cdk-comprehend-s3olap 2.0.82 → 2.0.85
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +5 -5
- package/lib/cdk-comprehend-s3olap.js +2 -2
- package/lib/comprehend-lambdas.js +2 -2
- package/lib/iam-roles.js +4 -4
- package/node_modules/aws-sdk/CHANGELOG.md +9 -1
- package/node_modules/aws-sdk/README.md +1 -1
- package/node_modules/aws-sdk/apis/greengrassv2-2020-11-30.min.json +26 -19
- package/node_modules/aws-sdk/apis/lookoutequipment-2020-12-15.min.json +282 -31
- package/node_modules/aws-sdk/apis/lookoutequipment-2020-12-15.paginators.json +10 -0
- package/node_modules/aws-sdk/apis/macie2-2020-01-01.min.json +390 -119
- package/node_modules/aws-sdk/apis/voice-id-2021-09-27.min.json +15 -2
- package/node_modules/aws-sdk/clients/fsx.d.ts +1 -1
- package/node_modules/aws-sdk/clients/greengrassv2.d.ts +22 -13
- package/node_modules/aws-sdk/clients/lookoutequipment.d.ts +399 -10
- package/node_modules/aws-sdk/clients/macie2.d.ts +289 -41
- package/node_modules/aws-sdk/clients/sso.d.ts +19 -19
- package/node_modules/aws-sdk/clients/ssoadmin.d.ts +115 -115
- package/node_modules/aws-sdk/clients/voiceid.d.ts +26 -16
- package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
- package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +6 -6
- package/node_modules/aws-sdk/dist/aws-sdk.js +3 -3
- package/node_modules/aws-sdk/dist/aws-sdk.min.js +2 -2
- package/node_modules/aws-sdk/lib/core.js +1 -1
- package/node_modules/aws-sdk/package.json +1 -1
- package/node_modules/esbuild/bin/esbuild +12 -6
- package/node_modules/esbuild/install.js +4 -4
- package/node_modules/esbuild/lib/main.js +19 -13
- package/node_modules/esbuild/package.json +22 -22
- package/node_modules/esbuild-linux-64/bin/esbuild +0 -0
- package/node_modules/esbuild-linux-64/package.json +1 -1
- package/package.json +10 -10
@@ -20,43 +20,43 @@ declare class SSOAdmin extends Service {
|
|
20
20
|
*/
|
21
21
|
attachCustomerManagedPolicyReferenceToPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.AttachCustomerManagedPolicyReferenceToPermissionSetResponse) => void): Request<SSOAdmin.Types.AttachCustomerManagedPolicyReferenceToPermissionSetResponse, AWSError>;
|
22
22
|
/**
|
23
|
-
* Attaches an
|
23
|
+
* Attaches an AWS managed policy ARN to a permission set. If the permission set is already referenced by one or more account assignments, you will need to call ProvisionPermissionSet after this operation. Calling ProvisionPermissionSet applies the corresponding IAM policy updates to all assigned accounts.
|
24
24
|
*/
|
25
25
|
attachManagedPolicyToPermissionSet(params: SSOAdmin.Types.AttachManagedPolicyToPermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.AttachManagedPolicyToPermissionSetResponse) => void): Request<SSOAdmin.Types.AttachManagedPolicyToPermissionSetResponse, AWSError>;
|
26
26
|
/**
|
27
|
-
* Attaches an
|
27
|
+
* Attaches an AWS managed policy ARN to a permission set. If the permission set is already referenced by one or more account assignments, you will need to call ProvisionPermissionSet after this operation. Calling ProvisionPermissionSet applies the corresponding IAM policy updates to all assigned accounts.
|
28
28
|
*/
|
29
29
|
attachManagedPolicyToPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.AttachManagedPolicyToPermissionSetResponse) => void): Request<SSOAdmin.Types.AttachManagedPolicyToPermissionSetResponse, AWSError>;
|
30
30
|
/**
|
31
|
-
* Assigns access to a principal for a specified
|
31
|
+
* Assigns access to a principal for a specified AWS account using a specified permission set. The term principal here refers to a user or group that is defined in IAM Identity Center. As part of a successful CreateAccountAssignment call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy. That policy is attached to the IAM role created in IAM Identity Center. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you must call ProvisionPermissionSet to make these updates. After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment creation request.
|
32
32
|
*/
|
33
33
|
createAccountAssignment(params: SSOAdmin.Types.CreateAccountAssignmentRequest, callback?: (err: AWSError, data: SSOAdmin.Types.CreateAccountAssignmentResponse) => void): Request<SSOAdmin.Types.CreateAccountAssignmentResponse, AWSError>;
|
34
34
|
/**
|
35
|
-
* Assigns access to a principal for a specified
|
35
|
+
* Assigns access to a principal for a specified AWS account using a specified permission set. The term principal here refers to a user or group that is defined in IAM Identity Center. As part of a successful CreateAccountAssignment call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy. That policy is attached to the IAM role created in IAM Identity Center. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you must call ProvisionPermissionSet to make these updates. After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment creation request.
|
36
36
|
*/
|
37
37
|
createAccountAssignment(callback?: (err: AWSError, data: SSOAdmin.Types.CreateAccountAssignmentResponse) => void): Request<SSOAdmin.Types.CreateAccountAssignmentResponse, AWSError>;
|
38
38
|
/**
|
39
|
-
* Enables the attributes-based access control (ABAC) feature for the specified
|
39
|
+
* Enables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide. After a successful response, call DescribeInstanceAccessControlAttributeConfiguration to validate that InstanceAccessControlAttributeConfiguration was created.
|
40
40
|
*/
|
41
41
|
createInstanceAccessControlAttributeConfiguration(params: SSOAdmin.Types.CreateInstanceAccessControlAttributeConfigurationRequest, callback?: (err: AWSError, data: SSOAdmin.Types.CreateInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.CreateInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
42
42
|
/**
|
43
|
-
* Enables the attributes-based access control (ABAC) feature for the specified
|
43
|
+
* Enables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide. After a successful response, call DescribeInstanceAccessControlAttributeConfiguration to validate that InstanceAccessControlAttributeConfiguration was created.
|
44
44
|
*/
|
45
45
|
createInstanceAccessControlAttributeConfiguration(callback?: (err: AWSError, data: SSOAdmin.Types.CreateInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.CreateInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
46
46
|
/**
|
47
|
-
* Creates a permission set within a specified
|
47
|
+
* Creates a permission set within a specified IAM Identity Center instance. To grant users and groups access to AWS account resources, use CreateAccountAssignment .
