@aws-sdk/client-signin 3.1156.0 → 3.1157.0

package/dist-types/commands/CreateOAuth2TokenCommand.d.ts

@@ -24,34 +24,7 @@ declare const CreateOAuth2TokenCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * CreateOAuth2Token API
- *
- * Path: /v1/token
- * Request Method: POST
- * Content-Type: application/json or application/x-www-form-urlencoded
- *
- * This API implements OAuth 2.0 flows for AWS Sign-In CLI clients, supporting both:
- * 1. Authorization code redemption (grant_type=authorization_code) - NOT idempotent
- * 2. Token refresh (grant_type=refresh_token) - Idempotent within token validity window
- *
- * The operation behavior is determined by the grant_type parameter in the request body:
- *
- * **Authorization Code Flow (NOT Idempotent):**
- * - JSON or form-encoded body with client_id, grant_type=authorization_code, code, redirect_uri, code_verifier
- * - Returns access_token, token_type, expires_in, refresh_token, and id_token
- * - Each authorization code can only be used ONCE for security (prevents replay attacks)
- *
- * **Token Refresh Flow (Idempotent):**
- * - JSON or form-encoded body with client_id, grant_type=refresh_token, refresh_token
- * - Returns access_token, token_type, expires_in, and refresh_token (no id_token)
- * - Multiple calls with same refresh_token return consistent results within validity window
- *
- * Authentication and authorization:
- * - Confidential clients: sigv4 signing required with signin:ExchangeToken permissions
- * - CLI clients (public): authn/authz skipped based on client_id & grant_type
- *
- * Note: This operation cannot be marked as @idempotent because it handles both idempotent
- * (token refresh) and non-idempotent (auth code redemption) flows in a single endpoint.
+ * Exchanges an authorization code or refresh token for an OAuth 2.0 access token and refresh token.
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -95,43 +68,16 @@ declare const CreateOAuth2TokenCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/CreateOAuth2TokenWithIAMCommand.d.ts

@@ -24,8 +24,7 @@ declare const CreateOAuth2TokenWithIAMCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * Grants permission to exchange client credentials for an OAuth 2.0 access token
- * scoped to a resource that can be used to access AWS services from applications
+ * Exchanges client credentials for an OAuth 2.0 access token scoped to a resource, which you can use to access AWS services from applications.
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -55,43 +54,16 @@ declare const CreateOAuth2TokenWithIAMCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/CreateOAuth2TokenWithTokenExchangeCommand.d.ts

