationError":
+        case "com.amazonaws.iam#OpenIdIdpCommunicationErrorException":
+            throw await de_OpenIdIdpCommunicationErrorExceptionRes(parsedOutput, context);
         case "MalformedPolicyDocument":
         case "com.amazonaws.iam#MalformedPolicyDocumentException":
             throw await de_MalformedPolicyDocumentExceptionRes(parsedOutput, context);
@@ -3700,6 +3703,15 @@ const de_NoSuchEntityExceptionRes = async (parsedOutput, context) => {
     });
     return __decorateServiceException(exception, body);
 };
+const de_OpenIdIdpCommunicationErrorExceptionRes = async (parsedOutput, context) => {
+    const body = parsedOutput.body;
+    const deserialized = de_OpenIdIdpCommunicationErrorException(body.Error, context);
+    const exception = new OpenIdIdpCommunicationErrorException({
+        $metadata: deserializeMetadata(parsedOutput),
+        ...deserialized,
+    });
+    return __decorateServiceException(exception, body);
+};
 const de_PasswordPolicyViolationExceptionRes = async (parsedOutput, context) => {
     const body = parsedOutput.body;
     const deserialized = de_PasswordPolicyViolationException(body.Error, context);
@@ -7675,6 +7687,13 @@ const de_OpenIDConnectProviderListType = (output, context) => {
         return de_OpenIDConnectProviderListEntry(entry, context);
     });
 };
+const de_OpenIdIdpCommunicationErrorException = (output, context) => {
+    const contents = {};
+    if (output[_m] != null) {
+        contents[_m] = __expectString(output[_m]);
+    }
+    return contents;
+};
 const de_OrganizationsDecisionDetail = (output, context) => {
     const contents = {};
     if (output[_ABO] != null) {

package/dist-types/commands/CreateInstanceProfileCommand.d.ts

@@ -28,7 +28,7 @@ declare const CreateInstanceProfileCommand_base: {
 /**
  * <p> Creates a new instance profile. For information about instance profiles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2.html">Using
  *                 roles for applications on Amazon EC2</a> in the
- *                 <i>IAM User Guide</i>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#ec2-instance-profile">Instance profiles</a> in the <i>Amazon EC2 User Guide</i>.</p>
+ *             <i>IAM User Guide</i>, and <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html#ec2-instance-profile">Instance profiles</a> in the <i>Amazon EC2 User Guide</i>.</p>
  *          <p> For information about the number of instance profiles you can create, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html">IAM object
  *                 quotas</a> in the <i>IAM User Guide</i>.</p>
  * @example

package/dist-types/commands/CreateOpenIDConnectProviderCommand.d.ts

@@ -57,11 +57,11 @@ declare const CreateOpenIDConnectProviderCommand_base: {
  *             Amazon Web Services.</p>
  *          <note>
  *             <p>Amazon Web Services secures communication with some OIDC identity providers (IdPs) through our library
- *       of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
- *       verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
- *       configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
- *       GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
- *       endpoint.</p>
+ *           of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
+ *           verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
+ *           configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
+ *           GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
+ *           endpoint.</p>
  *          </note>
  *          <note>
  *             <p>The trust for the OIDC provider is derived from the IAM provider that this
@@ -79,7 +79,7 @@ declare const CreateOpenIDConnectProviderCommand_base: {
  *   ClientIDList: [ // clientIDListType
  *     "STRING_VALUE",
  *   ],
- *   ThumbprintList: [ // thumbprintListType // required
+ *   ThumbprintList: [ // thumbprintListType
  *     "STRING_VALUE",
  *   ],
  *   Tags: [ // tagListType
@@ -125,6 +125,9 @@ declare const CreateOpenIDConnectProviderCommand_base: {
  *  <p>The request was rejected because it attempted to create resources beyond the current
  *       Amazon Web Services account limits. The error message describes the limit exceeded.</p>
  *
+ * @throws {@link OpenIdIdpCommunicationErrorException} (client fault)
+ *  <p>The request failed because IAM cannot connect to the OpenID Connect identity provider URL.</p>
+ *
  * @throws {@link ServiceFailureException} (server fault)
  *  <p>The request processing has failed because of an unknown error, exception or
  *       failure.</p>

