@aws-sdk/client-sso-admin 3.804.0 → 3.806.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +17 -9
- package/dist-cjs/runtimeConfig.js +6 -6
- package/dist-es/runtimeConfig.js +6 -6
- package/dist-types/SSOAdmin.d.ts +17 -9
- package/dist-types/SSOAdminClient.d.ts +17 -9
- package/dist-types/commands/CreateApplicationCommand.d.ts +11 -1
- package/dist-types/commands/CreateInstanceCommand.d.ts +2 -2
- package/dist-types/commands/CreateTrustedTokenIssuerCommand.d.ts +6 -4
- package/dist-types/commands/DeleteTrustedTokenIssuerCommand.d.ts +2 -1
- package/dist-types/commands/DescribeApplicationAssignmentCommand.d.ts +4 -3
- package/dist-types/commands/DescribeApplicationProviderCommand.d.ts +2 -1
- package/dist-types/commands/DescribeInstanceCommand.d.ts +10 -7
- package/dist-types/commands/DescribeTrustedTokenIssuerCommand.d.ts +3 -2
- package/dist-types/commands/ListAccountAssignmentsForPrincipalCommand.d.ts +2 -1
- package/dist-types/commands/ListApplicationAssignmentsForPrincipalCommand.d.ts +5 -1
- package/dist-types/commands/ListApplicationsCommand.d.ts +5 -3
- package/dist-types/commands/PutApplicationAssignmentConfigurationCommand.d.ts +5 -3
- package/dist-types/commands/PutApplicationGrantCommand.d.ts +78 -1
- package/dist-types/commands/UpdateTrustedTokenIssuerCommand.d.ts +4 -2
- package/dist-types/index.d.ts +17 -9
- package/dist-types/models/models_0.d.ts +67 -36
- package/package.json +15 -15
package/README.md
CHANGED
|
@@ -6,19 +6,27 @@
|
|
|
6
6
|
|
|
7
7
|
AWS SDK for JavaScript SSOAdmin Client for Node.js, Browser and React Native.
|
|
8
8
|
|
|
9
|
-
<p>IAM Identity Center
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
9
|
+
<p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
|
|
10
|
+
applications and other Amazon Web Services resources. You can connect your existing identity provider
|
|
11
|
+
and synchronize users and groups from your directory, or create and manage your users
|
|
12
|
+
directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
|
|
13
|
+
<ul>
|
|
14
|
+
<li>
|
|
15
|
+
<p>User access to applications</p>
|
|
16
|
+
</li>
|
|
17
|
+
<li>
|
|
18
|
+
<p>User access to Amazon Web Services accounts</p>
|
|
19
|
+
</li>
|
|
20
|
+
</ul>
|
|
21
|
+
<p>This guide provides information about single sign-on operations that you can use for access to applications and
|
|
22
|
+
Amazon Web Services accounts. For information about IAM Identity Center features, see the
|
|
23
|
+
<a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
24
|
+
User Guide</a>.</p>
|
|
13
25
|
<note>
|
|
14
26
|
<p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
|
|
15
27
|
namespaces.</p>
|
|
16
28
|
</note>
|
|
17
|
-
<p>
|
|
18
|
-
used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
|
|
19
|
-
the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
20
|
-
User Guide</a>.</p>
|
|
21
|
-
<p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
|
|
29
|
+
<p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
|
|
22
30
|
principals. For more information about how to work with principals and principal IDs in
|
|
23
31
|
IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
|
|
24
32
|
Reference</a>.</p>
|
|
@@ -23,20 +23,20 @@ const getRuntimeConfig = (config) => {
|
|
|
23
23
|
const defaultConfigProvider = () => defaultsMode().then(smithy_client_1.loadConfigsForDefaultMode);
|
|
24
24
|
const clientSharedValues = (0, runtimeConfig_shared_1.getRuntimeConfig)(config);
|
|
25
25
|
(0, core_1.emitWarningIfUnsupportedVersion)(process.version);
|
|
26
|
-
const
|
|
26
|
+
const loaderConfig = { profile: config?.profile, logger: clientSharedValues.logger };
|
|
27
27
|
return {
|
|
28
28
|
...clientSharedValues,
|
|
29
29
|
...config,
|
|
30
30
|
runtime: "node",
|
|
31
31
|
defaultsMode,
|
|
32
|
-
authSchemePreference: config?.authSchemePreference ?? (0, node_config_provider_1.loadConfig)(core_1.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,
|
|
32
|
+
authSchemePreference: config?.authSchemePreference ?? (0, node_config_provider_1.loadConfig)(core_1.NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
|
|
33
33
|
bodyLengthChecker: config?.bodyLengthChecker ?? util_body_length_node_1.calculateBodyLength,
|
|
34
34
|
credentialDefaultProvider: config?.credentialDefaultProvider ?? credential_provider_node_1.defaultProvider,
|
|
35
35
|
defaultUserAgentProvider: config?.defaultUserAgentProvider ??
|
|
36
36
|
(0, util_user_agent_node_1.createDefaultUserAgentProvider)({ serviceId: clientSharedValues.serviceId, clientVersion: package_json_1.default.version }),
|
|
37
37
|
maxAttempts: config?.maxAttempts ?? (0, node_config_provider_1.loadConfig)(middleware_retry_1.NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
|
|
38
38
|
region: config?.region ??
|
|
39
|
-
(0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_REGION_CONFIG_OPTIONS, { ...config_resolver_1.NODE_REGION_CONFIG_FILE_OPTIONS, ...
|
|
39
|
+
(0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_REGION_CONFIG_OPTIONS, { ...config_resolver_1.NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
|
|
40
40
|
requestHandler: node_http_handler_1.NodeHttpHandler.create(config?.requestHandler ?? defaultConfigProvider),
|
|
41
41
|
retryMode: config?.retryMode ??