|
48
48
|
*/
|
49
49
|
createPermissionSet(params: SSOAdmin.Types.CreatePermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.CreatePermissionSetResponse) => void): Request<SSOAdmin.Types.CreatePermissionSetResponse, AWSError>;
|
50
50
|
/**
|
51
|
-
* Creates a permission set within a specified
|
51
|
+
* Creates a permission set within a specified IAM Identity Center instance. To grant users and groups access to AWS account resources, use CreateAccountAssignment .
|
52
52
|
*/
|
53
53
|
createPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.CreatePermissionSetResponse) => void): Request<SSOAdmin.Types.CreatePermissionSetResponse, AWSError>;
|
54
54
|
/**
|
55
|
-
* Deletes a principal's access from a specified
|
55
|
+
* Deletes a principal's access from a specified AWS account using a specified permission set. After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment deletion request.
|
56
56
|
*/
|
57
57
|
deleteAccountAssignment(params: SSOAdmin.Types.DeleteAccountAssignmentRequest, callback?: (err: AWSError, data: SSOAdmin.Types.DeleteAccountAssignmentResponse) => void): Request<SSOAdmin.Types.DeleteAccountAssignmentResponse, AWSError>;
|
58
58
|
/**
|
59
|
-
* Deletes a principal's access from a specified
|
59
|
+
* Deletes a principal's access from a specified AWS account using a specified permission set. After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment deletion request.
|
60
60
|
*/
|
61
61
|
deleteAccountAssignment(callback?: (err: AWSError, data: SSOAdmin.Types.DeleteAccountAssignmentResponse) => void): Request<SSOAdmin.Types.DeleteAccountAssignmentResponse, AWSError>;
|
62
62
|
/**
|
@@ -68,11 +68,11 @@ declare class SSOAdmin extends Service {
|
|
68
68
|
*/
|
69
69
|
deleteInlinePolicyFromPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.DeleteInlinePolicyFromPermissionSetResponse) => void): Request<SSOAdmin.Types.DeleteInlinePolicyFromPermissionSetResponse, AWSError>;
|
70
70
|
/**
|
71
|
-
* Disables the attributes-based access control (ABAC) feature for the specified
|
71
|
+
* Disables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance and deletes all of the attribute mappings that have been configured. Once deleted, any attributes that are received from an identity source and any custom attributes you have previously configured will not be passed. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
72
72
|
*/
|
73
73
|
deleteInstanceAccessControlAttributeConfiguration(params: SSOAdmin.Types.DeleteInstanceAccessControlAttributeConfigurationRequest, callback?: (err: AWSError, data: SSOAdmin.Types.DeleteInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.DeleteInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
74
74
|
/**
|
75
|
-
* Disables the attributes-based access control (ABAC) feature for the specified
|
75
|
+
* Disables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance and deletes all of the attribute mappings that have been configured. Once deleted, any attributes that are received from an identity source and any custom attributes you have previously configured will not be passed. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
76
76
|
*/
|
77
77
|
deleteInstanceAccessControlAttributeConfiguration(callback?: (err: AWSError, data: SSOAdmin.Types.DeleteInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.DeleteInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
78
78
|
/**
|
@@ -108,11 +108,11 @@ declare class SSOAdmin extends Service {
|
|
108
108
|
*/
|
109
109
|
describeAccountAssignmentDeletionStatus(callback?: (err: AWSError, data: SSOAdmin.Types.DescribeAccountAssignmentDeletionStatusResponse) => void): Request<SSOAdmin.Types.DescribeAccountAssignmentDeletionStatusResponse, AWSError>;
|
110
110
|
/**
|
111
|
-
* Returns the list of
|
111
|
+
* Returns the list of IAM Identity Center identity store attributes that have been configured to work with attributes-based access control (ABAC) for the specified IAM Identity Center instance. This will not return attributes configured and sent by an external identity provider. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
112
112
|
*/
|
113
113
|
describeInstanceAccessControlAttributeConfiguration(params: SSOAdmin.Types.DescribeInstanceAccessControlAttributeConfigurationRequest, callback?: (err: AWSError, data: SSOAdmin.Types.DescribeInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.DescribeInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
114
114
|
/**
|
115
|
-
* Returns the list of
|
115
|
+
* Returns the list of IAM Identity Center identity store attributes that have been configured to work with attributes-based access control (ABAC) for the specified IAM Identity Center instance. This will not return attributes configured and sent by an external identity provider. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
116
116
|
*/
|
117
117
|
describeInstanceAccessControlAttributeConfiguration(callback?: (err: AWSError, data: SSOAdmin.Types.DescribeInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.DescribeInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
118
118
|
/**
|
@@ -140,11 +140,11 @@ declare class SSOAdmin extends Service {
|
|
140
140
|
*/
|
141
141
|
detachCustomerManagedPolicyReferenceFromPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.DetachCustomerManagedPolicyReferenceFromPermissionSetResponse) => void): Request<SSOAdmin.Types.DetachCustomerManagedPolicyReferenceFromPermissionSetResponse, AWSError>;
|
142
142
|
/**
|
143
|
-
* Detaches the attached
|
143
|
+
* Detaches the attached AWS managed policy ARN from the specified permission set.
|
144
144
|
*/
|
145
145
|
detachManagedPolicyFromPermissionSet(params: SSOAdmin.Types.DetachManagedPolicyFromPermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.DetachManagedPolicyFromPermissionSetResponse) => void): Request<SSOAdmin.Types.DetachManagedPolicyFromPermissionSetResponse, AWSError>;
|
146
146
|
/**
|
147
|
-
* Detaches the attached
|
147
|
+
* Detaches the attached AWS managed policy ARN from the specified permission set.
|
148
148
|
*/
|
149
149
|
detachManagedPolicyFromPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.DetachManagedPolicyFromPermissionSetResponse) => void): Request<SSOAdmin.Types.DetachManagedPolicyFromPermissionSetResponse, AWSError>;
|
150
150
|
/**
|
@@ -164,35 +164,35 @@ declare class SSOAdmin extends Service {
|
|
164
164
|
*/
|
165
165
|
getPermissionsBoundaryForPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.GetPermissionsBoundaryForPermissionSetResponse) => void): Request<SSOAdmin.Types.GetPermissionsBoundaryForPermissionSetResponse, AWSError>;
|
166
166
|
/**
|
167
|
-
* Lists the status of the
|
167
|
+
* Lists the status of the AWS account assignment creation requests for a specified IAM Identity Center instance.
|
168
168
|
*/
|
169
169
|
listAccountAssignmentCreationStatus(params: SSOAdmin.Types.ListAccountAssignmentCreationStatusRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentCreationStatusResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentCreationStatusResponse, AWSError>;
|
170
170
|
/**
|
171
|
-
* Lists the status of the
|
171
|
+
* Lists the status of the AWS account assignment creation requests for a specified IAM Identity Center instance.