@@ -0,0 +1,96 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { CreateOAuth2TokenWithTokenExchangeRequest, CreateOAuth2TokenWithTokenExchangeResponse } from "../models/models_0";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link CreateOAuth2TokenWithTokenExchangeCommand}.
+ */
+export interface CreateOAuth2TokenWithTokenExchangeCommandInput extends CreateOAuth2TokenWithTokenExchangeRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link CreateOAuth2TokenWithTokenExchangeCommand}.
+ */
+export interface CreateOAuth2TokenWithTokenExchangeCommandOutput extends CreateOAuth2TokenWithTokenExchangeResponse, __MetadataBearer {
+}
+declare const CreateOAuth2TokenWithTokenExchangeCommand_base: {
+    new (input: CreateOAuth2TokenWithTokenExchangeCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithTokenExchangeCommandInput, CreateOAuth2TokenWithTokenExchangeCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: CreateOAuth2TokenWithTokenExchangeCommandInput): import("@smithy/core/client").CommandImpl<CreateOAuth2TokenWithTokenExchangeCommandInput, CreateOAuth2TokenWithTokenExchangeCommandOutput, import("..").SigninClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * Exchanges a supported token for an OAuth 2.0 access token scoped to a resource, which you can use to access AWS services from applications.
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SigninClient, CreateOAuth2TokenWithTokenExchangeCommand } from "@aws-sdk/client-signin"; // ES Modules import
+ * // const { SigninClient, CreateOAuth2TokenWithTokenExchangeCommand } = require("@aws-sdk/client-signin"); // CommonJS import
+ * // import type { SigninClientConfig } from "@aws-sdk/client-signin";
+ * const config = {}; // type is SigninClientConfig
+ * const client = new SigninClient(config);
+ * const input = { // CreateOAuth2TokenWithTokenExchangeRequest
+ *   grantType: "STRING_VALUE", // required
+ *   subjectToken: "STRING_VALUE",
+ *   subjectTokenType: "STRING_VALUE",
+ *   resource: "STRING_VALUE",
+ *   scope: "STRING_VALUE",
+ * };
+ * const command = new CreateOAuth2TokenWithTokenExchangeCommand(input);
+ * const response = await client.send(command);
+ * // { // CreateOAuth2TokenWithTokenExchangeResponse
+ * //   accessToken: "STRING_VALUE", // required
+ * //   issuedTokenType: "STRING_VALUE",
+ * //   tokenType: "STRING_VALUE", // required
+ * //   expiresIn: Number("int"), // required
+ * // };
+ *
+ * ```
+ *
+ * @param CreateOAuth2TokenWithTokenExchangeCommandInput - {@link CreateOAuth2TokenWithTokenExchangeCommandInput}
+ * @returns {@link CreateOAuth2TokenWithTokenExchangeCommandOutput}
+ * @see {@link CreateOAuth2TokenWithTokenExchangeCommandInput} for command's `input` shape.
+ * @see {@link CreateOAuth2TokenWithTokenExchangeCommandOutput} for command's `response` shape.
+ * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  The request failed because of an internal server error.
+ *
+ * @throws {@link InvalidGrantException} (client fault)
+ *  The request failed because the provided grant is invalid or expired.
+ *
+ * @throws {@link InvalidScopeException} (client fault)
+ *  The request failed because the requested scope is invalid or exceeds the scope that can be granted.
+ *
+ * @throws {@link ServiceUnavailableException} (server fault)
+ *  The request failed because a dependency is temporarily unavailable. You can retry the request.
+ *
+ * @throws {@link TooManyRequestsError} (client fault)
+ *  The request failed because you exceeded the request rate limit for this operation.
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
+ *
+ * @throws {@link SigninServiceException}
+ * <p>Base exception class for all service exceptions from Signin service.</p>
+ *
+ *
+ * @public
+ */
+export declare class CreateOAuth2TokenWithTokenExchangeCommand extends CreateOAuth2TokenWithTokenExchangeCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: CreateOAuth2TokenWithTokenExchangeRequest;
+            output: CreateOAuth2TokenWithTokenExchangeResponse;
+        };
+        sdk: {
+            input: CreateOAuth2TokenWithTokenExchangeCommandInput;
+            output: CreateOAuth2TokenWithTokenExchangeCommandOutput;
+        };
+    };
+}

package/dist-types/commands/DeleteConsoleAuthorizationConfigurationCommand.d.ts

@@ -53,21 +53,10 @@ declare const DeleteConsoleAuthorizationConfigurationCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -77,26 +66,10 @@ declare const DeleteConsoleAuthorizationConfigurationCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/DeleteResourcePermissionStatementCommand.d.ts

@@ -50,21 +50,10 @@ declare const DeleteResourcePermissionStatementCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -74,26 +63,10 @@ declare const DeleteResourcePermissionStatementCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/GetConsoleAuthorizationConfigurationCommand.d.ts

@@ -53,21 +53,10 @@ declare const GetConsoleAuthorizationConfigurationCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -77,26 +66,10 @@ declare const GetConsoleAuthorizationConfigurationCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/GetResourcePolicyCommand.d.ts

@@ -70,21 +70,10 @@ declare const GetResourcePolicyCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -94,18 +83,7 @@ declare const GetResourcePolicyCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/IntrospectOAuth2TokenWithIAMCommand.d.ts

