@aws-sdk/client-sso-admin 3.130.0 → 3.137.0

package/dist-types/models/models_0.d.ts

@@ -1,7 +1,7 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
 import { SSOAdminServiceException as __BaseException } from "./SSOAdminServiceException";
 /**
- * <p>The value used for mapping a specified attribute to an identity source.</p>
+ * <p>The value used for mapping a specified attribute to an identity source. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/attributemappingsconcept.html">Attribute mappings</a> in the Amazon Web Services Single Sign-On User Guide.</p>
  */
 export interface AccessControlAttributeValue {
     /**
@@ -9,12 +9,6 @@ export interface AccessControlAttributeValue {
      */
     Source: string[] | undefined;
 }
-export declare namespace AccessControlAttributeValue {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccessControlAttributeValue) => any;
-}
 /**
  * <p>These are Amazon Web Services SSO identity store attributes that you can configure for use in
  *       attributes-based access control (ABAC). You can create permissions policies that determine who
@@ -34,12 +28,6 @@ export interface AccessControlAttribute {
      */
     Value: AccessControlAttributeValue | undefined;
 }
-export declare namespace AccessControlAttribute {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccessControlAttribute) => any;
-}
 /**
  * <p>You do not have sufficient access to perform this action.</p>
  */
@@ -83,12 +71,6 @@ export interface AccountAssignment {
      */
     PrincipalId?: string;
 }
-export declare namespace AccountAssignment {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccountAssignment) => any;
-}
 export declare enum StatusValues {
     FAILED = "FAILED",
     IN_PROGRESS = "IN_PROGRESS",
@@ -141,12 +123,6 @@ export interface AccountAssignmentOperationStatus {
      */
     CreatedDate?: Date;
 }
-export declare namespace AccountAssignmentOperationStatus {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccountAssignmentOperationStatus) => any;
-}
 /**
  * <p>Provides information about the <a>AccountAssignment</a> creation
  *       request.</p>
@@ -166,61 +142,34 @@ export interface AccountAssignmentOperationStatusMetadata {
      */
     CreatedDate?: Date;
 }
-export declare namespace AccountAssignmentOperationStatusMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AccountAssignmentOperationStatusMetadata) => any;
-}
 /**
- * <p>A structure that stores the details of the IAM managed policy.</p>
+ * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
  */
-export interface AttachedManagedPolicy {
-    /**
-     * <p>The name of the IAM managed policy.</p>
-     */
-    Name?: string;
+export interface CustomerManagedPolicyReference {
     /**
-     * <p>The ARN of the IAM managed policy. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
-     * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * <p>The name of the policy document.</p>
      */
-    Arn?: string;
-}
-export declare namespace AttachedManagedPolicy {
+    Name: string | undefined;
     /**
-     * @internal
+     * <p>The path for the policy. The default is <code>/</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names">Friendly names and paths</a> in the Identity and Access Management user guide.</p>
      */
-    const filterSensitiveLog: (obj: AttachedManagedPolicy) => any;
+    Path?: string;
 }
-export interface AttachManagedPolicyToPermissionSetRequest {
+export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
     /**
-     * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
-     * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
      */
     InstanceArn: string | undefined;
     /**
-     * <p>The ARN of the <a>PermissionSet</a> that the managed policy should be attached
-     *       to.</p>
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
      */
     PermissionSetArn: string | undefined;
     /**
-     * <p>The IAM managed policy ARN to be attached to a permission set.</p>
-     */
-    ManagedPolicyArn: string | undefined;
-}
-export declare namespace AttachManagedPolicyToPermissionSetRequest {
-    /**
-     * @internal
+     * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
      */
-    const filterSensitiveLog: (obj: AttachManagedPolicyToPermissionSetRequest) => any;
-}
-export interface AttachManagedPolicyToPermissionSetResponse {
+    CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
 }
-export declare namespace AttachManagedPolicyToPermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: AttachManagedPolicyToPermissionSetResponse) => any;
+export interface AttachCustomerManagedPolicyReferenceToPermissionSetResponse {
 }
 /**
  * <p>Occurs when a conflict with a previous successful write is detected. This generally occurs
@@ -300,6 +249,38 @@ export declare class ValidationException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
 }
+/**
+ * <p>A structure that stores the details of the Amazon Web Services managed IAM policy.</p>
+ */
+export interface AttachedManagedPolicy {
+    /**
+     * <p>The name of the Amazon Web Services managed IAM policy.</p>
+     */
+    Name?: string;
+    /**
+     * <p>The ARN of the Amazon Web Services managed IAM policy. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
+     * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     */
+    Arn?: string;
+}
+export interface AttachManagedPolicyToPermissionSetRequest {
+    /**
+     * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
+     * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     */
+    InstanceArn: string | undefined;
+    /**
+     * <p>The ARN of the <a>PermissionSet</a> that the managed policy should be attached
+     *       to.</p>
+     */
+    PermissionSetArn: string | undefined;
+    /**
+     * <p>The Amazon Web Services managed policy ARN to be attached to a permission set.</p>
+     */
+    ManagedPolicyArn: string | undefined;
