@aws-sdk/client-workmail 3.183.0 → 3.185.0

package/dist-types/models/models_0.d.ts

@@ -5,7 +5,7 @@ export declare enum AccessControlRuleEffect {
     DENY = "DENY"
 }
 /**
- * <p>A rule that controls access to an Amazon WorkMail organization.</p>
+ * <p>A rule that controls access to an WorkMail organization.</p>
  */
 export interface AccessControlRule {
     /**
@@ -56,6 +56,18 @@ export interface AccessControlRule {
      * <p>The date that the rule was modified.</p>
      */
     DateModified?: Date;
+    /**
+     * <p>Impersonation role IDs to include in the rule.</p>
+     */
+    ImpersonationRoleIds?: string[];
+    /**
+     * <p>Impersonation role IDs to exclude from the rule.</p>
+     */
+    NotImpersonationRoleIds?: string[];
+}
+export declare enum AccessEffect {
+    ALLOW = "ALLOW",
+    DENY = "DENY"
 }
 export interface AssociateDelegateToResourceRequest {
     /**
@@ -189,6 +201,38 @@ export declare class UnsupportedOperationException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<UnsupportedOperationException, __BaseException>);
 }
+export interface AssumeImpersonationRoleRequest {
+    /**
+     * <p>The WorkMail organization under which the impersonation role will be assumed.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The impersonation role ID to assume.</p>
+     */
+    ImpersonationRoleId: string | undefined;
+}
+export interface AssumeImpersonationRoleResponse {
+    /**
+     * <p>The authentication token for the impersonation role.</p>
+     */
+    Token?: string;
+    /**
+     * <p>The authentication token's validity, in seconds.</p>
+     */
+    ExpiresIn?: number;
+}
+/**
+ * <p>The resource cannot be found.</p>
+ */
+export declare class ResourceNotFoundException extends __BaseException {
+    readonly name: "ResourceNotFoundException";
+    readonly $fault: "client";
+    Message?: string;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
+}
 /**
  * <p>Describes an EWS based availability provider when returned from the service. It does not
  *          contain the password of the endpoint.</p>
@@ -231,7 +275,7 @@ export interface AvailabilityConfiguration {
     ProviderType?: AvailabilityProviderType | string;
     /**
      * <p>If <code>ProviderType</code> is <code>EWS</code>, then this field contains
-     *             <code>RedactedEwsAvailabilityProvider</code>. Otherwise, it is not requried.</p>
+     *             <code>RedactedEwsAvailabilityProvider</code>. Otherwise, it is not required.</p>
      */
     EwsProvider?: RedactedEwsAvailabilityProvider;
     /**
@@ -372,7 +416,7 @@ export interface CreateAvailabilityConfigurationRequest {
      */
     ClientToken?: string;
     /**
-     * <p>The Amazon WorkMail organization for which the <code>AvailabilityConfiguration</code> will be created.</p>
+     * <p>The WorkMail organization for which the <code>AvailabilityConfiguration</code> will be created.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -391,7 +435,7 @@ export interface CreateAvailabilityConfigurationRequest {
 export interface CreateAvailabilityConfigurationResponse {
 }
 /**
- * <p>The user, group, or resource name isn't unique in Amazon WorkMail.</p>
+ * <p>The user, group, or resource name isn't unique in WorkMail.</p>
  */
 export declare class NameAvailabilityException extends __BaseException {
     readonly name: "NameAvailabilityException";
@@ -419,7 +463,7 @@ export interface CreateGroupResponse {
     GroupId?: string;
 }
 /**
- * <p>This user, group, or resource name is not allowed in Amazon WorkMail.</p>
+ * <p>This user, group, or resource name is not allowed in WorkMail.</p>
  */
 export declare class ReservedNameException extends __BaseException {
     readonly name: "ReservedNameException";
@@ -430,13 +474,80 @@ export declare class ReservedNameException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ReservedNameException, __BaseException>);
 }
+/**
+ * <p>The rules for the given impersonation role.</p>
+ */
+export interface ImpersonationRule {
+    /**
+     * <p>The identifier of the rule.</p>
+     */
+    ImpersonationRuleId: string | undefined;
+    /**
+     * <p>The rule name.</p>
+     */
+    Name?: string;
+    /**
+     * <p>The rule description.</p>
+     */
+    Description?: string;
+    /**
+     * <p>The effect of the rule when it matches the input. Allowed effect values are
+     *             <code>ALLOW</code> or <code>DENY</code>.</p>
+     */
+    Effect: AccessEffect | string | undefined;
+    /**
+     * <p>A list of user IDs that match the rule.</p>
+     */
+    TargetUsers?: string[];
+    /**
+     * <p>A list of user IDs that don't match the rule.</p>
+     */