|
|
42
42
|
(0, node_config_provider_1.loadConfig)({
|
|
@@ -45,9 +45,9 @@ const getRuntimeConfig = (config) => {
|
|
|
45
45
|
}, config),
|
|
46
46
|
sha256: config?.sha256 ?? hash_node_1.Hash.bind(null, "sha256"),
|
|
47
47
|
streamCollector: config?.streamCollector ?? node_http_handler_1.streamCollector,
|
|
48
|
-
useDualstackEndpoint: config?.useDualstackEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,
|
|
49
|
-
useFipsEndpoint: config?.useFipsEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,
|
|
50
|
-
userAgentAppId: config?.userAgentAppId ?? (0, node_config_provider_1.loadConfig)(util_user_agent_node_1.NODE_APP_ID_CONFIG_OPTIONS,
|
|
48
|
+
useDualstackEndpoint: config?.useDualstackEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
|
|
49
|
+
useFipsEndpoint: config?.useFipsEndpoint ?? (0, node_config_provider_1.loadConfig)(config_resolver_1.NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
|
|
50
|
+
userAgentAppId: config?.userAgentAppId ?? (0, node_config_provider_1.loadConfig)(util_user_agent_node_1.NODE_APP_ID_CONFIG_OPTIONS, loaderConfig),
|
|
51
51
|
};
|
|
52
52
|
};
|
|
53
53
|
exports.getRuntimeConfig = getRuntimeConfig;
|
package/dist-es/runtimeConfig.js
CHANGED
|
@@ -19,20 +19,20 @@ export const getRuntimeConfig = (config) => {
|
|
|
19
19
|
const defaultConfigProvider = () => defaultsMode().then(loadConfigsForDefaultMode);
|
|
20
20
|
const clientSharedValues = getSharedRuntimeConfig(config);
|
|
21
21
|
awsCheckVersion(process.version);
|
|
22
|
-
const
|
|
22
|
+
const loaderConfig = { profile: config?.profile, logger: clientSharedValues.logger };
|
|
23
23
|
return {
|
|
24
24
|
...clientSharedValues,
|
|
25
25
|
...config,
|
|
26
26
|
runtime: "node",
|
|
27
27
|
defaultsMode,
|
|
28
|
-
authSchemePreference: config?.authSchemePreference ?? loadNodeConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS,
|
|
28
|
+
authSchemePreference: config?.authSchemePreference ?? loadNodeConfig(NODE_AUTH_SCHEME_PREFERENCE_OPTIONS, loaderConfig),
|
|
29
29
|
bodyLengthChecker: config?.bodyLengthChecker ?? calculateBodyLength,
|
|
30
30
|
credentialDefaultProvider: config?.credentialDefaultProvider ?? credentialDefaultProvider,
|
|
31
31
|
defaultUserAgentProvider: config?.defaultUserAgentProvider ??
|
|
32
32
|
createDefaultUserAgentProvider({ serviceId: clientSharedValues.serviceId, clientVersion: packageInfo.version }),
|
|
33
33
|
maxAttempts: config?.maxAttempts ?? loadNodeConfig(NODE_MAX_ATTEMPT_CONFIG_OPTIONS, config),
|
|
34
34
|
region: config?.region ??
|
|
35
|
-
loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, { ...NODE_REGION_CONFIG_FILE_OPTIONS, ...
|
|
35
|
+
loadNodeConfig(NODE_REGION_CONFIG_OPTIONS, { ...NODE_REGION_CONFIG_FILE_OPTIONS, ...loaderConfig }),
|
|
36
36
|
requestHandler: RequestHandler.create(config?.requestHandler ?? defaultConfigProvider),
|
|
37
37
|
retryMode: config?.retryMode ??
|
|
38
38
|
loadNodeConfig({
|
|
@@ -41,8 +41,8 @@ export const getRuntimeConfig = (config) => {
|
|
|
41
41
|
}, config),
|
|
42
42
|
sha256: config?.sha256 ?? Hash.bind(null, "sha256"),
|
|
43
43
|
streamCollector: config?.streamCollector ?? streamCollector,
|
|
44
|
-
useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS,
|
|
45
|
-
useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS,
|
|
46
|
-
userAgentAppId: config?.userAgentAppId ?? loadNodeConfig(NODE_APP_ID_CONFIG_OPTIONS,
|
|
44
|
+
useDualstackEndpoint: config?.useDualstackEndpoint ?? loadNodeConfig(NODE_USE_DUALSTACK_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
|
|
45
|
+
useFipsEndpoint: config?.useFipsEndpoint ?? loadNodeConfig(NODE_USE_FIPS_ENDPOINT_CONFIG_OPTIONS, loaderConfig),
|
|
46
|
+
userAgentAppId: config?.userAgentAppId ?? loadNodeConfig(NODE_APP_ID_CONFIG_OPTIONS, loaderConfig),
|
|
47
47
|
};
|
|
48
48
|
};
|
package/dist-types/SSOAdmin.d.ts
CHANGED
|
@@ -517,19 +517,27 @@ export interface SSOAdmin {
|
|
|
517
517
|
updateTrustedTokenIssuer(args: UpdateTrustedTokenIssuerCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateTrustedTokenIssuerCommandOutput) => void): void;
|
|
518
518
|
}
|
|
519
519
|
/**
|
|
520
|
-
* <p>IAM Identity Center
|
|
521
|
-
*
|
|
522
|
-
*
|
|
523
|
-
*
|
|
520
|
+
* <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
|
|
521
|
+
* applications and other Amazon Web Services resources. You can connect your existing identity provider
|
|
522
|
+
* and synchronize users and groups from your directory, or create and manage your users
|
|
523
|
+
* directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
|
|
524
|
+
* <ul>
|
|
525
|
+
* <li>
|
|
526
|
+
* <p>User access to applications</p>
|
|
527
|
+
* </li>
|
|
528
|
+
* <li>
|
|
529
|
+
* <p>User access to Amazon Web Services accounts</p>
|
|
530
|
+
* </li>
|
|
531
|
+
* </ul>
|
|
532
|
+
* <p>This guide provides information about single sign-on operations that you can use for access to applications and
|
|
533
|
+
* Amazon Web Services accounts. For information about IAM Identity Center features, see the
|
|
534
|
+
* <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
535
|
+
* User Guide</a>.</p>
|
|
524
536
|
* <note>
|
|
525
537
|
* <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
|
|
526
538
|
* namespaces.</p>
|
|
527
539
|
* </note>
|
|
528
|
-
* <p>
|
|
529
|
-
* used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
|
|
530
|
-
* the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
531
|
-
* User Guide</a>.</p>
|
|
532
|
-
* <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
|
|
540
|
+
* <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
|
|
533
541
|
* principals. For more information about how to work with principals and principal IDs in
|
|
534
542
|
* IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
|
|
535
543
|
* Reference</a>.</p>
|
|
@@ -242,19 +242,27 @@ export type SSOAdminClientResolvedConfigType = __SmithyResolvedConfiguration<__H
|
|
|
242
242
|
export interface SSOAdminClientResolvedConfig extends SSOAdminClientResolvedConfigType {
|
|
243
243
|
}
|
|
244
244
|
/**
|
|
245
|
-
* <p>IAM Identity Center
|
|
246
|
-
*
|
|
247
|
-
*
|
|
248
|
-
*
|
|
245
|
+
* <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
|
|
246
|
+
* applications and other Amazon Web Services resources. You can connect your existing identity provider
|
|
247
|
+
* and synchronize users and groups from your directory, or create and manage your users
|
|
248
|
+
* directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
|
|
249
|
+
* <ul>
|
|
250
|
+
* <li>
|
|
251
|
+
* <p>User access to applications</p>
|
|
252
|
+
* </li>
|
|
253
|
+
* <li>
|
|
254
|
+
* <p>User access to Amazon Web Services accounts</p>
|
|
255
|
+
* </li>
|
|
256
|
+
* </ul>
|
|
257
|
+