+}
+export interface AttachManagedPolicyToPermissionSetResponse {
+}
 export interface CreateAccountAssignmentRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -328,24 +309,12 @@ export interface CreateAccountAssignmentRequest {
      */
     PrincipalId: string | undefined;
 }
-export declare namespace CreateAccountAssignmentRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateAccountAssignmentRequest) => any;
-}
 export interface CreateAccountAssignmentResponse {
     /**
      * <p>The status object for the account assignment creation operation.</p>
      */
     AccountAssignmentCreationStatus?: AccountAssignmentOperationStatus;
 }
-export declare namespace CreateAccountAssignmentResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateAccountAssignmentResponse) => any;
-}
 /**
  * <p>Specifies the attributes to add to your attribute-based access control (ABAC)
  *       configuration.</p>
@@ -357,12 +326,6 @@ export interface InstanceAccessControlAttributeConfiguration {
      */
     AccessControlAttributes: AccessControlAttribute[] | undefined;
 }
-export declare namespace InstanceAccessControlAttributeConfiguration {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InstanceAccessControlAttributeConfiguration) => any;
-}
 export interface CreateInstanceAccessControlAttributeConfigurationRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed.</p>
@@ -378,20 +341,8 @@ export interface CreateInstanceAccessControlAttributeConfigurationRequest {
      */
     InstanceAccessControlAttributeConfiguration: InstanceAccessControlAttributeConfiguration | undefined;
 }
-export declare namespace CreateInstanceAccessControlAttributeConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateInstanceAccessControlAttributeConfigurationRequest) => any;
-}
 export interface CreateInstanceAccessControlAttributeConfigurationResponse {
 }
-export declare namespace CreateInstanceAccessControlAttributeConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreateInstanceAccessControlAttributeConfigurationResponse) => any;
-}
 /**
  * <p>A set of key-value pairs that are used to manage the resource. Tags can only be applied to
  *       permission sets and cannot be applied to corresponding roles that Amazon Web Services SSO creates in Amazon Web Services
@@ -401,17 +352,11 @@ export interface Tag {
     /**
      * <p>The key for the tag.</p>
      */
-    Key?: string;
+    Key: string | undefined;
     /**
      * <p>The value of the tag.</p>
      */
-    Value?: string;
-}
-export declare namespace Tag {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: Tag) => any;
+    Value: string | undefined;
 }
 export interface CreatePermissionSetRequest {
     /**
@@ -442,12 +387,6 @@ export interface CreatePermissionSetRequest {
      */
     Tags?: Tag[];
 }
-export declare namespace CreatePermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreatePermissionSetRequest) => any;
-}
 /**
  * <p>An entity that contains IAM policies.</p>
  */
@@ -480,24 +419,12 @@ export interface PermissionSet {
      */
     RelayState?: string;
 }
-export declare namespace PermissionSet {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PermissionSet) => any;
-}
 export interface CreatePermissionSetResponse {
     /**
      * <p>Defines the level of access on an Amazon Web Services account.</p>
      */
     PermissionSet?: PermissionSet;
 }
-export declare namespace CreatePermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: CreatePermissionSetResponse) => any;
-}
 export interface DeleteAccountAssignmentRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -525,24 +452,12 @@ export interface DeleteAccountAssignmentRequest {
      */
     PrincipalId: string | undefined;
 }
-export declare namespace DeleteAccountAssignmentRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteAccountAssignmentRequest) => any;
-}
 export interface DeleteAccountAssignmentResponse {
     /**
      * <p>The status object for the account assignment deletion operation.</p>
      */
     AccountAssignmentDeletionStatus?: AccountAssignmentOperationStatus;
 }
-export declare namespace DeleteAccountAssignmentResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteAccountAssignmentResponse) => any;
-}
 export interface DeleteInlinePolicyFromPermissionSetRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -554,39 +469,27 @@ export interface DeleteInlinePolicyFromPermissionSetRequest {
      */
     PermissionSetArn: string | undefined;
 }
-export declare namespace DeleteInlinePolicyFromPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteInlinePolicyFromPermissionSetRequest) => any;
-}
 export interface DeleteInlinePolicyFromPermissionSetResponse {
 }
-export declare namespace DeleteInlinePolicyFromPermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteInlinePolicyFromPermissionSetResponse) => any;
-}
 export interface DeleteInstanceAccessControlAttributeConfigurationRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed.</p>
      */
     InstanceArn: string | undefined;
 }
-export declare namespace DeleteInstanceAccessControlAttributeConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeleteInstanceAccessControlAttributeConfigurationRequest) => any;
-}
 export interface DeleteInstanceAccessControlAttributeConfigurationResponse {
 }
-export declare namespace DeleteInstanceAccessControlAttributeConfigurationResponse {
+export interface DeletePermissionsBoundaryFromPermissionSetRequest {
     /**
-     * @internal
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
+     */
+    InstanceArn: string | undefined;
+    /**
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
      */
-    const filterSensitiveLog: (obj: DeleteInstanceAccessControlAttributeConfigurationResponse) => any;
+    PermissionSetArn: string | undefined;
+}
+export interface DeletePermissionsBoundaryFromPermissionSetResponse {
 }
