@aws-sdk/client-sso-admin 3.312.0 → 3.316.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -37,352 +37,254 @@ import { UntagResourceCommandInput, UntagResourceCommandOutput } from "./command
37
37
  import { UpdateInstanceAccessControlAttributeConfigurationCommandInput, UpdateInstanceAccessControlAttributeConfigurationCommandOutput } from "./commands/UpdateInstanceAccessControlAttributeConfigurationCommand";
38
38
  import { UpdatePermissionSetCommandInput, UpdatePermissionSetCommandOutput } from "./commands/UpdatePermissionSetCommand";
39
39
  import { SSOAdminClient } from "./SSOAdminClient";
40
- /**
41
- * @public
42
- * <p>AWS IAM Identity Center (successor to AWS Single Sign-On) helps you securely create, or connect, your workforce identities and manage their
43
- * access centrally across AWS accounts and applications. IAM Identity Center is the recommended
44
- * approach for workforce authentication and authorization in AWS, for organizations of any size
45
- * and type.</p>
46
- * <note>
47
- * <p>Although AWS Single Sign-On was renamed, the <code>sso</code> and
48
- * <code>identitystore</code> API namespaces will continue to retain their original name for
49
- * backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">IAM Identity Center rename</a>.</p>
50
- * </note>
51
- * <p>This reference guide provides information on single sign-on operations which could be used for
52
- * access management of AWS accounts. For information about IAM Identity Center features, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center User
53
- * Guide</a>.</p>
54
- * <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
55
- * principals. For more information about how to work with principals and principal IDs in IAM Identity Center,
56
- * see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
57
- * Reference</a>.</p>
58
- * <note>
59
- * <p>AWS provides SDKs that consist of libraries and sample code for various programming
60
- * languages and platforms (Java, Ruby, .Net, iOS, Android, and more). The SDKs provide a
61
- * convenient way to create programmatic access to IAM Identity Center and other AWS services. For more
62
- * information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
63
- * </note>
64
- */
65
- export declare class SSOAdmin extends SSOAdminClient {
40
+ export interface SSOAdmin {
66
41
  /**
67
- * @public
68
- * <p>Attaches the specified customer managed policy to the specified <a>PermissionSet</a>.</p>
42
+ * @see {@link AttachCustomerManagedPolicyReferenceToPermissionSetCommand}
69
43
  */
70
44
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput>;
71
45
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
72
46
  attachCustomerManagedPolicyReferenceToPermissionSet(args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachCustomerManagedPolicyReferenceToPermissionSetCommandOutput) => void): void;
73
47
  /**
74
- * @public
75
- * <p>Attaches an AWS managed policy ARN to a permission set.</p>
76
- * <note>
77
- * <p>If the permission set is already referenced by one or more account assignments, you will
78
- * need to call <code>
79
- * <a>ProvisionPermissionSet</a>
80
- * </code> after this operation.
81
- * Calling <code>ProvisionPermissionSet</code> applies the corresponding IAM policy updates
82
- * to all assigned accounts.</p>
83
- * </note>
48
+ * @see {@link AttachManagedPolicyToPermissionSetCommand}
84
49
  */
85
50
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<AttachManagedPolicyToPermissionSetCommandOutput>;
86
51
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
87
52
  attachManagedPolicyToPermissionSet(args: AttachManagedPolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AttachManagedPolicyToPermissionSetCommandOutput) => void): void;
88
53
  /**
89
- * @public
90
- * <p>Assigns access to a principal for a specified AWS account using a specified
91
- * permission set.</p>
92
- * <note>
93
- * <p>The term <i>principal</i> here refers to a user or group that is defined
94
- * in IAM Identity Center.</p>
95
- * </note>
96
- * <note>
97
- * <p>As part of a successful <code>CreateAccountAssignment</code> call, the specified
98
- * permission set will automatically be provisioned to the account in the form of an IAM
99
- * policy. That policy is attached to the IAM role created in IAM Identity Center. If the permission set
100
- * is subsequently updated, the corresponding IAM policies attached to roles in your accounts
101
- * will not be updated automatically. In this case, you must call <code>
102
- * <a>ProvisionPermissionSet</a>
103
- * </code> to make these updates.</p>
104
- * </note>
105
- * <note>
106
- * <p>
107
- * After a successful response, call <code>DescribeAccountAssignmentCreationStatus</code> to describe the status of an assignment creation request.
