@jjrawlins/cdk-iam-policy-builder-helper 0.0.0

package/node_modules/@aws-sdk/client-iam/dist-types/models/models_1.d.ts

@@ -0,0 +1,937 @@
+import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
+import { IAMServiceException as __BaseException } from "./IAMServiceException";
+import { Role, ServerCertificateMetadata, SigningCertificate, SSHPublicKey, StatusType, Tag } from "./models_0";
+/**
+ * @public
+ */
+export interface UntagInstanceProfileRequest {
+    /**
+     * <p>The name of the IAM instance profile from which you want to remove tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    InstanceProfileName: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified instance profile.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagMFADeviceRequest {
+    /**
+     * <p>The unique identifier for the IAM virtual MFA device from which you want to remove
+     *       tags. For virtual MFA devices, the serial number is the same as the ARN.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    SerialNumber: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified instance profile.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagOpenIDConnectProviderRequest {
+    /**
+     * <p>The ARN of the OIDC provider in IAM from which you want to remove tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    OpenIDConnectProviderArn: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified OIDC provider.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagPolicyRequest {
+    /**
+     * <p>The ARN of the IAM customer managed policy from which you want to remove
+     *       tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    PolicyArn: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified policy.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagRoleRequest {
+    /**
+     * <p>The name of the IAM role from which you want to remove tags.</p>
+     *          <p>This parameter accepts (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that consist of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    RoleName: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified role.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagSAMLProviderRequest {
+    /**
+     * <p>The ARN of the SAML identity provider in IAM from which you want to remove
+     *       tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    SAMLProviderArn: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified SAML identity provider.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagServerCertificateRequest {
+    /**
+     * <p>The name of the IAM server certificate from which you want to remove tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    ServerCertificateName: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified IAM server certificate.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UntagUserRequest {
+    /**
+     * <p>The name of the IAM user from which you want to remove tags.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName: string | undefined;
+    /**
+     * <p>A list of key names as a simple array of strings. The tags with matching keys are
+     *       removed from the specified user.</p>
+     * @public
+     */
+    TagKeys: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateAccessKeyRequest {
+    /**
+     * <p>The name of the user whose key you want to update.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName?: string;
+    /**
+     * <p>The access key ID of the secret access key you want to update.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that can
+     *     consist of any upper or lowercased letter or digit.</p>
+     * @public
+     */
+    AccessKeyId: string | undefined;
+    /**
+     * <p> The status you want to assign to the secret access key. <code>Active</code> means
+     *             that the key can be used for programmatic calls to Amazon Web Services, while <code>Inactive</code>
+     *             means that the key cannot be used.</p>
+     * @public
+     */
+    Status: StatusType | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateAccountPasswordPolicyRequest {
+    /**
+     * <p>The minimum number of characters allowed in an IAM user password.</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>6</code>.</p>
+     * @public
+     */
+    MinimumPasswordLength?: number;
+    /**
+     * <p>Specifies whether IAM user passwords must contain at least one of the following
+     *             non-alphanumeric characters:</p>
+     *          <p>! @ # $ % ^ & * ( ) _ + - = [ ] \{ \} | '</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that passwords do not require at least one
+     *             symbol character.</p>
+     * @public
+     */
+    RequireSymbols?: boolean;
+    /**
+     * <p>Specifies whether IAM user passwords must contain at least one numeric character (0
+     *             to 9).</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that passwords do not require at least one
+     *             numeric character.</p>
+     * @public
+     */
+    RequireNumbers?: boolean;
+    /**
+     * <p>Specifies whether IAM user passwords must contain at least one uppercase character
+     *             from the ISO basic Latin alphabet (A to Z).</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that passwords do not require at least one
+     *             uppercase character.</p>
+     * @public
+     */
+    RequireUppercaseCharacters?: boolean;
+    /**
+     * <p>Specifies whether IAM user passwords must contain at least one lowercase character
+     *             from the ISO basic Latin alphabet (a to z).</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that passwords do not require at least one
+     *             lowercase character.</p>
+     * @public
+     */
+    RequireLowercaseCharacters?: boolean;
+    /**
+     * <p> Allows all IAM users in your account to use the Amazon Web Services Management Console to change their own
+     *             passwords. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_enable-user-change.html">Permitting
+     *                 IAM users to change their own passwords</a> in the
+     *                 <i>IAM User Guide</i>.</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that IAM users in the account do not