 export interface DeletePermissionSetRequest {
     /**
@@ -599,20 +502,8 @@ export interface DeletePermissionSetRequest {
      */
     PermissionSetArn: string | undefined;
 }
-export declare namespace DeletePermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeletePermissionSetRequest) => any;
-}
 export interface DeletePermissionSetResponse {
 }
-export declare namespace DeletePermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DeletePermissionSetResponse) => any;
-}
 export interface DescribeAccountAssignmentCreationStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -624,24 +515,12 @@ export interface DescribeAccountAssignmentCreationStatusRequest {
      */
     AccountAssignmentCreationRequestId: string | undefined;
 }
-export declare namespace DescribeAccountAssignmentCreationStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeAccountAssignmentCreationStatusRequest) => any;
-}
 export interface DescribeAccountAssignmentCreationStatusResponse {
     /**
      * <p>The status object for the account assignment creation operation.</p>
      */
     AccountAssignmentCreationStatus?: AccountAssignmentOperationStatus;
 }
-export declare namespace DescribeAccountAssignmentCreationStatusResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeAccountAssignmentCreationStatusResponse) => any;
-}
 export interface DescribeAccountAssignmentDeletionStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -653,36 +532,18 @@ export interface DescribeAccountAssignmentDeletionStatusRequest {
      */
     AccountAssignmentDeletionRequestId: string | undefined;
 }
-export declare namespace DescribeAccountAssignmentDeletionStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeAccountAssignmentDeletionStatusRequest) => any;
-}
 export interface DescribeAccountAssignmentDeletionStatusResponse {
     /**
      * <p>The status object for the account assignment deletion operation.</p>
      */
     AccountAssignmentDeletionStatus?: AccountAssignmentOperationStatus;
 }
-export declare namespace DescribeAccountAssignmentDeletionStatusResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeAccountAssignmentDeletionStatusResponse) => any;
-}
 export interface DescribeInstanceAccessControlAttributeConfigurationRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed.</p>
      */
     InstanceArn: string | undefined;
 }
-export declare namespace DescribeInstanceAccessControlAttributeConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeInstanceAccessControlAttributeConfigurationRequest) => any;
-}
 export declare enum InstanceAccessControlAttributeConfigurationStatus {
     CREATION_FAILED = "CREATION_FAILED",
     CREATION_IN_PROGRESS = "CREATION_IN_PROGRESS",
@@ -703,12 +564,6 @@ export interface DescribeInstanceAccessControlAttributeConfigurationResponse {
      */
     InstanceAccessControlAttributeConfiguration?: InstanceAccessControlAttributeConfiguration;
 }
-export declare namespace DescribeInstanceAccessControlAttributeConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribeInstanceAccessControlAttributeConfigurationResponse) => any;
-}
 export interface DescribePermissionSetRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -720,24 +575,12 @@ export interface DescribePermissionSetRequest {
      */
     PermissionSetArn: string | undefined;
 }
-export declare namespace DescribePermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribePermissionSetRequest) => any;
-}
 export interface DescribePermissionSetResponse {
     /**
      * <p>Describes the level of access on an Amazon Web Services account.</p>
      */
     PermissionSet?: PermissionSet;
 }
-export declare namespace DescribePermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribePermissionSetResponse) => any;
-}
 export interface DescribePermissionSetProvisioningStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -750,12 +593,6 @@ export interface DescribePermissionSetProvisioningStatusRequest {
      */
     ProvisionPermissionSetRequestId: string | undefined;
 }
-export declare namespace DescribePermissionSetProvisioningStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DescribePermissionSetProvisioningStatusRequest) => any;
-}
 /**
  * <p>A structure that is used to provide the status of the provisioning operation for a
  *       specified permission set.</p>
@@ -788,23 +625,27 @@ export interface PermissionSetProvisioningStatus {
      */
     CreatedDate?: Date;
 }
-export declare namespace PermissionSetProvisioningStatus {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PermissionSetProvisioningStatus) => any;
-}
 export interface DescribePermissionSetProvisioningStatusResponse {
     /**
      * <p>The status object for the permission set provisioning operation.</p>
      */
     PermissionSetProvisioningStatus?: PermissionSetProvisioningStatus;
 }
-export declare namespace DescribePermissionSetProvisioningStatusResponse {
+export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
     /**
-     * @internal
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
      */
-    const filterSensitiveLog: (obj: DescribePermissionSetProvisioningStatusResponse) => any;
+    InstanceArn: string | undefined;
+    /**
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
+     */
+    PermissionSetArn: string | undefined;
+    /**
+     * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
+     */
+    CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
+}
+export interface DetachCustomerManagedPolicyReferenceFromPermissionSetResponse {
 }
 export interface DetachManagedPolicyFromPermissionSetRequest {
     /**
@@ -818,24 +659,12 @@ export interface DetachManagedPolicyFromPermissionSetRequest {
      */
     PermissionSetArn: string | undefined;
     /**
-     * <p>The IAM managed policy ARN to be attached to a permission set.</p>
+     * <p>The Amazon Web Services managed policy ARN to be detached from a permission set.</p>
      */
