@aws-sdk/client-sso-admin 3.804.0 → 3.806.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -6,19 +6,27 @@
6
6
 
7
7
  AWS SDK for JavaScript SSOAdmin Client for Node.js, Browser and React Native.
8
8
 
9
- <p>IAM Identity Center (successor to Single Sign-On) helps you securely create, or connect, your workforce identities and manage
10
- their access centrally across Amazon Web Services accounts and applications. IAM Identity Center is the recommended
11
- approach for workforce authentication and authorization in Amazon Web Services, for organizations of
12
- any size and type.</p>
9
+ <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
10
+ applications and other Amazon Web Services resources. You can connect your existing identity provider
11
+ and synchronize users and groups from your directory, or create and manage your users
12
+ directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
13
+ <ul>
14
+ <li>
15
+ <p>User access to applications</p>
16
+ </li>
17
+ <li>
18
+ <p>User access to Amazon Web Services accounts</p>
19
+ </li>
20
+ </ul>
21
+ <p>This guide provides information about single sign-on operations that you can use for access to applications and
22
+ Amazon Web Services accounts. For information about IAM Identity Center features, see the
23
+ <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
24
+ User Guide</a>.</p>
13
25
  <note>
14
26
  <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
15
27
  namespaces.</p>
16
28
  </note>
17
- <p>This reference guide provides information on single sign-on operations which could be
18
- used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
19
- the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
20
- User Guide</a>.</p>
21
- <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
29
+ <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
22
30
  principals. For more information about how to work with principals and principal IDs in
23
31
  IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
24
32
  Reference</a>.</p>
@@ -23,20 +23,20 @@ const getRuntimeConfig = (config) => {
23
23
  const defaultConfigProvider = () => defaultsMode().then(smithy_client_1.loadConfigsForDefaultMode);
24
24
  const clientSharedValues = (0, runtimeConfig_shared_1.getRuntimeConfig)(config);
25
25
  (0, core_1.emitWarningIfUnsupportedVersion)(process.version);
26
- const profileConfig = { profile: config?.profile };
26
+ const loaderConfig = { profile: config?.profile, logger: clientSharedValues.logger };
27
27
  return {
28
28
  ...clientSharedValues,
29
29
  ...config,
30
30
  runtime: "node",
31
31
  defaultsMode,
32
- authSchemePreference: config?.authSchemePreference ?? (0, node_config_provider_1.loadConfig)(core_1.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, profileConfig),
32
+ authSchemePreference: config?.authSchemePreference ?? (0, node_config_provider_1.loadConfig)(core_1.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
33
33
  bodyLengthChecker: config?.bodyLengthChecker ?? util_body_length_node_1.calculateBodyLength,
34
34
  credentialDefaultProvider: config?.credentialDefaultProvider ?? credential_provider_node_1.defaultProvider,
35
35
  defaultUserAgentProvider: config?.defaultUserAgentProvider ??
36
36
  (0, util_user_agent_node_1.createDefaultUserAgentProvider)({ serviceId: clientSharedValues.serviceId, clientVersion: package_json_1.default.version }),
37
37
  maxAttempts: config?.maxAttempts ?? (0, node_config_provider_1.loadConfig)(middleware_retry_1.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
38
38
  region: config?.region ??
39
- (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_REGION_CONFIG_OPTIONS, { ...config_resolver_1.NODE_REGION_CONFIG_FILE_OPTIONS, ...profileConfig }),
39
+ (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_REGION_CONFIG_OPTIONS, { ...config_resolver_1.NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
40
40
  requestHandler: node_http_handler_1.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
41
41
  retryMode: config?.retryMode ??
42
42
  (0, node_config_provider_1.loadConfig)({
@@ -45,9 +45,9 @@ const getRuntimeConfig = (config) => {
45
45
  }, config),
46
46
  sha256: config?.sha256 ?? hash_node_1.Hash.bind(null, "sha256"),
47
47
  streamCollector: config?.streamCollector ?? node_http_handler_1.streamCollector,
48
- useDualstackEndpoint: config?.useDualstackEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, profileConfig),
49
- useFipsEndpoint: config?.useFipsEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, profileConfig),
50
- userAgentAppId: config?.userAgentAppId ?? (0, node_config_provider_1.loadConfig)(util_user_agent_node_1.NODE_APP_ID_CONFIG_OPTIONS, profileConfig),
48
+ useDualstackEndpoint: config?.useDualstackEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
49
+ useFipsEndpoint: config?.useFipsEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
50
+ userAgentAppId: config?.userAgentAppId ?? (0, node_config_provider_1.loadConfig)(util_user_agent_node_1.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig),
51
51
  };
52
52
  };
53
53
  exports.getRuntimeConfig = getRuntimeConfig;
@@ -19,20 +19,20 @@ export const getRuntimeConfig = (config) => {
19
19
  const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
20
20
  const clientSharedValues = getSharedRuntimeConfig(config);
21
21
  awsCheckVersion(process.version);
22
- const profileConfig = { profile: config?.profile };
22
+ const loaderConfig = { profile: config?.profile, logger: clientSharedValues.logger };
23
23
  return {
24
24
  ...clientSharedValues,
25
25
  ...config,
26
26
  runtime: "node",
27
27
  defaultsMode,
28
- authSchemePreference: config?.authSchemePreference ?? loadNodeConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, profileConfig),
28
+ authSchemePreference: config?.authSchemePreference ?? loadNodeConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
29
29
  bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
30
30
  credentialDefaultProvider: config?.credentialDefaultProvider ?? credentialDefaultProvider,
31
31
  defaultUserAgentProvider: config?.defaultUserAgentProvider ??
