@aws-sdk/client-sso-admin 3.142.0 → 3.154.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +24 -0
- package/dist-types/SSOAdmin.d.ts +28 -30
- package/dist-types/commands/AttachCustomerManagedPolicyReferenceToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/AttachManagedPolicyToPermissionSetCommand.d.ts +3 -3
- package/dist-types/commands/CreateAccountAssignmentCommand.d.ts +5 -5
- package/dist-types/commands/CreatePermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/DescribeInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -4
- package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/DetachManagedPolicyFromPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentCreationStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentDeletionStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListAccountAssignmentsCommand.d.ts +1 -2
- package/dist-types/commands/ListCustomerManagedPolicyReferencesInPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListInstancesCommand.d.ts +1 -1
- package/dist-types/commands/ListManagedPoliciesInPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/ListPermissionSetProvisioningStatusCommand.d.ts +1 -1
- package/dist-types/commands/ListPermissionSetsCommand.d.ts +1 -1
- package/dist-types/commands/PutInlinePolicyToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/PutPermissionsBoundaryToPermissionSetCommand.d.ts +1 -1
- package/dist-types/commands/UpdateInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -3
- package/dist-types/models/models_0.d.ts +87 -73
- package/package.json +9 -4
package/CHANGELOG.md
CHANGED
|
@@ -3,6 +3,30 @@
|
|
|
3
3
|
All notable changes to this project will be documented in this file.
|
|
4
4
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
|
5
5
|
|
|
6
|
+
# [3.154.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.153.0...v3.154.0) (2022-08-19)
|
|
7
|
+
|
|
8
|
+
**Note:** Version bump only for package @aws-sdk/client-sso-admin
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
|
|
12
|
+
|
|
13
|
+
|
|
14
|
+
# [3.150.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.149.0...v3.150.0) (2022-08-15)
|
|
15
|
+
|
|
16
|
+
**Note:** Version bump only for package @aws-sdk/client-sso-admin
|
|
17
|
+
|
|
18
|
+
|
|
19
|
+
|
|
20
|
+
|
|
21
|
+
|
|
22
|
+
# [3.145.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.144.0...v3.145.0) (2022-08-08)
|
|
23
|
+
|
|
24
|
+
**Note:** Version bump only for package @aws-sdk/client-sso-admin
|
|
25
|
+
|
|
26
|
+
|
|
27
|
+
|
|
28
|
+
|
|
29
|
+
|
|
6
30
|
# [3.142.0](https://github.com/aws/aws-sdk-js-v3/compare/v3.141.0...v3.142.0) (2022-08-02)
|
|
7
31
|
|
|
8
32
|
|
package/dist-types/SSOAdmin.d.ts
CHANGED
|
@@ -42,28 +42,28 @@ import { SSOAdminClient } from "./SSOAdminClient";
|
|
|
42
42
|
*/
|
|
43
43
|
export declare class SSOAdmin extends SSOAdminClient {
|
|
44
44
|
/**
|
|
45
|
-
* <p>Attaches the specified
|
|
45
|
+
* <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
|
|
46
46
|
*/
|
|
47
47
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput>;
|
|
48
48
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
|
|
49
49
|
attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
|
|
50
50
|
/**
|
|
51
|
-
* <p>Attaches an Amazon Web Services managed
|
|
51
|
+
* <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
|
|
52
52
|
* <note>
|
|
53
53
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
54
54
|
* need to call <code>
|
|
55
55
|
* <a>ProvisionPermissionSet</a>
|
|
56
56
|
* </code> after this operation.
|
|
57
|
-
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
58
|
-
* all assigned accounts.</p>
|
|
57
|
+
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
58
|
+
* to all assigned accounts.</p>
|
|
59
59
|
* </note>
|
|
60
60
|
*/
|
|
61
61
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachManagedPolicyToPermissionSetCommandOutput>;
|
|
62
62
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
|
|
63
63
|
attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
|
|
64
64
|
/**
|
|
65
|
-
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
66
|
-
* set.</p>
|
|
65
|
+
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
66
|
+
* permission set.</p>
|
|
67
67
|
* <note>
|
|
68
68
|
* <p>The term <i>principal</i> here refers to a user or group that is defined
|
|
69
69
|
* in Amazon Web Services SSO.</p>
|
|
@@ -71,9 +71,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
71
71
|
* <note>
|
|
72
72
|
* <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
|
|
73
73
|
* permission set will automatically be provisioned to the account in the form of an IAM
|
|
74
|
-
* policy. That policy is attached to the
|
|
75
|
-
* subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
76
|
-
* not be updated automatically. In this case, you must call <code>
|
|
74
|
+
* policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
|
|
75
|
+
* is subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
76
|
+
* will not be updated automatically. In this case, you must call <code>
|
|
77
77
|
* <a>ProvisionPermissionSet</a>
|
|
78
78
|
* </code> to make these updates.</p>
|
|
79
79
|
* </note>
|
|
@@ -90,7 +90,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
90
90
|
createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
91
91
|
createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
92
92
|
/**
|
|
93
|
-
* <p>Creates a permission set within a specified SSO instance.</p>
|
|
93
|
+
* <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
|
|
94
94
|
* <note>
|
|
95
95
|
* <p>To grant users and groups access to Amazon Web Services account resources, use <code>
|
|
96
96
|
* <a>CreateAccountAssignment</a>
|
|
@@ -147,10 +147,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
147
147
|
describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
148
148
|
describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
149
149
|
/**
|
|
150
|
-
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
|
|
151
|
-
*
|
|
152
|
-
*
|
|
153
|
-
* For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
150
|
+
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
|
|
151
|
+
* with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
|
|
152
|
+
* return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
154
153
|
*/
|
|
155
154
|
describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeInstanceAccessControlAttributeConfigurationCommandOutput>;
|
|
156
155
|
describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: DescribeInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
|
|
@@ -168,13 +167,13 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
168
167
|
describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
169
168
|
describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
170
169
|
/**
|
|
171
|
-
* <p>Detaches the specified
|
|
170
|
+
* <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
|
|
172
171
|
*/
|
|
173
172
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput>;
|
|
174
173
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
|
|
175
174
|
detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
|
|
176
175
|
/**
|
|
177
|
-
* <p>Detaches the attached Amazon Web Services managed
|
|
176
|
+