108
- * </p>
109
- * </note>
54
+ * @see {@link CreateAccountAssignmentCommand}
110
55
  */
111
56
  createAccountAssignment(args: CreateAccountAssignmentCommandInput, options?: __HttpHandlerOptions): Promise<CreateAccountAssignmentCommandOutput>;
112
57
  createAccountAssignment(args: CreateAccountAssignmentCommandInput, cb: (err: any, data?: CreateAccountAssignmentCommandOutput) => void): void;
113
58
  createAccountAssignment(args: CreateAccountAssignmentCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateAccountAssignmentCommandOutput) => void): void;
114
59
  /**
115
- * @public
116
- * <p>Enables the attributes-based access control (ABAC) feature for the specified IAM Identity Center
117
- * instance. You can also specify new attributes to add to your ABAC configuration during the
118
- * enabling process. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>IAM Identity Center User Guide</i>.</p>
119
- * <note>
120
- * <p>After a successful response, call <code>DescribeInstanceAccessControlAttributeConfiguration</code> to validate that
121
- * <code>InstanceAccessControlAttributeConfiguration</code> was created.</p>
122
- * </note>
60
+ * @see {@link CreateInstanceAccessControlAttributeConfigurationCommand}
123
61
  */
124
62
  createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<CreateInstanceAccessControlAttributeConfigurationCommandOutput>;
125
63
  createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
126
64
  createInstanceAccessControlAttributeConfiguration(args: CreateInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
127
65
  /**
128
- * @public
129
- * <p>Creates a permission set within a specified IAM Identity Center instance.</p>
130
- * <note>
131
- * <p>To grant users and groups access to AWS account resources, use <code>
132
- * <a>CreateAccountAssignment</a>
133
- * </code>.</p>
134
- * </note>
66
+ * @see {@link CreatePermissionSetCommand}
135
67
  */
136
68
  createPermissionSet(args: CreatePermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<CreatePermissionSetCommandOutput>;
137
69
  createPermissionSet(args: CreatePermissionSetCommandInput, cb: (err: any, data?: CreatePermissionSetCommandOutput) => void): void;
138
70
  createPermissionSet(args: CreatePermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreatePermissionSetCommandOutput) => void): void;
139
71
  /**
140
- * @public
141
- * <p>Deletes a principal's access from a specified AWS account using a specified permission
142
- * set.</p>
143
- * <note>
144
- * <p>After a successful response, call <code>DescribeAccountAssignmentCreationStatus</code> to describe the status of an assignment deletion request.</p>
145
- * </note>
72
+ * @see {@link DeleteAccountAssignmentCommand}
146
73
  */
147
74
  deleteAccountAssignment(args: DeleteAccountAssignmentCommandInput, options?: __HttpHandlerOptions): Promise<DeleteAccountAssignmentCommandOutput>;
148
75
  deleteAccountAssignment(args: DeleteAccountAssignmentCommandInput, cb: (err: any, data?: DeleteAccountAssignmentCommandOutput) => void): void;
149
76
  deleteAccountAssignment(args: DeleteAccountAssignmentCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteAccountAssignmentCommandOutput) => void): void;
150
77
  /**
151
- * @public
152
- * <p>Deletes the inline policy from a specified permission set.</p>
78
+ * @see {@link DeleteInlinePolicyFromPermissionSetCommand}
153
79
  */
154
80
  deleteInlinePolicyFromPermissionSet(args: DeleteInlinePolicyFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DeleteInlinePolicyFromPermissionSetCommandOutput>;
155
81
  deleteInlinePolicyFromPermissionSet(args: DeleteInlinePolicyFromPermissionSetCommandInput, cb: (err: any, data?: DeleteInlinePolicyFromPermissionSetCommandOutput) => void): void;
156
82
  deleteInlinePolicyFromPermissionSet(args: DeleteInlinePolicyFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteInlinePolicyFromPermissionSetCommandOutput) => void): void;
157
83
  /**
158
- * @public
159
- * <p>Disables the attributes-based access control (ABAC) feature for the specified IAM Identity Center
160
- * instance and deletes all of the attribute mappings that have been configured. Once deleted,
161
- * any attributes that are received from an identity source and any custom attributes you have
162
- * previously configured will not be passed. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>IAM Identity Center User Guide</i>.</p>
84
+ * @see {@link DeleteInstanceAccessControlAttributeConfigurationCommand}
163
85
  */
164
86
  deleteInstanceAccessControlAttributeConfiguration(args: DeleteInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DeleteInstanceAccessControlAttributeConfigurationCommandOutput>;