|
172
172
|
*/
|
173
173
|
listAccountAssignmentCreationStatus(callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentCreationStatusResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentCreationStatusResponse, AWSError>;
|
174
174
|
/**
|
175
|
-
* Lists the status of the
|
175
|
+
* Lists the status of the AWS account assignment deletion requests for a specified IAM Identity Center instance.
|
176
176
|
*/
|
177
177
|
listAccountAssignmentDeletionStatus(params: SSOAdmin.Types.ListAccountAssignmentDeletionStatusRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentDeletionStatusResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentDeletionStatusResponse, AWSError>;
|
178
178
|
/**
|
179
|
-
* Lists the status of the
|
179
|
+
* Lists the status of the AWS account assignment deletion requests for a specified IAM Identity Center instance.
|
180
180
|
*/
|
181
181
|
listAccountAssignmentDeletionStatus(callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentDeletionStatusResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentDeletionStatusResponse, AWSError>;
|
182
182
|
/**
|
183
|
-
* Lists the assignee of the specified
|
183
|
+
* Lists the assignee of the specified AWS account with the specified permission set.
|
184
184
|
*/
|
185
185
|
listAccountAssignments(params: SSOAdmin.Types.ListAccountAssignmentsRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentsResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentsResponse, AWSError>;
|
186
186
|
/**
|
187
|
-
* Lists the assignee of the specified
|
187
|
+
* Lists the assignee of the specified AWS account with the specified permission set.
|
188
188
|
*/
|
189
189
|
listAccountAssignments(callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountAssignmentsResponse) => void): Request<SSOAdmin.Types.ListAccountAssignmentsResponse, AWSError>;
|
190
190
|
/**
|
191
|
-
* Lists all the
|
191
|
+
* Lists all the AWS accounts where the specified permission set is provisioned.
|
192
192
|
*/
|
193
193
|
listAccountsForProvisionedPermissionSet(params: SSOAdmin.Types.ListAccountsForProvisionedPermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountsForProvisionedPermissionSetResponse) => void): Request<SSOAdmin.Types.ListAccountsForProvisionedPermissionSetResponse, AWSError>;
|
194
194
|
/**
|
195
|
-
* Lists all the
|
195
|
+
* Lists all the AWS accounts where the specified permission set is provisioned.
|
196
196
|
*/
|
197
197
|
listAccountsForProvisionedPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.ListAccountsForProvisionedPermissionSetResponse) => void): Request<SSOAdmin.Types.ListAccountsForProvisionedPermissionSetResponse, AWSError>;
|
198
198
|
/**
|
@@ -204,43 +204,43 @@ declare class SSOAdmin extends Service {
|
|
204
204
|
*/
|
205
205
|
listCustomerManagedPolicyReferencesInPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.ListCustomerManagedPolicyReferencesInPermissionSetResponse) => void): Request<SSOAdmin.Types.ListCustomerManagedPolicyReferencesInPermissionSetResponse, AWSError>;
|
206
206
|
/**
|
207
|
-
* Lists the
|
207
|
+
* Lists the IAM Identity Center instances that the caller has access to.
|
208
208
|
*/
|
209
209
|
listInstances(params: SSOAdmin.Types.ListInstancesRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListInstancesResponse) => void): Request<SSOAdmin.Types.ListInstancesResponse, AWSError>;
|
210
210
|
/**
|
211
|
-
* Lists the
|
211
|
+
* Lists the IAM Identity Center instances that the caller has access to.
|
212
212
|
*/
|
213
213
|
listInstances(callback?: (err: AWSError, data: SSOAdmin.Types.ListInstancesResponse) => void): Request<SSOAdmin.Types.ListInstancesResponse, AWSError>;
|
214
214
|
/**
|
215
|
-
* Lists the
|
215
|
+
* Lists the AWS managed policy that is attached to a specified permission set.
|
216
216
|
*/
|
217
217
|
listManagedPoliciesInPermissionSet(params: SSOAdmin.Types.ListManagedPoliciesInPermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListManagedPoliciesInPermissionSetResponse) => void): Request<SSOAdmin.Types.ListManagedPoliciesInPermissionSetResponse, AWSError>;
|
218
218
|
/**
|
219
|
-
* Lists the
|
219
|
+
* Lists the AWS managed policy that is attached to a specified permission set.
|
220
220
|
*/
|
221
221
|
listManagedPoliciesInPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.ListManagedPoliciesInPermissionSetResponse) => void): Request<SSOAdmin.Types.ListManagedPoliciesInPermissionSetResponse, AWSError>;
|
222
222
|
/**
|
223
|
-
* Lists the status of the permission set provisioning requests for a specified
|
223
|
+
* Lists the status of the permission set provisioning requests for a specified IAM Identity Center instance.
|
224
224
|
*/
|
225
225
|
listPermissionSetProvisioningStatus(params: SSOAdmin.Types.ListPermissionSetProvisioningStatusRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetProvisioningStatusResponse) => void): Request<SSOAdmin.Types.ListPermissionSetProvisioningStatusResponse, AWSError>;
|
226
226
|
/**
|
227
|
-
* Lists the status of the permission set provisioning requests for a specified
|
227
|
+
* Lists the status of the permission set provisioning requests for a specified IAM Identity Center instance.
|
228
228
|
*/
|
229
229
|
listPermissionSetProvisioningStatus(callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetProvisioningStatusResponse) => void): Request<SSOAdmin.Types.ListPermissionSetProvisioningStatusResponse, AWSError>;
|
230
230
|
/**
|
231
|
-
* Lists the PermissionSets in an
|
231
|
+
* Lists the PermissionSets in an IAM Identity Center instance.
|
232
232
|
*/
|
233
233
|
listPermissionSets(params: SSOAdmin.Types.ListPermissionSetsRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetsResponse) => void): Request<SSOAdmin.Types.ListPermissionSetsResponse, AWSError>;
|
234
234
|
/**
|
235
|
-
* Lists the PermissionSets in an
|
235
|
+
* Lists the PermissionSets in an IAM Identity Center instance.
|
236
236
|
*/
|
237
237
|
listPermissionSets(callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetsResponse) => void): Request<SSOAdmin.Types.ListPermissionSetsResponse, AWSError>;
|
238
238
|
/**
|
239
|
-
* Lists all the permission sets that are provisioned to a specified
|
239
|
+
* Lists all the permission sets that are provisioned to a specified AWS account.