32
32
  createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
33
33
  maxAttempts: config?.maxAttempts ?? loadNodeConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
34
34
  region: config?.region ??
35
- loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, { ...NODE_REGION_CONFIG_FILE_OPTIONS, ...profileConfig }),
35
+ loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, { ...NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
36
36
  requestHandler: RequestHandler.create(config?.requestHandler ?? defaultConfigProvider),
37
37
  retryMode: config?.retryMode ??
38
38
  loadNodeConfig({
@@ -41,8 +41,8 @@ export const getRuntimeConfig = (config) => {
41
41
  }, config),
42
42
  sha256: config?.sha256 ?? Hash.bind(null, "sha256"),
43
43
  streamCollector: config?.streamCollector ?? streamCollector,
44
- useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, profileConfig),
45
- useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, profileConfig),
46
- userAgentAppId: config?.userAgentAppId ?? loadNodeConfig(NODE_APP_ID_CONFIG_OPTIONS, profileConfig),
44
+ useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
45
+ useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
46
+ userAgentAppId: config?.userAgentAppId ?? loadNodeConfig(NODE_APP_ID_CONFIG_OPTIONS, loaderConfig),
47
47
  };
48
48
  };
@@ -517,19 +517,27 @@ export interface SSOAdmin {
517
517
  updateTrustedTokenIssuer(args: UpdateTrustedTokenIssuerCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateTrustedTokenIssuerCommandOutput) => void): void;
518
518
  }
519
519
  /**
520
- * <p>IAM Identity Center (successor to Single Sign-On) helps you securely create, or connect, your workforce identities and manage
521
- * their access centrally across Amazon Web Services accounts and applications. IAM Identity Center is the recommended
522
- * approach for workforce authentication and authorization in Amazon Web Services, for organizations of
523
- * any size and type.</p>
520
+ * <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
521
+ * applications and other Amazon Web Services resources. You can connect your existing identity provider
522
+ * and synchronize users and groups from your directory, or create and manage your users
523
+ * directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
524
+ * <ul>
525
+ * <li>
526
+ * <p>User access to applications</p>
527
+ * </li>
528
+ * <li>
529
+ * <p>User access to Amazon Web Services accounts</p>
530
+ * </li>
531
+ * </ul>
532
+ * <p>This guide provides information about single sign-on operations that you can use for access to applications and
533
+ * Amazon Web Services accounts. For information about IAM Identity Center features, see the
534
+ * <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
535
+ * User Guide</a>.</p>
524
536
  * <note>
525
537
  * <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
526
538
  * namespaces.</p>
527
539
  * </note>
528
- * <p>This reference guide provides information on single sign-on operations which could be
529
- * used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
530
- * the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
531
- * User Guide</a>.</p>
532
- * <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
540
+ * <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
533
541
  * principals. For more information about how to work with principals and principal IDs in
534
542
  * IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
535
543
  * Reference</a>.</p>
@@ -242,19 +242,27 @@ export type SSOAdminClientResolvedConfigType = __SmithyResolvedConfiguration<__H
242
242
  export interface SSOAdminClientResolvedConfig extends SSOAdminClientResolvedConfigType {
243
243
  }
244
244
  /**
245
- * <p>IAM Identity Center (successor to Single Sign-On) helps you securely create, or connect, your workforce identities and manage
246
- * their access centrally across Amazon Web Services accounts and applications. IAM Identity Center is the recommended
247
- * approach for workforce authentication and authorization in Amazon Web Services, for organizations of
248
- * any size and type.</p>
245
+ * <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
246
+ * applications and other Amazon Web Services resources. You can connect your existing identity provider
247
+ * and synchronize users and groups from your directory, or create and manage your users
248
+ * directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
249
+ * <ul>
250
+ * <li>
251
+ * <p>User access to applications</p>
252
+ * </li>
253
+ * <li>
254
+ * <p>User access to Amazon Web Services accounts</p>
255
+ * </li>
256
+ * </ul>
257
+ * <p>This guide provides information about single sign-on operations that you can use for access to applications and
258
+ * Amazon Web Services accounts. For information about IAM Identity Center features, see the
259
+ * <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
260
+ * User Guide</a>.</p>
249
261
  * <note>
250
262
  * <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
251
263
  * namespaces.</p>
252
264
  * </note>
253
- * <p>This reference guide provides information on single sign-on operations which could be
254
- * used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
255
- * the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
256
- * User Guide</a>.</p>
257
- * <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
265
+ * <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
258
266
  * principals. For more information about how to work with principals and principal IDs in
259
267
  * IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
260
268
  * Reference</a>.</p>
@@ -27,7 +27,17 @@ declare const CreateApplicationCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Creates an application in IAM Identity Center for the given application provider.</p>
30
+ * <p>Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given
31
+ * application provider.</p>
32
+ * <note>
33
+ * <p>This API does not support creating SAML 2.0 customer managed applications or Amazon Web Services
34
+ * managed applications. To learn how to create an Amazon Web Services managed application, see the
35
+ * application user guide. You can create a SAML 2.0 customer managed application in
36
+ * the Amazon Web Services Management Console only. See <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-setup.html">Setting
37
+ * up customer managed SAML 2.0 applications</a>. For more information on these
38
+ * application types, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/awsapps.html">Amazon Web Services managed
39
+ * applications</a>.</p>
40
+ * </note>
31
41
  * @example
32
42
  * Use a bare-bones client and the command you need to make an API call.