     ManagedPolicyArn: string | undefined;
 }
-export declare namespace DetachManagedPolicyFromPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DetachManagedPolicyFromPermissionSetRequest) => any;
-}
 export interface DetachManagedPolicyFromPermissionSetResponse {
 }
-export declare namespace DetachManagedPolicyFromPermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: DetachManagedPolicyFromPermissionSetResponse) => any;
-}
 export interface GetInlinePolicyForPermissionSetRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -847,23 +676,45 @@ export interface GetInlinePolicyForPermissionSetRequest {
      */
     PermissionSetArn: string | undefined;
 }
-export declare namespace GetInlinePolicyForPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: GetInlinePolicyForPermissionSetRequest) => any;
-}
 export interface GetInlinePolicyForPermissionSetResponse {
     /**
      * <p>The IAM inline policy that is attached to the permission set.</p>
      */
     InlinePolicy?: string;
 }
-export declare namespace GetInlinePolicyForPermissionSetResponse {
+export interface GetPermissionsBoundaryForPermissionSetRequest {
     /**
-     * @internal
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
+     */
+    InstanceArn: string | undefined;
+    /**
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
+     */
+    PermissionSetArn: string | undefined;
+}
+/**
+ * <p>Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want to set as a permissions boundary. Specify either <code>CustomerManagedPolicyReference</code>
+ *       to use the name and path of a customer managed policy, or <code>ManagedPolicyArn</code> to use the ARN of an Amazon Web Services managed IAM policy. A permissions boundary represents the maximum permissions that any policy
+ *       can grant your role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM entities</a> in the <i>Identity and Access Management User Guide</i>.</p>
+ *          <important>
+ *             <p>Policies used as permissions boundaries do not provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy evaluation logic</a> in the <i>Identity and Access Management User Guide</i>.</p>
+ *          </important>
+ */
+export interface PermissionsBoundary {
+    /**
+     * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
+     */
+    CustomerManagedPolicyReference?: CustomerManagedPolicyReference;
+    /**
+     * <p>The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.</p>
+     */
+    ManagedPolicyArn?: string;
+}
+export interface GetPermissionsBoundaryForPermissionSetResponse {
+    /**
+     * <p>The permissions boundary attached to the specified permission set.</p>
      */
-    const filterSensitiveLog: (obj: GetInlinePolicyForPermissionSetResponse) => any;
+    PermissionsBoundary?: PermissionsBoundary;
 }
 /**
  * <p>Provides information about the SSO instance.</p>
@@ -879,12 +730,6 @@ export interface InstanceMetadata {
      */
     IdentityStoreId?: string;
 }
-export declare namespace InstanceMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: InstanceMetadata) => any;
-}
 /**
  * <p>Filters he operation status list based on the passed attribute value.</p>
  */
@@ -894,12 +739,6 @@ export interface OperationStatusFilter {
      */
     Status?: StatusValues | string;
 }
-export declare namespace OperationStatusFilter {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: OperationStatusFilter) => any;
-}
 export interface ListAccountAssignmentCreationStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -919,12 +758,6 @@ export interface ListAccountAssignmentCreationStatusRequest {
      */
     Filter?: OperationStatusFilter;
 }
-export declare namespace ListAccountAssignmentCreationStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentCreationStatusRequest) => any;
-}
 export interface ListAccountAssignmentCreationStatusResponse {
     /**
      * <p>The status object for the account assignment creation operation.</p>
@@ -935,12 +768,6 @@ export interface ListAccountAssignmentCreationStatusResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountAssignmentCreationStatusResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentCreationStatusResponse) => any;
-}
 export interface ListAccountAssignmentDeletionStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -960,12 +787,6 @@ export interface ListAccountAssignmentDeletionStatusRequest {
      */
     Filter?: OperationStatusFilter;
 }
-export declare namespace ListAccountAssignmentDeletionStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentDeletionStatusRequest) => any;
-}
 export interface ListAccountAssignmentDeletionStatusResponse {
     /**
      * <p>The status object for the account assignment deletion operation.</p>
@@ -976,12 +797,6 @@ export interface ListAccountAssignmentDeletionStatusResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountAssignmentDeletionStatusResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentDeletionStatusResponse) => any;
-}
 export interface ListAccountAssignmentsRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1005,12 +820,6 @@ export interface ListAccountAssignmentsRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountAssignmentsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentsRequest) => any;
-}
 export interface ListAccountAssignmentsResponse {
     /**
      * <p>The list of assignments that match the input Amazon Web Services account and permission set.</p>
@@ -1021,12 +830,6 @@ export interface ListAccountAssignmentsResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountAssignmentsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountAssignmentsResponse) => any;
-}
 export declare enum ProvisioningStatus {
     LATEST_PERMISSION_SET_NOT_PROVISIONED = "LATEST_PERMISSION_SET_NOT_PROVISIONED",
     LATEST_PERMISSION_SET_PROVISIONED = "LATEST_PERMISSION_SET_PROVISIONED"