* <p>This guide provides information about single sign-on operations that you can use for access to applications and
|
|
258
|
+
* Amazon Web Services accounts. For information about IAM Identity Center features, see the
|
|
259
|
+
* <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
260
|
+
* User Guide</a>.</p>
|
|
249
261
|
* <note>
|
|
250
262
|
* <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
|
|
251
263
|
* namespaces.</p>
|
|
252
264
|
* </note>
|
|
253
|
-
* <p>
|
|
254
|
-
* used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
|
|
255
|
-
* the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
256
|
-
* User Guide</a>.</p>
|
|
257
|
-
* <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
|
|
265
|
+
* <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
|
|
258
266
|
* principals. For more information about how to work with principals and principal IDs in
|
|
259
267
|
* IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
|
|
260
268
|
* Reference</a>.</p>
|
|
@@ -27,7 +27,17 @@ declare const CreateApplicationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates an application in IAM Identity Center for the given
|
|
30
|
+
* <p>Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given
|
|
31
|
+
* application provider.</p>
|
|
32
|
+
* <note>
|
|
33
|
+
* <p>This API does not support creating SAML 2.0 customer managed applications or Amazon Web Services
|
|
34
|
+
* managed applications. To learn how to create an Amazon Web Services managed application, see the
|
|
35
|
+
* application user guide. You can create a SAML 2.0 customer managed application in
|
|
36
|
+
* the Amazon Web Services Management Console only. See <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-setup.html">Setting
|
|
37
|
+
* up customer managed SAML 2.0 applications</a>. For more information on these
|
|
38
|
+
* application types, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/awsapps.html">Amazon Web Services managed
|
|
39
|
+
* applications</a>.</p>
|
|
40
|
+
* </note>
|
|
31
41
|
* @example
|
|
32
42
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
43
|
* ```javascript
|
|
@@ -28,8 +28,8 @@ declare const CreateInstanceCommand_base: {
|
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
30
|
* <p>Creates an instance of IAM Identity Center for a standalone Amazon Web Services account that is not
|
|
31
|
-
* managed by Organizations or a member Amazon Web Services account in an organization. You can
|
|
32
|
-
*
|
|
31
|
+
* managed by Organizations or a member Amazon Web Services account in an organization. You can create only
|
|
32
|
+
* one instance per account and across all Amazon Web Services Regions.</p>
|
|
33
33
|
* <p>The CreateInstance request is rejected if the following apply: </p>
|
|
34
34
|
* <ul>
|
|
35
35
|
* <li>
|
|
@@ -27,10 +27,12 @@ declare const CreateTrustedTokenIssuerCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a connection to a trusted token issuer in an instance of IAM Identity Center. A trusted token issuer enables trusted
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
*
|
|
30
|
+
* <p>Creates a connection to a trusted token issuer in an instance of IAM Identity Center. A trusted token issuer enables trusted
|
|
31
|
+
* identity propagation to be used with applications that authenticate outside of
|
|
32
|
+
* Amazon Web Services.</p>
|
|
33
|
+
* <p>This trusted token issuer describes an external identity provider (IdP) that can generate claims or
|
|
34
|
+
* assertions in the form of access tokens for a user. Applications enabled for IAM Identity Center
|
|
35
|
+
* can use these tokens for authentication. </p>
|
|
34
36
|
* @example
|
|
35
37
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
38
|
* ```javascript
|
|
@@ -29,7 +29,8 @@ declare const DeleteTrustedTokenIssuerCommand_base: {
|
|
|
29
29
|
/**
|
|
30
30
|
* <p>Deletes a trusted token issuer configuration from an instance of IAM Identity Center.</p>
|
|
31
31
|
* <note>
|
|
32
|
-
* <p>Deleting this trusted token issuer configuration will cause users to lose access to any
|
|
32
|
+
* <p>Deleting this trusted token issuer configuration will cause users to lose access to any
|
|
33
|
+
* applications that are configured to use the trusted token issuer.</p>
|
|
33
34
|
* </note>
|
|
34
35
|
* @example
|
|
35
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -27,9 +27,10 @@ declare const DescribeApplicationAssignmentCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Retrieves a direct assignment of a user or group to an application. If the user
|
|
31
|
-
*
|
|
32
|
-
*
|
|
30
|
+
* <p>Retrieves a direct assignment of a user or group to an application. If the user
|
|
31
|
+
* doesn’t have a direct assignment to the application, the user may still have access to
|
|
32
|
+
* the application through a group. Therefore, don’t use this API to test access to an
|
|
33
|
+
* application for a user. Instead use <a>ListApplicationAssignmentsForPrincipal</a>.</p>
|
|
33
34
|
* @example
|
|
34
35
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
36
|
* ```javascript
|
|
@@ -27,7 +27,8 @@ declare const DescribeApplicationProviderCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Retrieves details about a provider that can be used to connect an Amazon Web Services managed
|
|
30
|
+
* <p>Retrieves details about a provider that can be used to connect an Amazon Web Services managed
|
|
31
|
+
* application or customer managed application to IAM Identity Center.</p>
|
|
31
32
|
* @example
|
|
32
33
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
34
|
* ```javascript
|
|
@@ -27,19 +27,22 @@ declare const DescribeInstanceCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Returns the details of an instance of IAM Identity Center. The status can be one of the
|
|
30
|
+
* <p>Returns the details of an instance of IAM Identity Center. The status can be one of the
|
|
31
|
+
* following:</p>
|
|
31
32
|
* <ul>
|
|
32
33
|
* <li>
|
|
33
34
|
* <p>
|
|
34
|
-
* <code>CREATE_IN_PROGRESS</code> - The instance is in the process of being
|
|
35
|
-
*
|
|
36
|
-
*
|
|
37
|
-
*
|
|
38
|
-
*
|
|
35
|
+
* <code>CREATE_IN_PROGRESS</code> - The instance is in the process of being
|
|
36
|
+
* created. When the instance is ready for use, DescribeInstance returns the status
|
|
37
|
+
* of <code>ACTIVE</code>. While the instance is in the
|
|
38
|
+
* <code>CREATE_IN_PROGRESS</code> state, you can call only DescribeInstance
|
|
39
|
+
* and DeleteInstance operations.</p>
|
|
39
40
|
* </li>
|
|
40
41
|
* <li>
|
|
41
42
|
* <p>
|
|
42
|
-
* <code>DELETE_IN_PROGRESS</code> - The instance is being deleted. Returns
|
|
43
|
+
* <code>DELETE_IN_PROGRESS</code> - The instance is being deleted. Returns
|
|
44
|
+
* <code>AccessDeniedException</code> after the delete operation completes.