33
43
  * ```javascript
@@ -28,8 +28,8 @@ declare const CreateInstanceCommand_base: {
28
28
  };
29
29
  /**
30
30
  * <p>Creates an instance of IAM Identity Center for a standalone Amazon Web Services account that is not
31
- * managed by Organizations or a member Amazon Web Services account in an organization. You can
32
- * create only one instance per account and across all Amazon Web Services Regions.</p>
31
+ * managed by Organizations or a member Amazon Web Services account in an organization. You can create only
32
+ * one instance per account and across all Amazon Web Services Regions.</p>
33
33
  * <p>The CreateInstance request is rejected if the following apply: </p>
34
34
  * <ul>
35
35
  * <li>
@@ -27,10 +27,12 @@ declare const CreateTrustedTokenIssuerCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Creates a connection to a trusted token issuer in an instance of IAM Identity Center. A trusted token issuer enables trusted identity propagation to be used with applications that authenticate outside of Amazon Web Services.</p>
31
- * <p>This trusted token issuer describes an external identity
32
- * provider (IdP) that can generate claims or assertions in the form of access tokens for a
33
- * user. Applications enabled for IAM Identity Center can use these tokens for authentication. </p>
30
+ * <p>Creates a connection to a trusted token issuer in an instance of IAM Identity Center. A trusted token issuer enables trusted
31
+ * identity propagation to be used with applications that authenticate outside of
32
+ * Amazon Web Services.</p>
33
+ * <p>This trusted token issuer describes an external identity provider (IdP) that can generate claims or
34
+ * assertions in the form of access tokens for a user. Applications enabled for IAM Identity Center
35
+ * can use these tokens for authentication. </p>
34
36
  * @example
35
37
  * Use a bare-bones client and the command you need to make an API call.
36
38
  * ```javascript
@@ -29,7 +29,8 @@ declare const DeleteTrustedTokenIssuerCommand_base: {
29
29
  /**
30
30
  * <p>Deletes a trusted token issuer configuration from an instance of IAM Identity Center.</p>
31
31
  * <note>
32
- * <p>Deleting this trusted token issuer configuration will cause users to lose access to any applications that are configured to use the trusted token issuer.</p>
32
+ * <p>Deleting this trusted token issuer configuration will cause users to lose access to any
33
+ * applications that are configured to use the trusted token issuer.</p>
33
34
  * </note>
34
35
  * @example
35
36
  * Use a bare-bones client and the command you need to make an API call.
@@ -27,9 +27,10 @@ declare const DescribeApplicationAssignmentCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Retrieves a direct assignment of a user or group to an application. If the user doesn’t have a direct assignment to the application,
31
- * the user may still have access to the application through a group. Therefore, don’t use this API to test access to an application for a user.
32
- * Instead use <a>ListApplicationAssignmentsForPrincipal</a>.</p>
30
+ * <p>Retrieves a direct assignment of a user or group to an application. If the user
31
+ * doesn’t have a direct assignment to the application, the user may still have access to
32
+ * the application through a group. Therefore, don’t use this API to test access to an
33
+ * application for a user. Instead use <a>ListApplicationAssignmentsForPrincipal</a>.</p>
33
34
  * @example
34
35
  * Use a bare-bones client and the command you need to make an API call.
35
36
  * ```javascript
@@ -27,7 +27,8 @@ declare const DescribeApplicationProviderCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Retrieves details about a provider that can be used to connect an Amazon Web Services managed application or customer managed application to IAM Identity Center.</p>
30
+ * <p>Retrieves details about a provider that can be used to connect an Amazon Web Services managed
31
+ * application or customer managed application to IAM Identity Center.</p>
31
32
  * @example
32
33
  * Use a bare-bones client and the command you need to make an API call.
33
34
  * ```javascript
@@ -27,19 +27,22 @@ declare const DescribeInstanceCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Returns the details of an instance of IAM Identity Center. The status can be one of the following:</p>
30
+ * <p>Returns the details of an instance of IAM Identity Center. The status can be one of the
31
+ * following:</p>
31
32
  * <ul>
32
33
  * <li>
33
34
  * <p>
34
- * <code>CREATE_IN_PROGRESS</code> - The instance is in the process of being created. When the
35
- * instance is ready for use, DescribeInstance returns the status of
36
- * <code>ACTIVE</code>. While the instance is in the
37
- * <code>CREATE_IN_PROGRESS</code> state, you can call only DescribeInstance
38
- * and DeleteInstance operations.</p>
35
+ * <code>CREATE_IN_PROGRESS</code> - The instance is in the process of being
36
+ * created. When the instance is ready for use, DescribeInstance returns the status
37
+ * of <code>ACTIVE</code>. While the instance is in the
38
+ * <code>CREATE_IN_PROGRESS</code> state, you can call only DescribeInstance
39
+ * and DeleteInstance operations.</p>
39
40
  * </li>
40
41
  * <li>
41
42
  * <p>
42
- * <code>DELETE_IN_PROGRESS</code> - The instance is being deleted. Returns <code>AccessDeniedException</code> after the delete operation completes. </p>
43
+ * <code>DELETE_IN_PROGRESS</code> - The instance is being deleted. Returns
44
+ * <code>AccessDeniedException</code> after the delete operation completes.
