@cdklabs/cdk-ssm-documents 0.0.72 → 0.0.73

package/node_modules/@aws-sdk/client-iam/dist-es/schemas/schemas_0.js

@@ -23,9 +23,10 @@ const _AKI = "AccessKeyId";
 const _AKLU = "AccessKeyLastUsed";
 const _AKM = "AccessKeyMetadata";
 const _AMP = "AttachedManagedPolicies";
-const _AN = "ActionNames";
+const _AN = "AttachmentName";
 const _ANMODAE = "AccountNotManagementOrDelegatedAdministratorException";
-const _ANc = "ActionName";
+const _ANc = "ActionNames";
+const _ANct = "ActionName";
 const _AP = "AttachedPolicy";
 const _APB = "AttachedPermissionsBoundary";
 const _APK = "AddPrivateKey";
@@ -36,6 +37,7 @@ const _ARPR = "AttachRolePolicyRequest";
 const _ARTIP = "AddRoleToInstanceProfile";
 const _ARTIPR = "AddRoleToInstanceProfileRequest";
 const _AS = "AssignmentStatus";
+const _AT = "AttachmentType";
 const _AU = "AllUsers";
 const _AUP = "AttachUserPolicy";
 const _AUPR = "AttachUserPolicyRequest";
@@ -346,6 +348,8 @@ const _II = "IssuerIdentifier";
 const _IIE = "InvalidInputException";
 const _IP = "InstanceProfile";
 const _IPI = "InstanceProfileId";
+const _IPIT = "InlinePolicyIdentifierType";
+const _IPIn = "InlinePolicyIdentifier";
 const _IPKE = "InvalidPublicKeyException";
 const _IPL = "InstanceProfileList";
 const _IPN = "InstanceProfileName";
@@ -519,8 +523,11 @@ const _OIICEE = "OpenIdIdpCommunicationErrorException";
 const _OIr = "OrganizationId";
 const _ONFE = "OrganizationNotFoundException";
 const _ONIAFME = "OrganizationNotInAllFeaturesModeException";
+const _OOPIL = "OrderedOrganizationPolicyInputList";
+const _OOPT = "OrderedOrganizationPolicyType";
 const _OP = "OldPassword";
 const _OPI = "OrganizationsPolicyId";
+const _OPLT = "OrganizationPolicyListType";
 const _OSBO = "OnlySendByOwner";
 const _P = "Permissions";
 const _PA = "PolicyArn";
@@ -535,6 +542,8 @@ const _PCS = "PermissionCheckStatus";
 const _PD = "PolicyDocument";
 const _PDo = "PolicyDetail";
 const _PEE = "PolicyEvaluationException";
+const _PEL = "PolicyExclusionList";
+const _PELT = "PolicyExclusionsListType";
 const _PG = "PolicyGroups";
 const _PGLT = "PolicyGroupListType";
 const _PGP = "PutGroupPolicy";
@@ -544,6 +553,7 @@ const _PGSAo = "PolicyGrantingServiceAccess";
 const _PGo = "PolicyGroup";
 const _PI = "PolicyId";
 const _PIL = "PolicyInputList";
+const _PIo = "PolicyIdentifier";
 const _PK = "PrivateKey";
 const _PKL = "PrivateKeyList";
 const _PLU = "PasswordLastUsed";
@@ -650,6 +660,7 @@ const _SCM = "ServerCertificateMetadata";
 const _SCML = "ServerCertificateMetadataList";
 const _SCN = "ServerCertificateName";
 const _SCP = "SimulateCustomPolicy";
+const _SCPIL = "ServiceControlPolicyInputList";
 const _SCPR = "SimulateCustomPolicyRequest";
 const _SCS = "ServiceCredentialSecret";
 const _SCe = "ServerCertificate";
@@ -1808,6 +1819,11 @@ export var GroupDetail$ = [3, n0, _GD,
     [_Pa, _GN, _GI, _A, _CD, _GPL, _AMP],
     [0, 0, 0, 0, 4, () => policyDetailListType, () => attachedPoliciesListType]
