@aws-sdk/client-verifiedpermissions 3.590.0 → 3.593.0

package/dist-es/models/models_0.js

@@ -80,27 +80,63 @@ export class ValidationException extends __BaseException {
         this.fieldList = opts.fieldList;
     }
 }
+export var OpenIdConnectTokenSelection;
+(function (OpenIdConnectTokenSelection) {
+    OpenIdConnectTokenSelection.visit = (value, visitor) => {
+        if (value.accessTokenOnly !== undefined)
+            return visitor.accessTokenOnly(value.accessTokenOnly);
+        if (value.identityTokenOnly !== undefined)
+            return visitor.identityTokenOnly(value.identityTokenOnly);
+        return visitor._(value.$unknown[0], value.$unknown[1]);
+    };
+})(OpenIdConnectTokenSelection || (OpenIdConnectTokenSelection = {}));
 export var Configuration;
 (function (Configuration) {
     Configuration.visit = (value, visitor) => {
         if (value.cognitoUserPoolConfiguration !== undefined)
             return visitor.cognitoUserPoolConfiguration(value.cognitoUserPoolConfiguration);
+        if (value.openIdConnectConfiguration !== undefined)
+            return visitor.openIdConnectConfiguration(value.openIdConnectConfiguration);
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(Configuration || (Configuration = {}));
+export var OpenIdConnectTokenSelectionDetail;
+(function (OpenIdConnectTokenSelectionDetail) {
+    OpenIdConnectTokenSelectionDetail.visit = (value, visitor) => {
+        if (value.accessTokenOnly !== undefined)
+            return visitor.accessTokenOnly(value.accessTokenOnly);
+        if (value.identityTokenOnly !== undefined)
+            return visitor.identityTokenOnly(value.identityTokenOnly);
+        return visitor._(value.$unknown[0], value.$unknown[1]);
+    };
+})(OpenIdConnectTokenSelectionDetail || (OpenIdConnectTokenSelectionDetail = {}));
 export var ConfigurationDetail;
 (function (ConfigurationDetail) {
     ConfigurationDetail.visit = (value, visitor) => {
         if (value.cognitoUserPoolConfiguration !== undefined)
             return visitor.cognitoUserPoolConfiguration(value.cognitoUserPoolConfiguration);
+        if (value.openIdConnectConfiguration !== undefined)
+            return visitor.openIdConnectConfiguration(value.openIdConnectConfiguration);
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(ConfigurationDetail || (ConfigurationDetail = {}));
+export var OpenIdConnectTokenSelectionItem;
+(function (OpenIdConnectTokenSelectionItem) {
+    OpenIdConnectTokenSelectionItem.visit = (value, visitor) => {
+        if (value.accessTokenOnly !== undefined)
+            return visitor.accessTokenOnly(value.accessTokenOnly);
+        if (value.identityTokenOnly !== undefined)
+            return visitor.identityTokenOnly(value.identityTokenOnly);
+        return visitor._(value.$unknown[0], value.$unknown[1]);
+    };
+})(OpenIdConnectTokenSelectionItem || (OpenIdConnectTokenSelectionItem = {}));
 export var ConfigurationItem;
 (function (ConfigurationItem) {
     ConfigurationItem.visit = (value, visitor) => {
         if (value.cognitoUserPoolConfiguration !== undefined)
             return visitor.cognitoUserPoolConfiguration(value.cognitoUserPoolConfiguration);
+        if (value.openIdConnectConfiguration !== undefined)
+            return visitor.openIdConnectConfiguration(value.openIdConnectConfiguration);
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(ConfigurationItem || (ConfigurationItem = {}));
@@ -178,11 +214,23 @@ export var PolicyDefinitionDetail;
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(PolicyDefinitionDetail || (PolicyDefinitionDetail = {}));