|
|
45
|
+
* </p>
|
|
43
46
|
* </li>
|
|
44
47
|
* <li>
|
|
45
48
|
* <p>
|
|
@@ -27,8 +27,9 @@ declare const DescribeTrustedTokenIssuerCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Retrieves details about a trusted token issuer configuration stored in an instance of IAM Identity Center. Details
|
|
31
|
-
*
|
|
30
|
+
* <p>Retrieves details about a trusted token issuer configuration stored in an instance of IAM Identity Center. Details
|
|
31
|
+
* include the name of the trusted token issuer, the issuer URL, and the path of the source attribute and
|
|
32
|
+
* the destination attribute for a trusted token issuer configuration. </p>
|
|
32
33
|
* @example
|
|
33
34
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
35
|
* ```javascript
|
|
@@ -28,7 +28,8 @@ declare const ListAccountAssignmentsForPrincipalCommand_base: {
|
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
30
|
* <p>Retrieves a list of the IAM Identity Center associated Amazon Web Services accounts that the principal has access
|
|
31
|
-
* to
|
|
31
|
+
* to. This action must be called from the management account containing your organization
|
|
32
|
+
* instance of IAM Identity Center. This action is not valid for account instances of IAM Identity Center.</p>
|
|
32
33
|
* @example
|
|
33
34
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
35
|
* ```javascript
|
|
@@ -27,7 +27,11 @@ declare const ListApplicationAssignmentsForPrincipalCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Lists the applications to which a specified principal is assigned
|
|
30
|
+
* <p>Lists the applications to which a specified principal is assigned. You must provide a
|
|
31
|
+
* filter when calling this action from a member account against your organization instance
|
|
32
|
+
* of IAM Identity Center. A filter is not required when called from the management account against an
|
|
33
|
+
* organization instance of IAM Identity Center, or from a member account against an account instance of
|
|
34
|
+
* IAM Identity Center in the same account.</p>
|
|
31
35
|
* @example
|
|
32
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
37
|
* ```javascript
|
|
@@ -27,9 +27,11 @@ declare const ListApplicationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Lists all applications associated with the instance of IAM Identity Center. When listing
|
|
31
|
-
* in the management account, member accounts
|
|
32
|
-
* parameter to filter the list to only
|
|
30
|
+
* <p>Lists all applications associated with the instance of IAM Identity Center. When listing
|
|
31
|
+
* applications for an organization instance in the management account, member accounts
|
|
32
|
+
* must use the <code>applicationAccount</code> parameter to filter the list to only
|
|
33
|
+
* applications created from that account. When listing applications for an account
|
|
34
|
+
* instance in the same member account, a filter is not required.</p>
|
|
33
35
|
* @example
|
|
34
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
37
|
* ```javascript
|
|
@@ -27,9 +27,11 @@ declare const PutApplicationAssignmentConfigurationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Configure how users gain access to an application. If <code>AssignmentsRequired</code>
|
|
31
|
-
*
|
|
32
|
-
*
|
|
30
|
+
* <p>Configure how users gain access to an application. If <code>AssignmentsRequired</code>
|
|
31
|
+
* is <code>true</code> (default value), users don’t have access to the application unless
|
|
32
|
+
* an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
|
|
33
|
+
* access to the application. If an assignment is created using <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment</a>., the user retains access if
|
|
34
|
+
* <code>AssignmentsRequired</code> is set to <code>true</code>. </p>
|
|
33
35
|
* @example
|
|
34
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
37
|
* ```javascript
|
|
@@ -27,7 +27,84 @@ declare const PutApplicationGrantCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>
|
|
30
|
+
* <p>Creates a configuration for an application to use grants. Conceptually grants are
|
|
31
|
+
* authorization to request actions related to tokens. This configuration will be used when
|
|
32
|
+
* parties are requesting and receiving tokens during the trusted identity propagation
|
|
33
|
+
* process. For more information on the IAM Identity Center supported grant workflows, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/customermanagedapps-saml2-oauth2.html">SAML 2.0
|
|
34
|
+
* and OAuth 2.0</a>.</p>
|
|
35
|
+
* <p>A grant is created between your applications and Identity Center instance which
|
|
36
|
+
* enables an application to use specified mechanisms to obtain tokens. These tokens are
|
|
37
|
+
* used by your applications to gain access to Amazon Web Services resources on behalf of users. The
|
|
38
|
+
* following elements are within these exchanges:</p>
|
|
39
|
+
* <ul>
|
|
40
|
+
* <li>
|
|
41
|
+
* <p>
|
|
42
|
+
* <b>Requester</b> - The application requesting access
|
|
43
|
+
* to Amazon Web Services resources.</p>
|
|
44
|
+
* </li>
|
|
45
|
+
* <li>
|
|
46
|
+
* <p>
|
|
47
|
+
* <b>Subject</b> - Typically the user that is
|
|
48
|
+
* requesting access to Amazon Web Services resources.</p>
|
|
49
|
+
* </li>
|
|
50
|
+
* <li>
|
|
51
|
+
* <p>
|
|
52
|
+
* <b>Grant</b> - Conceptually, a grant is
|
|
53
|
+
* authorization to access Amazon Web Services resources. These grants authorize token generation
|
|
54
|
+
* for authenticating access to the requester and for the request to make requests
|
|
55
|
+
