@aws-sdk/client-sso-admin 3.141.0 → 3.150.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +27 -0
- package/dist-cjs/protocols/Aws_json1_1.js +185 -308
- package/dist-es/protocols/Aws_json1_1.js +297 -309
- package/dist-types/SSOAdmin.d.ts +28 -30
- package/dist-types/commands/AttachCustomerManagedPolicyReferenceToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/AttachManagedPolicyToPermissionSetCommand.d.ts +3 -3
- package/dist-types/commands/CreateAccountAssignmentCommand.d.ts +5 -5
- package/dist-types/commands/CreatePermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/DescribeInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -4
- package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/DetachManagedPolicyFromPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentCreationStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentDeletionStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentsCommand.d.ts +1 -2
- package/dist-types/commands/ListCustomerManagedPolicyReferencesInPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListInstancesCommand.d.ts +1 -1
- package/dist-types/commands/ListManagedPoliciesInPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListPermissionSetProvisioningStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListPermissionSetsCommand.d.ts +1 -1
- package/dist-types/commands/PutInlinePolicyToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/PutPermissionsBoundaryToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/UpdateInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -3
- package/dist-types/models/models_0.d.ts +87 -73
- package/package.json +11 -6
package/dist-types/SSOAdmin.d.ts
CHANGED
|
@@ -42,28 +42,28 @@ import { SSOAdminClient } from "./SSOAdminClient";
|
|
|
42
42
|
*/
|
|
43
43
|
export declare class SSOAdmin extends SSOAdminClient {
|
|
44
44
|
/**
|
|
45
|
-
* <p>Attaches the specified
|
|
45
|
+
* <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
|
|
46
46
|
*/
|
|
47
47
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput>;
|
|
48
48
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
|
|
49
49
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
|
|
50
50
|
/**
|
|
51
|
-
* <p>Attaches an Amazon Web Services managed
|
|
51
|
+
* <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
|
|
52
52
|
* <note>
|
|
53
53
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
54
54
|
* need to call <code>
|
|
55
55
|
* <a>ProvisionPermissionSet</a>
|
|
56
56
|
* </code> after this operation.
|
|
57
|
-
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
58
|
-
* all assigned accounts.</p>
|
|
57
|
+
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
58
|
+
* to all assigned accounts.</p>
|
|
59
59
|
* </note>
|
|
60
60
|
*/
|
|
61
61
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachManagedPolicyToPermissionSetCommandOutput>;
|
|
62
62
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
|
|
63
63
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
|
|
64
64
|
/**
|
|
65
|
-
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
66
|
-
* set.</p>
|
|
65
|
+
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
66
|
+
* permission set.</p>
|
|
67
67
|
* <note>
|
|
68
68
|
* <p>The term <i>principal</i> here refers to a user or group that is defined
|
|
69
69
|
* in Amazon Web Services SSO.</p>
|
|
@@ -71,9 +71,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
71
71
|
* <note>
|
|
72
72
|
* <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
|
|
73
73
|
* permission set will automatically be provisioned to the account in the form of an IAM
|
|
74
|
-
* policy. That policy is attached to the
|
|
75
|
-
* subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
76
|
-
* not be updated automatically. In this case, you must call <code>
|
|
74
|
+
* policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
|
|
75
|
+
* is subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
76
|
+
* will not be updated automatically. In this case, you must call <code>
|
|
77
77
|
* <a>ProvisionPermissionSet</a>
|
|
78
78
|
* </code> to make these updates.</p>
|
|
79
79
|
* </note>
|
|
@@ -90,7 +90,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
90
90
|
createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
91
91
|
createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
92
92
|
/**
|
|
93
|
-
* <p>Creates a permission set within a specified SSO instance.</p>
|
|
93
|
+
* <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
|
|
94
94
|
* <note>
|
|
95
95
|
* <p>To grant users and groups access to Amazon Web Services account resources, use <code>
|
|
96
96
|
* <a>CreateAccountAssignment</a>
|
|
@@ -147,10 +147,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
147
147
|
describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
148
148
|
describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
149
149
|
/**
|
|
150
|
-
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
|
|
151
|
-
*
|
|
152
|
-
*
|
|
153
|
-
* For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
150
|
+
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
|
|
151
|
+
* with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
|
|
152
|
+
* return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
154
153
|
*/
|
|
155
154
|
describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeInstanceAccessControlAttributeConfigurationCommandOutput>;
|
|
156
155
|
describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: DescribeInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
@@ -168,13 +167,13 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
168
167
|
describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
169
168
|
describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
170
169
|
/**
|
|
171
|
-
* <p>Detaches the specified
|
|
170
|
+
* <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
|
|
172
171
|
*/
|
|
173
172
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput>;
|
|
174
173
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
|
|
175
174
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
|
|
176
175
|
/**
|
|
177
|
-
* <p>Detaches the attached Amazon Web Services managed
|
|
176
|
+
* <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
|
|
178
177
|
*/
|
|
179
178
|
detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachManagedPolicyFromPermissionSetCommandOutput>;
|
|
180
179
|
detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, cb: (err: any, data?: DetachManagedPolicyFromPermissionSetCommandOutput) => void): void;
|
|
@@ -192,22 +191,21 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
192
191
|
getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
|
|
193
192
|
getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
|
|
194
193
|
/**
|
|
195
|
-
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
|
|
194
|
+
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
|
|
196
195
|
* instance.</p>
|
|
197
196
|
*/
|
|
198
197
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentCreationStatusCommandOutput>;
|
|
199
198
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
|
|
200
199
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
|
|
201
200
|
/**
|
|
202
|
-
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
|
|
201
|
+
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
|
|
203
202
|
* instance.</p>
|
|
204
203
|
*/
|
|
205
204
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentDeletionStatusCommandOutput>;
|
|
206
205
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
207
206
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
208
207
|
/**
|
|
209
|
-
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
|
|
210
|
-
* set.</p>
|
|
208
|
+
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
|
|
211
209
|
*/
|
|
212
210
|
listAccountAssignments(args: ListAccountAssignmentsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentsCommandOutput>;
|
|
213
211
|
listAccountAssignments(args: ListAccountAssignmentsCommandInput, cb: (err: any, data?: ListAccountAssignmentsCommandOutput) => void): void;
|
|
@@ -219,32 +217,32 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
219
217
|
listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
|
|
220
218
|
listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
|
|
221
219
|
/**
|
|
222
|
-
* <p>Lists all
|
|
220
|
+
* <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
|
|
223
221
|
*/
|
|
224
222
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput>;
|
|
225
223
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
|
|
226
224
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
|
|
227
225
|
/**
|
|
228
|
-
* <p>Lists the SSO instances that the caller has access to.</p>
|
|
226
|
+
* <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
|
|
229
227
|
*/
|
|
230
228
|
listInstances(args: ListInstancesCommandInput, options?: __HttpHandlerOptions): Promise<ListInstancesCommandOutput>;
|
|
231
229
|
listInstances(args: ListInstancesCommandInput, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
|
|
232
230
|
listInstances(args: ListInstancesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
|
|
233
231
|
/**
|
|
234
|
-
* <p>Lists the Amazon Web Services managed
|
|
232
|
+
* <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
|
|
235
233
|
*/
|
|
236
234
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListManagedPoliciesInPermissionSetCommandOutput>;
|
|
237
235
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
|
|
238
236
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
|
|
239
237
|
/**
|
|
240
|
-
* <p>Lists the status of the permission set provisioning requests for a specified SSO
|
|
238
|
+
* <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
|
|
241
239
|
* instance.</p>
|
|
242
240
|
*/
|
|
243
241
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetProvisioningStatusCommandOutput>;
|
|
244
242
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
245
243
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
246
244
|
/**
|
|
247
|
-
* <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
|
|
245
|
+
* <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
|
|
248
246
|
*/
|
|
249
247
|
listPermissionSets(args: ListPermissionSetsCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetsCommandOutput>;
|
|
250
248
|
listPermissionSets(args: ListPermissionSetsCommandInput, cb: (err: any, data?: ListPermissionSetsCommandOutput) => void): void;
|
|
@@ -269,7 +267,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
269
267
|
provisionPermissionSet(args: ProvisionPermissionSetCommandInput, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
|
|
270
268
|