* <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
|
|
178
177
|
*/
|
|
179
178
|
detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachManagedPolicyFromPermissionSetCommandOutput>;
|
|
180
179
|
detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, cb: (err: any, data?: DetachManagedPolicyFromPermissionSetCommandOutput) => void): void;
|
|
@@ -192,22 +191,21 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
192
191
|
getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
|
|
193
192
|
getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
|
|
194
193
|
/**
|
|
195
|
-
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
|
|
194
|
+
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
|
|
196
195
|
* instance.</p>
|
|
197
196
|
*/
|
|
198
197
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentCreationStatusCommandOutput>;
|
|
199
198
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
|
|
200
199
|
listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
|
|
201
200
|
/**
|
|
202
|
-
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
|
|
201
|
+
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
|
|
203
202
|
* instance.</p>
|
|
204
203
|
*/
|
|
205
204
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentDeletionStatusCommandOutput>;
|
|
206
205
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
207
206
|
listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
|
|
208
207
|
/**
|
|
209
|
-
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
|
|
210
|
-
* set.</p>
|
|
208
|
+
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
|
|
211
209
|
*/
|
|
212
210
|
listAccountAssignments(args: ListAccountAssignmentsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentsCommandOutput>;
|
|
213
211
|
listAccountAssignments(args: ListAccountAssignmentsCommandInput, cb: (err: any, data?: ListAccountAssignmentsCommandOutput) => void): void;
|
|
@@ -219,32 +217,32 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
219
217
|
listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
|
|
220
218
|
listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
|
|
221
219
|
/**
|
|
222
|
-
* <p>Lists all
|
|
220
|
+
* <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
|
|
223
221
|
*/
|
|
224
222
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput>;
|
|
225
223
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
|
|
226
224
|
listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
|
|
227
225
|
/**
|
|
228
|
-
* <p>Lists the SSO instances that the caller has access to.</p>
|
|
226
|
+
* <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
|
|
229
227
|
*/
|
|
230
228
|
listInstances(args: ListInstancesCommandInput, options?: __HttpHandlerOptions): Promise<ListInstancesCommandOutput>;
|
|
231
229
|
listInstances(args: ListInstancesCommandInput, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
|
|
232
230
|
listInstances(args: ListInstancesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
|
|
233
231
|
/**
|
|
234
|
-
* <p>Lists the Amazon Web Services managed
|
|
232
|
+
* <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
|
|
235
233
|
*/
|
|
236
234
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListManagedPoliciesInPermissionSetCommandOutput>;
|
|
237
235
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
|
|
238
236
|
listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
|
|
239
237
|
/**
|
|
240
|
-
* <p>Lists the status of the permission set provisioning requests for a specified SSO
|
|
238
|
+
* <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
|
|
241
239
|
* instance.</p>
|
|
242
240
|
*/
|
|
243
241
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetProvisioningStatusCommandOutput>;
|
|
244
242
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
245
243
|
listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
|
|
246
244
|
/**
|
|
247
|
-
* <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
|
|
245
|
+
* <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
|
|
248
246
|
*/
|
|
249
247
|
listPermissionSets(args: ListPermissionSetsCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetsCommandOutput>;
|
|
250
248
|
listPermissionSets(args: ListPermissionSetsCommandInput, cb: (err: any, data?: ListPermissionSetsCommandOutput) => void): void;
|
|
@@ -269,7 +267,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
269
267
|
provisionPermissionSet(args: ProvisionPermissionSetCommandInput, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
|
|
270
268
|
provisionPermissionSet(args: ProvisionPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
|
|
271
269
|
/**
|
|
272
|
-
* <p>Attaches an
|
|
270
|
+
* <p>Attaches an inline policy to a permission set.</p>
|
|
273
271
|
* <note>
|
|
274
272
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
275
273
|
* need to call <code>
|
|
@@ -282,7 +280,7 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
282
280
|
putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
|
|
283
281
|
putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
|
|
284
282
|
/**
|
|
285
|
-
* <p>Attaches an Amazon Web Services managed or customer managed
|
|
283
|
+
* <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
|
|
286
284
|
*/
|
|
287
285
|
putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<PutPermissionsBoundaryToPermissionSetCommandOutput>;
|
|
288
286
|
putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, cb: (err: any, data?: PutPermissionsBoundaryToPermissionSetCommandOutput) => void): void;
|
|
@@ -300,9 +298,9 @@ export declare class SSOAdmin extends SSOAdminClient {
|
|
|
300
298
|
untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
|
|
301
299
|
untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
|
|
302
300
|
/**
|
|
303
|
-
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
|
|
304
|
-
*
|
|
305
|
-
*
|
|
301
|
+
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
|
|
302
|
+
* for attributes-based access control (ABAC). When using an external identity provider as an
|
|
303
|
+
* identity source, you can pass attributes through the SAML assertion as an alternative to
|
|
306
304
|
* configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
|
|
307
305
|
* these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
|
|
308
306
|
* identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
@@ -7,7 +7,7 @@ export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput
|
|
|
7
7
|
export interface AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput extends AttachCustomerManagedPolicyReferenceToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches the specified
|
|
10
|
+
* <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,14 +7,14 @@ export interface AttachManagedPolicyToPermissionSetCommandInput extends AttachMa
|
|
|
7
7
|
export interface AttachManagedPolicyToPermissionSetCommandOutput extends AttachManagedPolicyToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an Amazon Web Services managed
|
|
10
|
+
* <p>Attaches an Amazon Web Services managed policy ARN to a permission set.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
13
13
|
* need to call <code>
|
|
14
14
|
* <a>ProvisionPermissionSet</a>
|
|
15
15
|
* </code> after this operation.