+export var UpdateOpenIdConnectTokenSelection;
+(function (UpdateOpenIdConnectTokenSelection) {
+    UpdateOpenIdConnectTokenSelection.visit = (value, visitor) => {
+        if (value.accessTokenOnly !== undefined)
+            return visitor.accessTokenOnly(value.accessTokenOnly);
+        if (value.identityTokenOnly !== undefined)
+            return visitor.identityTokenOnly(value.identityTokenOnly);
+        return visitor._(value.$unknown[0], value.$unknown[1]);
+    };
+})(UpdateOpenIdConnectTokenSelection || (UpdateOpenIdConnectTokenSelection = {}));
 export var UpdateConfiguration;
 (function (UpdateConfiguration) {
     UpdateConfiguration.visit = (value, visitor) => {
         if (value.cognitoUserPoolConfiguration !== undefined)
             return visitor.cognitoUserPoolConfiguration(value.cognitoUserPoolConfiguration);
+        if (value.openIdConnectConfiguration !== undefined)
+            return visitor.openIdConnectConfiguration(value.openIdConnectConfiguration);
         return visitor._(value.$unknown[0], value.$unknown[1]);
     };
 })(UpdateConfiguration || (UpdateConfiguration = {}));
@@ -292,27 +340,131 @@ export const CognitoUserPoolConfigurationItemFilterSensitiveLog = (obj) => ({
         groupConfiguration: CognitoGroupConfigurationItemFilterSensitiveLog(obj.groupConfiguration),
     }),
 });
+export const OpenIdConnectGroupConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.groupClaim && { groupClaim: SENSITIVE_STRING }),
+    ...(obj.groupEntityType && { groupEntityType: SENSITIVE_STRING }),
+});
+export const OpenIdConnectAccessTokenConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+});
+export const OpenIdConnectIdentityTokenConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+    ...(obj.clientIds && { clientIds: SENSITIVE_STRING }),
+});
+export const OpenIdConnectTokenSelectionFilterSensitiveLog = (obj) => {
+    if (obj.accessTokenOnly !== undefined)
+        return { accessTokenOnly: OpenIdConnectAccessTokenConfigurationFilterSensitiveLog(obj.accessTokenOnly) };
+    if (obj.identityTokenOnly !== undefined)
+        return { identityTokenOnly: OpenIdConnectIdentityTokenConfigurationFilterSensitiveLog(obj.identityTokenOnly) };
+    if (obj.$unknown !== undefined)
+        return { [obj.$unknown[0]]: "UNKNOWN" };
+};
+export const OpenIdConnectConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.entityIdPrefix && { entityIdPrefix: SENSITIVE_STRING }),
+    ...(obj.groupConfiguration && {
+        groupConfiguration: OpenIdConnectGroupConfigurationFilterSensitiveLog(obj.groupConfiguration),
+    }),
+    ...(obj.tokenSelection && { tokenSelection: OpenIdConnectTokenSelectionFilterSensitiveLog(obj.tokenSelection) }),
+});
 export const ConfigurationFilterSensitiveLog = (obj) => {
     if (obj.cognitoUserPoolConfiguration !== undefined)
         return {
             cognitoUserPoolConfiguration: CognitoUserPoolConfigurationFilterSensitiveLog(obj.cognitoUserPoolConfiguration),
         };
+    if (obj.openIdConnectConfiguration !== undefined)
+        return { openIdConnectConfiguration: OpenIdConnectConfigurationFilterSensitiveLog(obj.openIdConnectConfiguration) };
+    if (obj.$unknown !== undefined)
+        return { [obj.$unknown[0]]: "UNKNOWN" };
+};
+export const OpenIdConnectGroupConfigurationDetailFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.groupClaim && { groupClaim: SENSITIVE_STRING }),
+    ...(obj.groupEntityType && { groupEntityType: SENSITIVE_STRING }),
+});
+export const OpenIdConnectAccessTokenConfigurationDetailFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+});
