@aws-sdk/client-sso-admin 3.141.0 → 3.150.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/CHANGELOG.md +27 -0
  2. package/dist-cjs/protocols/Aws_json1_1.js +185 -308
  3. package/dist-es/protocols/Aws_json1_1.js +297 -309
  4. package/dist-types/SSOAdmin.d.ts +28 -30
  5. package/dist-types/commands/AttachCustomerManagedPolicyReferenceToPermissionSetCommand.d.ts +1 -1
  6. package/dist-types/commands/AttachManagedPolicyToPermissionSetCommand.d.ts +3 -3
  7. package/dist-types/commands/CreateAccountAssignmentCommand.d.ts +5 -5
  8. package/dist-types/commands/CreatePermissionSetCommand.d.ts +1 -1
  9. package/dist-types/commands/DescribeInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -4
  10. package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts +1 -1
  11. package/dist-types/commands/DetachManagedPolicyFromPermissionSetCommand.d.ts +1 -1
  12. package/dist-types/commands/ListAccountAssignmentCreationStatusCommand.d.ts +1 -1
  13. package/dist-types/commands/ListAccountAssignmentDeletionStatusCommand.d.ts +1 -1
  14. package/dist-types/commands/ListAccountAssignmentsCommand.d.ts +1 -2
  15. package/dist-types/commands/ListCustomerManagedPolicyReferencesInPermissionSetCommand.d.ts +1 -1
  16. package/dist-types/commands/ListInstancesCommand.d.ts +1 -1
  17. package/dist-types/commands/ListManagedPoliciesInPermissionSetCommand.d.ts +1 -1
  18. package/dist-types/commands/ListPermissionSetProvisioningStatusCommand.d.ts +1 -1
  19. package/dist-types/commands/ListPermissionSetsCommand.d.ts +1 -1
  20. package/dist-types/commands/PutInlinePolicyToPermissionSetCommand.d.ts +1 -1
  21. package/dist-types/commands/PutPermissionsBoundaryToPermissionSetCommand.d.ts +1 -1
  22. package/dist-types/commands/UpdateInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -3
  23. package/dist-types/models/models_0.d.ts +87 -73
  24. package/package.json +11 -6
@@ -42,28 +42,28 @@ import { SSOAdminClient } from "./SSOAdminClient";
42
42
  */
43
43
  export declare class SSOAdmin extends SSOAdminClient {
44
44
  /**
45
- * <p>Attaches the specified IAM customer managed policy to the specified <a>PermissionSet</a>.</p>
45
+ * <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
46
46
  */
47
47
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput>;
48
48
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
49
49
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
50
50
  /**
51
- * <p>Attaches an Amazon Web Services managed IAM policy ARN to a permission set.</p>
51
+ * <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
52
52
  * <note>
53
53
  * <p>If the permission set is already referenced by one or more account assignments, you will
54
54
  * need to call <code>
55
55
  * <a>ProvisionPermissionSet</a>
56
56
  * </code> after this operation.
57
- * Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates to
58
- * all assigned accounts.</p>
57
+ * Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
58
+ * to all assigned accounts.</p>
59
59
  * </note>
60
60
  */
61
61
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachManagedPolicyToPermissionSetCommandOutput>;
62
62
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
63
63
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
64
64
  /**
65
- * <p>Assigns access to a principal for a specified Amazon Web Services account using a specified permission
66
- * set.</p>
65
+ * <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
66
+ * permission set.</p>
67
67
  * <note>
68
68
  * <p>The term <i>principal</i> here refers to a user or group that is defined
69
69
  * in Amazon Web Services SSO.</p>
@@ -71,9 +71,9 @@ export declare class SSOAdmin extends SSOAdminClient {
71
71
  * <note>
72
72
  * <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
73
73
  * permission set will automatically be provisioned to the account in the form of an IAM
74
- * policy. That policy is attached to the SSO-created IAM role. If the permission set is
75
- * subsequently updated, the corresponding IAM policies attached to roles in your accounts will
76
- * not be updated automatically. In this case, you must call <code>
74
+ * policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
75
+ * is subsequently updated, the corresponding IAM policies attached to roles in your accounts
76
+ * will not be updated automatically. In this case, you must call <code>
77
77
  * <a>ProvisionPermissionSet</a>
78
78
  * </code> to make these updates.</p>
79
79
  * </note>
@@ -90,7 +90,7 @@ export declare class SSOAdmin extends SSOAdminClient {
90
90
  createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
91
91
  createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
92
92
  /**
93
- * <p>Creates a permission set within a specified SSO instance.</p>
93
+ * <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
94
94
  * <note>
95
95
  * <p>To grant users and groups access to Amazon Web Services account resources, use <code>
96
96
  * <a>CreateAccountAssignment</a>
@@ -147,10 +147,9 @@ export declare class SSOAdmin extends SSOAdminClient {
147
147
  describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
148
148
  describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
149
149
  /**
150
- * <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
151
- * work with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This
152
- * will not return attributes configured and sent by an external identity provider.