|
240
240
|
*/
|
241
241
|
listPermissionSetsProvisionedToAccount(params: SSOAdmin.Types.ListPermissionSetsProvisionedToAccountRequest, callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetsProvisionedToAccountResponse) => void): Request<SSOAdmin.Types.ListPermissionSetsProvisionedToAccountResponse, AWSError>;
|
242
242
|
/**
|
243
|
-
* Lists all the permission sets that are provisioned to a specified
|
243
|
+
* Lists all the permission sets that are provisioned to a specified AWS account.
|
244
244
|
*/
|
245
245
|
listPermissionSetsProvisionedToAccount(callback?: (err: AWSError, data: SSOAdmin.Types.ListPermissionSetsProvisionedToAccountResponse) => void): Request<SSOAdmin.Types.ListPermissionSetsProvisionedToAccountResponse, AWSError>;
|
246
246
|
/**
|
@@ -268,11 +268,11 @@ declare class SSOAdmin extends Service {
|
|
268
268
|
*/
|
269
269
|
putInlinePolicyToPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.PutInlinePolicyToPermissionSetResponse) => void): Request<SSOAdmin.Types.PutInlinePolicyToPermissionSetResponse, AWSError>;
|
270
270
|
/**
|
271
|
-
* Attaches an
|
271
|
+
* Attaches an AWS managed or customer managed policy to the specified PermissionSet as a permissions boundary.
|
272
272
|
*/
|
273
273
|
putPermissionsBoundaryToPermissionSet(params: SSOAdmin.Types.PutPermissionsBoundaryToPermissionSetRequest, callback?: (err: AWSError, data: SSOAdmin.Types.PutPermissionsBoundaryToPermissionSetResponse) => void): Request<SSOAdmin.Types.PutPermissionsBoundaryToPermissionSetResponse, AWSError>;
|
274
274
|
/**
|
275
|
-
* Attaches an
|
275
|
+
* Attaches an AWS managed or customer managed policy to the specified PermissionSet as a permissions boundary.
|
276
276
|
*/
|
277
277
|
putPermissionsBoundaryToPermissionSet(callback?: (err: AWSError, data: SSOAdmin.Types.PutPermissionsBoundaryToPermissionSetResponse) => void): Request<SSOAdmin.Types.PutPermissionsBoundaryToPermissionSetResponse, AWSError>;
|
278
278
|
/**
|
@@ -292,11 +292,11 @@ declare class SSOAdmin extends Service {
|
|
292
292
|
*/
|
293
293
|
untagResource(callback?: (err: AWSError, data: SSOAdmin.Types.UntagResourceResponse) => void): Request<SSOAdmin.Types.UntagResourceResponse, AWSError>;
|
294
294
|
/**
|
295
|
-
* Updates the
|
295
|
+
* Updates the IAM Identity Center identity store attributes that you can use with the IAM Identity Center instance for attributes-based access control (ABAC). When using an external identity provider as an identity source, you can pass attributes through the SAML assertion as an alternative to configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of these attributes, IAM Identity Center replaces the attribute value with the value from the IAM Identity Center identity store. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
296
296
|
*/
|
297
297
|
updateInstanceAccessControlAttributeConfiguration(params: SSOAdmin.Types.UpdateInstanceAccessControlAttributeConfigurationRequest, callback?: (err: AWSError, data: SSOAdmin.Types.UpdateInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.UpdateInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
298
298
|
/**
|
299
|
-
* Updates the
|
299
|
+
* Updates the IAM Identity Center identity store attributes that you can use with the IAM Identity Center instance for attributes-based access control (ABAC). When using an external identity provider as an identity source, you can pass attributes through the SAML assertion as an alternative to configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of these attributes, IAM Identity Center replaces the attribute value with the value from the IAM Identity Center identity store. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.
|
300
300
|
*/
|
301
301
|
updateInstanceAccessControlAttributeConfiguration(callback?: (err: AWSError, data: SSOAdmin.Types.UpdateInstanceAccessControlAttributeConfigurationResponse) => void): Request<SSOAdmin.Types.UpdateInstanceAccessControlAttributeConfigurationResponse, AWSError>;
|
302
302
|
/**
|
@@ -311,7 +311,7 @@ declare class SSOAdmin extends Service {
|
|
311
311
|
declare namespace SSOAdmin {
|
312
312
|
export interface AccessControlAttribute {
|
313
313
|
/**
|
314
|
-
* The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in
|
314
|
+
* The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in IAM Identity Center.
|
315
315
|
*/
|
316
316
|
Key: AccessControlAttributeKey;
|
317
317
|
/**
|
@@ -323,7 +323,7 @@ declare namespace SSOAdmin {
|
|
323
323
|
export type AccessControlAttributeList = AccessControlAttribute[];
|
324
324
|
export interface AccessControlAttributeValue {
|
325
325
|
/**
|
326
|
-
* The identity source to use when mapping a specified attribute to
|
326
|
+
* The identity source to use when mapping a specified attribute to IAM Identity Center.
|
327
327
|
*/
|
328
328
|
Source: AccessControlAttributeValueSourceList;
|
329
329
|
}
|
@@ -331,11 +331,11 @@ declare namespace SSOAdmin {
|
|
331
331
|
export type AccessControlAttributeValueSourceList = AccessControlAttributeValueSource[];
|
332
332
|
export interface AccountAssignment {
|
333
333
|
/**
|
334
|
-
* The identifier of the
|
334
|
+
* The identifier of the AWS account.
|
335
335
|
*/
|
336
336
|
AccountId?: AccountId;
|
337
337
|
/**
|
338
|
-
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and
|
338
|
+
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
339
339
|
*/
|
340
340
|
PermissionSetArn?: PermissionSetArn;
|
341
341
|
/**
|
@@ -343,7 +343,7 @@ declare namespace SSOAdmin {
|
|
343
343
|
*/
|
344
344
|
PrincipalType?: PrincipalType;
|
345
345
|
/**
|
346
|
-
* An identifier for an object in
|
346
|
+
* An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.
|
347
347
|
*/
|
348
348
|
PrincipalId?: PrincipalId;
|
349
349
|
}
|
@@ -362,7 +362,7 @@ declare namespace SSOAdmin {
|
|
362
362
|
*/
|
363
363
|
FailureReason?: Reason;
|
364
364
|
/**
|
365
|
-
* TargetID is an
|
365
|
+
* TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).
|
366
366
|
*/
|
367
367
|
TargetId?: TargetId;
|
368
368
|
/**
|
@@ -370,7 +370,7 @@ declare namespace SSOAdmin {
|
|
370
370
|
*/
|
371
371
|
TargetType?: TargetType;
|
372
372
|
/**
|
373
|
-
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and
|
373
|
+
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
374
374
|
*/
|
375
375
|
PermissionSetArn?: PermissionSetArn;
|
376
376
|
/**
|
@@ -378,7 +378,7 @@ declare namespace SSOAdmin {
|
|
378
378
|
*/
|
379
379
|
PrincipalType?: PrincipalType;
|
380
380
|
/**
|
381
|
-
* An identifier for an object in
|
381
|
+
* An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.