+export const OpenIdConnectIdentityTokenConfigurationDetailFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+    ...(obj.clientIds && { clientIds: SENSITIVE_STRING }),
+});
+export const OpenIdConnectTokenSelectionDetailFilterSensitiveLog = (obj) => {
+    if (obj.accessTokenOnly !== undefined)
+        return { accessTokenOnly: OpenIdConnectAccessTokenConfigurationDetailFilterSensitiveLog(obj.accessTokenOnly) };
+    if (obj.identityTokenOnly !== undefined)
+        return {
+            identityTokenOnly: OpenIdConnectIdentityTokenConfigurationDetailFilterSensitiveLog(obj.identityTokenOnly),
+        };
     if (obj.$unknown !== undefined)
         return { [obj.$unknown[0]]: "UNKNOWN" };
 };
+export const OpenIdConnectConfigurationDetailFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.entityIdPrefix && { entityIdPrefix: SENSITIVE_STRING }),
+    ...(obj.groupConfiguration && {
+        groupConfiguration: OpenIdConnectGroupConfigurationDetailFilterSensitiveLog(obj.groupConfiguration),
+    }),
+    ...(obj.tokenSelection && {
+        tokenSelection: OpenIdConnectTokenSelectionDetailFilterSensitiveLog(obj.tokenSelection),
+    }),
+});
 export const ConfigurationDetailFilterSensitiveLog = (obj) => {
     if (obj.cognitoUserPoolConfiguration !== undefined)
         return {
             cognitoUserPoolConfiguration: CognitoUserPoolConfigurationDetailFilterSensitiveLog(obj.cognitoUserPoolConfiguration),
         };
+    if (obj.openIdConnectConfiguration !== undefined)
+        return {
+            openIdConnectConfiguration: OpenIdConnectConfigurationDetailFilterSensitiveLog(obj.openIdConnectConfiguration),
+        };
     if (obj.$unknown !== undefined)
         return { [obj.$unknown[0]]: "UNKNOWN" };
 };
+export const OpenIdConnectGroupConfigurationItemFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.groupClaim && { groupClaim: SENSITIVE_STRING }),
+    ...(obj.groupEntityType && { groupEntityType: SENSITIVE_STRING }),
+});
+export const OpenIdConnectAccessTokenConfigurationItemFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+});
+export const OpenIdConnectIdentityTokenConfigurationItemFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+    ...(obj.clientIds && { clientIds: SENSITIVE_STRING }),
+});
+export const OpenIdConnectTokenSelectionItemFilterSensitiveLog = (obj) => {
+    if (obj.accessTokenOnly !== undefined)
+        return { accessTokenOnly: OpenIdConnectAccessTokenConfigurationItemFilterSensitiveLog(obj.accessTokenOnly) };
+    if (obj.identityTokenOnly !== undefined)
+        return { identityTokenOnly: OpenIdConnectIdentityTokenConfigurationItemFilterSensitiveLog(obj.identityTokenOnly) };
+    if (obj.$unknown !== undefined)
+        return { [obj.$unknown[0]]: "UNKNOWN" };
+};
+export const OpenIdConnectConfigurationItemFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.entityIdPrefix && { entityIdPrefix: SENSITIVE_STRING }),
+    ...(obj.groupConfiguration && {
+        groupConfiguration: OpenIdConnectGroupConfigurationItemFilterSensitiveLog(obj.groupConfiguration),
+    }),
+    ...(obj.tokenSelection && { tokenSelection: OpenIdConnectTokenSelectionItemFilterSensitiveLog(obj.tokenSelection) }),
+});
 export const ConfigurationItemFilterSensitiveLog = (obj) => {
     if (obj.cognitoUserPoolConfiguration !== undefined)
         return {
             cognitoUserPoolConfiguration: CognitoUserPoolConfigurationItemFilterSensitiveLog(obj.cognitoUserPoolConfiguration),
         };
+    if (obj.openIdConnectConfiguration !== undefined)
+        return {
+            openIdConnectConfiguration: OpenIdConnectConfigurationItemFilterSensitiveLog(obj.openIdConnectConfiguration),