45
+ * </p>
43
46
  * </li>
44
47
  * <li>
45
48
  * <p>
@@ -27,8 +27,9 @@ declare const DescribeTrustedTokenIssuerCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Retrieves details about a trusted token issuer configuration stored in an instance of IAM Identity Center. Details include the name of the trusted token issuer, the issuer URL, and the path of the source attribute and the destination attribute for a trusted token issuer configuration.
31
- * </p>
30
+ * <p>Retrieves details about a trusted token issuer configuration stored in an instance of IAM Identity Center. Details
31
+ * include the name of the trusted token issuer, the issuer URL, and the path of the source attribute and
32
+ * the destination attribute for a trusted token issuer configuration. </p>
32
33
  * @example
33
34
  * Use a bare-bones client and the command you need to make an API call.
34
35
  * ```javascript
@@ -28,7 +28,8 @@ declare const ListAccountAssignmentsForPrincipalCommand_base: {
28
28
  };
29
29
  /**
30
30
  * <p>Retrieves a list of the IAM Identity Center associated Amazon Web Services accounts that the principal has access
31
- * to.</p>
31
+ * to. This action must be called from the management account containing your organization
32
+ * instance of IAM Identity Center. This action is not valid for account instances of IAM Identity Center.</p>
32
33
  * @example
33
34
  * Use a bare-bones client and the command you need to make an API call.
34
35
  * ```javascript
@@ -27,7 +27,11 @@ declare const ListApplicationAssignmentsForPrincipalCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Lists the applications to which a specified principal is assigned.</p>
30
+ * <p>Lists the applications to which a specified principal is assigned. You must provide a
31
+ * filter when calling this action from a member account against your organization instance
32
+ * of IAM Identity Center. A filter is not required when called from the management account against an
33
+ * organization instance of IAM Identity Center, or from a member account against an account instance of
34
+ * IAM Identity Center in the same account.</p>
31
35
  * @example
32
36
  * Use a bare-bones client and the command you need to make an API call.
33
37
  * ```javascript
@@ -27,9 +27,11 @@ declare const ListApplicationsCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Lists all applications associated with the instance of IAM Identity Center. When listing applications for an instance
31
- * in the management account, member accounts must use the <code>applicationAccount</code>
32
- * parameter to filter the list to only applications created from that account.</p>
30
+ * <p>Lists all applications associated with the instance of IAM Identity Center. When listing
31
+ * applications for an organization instance in the management account, member accounts
32
+ * must use the <code>applicationAccount</code> parameter to filter the list to only
33
+ * applications created from that account. When listing applications for an account
34
+ * instance in the same member account, a filter is not required.</p>
33
35
  * @example
34
36
  * Use a bare-bones client and the command you need to make an API call.
35
37
  * ```javascript
@@ -27,9 +27,11 @@ declare const PutApplicationAssignmentConfigurationCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Configure how users gain access to an application. If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t have access to the application unless an assignment is created using the
31
- * <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have access to the application.
32
- * If an assignment is created using <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment</a>., the user retains access if <code>AssignmentsRequired</code> is set to <code>true</code>. </p>
30
+ * <p>Configure how users gain access to an application. If <code>AssignmentsRequired</code>
31
+ * is <code>true</code> (default value), users don’t have access to the application unless
32
+ * an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
33
+ * access to the application. If an assignment is created using <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment</a>., the user retains access if
34
+ * <code>AssignmentsRequired</code> is set to <code>true</code>. </p>
33
35
  * @example
34
36
  * Use a bare-bones client and the command you need to make an API call.