+    NotTargetUsers?: string[];
+}
+export declare enum ImpersonationRoleType {
+    FULL_ACCESS = "FULL_ACCESS",
+    READ_ONLY = "READ_ONLY"
+}
+export interface CreateImpersonationRoleRequest {
+    /**
+     * <p>The idempotency token for the client request.</p>
+     */
+    ClientToken?: string;
+    /**
+     * <p>The WorkMail organization to create the new impersonation role within.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The name of the new impersonation role.</p>
+     */
+    Name: string | undefined;
+    /**
+     * <p>The impersonation role's type. The available impersonation role types are
+     *             <code>READ_ONLY</code> or <code>FULL_ACCESS</code>.</p>
+     */
+    Type: ImpersonationRoleType | string | undefined;
+    /**
+     * <p>The description of the new impersonation role.</p>
+     */
+    Description?: string;
+    /**
+     * <p>The list of rules for the impersonation role.</p>
+     */
+    Rules: ImpersonationRule[] | undefined;
+}
+export interface CreateImpersonationRoleResponse {
+    /**
+     * <p>The new impersonation role ID.</p>
+     */
+    ImpersonationRoleId?: string;
+}
 export declare enum MobileDeviceAccessRuleEffect {
     ALLOW = "ALLOW",
     DENY = "DENY"
 }
 export interface CreateMobileDeviceAccessRuleRequest {
     /**
-     * <p>The Amazon WorkMail organization under which the rule will be created.</p>
+     * <p>The WorkMail organization under which the rule will be created.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -495,8 +606,8 @@ export interface CreateMobileDeviceAccessRuleResponse {
     MobileDeviceAccessRuleId?: string;
 }
 /**
- * <p>The domain to associate with an Amazon WorkMail organization.</p>
- *          <p>When you configure a domain hosted in Amazon Route 53 (Route 53), all recommended DNS records are added to the organization when you create it. For more information, see <a href="https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html">Adding a domain</a> in the <i>Amazon WorkMail Administrator Guide</i>.</p>
+ * <p>The domain to associate with an WorkMail organization.</p>
+ *          <p>When you configure a domain hosted in Amazon Route 53 (Route 53), all recommended DNS records are added to the organization when you create it. For more information, see <a href="https://docs.aws.amazon.com/workmail/latest/adminguide/add_domain.html">Adding a domain</a> in the <i>WorkMail Administrator Guide</i>.</p>
  */
 export interface Domain {
     /**
@@ -526,12 +637,13 @@ export interface CreateOrganizationRequest {
      */
     Domains?: Domain[];
     /**
-     * <p>The Amazon Resource Name (ARN) of a customer managed master key from AWS
-     *          KMS.</p>
+     * <p>The Amazon Resource Name (ARN) of a customer managed key from AWS KMS.</p>
      */
     KmsKeyArn?: string;
     /**
-     * <p>When <code>true</code>, allows organization interoperability between Amazon WorkMail and Microsoft Exchange. Can only be set to <code>true</code> if an AD Connector directory ID is included in the request.</p>
+     * <p>When <code>true</code>, allows organization interoperability between WorkMail and
+     *          Microsoft Exchange. If <code>true</code>, you must include a AD Connector directory ID in
+     *          the request.</p>
      */
     EnableInteroperability?: boolean;
 }
@@ -666,7 +778,7 @@ export interface DeleteAliasResponse {
 }
 export interface DeleteAvailabilityConfigurationRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the <code>AvailabilityConfiguration</code> will be deleted.</p>
+     * <p>The WorkMail organization for which the <code>AvailabilityConfiguration</code> will be deleted.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -696,6 +808,18 @@ export interface DeleteGroupRequest {
 }
 export interface DeleteGroupResponse {
 }
+export interface DeleteImpersonationRoleRequest {
+    /**
+     * <p>The WorkMail organization from which to delete the impersonation role.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The ID of the impersonation role to delete.</p>
+     */
+    ImpersonationRoleId: string | undefined;
+}
+export interface DeleteImpersonationRoleResponse {
+}
 export interface DeleteMailboxPermissionsRequest {
     /**
      * <p>The identifier of the organization under which the member (user or group)
@@ -716,7 +840,7 @@ export interface DeleteMailboxPermissionsResponse {
 }
 export interface DeleteMobileDeviceAccessOverrideRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the access override will be deleted.</p>
+     * <p>The WorkMail organization for which the access override will be deleted.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -746,7 +870,7 @@ export interface DeleteMobileDeviceAccessOverrideResponse {