@@ -1055,12 +858,6 @@ export interface ListAccountsForProvisionedPermissionSetRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountsForProvisionedPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListAccountsForProvisionedPermissionSetRequest) => any;
-}
 export interface ListAccountsForProvisionedPermissionSetResponse {
     /**
      * <p>The list of Amazon Web Services <code>AccountIds</code>.</p>
@@ -1071,15 +868,17 @@ export interface ListAccountsForProvisionedPermissionSetResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListAccountsForProvisionedPermissionSetResponse {
+export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
     /**
-     * @internal
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
      */
-    const filterSensitiveLog: (obj: ListAccountsForProvisionedPermissionSetResponse) => any;
-}
-export interface ListInstancesRequest {
+    InstanceArn: string | undefined;
     /**
-     * <p>The maximum number of results to display for the instance.</p>
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
+     */
+    PermissionSetArn: string | undefined;
+    /**
+     * <p>The maximum number of results to display for the list call.</p>
      */
     MaxResults?: number;
     /**
@@ -1087,27 +886,35 @@ export interface ListInstancesRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListInstancesRequest {
+export interface ListCustomerManagedPolicyReferencesInPermissionSetResponse {
     /**
-     * @internal
+     * <p>Specifies the names and paths of the IAM customer managed policies that you have attached to your permission set.</p>
+     */
+    CustomerManagedPolicyReferences?: CustomerManagedPolicyReference[];
+    /**
+     * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
      */
-    const filterSensitiveLog: (obj: ListInstancesRequest) => any;
+    NextToken?: string;
 }
-export interface ListInstancesResponse {
+export interface ListInstancesRequest {
     /**
-     * <p>Lists the SSO instances that the caller has access to.</p>
+     * <p>The maximum number of results to display for the instance.</p>
      */
-    Instances?: InstanceMetadata[];
+    MaxResults?: number;
     /**
      * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
      */
     NextToken?: string;
 }
-export declare namespace ListInstancesResponse {
+export interface ListInstancesResponse {
     /**
-     * @internal
+     * <p>Lists the SSO instances that the caller has access to.</p>
+     */
+    Instances?: InstanceMetadata[];
+    /**
+     * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
      */
-    const filterSensitiveLog: (obj: ListInstancesResponse) => any;
+    NextToken?: string;
 }
 export interface ListManagedPoliciesInPermissionSetRequest {
     /**
@@ -1129,12 +936,6 @@ export interface ListManagedPoliciesInPermissionSetRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListManagedPoliciesInPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListManagedPoliciesInPermissionSetRequest) => any;
-}
 export interface ListManagedPoliciesInPermissionSetResponse {
     /**
      * <p>The array of the <a>AttachedManagedPolicy</a> data type object.</p>
@@ -1145,12 +946,6 @@ export interface ListManagedPoliciesInPermissionSetResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListManagedPoliciesInPermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListManagedPoliciesInPermissionSetResponse) => any;
-}
 export interface ListPermissionSetProvisioningStatusRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1170,12 +965,6 @@ export interface ListPermissionSetProvisioningStatusRequest {
      */
     Filter?: OperationStatusFilter;
 }
-export declare namespace ListPermissionSetProvisioningStatusRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetProvisioningStatusRequest) => any;
-}
 /**
  * <p>Provides information about the permission set provisioning status.</p>
  */
@@ -1194,12 +983,6 @@ export interface PermissionSetProvisioningStatusMetadata {
      */
     CreatedDate?: Date;
 }
-export declare namespace PermissionSetProvisioningStatusMetadata {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PermissionSetProvisioningStatusMetadata) => any;
-}
 export interface ListPermissionSetProvisioningStatusResponse {
     /**
      * <p>The status object for the permission set provisioning operation.</p>
@@ -1210,12 +993,6 @@ export interface ListPermissionSetProvisioningStatusResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListPermissionSetProvisioningStatusResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetProvisioningStatusResponse) => any;
-}
 export interface ListPermissionSetsRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1231,12 +1008,6 @@ export interface ListPermissionSetsRequest {
      */
     MaxResults?: number;
 }
-export declare namespace ListPermissionSetsRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetsRequest) => any;
-}
 export interface ListPermissionSetsResponse {
     /**
      * <p>Defines the level of access on an Amazon Web Services account.</p>
@@ -1247,12 +1018,6 @@ export interface ListPermissionSetsResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListPermissionSetsResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetsResponse) => any;
-}
 export interface ListPermissionSetsProvisionedToAccountRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1276,12 +1041,6 @@ export interface ListPermissionSetsProvisionedToAccountRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListPermissionSetsProvisionedToAccountRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetsProvisionedToAccountRequest) => any;
-}
 export interface ListPermissionSetsProvisionedToAccountResponse {
     /**
      * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
@@ -1292,12 +1051,6 @@ export interface ListPermissionSetsProvisionedToAccountResponse {
      */
     PermissionSets?: string[];
 }