35
37
  * ```javascript
@@ -27,7 +27,84 @@ declare const PutApplicationGrantCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Adds a grant to an application.</p>
30
+ * <p>Creates a configuration for an application to use grants. Conceptually grants are
31
+ * authorization to request actions related to tokens. This configuration will be used when
32
+ * parties are requesting and receiving tokens during the trusted identity propagation
33
+ * process. For more information on the IAM Identity Center supported grant workflows, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-oauth2.html">SAML 2.0
34
+ * and OAuth 2.0</a>.</p>
35
+ * <p>A grant is created between your applications and Identity Center instance which
36
+ * enables an application to use specified mechanisms to obtain tokens. These tokens are
37
+ * used by your applications to gain access to Amazon Web Services resources on behalf of users. The
38
+ * following elements are within these exchanges:</p>
39
+ * <ul>
40
+ * <li>
41
+ * <p>
42
+ * <b>Requester</b> - The application requesting access
43
+ * to Amazon Web Services resources.</p>
44
+ * </li>
45
+ * <li>
46
+ * <p>
47
+ * <b>Subject</b> - Typically the user that is
48
+ * requesting access to Amazon Web Services resources.</p>
49
+ * </li>
50
+ * <li>
51
+ * <p>
52
+ * <b>Grant</b> - Conceptually, a grant is
53
+ * authorization to access Amazon Web Services resources. These grants authorize token generation
54
+ * for authenticating access to the requester and for the request to make requests
55
+ * on behalf of the subjects. There are four types of grants:</p>
56
+ * <ul>
57
+ * <li>
58
+ * <p>
59
+ * <b>AuthorizationCode</b> - Allows an
60
+ * application to request authorization through a series of user-agent
61
+ * redirects.</p>
62
+ * </li>
63
+ * <li>
64
+ * <p>
65
+ * <b>JWT bearer </b> - Authorizes an
66
+ * application to exchange a JSON Web Token that came from an external
67
+ * identity provider. To learn more, see <a href="https://datatracker.ietf.org/doc/html/rfc6749">RFC
68
+ * 6479</a>.</p>
69
+ * </li>
70
+ * <li>
71
+ * <p>
72
+ * <b>Refresh token</b> - Enables application
73
+ * to request new access tokens to replace expiring or expired access
74
+ * tokens.</p>
75
+ * </li>
76
+ * <li>
77
+ * <p>
78
+ * <b>Exchange token</b> - A grant that
79
+ * requests tokens from the authorization server by providing a ‘subject’
80
+ * token with access scope authorizing trusted identity propagation to this
81
+ * application. To learn more, see <a href="https://datatracker.ietf.org/doc/html/rfc8693">RFC
82
+ * 8693</a>.</p>
83
+ * </li>
84
+ * </ul>
85
+ * </li>
86
+ * <li>
87
+ * <p>
88
+ * <b>Authorization server</b> - IAM Identity Center requests
89
+ * tokens.</p>
90
+ * </li>
91
+ * </ul>
92
+ * <p>User credentials are never shared directly within these exchanges. Instead,
93
+ * applications use grants to request access tokens from IAM Identity Center. For more
94
+ * information, see <a href="https://datatracker.ietf.org/doc/html/rfc6749">RFC
95
+ * 6479</a>.</p>
96
+ * <p class="title">
97
+ * <b>Use cases</b>
98
+ * </p>
99
+ * <ul>
100
+ * <li>
101
+ * <p>Connecting to custom applications.</p>
102
+ * </li>
103
+ * <li>
104
+ * <p>Configuring an Amazon Web Services service to make calls to another Amazon Web Services services using JWT
105
+ * tokens.</p>
106
+ * </li>
107
+ * </ul>
31
108
  * @example
32
109
  * Use a bare-bones client and the command you need to make an API call.
33
110
  * ```javascript
@@ -27,9 +27,11 @@ declare const UpdateTrustedTokenIssuerCommand_base: {
27
27
  getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
28
28
  };
29
29
  /**
30
- * <p>Updates the name of the trusted token issuer, or the path of a source attribute or destination attribute for a trusted token issuer configuration.</p>
30
+ * <p>Updates the name of the trusted token issuer, or the path of a source attribute or destination
31
+ * attribute for a trusted token issuer configuration.</p>
31
32
  * <note>
32
- * <p>Updating this trusted token issuer configuration might cause users to lose access to any applications that are configured to use the trusted token issuer.</p>
33
+ * <p>Updating this trusted token issuer configuration might cause users to lose access to any
34
+ * applications that are configured to use the trusted token issuer.</p>
33
35
  * </note>
34
36
  * @example
35
37
  * Use a bare-bones client and the command you need to make an API call.
@@ -1,17 +1,25 @@
1
1
  /**
2
- * <p>IAM Identity Center (successor to Single Sign-On) helps you securely create, or connect, your workforce identities and manage
3
- * their access centrally across Amazon Web Services accounts and applications. IAM Identity Center is the recommended
4
- * approach for workforce authentication and authorization in Amazon Web Services, for organizations of
5
- * any size and type.</p>
2
+ * <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
3
+ * applications and other Amazon Web Services resources. You can connect your existing identity provider
4
+ * and synchronize users and groups from your directory, or create and manage your users
5
+ * directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
6
+ * <ul>
7
+ * <li>
8
+ * <p>User access to applications</p>
9
+ * </li>
10
+ * <li>
11
+ * <p>User access to Amazon Web Services accounts</p>
12
+ * </li>
13
+ * </ul>
14
+ * <p>This guide provides information about single sign-on operations that you can use for access to applications and
15
+ * Amazon Web Services accounts. For information about IAM Identity Center features, see the
16
+ * <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
17
+ * User Guide</a>.</p>
6
18
  * <note>
7
19
  * <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
8
20
  * namespaces.</p>
9
21
  * </note>
10
- * <p>This reference guide provides information on single sign-on operations which could be
11
- * used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
12
- * the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
13
- * User Guide</a>.</p>
14
- * <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
22