153
- * For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
150
+ * <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
151
+ * with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
152
+ * return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
154
153
  */
155
154
  describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeInstanceAccessControlAttributeConfigurationCommandOutput>;
156
155
  describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: DescribeInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
@@ -168,13 +167,13 @@ export declare class SSOAdmin extends SSOAdminClient {
168
167
  describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
169
168
  describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
170
169
  /**
171
- * <p>Detaches the specified IAM customer managed policy from the specified <a>PermissionSet</a>.</p>
170
+ * <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
172
171
  */
173
172
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput>;
174
173
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
175
174
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
176
175
  /**
177
- * <p>Detaches the attached Amazon Web Services managed IAM policy ARN from the specified permission set.</p>
176
+ * <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
178
177
  */
179
178
  detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachManagedPolicyFromPermissionSetCommandOutput>;
180
179
  detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, cb: (err: any, data?: DetachManagedPolicyFromPermissionSetCommandOutput) => void): void;
@@ -192,22 +191,21 @@ export declare class SSOAdmin extends SSOAdminClient {
192
191
  getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
193
192
  getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
194
193
  /**
195
- * <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
194
+ * <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
196
195
  * instance.</p>
197
196
  */
198
197
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentCreationStatusCommandOutput>;
199
198
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
200
199
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
201
200
  /**
202
- * <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
201
+ * <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
203
202
  * instance.</p>
204
203
  */
205
204
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentDeletionStatusCommandOutput>;
206
205
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
207
206
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
208
207
  /**
209
- * <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
210
- * set.</p>
208
+ * <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
211
209
  */
212
210
  listAccountAssignments(args: ListAccountAssignmentsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentsCommandOutput>;
213
211
  listAccountAssignments(args: ListAccountAssignmentsCommandInput, cb: (err: any, data?: ListAccountAssignmentsCommandOutput) => void): void;
@@ -219,32 +217,32 @@ export declare class SSOAdmin extends SSOAdminClient {
219
217
  listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
220
218
  listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
221
219
  /**
222
- * <p>Lists all IAM customer managed policies attached to a specified <a>PermissionSet</a>.</p>
220
+ * <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
223
221
  */
224
222
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput>;
225
223
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
226
224
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
227
225
  /**
228
- * <p>Lists the SSO instances that the caller has access to.</p>
226
+ * <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
229
227
  */
230
228
  listInstances(args: ListInstancesCommandInput, options?: __HttpHandlerOptions): Promise<ListInstancesCommandOutput>;
231
229
  listInstances(args: ListInstancesCommandInput, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
232
230
  listInstances(args: ListInstancesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
233
231
  /**
234
- * <p>Lists the Amazon Web Services managed IAM policy that is attached to a specified permission set.</p>
232
+ * <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
235
233
  */
236
234
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListManagedPoliciesInPermissionSetCommandOutput>;
237
235
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
238
236
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
239
237
  /**
240
- * <p>Lists the status of the permission set provisioning requests for a specified SSO
238
+ * <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
241
239
  * instance.</p>
242
240
  */
243
241
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetProvisioningStatusCommandOutput>;
244
242
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
245
243
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
246
244
  /**
247
- * <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
245
+ * <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
248
246
  */
249
247
  listPermissionSets(args: ListPermissionSetsCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetsCommandOutput>;
250
248
  listPermissionSets(args: ListPermissionSetsCommandInput, cb: (err: any, data?: ListPermissionSetsCommandOutput) => void): void;
@@ -269,7 +267,7 @@ export declare class SSOAdmin extends SSOAdminClient {
269
267
  provisionPermissionSet(args: ProvisionPermissionSetCommandInput, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
270
268
  provisionPermissionSet(args: ProvisionPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
271
269
  /**
272
- * <p>Attaches an IAM inline policy to a permission set.</p>
270
+ * <p>Attaches an inline policy to a permission set.</p>