-export declare namespace ListPermissionSetsProvisionedToAccountResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListPermissionSetsProvisionedToAccountResponse) => any;
-}
 export interface ListTagsForResourceRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1313,12 +1066,6 @@ export interface ListTagsForResourceRequest {
      */
     NextToken?: string;
 }
-export declare namespace ListTagsForResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
-}
 export interface ListTagsForResourceResponse {
     /**
      * <p>A set of key-value pairs that are used to manage the resource.</p>
@@ -1329,12 +1076,6 @@ export interface ListTagsForResourceResponse {
      */
     NextToken?: string;
 }
-export declare namespace ListTagsForResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ListTagsForResourceResponse) => any;
-}
 export declare enum ProvisionTargetType {
     ALL_PROVISIONED_ACCOUNTS = "ALL_PROVISIONED_ACCOUNTS",
     AWS_ACCOUNT = "AWS_ACCOUNT"
@@ -1358,24 +1099,12 @@ export interface ProvisionPermissionSetRequest {
      */
     TargetType: ProvisionTargetType | string | undefined;
 }
-export declare namespace ProvisionPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ProvisionPermissionSetRequest) => any;
-}
 export interface ProvisionPermissionSetResponse {
     /**
      * <p>The status object for the permission set provisioning operation.</p>
      */
     PermissionSetProvisioningStatus?: PermissionSetProvisioningStatus;
 }
-export declare namespace ProvisionPermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: ProvisionPermissionSetResponse) => any;
-}
 export interface PutInlinePolicyToPermissionSetRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1391,19 +1120,23 @@ export interface PutInlinePolicyToPermissionSetRequest {
      */
     InlinePolicy: string | undefined;
 }
-export declare namespace PutInlinePolicyToPermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: PutInlinePolicyToPermissionSetRequest) => any;
-}
 export interface PutInlinePolicyToPermissionSetResponse {
 }
-export declare namespace PutInlinePolicyToPermissionSetResponse {
+export interface PutPermissionsBoundaryToPermissionSetRequest {
     /**
-     * @internal
+     * <p>The ARN of the SSO instance under which the operation will be executed. </p>
+     */
+    InstanceArn: string | undefined;
+    /**
+     * <p>The ARN of the <code>PermissionSet</code>.</p>
      */
-    const filterSensitiveLog: (obj: PutInlinePolicyToPermissionSetResponse) => any;
+    PermissionSetArn: string | undefined;
+    /**
+     * <p>The permissions boundary that you want to attach to a <code>PermissionSet</code>.</p>
+     */
+    PermissionsBoundary: PermissionsBoundary | undefined;
+}
+export interface PutPermissionsBoundaryToPermissionSetResponse {
 }
 export interface TagResourceRequest {
     /**
@@ -1420,20 +1153,8 @@ export interface TagResourceRequest {
      */
     Tags: Tag[] | undefined;
 }
-export declare namespace TagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TagResourceRequest) => any;
-}
 export interface TagResourceResponse {
 }
-export declare namespace TagResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: TagResourceResponse) => any;
-}
 export interface UntagResourceRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1449,20 +1170,8 @@ export interface UntagResourceRequest {
      */
     TagKeys: string[] | undefined;
 }
-export declare namespace UntagResourceRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UntagResourceRequest) => any;
-}
 export interface UntagResourceResponse {
 }
-export declare namespace UntagResourceResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UntagResourceResponse) => any;
-}
 export interface UpdateInstanceAccessControlAttributeConfigurationRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed.</p>
@@ -1473,20 +1182,8 @@ export interface UpdateInstanceAccessControlAttributeConfigurationRequest {
      */
     InstanceAccessControlAttributeConfiguration: InstanceAccessControlAttributeConfiguration | undefined;
 }
-export declare namespace UpdateInstanceAccessControlAttributeConfigurationRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateInstanceAccessControlAttributeConfigurationRequest) => any;
-}
 export interface UpdateInstanceAccessControlAttributeConfigurationResponse {
 }
-export declare namespace UpdateInstanceAccessControlAttributeConfigurationResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdateInstanceAccessControlAttributeConfigurationResponse) => any;
-}
 export interface UpdatePermissionSetRequest {
     /**
      * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
@@ -1512,17 +1209,361 @@ export interface UpdatePermissionSetRequest {
      */
     RelayState?: string;
 }
-export declare namespace UpdatePermissionSetRequest {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdatePermissionSetRequest) => any;
-}
 export interface UpdatePermissionSetResponse {
 }
-export declare namespace UpdatePermissionSetResponse {
-    /**
-     * @internal
-     */
-    const filterSensitiveLog: (obj: UpdatePermissionSetResponse) => any;
-}
+/**
+ * @internal
+ */
+export declare const AccessControlAttributeValueFilterSensitiveLog: (obj: AccessControlAttributeValue) => any;
+/**
+ * @internal
+ */
+export declare const AccessControlAttributeFilterSensitiveLog: (obj: AccessControlAttribute) => any;
+/**
+ * @internal
+ */
+export declare const AccountAssignmentFilterSensitiveLog: (obj: AccountAssignment) => any;
+/**
+ * @internal
+ */
+export declare const AccountAssignmentOperationStatusFilterSensitiveLog: (obj: AccountAssignmentOperationStatus) => any;
+/**
+ * @internal
+ */
+export declare const AccountAssignmentOperationStatusMetadataFilterSensitiveLog: (obj: AccountAssignmentOperationStatusMetadata) => any;
+/**
+ * @internal
+ */
+export declare const CustomerManagedPolicyReferenceFilterSensitiveLog: (obj: CustomerManagedPolicyReference) => any;
+/**
+ * @internal