 }
 export interface DeleteMobileDeviceAccessRuleRequest {
     /**
-     * <p>The Amazon WorkMail organization under which the rule will be deleted.</p>
+     * <p>The WorkMail organization under which the rule will be deleted.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -819,7 +943,7 @@ export interface DeleteUserResponse {
 }
 export interface DeregisterFromWorkMailRequest {
     /**
-     * <p>The identifier for the organization under which the Amazon WorkMail entity exists.</p>
+     * <p>The identifier for the organization under which the WorkMail entity exists.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -831,18 +955,18 @@ export interface DeregisterFromWorkMailResponse {
 }
 export interface DeregisterMailDomainRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the domain will be deregistered.</p>
+     * <p>The WorkMail organization for which the domain will be deregistered.</p>
      */
     OrganizationId: string | undefined;
     /**
-     * <p>The domain to deregister in WorkMail and SES. </p>
+     * <p>The domain to deregister in WorkMail and SES.</p>
      */
     DomainName: string | undefined;
 }
 export interface DeregisterMailDomainResponse {
 }
 /**
- * <p>You SES configuration has customizations that Amazon WorkMail cannot save. The error message lists the invalid setting. For examples of invalid settings, refer to
+ * <p>You SES configuration has customizations that WorkMail cannot save. The error message lists the invalid setting. For examples of invalid settings, refer to
  *          <a href="https://docs.aws.amazon.com/ses/latest/APIReference/API_CreateReceiptRule.html">CreateReceiptRule</a>.</p>
  */
 export declare class InvalidCustomSesConfigurationException extends __BaseException {
@@ -882,18 +1006,6 @@ export interface DescribeEmailMonitoringConfigurationResponse {
      */
     LogGroupArn?: string;
 }
-/**
- * <p>The resource cannot be found.</p>
- */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
-    Message?: string;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
-}
 export interface DescribeGroupRequest {
     /**
      * <p>The identifier for the organization under which the group exists.</p>
@@ -923,7 +1035,7 @@ export interface DescribeGroupResponse {
      */
     Email?: string;
     /**
-     * <p>The state of the user: enabled (registered to Amazon WorkMail) or disabled (deregistered or
+     * <p>The state of the user: enabled (registered to WorkMail) or disabled (deregistered or
      *          never registered to WorkMail).</p>
      */
     State?: EntityState | string;
@@ -1039,7 +1151,7 @@ export interface DescribeOrganizationResponse {
      */
     State?: string;
     /**
-     * <p>The identifier for the directory associated with an Amazon WorkMail organization.</p>
+     * <p>The identifier for the directory associated with an WorkMail organization.</p>
      */
     DirectoryId?: string;
     /**
@@ -1098,7 +1210,7 @@ export interface DescribeResourceResponse {
      */
     BookingOptions?: BookingOptions;
     /**
-     * <p>The state of the resource: enabled (registered to Amazon WorkMail), disabled (deregistered
+     * <p>The state of the resource: enabled (registered to WorkMail), disabled (deregistered
      *          or never registered to WorkMail), or deleted.</p>
      */
     State?: EntityState | string;
@@ -1146,25 +1258,25 @@ export interface DescribeUserResponse {
      */
     DisplayName?: string;
     /**
-     * <p>The state of a user: enabled (registered to Amazon WorkMail) or disabled (deregistered or
+     * <p>The state of a user: enabled (registered to WorkMail) or disabled (deregistered or
      *          never registered to WorkMail).</p>
      */
     State?: EntityState | string;
     /**
      * <p>In certain cases, other entities are modeled as users. If interoperability is
-     *          enabled, resources are imported into Amazon WorkMail as users. Because different WorkMail
+     *          enabled, resources are imported into WorkMail as users. Because different WorkMail
      *          organizations rely on different directory types, administrators can distinguish between an
      *          unregistered user (account is disabled and has a user role) and the directory
      *          administrators. The values are USER, RESOURCE, and SYSTEM_USER.</p>
      */
     UserRole?: UserRole | string;
     /**
-     * <p>The date and time at which the user was enabled for Amazon WorkMail usage, in UNIX epoch
+     * <p>The date and time at which the user was enabled for WorkMailusage, in UNIX epoch