+     *             automatically have permissions to change their own password.</p>
+     * @public
+     */
+    AllowUsersToChangePassword?: boolean;
+    /**
+     * <p>The number of days that an IAM user password is valid.</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>0</code>. The result is that IAM user passwords never expire.</p>
+     * @public
+     */
+    MaxPasswordAge?: number;
+    /**
+     * <p>Specifies the number of previous passwords that IAM users are prevented from
+     *             reusing.</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>0</code>. The result is that IAM users are not prevented from reusing
+     *             previous passwords.</p>
+     * @public
+     */
+    PasswordReusePrevention?: number;
+    /**
+     * <p> Prevents IAM users who are accessing the account via the Amazon Web Services Management Console from setting a
+     *             new console password after their password has expired. The IAM user cannot access the
+     *             console until an administrator resets the password.</p>
+     *          <p>If you do not specify a value for this parameter, then the operation uses the default
+     *             value of <code>false</code>. The result is that IAM users can change their passwords
+     *             after they expire and continue to sign in as the user.</p>
+     *          <note>
+     *             <p> In the Amazon Web Services Management Console, the custom password policy option <b>Allow
+     *                     users to change their own password</b> gives IAM users permissions to
+     *                     <code>iam:ChangePassword</code> for only their user and to the
+     *                     <code>iam:GetAccountPasswordPolicy</code> action. This option does not attach a
+     *                 permissions policy to each user, rather the permissions are applied at the
+     *                 account-level for all users by IAM. IAM users with
+     *                     <code>iam:ChangePassword</code> permission and active access keys can reset
+     *                 their own expired console password using the CLI or API.</p>
+     *          </note>
+     * @public
+     */
+    HardExpiry?: boolean;
+}
+/**
+ * @public
+ */
+export interface UpdateAssumeRolePolicyRequest {
+    /**
+     * <p>The name of the role to update with the new policy.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    RoleName: string | undefined;
+    /**
+     * <p>The policy that grants an entity permission to assume the role.</p>
+     *          <p>You must provide policies in JSON format in IAM. However, for CloudFormation
+     *             templates formatted in YAML, you can provide the policy in JSON or YAML format. CloudFormation always converts a YAML policy to JSON format before submitting it to
+     *             IAM.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    PolicyDocument: string | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateGroupRequest {
+    /**
+     * <p>Name of the IAM group to update. If you're changing the name of the group, this is
+     *             the original name.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    GroupName: string | undefined;
+    /**
+     * <p>New path for the IAM group. Only include this if changing the group's path.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting
+     *     of either a forward slash (/) by itself or a string that must begin and end with forward slashes.
+     *     In addition, it can contain any ASCII character from the ! (<code>\u0021</code>) through the DEL character (<code>\u007F</code>), including
+     *     most punctuation characters, digits, and upper and lowercased letters.</p>
+     * @public
+     */
+    NewPath?: string;
+    /**
+     * <p>New name for the IAM group. Only include this if changing the group's name.</p>
+     *          <p>IAM user, group, role, and policy names must be unique within the account. Names are
+     *             not distinguished by case. For example, you cannot create resources named both
+     *             "MyResource" and "myresource".</p>
+     * @public
+     */
+    NewGroupName?: string;
+}
+/**
+ * @public
+ */
+export interface UpdateLoginProfileRequest {
+    /**
+     * <p>The name of the user whose password you want to update.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName: string | undefined;
+    /**
+     * <p>The new password for the specified IAM user.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     *          <p>However, the format can be further restricted by the account administrator by setting
+     *             a password policy on the Amazon Web Services account. For more information, see <a>UpdateAccountPasswordPolicy</a>.</p>
+     * @public
+     */
+    Password?: string;
+    /**
+     * <p>Allows this new password to be used only once by requiring the specified IAM user to
+     *             set a new password on next sign-in.</p>
+     * @public
+     */
+    PasswordResetRequired?: boolean;
+}
+/**
+ * @public
+ */
+export interface UpdateOpenIDConnectProviderThumbprintRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM OIDC provider resource object for which
+     *             you want to update the thumbprint. You can get a list of OIDC provider ARNs by using the
+     *                 <a>ListOpenIDConnectProviders</a> operation.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    OpenIDConnectProviderArn: string | undefined;
+    /**
+     * <p>A list of certificate thumbprints that are associated with the specified IAM OpenID
+     *             Connect provider. For more information, see <a>CreateOpenIDConnectProvider</a>. </p>
+     * @public
+     */
+    ThumbprintList: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateRoleRequest {
+    /**
+     * <p>The name of the role that you want to modify.</p>
+     * @public
+     */
+    RoleName: string | undefined;
+    /**
+     * <p>The new description that you want to apply to the specified role.</p>
+     * @public
+     */
+    Description?: string;
+    /**
+     * <p>The maximum session duration (in seconds) that you want to set for the specified role.