* on behalf of the subjects. There are four types of grants:</p>
|
|
56
|
+
* <ul>
|
|
57
|
+
* <li>
|
|
58
|
+
* <p>
|
|
59
|
+
* <b>AuthorizationCode</b> - Allows an
|
|
60
|
+
* application to request authorization through a series of user-agent
|
|
61
|
+
* redirects.</p>
|
|
62
|
+
* </li>
|
|
63
|
+
* <li>
|
|
64
|
+
* <p>
|
|
65
|
+
* <b>JWT bearer </b> - Authorizes an
|
|
66
|
+
* application to exchange a JSON Web Token that came from an external
|
|
67
|
+
* identity provider. To learn more, see <a href="https://datatracker.ietf.org/doc/html/rfc6749">RFC
|
|
68
|
+
* 6479</a>.</p>
|
|
69
|
+
* </li>
|
|
70
|
+
* <li>
|
|
71
|
+
* <p>
|
|
72
|
+
* <b>Refresh token</b> - Enables application
|
|
73
|
+
* to request new access tokens to replace expiring or expired access
|
|
74
|
+
* tokens.</p>
|
|
75
|
+
* </li>
|
|
76
|
+
* <li>
|
|
77
|
+
* <p>
|
|
78
|
+
* <b>Exchange token</b> - A grant that
|
|
79
|
+
* requests tokens from the authorization server by providing a ‘subject’
|
|
80
|
+
* token with access scope authorizing trusted identity propagation to this
|
|
81
|
+
* application. To learn more, see <a href="https://datatracker.ietf.org/doc/html/rfc8693">RFC
|
|
82
|
+
* 8693</a>.</p>
|
|
83
|
+
* </li>
|
|
84
|
+
* </ul>
|
|
85
|
+
* </li>
|
|
86
|
+
* <li>
|
|
87
|
+
* <p>
|
|
88
|
+
* <b>Authorization server</b> - IAM Identity Center requests
|
|
89
|
+
* tokens.</p>
|
|
90
|
+
* </li>
|
|
91
|
+
* </ul>
|
|
92
|
+
* <p>User credentials are never shared directly within these exchanges. Instead,
|
|
93
|
+
* applications use grants to request access tokens from IAM Identity Center. For more
|
|
94
|
+
* information, see <a href="https://datatracker.ietf.org/doc/html/rfc6749">RFC
|
|
95
|
+
* 6479</a>.</p>
|
|
96
|
+
* <p class="title">
|
|
97
|
+
* <b>Use cases</b>
|
|
98
|
+
* </p>
|
|
99
|
+
* <ul>
|
|
100
|
+
* <li>
|
|
101
|
+
* <p>Connecting to custom applications.</p>
|
|
102
|
+
* </li>
|
|
103
|
+
* <li>
|
|
104
|
+
* <p>Configuring an Amazon Web Services service to make calls to another Amazon Web Services services using JWT
|
|
105
|
+
* tokens.</p>
|
|
106
|
+
* </li>
|
|
107
|
+
* </ul>
|
|
31
108
|
* @example
|
|
32
109
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
110
|
* ```javascript
|
|
@@ -27,9 +27,11 @@ declare const UpdateTrustedTokenIssuerCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Updates the name of the trusted token issuer, or the path of a source attribute or destination
|
|
30
|
+
* <p>Updates the name of the trusted token issuer, or the path of a source attribute or destination
|
|
31
|
+
* attribute for a trusted token issuer configuration.</p>
|
|
31
32
|
* <note>
|
|
32
|
-
* <p>Updating this trusted token issuer configuration might cause users to lose access to any
|
|
33
|
+
* <p>Updating this trusted token issuer configuration might cause users to lose access to any
|
|
34
|
+
* applications that are configured to use the trusted token issuer.</p>
|
|
33
35
|
* </note>
|
|
34
36
|
* @example
|
|
35
37
|
* Use a bare-bones client and the command you need to make an API call.
|
package/dist-types/index.d.ts
CHANGED
|
@@ -1,17 +1,25 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* <p>IAM Identity Center
|
|
3
|
-
*
|
|
4
|
-
*
|
|
5
|
-
*
|
|
2
|
+
* <p>IAM Identity Center is the Amazon Web Services solution for connecting your workforce users to Amazon Web Services managed
|
|
3
|
+
* applications and other Amazon Web Services resources. You can connect your existing identity provider
|
|
4
|
+
* and synchronize users and groups from your directory, or create and manage your users
|
|
5
|
+
* directly in IAM Identity Center. You can then use IAM Identity Center for either or both of the following:</p>
|
|
6
|
+
* <ul>
|
|
7
|
+
* <li>
|
|
8
|
+
* <p>User access to applications</p>
|
|
9
|
+
* </li>
|
|
10
|
+
* <li>
|
|
11
|
+
* <p>User access to Amazon Web Services accounts</p>
|
|
12
|
+
* </li>
|
|
13
|
+
* </ul>
|
|
14
|
+
* <p>This guide provides information about single sign-on operations that you can use for access to applications and
|
|
15
|
+
* Amazon Web Services accounts. For information about IAM Identity Center features, see the
|
|
16
|
+
* <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
17
|
+
* User Guide</a>.</p>
|
|
6
18
|
* <note>
|
|
7
19
|
* <p>IAM Identity Center uses the <code>sso</code> and <code>identitystore</code> API
|
|
8
20
|
* namespaces.</p>
|
|
9
21
|
* </note>
|
|
10
|
-
* <p>
|
|
11
|
-
* used for access management of Amazon Web Services accounts. For information about IAM Identity Center features, see
|
|
12
|
-
* the <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html">IAM Identity Center
|
|
13
|
-
* User Guide</a>.</p>
|
|
14
|
-
* <p>Many operations in the IAM Identity Center APIs rely on identifiers for users and groups, known as
|
|
22
|
+
* <p>Many API operations for IAM Identity Center rely on identifiers for users and groups, known as
|
|
15
23
|
* principals. For more information about how to work with principals and principal IDs in
|
|
16
24
|
* IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">Identity Store API
|
|
17
25
|
* Reference</a>.</p>
|
|
@@ -827,12 +827,18 @@ export interface GetApplicationGrantRequest {
|
|
|
827
827
|
GrantType: GrantType | undefined;
|
|
828
828
|
}
|
|
829
829
|
/**
|
|
830
|
-
* <p>A structure that defines configuration settings for an application that supports the
|
|
830
|
+
* <p>A structure that defines configuration settings for an application that supports the
|
|
831
|
+
* OAuth 2.0 Authorization Code Grant.</p>