+ * <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
15
23
  * principals. For more information about how to work with principals and principal IDs in
16
24
  * IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
17
25
  * Reference</a>.</p>
@@ -827,12 +827,18 @@ export interface GetApplicationGrantRequest {
827
827
  GrantType: GrantType | undefined;
828
828
  }
829
829
  /**
830
- * <p>A structure that defines configuration settings for an application that supports the OAuth 2.0 Authorization Code Grant.</p>
830
+ * <p>A structure that defines configuration settings for an application that supports the
831
+ * OAuth 2.0 Authorization Code Grant.</p>
831
832
  * @public
832
833
  */
833
834
  export interface AuthorizationCodeGrant {
834
835
  /**
835
- * <p>A list of URIs that are valid locations to redirect a user's browser after the user is authorized.</p>
836
+ * <p>A list of URIs that are valid locations to redirect a user's browser after the user is
837
+ * authorized.</p>
838
+ * <note>
839
+ * <p>RedirectUris is required when the grant type is
840
+ * <code>authorization_code</code>.</p>
841
+ * </note>
836
842
  * @public
837
843
  */
838
844
  RedirectUris?: string[] | undefined;
@@ -856,30 +862,43 @@ export interface AuthorizedTokenIssuer {
856
862
  AuthorizedAudiences?: string[] | undefined;
857
863
  }
858
864
  /**
859
- * <p>A structure that defines configuration settings for an application that supports the JWT Bearer Token Authorization Grant.</p>
865
+ * <p>A structure that defines configuration settings for an application that supports the
866
+ * JWT Bearer Token Authorization Grant. The <code>AuthorizedAudience</code> field is the
867
+ * aud claim. For more information, see <a href="https://datatracker.ietf.org/doc/html/rfc7523">RFC 7523</a>.</p>
860
868
  * @public
861
869
  */
862
870
  export interface JwtBearerGrant {
863
871
  /**
864
- * <p>A list of allowed token issuers trusted by the Identity Center instances for this application.</p>
872
+ * <p>A list of allowed token issuers trusted by the Identity Center instances for this
873
+ * application.</p>
874
+ * <note>
875
+ * <p>
876
+ * <code>AuthorizedTokenIssuers</code> is required when the grant type is
877
+ * <code>JwtBearerGrant</code>.</p>
878
+ * </note>
865
879
  * @public
866
880
  */
867
881
  AuthorizedTokenIssuers?: AuthorizedTokenIssuer[] | undefined;
868
882
  }
869
883
  /**
870
- * <p>A structure that defines configuration settings for an application that supports the OAuth 2.0 Refresh Token Grant.</p>
884
+ * <p>A structure that defines configuration settings for an application that supports the
885
+ * OAuth 2.0 Refresh Token Grant. For more, see <a href="https://datatracker.ietf.org/doc/html/rfc6749#section-1.5">RFC
886
+ * 6749</a>.</p>
871
887
  * @public
872
888
  */
873
889
  export interface RefreshTokenGrant {
874
890
  }
875
891
  /**
876
- * <p>A structure that defines configuration settings for an application that supports the OAuth 2.0 Token Exchange Grant.</p>
892
+ * <p>A structure that defines configuration settings for an application that supports the
893
+ * OAuth 2.0 Token Exchange Grant. For more information, see <a href="https://datatracker.ietf.org/doc/html/rfc8693">RFC 8693</a>.</p>
877
894
  * @public
878
895
  */
879
896
  export interface TokenExchangeGrant {
880
897
  }
881
898
  /**
882
- * <p>The Grant union represents the set of possible configuration options for the selected grant type. Exactly one member of the union must be specified, and must match the grant type selected.</p>
899
+ * <p>The Grant union represents the set of possible configuration options for the selected
900
+ * grant type. Exactly one member of the union must be specified, and must match the grant
901
+ * type selected.</p>
883
902
  * @public
884
903
  */
885
904
  export type Grant = Grant.AuthorizationCodeMember | Grant.JwtBearerMember | Grant.RefreshTokenMember | Grant.TokenExchangeMember | Grant.$UnknownMember;
@@ -899,7 +918,8 @@ export declare namespace Grant {
899
918
  $unknown?: never;
900
919
  }
901
920
  /**
902
- * <p>Configuration options for the <code>urn:ietf:params:oauth:grant-type:jwt-bearer</code> grant type.</p>
921
+ * <p>Configuration options for the <code>urn:ietf:params:oauth:grant-type:jwt-bearer</code>
922
+ * grant type.</p>
903
923
  * @public
904
924
  */
905
925
  interface JwtBearerMember {
@@ -921,7 +941,8 @@ export declare namespace Grant {
921
941
  $unknown?: never;
922
942
  }
923
943
  /**
924
- * <p>Configuration options for the <code>urn:ietf:params:oauth:grant-type:token-exchange</code> grant type.</p>
944
+ * <p>Configuration options for the
945
+ * <code>urn:ietf:params:oauth:grant-type:token-exchange</code> grant type.</p>
925
946
  * @public
926
947
  */
927
948
  interface TokenExchangeMember {
@@ -1097,7 +1118,8 @@ export interface ResourceServerConfig {
1097
1118
  Scopes?: Record<string, ResourceServerScopeDetails> | undefined;
1098
1119
  }
1099
1120
  /**
1100
- * <p>A structure that describes a provider that can be used to connect an Amazon Web Services managed application or customer managed application to IAM Identity Center.</p>
1121
+ * <p>A structure that describes a provider that can be used to connect an Amazon Web Services managed
1122
+ * application or customer managed application to IAM Identity Center.</p>
1101
1123
  * @public
1102
1124
  */
1103
1125
  export interface ApplicationProvider {
@@ -1183,7 +1205,7 @@ export declare class ServiceQuotaExceededException extends __BaseException {
1183
1205
  constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
1184
1206
  }
1185
1207
  /**
1186
- * <p>A structure that stores the details of the Amazon Web Services managed policy.</p>
1208
+ * <p>A structure that stores a list of managed policy ARNs that describe the associated Amazon Web Services managed policy.</p>
1187
1209
  * @public
1188
1210
  */
1189
1211
  export interface AttachedManagedPolicy {
@@ -1298,8 +1320,7 @@ export interface Tag {
1298
1320
  */
1299
1321
  export interface CreateApplicationRequest {
1300
1322
  /**
1301
- * <p>The ARN of the instance of IAM Identity Center under which the operation will run.