provisionPermissionSet(args: ProvisionPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
|
|
271
269
|
/**
|
|
272
|
-
* <p>Attaches an
|
|
270
|
+
* <p>Attaches an inline policy to a permission set.</p>
|
|
273
271
|
* <note>
|
|
274
272
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
275
273
|
* need to call <code>
|
|
@@ -282,7 +280,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
282
280
|
putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
|
|
283
281
|
putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
|
|
284
282
|
/**
|
|
285
|
-
* <p>Attaches an Amazon Web Services managed or customer managed
|
|
283
|
+
* <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
|
|
286
284
|
*/
|
|
287
285
|
putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<PutPermissionsBoundaryToPermissionSetCommandOutput>;
|
|
288
286
|
putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, cb: (err: any, data?: PutPermissionsBoundaryToPermissionSetCommandOutput) => void): void;
|
|
@@ -300,9 +298,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
300
298
|
untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
|
|
301
299
|
untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
|
|
302
300
|
/**
|
|
303
|
-
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
|
|
304
|
-
*
|
|
305
|
-
*
|
|
301
|
+
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
|
|
302
|
+
* for attributes-based access control (ABAC). When using an external identity provider as an
|
|
303
|
+
* identity source, you can pass attributes through the SAML assertion as an alternative to
|
|
306
304
|
* configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
|
|
307
305
|
* these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
|
|
308
306
|
* identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
@@ -7,7 +7,7 @@ export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput
|
|
|
7
7
|
export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput extends AttachCustomerManagedPolicyReferenceToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches the specified
|
|
10
|
+
* <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,14 +7,14 @@ export interface AttachManagedPolicyToPermissionSetCommandInput extends AttachMa
|
|
|
7
7
|
export interface AttachManagedPolicyToPermissionSetCommandOutput extends AttachManagedPolicyToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an Amazon Web Services managed
|
|
10
|
+
* <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
13
13
|
* need to call <code>
|
|
14
14
|
* <a>ProvisionPermissionSet</a>
|
|
15
15
|
* </code> after this operation.
|
|
16
|
-
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
17
|
-
* all assigned accounts.</p>
|
|
16
|
+
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
17
|
+
* to all assigned accounts.</p>
|
|
18
18
|
* </note>
|
|
19
19
|
* @example
|
|
20
20
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,8 +7,8 @@ export interface CreateAccountAssignmentCommandInput extends CreateAccountAssign
|
|
|
7
7
|
export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssignmentResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
11
|
-
* set.</p>
|
|
10
|
+
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
11
|
+
* permission set.</p>
|
|
12
12
|
* <note>
|
|
13
13
|
* <p>The term <i>principal</i> here refers to a user or group that is defined
|
|
14
14
|
* in Amazon Web Services SSO.</p>
|
|
@@ -16,9 +16,9 @@ export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssig
|
|
|
16
16
|
* <note>
|
|
17
17
|
* <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
|
|
18
18
|
* permission set will automatically be provisioned to the account in the form of an IAM
|
|
19
|
-
* policy. That policy is attached to the
|
|
20
|
-
* subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
21
|
-
* not be updated automatically. In this case, you must call <code>
|
|
19
|
+
* policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
|
|
20
|
+
* is subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
21
|
+
* will not be updated automatically. In this case, you must call <code>
|
|
22
22
|
* <a>ProvisionPermissionSet</a>
|
|
23
23
|
* </code> to make these updates.</p>
|
|
24
24
|
* </note>
|
|
@@ -7,7 +7,7 @@ export interface CreatePermissionSetCommandInput extends CreatePermissionSetRequ
|
|
|
7
7
|
export interface CreatePermissionSetCommandOutput extends CreatePermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates a permission set within a specified SSO instance.</p>
|
|
10
|
+
* <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>To grant users and groups access to Amazon Web Services account resources, use <code>
|
|
13
13
|
* <a>CreateAccountAssignment</a>
|
|
@@ -7,10 +7,9 @@ export interface DescribeInstanceAccessControlAttributeConfigurationCommandInput
|
|
|
7
7
|
export interface DescribeInstanceAccessControlAttributeConfigurationCommandOutput extends DescribeInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
* For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
10
|
+
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
|
|
11
|
+
* with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
|
|
12
|
+
* return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
14
13
|
* @example
|
|
15
14
|
* Use a bare-bones client and the command you need to make an API call.