+     *             If you do not specify a value for this setting, the default value of one hour is
+     *             applied. This setting can have a value from 1 hour to 12 hours.</p>
+     *          <p>Anyone who assumes the role from the CLI or API can use the
+     *                 <code>DurationSeconds</code> API parameter or the <code>duration-seconds</code>
+     *             CLI parameter to request a longer session. The <code>MaxSessionDuration</code> setting
+     *             determines the maximum duration that can be requested using the
+     *                 <code>DurationSeconds</code> parameter. If users don't specify a value for the
+     *                 <code>DurationSeconds</code> parameter, their security credentials are valid for one
+     *             hour by default. This applies when you use the <code>AssumeRole*</code> API operations
+     *             or the <code>assume-role*</code> CLI operations but does not apply when you use those
+     *             operations to create a console URL. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html">Using IAM
+     *                 roles</a> in the <i>IAM User Guide</i>.</p>
+     *          <note>
+     *             <p>IAM role credentials provided by Amazon EC2 instances assigned to the role are not
+     *                 subject to the specified maximum session duration.</p>
+     *          </note>
+     * @public
+     */
+    MaxSessionDuration?: number;
+}
+/**
+ * @public
+ */
+export interface UpdateRoleResponse {
+}
+/**
+ * @public
+ */
+export interface UpdateRoleDescriptionRequest {
+    /**
+     * <p>The name of the role that you want to modify.</p>
+     * @public
+     */
+    RoleName: string | undefined;
+    /**
+     * <p>The new description that you want to apply to the specified role.</p>
+     * @public
+     */
+    Description: string | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateRoleDescriptionResponse {
+    /**
+     * <p>A structure that contains details about the modified role.</p>
+     * @public
+     */
+    Role?: Role;
+}
+/**
+ * @public
+ */
+export interface UpdateSAMLProviderRequest {
+    /**
+     * <p>An XML document generated by an identity provider (IdP) that supports SAML 2.0. The
+     *             document includes the issuer's name, expiration information, and keys that can be used
+     *             to validate the SAML authentication response (assertions) that are received from the
+     *             IdP. You must generate the metadata document using the identity management software that
+     *             is used as your organization's IdP.</p>
+     * @public
+     */
+    SAMLMetadataDocument: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the SAML provider to update.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    SAMLProviderArn: string | undefined;
+}
+/**
+ * <p>Contains the response to a successful <a>UpdateSAMLProvider</a> request.
+ *     </p>
+ * @public
+ */
+export interface UpdateSAMLProviderResponse {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the SAML provider that was updated.</p>
+     * @public
+     */
+    SAMLProviderArn?: string;
+}
+/**
+ * @public
+ */
+export interface UpdateServerCertificateRequest {
+    /**
+     * <p>The name of the server certificate that you want to update.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    ServerCertificateName: string | undefined;
+    /**
+     * <p>The new path for the server certificate. Include this only if you are updating the
+     *             server certificate's path.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting
+     *     of either a forward slash (/) by itself or a string that must begin and end with forward slashes.