+ */
+export declare const AttachCustomerManagedPolicyReferenceToPermissionSetRequestFilterSensitiveLog: (obj: AttachCustomerManagedPolicyReferenceToPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const AttachCustomerManagedPolicyReferenceToPermissionSetResponseFilterSensitiveLog: (obj: AttachCustomerManagedPolicyReferenceToPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const AttachedManagedPolicyFilterSensitiveLog: (obj: AttachedManagedPolicy) => any;
+/**
+ * @internal
+ */
+export declare const AttachManagedPolicyToPermissionSetRequestFilterSensitiveLog: (obj: AttachManagedPolicyToPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const AttachManagedPolicyToPermissionSetResponseFilterSensitiveLog: (obj: AttachManagedPolicyToPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const CreateAccountAssignmentRequestFilterSensitiveLog: (obj: CreateAccountAssignmentRequest) => any;
+/**
+ * @internal
+ */
+export declare const CreateAccountAssignmentResponseFilterSensitiveLog: (obj: CreateAccountAssignmentResponse) => any;
+/**
+ * @internal
+ */
+export declare const InstanceAccessControlAttributeConfigurationFilterSensitiveLog: (obj: InstanceAccessControlAttributeConfiguration) => any;
+/**
+ * @internal
+ */
+export declare const CreateInstanceAccessControlAttributeConfigurationRequestFilterSensitiveLog: (obj: CreateInstanceAccessControlAttributeConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const CreateInstanceAccessControlAttributeConfigurationResponseFilterSensitiveLog: (obj: CreateInstanceAccessControlAttributeConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const TagFilterSensitiveLog: (obj: Tag) => any;
+/**
+ * @internal
+ */
+export declare const CreatePermissionSetRequestFilterSensitiveLog: (obj: CreatePermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const PermissionSetFilterSensitiveLog: (obj: PermissionSet) => any;
+/**
+ * @internal
+ */
+export declare const CreatePermissionSetResponseFilterSensitiveLog: (obj: CreatePermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteAccountAssignmentRequestFilterSensitiveLog: (obj: DeleteAccountAssignmentRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteAccountAssignmentResponseFilterSensitiveLog: (obj: DeleteAccountAssignmentResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteInlinePolicyFromPermissionSetRequestFilterSensitiveLog: (obj: DeleteInlinePolicyFromPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteInlinePolicyFromPermissionSetResponseFilterSensitiveLog: (obj: DeleteInlinePolicyFromPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteInstanceAccessControlAttributeConfigurationRequestFilterSensitiveLog: (obj: DeleteInstanceAccessControlAttributeConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteInstanceAccessControlAttributeConfigurationResponseFilterSensitiveLog: (obj: DeleteInstanceAccessControlAttributeConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeletePermissionsBoundaryFromPermissionSetRequestFilterSensitiveLog: (obj: DeletePermissionsBoundaryFromPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeletePermissionsBoundaryFromPermissionSetResponseFilterSensitiveLog: (obj: DeletePermissionsBoundaryFromPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeletePermissionSetRequestFilterSensitiveLog: (obj: DeletePermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeletePermissionSetResponseFilterSensitiveLog: (obj: DeletePermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeAccountAssignmentCreationStatusRequestFilterSensitiveLog: (obj: DescribeAccountAssignmentCreationStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeAccountAssignmentCreationStatusResponseFilterSensitiveLog: (obj: DescribeAccountAssignmentCreationStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeAccountAssignmentDeletionStatusRequestFilterSensitiveLog: (obj: DescribeAccountAssignmentDeletionStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeAccountAssignmentDeletionStatusResponseFilterSensitiveLog: (obj: DescribeAccountAssignmentDeletionStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribeInstanceAccessControlAttributeConfigurationRequestFilterSensitiveLog: (obj: DescribeInstanceAccessControlAttributeConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribeInstanceAccessControlAttributeConfigurationResponseFilterSensitiveLog: (obj: DescribeInstanceAccessControlAttributeConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribePermissionSetRequestFilterSensitiveLog: (obj: DescribePermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DescribePermissionSetResponseFilterSensitiveLog: (obj: DescribePermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DescribePermissionSetProvisioningStatusRequestFilterSensitiveLog: (obj: DescribePermissionSetProvisioningStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const PermissionSetProvisioningStatusFilterSensitiveLog: (obj: PermissionSetProvisioningStatus) => any;
+/**
+ * @internal
+ */
+export declare const DescribePermissionSetProvisioningStatusResponseFilterSensitiveLog: (obj: DescribePermissionSetProvisioningStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const DetachCustomerManagedPolicyReferenceFromPermissionSetRequestFilterSensitiveLog: (obj: DetachCustomerManagedPolicyReferenceFromPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DetachCustomerManagedPolicyReferenceFromPermissionSetResponseFilterSensitiveLog: (obj: DetachCustomerManagedPolicyReferenceFromPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const DetachManagedPolicyFromPermissionSetRequestFilterSensitiveLog: (obj: DetachManagedPolicyFromPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const DetachManagedPolicyFromPermissionSetResponseFilterSensitiveLog: (obj: DetachManagedPolicyFromPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const GetInlinePolicyForPermissionSetRequestFilterSensitiveLog: (obj: GetInlinePolicyForPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const GetInlinePolicyForPermissionSetResponseFilterSensitiveLog: (obj: GetInlinePolicyForPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const GetPermissionsBoundaryForPermissionSetRequestFilterSensitiveLog: (obj: GetPermissionsBoundaryForPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const PermissionsBoundaryFilterSensitiveLog: (obj: PermissionsBoundary) => any;