165
87
  deleteInstanceAccessControlAttributeConfiguration(args: DeleteInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: DeleteInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
166
88
  deleteInstanceAccessControlAttributeConfiguration(args: DeleteInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
167
89
  /**
168
- * @public
169
- * <p>Deletes the permissions boundary from a specified <a>PermissionSet</a>.</p>
90
+ * @see {@link DeletePermissionsBoundaryFromPermissionSetCommand}
170
91
  */
171
92
  deletePermissionsBoundaryFromPermissionSet(args: DeletePermissionsBoundaryFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DeletePermissionsBoundaryFromPermissionSetCommandOutput>;
172
93
  deletePermissionsBoundaryFromPermissionSet(args: DeletePermissionsBoundaryFromPermissionSetCommandInput, cb: (err: any, data?: DeletePermissionsBoundaryFromPermissionSetCommandOutput) => void): void;
173
94
  deletePermissionsBoundaryFromPermissionSet(args: DeletePermissionsBoundaryFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePermissionsBoundaryFromPermissionSetCommandOutput) => void): void;
174
95
  /**
175
- * @public
176
- * <p>Deletes the specified permission set.</p>
96
+ * @see {@link DeletePermissionSetCommand}
177
97
  */
178
98
  deletePermissionSet(args: DeletePermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DeletePermissionSetCommandOutput>;
179
99
  deletePermissionSet(args: DeletePermissionSetCommandInput, cb: (err: any, data?: DeletePermissionSetCommandOutput) => void): void;
180
100
  deletePermissionSet(args: DeletePermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeletePermissionSetCommandOutput) => void): void;
181
101
  /**
182
- * @public
183
- * <p>Describes the status of the assignment creation request.</p>
102
+ * @see {@link DescribeAccountAssignmentCreationStatusCommand}
184
103
  */
185
104
  describeAccountAssignmentCreationStatus(args: DescribeAccountAssignmentCreationStatusCommandInput, options?: __HttpHandlerOptions): Promise<DescribeAccountAssignmentCreationStatusCommandOutput>;
186
105
  describeAccountAssignmentCreationStatus(args: DescribeAccountAssignmentCreationStatusCommandInput, cb: (err: any, data?: DescribeAccountAssignmentCreationStatusCommandOutput) => void): void;
187
106
  describeAccountAssignmentCreationStatus(args: DescribeAccountAssignmentCreationStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountAssignmentCreationStatusCommandOutput) => void): void;
188
107
  /**
189
- * @public
190
- * <p>Describes the status of the assignment deletion request.</p>
108
+ * @see {@link DescribeAccountAssignmentDeletionStatusCommand}
191
109
  */
192
110
  describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, options?: __HttpHandlerOptions): Promise<DescribeAccountAssignmentDeletionStatusCommandOutput>;
193
111
  describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
194
112
  describeAccountAssignmentDeletionStatus(args: DescribeAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeAccountAssignmentDeletionStatusCommandOutput) => void): void;
195
113
  /**
196
- * @public
197
- * <p>Returns the list of IAM Identity Center identity store attributes that have been configured to work
198
- * with attributes-based access control (ABAC) for the specified IAM Identity Center instance. This will not
199
- * return attributes configured and sent by an external identity provider. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>IAM Identity Center User Guide</i>.</p>
114
+ * @see {@link DescribeInstanceAccessControlAttributeConfigurationCommand}
200
115
  */
201
116
  describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeInstanceAccessControlAttributeConfigurationCommandOutput>;
202
117
  describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: DescribeInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
203
118
  describeInstanceAccessControlAttributeConfiguration(args: DescribeInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
204
119
  /**
205
- * @public
206
- * <p>Gets the details of the permission set.</p>
120
+ * @see {@link DescribePermissionSetCommand}
207
121
  */
208
122
  describePermissionSet(args: DescribePermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DescribePermissionSetCommandOutput>;
209
123
  describePermissionSet(args: DescribePermissionSetCommandInput, cb: (err: any, data?: DescribePermissionSetCommandOutput) => void): void;
210
124
  describePermissionSet(args: DescribePermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePermissionSetCommandOutput) => void): void;
211
125
  /**
212
- * @public
213
- * <p>Describes the status for the given permission set provisioning request.</p>