      *          time format.</p>
      */
     EnabledDate?: Date;
     /**
-     * <p>The date and time at which the user was disabled for Amazon WorkMail usage, in UNIX epoch
+     * <p>The date and time at which the user was disabled for WorkMail usage, in UNIX epoch
      *          time format.</p>
      */
     DisabledDate?: Date;
@@ -1287,7 +1399,11 @@ export interface GetAccessControlEffectRequest {
     /**
      * <p>The user ID.</p>
      */
-    UserId: string | undefined;
+    UserId?: string;
+    /**
+     * <p>The impersonation role ID.</p>
+     */
+    ImpersonationRoleId?: string;
 }
 export interface GetAccessControlEffectResponse {
     /**
@@ -1323,6 +1439,104 @@ export interface GetDefaultRetentionPolicyResponse {
      */
     FolderConfigurations?: FolderConfiguration[];
 }
+export interface GetImpersonationRoleRequest {
+    /**
+     * <p>The WorkMail organization from which to retrieve the impersonation role.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The impersonation role ID to retrieve.</p>
+     */
+    ImpersonationRoleId: string | undefined;
+}
+export interface GetImpersonationRoleResponse {
+    /**
+     * <p>The impersonation role ID.</p>
+     */
+    ImpersonationRoleId?: string;
+    /**
+     * <p>The impersonation role name.</p>
+     */
+    Name?: string;
+    /**
+     * <p>The impersonation role type.</p>
+     */
+    Type?: ImpersonationRoleType | string;
+    /**
+     * <p>The impersonation role description.</p>
+     */
+    Description?: string;
+    /**
+     * <p>The list of rules for the given impersonation role.</p>
+     */
+    Rules?: ImpersonationRule[];
+    /**
+     * <p>The date when the impersonation role was created.</p>
+     */
+    DateCreated?: Date;
+    /**
+     * <p>The date when the impersonation role was last modified.</p>
+     */
+    DateModified?: Date;
+}
+export interface GetImpersonationRoleEffectRequest {
+    /**
+     * <p>The WorkMail organization where the impersonation role is defined.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The impersonation role ID to test.</p>
+     */
+    ImpersonationRoleId: string | undefined;
+    /**
+     * <p>The WorkMail organization user chosen to test the impersonation role. The following identity
+     *          formats are available:</p>
+     *          <ul>
+     *             <li>
+     *                <p>User ID: <code>12345678-1234-1234-1234-123456789012</code> or <code>S-1-1-12-1234567890-123456789-123456789-1234</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>Email address: <code>user@domain.tld</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>User name: <code>user</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    TargetUser: string | undefined;
+}
+/**
+ * <p>The impersonation rule that matched the input.</p>
+ */
+export interface ImpersonationMatchedRule {
+    /**
+     * <p>The ID of the rule that matched the input</p>
+     */
+    ImpersonationRuleId?: string;
+    /**
+     * <p>The name of the rule that matched the input.</p>
+     */
+    Name?: string;
+}
+export interface GetImpersonationRoleEffectResponse {
+    /**
+     * <p>The impersonation role type.</p>
+     */
+    Type?: ImpersonationRoleType | string;
+    /**
+     * <p>
+     *             <code></code>Effect of the impersonation role on the target user based on its rules. Available
+     *          effects are <code>ALLOW</code> or <code>DENY</code>.</p>
+     */
+    Effect?: AccessEffect | string;
+    /**
+     * <p>A list of the rules that match the input and produce the configured effect.</p>
+     */
+    MatchedRules?: ImpersonationMatchedRule[];
+}
 export interface GetMailboxDetailsRequest {
     /**
      * <p>The identifier for the organization that contains the user whose mailbox details are
@@ -1346,7 +1560,7 @@ export interface GetMailboxDetailsResponse {
 }
 export interface GetMailDomainRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the domain is retrieved.</p>
+     * <p>The WorkMail organization for which the domain is retrieved.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -1356,7 +1570,7 @@ export interface GetMailDomainRequest {
 }
 export interface GetMailDomainResponse {
     /**
-     * <p>A list of the DNS records that Amazon WorkMail recommends adding in your DNS provider for the best user experience. The records configure your domain with DMARC, SPF, DKIM, and direct incoming
+     * <p>A list of the DNS records that WorkMail recommends adding in your DNS provider for the best user experience. The records configure your domain with DMARC, SPF, DKIM, and direct incoming