273
271
  * <note>
274
272
  * <p>If the permission set is already referenced by one or more account assignments, you will
275
273
  * need to call <code>
@@ -282,7 +280,7 @@ export declare class SSOAdmin extends SSOAdminClient {
282
280
  putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
283
281
  putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
284
282
  /**
285
- * <p>Attaches an Amazon Web Services managed or customer managed IAM policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
283
+ * <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
286
284
  */
287
285
  putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<PutPermissionsBoundaryToPermissionSetCommandOutput>;
288
286
  putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, cb: (err: any, data?: PutPermissionsBoundaryToPermissionSetCommandOutput) => void): void;
@@ -300,9 +298,9 @@ export declare class SSOAdmin extends SSOAdminClient {
300
298
  untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
301
299
  untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
302
300
  /**
303
- * <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
304
- * instance for attributes-based access control (ABAC). When using an external identity provider
305
- * as an identity source, you can pass attributes through the SAML assertion as an alternative to
301
+ * <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
302
+ * for attributes-based access control (ABAC). When using an external identity provider as an
303
+ * identity source, you can pass attributes through the SAML assertion as an alternative to
306
304
  * configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
307
305
  * these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
308
306
  * identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
@@ -7,7 +7,7 @@ export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput
7
7
  export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput extends AttachCustomerManagedPolicyReferenceToPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Attaches the specified IAM customer managed policy to the specified <a>PermissionSet</a>.</p>
10
+ * <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,14 +7,14 @@ export interface AttachManagedPolicyToPermissionSetCommandInput extends AttachMa
7
7
  export interface AttachManagedPolicyToPermissionSetCommandOutput extends AttachManagedPolicyToPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Attaches an Amazon Web Services managed IAM policy ARN to a permission set.</p>
10
+ * <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
11
11
  * <note>
12
12
  * <p>If the permission set is already referenced by one or more account assignments, you will
13
13
  * need to call <code>
14
14
  * <a>ProvisionPermissionSet</a>
15
15
  * </code> after this operation.
16
- * Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates to
17
- * all assigned accounts.</p>
16
+ * Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
17
+ * to all assigned accounts.</p>
18
18
  * </note>
19
19
  * @example
20
20
  * Use a bare-bones client and the command you need to make an API call.
@@ -7,8 +7,8 @@ export interface CreateAccountAssignmentCommandInput extends CreateAccountAssign
7
7
  export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssignmentResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Assigns access to a principal for a specified Amazon Web Services account using a specified permission
11
- * set.</p>
10
+ * <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
11
+ * permission set.</p>
12
12
  * <note>
13
13
  * <p>The term <i>principal</i> here refers to a user or group that is defined
14
14
  * in Amazon Web Services SSO.</p>
@@ -16,9 +16,9 @@ export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssig
16
16
  * <note>
17
17
  * <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
18
18
  * permission set will automatically be provisioned to the account in the form of an IAM
19
- * policy. That policy is attached to the SSO-created IAM role. If the permission set is
20
- * subsequently updated, the corresponding IAM policies attached to roles in your accounts will
21
- * not be updated automatically. In this case, you must call <code>
19
+ * policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
20
+ * is subsequently updated, the corresponding IAM policies attached to roles in your accounts
21
+ * will not be updated automatically. In this case, you must call <code>
22
22
  * <a>ProvisionPermissionSet</a>
23
23
  * </code> to make these updates.</p>
24
24
  * </note>
@@ -7,7 +7,7 @@ export interface CreatePermissionSetCommandInput extends CreatePermissionSetRequ
7
7
  export interface CreatePermissionSetCommandOutput extends CreatePermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Creates a permission set within a specified SSO instance.</p>
10
+ * <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
11
11
  * <note>
12
12
  * <p>To grant users and groups access to Amazon Web Services account resources, use <code>
13
13
  * <a>CreateAccountAssignment</a>
@@ -7,10 +7,9 @@ export interface DescribeInstanceAccessControlAttributeConfigurationCommandInput
7
7
  export interface DescribeInstanceAccessControlAttributeConfigurationCommandOutput extends DescribeInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
11
- * work with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This
12
- * will not return attributes configured and sent by an external identity provider.
13
- * For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
10
+ * <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
11
+ * with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
12
+ * return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
14
13
  * @example
15
14
  * Use a bare-bones client and the command you need to make an API call.