|
|
16
|
-
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
17
|
-
* all assigned accounts.</p>
|
|
16
|
+
* Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
|
|
17
|
+
* to all assigned accounts.</p>
|
|
18
18
|
* </note>
|
|
19
19
|
* @example
|
|
20
20
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,8 +7,8 @@ export interface CreateAccountAssignmentCommandInput extends CreateAccountAssign
|
|
|
7
7
|
export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssignmentResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
11
|
-
* set.</p>
|
|
10
|
+
* <p>Assigns access to a principal for a specified Amazon Web Services account using a specified
|
|
11
|
+
* permission set.</p>
|
|
12
12
|
* <note>
|
|
13
13
|
* <p>The term <i>principal</i> here refers to a user or group that is defined
|
|
14
14
|
* in Amazon Web Services SSO.</p>
|
|
@@ -16,9 +16,9 @@ export interface CreateAccountAssignmentCommandOutput extends CreateAccountAssig
|
|
|
16
16
|
* <note>
|
|
17
17
|
* <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
|
|
18
18
|
* permission set will automatically be provisioned to the account in the form of an IAM
|
|
19
|
-
* policy. That policy is attached to the
|
|
20
|
-
* subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
21
|
-
* not be updated automatically. In this case, you must call <code>
|
|
19
|
+
* policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set
|
|
20
|
+
* is subsequently updated, the corresponding IAM policies attached to roles in your accounts
|
|
21
|
+
* will not be updated automatically. In this case, you must call <code>
|
|
22
22
|
* <a>ProvisionPermissionSet</a>
|
|
23
23
|
* </code> to make these updates.</p>
|
|
24
24
|
* </note>
|
|
@@ -7,7 +7,7 @@ export interface CreatePermissionSetCommandInput extends CreatePermissionSetRequ
|
|
|
7
7
|
export interface CreatePermissionSetCommandOutput extends CreatePermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Creates a permission set within a specified SSO instance.</p>
|
|
10
|
+
* <p>Creates a permission set within a specified Amazon Web Services SSO instance.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>To grant users and groups access to Amazon Web Services account resources, use <code>
|
|
13
13
|
* <a>CreateAccountAssignment</a>
|
|
@@ -7,10 +7,9 @@ export interface DescribeInstanceAccessControlAttributeConfigurationCommandInput
|
|
|
7
7
|
export interface DescribeInstanceAccessControlAttributeConfigurationCommandOutput extends DescribeInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to
|
|
11
|
-
*
|
|
12
|
-
*
|
|
13
|
-
* For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
10
|
+
* <p>Returns the list of Amazon Web Services SSO identity store attributes that have been configured to work
|
|
11
|
+
* with attributes-based access control (ABAC) for the specified Amazon Web Services SSO instance. This will not
|
|
12
|
+
* return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
14
13
|
* @example
|
|
15
14
|
* Use a bare-bones client and the command you need to make an API call.
|
|
16
15
|
* ```javascript
|
package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts
CHANGED
|
@@ -7,7 +7,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInp
|
|
|
7
7
|
export interface DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput extends DetachCustomerManagedPolicyReferenceFromPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Detaches the specified
|
|
10
|
+
* <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface DetachManagedPolicyFromPermissionSetCommandInput extends Detach
|
|
|
7
7
|
export interface DetachManagedPolicyFromPermissionSetCommandOutput extends DetachManagedPolicyFromPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Detaches the attached Amazon Web Services managed
|
|
10
|
+
* <p>Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentCreationStatusCommandInput extends ListAcc
|
|
|
7
7
|
export interface ListAccountAssignmentCreationStatusCommandOutput extends ListAccountAssignmentCreationStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the Amazon Web Services account assignment creation requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,7 +7,7 @@ export interface ListAccountAssignmentDeletionStatusCommandInput extends ListAcc
|
|
|
7
7
|
export interface ListAccountAssignmentDeletionStatusCommandOutput extends ListAccountAssignmentDeletionStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the Amazon Web Services account assignment deletion requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,8 +7,7 @@ export interface ListAccountAssignmentsCommandInput extends ListAccountAssignmen
|
|
|
7
7
|
export interface ListAccountAssignmentsCommandOutput extends ListAccountAssignmentsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission
|
|
11
|
-
* set.</p>
|
|
10
|
+
* <p>Lists the assignee of the specified Amazon Web Services account with the specified permission set.</p>
|
|
12
11
|
* @example
|
|
13
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
14
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandInput
|
|
|
7
7
|
export interface ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput extends ListCustomerManagedPolicyReferencesInPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists all
|
|
10
|
+
* <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListInstancesCommandInput extends ListInstancesRequest {
|
|
|
7
7
|
export interface ListInstancesCommandOutput extends ListInstancesResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the SSO instances that the caller has access to.</p>
|
|
10
|
+
* <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListManagedPoliciesInPermissionSetCommandInput extends ListMana
|
|
|
7
7
|
export interface ListManagedPoliciesInPermissionSetCommandOutput extends ListManagedPoliciesInPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the Amazon Web Services managed
|
|
10
|
+
* <p>Lists the Amazon Web Services managed policy that is attached to a specified permission set.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface ListPermissionSetProvisioningStatusCommandInput extends ListPer
|
|
|
7
7
|
export interface ListPermissionSetProvisioningStatusCommandOutput extends ListPermissionSetProvisioningStatusResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the status of the permission set provisioning requests for a specified SSO
|
|
10
|
+
* <p>Lists the status of the permission set provisioning requests for a specified Amazon Web Services SSO
|
|
11
11
|
* instance.</p>
|
|
12
12
|
* @example
|
|
13
13
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -7,7 +7,7 @@ export interface ListPermissionSetsCommandInput extends ListPermissionSetsReques
|
|
|
7
7
|
export interface ListPermissionSetsCommandOutput extends ListPermissionSetsResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Lists the <a>PermissionSet</a>s in an SSO instance.</p>
|
|
10
|
+
* <p>Lists the <a>PermissionSet</a>s in an Amazon Web Services SSO instance.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,7 +7,7 @@ export interface PutInlinePolicyToPermissionSetCommandInput extends PutInlinePol
|
|
|
7
7
|
export interface PutInlinePolicyToPermissionSetCommandOutput extends PutInlinePolicyToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an
|
|
10
|
+
* <p>Attaches an inline policy to a permission set.</p>
|
|
11
11
|
* <note>
|
|
12
12
|
* <p>If the permission set is already referenced by one or more account assignments, you will
|
|
13
13
|
* need to call <code>
|
|
@@ -7,7 +7,7 @@ export interface PutPermissionsBoundaryToPermissionSetCommandInput extends PutPe
|
|
|
7
7
|
export interface PutPermissionsBoundaryToPermissionSetCommandOutput extends PutPermissionsBoundaryToPermissionSetResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Attaches an Amazon Web Services managed or customer managed
|
|
10
|
+
* <p>Attaches an Amazon Web Services managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
|
|
11
11
|
* @example
|
|
12
12
|
* Use a bare-bones client and the command you need to make an API call.