+/**
+ * @internal
+ */
+export declare const GetPermissionsBoundaryForPermissionSetResponseFilterSensitiveLog: (obj: GetPermissionsBoundaryForPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const InstanceMetadataFilterSensitiveLog: (obj: InstanceMetadata) => any;
+/**
+ * @internal
+ */
+export declare const OperationStatusFilterFilterSensitiveLog: (obj: OperationStatusFilter) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentCreationStatusRequestFilterSensitiveLog: (obj: ListAccountAssignmentCreationStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentCreationStatusResponseFilterSensitiveLog: (obj: ListAccountAssignmentCreationStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentDeletionStatusRequestFilterSensitiveLog: (obj: ListAccountAssignmentDeletionStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentDeletionStatusResponseFilterSensitiveLog: (obj: ListAccountAssignmentDeletionStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentsRequestFilterSensitiveLog: (obj: ListAccountAssignmentsRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountAssignmentsResponseFilterSensitiveLog: (obj: ListAccountAssignmentsResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountsForProvisionedPermissionSetRequestFilterSensitiveLog: (obj: ListAccountsForProvisionedPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListAccountsForProvisionedPermissionSetResponseFilterSensitiveLog: (obj: ListAccountsForProvisionedPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListCustomerManagedPolicyReferencesInPermissionSetRequestFilterSensitiveLog: (obj: ListCustomerManagedPolicyReferencesInPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListCustomerManagedPolicyReferencesInPermissionSetResponseFilterSensitiveLog: (obj: ListCustomerManagedPolicyReferencesInPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListInstancesRequestFilterSensitiveLog: (obj: ListInstancesRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListInstancesResponseFilterSensitiveLog: (obj: ListInstancesResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListManagedPoliciesInPermissionSetRequestFilterSensitiveLog: (obj: ListManagedPoliciesInPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListManagedPoliciesInPermissionSetResponseFilterSensitiveLog: (obj: ListManagedPoliciesInPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetProvisioningStatusRequestFilterSensitiveLog: (obj: ListPermissionSetProvisioningStatusRequest) => any;
+/**
+ * @internal
+ */
+export declare const PermissionSetProvisioningStatusMetadataFilterSensitiveLog: (obj: PermissionSetProvisioningStatusMetadata) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetProvisioningStatusResponseFilterSensitiveLog: (obj: ListPermissionSetProvisioningStatusResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetsRequestFilterSensitiveLog: (obj: ListPermissionSetsRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetsResponseFilterSensitiveLog: (obj: ListPermissionSetsResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetsProvisionedToAccountRequestFilterSensitiveLog: (obj: ListPermissionSetsProvisionedToAccountRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListPermissionSetsProvisionedToAccountResponseFilterSensitiveLog: (obj: ListPermissionSetsProvisionedToAccountResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListTagsForResourceRequestFilterSensitiveLog: (obj: ListTagsForResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListTagsForResourceResponseFilterSensitiveLog: (obj: ListTagsForResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const ProvisionPermissionSetRequestFilterSensitiveLog: (obj: ProvisionPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const ProvisionPermissionSetResponseFilterSensitiveLog: (obj: ProvisionPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const PutInlinePolicyToPermissionSetRequestFilterSensitiveLog: (obj: PutInlinePolicyToPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const PutInlinePolicyToPermissionSetResponseFilterSensitiveLog: (obj: PutInlinePolicyToPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const PutPermissionsBoundaryToPermissionSetRequestFilterSensitiveLog: (obj: PutPermissionsBoundaryToPermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const PutPermissionsBoundaryToPermissionSetResponseFilterSensitiveLog: (obj: PutPermissionsBoundaryToPermissionSetResponse) => any;
+/**
+ * @internal
+ */
+export declare const TagResourceRequestFilterSensitiveLog: (obj: TagResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const TagResourceResponseFilterSensitiveLog: (obj: TagResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const UntagResourceRequestFilterSensitiveLog: (obj: UntagResourceRequest) => any;
+/**
+ * @internal
+ */
+export declare const UntagResourceResponseFilterSensitiveLog: (obj: UntagResourceResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateInstanceAccessControlAttributeConfigurationRequestFilterSensitiveLog: (obj: UpdateInstanceAccessControlAttributeConfigurationRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateInstanceAccessControlAttributeConfigurationResponseFilterSensitiveLog: (obj: UpdateInstanceAccessControlAttributeConfigurationResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdatePermissionSetRequestFilterSensitiveLog: (obj: UpdatePermissionSetRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdatePermissionSetResponseFilterSensitiveLog: (obj: UpdatePermissionSetResponse) => any;