+     *     In addition, it can contain any ASCII character from the ! (<code>\u0021</code>) through the DEL character (<code>\u007F</code>), including
+     *     most punctuation characters, digits, and upper and lowercased letters.</p>
+     * @public
+     */
+    NewPath?: string;
+    /**
+     * <p>The new name for the server certificate. Include this only if you are updating the
+     *             server certificate's name. The name of the certificate cannot contain any spaces.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    NewServerCertificateName?: string;
+}
+/**
+ * @public
+ */
+export interface UpdateServiceSpecificCredentialRequest {
+    /**
+     * <p>The name of the IAM user associated with the service-specific credential. If you do
+     *             not specify this value, then the operation assumes the user whose credentials are used
+     *             to call the operation.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName?: string;
+    /**
+     * <p>The unique identifier of the service-specific credential.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that can
+     *     consist of any upper or lowercased letter or digit.</p>
+     * @public
+     */
+    ServiceSpecificCredentialId: string | undefined;
+    /**
+     * <p>The status to be assigned to the service-specific credential.</p>
+     * @public
+     */
+    Status: StatusType | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateSigningCertificateRequest {
+    /**
+     * <p>The name of the IAM user the signing certificate belongs to.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName?: string;
+    /**
+     * <p>The ID of the signing certificate you want to update.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that can
+     *     consist of any upper or lowercased letter or digit.</p>
+     * @public
+     */
+    CertificateId: string | undefined;
+    /**
+     * <p> The status you want to assign to the certificate. <code>Active</code> means that the
+     *             certificate can be used for programmatic calls to Amazon Web Services <code>Inactive</code> means that
+     *             the certificate cannot be used.</p>
+     * @public
+     */
+    Status: StatusType | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateSSHPublicKeyRequest {
+    /**
+     * <p>The name of the IAM user associated with the SSH public key.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName: string | undefined;
+    /**
+     * <p>The unique identifier for the SSH public key.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that can
+     *     consist of any upper or lowercased letter or digit.</p>
+     * @public
+     */
+    SSHPublicKeyId: string | undefined;
+    /**
+     * <p>The status to assign to the SSH public key. <code>Active</code> means that the key can
+     *             be used for authentication with an CodeCommit repository. <code>Inactive</code> means that
+     *             the key cannot be used.</p>
+     * @public
+     */
+    Status: StatusType | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateUserRequest {
+    /**
+     * <p>Name of the user to update. If you're changing the name of the user, this is the
+     *             original user name.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName: string | undefined;
+    /**
+     * <p>New path for the IAM user. Include this parameter only if you're changing the user's
+     *             path.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting
+     *     of either a forward slash (/) by itself or a string that must begin and end with forward slashes.
+     *     In addition, it can contain any ASCII character from the ! (<code>\u0021</code>) through the DEL character (<code>\u007F</code>), including
+     *     most punctuation characters, digits, and upper and lowercased letters.</p>
+     * @public
+     */
+    NewPath?: string;
+    /**
+     * <p>New name for the user. Include this parameter only if you're changing the user's
+     *             name.</p>
+     *          <p>IAM user, group, role, and policy names must be unique within the account. Names are
+     *             not distinguished by case. For example, you cannot create resources named both
+     *             "MyResource" and "myresource".</p>
+     * @public
+     */
+    NewUserName?: string;
+}
+/**
+ * <p>The request was rejected because the public key certificate and the private key do not
+ *       match.</p>
+ * @public
+ */
+export declare class KeyPairMismatchException extends __BaseException {
+    readonly name: "KeyPairMismatchException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<KeyPairMismatchException, __BaseException>);
+}
+/**
+ * <p>The request was rejected because the certificate was malformed or expired. The error
+ *       message describes the specific error.</p>
+ * @public
+ */
+export declare class MalformedCertificateException extends __BaseException {
+    readonly name: "MalformedCertificateException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<MalformedCertificateException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface UploadServerCertificateRequest {
+    /**
+     * <p>The path for the server certificate. For more information about paths, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM
+     *                 identifiers</a> in the <i>IAM User Guide</i>.</p>
+     *          <p>This parameter is optional. If it is not included, it defaults to a slash (/).
+     *             This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting
+     *     of either a forward slash (/) by itself or a string that must begin and end with forward slashes.
+     *     In addition, it can contain any ASCII character from the ! (<code>\u0021</code>) through the DEL character (<code>\u007F</code>), including
+     *     most punctuation characters, digits, and upper and lowercased letters.</p>
+     *          <note>
+     *             <p> If you are uploading a server certificate specifically for use with Amazon
+     *                 CloudFront distributions, you must specify a path using the <code>path</code>
+     *                 parameter. The path must begin with <code>/cloudfront</code> and must include a
+     *                 trailing slash (for example, <code>/cloudfront/test/</code>).</p>
+     *          </note>
+     * @public
+     */
+    Path?: string;
+    /**
+     * <p>The name for the server certificate. Do not include the path in this value. The name
+     *             of the certificate cannot contain any spaces.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    ServerCertificateName: string | undefined;
+    /**
+     * <p>The contents of the public key certificate in PEM-encoded format.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    CertificateBody: string | undefined;
+    /**
+     * <p>The contents of the private key in PEM-encoded format.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    PrivateKey: string | undefined;
+    /**
+     * <p>The contents of the certificate chain. This is typically a concatenation of the
+     *             PEM-encoded public key certificates of the chain.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    CertificateChain?: string;
+    /**
+     * <p>A list of tags that you want to attach to the new IAM server certificate resource.