|
|
13
13
|
* ```javascript
|
|
@@ -7,9 +7,9 @@ export interface UpdateInstanceAccessControlAttributeConfigurationCommandInput e
|
|
|
7
7
|
export interface UpdateInstanceAccessControlAttributeConfigurationCommandOutput extends UpdateInstanceAccessControlAttributeConfigurationResponse, __MetadataBearer {
|
|
8
8
|
}
|
|
9
9
|
/**
|
|
10
|
-
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO
|
|
11
|
-
*
|
|
12
|
-
*
|
|
10
|
+
* <p>Updates the Amazon Web Services SSO identity store attributes that you can use with the Amazon Web Services SSO instance
|
|
11
|
+
* for attributes-based access control (ABAC). When using an external identity provider as an
|
|
12
|
+
* identity source, you can pass attributes through the SAML assertion as an alternative to
|
|
13
13
|
* configuring attributes from the Amazon Web Services SSO identity store. If a SAML assertion passes any of
|
|
14
14
|
* these attributes, Amazon Web Services SSO replaces the attribute value with the value from the Amazon Web Services SSO
|
|
15
15
|
* identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
@@ -1,7 +1,9 @@
|
|
|
1
1
|
import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
|
|
2
2
|
import { SSOAdminServiceException as __BaseException } from "./SSOAdminServiceException";
|
|
3
3
|
/**
|
|
4
|
-
* <p>The value used for mapping a specified attribute to an identity source. For more
|
|
4
|
+
* <p>The value used for mapping a specified attribute to an identity source. For more
|
|
5
|
+
* information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/attributemappingsconcept.html">Attribute mappings</a>
|
|
6
|
+
* in the <i>Amazon Web Services SSO User Guide</i>.</p>
|
|
5
7
|
*/
|
|
6
8
|
export interface AccessControlAttributeValue {
|
|
7
9
|
/**
|
|
@@ -13,14 +15,14 @@ export interface AccessControlAttributeValue {
|
|
|
13
15
|
* <p>These are Amazon Web Services SSO identity store attributes that you can configure for use in
|
|
14
16
|
* attributes-based access control (ABAC). You can create permissions policies that determine who
|
|
15
17
|
* can access your Amazon Web Services resources based upon the configured attribute values. When you enable
|
|
16
|
-
* ABAC and specify <code>AccessControlAttributes</code>, Amazon Web Services SSO passes the attribute values
|
|
17
|
-
*
|
|
18
|
+
* ABAC and specify <code>AccessControlAttributes</code>, Amazon Web Services SSO passes the attribute values of
|
|
19
|
+
* the authenticated user into IAM for use in policy evaluation.</p>
|
|
18
20
|
*/
|
|
19
21
|
export interface AccessControlAttribute {
|
|
20
22
|
/**
|
|
21
23
|
* <p>The name of the attribute associated with your identities in your identity source. This is
|
|
22
|
-
* used to map a specified attribute in your identity source with an attribute in
|
|
23
|
-
* SSO.</p>
|
|
24
|
+
* used to map a specified attribute in your identity source with an attribute in
|
|
25
|
+
* Amazon Web Services SSO.</p>
|
|
24
26
|
*/
|
|
25
27
|
Key: string | undefined;
|
|
26
28
|
/**
|
|
@@ -143,21 +145,23 @@ export interface AccountAssignmentOperationStatusMetadata {
|
|
|
143
145
|
CreatedDate?: Date;
|
|
144
146
|
}
|
|
145
147
|
/**
|
|
146
|
-
* <p>Specifies the name and path of
|
|
148
|
+
* <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
|
|
147
149
|
*/
|
|
148
150
|
export interface CustomerManagedPolicyReference {
|
|
149
151
|
/**
|
|
150
|
-
* <p>The name of the policy
|
|
152
|
+
* <p>The name of the IAM policy that you have configured in each account where you want to deploy your permission set.</p>
|
|
151
153
|
*/
|
|
152
154
|
Name: string | undefined;
|
|
153
155
|
/**
|
|
154
|
-
* <p>The path
|
|
156
|
+
* <p>The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is <code>/</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names">Friendly
|
|
157
|
+
* names and paths</a> in the <i>Identity and Access Management User
|
|
158
|
+
* Guide</i>.</p>
|
|
155
159
|
*/
|
|
156
160
|
Path?: string;
|
|
157
161
|
}
|
|
158
162
|
export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
|
|
159
163
|
/**
|
|
160
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
164
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
161
165
|
*/
|
|
162
166
|
InstanceArn: string | undefined;
|
|
163
167
|
/**
|
|
@@ -165,7 +169,7 @@ export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
|
|
|
165
169
|
*/
|
|
166
170
|
PermissionSetArn: string | undefined;
|
|
167
171
|
/**
|
|
168
|
-
* <p>Specifies the name and path of
|
|
172
|
+
* <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
|
|
169
173
|
*/
|
|
170
174
|
CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
|
|
171
175
|
}
|
|
@@ -250,22 +254,22 @@ export declare class ValidationException extends __BaseException {
|
|
|
250
254
|
constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
|
|
251
255
|
}
|
|
252
256
|
/**
|
|
253
|
-
* <p>A structure that stores the details of the Amazon Web Services managed
|
|
257
|
+
* <p>A structure that stores the details of the Amazon Web Services managed policy.</p>
|
|
254
258
|
*/
|
|
255
259
|
export interface AttachedManagedPolicy {
|
|
256
260
|
/**
|
|
257
|
-
* <p>The name of the Amazon Web Services managed
|
|
261
|
+
* <p>The name of the Amazon Web Services managed policy.</p>
|
|
258
262
|
*/
|
|
259
263
|
Name?: string;
|
|
260
264
|
/**
|
|
261
|
-
* <p>The ARN of the Amazon Web Services managed
|
|
265
|
+
* <p>The ARN of the Amazon Web Services managed policy. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
262
266
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
263
267
|
*/
|
|
264
268
|
Arn?: string;
|
|
265
269
|
}
|
|
266
270
|
export interface AttachManagedPolicyToPermissionSetRequest {
|
|
267
271
|
/**
|
|
268
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
272
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
269
273
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
270
274
|
*/
|
|
271
275
|
InstanceArn: string | undefined;
|
|
@@ -283,7 +287,7 @@ export interface AttachManagedPolicyToPermissionSetResponse {
|
|
|
283
287
|
}
|
|
284
288
|
export interface CreateAccountAssignmentRequest {
|
|
285
289
|
/**
|
|
286
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
290
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
287
291
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
288
292
|
*/
|
|
289
293
|
InstanceArn: string | undefined;
|
|
@@ -328,16 +332,15 @@ export interface InstanceAccessControlAttributeConfiguration {
|
|
|
328
332
|
}
|
|
329
333
|
export interface CreateInstanceAccessControlAttributeConfigurationRequest {
|
|
330
334
|
/**
|
|
331
|
-
* <p>The ARN of the SSO instance under which the operation will be executed.</p>
|
|
335
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
|
|
332
336
|
*/
|
|
333
337
|
InstanceArn: string | undefined;
|
|
334
338
|
/**
|
|
335
|
-
* <p>Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration.