126
+ * @see {@link DescribePermissionSetProvisioningStatusCommand}
214
127
  */
215
128
  describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, options?: __HttpHandlerOptions): Promise<DescribePermissionSetProvisioningStatusCommandOutput>;
216
129
  describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
217
130
  describePermissionSetProvisioningStatus(args: DescribePermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribePermissionSetProvisioningStatusCommandOutput) => void): void;
218
131
  /**
219
- * @public
220
- * <p>Detaches the specified customer managed policy from the specified <a>PermissionSet</a>.</p>
132
+ * @see {@link DetachCustomerManagedPolicyReferenceFromPermissionSetCommand}
221
133
  */
222
134
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput>;
223
135
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
224
136
  detachCustomerManagedPolicyReferenceFromPermissionSet(args: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachCustomerManagedPolicyReferenceFromPermissionSetCommandOutput) => void): void;
225
137
  /**
226
- * @public
227
- * <p>Detaches the attached AWS managed policy ARN from the specified permission set.</p>
138
+ * @see {@link DetachManagedPolicyFromPermissionSetCommand}
228
139
  */
229
140
  detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<DetachManagedPolicyFromPermissionSetCommandOutput>;
230
141
  detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, cb: (err: any, data?: DetachManagedPolicyFromPermissionSetCommandOutput) => void): void;
231
142
  detachManagedPolicyFromPermissionSet(args: DetachManagedPolicyFromPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DetachManagedPolicyFromPermissionSetCommandOutput) => void): void;
232
143
  /**
233
- * @public
234
- * <p>Obtains the inline policy assigned to the permission set.</p>
144
+ * @see {@link GetInlinePolicyForPermissionSetCommand}
235
145
  */
236
146
  getInlinePolicyForPermissionSet(args: GetInlinePolicyForPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<GetInlinePolicyForPermissionSetCommandOutput>;
237
147
  getInlinePolicyForPermissionSet(args: GetInlinePolicyForPermissionSetCommandInput, cb: (err: any, data?: GetInlinePolicyForPermissionSetCommandOutput) => void): void;
238
148
  getInlinePolicyForPermissionSet(args: GetInlinePolicyForPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInlinePolicyForPermissionSetCommandOutput) => void): void;
239
149
  /**
240
- * @public
241
- * <p>Obtains the permissions boundary for a specified <a>PermissionSet</a>.</p>
150
+ * @see {@link GetPermissionsBoundaryForPermissionSetCommand}
242
151
  */
243
152
  getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<GetPermissionsBoundaryForPermissionSetCommandOutput>;
244
153
  getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
245
154
  getPermissionsBoundaryForPermissionSet(args: GetPermissionsBoundaryForPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetPermissionsBoundaryForPermissionSetCommandOutput) => void): void;
246
155
  /**
247
- * @public
248
- * <p>Lists the status of the AWS account assignment creation requests for a specified IAM Identity Center
249
- * instance.</p>
156
+ * @see {@link ListAccountAssignmentCreationStatusCommand}
250
157
  */
251
158
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentCreationStatusCommandOutput>;
252
159
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
253
160
  listAccountAssignmentCreationStatus(args: ListAccountAssignmentCreationStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentCreationStatusCommandOutput) => void): void;
254
161
  /**
255
- * @public
256
- * <p>Lists the status of the AWS account assignment deletion requests for a specified IAM Identity Center
257
- * instance.</p>
162
+ * @see {@link ListAccountAssignmentDeletionStatusCommand}
258
163
  */
259
164
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentDeletionStatusCommandOutput>;
260
165
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
261
166
  listAccountAssignmentDeletionStatus(args: ListAccountAssignmentDeletionStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentDeletionStatusCommandOutput) => void): void;
262
167
  /**
263
- * @public
264
- * <p>Lists the assignee of the specified AWS account with the specified permission set.</p>
168
+ * @see {@link ListAccountAssignmentsCommand}
265
169
  */
266
170
  listAccountAssignments(args: ListAccountAssignmentsCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountAssignmentsCommandOutput>;
267
171
  listAccountAssignments(args: ListAccountAssignmentsCommandInput, cb: (err: any, data?: ListAccountAssignmentsCommandOutput) => void): void;