16
15
  * ```javascript
@@ -7,7 +7,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInp
7
7
  export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput extends DetachCustomerManagedPolicyReferenceFromPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Detaches the specified IAM customer managed policy from the specified <a>PermissionSet</a>.</p>
10
+ * <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface DetachManagedPolicyFromPermissionSetCommandInput extends Detach
7
7
  export interface DetachManagedPolicyFromPermissionSetCommandOutput extends DetachManagedPolicyFromPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Detaches the attached Amazon Web Services managed IAM policy ARN from the specified permission set.</p>
10
+ * <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentCreationStatusCommandInput extends ListAcc
7
7
  export interface ListAccountAssignmentCreationStatusCommandOutput extends ListAccountAssignmentCreationStatusResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
10
+ * <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
11
11
  * instance.</p>
12
12
  * @example
13
13
  * Use a bare-bones client and the command you need to make an API call.
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentDeletionStatusCommandInput extends ListAcc
7
7
  export interface ListAccountAssignmentDeletionStatusCommandOutput extends ListAccountAssignmentDeletionStatusResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
10
+ * <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
11
11
  * instance.</p>
12
12
  * @example
13
13
  * Use a bare-bones client and the command you need to make an API call.
@@ -7,8 +7,7 @@ export interface ListAccountAssignmentsCommandInput extends ListAccountAssignmen
7
7
  export interface ListAccountAssignmentsCommandOutput extends ListAccountAssignmentsResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
11
- * set.</p>
10
+ * <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
12
11
  * @example
13
12
  * Use a bare-bones client and the command you need to make an API call.
14
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandInput
7
7
  export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput extends ListCustomerManagedPolicyReferencesInPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists all IAM customer managed policies attached to a specified <a>PermissionSet</a>.</p>
10
+ * <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface ListInstancesCommandInput extends ListInstancesRequest {
7
7
  export interface ListInstancesCommandOutput extends ListInstancesResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the SSO instances that the caller has access to.</p>
10
+ * <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface ListManagedPoliciesInPermissionSetCommandInput extends ListMana
7
7
  export interface ListManagedPoliciesInPermissionSetCommandOutput extends ListManagedPoliciesInPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the Amazon Web Services managed IAM policy that is attached to a specified permission set.</p>
10
+ * <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface ListPermissionSetProvisioningStatusCommandInput extends ListPer
7
7
  export interface ListPermissionSetProvisioningStatusCommandOutput extends ListPermissionSetProvisioningStatusResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the status of the permission set provisioning requests for a specified SSO
10
+ * <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
11
11
  * instance.</p>
12
12
  * @example
13
13
  * Use a bare-bones client and the command you need to make an API call.
@@ -7,7 +7,7 @@ export interface ListPermissionSetsCommandInput extends ListPermissionSetsReques
7
7
  export interface ListPermissionSetsCommandOutput extends ListPermissionSetsResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
10
+ * <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,7 +7,7 @@ export interface PutInlinePolicyToPermissionSetCommandInput extends PutInlinePol
7
7
  export interface PutInlinePolicyToPermissionSetCommandOutput extends PutInlinePolicyToPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Attaches an IAM inline policy to a permission set.</p>
10
+ * <p>Attaches an inline policy to a permission set.</p>
11
11
  * <note>
12
12
  * <p>If the permission set is already referenced by one or more account assignments, you will
13
13
  * need to call <code>
@@ -7,7 +7,7 @@ export interface PutPermissionsBoundaryToPermissionSetCommandInput extends PutPe
7
7
  export interface PutPermissionsBoundaryToPermissionSetCommandOutput extends PutPermissionsBoundaryToPermissionSetResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Attaches an Amazon Web Services managed or customer managed IAM policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
10
+ * <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
11
11
  * @example
12
12
  * Use a bare-bones client and the command you need to make an API call.
13
13
  * ```javascript
@@ -7,9 +7,9 @@ export interface UpdateInstanceAccessControlAttributeConfigurationCommandInput e
7
7
  export interface UpdateInstanceAccessControlAttributeConfigurationCommandOutput extends UpdateInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
8
8
  }
9
9
  /**
10
- * <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
11
- * instance for attributes-based access control (ABAC). When using an external identity provider
12
- * as an identity source, you can pass attributes through the SAML assertion as an alternative to
10
+ * <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
11
+ * for attributes-based access control (ABAC). When using an external identity provider as an
12
+ * identity source, you can pass attributes through the SAML assertion as an alternative to
13
13
  * configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
14
14
  * these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
15
15
  * identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>