      *          email traffic to SES. See admin guide for more details.</p>
      */
     Records?: DnsRecord[];
@@ -1379,7 +1593,7 @@ export interface GetMailDomainResponse {
 }
 export interface GetMobileDeviceAccessEffectRequest {
     /**
-     * <p>The Amazon WorkMail organization to simulate the access effect for.</p>
+     * <p>The WorkMail organization to simulate the access effect for.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -1414,7 +1628,7 @@ export interface MobileDeviceAccessMatchedRule {
 }
 export interface GetMobileDeviceAccessEffectResponse {
     /**
-     * <p>The effect of the simulated access, <code>ALLOW</code> or <code>DENY</code>, after evaluating mobile device access rules in the Amazon WorkMail organization for the simulated
+     * <p>The effect of the simulated access, <code>ALLOW</code> or <code>DENY</code>, after evaluating mobile device access rules in the WorkMail organization for the simulated
      *          user parameters.</p>
      */
     Effect?: MobileDeviceAccessRuleEffect | string;
@@ -1425,7 +1639,7 @@ export interface GetMobileDeviceAccessEffectResponse {
 }
 export interface GetMobileDeviceAccessOverrideRequest {
     /**
-     * <p>The Amazon WorkMail organization to which you want to apply the override.</p>
+     * <p>The WorkMail organization to which you want to apply the override.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -1478,7 +1692,7 @@ export interface GetMobileDeviceAccessOverrideResponse {
     DateModified?: Date;
 }
 /**
- * <p>The representation of an Amazon WorkMail group.</p>
+ * <p>The representation of an WorkMail group.</p>
  */
 export interface Group {
     /**
@@ -1498,14 +1712,39 @@ export interface Group {
      */
     State?: EntityState | string;
     /**
-     * <p>The date indicating when the group was enabled for Amazon WorkMail use.</p>
+     * <p>The date indicating when the group was enabled for WorkMail use.</p>
      */
     EnabledDate?: Date;
     /**
-     * <p>The date indicating when the group was disabled from Amazon WorkMail use.</p>
+     * <p>The date indicating when the group was disabled from WorkMail use.</p>
      */
     DisabledDate?: Date;
 }
+/**
+ * <p>An impersonation role for the given WorkMail organization.</p>
+ */
+export interface ImpersonationRole {
+    /**
+     * <p>The identifier of the impersonation role.</p>
+     */
+    ImpersonationRoleId?: string;
+    /**
+     * <p>The impersonation role name.</p>
+     */
+    Name?: string;
+    /**
+     * <p>The impersonation role type.</p>
+     */
+    Type?: ImpersonationRoleType | string;
+    /**
+     * <p>The date when the impersonation role was created.</p>
+     */
+    DateCreated?: Date;
+    /**
+     * <p>The date when the impersonation role was last modified.</p>
+     */
+    DateModified?: Date;
+}
 /**
  * <p>The configuration for a resource isn't valid. A resource must either be able to
  *          auto-respond to requests or have at least one delegate associated that can do so on its
@@ -1606,7 +1845,7 @@ export interface ListAliasesResponse {
 }
 export interface ListAvailabilityConfigurationsRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the <code>AvailabilityConfiguration</code>'s will be
+     * <p>The WorkMail organization for which the <code>AvailabilityConfiguration</code>'s will be
      *          listed.</p>
      */
     OrganizationId: string | undefined;
@@ -1621,7 +1860,7 @@ export interface ListAvailabilityConfigurationsRequest {
 }
 export interface ListAvailabilityConfigurationsResponse {
     /**
-     * <p>The list of <code>AvailabilityConfiguration</code>'s that exist for the specified Amazon WorkMail organization.</p>
+     * <p>The list of <code>AvailabilityConfiguration</code>'s that exist for the specified WorkMail organization.</p>
      */
     AvailabilityConfigurations?: AvailabilityConfiguration[];
     /**
@@ -1670,11 +1909,11 @@ export interface Member {
      */
     State?: EntityState | string;
     /**
-     * <p>The date indicating when the member was enabled for Amazon WorkMail use.</p>
+     * <p>The date indicating when the member was enabled for WorkMail use.</p>
      */
     EnabledDate?: Date;
     /**
-     * <p>The date indicating when the member was disabled from Amazon WorkMail use.</p>
+     * <p>The date indicating when the member was disabled from WorkMail use.</p>
      */
     DisabledDate?: Date;
 }
@@ -1715,6 +1954,32 @@ export interface ListGroupsResponse {
      */
     NextToken?: string;
 }
+export interface ListImpersonationRolesRequest {
+    /**