package/dist-types/commands/DeleteRoleCommand.d.ts

@@ -46,8 +46,8 @@ declare const DeleteRoleCommand_base: {
  *             </li>
  *          </ul>
  *          <important>
- *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you
- *                 are about to delete. Deleting a role or instance profile that is associated with a
+ *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you are
+ *                 about to delete. Deleting a role or instance profile that is associated with a
  *                 running instance will break any applications running on the instance.</p>
  *          </important>
  * @example

package/dist-types/commands/RemoveRoleFromInstanceProfileCommand.d.ts

@@ -26,12 +26,12 @@ declare const RemoveRoleFromInstanceProfileCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Removes the specified IAM role from the specified EC2 instance profile.</p>
+ * <p>Removes the specified IAM role from the specified Amazon EC2 instance profile.</p>
  *          <important>
- *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you
- *                 are about to remove from the instance profile. Removing a role from an instance
- *                 profile that is associated with a running instance might break any applications
- *                 running on the instance.</p>
+ *             <p>Make sure that you do not have any Amazon EC2 instances running with the role you are
+ *                 about to remove from the instance profile. Removing a role from an instance profile
+ *                 that is associated with a running instance might break any applications running on
+ *                 the instance.</p>
  *          </important>
  *          <p> For more information about roles, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html">IAM roles</a> in the
  *                 <i>IAM User Guide</i>. For more information about instance profiles,

package/dist-types/commands/UntagInstanceProfileCommand.d.ts

@@ -1,7 +1,7 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
-import { UntagInstanceProfileRequest } from "../models/models_0";
+import { UntagInstanceProfileRequest } from "../models/models_1";
 /**
  * @public
  */

package/dist-types/commands/UpdateOpenIDConnectProviderThumbprintCommand.d.ts

@@ -37,11 +37,11 @@ declare const UpdateOpenIDConnectProviderThumbprintCommand_base: {
  *             updated.</p>
  *          <note>
  *             <p>Amazon Web Services secures communication with some OIDC identity providers (IdPs) through our library
- *       of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
- *       verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
- *       configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
- *       GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
- *       endpoint.</p>
+ *           of trusted root certificate authorities (CAs) instead of using a certificate thumbprint to
+ *           verify your IdP server certificate. In these cases, your legacy thumbprint remains in your
+ *           configuration, but is no longer used for validation. These OIDC IdPs include Auth0, GitHub,
+ *           GitLab, Google, and those that use an Amazon S3 bucket to host a JSON Web Key Set (JWKS)
+ *           endpoint.</p>
  *          </note>
  *          <note>
  *             <p>Trust for the OIDC provider is derived from the provider certificate and is