+        };
     if (obj.$unknown !== undefined)
         return { [obj.$unknown[0]]: "UNKNOWN" };
 };
@@ -450,11 +602,49 @@ export const UpdateCognitoUserPoolConfigurationFilterSensitiveLog = (obj) => ({
         groupConfiguration: UpdateCognitoGroupConfigurationFilterSensitiveLog(obj.groupConfiguration),
     }),
 });
+export const UpdateOpenIdConnectGroupConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.groupClaim && { groupClaim: SENSITIVE_STRING }),
+    ...(obj.groupEntityType && { groupEntityType: SENSITIVE_STRING }),
+});
+export const UpdateOpenIdConnectAccessTokenConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+});
+export const UpdateOpenIdConnectIdentityTokenConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.principalIdClaim && { principalIdClaim: SENSITIVE_STRING }),
+    ...(obj.clientIds && { clientIds: SENSITIVE_STRING }),
+});
+export const UpdateOpenIdConnectTokenSelectionFilterSensitiveLog = (obj) => {
+    if (obj.accessTokenOnly !== undefined)
+        return { accessTokenOnly: UpdateOpenIdConnectAccessTokenConfigurationFilterSensitiveLog(obj.accessTokenOnly) };
+    if (obj.identityTokenOnly !== undefined)
+        return {
+            identityTokenOnly: UpdateOpenIdConnectIdentityTokenConfigurationFilterSensitiveLog(obj.identityTokenOnly),
+        };
+    if (obj.$unknown !== undefined)
+        return { [obj.$unknown[0]]: "UNKNOWN" };
+};
+export const UpdateOpenIdConnectConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.entityIdPrefix && { entityIdPrefix: SENSITIVE_STRING }),
+    ...(obj.groupConfiguration && {
+        groupConfiguration: UpdateOpenIdConnectGroupConfigurationFilterSensitiveLog(obj.groupConfiguration),
+    }),
+    ...(obj.tokenSelection && {
+        tokenSelection: UpdateOpenIdConnectTokenSelectionFilterSensitiveLog(obj.tokenSelection),
+    }),
+});
 export const UpdateConfigurationFilterSensitiveLog = (obj) => {
     if (obj.cognitoUserPoolConfiguration !== undefined)
         return {
             cognitoUserPoolConfiguration: UpdateCognitoUserPoolConfigurationFilterSensitiveLog(obj.cognitoUserPoolConfiguration),
         };
+    if (obj.openIdConnectConfiguration !== undefined)
+        return {
+            openIdConnectConfiguration: UpdateOpenIdConnectConfigurationFilterSensitiveLog(obj.openIdConnectConfiguration),
+        };
     if (obj.$unknown !== undefined)
         return { [obj.$unknown[0]]: "UNKNOWN" };
 };
@@ -593,9 +783,7 @@ export const AttributeValueFilterSensitiveLog = (obj) => {
 };
 export const ContextDefinitionFilterSensitiveLog = (obj) => {
     if (obj.contextMap !== undefined)
-        return {
-            contextMap: Object.entries(obj.contextMap).reduce((acc, [key, value]) => ((acc[key] = AttributeValueFilterSensitiveLog(value)), acc), {}),
-        };
+        return { contextMap: SENSITIVE_STRING };
     if (obj.$unknown !== undefined)
         return { [obj.$unknown[0]]: "UNKNOWN" };
 };

package/dist-types/commands/BatchIsAuthorizedCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/BatchIsAuthorizedWithTokenCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/CreateIdentitySourceCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *
@@ -26,31 +27,36 @@ declare const CreateIdentitySourceCommand_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Creates a reference to an Amazon Cognito user pool as an external identity provider (IdP).
+ * <p>Adds an identity source to a policy store–an Amazon Cognito user pool or OpenID Connect
+ *             (OIDC) identity provider (IdP).