+     * <p>The WorkMail organization to which the listed impersonation roles belong.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The token used to retrieve the next page of results. The first call doesn't require a
+     *          token.</p>
+     */
+    NextToken?: string;
+    /**
+     * <p>The maximum number of results returned in a single call.</p>
+     */
+    MaxResults?: number;
+}
+export interface ListImpersonationRolesResponse {
+    /**
+     * <p>The list of impersonation roles under the given WorkMail organization.</p>
+     */
+    Roles?: ImpersonationRole[];
+    /**
+     * <p>The token to retrieve the next page of results. The value is <code>null</code> when
+     *          there are no results to return.</p>
+     */
+    NextToken?: string;
+}
 export interface ListMailboxExportJobsRequest {
     /**
      * <p>The organization ID.</p>
@@ -1802,7 +2067,7 @@ export interface ListMailboxPermissionsResponse {
 }
 export interface ListMailDomainsRequest {
     /**
-     * <p>The Amazon WorkMail organization for which to list domains.</p>
+     * <p>The WorkMail organization for which to list domains.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -1829,7 +2094,7 @@ export interface MailDomainSummary {
 }
 export interface ListMailDomainsResponse {
     /**
-     * <p>The list of mail domain summaries, specifying domains that exist in the specified Amazon WorkMail  organization, along with the information about whether the domain is or isn't the default.</p>
+     * <p>The list of mail domain summaries, specifying domains that exist in the specified WorkMail organization, along with the information about whether the domain is or isn't the default.</p>
      */
     MailDomains?: MailDomainSummary[];
     /**
@@ -1839,7 +2104,7 @@ export interface ListMailDomainsResponse {
 }
 export interface ListMobileDeviceAccessOverridesRequest {
     /**
-     * <p>The Amazon WorkMail organization under which to list mobile device access overrides.</p>
+     * <p>The WorkMail organization under which to list mobile device access overrides.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -1904,7 +2169,7 @@ export interface MobileDeviceAccessOverride {
 }
 export interface ListMobileDeviceAccessOverridesResponse {
     /**
-     * <p>The list of mobile device access overrides that exist for the specified Amazon WorkMail organization and user.</p>
+     * <p>The list of mobile device access overrides that exist for the specified WorkMail organization and user.</p>
      */
     Overrides?: MobileDeviceAccessOverride[];
     /**
@@ -1914,16 +2179,16 @@ export interface ListMobileDeviceAccessOverridesResponse {
 }
 export interface ListMobileDeviceAccessRulesRequest {
     /**
-     * <p>The Amazon WorkMail organization for which to list the rules.</p>
+     * <p>The WorkMail organization for which to list the rules.</p>
      */
     OrganizationId: string | undefined;
 }
 /**
- * <p>A rule that controls access to mobile devices for an Amazon WorkMail group.</p>
+ * <p>A rule that controls access to mobile devices for an WorkMail group.</p>
  */
 export interface MobileDeviceAccessRule {
     /**
-     * <p>The ID assigned to a mobile access rule. </p>
+     * <p>The ID assigned to a mobile access rule.</p>
      */
     MobileDeviceAccessRuleId?: string;
     /**
@@ -1939,7 +2204,7 @@ export interface MobileDeviceAccessRule {
      */
     Effect?: MobileDeviceAccessRuleEffect | string;
     /**
-     * <p>Device types that a rule will match. </p>
+     * <p>Device types that a rule will match.</p>
      */
     DeviceTypes?: string[];
     /**
@@ -1981,7 +2246,7 @@ export interface MobileDeviceAccessRule {
 }
 export interface ListMobileDeviceAccessRulesResponse {
     /**
-     * <p>The list of mobile device access rules that exist under the specified Amazon WorkMail organization.</p>
+     * <p>The list of mobile device access rules that exist under the specified WorkMail organization.</p>
      */
     Rules?: MobileDeviceAccessRule[];
 }
@@ -2063,7 +2328,7 @@ export interface ListResourceDelegatesResponse {
     /**
      * <p>The token used to paginate through the delegates associated with a resource. While
      *          results are still available, it has an associated value. When the last page is reached, the
-     *          token is empty. </p>
+     *          token is empty.</p>
      */
     NextToken?: string;
 }
@@ -2107,11 +2372,11 @@ export interface Resource {
      */
     State?: EntityState | string;
     /**
-     * <p>The date indicating when the resource was enabled for Amazon WorkMail use.</p>
+     * <p>The date indicating when the resource was enabled for WorkMail use.</p>
      */
     EnabledDate?: Date;
     /**