 ];
+export var InlinePolicyIdentifierType$ = [3, n0, _IPIT,
+    0,
+    [_PN, _AT, _AN],
+    [0, 0, 0], 3
+];
 export var InstanceProfile$ = [3, n0, _IP,
     0,
     [_Pa, _IPN, _IPI, _A, _CD, _Rol, _T],
@@ -2198,6 +2214,11 @@ export var OpenIDConnectProviderListEntry$ = [3, n0, _OIDCPLE,
     [_A],
     [0]
 ];
+export var OrderedOrganizationPolicyType$ = [3, n0, _OOPT,
+    0,
+    [_SCPIL],
+    [64 | 0]
+];
 export var OrganizationsDecisionDetail$ = [3, n0, _ODD,
     0,
     [_ABO],
@@ -2400,8 +2421,8 @@ export var SigningCertificate$ = [3, n0, _SCi,
 ];
 export var SimulateCustomPolicyRequest$ = [3, n0, _SCPR,
     0,
-    [_PIL, _AN, _PBPIL, _RA, _RP, _RO, _CA, _CEo, _RHO, _MI, _Ma],
-    [64 | 0, 64 | 0, 64 | 0, 64 | 0, 0, 0, 0, () => ContextEntryListType, 0, 1, 0], 2
+    [_PIL, _ANc, _PBPIL, _OOPIL, _RA, _RP, _RO, _CA, _CEo, _RHO, _MI, _Ma],
+    [64 | 0, 64 | 0, 64 | 0, () => OrganizationPolicyListType, 64 | 0, 0, 0, 0, () => ContextEntryListType, 0, 1, 0], 2
 ];
 export var SimulatePolicyResponse$ = [3, n0, _SPR,
     0,
@@ -2410,8 +2431,8 @@ export var SimulatePolicyResponse$ = [3, n0, _SPR,
 ];
 export var SimulatePrincipalPolicyRequest$ = [3, n0, _SPPR,
     0,
-    [_PSA, _AN, _PIL, _PBPIL, _RA, _RP, _RO, _CA, _CEo, _RHO, _MI, _Ma],
-    [0, 64 | 0, 64 | 0, 64 | 0, 64 | 0, 0, 0, 0, () => ContextEntryListType, 0, 1, 0], 2
+    [_PSA, _ANc, _PIL, _PBPIL, _PEL, _RA, _RP, _RO, _CA, _CEo, _RHO, _MI, _Ma],
+    [0, 64 | 0, 64 | 0, 64 | 0, () => PolicyExclusionsListType, 64 | 0, 0, 0, 0, () => ContextEntryListType, 0, 1, 0], 2
 ];
 export var SSHPublicKey$ = [3, n0, _SSHPK,
     0,
@@ -2475,7 +2496,7 @@ export var TagUserRequest$ = [3, n0, _TUR,
 ];
 export var TrackedActionLastAccessed$ = [3, n0, _TALAr,
     0,
-    [_ANc, _LAEa, _LATa, _LARa],
+    [_ANct, _LAEa, _LATa, _LARa],
     [0, 0, 4, 0]
 ];
 export var UntagInstanceProfileRequest$ = [3, n0, _UIPR,
@@ -2708,12 +2729,18 @@ var mfaDeviceListType = [1, n0, _mDLT,
 var OpenIDConnectProviderListType = [1, n0, _OIDCPLT,
     0, () => OpenIDConnectProviderListEntry$
 ];
+var OrganizationPolicyListType = [1, n0, _OPLT,
+    0, () => OrderedOrganizationPolicyType$
+];
 var policyDetailListType = [1, n0, _pDLT,
     0, () => PolicyDetail$
 ];
 var policyDocumentVersionListType = [1, n0, _pDVLT,
     0, () => PolicyVersion$
 ];
+var PolicyExclusionsListType = [1, n0, _PELT,
+    0, () => PolicyIdentifier$
+];
 var policyGrantingServiceAccessListType = [1, n0, _pGSALT,
     0, () => PolicyGrantingServiceAccess$
 ];
@@ -2792,6 +2819,11 @@ var virtualMFADeviceListType = [1, n0, _vMFADLT,
 var CertificationMapType = 128 | 0;
 var EvalDecisionDetailsType = 128 | 0;
 var summaryMapType = 128 | 1;
+export var PolicyIdentifier$ = [4, n0, _PIo,
+    0,
+    [_PT, _PA, _IPIn],
+    [0, 0, () => InlinePolicyIdentifierType$]
+];
 export var AcceptDelegationRequest$ = [9, n0, _ADR,
     0, () => AcceptDelegationRequestRequest$, () => __Unit
 ];