+     *       Each tag consists of a key name and an associated value. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
+     *       <i>IAM User Guide</i>.</p>
+     *          <note>
+     *             <p>If any one of the tags is invalid or if you exceed the allowed maximum number of tags, then the entire request
+     *    fails and the resource is not created.</p>
+     *          </note>
+     * @public
+     */
+    Tags?: Tag[];
+}
+/**
+ * <p>Contains the response to a successful <a>UploadServerCertificate</a>
+ *       request. </p>
+ * @public
+ */
+export interface UploadServerCertificateResponse {
+    /**
+     * <p>The meta information of the uploaded server certificate without its certificate body,
+     *             certificate chain, and private key.</p>
+     * @public
+     */
+    ServerCertificateMetadata?: ServerCertificateMetadata;
+    /**
+     * <p>A list of tags that are attached to the new IAM server certificate. The returned list of tags is sorted by tag key.
+     *       For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
+     *       <i>IAM User Guide</i>.</p>
+     * @public
+     */
+    Tags?: Tag[];
+}
+/**
+ * <p>The request was rejected because the same certificate is associated with an IAM user in
+ *       the account.</p>
+ * @public
+ */
+export declare class DuplicateCertificateException extends __BaseException {
+    readonly name: "DuplicateCertificateException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<DuplicateCertificateException, __BaseException>);
+}
+/**
+ * <p>The request was rejected because the certificate is invalid.</p>
+ * @public
+ */
+export declare class InvalidCertificateException extends __BaseException {
+    readonly name: "InvalidCertificateException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidCertificateException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface UploadSigningCertificateRequest {
+    /**
+     * <p>The name of the user the signing certificate is for.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName?: string;
+    /**
+     * <p>The contents of the signing certificate.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    CertificateBody: string | undefined;
+}
+/**
+ * <p>Contains the response to a successful <a>UploadSigningCertificate</a>
+ *       request. </p>
+ * @public
+ */
+export interface UploadSigningCertificateResponse {
+    /**
+     * <p>Information about the certificate.</p>
+     * @public
+     */
+    Certificate: SigningCertificate | undefined;
+}
+/**
+ * <p>The request was rejected because the SSH public key is already associated with the
+ *       specified IAM user.</p>
+ * @public
+ */
+export declare class DuplicateSSHPublicKeyException extends __BaseException {
+    readonly name: "DuplicateSSHPublicKeyException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<DuplicateSSHPublicKeyException, __BaseException>);
+}
+/**
+ * <p>The request was rejected because the public key is malformed or otherwise invalid.</p>
+ * @public
+ */
+export declare class InvalidPublicKeyException extends __BaseException {
+    readonly name: "InvalidPublicKeyException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidPublicKeyException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface UploadSSHPublicKeyRequest {
+    /**
+     * <p>The name of the IAM user to associate the SSH public key with.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
+     * @public
+     */
+    UserName: string | undefined;
+    /**
+     * <p>The SSH public key. The public key must be encoded in ssh-rsa format or PEM format.
+     *             The minimum bit-length of the public key is 2048 bits. For example, you can generate a
+     *             2048-bit key, and the resulting PEM file is 1679 bytes long.</p>
+     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
+     *     used to validate this parameter is a string of characters consisting of the following:</p>
+     *          <ul>
+     *             <li>
+     *                <p>Any printable ASCII
+     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
+     *             </li>
+     *             <li>
+     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
+     *     (through <code>\u00FF</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
+     *     carriage return (<code>\u000D</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    SSHPublicKeyBody: string | undefined;
+}
+/**
+ * <p>Contains the response to a successful <a>UploadSSHPublicKey</a>
+ *       request.</p>
+ * @public
+ */
+export interface UploadSSHPublicKeyResponse {
+    /**
+     * <p>Contains information about the SSH public key.</p>
+     * @public
+     */
+    SSHPublicKey?: SSHPublicKey;
+}
+/**
+ * @internal
+ */
+export declare const UpdateLoginProfileRequestFilterSensitiveLog: (obj: UpdateLoginProfileRequest) => any;
+/**
+ * @internal
+ */
+export declare const UploadServerCertificateRequestFilterSensitiveLog: (obj: UploadServerCertificateRequest) => any;