package/dist-types/models/models_0.d.ts

@@ -1037,11 +1037,13 @@ export interface CreateOpenIDConnectProviderRequest {
      *             provider's server certificates. Typically this list includes only one entry. However,
      *             IAM lets you have up to five thumbprints for an OIDC provider. This lets you maintain
      *             multiple thumbprints if the identity provider is rotating certificates.</p>
+     *          <p>This parameter is optional. If it is not included, IAM will retrieve and use the top
+     *             intermediate certificate authority (CA) thumbprint of the OpenID Connect identity
+     *             provider server certificate.</p>
      *          <p>The server certificate thumbprint is the hex-encoded SHA-1 hash value of the X.509
      *             certificate used by the domain where the OpenID Connect provider makes its keys
      *             available. It is always a 40-character string.</p>
-     *          <p>You must provide at least one thumbprint when creating an IAM OIDC provider. For
-     *             example, assume that the OIDC provider is <code>server.example.com</code> and the
+     *          <p>For example, assume that the OIDC provider is <code>server.example.com</code> and the
      *             provider stores its keys at https://keys.server.example.com/openid-connect. In that
      *             case, the thumbprint string would be the hex-encoded SHA-1 hash value of the certificate
      *             used by <code>https://keys.server.example.com.</code>
@@ -1051,7 +1053,7 @@ export interface CreateOpenIDConnectProviderRequest {
      *                 Guide</i>.</p>
      * @public
      */
-    ThumbprintList: string[] | undefined;
+    ThumbprintList?: string[];
     /**
      * <p>A list of tags that you want to attach to the new IAM OpenID Connect (OIDC) provider.
      *       Each tag consists of a key name and an associated value. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
@@ -1085,6 +1087,18 @@ export interface CreateOpenIDConnectProviderResponse {
      */
     Tags?: Tag[];
 }
+/**
+ * <p>The request failed because IAM cannot connect to the OpenID Connect identity provider URL.</p>
+ * @public
+ */
+export declare class OpenIdIdpCommunicationErrorException extends __BaseException {
+    readonly name: "OpenIdIdpCommunicationErrorException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<OpenIdIdpCommunicationErrorException, __BaseException>);
+}
 /**
  * @public
  */
@@ -7483,12 +7497,11 @@ export interface SimulateCustomPolicyRequest {
      *             not match one of the following scenarios, then you can omit this parameter. The
      *             following list shows each of the supported scenario values and the resources that you
      *             must define to run the simulation.</p>
-     *          <p>Each of the EC2 scenarios requires that you specify instance, image, and security
+     *          <p>Each of the Amazon EC2 scenarios requires that you specify instance, image, and security
      *             group resources. If your scenario includes an EBS volume, then you must specify that
-     *             volume as a resource. If the EC2 scenario includes VPC, then you must supply the network
-     *             interface resource. If it includes an IP subnet, then you must specify the subnet
-     *             resource. For more information on the EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User
-     *             Guide</i>.</p>
+     *             volume as a resource. If the Amazon EC2 scenario includes VPC, then you must supply the
+     *             network interface resource. If it includes an IP subnet, then you must specify the
+     *             subnet resource. For more information on the Amazon EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User Guide</i>.</p>
      *          <ul>
      *             <li>
      *                <p>
@@ -7984,12 +7997,11 @@ export interface SimulatePrincipalPolicyRequest {
      *             not match one of the following scenarios, then you can omit this parameter. The
      *             following list shows each of the supported scenario values and the resources that you
      *             must define to run the simulation.</p>
-     *          <p>Each of the EC2 scenarios requires that you specify instance, image, and security
+     *          <p>Each of the Amazon EC2 scenarios requires that you specify instance, image, and security
      *             group resources. If your scenario includes an EBS volume, then you must specify that
-     *             volume as a resource. If the EC2 scenario includes VPC, then you must supply the network
-     *             interface resource. If it includes an IP subnet, then you must specify the subnet
-     *             resource. For more information on the EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User
-     *             Guide</i>.</p>
+     *             volume as a resource. If the Amazon EC2 scenario includes VPC, then you must supply the
+     *             network interface resource. If it includes an IP subnet, then you must specify the
+     *             subnet resource. For more information on the Amazon EC2 scenario options, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-supported-platforms.html">Supported platforms</a> in the <i>Amazon EC2 User Guide</i>.</p>
      *          <ul>
      *             <li>
      *                <p>
@@ -8183,24 +8195,6 @@ export interface TagUserRequest {
      */
     Tags: Tag[] | undefined;
 }
-/**
- * @public
- */
-export interface UntagInstanceProfileRequest {
-    /**
-     * <p>The name of the IAM instance profile from which you want to remove tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    InstanceProfileName: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified instance profile.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
 /**
  * @internal
  */