package/node_modules/@aws-sdk/client-iam/dist-types/commands/GetContextKeysForPrincipalPolicyCommand.d.ts

@@ -38,7 +38,10 @@ declare const GetContextKeysForPrincipalPolicyCommand_base: {
  *          <p>Context keys are variables maintained by Amazon Web Services and its services that provide details
  *             about the context of an API query request. Context keys can be evaluated by testing
  *             against a value in an IAM policy. Use <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetContextKeysForPrincipalPolicy.html">GetContextKeysForPrincipalPolicy</a> to understand what key names and values
- *             you must supply when you call <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html">SimulatePrincipalPolicy</a>.</p>
+ *             you must supply when you call <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html">SimulatePrincipalPolicy</a>. This operation doesn't return context keys
+ *             referenced by service control policies (SCPs). Only context keys referenced by the
+ *             identity-based policies attached to the specified entity, and any additional policies
+ *             that you provide, are included.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/node_modules/@aws-sdk/client-iam/dist-types/commands/SimulateCustomPolicyCommand.d.ts

@@ -39,9 +39,10 @@ declare const SimulateCustomPolicyCommand_base: {
  *          <p>If the output is long, you can use <code>MaxItems</code> and <code>Marker</code>
  *             parameters to paginate the results.</p>
  *          <note>
- *             <p>The IAM policy simulator evaluates statements in the identity-based policy and
- *                 the inputs that you provide during simulation. The policy simulator results can
- *                 differ from your live Amazon Web Services environment. We recommend that you check your policies
+ *             <p>The IAM policy simulator evaluates statements in identity-based policies,
+ *                 service control policies (SCPs) including their condition keys and resource
+ *                 scoping, and the inputs that you provide during simulation. The policy
+ *                 simulator results can differ from your live Amazon Web Services environment. We recommend that you check your policies
  *                 against your live Amazon Web Services environment after testing using the policy simulator to
  *                 confirm that you have the desired results. For more information about using the
  *                 policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM
@@ -63,6 +64,13 @@ declare const SimulateCustomPolicyCommand_base: {
  *   PermissionsBoundaryPolicyInputList: [
  *     "STRING_VALUE",
  *   ],
+ *   OrderedOrganizationPolicyInputList: [ // OrganizationPolicyListType
+ *     { // OrderedOrganizationPolicyType
+ *       ServiceControlPolicyInputList: [
+ *         "STRING_VALUE",
+ *       ],
+ *     },
+ *   ],
  *   ActionNames: [ // ActionNameListType // required
  *     "STRING_VALUE",
  *   ],

package/node_modules/@aws-sdk/client-iam/dist-types/commands/SimulatePrincipalPolicyCommand.d.ts