|
|
336
|
-
*
|
|
337
|
-
*
|
|
338
|
-
*
|
|
339
|
-
*
|
|
340
|
-
* store.</p>
|
|
339
|
+
* <p>Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration. When
|
|
340
|
+
* using an external identity provider as an identity source, you can pass attributes through the
|
|
341
|
+
* SAML assertion. Doing so provides an alternative to configuring attributes from the Amazon Web Services SSO
|
|
342
|
+
* identity store. If a SAML assertion passes any of these attributes, Amazon Web Services SSO will replace the
|
|
343
|
+
* attribute value with the value from the Amazon Web Services SSO identity store.</p>
|
|
341
344
|
*/
|
|
342
345
|
InstanceAccessControlAttributeConfiguration: InstanceAccessControlAttributeConfiguration | undefined;
|
|
343
346
|
}
|
|
@@ -368,7 +371,7 @@ export interface CreatePermissionSetRequest {
|
|
|
368
371
|
*/
|
|
369
372
|
Description?: string;
|
|
370
373
|
/**
|
|
371
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
374
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
372
375
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
373
376
|
*/
|
|
374
377
|
InstanceArn: string | undefined;
|
|
@@ -427,7 +430,7 @@ export interface CreatePermissionSetResponse {
|
|
|
427
430
|
}
|
|
428
431
|
export interface DeleteAccountAssignmentRequest {
|
|
429
432
|
/**
|
|
430
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
433
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
431
434
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
432
435
|
*/
|
|
433
436
|
InstanceArn: string | undefined;
|
|
@@ -460,7 +463,7 @@ export interface DeleteAccountAssignmentResponse {
|
|
|
460
463
|
}
|
|
461
464
|
export interface DeleteInlinePolicyFromPermissionSetRequest {
|
|
462
465
|
/**
|
|
463
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
466
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
464
467
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
465
468
|
*/
|
|
466
469
|
InstanceArn: string | undefined;
|
|
@@ -473,7 +476,7 @@ export interface DeleteInlinePolicyFromPermissionSetResponse {
|
|
|
473
476
|
}
|
|
474
477
|
export interface DeleteInstanceAccessControlAttributeConfigurationRequest {
|
|
475
478
|
/**
|
|
476
|
-
* <p>The ARN of the SSO instance under which the operation will be executed.</p>
|
|
479
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
|
|
477
480
|
*/
|
|
478
481
|
InstanceArn: string | undefined;
|
|
479
482
|
}
|
|
@@ -481,7 +484,7 @@ export interface DeleteInstanceAccessControlAttributeConfigurationResponse {
|
|
|
481
484
|
}
|
|
482
485
|
export interface DeletePermissionsBoundaryFromPermissionSetRequest {
|
|
483
486
|
/**
|
|
484
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
487
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
485
488
|
*/
|
|
486
489
|
InstanceArn: string | undefined;
|
|
487
490
|
/**
|
|
@@ -493,7 +496,7 @@ export interface DeletePermissionsBoundaryFromPermissionSetResponse {
|
|
|
493
496
|
}
|
|
494
497
|
export interface DeletePermissionSetRequest {
|
|
495
498
|
/**
|
|
496
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
499
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
497
500
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
498
501
|
*/
|
|
499
502
|
InstanceArn: string | undefined;
|
|
@@ -506,7 +509,7 @@ export interface DeletePermissionSetResponse {
|
|
|
506
509
|
}
|
|
507
510
|
export interface DescribeAccountAssignmentCreationStatusRequest {
|
|
508
511
|
/**
|
|
509
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
512
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
510
513
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
511
514
|
*/
|
|
512
515
|
InstanceArn: string | undefined;
|
|
@@ -523,7 +526,7 @@ export interface DescribeAccountAssignmentCreationStatusResponse {
|
|
|
523
526
|
}
|
|
524
527
|
export interface DescribeAccountAssignmentDeletionStatusRequest {
|
|
525
528
|
/**
|
|
526
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
529
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
527
530
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
528
531
|
*/
|
|
529
532
|
InstanceArn: string | undefined;
|
|
@@ -540,7 +543,7 @@ export interface DescribeAccountAssignmentDeletionStatusResponse {
|
|
|
540
543
|
}
|
|
541
544
|
export interface DescribeInstanceAccessControlAttributeConfigurationRequest {
|
|
542
545
|
/**
|
|
543
|
-
* <p>The ARN of the SSO instance under which the operation will be executed.</p>
|
|
546
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
|
|
544
547
|
*/
|
|
545
548
|
InstanceArn: string | undefined;
|
|
546
549
|
}
|
|
@@ -566,12 +569,12 @@ export interface DescribeInstanceAccessControlAttributeConfigurationResponse {
|
|
|
566
569
|
}
|
|
567
570
|
export interface DescribePermissionSetRequest {
|
|
568
571
|
/**
|
|
569
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
572
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
570
573
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
571
574
|
*/
|
|
572
575
|
InstanceArn: string | undefined;
|
|
573
576
|
/**
|
|
574
|
-
* <p>The ARN of the permission set
|
|
577
|
+
* <p>The ARN of the permission set. </p>
|
|
575
578
|
*/
|
|
576
579
|
PermissionSetArn: string | undefined;
|
|
577
580
|
}
|
|
@@ -583,7 +586,7 @@ export interface DescribePermissionSetResponse {
|
|
|
583
586
|
}
|
|
584
587
|
export interface DescribePermissionSetProvisioningStatusRequest {
|
|
585
588
|
/**
|
|
586
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
589
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
587
590