  *             </p>
  *          <p>After you create an identity source, you can use the identities provided by the IdP as proxies
- *             for the principal in authorization queries that use the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a>
- *             operation. These identities take the form of tokens that contain claims about the user,
- *             such as IDs, attributes and group memberships. Amazon Cognito provides both identity tokens and
- *             access tokens, and Verified Permissions can use either or both. Any combination of identity and access
- *             tokens results in the same Cedar principal. Verified Permissions automatically translates the
- *             information about the identities into the standard Cedar attributes that can be
- *             evaluated by your policies. Because the Amazon Cognito identity and access tokens can contain
- *             different information, the tokens you choose to use determine which principal attributes
- *             are available to access when evaluating Cedar policies.</p>
+ *             for the principal in authorization queries that use the <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_IsAuthorizedWithToken.html">IsAuthorizedWithToken</a> or
+ *                 <a href="https://docs.aws.amazon.com/verifiedpermissions/latest/apireference/API_BatchIsAuthorizedWithToken.html">BatchIsAuthorizedWithToken</a> API operations. These identities take the form
+ *             of tokens that contain claims about the user, such as IDs, attributes and group
+ *             memberships. Identity sources provide identity (ID) tokens and access tokens. Verified Permissions
+ *             derives information about your user and session from token claims. Access tokens provide
+ *             action <code>context</code> to your policies, and ID tokens provide principal
+ *             <code>Attributes</code>.</p>
  *          <important>
- *             <p>If you delete a Amazon Cognito user pool or user, tokens from that deleted pool or that deleted user continue to be usable until they expire.</p>
+ *             <p>Tokens from an identity source user continue to be usable until they expire.
+ *     Token revocation and resource deletion have no effect on the validity of a token in your policy store</p>
  *          </important>
  *          <note>
- *             <p>To reference a user from this identity source in your Cedar policies, use the following
- *                 syntax.</p>
- *             <p>
- *                <i>IdentityType::"&lt;CognitoUserPoolIdentifier&gt;|&lt;CognitoClientId&gt;</i>
- *             </p>
- *             <p>Where <code>IdentityType</code> is the string that you provide to the
- *                     <code>PrincipalEntityType</code> parameter for this operation. The
- *                     <code>CognitoUserPoolId</code> and <code>CognitoClientId</code> are defined by
- *                 the Amazon Cognito user pool.</p>
+ *             <p>To reference a user from this identity source in your Cedar policies, refer to the
+ *                 following syntax examples.</p>
+ *             <ul>
+ *                <li>
+ *                   <p>Amazon Cognito user pool: <code>Namespace::[Entity type]::[User pool ID]|[user
+ *                             principal attribute]</code>, for example
+ *                             <code>MyCorp::User::us-east-1_EXAMPLE|a1b2c3d4-5678-90ab-cdef-EXAMPLE11111</code>.</p>
+ *                </li>
+ *                <li>
+ *                   <p>OpenID Connect (OIDC) provider: <code>Namespace::[Entity
+ *                             type]::[principalIdClaim]|[user principal attribute]</code>, for example
+ *                             <code>MyCorp::User::MyOIDCProvider|a1b2c3d4-5678-90ab-cdef-EXAMPLE22222</code>.</p>
+ *                </li>
+ *             </ul>
  *          </note>
  *          <note>
  *             <p>Verified Permissions is <i>
@@ -77,6 +83,28 @@ declare const CreateIdentitySourceCommand_base: {
  *         groupEntityType: "STRING_VALUE", // required
  *       },
  *     },
+ *     openIdConnectConfiguration: { // OpenIdConnectConfiguration
+ *       issuer: "STRING_VALUE", // required
+ *       entityIdPrefix: "STRING_VALUE",
+ *       groupConfiguration: { // OpenIdConnectGroupConfiguration
+ *         groupClaim: "STRING_VALUE", // required
+ *         groupEntityType: "STRING_VALUE", // required
+ *       },
+ *       tokenSelection: { // OpenIdConnectTokenSelection Union: only one key present
+ *         accessTokenOnly: { // OpenIdConnectAccessTokenConfiguration
+ *           principalIdClaim: "STRING_VALUE",
+ *           audiences: [ // Audiences
+ *             "STRING_VALUE",
+ *           ],
+ *         },