|
|
831
832
|
* @public
|
|
832
833
|
*/
|
|
833
834
|
export interface AuthorizationCodeGrant {
|
|
834
835
|
/**
|
|
835
|
-
* <p>A list of URIs that are valid locations to redirect a user's browser after the user is
|
|
836
|
+
* <p>A list of URIs that are valid locations to redirect a user's browser after the user is
|
|
837
|
+
* authorized.</p>
|
|
838
|
+
* <note>
|
|
839
|
+
* <p>RedirectUris is required when the grant type is
|
|
840
|
+
* <code>authorization_code</code>.</p>
|
|
841
|
+
* </note>
|
|
836
842
|
* @public
|
|
837
843
|
*/
|
|
838
844
|
RedirectUris?: string[] | undefined;
|
|
@@ -856,30 +862,43 @@ export interface AuthorizedTokenIssuer {
|
|
|
856
862
|
AuthorizedAudiences?: string[] | undefined;
|
|
857
863
|
}
|
|
858
864
|
/**
|
|
859
|
-
* <p>A structure that defines configuration settings for an application that supports the
|
|
865
|
+
* <p>A structure that defines configuration settings for an application that supports the
|
|
866
|
+
* JWT Bearer Token Authorization Grant. The <code>AuthorizedAudience</code> field is the
|
|
867
|
+
* aud claim. For more information, see <a href="https://datatracker.ietf.org/doc/html/rfc7523">RFC 7523</a>.</p>
|
|
860
868
|
* @public
|
|
861
869
|
*/
|
|
862
870
|
export interface JwtBearerGrant {
|
|
863
871
|
/**
|
|
864
|
-
* <p>A list of allowed token issuers trusted by the Identity Center instances for this
|
|
872
|
+
* <p>A list of allowed token issuers trusted by the Identity Center instances for this
|
|
873
|
+
* application.</p>
|
|
874
|
+
* <note>
|
|
875
|
+
* <p>
|
|
876
|
+
* <code>AuthorizedTokenIssuers</code> is required when the grant type is
|
|
877
|
+
* <code>JwtBearerGrant</code>.</p>
|
|
878
|
+
* </note>
|
|
865
879
|
* @public
|
|
866
880
|
*/
|
|
867
881
|
AuthorizedTokenIssuers?: AuthorizedTokenIssuer[] | undefined;
|
|
868
882
|
}
|
|
869
883
|
/**
|
|
870
|
-
* <p>A structure that defines configuration settings for an application that supports the
|
|
884
|
+
* <p>A structure that defines configuration settings for an application that supports the
|
|
885
|
+
* OAuth 2.0 Refresh Token Grant. For more, see <a href="https://datatracker.ietf.org/doc/html/rfc6749#section-1.5">RFC
|
|
886
|
+
* 6749</a>.</p>
|
|
871
887
|
* @public
|
|
872
888
|
*/
|
|
873
889
|
export interface RefreshTokenGrant {
|
|
874
890
|
}
|
|
875
891
|
/**
|
|
876
|
-
* <p>A structure that defines configuration settings for an application that supports the
|
|
892
|
+
* <p>A structure that defines configuration settings for an application that supports the
|
|
893
|
+
* OAuth 2.0 Token Exchange Grant. For more information, see <a href="https://datatracker.ietf.org/doc/html/rfc8693">RFC 8693</a>.</p>
|
|
877
894
|
* @public
|
|
878
895
|
*/
|
|
879
896
|
export interface TokenExchangeGrant {
|
|
880
897
|
}
|
|
881
898
|
/**
|
|
882
|
-
* <p>The Grant union represents the set of possible configuration options for the selected
|
|
899
|
+
* <p>The Grant union represents the set of possible configuration options for the selected
|
|
900
|
+
* grant type. Exactly one member of the union must be specified, and must match the grant
|
|
901
|
+
* type selected.</p>
|
|
883
902
|
* @public
|
|
884
903
|
*/
|
|
885
904
|
export type Grant = Grant.AuthorizationCodeMember | Grant.JwtBearerMember | Grant.RefreshTokenMember | Grant.TokenExchangeMember | Grant.$UnknownMember;
|
|
@@ -899,7 +918,8 @@ export declare namespace Grant {
|
|
|
899
918
|
$unknown?: never;
|
|
900
919
|
}
|
|
901
920
|
/**
|
|
902
|
-
* <p>Configuration options for the <code>urn:ietf:params:oauth:grant-type:jwt-bearer</code>
|
|
921
|
+
* <p>Configuration options for the <code>urn:ietf:params:oauth:grant-type:jwt-bearer</code>
|
|
922
|
+
* grant type.</p>
|
|
903
923
|
* @public
|
|
904
924
|
*/
|
|
905
925
|
interface JwtBearerMember {
|
|
@@ -921,7 +941,8 @@ export declare namespace Grant {
|
|
|
921
941
|
$unknown?: never;
|
|
922
942
|
}
|
|
923
943
|
/**
|
|
924
|
-
* <p>Configuration options for the
|
|
944
|
+
* <p>Configuration options for the
|
|
945
|
+
* <code>urn:ietf:params:oauth:grant-type:token-exchange</code> grant type.</p>
|
|
925
946
|
* @public
|
|
926
947
|
*/
|
|
927
948
|
interface TokenExchangeMember {
|
|
@@ -1097,7 +1118,8 @@ export interface ResourceServerConfig {
|
|
|
1097
1118
|
Scopes?: Record<string, ResourceServerScopeDetails> | undefined;
|
|
1098
1119
|
}
|
|
1099
1120
|
/**
|
|
1100
|
-
* <p>A structure that describes a provider that can be used to connect an Amazon Web Services managed
|
|
1121
|
+
* <p>A structure that describes a provider that can be used to connect an Amazon Web Services managed
|
|
1122
|
+
* application or customer managed application to IAM Identity Center.</p>
|
|
1101
1123
|
* @public
|
|
1102
1124
|
*/
|
|
1103
1125
|
export interface ApplicationProvider {
|
|
@@ -1183,7 +1205,7 @@ export declare class ServiceQuotaExceededException extends __BaseException {
|
|
|
1183
1205
|
constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
|
|
1184
1206
|
}
|
|
1185
1207
|
/**
|
|
1186
|
-
* <p>A structure that stores
|
|
1208
|
+
* <p>A structure that stores a list of managed policy ARNs that describe the associated Amazon Web Services managed policy.</p>
|
|
1187
1209
|
* @public
|
|
1188
1210
|
*/
|
|
1189
1211
|
export interface AttachedManagedPolicy {
|
|
@@ -1298,8 +1320,7 @@ export interface Tag {
|
|
|
1298
1320
|
*/
|
|
1299
1321
|
export interface CreateApplicationRequest {
|
|
1300
1322
|
/**
|
|
1301
|
-
* <p>The ARN of the instance of IAM Identity Center under which the operation will run.