|
|
16
15
|
* ```javascript
|
package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts
CHANGED
|
@@ -7,7 +7,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInp
|
|
|
7
7
|
export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput extends DetachCustomerManagedPolicyReferenceFromPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Detaches the specified
|
|
10
|
+
* <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface DetachManagedPolicyFromPermissionSetCommandInput extends Detach
|
|
|
7
7
|
export interface DetachManagedPolicyFromPermissionSetCommandOutput extends DetachManagedPolicyFromPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Detaches the attached Amazon Web Services managed
|
|
10
|
+
* <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentCreationStatusCommandInput extends ListAcc
|
|
|
7
7
|
export interface ListAccountAssignmentCreationStatusCommandOutput extends ListAccountAssignmentCreationStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentDeletionStatusCommandInput extends ListAcc
|
|
|
7
7
|
export interface ListAccountAssignmentDeletionStatusCommandOutput extends ListAccountAssignmentDeletionStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,8 +7,7 @@ export interface ListAccountAssignmentsCommandInput extends ListAccountAssignmen
|
|
|
7
7
|
export interface ListAccountAssignmentsCommandOutput extends ListAccountAssignmentsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
|
|
11
|
-
* set.</p>
|
|
10
|
+
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
|
|
12
11
|
* @example
|
|
13
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandInput
|
|
|
7
7
|
export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput extends ListCustomerManagedPolicyReferencesInPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists all
|
|
10
|
+
* <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListInstancesCommandInput extends ListInstancesRequest {
|
|
|
7
7
|
export interface ListInstancesCommandOutput extends ListInstancesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the SSO instances that the caller has access to.</p>
|
|
10
|
+
* <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListManagedPoliciesInPermissionSetCommandInput extends ListMana
|
|
|
7
7
|
export interface ListManagedPoliciesInPermissionSetCommandOutput extends ListManagedPoliciesInPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the Amazon Web Services managed
|
|
10
|
+
* <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListPermissionSetProvisioningStatusCommandInput extends ListPer
|
|
|
7
7
|
export interface ListPermissionSetProvisioningStatusCommandOutput extends ListPermissionSetProvisioningStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the permission set provisioning requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,7 +7,7 @@ export interface ListPermissionSetsCommandInput extends ListPermissionSetsReques
|
|
|
7
7
|
export interface ListPermissionSetsCommandOutput extends ListPermissionSetsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
|
|
10
|
+
* <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface PutInlinePolicyToPermissionSetCommandInput extends PutInlinePol
|
|
|
7
7
|
export interface PutInlinePolicyToPermissionSetCommandOutput extends PutInlinePolicyToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an
|
|
10
|
+
* <p>Attaches an inline policy to a permission set.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
13
13
|
* need to call <code>
|
|
@@ -7,7 +7,7 @@ export interface PutPermissionsBoundaryToPermissionSetCommandInput extends PutPe
|
|
|
7
7
|
export interface PutPermissionsBoundaryToPermissionSetCommandOutput extends PutPermissionsBoundaryToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an Amazon Web Services managed or customer managed
|
|
10
|
+
* <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,9 +7,9 @@ export interface UpdateInstanceAccessControlAttributeConfigurationCommandInput e
|
|
|
7
7
|
export interface UpdateInstanceAccessControlAttributeConfigurationCommandOutput extends UpdateInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
|
|
11
|
-
*
|
|
12
|
-
*
|
|
10
|
+
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
|
|
11
|
+
* for attributes-based access control (ABAC). When using an external identity provider as an
|
|
12
|
+
* identity source, you can pass attributes through the SAML assertion as an alternative to
|
|
13
13
|
* configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
|
|
14
14
|
* these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
|
|
15
15
|
* identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|