+ *         identityTokenOnly: { // OpenIdConnectIdentityTokenConfiguration
+ *           principalIdClaim: "STRING_VALUE",
+ *           clientIds: [
+ *             "STRING_VALUE",
+ *           ],
+ *         },
+ *       },
+ *     },
  *   },
  *   principalEntityType: "STRING_VALUE",
  * };

package/dist-types/commands/CreatePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/CreatePolicyStoreCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/CreatePolicyTemplateCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeleteIdentitySourceCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeletePolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeletePolicyStoreCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/DeletePolicyTemplateCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetIdentitySourceCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *
@@ -64,6 +65,26 @@ declare const GetIdentitySourceCommand_base: {
  * //         groupEntityType: "STRING_VALUE",
  * //       },
  * //     },
+ * //     openIdConnectConfiguration: { // OpenIdConnectConfigurationDetail
+ * //       issuer: "STRING_VALUE", // required
+ * //       entityIdPrefix: "STRING_VALUE",
+ * //       groupConfiguration: { // OpenIdConnectGroupConfigurationDetail
+ * //         groupClaim: "STRING_VALUE", // required
+ * //         groupEntityType: "STRING_VALUE", // required
+ * //       },
+ * //       tokenSelection: { // OpenIdConnectTokenSelectionDetail Union: only one key present
+ * //         accessTokenOnly: { // OpenIdConnectAccessTokenConfigurationDetail
+ * //           principalIdClaim: "STRING_VALUE",
+ * //           audiences: [ // Audiences
+ * //             "STRING_VALUE",
+ * //           ],
+ * //         },
+ * //         identityTokenOnly: { // OpenIdConnectIdentityTokenConfigurationDetail
+ * //           principalIdClaim: "STRING_VALUE",
+ * //           clientIds: "<ClientIds>",
+ * //         },
+ * //       },
+ * //     },
  * //   },
  * // };
  *

package/dist-types/commands/GetPolicyCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetPolicyStoreCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetPolicyTemplateCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/GetSchemaCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/IsAuthorizedCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/IsAuthorizedWithTokenCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *
@@ -38,7 +39,8 @@ declare const IsAuthorizedWithTokenCommand_base: {
  *          <p>Verified Permissions validates each token that is specified in a request by checking its expiration
  *             date and its signature.</p>
  *          <important>
- *             <p>If you delete a Amazon Cognito user pool or user, tokens from that deleted pool or that deleted user continue to be usable until they expire.</p>
+ *             <p>Tokens from an identity source user continue to be usable until they expire.
+ *     Token revocation and resource deletion have no effect on the validity of a token in your policy store</p>
  *          </important>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/ListIdentitySourcesCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *
@@ -73,6 +74,26 @@ declare const ListIdentitySourcesCommand_base: {
  * //             groupEntityType: "STRING_VALUE",
  * //           },
  * //         },
+ * //         openIdConnectConfiguration: { // OpenIdConnectConfigurationItem
+ * //           issuer: "STRING_VALUE", // required
+ * //           entityIdPrefix: "STRING_VALUE",
+ * //           groupConfiguration: { // OpenIdConnectGroupConfigurationItem
+ * //             groupClaim: "STRING_VALUE", // required
+ * //             groupEntityType: "STRING_VALUE", // required
+ * //           },
+ * //           tokenSelection: { // OpenIdConnectTokenSelectionItem Union: only one key present
+ * //             accessTokenOnly: { // OpenIdConnectAccessTokenConfigurationItem
+ * //               principalIdClaim: "STRING_VALUE",
+ * //               audiences: [ // Audiences
+ * //                 "STRING_VALUE",
+ * //               ],
+ * //             },
+ * //             identityTokenOnly: { // OpenIdConnectIdentityTokenConfigurationItem
+ * //               principalIdClaim: "STRING_VALUE",
+ * //               clientIds: "<ClientIds>",
+ * //             },
+ * //           },
+ * //         },
  * //       },
  * //     },
  * //   ],

package/dist-types/commands/ListPoliciesCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *

package/dist-types/commands/ListPolicyStoresCommand.d.ts

@@ -5,7 +5,8 @@ import { ServiceInputTypes, ServiceOutputTypes, VerifiedPermissionsClientResolve
 /**
  * @public
  */
-export { __MetadataBearer, $Command };
+export type { __MetadataBearer };
+export { $Command };
 /**
  * @public
  *