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
588
591
|
*/
|
|
589
592
|
InstanceArn: string | undefined;
|
|
@@ -633,7 +636,7 @@ export interface DescribePermissionSetProvisioningStatusResponse {
|
|
|
633
636
|
}
|
|
634
637
|
export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
|
|
635
638
|
/**
|
|
636
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
639
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
637
640
|
*/
|
|
638
641
|
InstanceArn: string | undefined;
|
|
639
642
|
/**
|
|
@@ -641,7 +644,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
|
|
|
641
644
|
*/
|
|
642
645
|
PermissionSetArn: string | undefined;
|
|
643
646
|
/**
|
|
644
|
-
* <p>Specifies the name and path of
|
|
647
|
+
* <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
|
|
645
648
|
*/
|
|
646
649
|
CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
|
|
647
650
|
}
|
|
@@ -649,7 +652,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetResponse {
|
|
|
649
652
|
}
|
|
650
653
|
export interface DetachManagedPolicyFromPermissionSetRequest {
|
|
651
654
|
/**
|
|
652
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
655
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
653
656
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
654
657
|
*/
|
|
655
658
|
InstanceArn: string | undefined;
|
|
@@ -667,7 +670,7 @@ export interface DetachManagedPolicyFromPermissionSetResponse {
|
|
|
667
670
|
}
|
|
668
671
|
export interface GetInlinePolicyForPermissionSetRequest {
|
|
669
672
|
/**
|
|
670
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
673
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
671
674
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
672
675
|
*/
|
|
673
676
|
InstanceArn: string | undefined;
|
|
@@ -678,13 +681,13 @@ export interface GetInlinePolicyForPermissionSetRequest {
|
|
|
678
681
|
}
|
|
679
682
|
export interface GetInlinePolicyForPermissionSetResponse {
|
|
680
683
|
/**
|
|
681
|
-
* <p>The
|
|
684
|
+
* <p>The inline policy that is attached to the permission set.</p>
|
|
682
685
|
*/
|
|
683
686
|
InlinePolicy?: string;
|
|
684
687
|
}
|
|
685
688
|
export interface GetPermissionsBoundaryForPermissionSetRequest {
|
|
686
689
|
/**
|
|
687
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
690
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
688
691
|
*/
|
|
689
692
|
InstanceArn: string | undefined;
|
|
690
693
|
/**
|
|
@@ -693,20 +696,28 @@ export interface GetPermissionsBoundaryForPermissionSetRequest {
|
|
|
693
696
|
PermissionSetArn: string | undefined;
|
|
694
697
|
}
|
|
695
698
|
/**
|
|
696
|
-
* <p>Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want
|
|
697
|
-
* to
|
|
698
|
-
*
|
|
699
|
+
* <p>Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want
|
|
700
|
+
* to set as a permissions boundary. Specify either <code>CustomerManagedPolicyReference</code>
|
|
701
|
+
* to use the name and path of a customer managed policy, or <code>ManagedPolicyArn</code> to use
|
|
702
|
+
* the ARN of an Amazon Web Services managed policy. A permissions boundary represents the maximum permissions
|
|
703
|
+
* that any policy can grant your role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
|
|
704
|
+
* entities</a> in the <i>Identity and Access Management User Guide</i>.</p>
|
|
699
705
|
* <important>
|
|
700
|
-
* <p>Policies used as permissions boundaries
|
|
706
|
+
* <p>Policies used as permissions boundaries don't provide permissions. You must also attach
|
|
707
|
+
* an IAM policy to the role. To learn how the effective permissions for a role are
|
|
708
|
+
* evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy
|
|
709
|
+
* evaluation logic</a> in the <i>Identity and Access Management User
|
|
710
|
+
* Guide</i>.</p>
|
|
701
711
|
* </important>
|
|
702
712
|
*/
|
|
703
713
|
export interface PermissionsBoundary {
|
|
704
714
|
/**
|
|
705
|
-
* <p>Specifies the name and path of
|
|
715
|
+
* <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
|
|
706
716
|
*/
|
|
707
717
|
CustomerManagedPolicyReference?: CustomerManagedPolicyReference;
|
|
708
718
|
/**
|
|
709
|
-
* <p>The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions
|
|
719
|
+
* <p>The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions
|
|
720
|
+
* boundary.</p>
|
|
710
721
|
*/
|
|
711
722
|
ManagedPolicyArn?: string;
|
|
712
723
|
}
|
|
@@ -717,16 +728,16 @@ export interface GetPermissionsBoundaryForPermissionSetResponse {
|
|
|
717
728
|
PermissionsBoundary?: PermissionsBoundary;
|
|
718
729
|
}
|
|
719
730
|
/**
|
|
720
|
-
* <p>Provides information about the SSO instance.</p>
|
|
731
|
+
* <p>Provides information about the Amazon Web Services SSO instance.</p>
|
|
721
732
|
*/
|
|
722
733
|
export interface InstanceMetadata {
|
|
723
734
|
/**
|
|
724
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
735
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
725
736
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
726
737
|
*/
|
|
727
738
|
InstanceArn?: string;
|
|
728
739
|
/**
|
|
729
|
-
* <p>The identifier of the identity store that is connected to the SSO instance.</p>
|
|
740
|
+
* <p>The identifier of the identity store that is connected to the Amazon Web Services SSO instance.</p>
|
|
730
741
|
*/
|
|
731
742
|
IdentityStoreId?: string;
|
|
732
743
|
}
|
|
@@ -741,7 +752,7 @@ export interface OperationStatusFilter {
|
|
|
741
752
|
}
|
|
742
753
|
export interface ListAccountAssignmentCreationStatusRequest {
|
|
743
754
|
/**
|
|
744
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
755