268
172
  listAccountAssignments(args: ListAccountAssignmentsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountAssignmentsCommandOutput) => void): void;
269
173
  /**
270
- * @public
271
- * <p>Lists all the AWS accounts where the specified permission set is provisioned.</p>
174
+ * @see {@link ListAccountsForProvisionedPermissionSetCommand}
272
175
  */
273
176
  listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListAccountsForProvisionedPermissionSetCommandOutput>;
274
177
  listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
275
178
  listAccountsForProvisionedPermissionSet(args: ListAccountsForProvisionedPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListAccountsForProvisionedPermissionSetCommandOutput) => void): void;
276
179
  /**
277
- * @public
278
- * <p>Lists all customer managed policies attached to a specified <a>PermissionSet</a>.</p>
180
+ * @see {@link ListCustomerManagedPolicyReferencesInPermissionSetCommand}
279
181
  */
280
182
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput>;
281
183
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
282
184
  listCustomerManagedPolicyReferencesInPermissionSet(args: ListCustomerManagedPolicyReferencesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListCustomerManagedPolicyReferencesInPermissionSetCommandOutput) => void): void;
283
185
  /**
284
- * @public
285
- * <p>Lists the IAM Identity Center instances that the caller has access to.</p>
186
+ * @see {@link ListInstancesCommand}
286
187
  */
287
188
  listInstances(args: ListInstancesCommandInput, options?: __HttpHandlerOptions): Promise<ListInstancesCommandOutput>;
288
189
  listInstances(args: ListInstancesCommandInput, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
289
190
  listInstances(args: ListInstancesCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInstancesCommandOutput) => void): void;
290
191
  /**
291
- * @public
292
- * <p>Lists the AWS managed policy that is attached to a specified permission set.</p>
192
+ * @see {@link ListManagedPoliciesInPermissionSetCommand}
293
193
  */
294
194
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ListManagedPoliciesInPermissionSetCommandOutput>;
295
195
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
296
196
  listManagedPoliciesInPermissionSet(args: ListManagedPoliciesInPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListManagedPoliciesInPermissionSetCommandOutput) => void): void;
297
197
  /**
298
- * @public
299
- * <p>Lists the status of the permission set provisioning requests for a specified IAM Identity Center
300
- * instance.</p>
198
+ * @see {@link ListPermissionSetProvisioningStatusCommand}
301
199
  */
302
200
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetProvisioningStatusCommandOutput>;
303
201
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
304
202
  listPermissionSetProvisioningStatus(args: ListPermissionSetProvisioningStatusCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetProvisioningStatusCommandOutput) => void): void;
305
203
  /**
306
- * @public
307
- * <p>Lists the <a>PermissionSet</a>s in an IAM Identity Center instance.</p>
204
+ * @see {@link ListPermissionSetsCommand}
308
205
  */
309
206
  listPermissionSets(args: ListPermissionSetsCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetsCommandOutput>;
310
207
  listPermissionSets(args: ListPermissionSetsCommandInput, cb: (err: any, data?: ListPermissionSetsCommandOutput) => void): void;
311
208
  listPermissionSets(args: ListPermissionSetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetsCommandOutput) => void): void;
312
209
  /**
313
- * @public
314
- * <p>Lists all the permission sets that are provisioned to a specified AWS account.</p>
210
+ * @see {@link ListPermissionSetsProvisionedToAccountCommand}
315
211
  */
316
212
  listPermissionSetsProvisionedToAccount(args: ListPermissionSetsProvisionedToAccountCommandInput, options?: __HttpHandlerOptions): Promise<ListPermissionSetsProvisionedToAccountCommandOutput>;
317
213
  listPermissionSetsProvisionedToAccount(args: ListPermissionSetsProvisionedToAccountCommandInput, cb: (err: any, data?: ListPermissionSetsProvisionedToAccountCommandOutput) => void): void;
318
214
  listPermissionSetsProvisionedToAccount(args: ListPermissionSetsProvisionedToAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListPermissionSetsProvisionedToAccountCommandOutput) => void): void;
319
215
  /**
320
- * @public
321
- * <p>Lists the tags that are attached to a specified resource.</p>
216
+ * @see {@link ListTagsForResourceCommand}
322
217
  */
323
218
  listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
324
219
  listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
325
220
  listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
326
221
  /**
327
- * @public
328
- * <p>The process by which a specified permission set is provisioned to the specified
329
- * target.</p>
222
+ * @see {@link ProvisionPermissionSetCommand}
330
223
  */
331
224
  provisionPermissionSet(args: ProvisionPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<ProvisionPermissionSetCommandOutput>;
332
225
  provisionPermissionSet(args: ProvisionPermissionSetCommandInput, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
333
226
  provisionPermissionSet(args: ProvisionPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ProvisionPermissionSetCommandOutput) => void): void;
334
227
  /**
335
- * @public
336
- * <p>Attaches an inline policy to a permission set.</p>
337
- * <note>
338
- * <p>If the permission set is already referenced by one or more account assignments, you will
339
- * need to call <code>
340
- * <a>ProvisionPermissionSet</a>
341
- * </code> after this action to
342
- * apply the corresponding IAM policy updates to all assigned accounts.</p>
343
- * </note>
228
+ * @see {@link PutInlinePolicyToPermissionSetCommand}
344
229
  */
345
230
  putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<PutInlinePolicyToPermissionSetCommandOutput>;
346
231
  putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
347
232
  putInlinePolicyToPermissionSet(args: PutInlinePolicyToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutInlinePolicyToPermissionSetCommandOutput) => void): void;
348
233
  /**
349
- * @public
350
- * <p>Attaches an AWS managed or customer managed policy to the specified <a>PermissionSet</a> as a permissions boundary.</p>
234
+ * @see {@link PutPermissionsBoundaryToPermissionSetCommand}
351
235
  */
352
236
  putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<PutPermissionsBoundaryToPermissionSetCommandOutput>;
353
237
  putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, cb: (err: any, data?: PutPermissionsBoundaryToPermissionSetCommandOutput) => void): void;
354
238
  putPermissionsBoundaryToPermissionSet(args: PutPermissionsBoundaryToPermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: PutPermissionsBoundaryToPermissionSetCommandOutput) => void): void;
355
239
  /**
356
- * @public
357
- * <p>Associates a set of tags with a specified resource.</p>
240
+ * @see {@link TagResourceCommand}
358
241
  */
359
242
  tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
360
243
  tagResource(args: TagResourceCommandInput, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
361
244
  tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
362
245
  /**
363
- * @public
364
- * <p>Disassociates a set of tags from a specified resource.</p>
246
+ * @see {@link UntagResourceCommand}
365
247
  */
366
248
  untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
367
249
  untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
368
250
  untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
369
251
  /**
370
- * @public
371
- * <p>Updates the IAM Identity Center identity store attributes that you can use with the IAM Identity Center instance
372
- * for attributes-based access control (ABAC). When using an external identity provider as an
373
- * identity source, you can pass attributes through the SAML assertion as an alternative to
374
- * configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of
375
- * these attributes, IAM Identity Center replaces the attribute value with the value from the IAM Identity Center
376
- * identity store. For more information about ABAC, see <a href="/singlesignon/latest/userguide/abac.html">Attribute-Based Access Control</a> in the <i>IAM Identity Center User Guide</i>.</p>
252
+ * @see {@link UpdateInstanceAccessControlAttributeConfigurationCommand}
377
253
  */
378
254
  updateInstanceAccessControlAttributeConfiguration(args: UpdateInstanceAccessControlAttributeConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateInstanceAccessControlAttributeConfigurationCommandOutput>;
379
255
  updateInstanceAccessControlAttributeConfiguration(args: UpdateInstanceAccessControlAttributeConfigurationCommandInput, cb: (err: any, data?: UpdateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
380
256
  updateInstanceAccessControlAttributeConfiguration(args: UpdateInstanceAccessControlAttributeConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateInstanceAccessControlAttributeConfigurationCommandOutput) => void): void;
381
257
  /**
382
- * @public
383
- * <p>Updates an existing permission set.</p>
258
+ * @see {@link UpdatePermissionSetCommand}
384
259
  */