@@ -24,17 +24,10 @@ declare const IntrospectOAuth2TokenWithIAMCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
 };
 /**
- * Grants permission to inspect the metadata and state of an OAuth 2.0
- * access token or refresh token
+ * Inspects the metadata and active state of an OAuth 2.0 access token or refresh token.
  *
  * Implements RFC 7662 OAuth 2.0 Token Introspection over a SigV4-authenticated
- * endpoint. Inspects the metadata of an access_token or refresh_token issued
- * by AWS Sign-In and returns the claims associated with it.
- *
- * Inactive token semantics (RFC 7662 §2.2): when the supplied token is
- * unknown, expired, revoked, malformed, or owned by a different account,
- * the response body is exactly \{ "active": false \} with all other claims
- * omitted.
+ * endpoint. Returns the claims associated with a token issued by AWS Sign-In.
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -75,43 +68,16 @@ declare const IntrospectOAuth2TokenWithIAMCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/ListResourcePermissionStatementsCommand.d.ts

@@ -64,21 +64,10 @@ declare const ListResourcePermissionStatementsCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -88,26 +77,10 @@ declare const ListResourcePermissionStatementsCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>

package/dist-types/commands/PutConsoleAuthorizationConfigurationCommand.d.ts

@@ -53,14 +53,7 @@ declare const PutConsoleAuthorizationConfigurationCommand_base: {
  * @see {@link SigninClientResolvedConfig | config} for SigninClient's `config` shape.
  *
  * @throws {@link AccessDeniedException} (client fault)
- *  Error thrown for access denied scenarios with flexible HTTP status mapping
- *
- * Runtime HTTP Status Code Mapping:
- * - HTTP 401 (Unauthorized): TOKEN_EXPIRED, AUTHCODE_EXPIRED
- * - HTTP 403 (Forbidden): USER_CREDENTIALS_CHANGED, INSUFFICIENT_PERMISSIONS
- *
- * The specific HTTP status code is determined at runtime based on the error enum value.
- * Consumers should use the error field to determine the specific access denial reason.
+ *  You do not have sufficient access to perform this action.
  *
  * @throws {@link ConflictException} (client fault)
  *  Error thrown when request conflicts with current state
@@ -70,11 +63,7 @@ declare const PutConsoleAuthorizationConfigurationCommand_base: {
  * Used when the request conflicts with the current state of the resource
  *
  * @throws {@link InternalServerException} (server fault)
- *  Error thrown when an internal server error occurs
- *
- * HTTP Status Code: 500 Internal Server Error
- *
- * Used for unexpected server-side errors that prevent request processing.
+ *  The request failed because of an internal server error.
  *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  Error thrown when requested resource is not found
@@ -84,26 +73,10 @@ declare const PutConsoleAuthorizationConfigurationCommand_base: {
  * Used when the specified resource does not exist
  *
  * @throws {@link TooManyRequestsError} (client fault)
- *  Error thrown when rate limit is exceeded
- *
- * HTTP Status Code: 429 Too Many Requests
- *
- * Possible OAuth2ErrorCode values:
- * - INVALID_REQUEST: Rate limiting, too many requests, abuse prevention
- *
- * Possible causes:
- * - Too many token requests from the same client
- * - Rate limiting based on client_id or IP address
- * - Abuse prevention mechanisms triggered
- * - Service protection against excessive token generation
+ *  The request failed because you exceeded the request rate limit for this operation.
  *
  * @throws {@link ValidationException} (client fault)
- *  Error thrown when request validation fails
- *
- * HTTP Status Code: 400 Bad Request
- *
- * Used for request validation errors such as malformed parameters,
- * missing required fields, or invalid parameter values.
+ *  The request failed because it contains a malformed, missing, or invalid parameter.
  *
  * @throws {@link SigninServiceException}
  * <p>Base exception class for all service exceptions from Signin service.</p>