|
382
382
|
*/
|
383
383
|
PrincipalId?: PrincipalId;
|
384
384
|
/**
|
@@ -405,7 +405,7 @@ declare namespace SSOAdmin {
|
|
405
405
|
export type AccountList = AccountId[];
|
406
406
|
export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
|
407
407
|
/**
|
408
|
-
* The ARN of the
|
408
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
409
409
|
*/
|
410
410
|
InstanceArn: InstanceArn;
|
411
411
|
/**
|
@@ -413,7 +413,7 @@ declare namespace SSOAdmin {
|
|
413
413
|
*/
|
414
414
|
PermissionSetArn: PermissionSetArn;
|
415
415
|
/**
|
416
|
-
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each
|
416
|
+
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.
|
417
417
|
*/
|
418
418
|
CustomerManagedPolicyReference: CustomerManagedPolicyReference;
|
419
419
|
}
|
@@ -421,7 +421,7 @@ declare namespace SSOAdmin {
|
|
421
421
|
}
|
422
422
|
export interface AttachManagedPolicyToPermissionSetRequest {
|
423
423
|
/**
|
424
|
-
* The ARN of the
|
424
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
425
425
|
*/
|
426
426
|
InstanceArn: InstanceArn;
|
427
427
|
/**
|
@@ -429,7 +429,7 @@ declare namespace SSOAdmin {
|
|
429
429
|
*/
|
430
430
|
PermissionSetArn: PermissionSetArn;
|
431
431
|
/**
|
432
|
-
* The
|
432
|
+
* The AWS managed policy ARN to be attached to a permission set.
|
433
433
|
*/
|
434
434
|
ManagedPolicyArn: ManagedPolicyArn;
|
435
435
|
}
|
@@ -437,22 +437,22 @@ declare namespace SSOAdmin {
|
|
437
437
|
}
|
438
438
|
export interface AttachedManagedPolicy {
|
439
439
|
/**
|
440
|
-
* The name of the
|
440
|
+
* The name of the AWS managed policy.
|
441
441
|
*/
|
442
442
|
Name?: Name;
|
443
443
|
/**
|
444
|
-
* The ARN of the
|
444
|
+
* The ARN of the AWS managed policy. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
445
445
|
*/
|
446
446
|
Arn?: ManagedPolicyArn;
|
447
447
|
}
|
448
448
|
export type AttachedManagedPolicyList = AttachedManagedPolicy[];
|
449
449
|
export interface CreateAccountAssignmentRequest {
|
450
450
|
/**
|
451
|
-
* The ARN of the
|
451
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
452
452
|
*/
|
453
453
|
InstanceArn: InstanceArn;
|
454
454
|
/**
|
455
|
-
* TargetID is an
|
455
|
+
* TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).
|
456
456
|
*/
|
457
457
|
TargetId: TargetId;
|
458
458
|
/**
|
@@ -468,7 +468,7 @@ declare namespace SSOAdmin {
|
|
468
468
|
*/
|
469
469
|
PrincipalType: PrincipalType;
|
470
470
|
/**
|
471
|
-
* An identifier for an object in
|
471
|
+
* An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.
|
472
472
|
*/
|
473
473
|
PrincipalId: PrincipalId;
|
474
474
|
}
|
@@ -480,11 +480,11 @@ declare namespace SSOAdmin {
|
|
480
480
|
}
|
481
481
|
export interface CreateInstanceAccessControlAttributeConfigurationRequest {
|
482
482
|
/**
|
483
|
-
* The ARN of the
|
483
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
484
484
|
*/
|
485
485
|
InstanceArn: InstanceArn;
|
486
486
|
/**
|
487
|
-
* Specifies the
|
487
|
+
* Specifies the IAM Identity Center identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion. Doing so provides an alternative to configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of these attributes, IAM Identity Center will replace the attribute value with the value from the IAM Identity Center identity store.
|
488
488
|
*/
|
489
489
|
InstanceAccessControlAttributeConfiguration: InstanceAccessControlAttributeConfiguration;
|
490
490
|
}
|
@@ -500,7 +500,7 @@ declare namespace SSOAdmin {
|
|
500
500
|
*/
|
501
501
|
Description?: PermissionSetDescription;
|
502
502
|
/**
|
503
|
-
* The ARN of the
|
503
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
504
504
|
*/
|
505
505
|
InstanceArn: InstanceArn;
|
506
506
|
/**
|
@@ -518,7 +518,7 @@ declare namespace SSOAdmin {
|
|
518
518
|
}
|
519
519
|
export interface CreatePermissionSetResponse {
|
520
520
|
/**
|
521
|
-
* Defines the level of access on an
|
521
|
+
* Defines the level of access on an AWS account.
|
522
522
|
*/
|
523
523
|
PermissionSet?: PermissionSet;
|
524
524
|
}
|
@@ -528,7 +528,7 @@ declare namespace SSOAdmin {
|
|
528
528
|
*/
|
529
529
|
Name: ManagedPolicyName;
|
530
530
|
/**
|
531
|
-
* The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is /. For more information, see Friendly names and paths in the
|
531
|
+
* The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is /. For more information, see Friendly names and paths in the IAM User Guide.
|
532
532
|
*/
|
533
533
|
Path?: ManagedPolicyPath;
|
534
534
|
}
|
@@ -536,11 +536,11 @@ declare namespace SSOAdmin {
|
|
536
536
|
export type _Date = Date;
|
537
537
|
export interface DeleteAccountAssignmentRequest {
|
538
538
|
/**
|
539
|
-
* The ARN of the
|
539
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
540
540
|
*/
|
541
541
|
InstanceArn: InstanceArn;
|
542
542
|
/**
|
543
|
-
* TargetID is an
|
543
|
+
* TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).
|
544
544
|
*/
|
545
545
|
TargetId: TargetId;
|
546
546
|
/**
|
@@ -556,7 +556,7 @@ declare namespace SSOAdmin {
|
|
556
556
|
*/
|
557
557
|
PrincipalType: PrincipalType;
|
558
558
|
/**
|
559
|
-
* An identifier for an object in
|
559
|
+
* An identifier for an object in IAM Identity Center, such as a user or group. PrincipalIds are GUIDs (For example, f81d4fae-7dec-11d0-a765-00a0c91e6bf6). For more information about PrincipalIds in IAM Identity Center, see the IAM Identity Center Identity Store API Reference.