-     * <p>The date indicating when the resource was disabled from Amazon WorkMail use.</p>
+     * <p>The date indicating when the resource was disabled from WorkMail use.</p>
      */
     DisabledDate?: Date;
 }
@@ -2168,7 +2433,7 @@ export interface ListUsersRequest {
     MaxResults?: number;
 }
 /**
- * <p>The representation of an Amazon WorkMail user.</p>
+ * <p>The representation of an WorkMail user.</p>
  */
 export interface User {
     /**
@@ -2196,11 +2461,11 @@ export interface User {
      */
     UserRole?: UserRole | string;
     /**
-     * <p>The date indicating when the user was enabled for Amazon WorkMail use.</p>
+     * <p>The date indicating when the user was enabled for WorkMail use.</p>
      */
     EnabledDate?: Date;
     /**
-     * <p>The date indicating when the user was disabled from Amazon WorkMail use.</p>
+     * <p>The date indicating when the user was disabled from WorkMail use.</p>
      */
     DisabledDate?: Date;
 }
@@ -2260,6 +2525,14 @@ export interface PutAccessControlRuleRequest {
      * <p>The identifier of the organization.</p>
      */
     OrganizationId: string | undefined;
+    /**
+     * <p>Impersonation role IDs to include in the rule.</p>
+     */
+    ImpersonationRoleIds?: string[];
+    /**
+     * <p>Impersonation role IDs to exclude from the rule.</p>
+     */
+    NotImpersonationRoleIds?: string[];
 }
 export interface PutAccessControlRuleResponse {
 }
@@ -2281,7 +2554,7 @@ export interface PutEmailMonitoringConfigurationResponse {
 }
 export interface PutInboundDmarcSettingsRequest {
     /**
-     * <p>The ID of the organization that you are applying the DMARC policy to. </p>
+     * <p>The ID of the organization that you are applying the DMARC policy to.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -2321,7 +2594,7 @@ export interface PutMailboxPermissionsResponse {
 }
 export interface PutMobileDeviceAccessOverrideRequest {
     /**
-     * <p>Identifies the Amazon WorkMail organization for which you create the override.</p>
+     * <p>Identifies the WorkMail organization for which you create the override.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -2387,11 +2660,11 @@ export interface RegisterMailDomainRequest {
      */
     ClientToken?: string;
     /**
-     * <p>The Amazon WorkMail organization under which you're creating the domain.</p>
+     * <p>The WorkMail organization under which you're creating the domain.</p>
      */
     OrganizationId: string | undefined;
     /**
-     * <p>The name of the mail domain to create in Amazon WorkMail and SES.</p>
+     * <p>The name of the mail domain to create in WorkMail and SES.</p>
      */
     DomainName: string | undefined;
 }
@@ -2499,7 +2772,7 @@ export declare class TooManyTagsException extends __BaseException {
 }
 export interface TestAvailabilityConfigurationRequest {
     /**
-     * <p>The Amazon WorkMail organization where the availability provider will be tested.</p>
+     * <p>The WorkMail organization where the availability provider will be tested.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -2539,7 +2812,7 @@ export interface UntagResourceResponse {
 }
 export interface UpdateAvailabilityConfigurationRequest {
     /**
-     * <p>The Amazon WorkMail organization for which the <code>AvailabilityConfiguration</code> will be
+     * <p>The WorkMail organization for which the <code>AvailabilityConfiguration</code> will be
      *          updated.</p>
      */
     OrganizationId: string | undefined;
@@ -2564,7 +2837,7 @@ export interface UpdateAvailabilityConfigurationResponse {
 }
 export interface UpdateDefaultMailDomainRequest {
     /**
-     * <p>The Amazon WorkMail organization for which to list domains.</p>
+     * <p>The WorkMail organization for which to list domains.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -2574,6 +2847,34 @@ export interface UpdateDefaultMailDomainRequest {
 }
 export interface UpdateDefaultMailDomainResponse {
 }
+export interface UpdateImpersonationRoleRequest {
+    /**
+     * <p>The WorkMail organization that contains the impersonation role to update.</p>
+     */
+    OrganizationId: string | undefined;
+    /**
+     * <p>The ID of the impersonation role to update.</p>
+     */
+    ImpersonationRoleId: string | undefined;
+    /**
+     * <p>The updated impersonation role name.</p>
+     */
+    Name: string | undefined;
+    /**
+     * <p>The updated impersonation role type.</p>
+     */
+    Type: ImpersonationRoleType | string | undefined;
+    /**
+     * <p>The updated impersonation role description.</p>
+     */
+    Description?: string;
+    /**
+     * <p>The updated list of rules.</p>
+     */