385
260
  updatePermissionSet(args: UpdatePermissionSetCommandInput, options?: __HttpHandlerOptions): Promise<UpdatePermissionSetCommandOutput>;
386
261
  updatePermissionSet(args: UpdatePermissionSetCommandInput, cb: (err: any, data?: UpdatePermissionSetCommandOutput) => void): void;
387
262
  updatePermissionSet(args: UpdatePermissionSetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdatePermissionSetCommandOutput) => void): void;
388
263
  }
264
+ /**
265
+ * @public
266
+ * <p>AWS IAM Identity Center (successor to AWS Single Sign-On) helps you securely create, or connect, your workforce identities and manage their
267
+ * access centrally across AWS accounts and applications. IAM Identity Center is the recommended
268
+ * approach for workforce authentication and authorization in AWS, for organizations of any size
269
+ * and type.</p>
270
+ * <note>
271
+ * <p>Although AWS Single Sign-On was renamed, the <code>sso</code> and
272
+ * <code>identitystore</code> API namespaces will continue to retain their original name for
273
+ * backward compatibility purposes. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed">IAM Identity Center rename</a>.</p>
274
+ * </note>
275
+ * <p>This reference guide provides information on single sign-on operations which could be used for
276
+ * access management of AWS accounts. For information about IAM Identity Center features, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center User
277
+ * Guide</a>.</p>
278
+ * <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
279
+ * principals. For more information about how to work with principals and principal IDs in IAM Identity Center,
280
+ * see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
281
+ * Reference</a>.</p>
282
+ * <note>
283
+ * <p>AWS provides SDKs that consist of libraries and sample code for various programming
284
+ * languages and platforms (Java, Ruby, .Net, iOS, Android, and more). The SDKs provide a
285
+ * convenient way to create programmatic access to IAM Identity Center and other AWS services. For more
286
+ * information about the AWS SDKs, including how to download and install them, see <a href="http://aws.amazon.com/tools/">Tools for Amazon Web Services</a>.</p>
287
+ * </note>
288
+ */
289
+ export declare class SSOAdmin extends SSOAdminClient implements SSOAdmin {
290
+ }
@@ -148,7 +148,7 @@ import {
148
148
  UpdatePermissionSetCommandOutput,
149
149
  } from "./commands/UpdatePermissionSetCommand";
150
150
  import { SSOAdminClient } from "./SSOAdminClient";
151
- export declare class SSOAdmin extends SSOAdminClient {
151
+ export interface SSOAdmin {
152
152
  attachCustomerManagedPolicyReferenceToPermissionSet(
153
153
  args: AttachCustomerManagedPolicyReferenceToPermissionSetCommandInput,
154
154
  options?: __HttpHandlerOptions
@@ -763,3 +763,4 @@ export declare class SSOAdmin extends SSOAdminClient {
763
763
  cb: (err: any, data?: UpdatePermissionSetCommandOutput) => void
764
764
  ): void;
765
765
  }
766
+ export declare class SSOAdmin extends SSOAdminClient implements SSOAdmin {}
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-sso-admin",
3
3
  "description": "AWS SDK for JavaScript Sso Admin Client for Node.js, Browser and React Native",
4
- "version": "3.312.0",
4
+ "version": "3.316.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,9 +21,9 @@
21
21
  "dependencies": {
22
22
  "@aws-crypto/sha256-browser": "3.0.0",
23
23
  "@aws-crypto/sha256-js": "3.0.0",
24
- "@aws-sdk/client-sts": "3.312.0",
24
+ "@aws-sdk/client-sts": "3.316.0",
25
25
  "@aws-sdk/config-resolver": "3.310.0",
26
- "@aws-sdk/credential-provider-node": "3.310.0",
26
+ "@aws-sdk/credential-provider-node": "3.316.0",
27
27
  "@aws-sdk/fetch-http-handler": "3.310.0",
28
28
  "@aws-sdk/hash-node": "3.310.0",
29
29
  "@aws-sdk/invalid-dependency": "3.310.0",
@@ -40,14 +40,14 @@
40
40
  "@aws-sdk/node-config-provider": "3.310.0",
41
41
  "@aws-sdk/node-http-handler": "3.310.0",
42
42
  "@aws-sdk/protocol-http": "3.310.0",
43
- "@aws-sdk/smithy-client": "3.310.0",
43
+ "@aws-sdk/smithy-client": "3.316.0",
44
44
  "@aws-sdk/types": "3.310.0",
45
45
  "@aws-sdk/url-parser": "3.310.0",
46
46
  "@aws-sdk/util-base64": "3.310.0",
47
47
  "@aws-sdk/util-body-length-browser": "3.310.0",
48
48
  "@aws-sdk/util-body-length-node": "3.310.0",
49
- "@aws-sdk/util-defaults-mode-browser": "3.310.0",
50
- "@aws-sdk/util-defaults-mode-node": "3.310.0",
49
+ "@aws-sdk/util-defaults-mode-browser": "3.316.0",
50
+ "@aws-sdk/util-defaults-mode-node": "3.316.0",
51
51
  "@aws-sdk/util-endpoints": "3.310.0",
52
52
  "@aws-sdk/util-retry": "3.310.0",
53
53
  "@aws-sdk/util-user-agent-browser": "3.310.0",