|
560
560
|
*/
|
561
561
|
PrincipalId: PrincipalId;
|
562
562
|
}
|
@@ -568,7 +568,7 @@ declare namespace SSOAdmin {
|
|
568
568
|
}
|
569
569
|
export interface DeleteInlinePolicyFromPermissionSetRequest {
|
570
570
|
/**
|
571
|
-
* The ARN of the
|
571
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
572
572
|
*/
|
573
573
|
InstanceArn: InstanceArn;
|
574
574
|
/**
|
@@ -580,7 +580,7 @@ declare namespace SSOAdmin {
|
|
580
580
|
}
|
581
581
|
export interface DeleteInstanceAccessControlAttributeConfigurationRequest {
|
582
582
|
/**
|
583
|
-
* The ARN of the
|
583
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
584
584
|
*/
|
585
585
|
InstanceArn: InstanceArn;
|
586
586
|
}
|
@@ -588,7 +588,7 @@ declare namespace SSOAdmin {
|
|
588
588
|
}
|
589
589
|
export interface DeletePermissionSetRequest {
|
590
590
|
/**
|
591
|
-
* The ARN of the
|
591
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
592
592
|
*/
|
593
593
|
InstanceArn: InstanceArn;
|
594
594
|
/**
|
@@ -600,7 +600,7 @@ declare namespace SSOAdmin {
|
|
600
600
|
}
|
601
601
|
export interface DeletePermissionsBoundaryFromPermissionSetRequest {
|
602
602
|
/**
|
603
|
-
* The ARN of the
|
603
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
604
604
|
*/
|
605
605
|
InstanceArn: InstanceArn;
|
606
606
|
/**
|
@@ -612,7 +612,7 @@ declare namespace SSOAdmin {
|
|
612
612
|
}
|
613
613
|
export interface DescribeAccountAssignmentCreationStatusRequest {
|
614
614
|
/**
|
615
|
-
* The ARN of the
|
615
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
616
616
|
*/
|
617
617
|
InstanceArn: InstanceArn;
|
618
618
|
/**
|
@@ -628,7 +628,7 @@ declare namespace SSOAdmin {
|
|
628
628
|
}
|
629
629
|
export interface DescribeAccountAssignmentDeletionStatusRequest {
|
630
630
|
/**
|
631
|
-
* The ARN of the
|
631
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
632
632
|
*/
|
633
633
|
InstanceArn: InstanceArn;
|
634
634
|
/**
|
@@ -644,7 +644,7 @@ declare namespace SSOAdmin {
|
|
644
644
|
}
|
645
645
|
export interface DescribeInstanceAccessControlAttributeConfigurationRequest {
|
646
646
|
/**
|
647
|
-
* The ARN of the
|
647
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
648
648
|
*/
|
649
649
|
InstanceArn: InstanceArn;
|
650
650
|
}
|
@@ -658,13 +658,13 @@ declare namespace SSOAdmin {
|
|
658
658
|
*/
|
659
659
|
StatusReason?: InstanceAccessControlAttributeConfigurationStatusReason;
|
660
660
|
/**
|
661
|
-
* Gets the list of
|
661
|
+
* Gets the list of IAM Identity Center identity store attributes that have been added to your ABAC configuration.
|
662
662
|
*/
|
663
663
|
InstanceAccessControlAttributeConfiguration?: InstanceAccessControlAttributeConfiguration;
|
664
664
|
}
|
665
665
|
export interface DescribePermissionSetProvisioningStatusRequest {
|
666
666
|
/**
|
667
|
-
* The ARN of the
|
667
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
668
668
|
*/
|
669
669
|
InstanceArn: InstanceArn;
|
670
670
|
/**
|
@@ -680,7 +680,7 @@ declare namespace SSOAdmin {
|
|
680
680
|
}
|
681
681
|
export interface DescribePermissionSetRequest {
|
682
682
|
/**
|
683
|
-
* The ARN of the
|
683
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
684
684
|
*/
|
685
685
|
InstanceArn: InstanceArn;
|
686
686
|
/**
|
@@ -690,13 +690,13 @@ declare namespace SSOAdmin {
|
|
690
690
|
}
|
691
691
|
export interface DescribePermissionSetResponse {
|
692
692
|
/**
|
693
|
-
* Describes the level of access on an
|
693
|
+
* Describes the level of access on an AWS account.
|
694
694
|
*/
|
695
695
|
PermissionSet?: PermissionSet;
|
696
696
|
}
|
697
697
|
export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
|
698
698
|
/**
|
699
|
-
* The ARN of the
|
699
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
700
700
|
*/
|
701
701
|
InstanceArn: InstanceArn;
|
702
702
|
/**
|
@@ -704,7 +704,7 @@ declare namespace SSOAdmin {
|
|
704
704
|
*/
|
705
705
|
PermissionSetArn: PermissionSetArn;
|
706
706
|
/**
|
707
|
-
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each
|
707
|
+
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.
|
708
708
|
*/
|
709
709
|
CustomerManagedPolicyReference: CustomerManagedPolicyReference;
|
710
710
|
}
|
@@ -712,7 +712,7 @@ declare namespace SSOAdmin {
|
|
712
712
|
}
|
713
713
|
export interface DetachManagedPolicyFromPermissionSetRequest {
|
714
714
|
/**
|
715
|
-
* The ARN of the
|
715
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
716
716
|
*/
|
717
717
|
InstanceArn: InstanceArn;
|
718
718
|
/**
|
@@ -720,7 +720,7 @@ declare namespace SSOAdmin {
|
|
720
720
|
*/
|
721
721
|
PermissionSetArn: PermissionSetArn;
|
722
722
|
/**
|
723
|
-
* The
|
723
|
+
* The AWS managed policy ARN to be detached from a permission set.
|
724
724
|
*/
|
725
725
|
ManagedPolicyArn: ManagedPolicyArn;
|
726
726
|
}
|
@@ -729,7 +729,7 @@ declare namespace SSOAdmin {
|
|
729
729
|
export type Duration = string;
|
730
730
|
export interface GetInlinePolicyForPermissionSetRequest {
|
731
731
|
/**
|
732
|
-
* The ARN of the
|
732
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
733
733
|
*/
|
734
734
|
InstanceArn: InstanceArn;
|
735
735
|
/**
|
@@ -745,7 +745,7 @@ declare namespace SSOAdmin {
|
|
745
745
|
}
|
746
746
|
export interface GetPermissionsBoundaryForPermissionSetRequest {
|
747
747
|
/**
|
748
|
-
* The ARN of the
|
748
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
749
749
|
*/
|
750
750
|
InstanceArn: InstanceArn;
|
751
751
|
/**
|
@@ -762,7 +762,7 @@ declare namespace SSOAdmin {
|
|
762
762
|
export type Id = string;
|
763
763
|
export interface InstanceAccessControlAttributeConfiguration {
|
764
764
|
/**
|
765
|
-
* Lists the attributes that are configured for ABAC in the specified
|
765
|
+
* Lists the attributes that are configured for ABAC in the specified IAM Identity Center instance.