@@ -36,6 +36,10 @@ declare const SimulatePrincipalPolicyCommand_base: {
  *             the resources included in the simulation for IAM users only.</p>
  *          <p>The simulation does not perform the API operations; it only checks the authorization
  *             to determine if the simulated policies allow or deny the operations.</p>
+ *          <p>For cross-account simulations, <code>EvalDecisionDetails</code> returns the decision
+ *             for each policy type (identity-based policy, resource-based policy, and permissions
+ *             boundary). This helps you identify which policy type is responsible for an allow or
+ *             deny decision when policies span multiple accounts.</p>
  *          <p>
  *             <b>Note:</b> This operation discloses information about the
  *             permissions granted to other users. If you do not want users to see other user's
@@ -47,9 +51,10 @@ declare const SimulatePrincipalPolicyCommand_base: {
  *          <p>If the output is long, you can use the <code>MaxItems</code> and <code>Marker</code>
  *             parameters to paginate the results.</p>
  *          <note>
- *             <p>The IAM policy simulator evaluates statements in the identity-based policy and
- *                 the inputs that you provide during simulation. The policy simulator results can
- *                 differ from your live Amazon Web Services environment. We recommend that you check your policies
+ *             <p>The IAM policy simulator evaluates statements in identity-based policies,
+ *                 service control policies (SCPs) including their condition keys and resource
+ *                 scoping, and the inputs that you provide during simulation. The policy
+ *                 simulator results can differ from your live Amazon Web Services environment. We recommend that you check your policies
  *                 against your live Amazon Web Services environment after testing using the policy simulator to
  *                 confirm that you have the desired results. For more information about using the
  *                 policy simulator, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_testing-policies.html">Testing IAM
@@ -72,6 +77,17 @@ declare const SimulatePrincipalPolicyCommand_base: {
  *   PermissionsBoundaryPolicyInputList: [
  *     "STRING_VALUE",
  *   ],
+ *   PolicyExclusionList: [ // PolicyExclusionsListType
+ *     { // PolicyIdentifier Union: only one key present
+ *       PolicyType: "inline" || "aws-managed" || "user-managed" || "permission-boundary" || "scp" || "rcp",
+ *       PolicyArn: "STRING_VALUE",
+ *       InlinePolicyIdentifier: { // InlinePolicyIdentifierType
+ *         PolicyName: "STRING_VALUE", // required
+ *         AttachmentType: "user" || "group" || "role", // required
+ *         AttachmentName: "STRING_VALUE", // required
+ *       },
+ *     },
+ *   ],
  *   ActionNames: [ // ActionNameListType // required
  *     "STRING_VALUE",
  *   ],

package/node_modules/@aws-sdk/client-iam/dist-types/commands/UpdateDelegationRequestCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { UpdateDelegationRequestRequest } from "../models/models_0";
+import type { UpdateDelegationRequestRequest } from "../models/models_1";
 /**
  * @public
  */

package/node_modules/@aws-sdk/client-iam/dist-types/commands/UpdateGroupCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { UpdateGroupRequest } from "../models/models_0";
+import type { UpdateGroupRequest } from "../models/models_1";
 /**
  * @public
  */

package/node_modules/@aws-sdk/client-iam/dist-types/commands/UpdateLoginProfileCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { UpdateLoginProfileRequest } from "../models/models_0";
+import type { UpdateLoginProfileRequest } from "../models/models_1";
 /**
  * @public
  */

package/node_modules/@aws-sdk/client-iam/dist-types/models/enums.d.ts

@@ -59,6 +59,19 @@ export declare const PermissionsBoundaryAttachmentType: {
  * @public
  */
 export type PermissionsBoundaryAttachmentType = (typeof PermissionsBoundaryAttachmentType)[keyof typeof PermissionsBoundaryAttachmentType];
+/**
+ * @public
+ * @enum
+ */
+export declare const AttachmentType: {
+    readonly GROUP: "group";
+    readonly ROLE: "role";
+    readonly USER: "user";
+};
+/**
+ * @public
+ */
+export type AttachmentType = (typeof AttachmentType)[keyof typeof AttachmentType];
 /**
  * @public
  * @enum
@@ -390,3 +403,19 @@ export declare const PolicySourceType: {
  * @public
  */
 export type PolicySourceType = (typeof PolicySourceType)[keyof typeof PolicySourceType];
+/**
+ * @public
+ * @enum
+ */
+export declare const PolicyIdentifierPolicyType: {
+    readonly AWS_MANAGED: "aws-managed";
+    readonly INLINE: "inline";
+    readonly PERMISSION_BOUNDARY: "permission-boundary";
+    readonly RCP: "rcp";
+    readonly SCP: "scp";
+    readonly USER_MANAGED: "user-managed";
+};
+/**
+ * @public
+ */
+export type PolicyIdentifierPolicyType = (typeof PolicyIdentifierPolicyType)[keyof typeof PolicyIdentifierPolicyType];