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
745
756
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
746
757
|
*/
|
|
747
758
|
InstanceArn: string | undefined;
|
|
@@ -770,7 +781,7 @@ export interface ListAccountAssignmentCreationStatusResponse {
|
|
|
770
781
|
}
|
|
771
782
|
export interface ListAccountAssignmentDeletionStatusRequest {
|
|
772
783
|
/**
|
|
773
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
784
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
774
785
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
775
786
|
*/
|
|
776
787
|
InstanceArn: string | undefined;
|
|
@@ -799,7 +810,7 @@ export interface ListAccountAssignmentDeletionStatusResponse {
|
|
|
799
810
|
}
|
|
800
811
|
export interface ListAccountAssignmentsRequest {
|
|
801
812
|
/**
|
|
802
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
813
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
803
814
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
804
815
|
*/
|
|
805
816
|
InstanceArn: string | undefined;
|
|
@@ -836,7 +847,7 @@ export declare enum ProvisioningStatus {
|
|
|
836
847
|
}
|
|
837
848
|
export interface ListAccountsForProvisionedPermissionSetRequest {
|
|
838
849
|
/**
|
|
839
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
850
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
840
851
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
841
852
|
*/
|
|
842
853
|
InstanceArn: string | undefined;
|
|
@@ -870,11 +881,11 @@ export interface ListAccountsForProvisionedPermissionSetResponse {
|
|
|
870
881
|
}
|
|
871
882
|
export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
|
|
872
883
|
/**
|
|
873
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
884
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
874
885
|
*/
|
|
875
886
|
InstanceArn: string | undefined;
|
|
876
887
|
/**
|
|
877
|
-
* <p>The ARN of the <code>PermissionSet</code
|
|
888
|
+
* <p>The ARN of the <code>PermissionSet</code>. </p>
|
|
878
889
|
*/
|
|
879
890
|
PermissionSetArn: string | undefined;
|
|
880
891
|
/**
|
|
@@ -882,17 +893,20 @@ export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
|
|
|
882
893
|
*/
|
|
883
894
|
MaxResults?: number;
|
|
884
895
|
/**
|
|
885
|
-
* <p>The pagination token for the list API. Initially the value is null. Use the output of
|
|
896
|
+
* <p>The pagination token for the list API. Initially the value is null. Use the output of
|
|
897
|
+
* previous API calls to make subsequent calls.</p>
|
|
886
898
|
*/
|
|
887
899
|
NextToken?: string;
|
|
888
900
|
}
|
|
889
901
|
export interface ListCustomerManagedPolicyReferencesInPermissionSetResponse {
|
|
890
902
|
/**
|
|
891
|
-
* <p>Specifies the names and paths of the
|
|
903
|
+
* <p>Specifies the names and paths of the customer managed policies that you have attached to
|
|
904
|
+
* your permission set.</p>
|
|
892
905
|
*/
|
|
893
906
|
CustomerManagedPolicyReferences?: CustomerManagedPolicyReference[];
|
|
894
907
|
/**
|
|
895
|
-
* <p>The pagination token for the list API. Initially the value is null. Use the output of
|
|
908
|
+
* <p>The pagination token for the list API. Initially the value is null. Use the output of
|
|
909
|
+
* previous API calls to make subsequent calls.</p>
|
|
896
910
|
*/
|
|
897
911
|
NextToken?: string;
|
|
898
912
|
}
|
|
@@ -908,7 +922,7 @@ export interface ListInstancesRequest {
|
|
|
908
922
|
}
|
|
909
923
|
export interface ListInstancesResponse {
|
|
910
924
|
/**
|
|
911
|
-
* <p>Lists the SSO instances that the caller has access to.</p>
|
|
925
|
+
* <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
|
|
912
926
|
*/
|
|
913
927
|
Instances?: InstanceMetadata[];
|
|
914
928
|
/**
|
|
@@ -918,7 +932,7 @@ export interface ListInstancesResponse {
|
|
|
918
932
|
}
|
|
919
933
|
export interface ListManagedPoliciesInPermissionSetRequest {
|
|
920
934
|
/**
|
|
921
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
935
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
922
936
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
923
937
|
*/
|
|
924
938
|
InstanceArn: string | undefined;
|
|
@@ -938,7 +952,7 @@ export interface ListManagedPoliciesInPermissionSetRequest {
|
|
|
938
952
|
}
|
|
939
953
|
export interface ListManagedPoliciesInPermissionSetResponse {
|
|
940
954
|
/**
|
|
941
|
-
* <p>
|
|
955
|
+
* <p>An array of the <a>AttachedManagedPolicy</a> data type object.</p>
|
|
942
956
|
*/
|
|
943
957
|
AttachedManagedPolicies?: AttachedManagedPolicy[];
|
|
944
958
|
/**
|
|
@@ -948,7 +962,7 @@ export interface ListManagedPoliciesInPermissionSetResponse {
|
|
|
948
962
|
}
|
|
949
963
|
export interface ListPermissionSetProvisioningStatusRequest {
|
|
950
964
|
/**
|
|
951
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
965
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
952
966
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
953
967
|
*/
|
|
954
968
|
InstanceArn: string | undefined;
|
|
@@ -995,7 +1009,7 @@ export interface ListPermissionSetProvisioningStatusResponse {
|
|
|
995
1009
|
}
|
|
996
1010
|
export interface ListPermissionSetsRequest {
|
|
997
1011
|
/**
|
|
998
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1012
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
999
1013
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1000
1014
|
*/
|
|
1001
1015
|
InstanceArn: string | undefined;
|
|
@@ -1020,7 +1034,7 @@ export interface ListPermissionSetsResponse {
|
|
|
1020
1034
|
}
|
|
1021
1035
|
export interface ListPermissionSetsProvisionedToAccountRequest {
|
|
1022
1036
|
/**
|
|
1023