1302
- * For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1323
+ * <p>The ARN of the instance of IAM Identity Center under which the operation will run. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1303
1324
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1304
1325
  * @public
1305
1326
  */
@@ -1366,12 +1387,12 @@ export interface CreateApplicationResponse {
1366
1387
  */
1367
1388
  export interface CreateApplicationAssignmentRequest {
1368
1389
  /**
1369
- * <p>The ARN of the application provider under which the operation will run.</p>
1390
+ * <p>The ARN of the application for which the assignment is created.</p>
1370
1391
  * @public
1371
1392
  */
1372
1393
  ApplicationArn: string | undefined;
1373
1394
  /**
1374
- * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
1395
+ * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
1375
1396
  * @public
1376
1397
  */
1377
1398
  PrincipalId: string | undefined;
@@ -1571,19 +1592,24 @@ export type JwksRetrievalOption = (typeof JwksRetrievalOption)[keyof typeof Jwks
1571
1592
  */
1572
1593
  export interface OidcJwtConfiguration {
1573
1594
  /**
1574
- * <p>The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain the information required to verify the tokens that the trusted token issuer generates.</p>
1595
+ * <p>The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain
1596
+ * the information required to verify the tokens that the trusted token issuer generates.</p>
1575
1597
  * @public
1576
1598
  */
1577
1599
  IssuerUrl: string | undefined;
1578
1600
  /**
1579
- * <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for
1580
- * an IAM Identity Center token.</p>
1601
+ * <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
1602
+ * this JMESPath expression is compared against the attribute mapped by
1603
+ * <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for an
1604
+ * IAM Identity Center token.</p>
1581
1605
  * @public
1582
1606
  */
1583
1607
  ClaimAttributePath: string | undefined;
1584
1608
  /**
1585
- * <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for
1586
- * an IAM Identity Center token. </p>
1609
+ * <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
1610
+ * this JMESPath expression is compared against the attribute mapped by
1611
+ * <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for an IAM Identity Center
1612
+ * token. </p>
1587
1613
  * @public
1588
1614
  */
1589
1615
  IdentityStoreAttributePath: string | undefined;
@@ -1767,7 +1793,7 @@ export interface DeleteApplicationAssignmentRequest {
1767
1793
  */
1768
1794
  ApplicationArn: string | undefined;
1769
1795
  /**
1770
- * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
1796
+ * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
1771
1797
  * @public
1772
1798
  */
1773
1799
  PrincipalId: string | undefined;
@@ -2013,14 +2039,13 @@ export interface DescribeApplicationResponse {
2013
2039
  */
2014
2040
  export interface DescribeApplicationAssignmentRequest {
2015
2041
  /**
2016
- * <p>Specifies the ARN of the application.
2017
- * For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
2042
+ * <p>Specifies the ARN of the application. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
2018
2043
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
2019
2044
  * @public
2020
2045
  */
2021
2046
  ApplicationArn: string | undefined;
2022
2047
  /**
2023
- * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
2048
+ * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
2024
2049
  * @public
2025
2050
  */
2026
2051
  PrincipalId: string | undefined;
@@ -2040,7 +2065,7 @@ export interface DescribeApplicationAssignmentResponse {
2040
2065
  */
2041
2066
  PrincipalType?: PrincipalType | undefined;
2042
2067
  /**
2043
- * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
2068
+ * <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
2044
2069
  * @public
2045
2070
  */
2046
2071
  PrincipalId?: string | undefined;
@@ -2389,8 +2414,9 @@ export interface GetApplicationAssignmentConfigurationRequest {
2389
2414
  */
2390
2415
  export interface GetApplicationAssignmentConfigurationResponse {
2391
2416
  /**
2392
- * <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t have access to the application unless an assignment is created using the
2393
- * <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have access to the application. </p>
2417
+ * <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
2418
+ * have access to the application unless an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
2419
+ * access to the application. </p>
2394
2420
  * @public
2395
2421
  */
2396
2422
  AssignmentRequired: boolean | undefined;
@@ -2995,8 +3021,7 @@ export interface ListApplicationsFilter {
2995
3021
  */
2996
3022
  export interface ListApplicationsRequest {
2997
3023
  /**
2998
- * <p>The ARN of the IAM Identity Center application under which the operation will run.