|
|
1302
|
-
* For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1323
|
+
* <p>The ARN of the instance of IAM Identity Center under which the operation will run. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
1303
1324
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
1304
1325
|
* @public
|
|
1305
1326
|
*/
|
|
@@ -1366,12 +1387,12 @@ export interface CreateApplicationResponse {
|
|
|
1366
1387
|
*/
|
|
1367
1388
|
export interface CreateApplicationAssignmentRequest {
|
|
1368
1389
|
/**
|
|
1369
|
-
* <p>The ARN of the application
|
|
1390
|
+
* <p>The ARN of the application for which the assignment is created.</p>
|
|
1370
1391
|
* @public
|
|
1371
1392
|
*/
|
|
1372
1393
|
ApplicationArn: string | undefined;
|
|
1373
1394
|
/**
|
|
1374
|
-
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
1395
|
+
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
1375
1396
|
* @public
|
|
1376
1397
|
*/
|
|
1377
1398
|
PrincipalId: string | undefined;
|
|
@@ -1571,19 +1592,24 @@ export type JwksRetrievalOption = (typeof JwksRetrievalOption)[keyof typeof Jwks
|
|
|
1571
1592
|
*/
|
|
1572
1593
|
export interface OidcJwtConfiguration {
|
|
1573
1594
|
/**
|
|
1574
|
-
* <p>The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain
|
|
1595
|
+
* <p>The URL that IAM Identity Center uses for OpenID Discovery. OpenID Discovery is used to obtain
|
|
1596
|
+
* the information required to verify the tokens that the trusted token issuer generates.</p>
|
|
1575
1597
|
* @public
|
|
1576
1598
|
*/
|
|
1577
1599
|
IssuerUrl: string | undefined;
|
|
1578
1600
|
/**
|
|
1579
|
-
* <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
|
|
1580
|
-
*
|
|
1601
|
+
* <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
|
|
1602
|
+
* this JMESPath expression is compared against the attribute mapped by
|
|
1603
|
+
* <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for an
|
|
1604
|
+
* IAM Identity Center token.</p>
|
|
1581
1605
|
* @public
|
|
1582
1606
|
*/
|
|
1583
1607
|
ClaimAttributePath: string | undefined;
|
|
1584
1608
|
/**
|
|
1585
|
-
* <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
|
|
1586
|
-
*
|
|
1609
|
+
* <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
|
|
1610
|
+
* this JMESPath expression is compared against the attribute mapped by
|
|
1611
|
+
* <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for an IAM Identity Center
|
|
1612
|
+
* token. </p>
|
|
1587
1613
|
* @public
|
|
1588
1614
|
*/
|
|
1589
1615
|
IdentityStoreAttributePath: string | undefined;
|
|
@@ -1767,7 +1793,7 @@ export interface DeleteApplicationAssignmentRequest {
|
|
|
1767
1793
|
*/
|
|
1768
1794
|
ApplicationArn: string | undefined;
|
|
1769
1795
|
/**
|
|
1770
|
-
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
1796
|
+
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
1771
1797
|
* @public
|
|
1772
1798
|
*/
|
|
1773
1799
|
PrincipalId: string | undefined;
|
|
@@ -2013,14 +2039,13 @@ export interface DescribeApplicationResponse {
|
|
|
2013
2039
|
*/
|
|
2014
2040
|
export interface DescribeApplicationAssignmentRequest {
|
|
2015
2041
|
/**
|
|
2016
|
-
* <p>Specifies the ARN of the application.
|
|
2017
|
-
* For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
2042
|
+
* <p>Specifies the ARN of the application. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
2018
2043
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
2019
2044
|
* @public
|
|
2020
2045
|
*/
|
|
2021
2046
|
ApplicationArn: string | undefined;
|
|
2022
2047
|
/**
|
|
2023
|
-
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
2048
|
+
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
2024
2049
|
* @public
|
|
2025
2050
|
*/
|
|
2026
2051
|
PrincipalId: string | undefined;
|
|
@@ -2040,7 +2065,7 @@ export interface DescribeApplicationAssignmentResponse {
|
|
|
2040
2065
|
*/
|
|
2041
2066
|
PrincipalType?: PrincipalType | undefined;
|
|
2042
2067
|
/**
|
|
2043
|
-
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
2068
|
+
* <p>An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the <a href="https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html">IAM Identity Center Identity Store API Reference</a>.</p>
|
|
2044
2069
|
* @public
|
|
2045
2070
|
*/
|
|
2046
2071
|
PrincipalId?: string | undefined;
|
|
@@ -2389,8 +2414,9 @@ export interface GetApplicationAssignmentConfigurationRequest {
|
|
|
2389
2414
|
*/
|
|
2390
2415
|
export interface GetApplicationAssignmentConfigurationResponse {
|
|
2391
2416
|
/**
|
|
2392
|
-
* <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
|
|
2393
|
-
* <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
|
|
2417
|
+
* <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
|
|
2418
|
+
* have access to the application unless an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
|
|
2419
|
+
* access to the application. </p>
|
|
2394
2420
|
* @public
|
|
2395
2421
|
*/
|
|
2396
2422
|
AssignmentRequired: boolean | undefined;
|
|
@@ -2995,8 +3021,7 @@ export interface ListApplicationsFilter {
|
|
|
2995
3021
|
*/
|
|
2996
3022
|
export interface ListApplicationsRequest {
|
|
2997
3023
|
/**
|
|
2998
|
-
* <p>The ARN of the IAM Identity Center application under which the operation will run.