package/dist-types/models/models_1.d.ts

@@ -1,6 +1,24 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
 import { IAMServiceException as __BaseException } from "./IAMServiceException";
 import { Role, ServerCertificateMetadata, SigningCertificate, SSHPublicKey, StatusType, Tag } from "./models_0";
+/**
+ * @public
+ */
+export interface UntagInstanceProfileRequest {
+    /**
+     * <p>The name of the IAM instance profile from which you want to remove tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    InstanceProfileName: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified instance profile.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
 /**
  * @public
  */
@@ -406,6 +424,10 @@ export interface UpdateRoleRequest {
      *             or the <code>assume-role*</code> CLI operations but does not apply when you use those
      *             operations to create a console URL. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html">Using IAM
      *                 roles</a> in the <i>IAM User Guide</i>.</p>
+     *          <note>
+     *             <p>IAM role credentials provided by Amazon EC2 instances assigned to the role are not
+     *                 subject to the specified maximum session duration.</p>
+     *          </note>
      * @public
      */
     MaxSessionDuration?: number;

package/dist-types/ts3.4/commands/UntagInstanceProfileCommand.d.ts

@@ -5,7 +5,7 @@ import {
   ServiceInputTypes,
   ServiceOutputTypes,
 } from "../IAMClient";
-import { UntagInstanceProfileRequest } from "../models/models_0";
+import { UntagInstanceProfileRequest } from "../models/models_1";
 export { __MetadataBearer, $Command };
 export interface UntagInstanceProfileCommandInput
   extends UntagInstanceProfileRequest {}

package/dist-types/ts3.4/models/models_0.d.ts

@@ -248,13 +248,23 @@ export interface CreateLoginProfileResponse {
 export interface CreateOpenIDConnectProviderRequest {
   Url: string | undefined;
   ClientIDList?: string[];
-  ThumbprintList: string[] | undefined;
+  ThumbprintList?: string[];
   Tags?: Tag[];
 }
 export interface CreateOpenIDConnectProviderResponse {
   OpenIDConnectProviderArn?: string;
   Tags?: Tag[];
 }
+export declare class OpenIdIdpCommunicationErrorException extends __BaseException {
+  readonly name: "OpenIdIdpCommunicationErrorException";
+  readonly $fault: "client";
+  constructor(
+    opts: __ExceptionOptionType<
+      OpenIdIdpCommunicationErrorException,
+      __BaseException
+    >
+  );
+}
 export interface CreatePolicyRequest {
   PolicyName: string | undefined;
   Path?: string;
@@ -1613,10 +1623,6 @@ export interface TagUserRequest {
   UserName: string | undefined;
   Tags: Tag[] | undefined;
 }
-export interface UntagInstanceProfileRequest {
-  InstanceProfileName: string | undefined;
-  TagKeys: string[] | undefined;
-}
 export declare const AccessKeyFilterSensitiveLog: (obj: AccessKey) => any;
 export declare const ChangePasswordRequestFilterSensitiveLog: (
   obj: ChangePasswordRequest

package/dist-types/ts3.4/models/models_1.d.ts

@@ -8,6 +8,10 @@ import {
   StatusType,
   Tag,
 } from "./models_0";
+export interface UntagInstanceProfileRequest {
+  InstanceProfileName: string | undefined;
+  TagKeys: string[] | undefined;
+}
 export interface UntagMFADeviceRequest {
   SerialNumber: string | undefined;
   TagKeys: string[] | undefined;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-iam",
   "description": "AWS SDK for JavaScript Iam Client for Node.js, Browser and React Native",
-  "version": "3.552.0",
+  "version": "3.556.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-iam",
@@ -20,9 +20,9 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.552.0",
-    "@aws-sdk/core": "3.552.0",
-    "@aws-sdk/credential-provider-node": "3.552.0",
+    "@aws-sdk/client-sts": "3.556.0",
+    "@aws-sdk/core": "3.556.0",
+    "@aws-sdk/credential-provider-node": "3.556.0",
     "@aws-sdk/middleware-host-header": "3.535.0",
     "@aws-sdk/middleware-logger": "3.535.0",
     "@aws-sdk/middleware-recursion-detection": "3.535.0",