2999
- * For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
3024
+ * <p>The ARN of the IAM Identity Center application under which the operation will run. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
3000
3025
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
3001
3026
  * @public
3002
3027
  */
@@ -3427,14 +3452,18 @@ export interface ListTrustedTokenIssuersResponse {
3427
3452
  */
3428
3453
  export interface OidcJwtUpdateConfiguration {
3429
3454
  /**
3430
- * <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by this JMESPath expression is compared against the attribute mapped by <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for
3431
- * an IAM Identity Center token.</p>
3455
+ * <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
3456
+ * this JMESPath expression is compared against the attribute mapped by
3457
+ * <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for an
3458
+ * IAM Identity Center token.</p>
3432
3459
  * @public
3433
3460
  */
3434
3461
  ClaimAttributePath?: string | undefined;
3435
3462
  /**
3436
- * <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by this JMESPath expression is compared against the attribute mapped by <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for
3437
- * an IAM Identity Center token.</p>
3463
+ * <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
3464
+ * this JMESPath expression is compared against the attribute mapped by
3465
+ * <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for an IAM Identity Center
3466
+ * token.</p>
3438
3467
  * @public
3439
3468
  */
3440
3469
  IdentityStoreAttributePath?: string | undefined;
@@ -3505,8 +3534,9 @@ export interface PutApplicationAssignmentConfigurationRequest {
3505
3534
  */
3506
3535
  ApplicationArn: string | undefined;
3507
3536
  /**
3508
- * <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t have access to the application unless an assignment is created using the
3509
- * <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have access to the application. </p>
3537
+ * <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
3538
+ * have access to the application unless an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
3539
+ * access to the application. </p>
3510
3540
  * @public
3511
3541
  */
3512
3542
  AssignmentRequired: boolean | undefined;
@@ -3624,7 +3654,8 @@ export interface UntagResourceRequest {
3624
3654
  export interface UntagResourceResponse {
3625
3655
  }
3626
3656
  /**
3627
- * <p>A structure that describes the options for the access portal associated with an application that can be updated.</p>
3657
+ * <p>A structure that describes the options for the access portal associated with an
3658
+ * application that can be updated.</p>
3628
3659
  * @public
3629
3660
  */
3630
3661
  export interface UpdateApplicationPortalOptions {
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-sso-admin",
3
3
  "description": "AWS SDK for JavaScript Sso Admin Client for Node.js, Browser and React Native",
4
- "version": "3.804.0",
4
+ "version": "3.806.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-sso-admin",
@@ -20,39 +20,39 @@
20
20
  "dependencies": {
21
21
  "@aws-crypto/sha256-browser": "5.2.0",
22
22
  "@aws-crypto/sha256-js": "5.2.0",
23
- "@aws-sdk/core": "3.804.0",
24
- "@aws-sdk/credential-provider-node": "3.804.0",
23
+ "@aws-sdk/core": "3.806.0",
24
+ "@aws-sdk/credential-provider-node": "3.806.0",
25
25
  "@aws-sdk/middleware-host-header": "3.804.0",
26
26
  "@aws-sdk/middleware-logger": "3.804.0",
27
27
  "@aws-sdk/middleware-recursion-detection": "3.804.0",
28
- "@aws-sdk/middleware-user-agent": "3.804.0",
29
- "@aws-sdk/region-config-resolver": "3.804.0",
28
+ "@aws-sdk/middleware-user-agent": "3.806.0",
29
+ "@aws-sdk/region-config-resolver": "3.806.0",
30
30
  "@aws-sdk/types": "3.804.0",
31
- "@aws-sdk/util-endpoints": "3.804.0",
31
+ "@aws-sdk/util-endpoints": "3.806.0",
32
32
  "@aws-sdk/util-user-agent-browser": "3.804.0",
33
- "@aws-sdk/util-user-agent-node": "3.804.0",
34
- "@smithy/config-resolver": "^4.1.0",
33
+ "@aws-sdk/util-user-agent-node": "3.806.0",
34
+ "@smithy/config-resolver": "^4.1.1",
35
35
  "@smithy/core": "^3.3.1",
36
36
  "@smithy/fetch-http-handler": "^5.0.2",
37
37
  "@smithy/hash-node": "^4.0.2",
38
38
  "@smithy/invalid-dependency": "^4.0.2",
39
39
  "@smithy/middleware-content-length": "^4.0.2",
40
- "@smithy/middleware-endpoint": "^4.1.2",
41
- "@smithy/middleware-retry": "^4.1.3",
40
+ "@smithy/middleware-endpoint": "^4.1.3",
41
+ "@smithy/middleware-retry": "^4.1.4",
42
42
  "@smithy/middleware-serde": "^4.0.3",
43
43
  "@smithy/middleware-stack": "^4.0.2",
44
- "@smithy/node-config-provider": "^4.0.2",
44
+ "@smithy/node-config-provider": "^4.1.0",
45
45
  "@smithy/node-http-handler": "^4.0.4",
46
46
  "@smithy/protocol-http": "^5.1.0",
47
- "@smithy/smithy-client": "^4.2.2",
47
+ "@smithy/smithy-client": "^4.2.3",
48
48
  "@smithy/types": "^4.2.0",
49
49
  "@smithy/url-parser": "^4.0.2",
50
50
  "@smithy/util-base64": "^4.0.0",
51
51
  "@smithy/util-body-length-browser": "^4.0.0",
52
52
  "@smithy/util-body-length-node": "^4.0.0",
53
- "@smithy/util-defaults-mode-browser": "^4.0.10",
54
- "@smithy/util-defaults-mode-node": "^4.0.10",
55
- "@smithy/util-endpoints": "^3.0.2",
53
+ "@smithy/util-defaults-mode-browser": "^4.0.11",
54
+ "@smithy/util-defaults-mode-node": "^4.0.11",
55
+ "@smithy/util-endpoints": "^3.0.3",
56
56
  "@smithy/util-middleware": "^4.0.2",
57
57
  "@smithy/util-retry": "^4.0.3",
58
58
  "@smithy/util-utf8": "^4.0.0",