|
|
2999
|
-
* For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
3024
|
+
* <p>The ARN of the IAM Identity Center application under which the operation will run. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
|
|
3000
3025
|
* Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
|
|
3001
3026
|
* @public
|
|
3002
3027
|
*/
|
|
@@ -3427,14 +3452,18 @@ export interface ListTrustedTokenIssuersResponse {
|
|
|
3427
3452
|
*/
|
|
3428
3453
|
export interface OidcJwtUpdateConfiguration {
|
|
3429
3454
|
/**
|
|
3430
|
-
* <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
|
|
3431
|
-
*
|
|
3455
|
+
* <p>The path of the source attribute in the JWT from the trusted token issuer. The attribute mapped by
|
|
3456
|
+
* this JMESPath expression is compared against the attribute mapped by
|
|
3457
|
+
* <code>IdentityStoreAttributePath</code> when a trusted token issuer token is exchanged for an
|
|
3458
|
+
* IAM Identity Center token.</p>
|
|
3432
3459
|
* @public
|
|
3433
3460
|
*/
|
|
3434
3461
|
ClaimAttributePath?: string | undefined;
|
|
3435
3462
|
/**
|
|
3436
|
-
* <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
|
|
3437
|
-
*
|
|
3463
|
+
* <p>The path of the destination attribute in a JWT from IAM Identity Center. The attribute mapped by
|
|
3464
|
+
* this JMESPath expression is compared against the attribute mapped by
|
|
3465
|
+
* <code>ClaimAttributePath</code> when a trusted token issuer token is exchanged for an IAM Identity Center
|
|
3466
|
+
* token.</p>
|
|
3438
3467
|
* @public
|
|
3439
3468
|
*/
|
|
3440
3469
|
IdentityStoreAttributePath?: string | undefined;
|
|
@@ -3505,8 +3534,9 @@ export interface PutApplicationAssignmentConfigurationRequest {
|
|
|
3505
3534
|
*/
|
|
3506
3535
|
ApplicationArn: string | undefined;
|
|
3507
3536
|
/**
|
|
3508
|
-
* <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
|
|
3509
|
-
* <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
|
|
3537
|
+
* <p>If <code>AssignmentsRequired</code> is <code>true</code> (default value), users don’t
|
|
3538
|
+
* have access to the application unless an assignment is created using the <a href="https://docs.aws.amazon.com/singlesignon/latest/APIReference/API_CreateApplicationAssignment.html">CreateApplicationAssignment API</a>. If <code>false</code>, all users have
|
|
3539
|
+
* access to the application. </p>
|
|
3510
3540
|
* @public
|
|
3511
3541
|
*/
|
|
3512
3542
|
AssignmentRequired: boolean | undefined;
|
|
@@ -3624,7 +3654,8 @@ export interface UntagResourceRequest {
|
|
|
3624
3654
|
export interface UntagResourceResponse {
|
|
3625
3655
|
}
|
|
3626
3656
|
/**
|
|
3627
|
-
* <p>A structure that describes the options for the access portal associated with an
|
|
3657
|
+
* <p>A structure that describes the options for the access portal associated with an
|
|
3658
|
+
* application that can be updated.</p>
|
|
3628
3659
|
* @public
|
|
3629
3660
|
*/
|
|
3630
3661
|
export interface UpdateApplicationPortalOptions {
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-sso-admin",
|
|
3
3
|
"description": "AWS SDK for JavaScript Sso Admin Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.806.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "node ../../scripts/compilation/inline client-sso-admin",
|
|
@@ -20,39 +20,39 @@
|
|
|
20
20
|
"dependencies": {
|
|
21
21
|
"@aws-crypto/sha256-browser": "5.2.0",
|
|
22
22
|
"@aws-crypto/sha256-js": "5.2.0",
|
|
23
|
-
"@aws-sdk/core": "3.
|
|
24
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
23
|
+
"@aws-sdk/core": "3.806.0",
|
|
24
|
+
"@aws-sdk/credential-provider-node": "3.806.0",
|
|
25
25
|
"@aws-sdk/middleware-host-header": "3.804.0",
|
|
26
26
|
"@aws-sdk/middleware-logger": "3.804.0",
|
|
27
27
|
"@aws-sdk/middleware-recursion-detection": "3.804.0",
|
|
28
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
29
|
-
"@aws-sdk/region-config-resolver": "3.
|
|
28
|
+
"@aws-sdk/middleware-user-agent": "3.806.0",
|
|
29
|
+
"@aws-sdk/region-config-resolver": "3.806.0",
|
|
30
30
|
"@aws-sdk/types": "3.804.0",
|
|
31
|
-
"@aws-sdk/util-endpoints": "3.
|
|
31
|
+
"@aws-sdk/util-endpoints": "3.806.0",
|
|
32
32
|
"@aws-sdk/util-user-agent-browser": "3.804.0",
|
|
33
|
-
"@aws-sdk/util-user-agent-node": "3.
|
|
34
|
-
"@smithy/config-resolver": "^4.1.
|
|
33
|
+
"@aws-sdk/util-user-agent-node": "3.806.0",
|
|
34
|
+
"@smithy/config-resolver": "^4.1.1",
|
|
35
35
|
"@smithy/core": "^3.3.1",
|
|
36
36
|
"@smithy/fetch-http-handler": "^5.0.2",
|
|
37
37
|
"@smithy/hash-node": "^4.0.2",
|
|
38
38
|
"@smithy/invalid-dependency": "^4.0.2",
|
|
39
39
|
"@smithy/middleware-content-length": "^4.0.2",
|
|
40
|
-
"@smithy/middleware-endpoint": "^4.1.
|
|
41
|
-
"@smithy/middleware-retry": "^4.1.
|
|
40
|
+
"@smithy/middleware-endpoint": "^4.1.3",
|
|
41
|
+
"@smithy/middleware-retry": "^4.1.4",
|
|
42
42
|
"@smithy/middleware-serde": "^4.0.3",
|
|
43
43
|
"@smithy/middleware-stack": "^4.0.2",
|
|
44
|
-
"@smithy/node-config-provider": "^4.0
|
|
44
|
+
"@smithy/node-config-provider": "^4.1.0",
|
|
45
45
|
"@smithy/node-http-handler": "^4.0.4",
|
|
46
46
|
"@smithy/protocol-http": "^5.1.0",
|
|
47
|
-
"@smithy/smithy-client": "^4.2.
|
|
47
|
+
"@smithy/smithy-client": "^4.2.3",
|
|
48
48
|
"@smithy/types": "^4.2.0",
|
|
49
49
|
"@smithy/url-parser": "^4.0.2",
|
|
50
50
|
"@smithy/util-base64": "^4.0.0",
|
|
51
51
|
"@smithy/util-body-length-browser": "^4.0.0",
|
|
52
52
|
"@smithy/util-body-length-node": "^4.0.0",
|
|
53
|
-
"@smithy/util-defaults-mode-browser": "^4.0.
|
|
54
|
-
"@smithy/util-defaults-mode-node": "^4.0.
|
|
55
|
-
"@smithy/util-endpoints": "^3.0.
|
|
53
|
+
"@smithy/util-defaults-mode-browser": "^4.0.11",
|
|
54
|
+
"@smithy/util-defaults-mode-node": "^4.0.11",
|
|
55
|
+
"@smithy/util-endpoints": "^3.0.3",
|
|
56
56
|
"@smithy/util-middleware": "^4.0.2",
|
|
57
57
|
"@smithy/util-retry": "^4.0.3",
|
|
58
58
|
"@smithy/util-utf8": "^4.0.0",
|