+    Rules: ImpersonationRule[] | undefined;
+}
+export interface UpdateImpersonationRoleResponse {
+}
 export interface UpdateMailboxQuotaRequest {
     /**
      * <p>The identifier for the organization that contains the user for whom to update the
@@ -2593,7 +2894,7 @@ export interface UpdateMailboxQuotaResponse {
 }
 export interface UpdateMobileDeviceAccessRuleRequest {
     /**
-     * <p>The Amazon WorkMail organization under which the rule will be updated.</p>
+     * <p>The WorkMail organization under which the rule will be updated.</p>
      */
     OrganizationId: string | undefined;
     /**
@@ -2704,6 +3005,14 @@ export declare const AssociateMemberToGroupRequestFilterSensitiveLog: (obj: Asso
  * @internal
  */
 export declare const AssociateMemberToGroupResponseFilterSensitiveLog: (obj: AssociateMemberToGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const AssumeImpersonationRoleRequestFilterSensitiveLog: (obj: AssumeImpersonationRoleRequest) => any;
+/**
+ * @internal
+ */
+export declare const AssumeImpersonationRoleResponseFilterSensitiveLog: (obj: AssumeImpersonationRoleResponse) => any;
 /**
  * @internal
  */
@@ -2756,6 +3065,18 @@ export declare const CreateGroupRequestFilterSensitiveLog: (obj: CreateGroupRequ
  * @internal
  */
 export declare const CreateGroupResponseFilterSensitiveLog: (obj: CreateGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const ImpersonationRuleFilterSensitiveLog: (obj: ImpersonationRule) => any;
+/**
+ * @internal
+ */
+export declare const CreateImpersonationRoleRequestFilterSensitiveLog: (obj: CreateImpersonationRoleRequest) => any;
+/**
+ * @internal
+ */
+export declare const CreateImpersonationRoleResponseFilterSensitiveLog: (obj: CreateImpersonationRoleResponse) => any;
 /**
  * @internal
  */
@@ -2836,6 +3157,14 @@ export declare const DeleteGroupRequestFilterSensitiveLog: (obj: DeleteGroupRequ
  * @internal
  */
 export declare const DeleteGroupResponseFilterSensitiveLog: (obj: DeleteGroupResponse) => any;
+/**
+ * @internal
+ */
+export declare const DeleteImpersonationRoleRequestFilterSensitiveLog: (obj: DeleteImpersonationRoleRequest) => any;
+/**
+ * @internal
+ */
+export declare const DeleteImpersonationRoleResponseFilterSensitiveLog: (obj: DeleteImpersonationRoleResponse) => any;
 /**
  * @internal
  */
@@ -3004,6 +3333,26 @@ export declare const GetDefaultRetentionPolicyRequestFilterSensitiveLog: (obj: G
  * @internal
  */
 export declare const GetDefaultRetentionPolicyResponseFilterSensitiveLog: (obj: GetDefaultRetentionPolicyResponse) => any;
+/**
+ * @internal
+ */
+export declare const GetImpersonationRoleRequestFilterSensitiveLog: (obj: GetImpersonationRoleRequest) => any;
+/**
+ * @internal
+ */
+export declare const GetImpersonationRoleResponseFilterSensitiveLog: (obj: GetImpersonationRoleResponse) => any;
+/**
+ * @internal
+ */
+export declare const GetImpersonationRoleEffectRequestFilterSensitiveLog: (obj: GetImpersonationRoleEffectRequest) => any;
+/**
+ * @internal
+ */
+export declare const ImpersonationMatchedRuleFilterSensitiveLog: (obj: ImpersonationMatchedRule) => any;
+/**
+ * @internal
+ */
+export declare const GetImpersonationRoleEffectResponseFilterSensitiveLog: (obj: GetImpersonationRoleEffectResponse) => any;
 /**
  * @internal
  */
@@ -3044,6 +3393,10 @@ export declare const GetMobileDeviceAccessOverrideResponseFilterSensitiveLog: (o
  * @internal
  */
 export declare const GroupFilterSensitiveLog: (obj: Group) => any;
+/**
+ * @internal
+ */
+export declare const ImpersonationRoleFilterSensitiveLog: (obj: ImpersonationRole) => any;
 /**
  * @internal
  */
@@ -3092,6 +3445,14 @@ export declare const ListGroupsRequestFilterSensitiveLog: (obj: ListGroupsReques
  * @internal
  */
 export declare const ListGroupsResponseFilterSensitiveLog: (obj: ListGroupsResponse) => any;
+/**
+ * @internal
+ */
+export declare const ListImpersonationRolesRequestFilterSensitiveLog: (obj: ListImpersonationRolesRequest) => any;
+/**
+ * @internal
+ */
+export declare const ListImpersonationRolesResponseFilterSensitiveLog: (obj: ListImpersonationRolesResponse) => any;
 /**
  * @internal
  */
@@ -3324,6 +3685,14 @@ export declare const UpdateDefaultMailDomainRequestFilterSensitiveLog: (obj: Upd
  * @internal
  */
 export declare const UpdateDefaultMailDomainResponseFilterSensitiveLog: (obj: UpdateDefaultMailDomainResponse) => any;
+/**
+ * @internal
+ */
+export declare const UpdateImpersonationRoleRequestFilterSensitiveLog: (obj: UpdateImpersonationRoleRequest) => any;
+/**
+ * @internal
+ */
+export declare const UpdateImpersonationRoleResponseFilterSensitiveLog: (obj: UpdateImpersonationRoleResponse) => any;
 /**
  * @internal
  */