|
766
766
|
*/
|
767
767
|
AccessControlAttributes: AccessControlAttributeList;
|
768
768
|
}
|
@@ -772,17 +772,17 @@ declare namespace SSOAdmin {
|
|
772
772
|
export type InstanceList = InstanceMetadata[];
|
773
773
|
export interface InstanceMetadata {
|
774
774
|
/**
|
775
|
-
* The ARN of the
|
775
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
776
776
|
*/
|
777
777
|
InstanceArn?: InstanceArn;
|
778
778
|
/**
|
779
|
-
* The identifier of the identity store that is connected to the
|
779
|
+
* The identifier of the identity store that is connected to the IAM Identity Center instance.
|
780
780
|
*/
|
781
781
|
IdentityStoreId?: Id;
|
782
782
|
}
|
783
783
|
export interface ListAccountAssignmentCreationStatusRequest {
|
784
784
|
/**
|
785
|
-
* The ARN of the
|
785
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
786
786
|
*/
|
787
787
|
InstanceArn: InstanceArn;
|
788
788
|
/**
|
@@ -810,7 +810,7 @@ declare namespace SSOAdmin {
|
|
810
810
|
}
|
811
811
|
export interface ListAccountAssignmentDeletionStatusRequest {
|
812
812
|
/**
|
813
|
-
* The ARN of the
|
813
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
814
814
|
*/
|
815
815
|
InstanceArn: InstanceArn;
|
816
816
|
/**
|
@@ -838,11 +838,11 @@ declare namespace SSOAdmin {
|
|
838
838
|
}
|
839
839
|
export interface ListAccountAssignmentsRequest {
|
840
840
|
/**
|
841
|
-
* The ARN of the
|
841
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
842
842
|
*/
|
843
843
|
InstanceArn: InstanceArn;
|
844
844
|
/**
|
845
|
-
* The identifier of the
|
845
|
+
* The identifier of the AWS account from which to list the assignments.
|
846
846
|
*/
|
847
847
|
AccountId: TargetId;
|
848
848
|
/**
|
@@ -860,7 +860,7 @@ declare namespace SSOAdmin {
|
|
860
860
|
}
|
861
861
|
export interface ListAccountAssignmentsResponse {
|
862
862
|
/**
|
863
|
-
* The list of assignments that match the input
|
863
|
+
* The list of assignments that match the input AWS account and permission set.
|
864
864
|
*/
|
865
865
|
AccountAssignments?: AccountAssignmentList;
|
866
866
|
/**
|
@@ -870,15 +870,15 @@ declare namespace SSOAdmin {
|
|
870
870
|
}
|
871
871
|
export interface ListAccountsForProvisionedPermissionSetRequest {
|
872
872
|
/**
|
873
|
-
* The ARN of the
|
873
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
874
874
|
*/
|
875
875
|
InstanceArn: InstanceArn;
|
876
876
|
/**
|
877
|
-
* The ARN of the PermissionSet from which the associated
|
877
|
+
* The ARN of the PermissionSet from which the associated AWS accounts will be listed.
|
878
878
|
*/
|
879
879
|
PermissionSetArn: PermissionSetArn;
|
880
880
|
/**
|
881
|
-
* The permission set provisioning status for an
|
881
|
+
* The permission set provisioning status for an AWS account.
|
882
882
|
*/
|
883
883
|
ProvisioningStatus?: ProvisioningStatus;
|
884
884
|
/**
|
@@ -892,7 +892,7 @@ declare namespace SSOAdmin {
|
|
892
892
|
}
|
893
893
|
export interface ListAccountsForProvisionedPermissionSetResponse {
|
894
894
|
/**
|
895
|
-
* The list of
|
895
|
+
* The list of AWS AccountIds.
|
896
896
|
*/
|
897
897
|
AccountIds?: AccountList;
|
898
898
|
/**
|
@@ -902,7 +902,7 @@ declare namespace SSOAdmin {
|
|
902
902
|
}
|
903
903
|
export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
|
904
904
|
/**
|
905
|
-
* The ARN of the
|
905
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
906
906
|
*/
|
907
907
|
InstanceArn: InstanceArn;
|
908
908
|
/**
|
@@ -940,7 +940,7 @@ declare namespace SSOAdmin {
|
|
940
940
|
}
|
941
941
|
export interface ListInstancesResponse {
|
942
942
|
/**
|
943
|
-
* Lists the
|
943
|
+
* Lists the IAM Identity Center instances that the caller has access to.
|
944
944
|
*/
|
945
945
|
Instances?: InstanceList;
|
946
946
|
/**
|
@@ -950,7 +950,7 @@ declare namespace SSOAdmin {
|
|
950
950
|
}
|
951
951
|
export interface ListManagedPoliciesInPermissionSetRequest {
|
952
952
|
/**
|
953
|
-
* The ARN of the
|
953
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
954
954
|
*/
|
955
955
|
InstanceArn: InstanceArn;
|
956
956
|
/**
|
@@ -978,7 +978,7 @@ declare namespace SSOAdmin {
|
|
978
978
|
}
|
979
979
|
export interface ListPermissionSetProvisioningStatusRequest {
|
980
980
|
/**
|
981
|
-
* The ARN of the
|
981
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
982
982
|
*/
|
983
983
|
InstanceArn: InstanceArn;
|
984
984
|
/**
|
@@ -1006,11 +1006,11 @@ declare namespace SSOAdmin {
|
|
1006
1006
|
}
|
1007
1007
|
export interface ListPermissionSetsProvisionedToAccountRequest {
|
1008
1008
|
/**
|
1009
|
-
* The ARN of the
|
1009
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1010
1010
|
*/
|
1011
1011
|
InstanceArn: InstanceArn;
|
1012
1012
|
/**
|
1013
|
-
* The identifier of the
|
1013
|
+
* The identifier of the AWS account from which to list the assignments.
|
1014
1014
|
*/
|
1015
1015
|
AccountId: AccountId;
|
1016
1016
|
/**
|
@@ -1032,13 +1032,13 @@ declare namespace SSOAdmin {
|
|
1032
1032
|
*/
|
1033
1033
|
NextToken?: Token;
|
1034
1034
|
/**
|
1035
|
-
* Defines the level of access that an
|
1035
|
+
* Defines the level of access that an AWS account has.