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1037
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1024
1038
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1025
1039
|
*/
|
|
1026
1040
|
InstanceArn: string | undefined;
|
|
@@ -1053,7 +1067,7 @@ export interface ListPermissionSetsProvisionedToAccountResponse {
|
|
|
1053
1067
|
}
|
|
1054
1068
|
export interface ListTagsForResourceRequest {
|
|
1055
1069
|
/**
|
|
1056
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1070
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1057
1071
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1058
1072
|
*/
|
|
1059
1073
|
InstanceArn: string | undefined;
|
|
@@ -1082,7 +1096,7 @@ export declare enum ProvisionTargetType {
|
|
|
1082
1096
|
}
|
|
1083
1097
|
export interface ProvisionPermissionSetRequest {
|
|
1084
1098
|
/**
|
|
1085
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1099
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1086
1100
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1087
1101
|
*/
|
|
1088
1102
|
InstanceArn: string | undefined;
|
|
@@ -1107,7 +1121,7 @@ export interface ProvisionPermissionSetResponse {
|
|
|
1107
1121
|
}
|
|
1108
1122
|
export interface PutInlinePolicyToPermissionSetRequest {
|
|
1109
1123
|
/**
|
|
1110
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1124
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1111
1125
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1112
1126
|
*/
|
|
1113
1127
|
InstanceArn: string | undefined;
|
|
@@ -1116,7 +1130,7 @@ export interface PutInlinePolicyToPermissionSetRequest {
|
|
|
1116
1130
|
*/
|
|
1117
1131
|
PermissionSetArn: string | undefined;
|
|
1118
1132
|
/**
|
|
1119
|
-
* <p>The
|
|
1133
|
+
* <p>The inline policy to attach to a <a>PermissionSet</a>.</p>
|
|
1120
1134
|
*/
|
|
1121
1135
|
InlinePolicy: string | undefined;
|
|
1122
1136
|
}
|
|
@@ -1124,7 +1138,7 @@ export interface PutInlinePolicyToPermissionSetResponse {
|
|
|
1124
1138
|
}
|
|
1125
1139
|
export interface PutPermissionsBoundaryToPermissionSetRequest {
|
|
1126
1140
|
/**
|
|
1127
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. </p>
|
|
1141
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
|
|
1128
1142
|
*/
|
|
1129
1143
|
InstanceArn: string | undefined;
|
|
1130
1144
|
/**
|
|
@@ -1140,7 +1154,7 @@ export interface PutPermissionsBoundaryToPermissionSetResponse {
|
|
|
1140
1154
|
}
|
|
1141
1155
|
export interface TagResourceRequest {
|
|
1142
1156
|
/**
|
|
1143
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1157
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1144
1158
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1145
1159
|
*/
|
|
1146
1160
|
InstanceArn: string | undefined;
|
|
@@ -1157,7 +1171,7 @@ export interface TagResourceResponse {
|
|
|
1157
1171
|
}
|
|
1158
1172
|
export interface UntagResourceRequest {
|
|
1159
1173
|
/**
|
|
1160
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1174
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1161
1175
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1162
1176
|
*/
|
|
1163
1177
|
InstanceArn: string | undefined;
|
|
@@ -1174,7 +1188,7 @@ export interface UntagResourceResponse {
|
|
|
1174
1188
|
}
|
|
1175
1189
|
export interface UpdateInstanceAccessControlAttributeConfigurationRequest {
|
|
1176
1190
|
/**
|
|
1177
|
-
* <p>The ARN of the SSO instance under which the operation will be executed.</p>
|
|
1191
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
|
|
1178
1192
|
*/
|
|
1179
1193
|
InstanceArn: string | undefined;
|
|
1180
1194
|
/**
|
|
@@ -1186,7 +1200,7 @@ export interface UpdateInstanceAccessControlAttributeConfigurationResponse {
|
|
|
1186
1200
|
}
|
|
1187
1201
|
export interface UpdatePermissionSetRequest {
|
|
1188
1202
|
/**
|
|
1189
|
-
* <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1203
|
+
* <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1190
1204
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1191
1205
|
*/
|
|
1192
1206
|
InstanceArn: string | undefined;
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-sso-admin",
|
|
3
3
|
"description": "AWS SDK for JavaScript Sso Admin Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.154.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -18,9 +18,9 @@
|
|
|
18
18
|
"dependencies": {
|
|
19
19
|
"@aws-crypto/sha256-browser": "2.0.0",
|
|
20
20
|
"@aws-crypto/sha256-js": "2.0.0",
|
|
21
|
-
"@aws-sdk/client-sts": "3.
|
|
21
|
+
"@aws-sdk/client-sts": "3.154.0",
|
|
22
22
|
"@aws-sdk/config-resolver": "3.130.0",
|
|
23
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
23
|
+
"@aws-sdk/credential-provider-node": "3.154.0",
|
|
24
24
|
"@aws-sdk/fetch-http-handler": "3.131.0",
|
|
25
25
|
"@aws-sdk/hash-node": "3.127.0",
|
|
26
26
|
"@aws-sdk/invalid-dependency": "3.127.0",
|
|
@@ -41,7 +41,7 @@
|
|
|
41
41
|
"@aws-sdk/url-parser": "3.127.0",
|
|
42
42
|
"@aws-sdk/util-base64-browser": "3.109.0",
|
|
43
43
|
"@aws-sdk/util-base64-node": "3.55.0",
|
|
44
|
-
"@aws-sdk/util-body-length-browser": "3.
|
|
44
|
+
"@aws-sdk/util-body-length-browser": "3.154.0",
|
|
45
45
|
"@aws-sdk/util-body-length-node": "3.55.0",
|
|
46
46
|
"@aws-sdk/util-defaults-mode-browser": "3.142.0",
|
|
47
47
|
"@aws-sdk/util-defaults-mode-node": "3.142.0",
|
|
@@ -61,6 +61,11 @@
|
|
|
61
61
|
"typedoc": "0.19.2",
|
|
62
62
|
"typescript": "~4.6.2"
|
|
63
63
|
},
|
|
64
|
+
"overrides": {
|
|
65
|
+
"typedoc": {
|
|
66
|
+
"typescript": "~4.6.2"
|
|
67
|
+
}
|
|
68
|
+
},
|
|
64
69
|
"engines": {
|
|
65
70
|
"node": ">=12.0.0"
|
|
66
71
|
},
|