|
1036
1036
|
*/
|
1037
1037
|
PermissionSets?: PermissionSetList;
|
1038
1038
|
}
|
1039
1039
|
export interface ListPermissionSetsRequest {
|
1040
1040
|
/**
|
1041
|
-
* The ARN of the
|
1041
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1042
1042
|
*/
|
1043
1043
|
InstanceArn: InstanceArn;
|
1044
1044
|
/**
|
@@ -1052,7 +1052,7 @@ declare namespace SSOAdmin {
|
|
1052
1052
|
}
|
1053
1053
|
export interface ListPermissionSetsResponse {
|
1054
1054
|
/**
|
1055
|
-
* Defines the level of access on an
|
1055
|
+
* Defines the level of access on an AWS account.
|
1056
1056
|
*/
|
1057
1057
|
PermissionSets?: PermissionSetList;
|
1058
1058
|
/**
|
@@ -1062,7 +1062,7 @@ declare namespace SSOAdmin {
|
|
1062
1062
|
}
|
1063
1063
|
export interface ListTagsForResourceRequest {
|
1064
1064
|
/**
|
1065
|
-
* The ARN of the
|
1065
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1066
1066
|
*/
|
1067
1067
|
InstanceArn: InstanceArn;
|
1068
1068
|
/**
|
@@ -1101,7 +1101,7 @@ declare namespace SSOAdmin {
|
|
1101
1101
|
*/
|
1102
1102
|
Name?: PermissionSetName;
|
1103
1103
|
/**
|
1104
|
-
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and
|
1104
|
+
* The ARN of the permission set. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1105
1105
|
*/
|
1106
1106
|
PermissionSetArn?: PermissionSetArn;
|
1107
1107
|
/**
|
@@ -1136,11 +1136,11 @@ declare namespace SSOAdmin {
|
|
1136
1136
|
*/
|
1137
1137
|
RequestId?: UUId;
|
1138
1138
|
/**
|
1139
|
-
* The identifier of the
|
1139
|
+
* The identifier of the AWS account from which to list the assignments.
|
1140
1140
|
*/
|
1141
1141
|
AccountId?: AccountId;
|
1142
1142
|
/**
|
1143
|
-
* The ARN of the permission set that is being provisioned. For more information about ARNs, see Amazon Resource Names (ARNs) and
|
1143
|
+
* The ARN of the permission set that is being provisioned. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1144
1144
|
*/
|
1145
1145
|
PermissionSetArn?: PermissionSetArn;
|
1146
1146
|
/**
|
@@ -1169,11 +1169,11 @@ declare namespace SSOAdmin {
|
|
1169
1169
|
}
|
1170
1170
|
export interface PermissionsBoundary {
|
1171
1171
|
/**
|
1172
|
-
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each
|
1172
|
+
* Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each AWS account where you want to deploy your permission set.
|
1173
1173
|
*/
|
1174
1174
|
CustomerManagedPolicyReference?: CustomerManagedPolicyReference;
|
1175
1175
|
/**
|
1176
|
-
* The
|
1176
|
+
* The AWS managed policy ARN that you want to attach to a permission set as a permissions boundary.
|
1177
1177
|
*/
|
1178
1178
|
ManagedPolicyArn?: ManagedPolicyArn;
|
1179
1179
|
}
|
@@ -1181,7 +1181,7 @@ declare namespace SSOAdmin {
|
|
1181
1181
|
export type PrincipalType = "USER"|"GROUP"|string;
|
1182
1182
|
export interface ProvisionPermissionSetRequest {
|
1183
1183
|
/**
|
1184
|
-
* The ARN of the
|
1184
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1185
1185
|
*/
|
1186
1186
|
InstanceArn: InstanceArn;
|
1187
1187
|
/**
|
@@ -1189,7 +1189,7 @@ declare namespace SSOAdmin {
|
|
1189
1189
|
*/
|
1190
1190
|
PermissionSetArn: PermissionSetArn;
|
1191
1191
|
/**
|
1192
|
-
* TargetID is an
|
1192
|
+
* TargetID is an AWS account identifier, typically a 10-12 digit string (For example, 123456789012).
|
1193
1193
|
*/
|
1194
1194
|
TargetId?: TargetId;
|
1195
1195
|
/**
|
@@ -1207,7 +1207,7 @@ declare namespace SSOAdmin {
|
|
1207
1207
|
export type ProvisioningStatus = "LATEST_PERMISSION_SET_PROVISIONED"|"LATEST_PERMISSION_SET_NOT_PROVISIONED"|string;
|
1208
1208
|
export interface PutInlinePolicyToPermissionSetRequest {
|
1209
1209
|
/**
|
1210
|
-
* The ARN of the
|
1210
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1211
1211
|
*/
|
1212
1212
|
InstanceArn: InstanceArn;
|
1213
1213
|
/**
|
@@ -1223,7 +1223,7 @@ declare namespace SSOAdmin {
|
|
1223
1223
|
}
|
1224
1224
|
export interface PutPermissionsBoundaryToPermissionSetRequest {
|
1225
1225
|
/**
|
1226
|
-
* The ARN of the
|
1226
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
1227
1227
|
*/
|
1228
1228
|
InstanceArn: InstanceArn;
|
1229
1229
|
/**
|
@@ -1255,7 +1255,7 @@ declare namespace SSOAdmin {
|
|
1255
1255
|
export type TagList = Tag[];
|
1256
1256
|
export interface TagResourceRequest {
|
1257
1257
|
/**
|
1258
|
-
* The ARN of the
|
1258
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1259
1259
|
*/
|
1260
1260
|
InstanceArn: InstanceArn;
|
1261
1261
|
/**
|
@@ -1277,7 +1277,7 @@ declare namespace SSOAdmin {
|
|
1277
1277
|
export type UUId = string;
|
1278
1278
|
export interface UntagResourceRequest {
|
1279
1279
|
/**
|
1280
|
-
* The ARN of the
|
1280
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1281
1281
|
*/
|
1282
1282
|
InstanceArn: InstanceArn;
|
1283
1283
|
/**
|
@@ -1293,7 +1293,7 @@ declare namespace SSOAdmin {
|
|
1293
1293
|
}
|
1294
1294
|
export interface UpdateInstanceAccessControlAttributeConfigurationRequest {
|
1295
1295
|
/**
|
1296
|
-
* The ARN of the
|
1296
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed.
|
1297
1297
|
*/
|
1298
1298
|
InstanceArn: InstanceArn;
|
1299
1299
|
/**
|
@@ -1305,7 +1305,7 @@ declare namespace SSOAdmin {
|
|
1305
1305
|
}
|
1306
1306
|
export interface UpdatePermissionSetRequest {
|
1307
1307
|
/**
|
1308
|
-
* The ARN of the
|
1308
|
+
* The ARN of the IAM Identity Center instance under which the operation will be executed. For more information about ARNs, see Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
|
1309
1309
|
*/
|
1310
1310
|
InstanceArn: InstanceArn;
|
1311
1311
|
/**
|