lambda-live-debugger 1.12.5 → 1.12.7

package/node_modules/@aws-sdk/client-iam/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { AccessAdvisorUsageGranularityType, AssertionEncryptionModeType, AssignmentStatusType, ContextKeyTypeEnum, DeletionTaskStatusType, EncodingType, EntityType, FeatureType, GlobalEndpointTokenVersion, JobStatusType, PermissionCheckResultType, PermissionCheckStatusType, PermissionsBoundaryAttachmentType, PolicyEvaluationDecisionType, PolicyOwnerEntityType, PolicyParameterTypeEnum, PolicyScopeType, PolicySourceType, PolicyType, PolicyUsageType, ReportFormatType, ReportStateType, SortKeyType, StateType, StatusType, SummaryKeyType, SummaryStateType } from "./enums";
+import type { AccessAdvisorUsageGranularityType, AssertionEncryptionModeType, AssignmentStatusType, AttachmentType, ContextKeyTypeEnum, DeletionTaskStatusType, EncodingType, EntityType, FeatureType, GlobalEndpointTokenVersion, JobStatusType, ManagedByTypeType, ParameterTypeType, PermissionCheckResultType, PermissionCheckStatusType, PermissionsBoundaryAttachmentType, PolicyEvaluationDecisionType, PolicyIdentifierPolicyType, PolicyOwnerEntityType, PolicyParameterTypeEnum, PolicyScopeType, PolicySourceType, PolicyType, PolicyUsageType, ReportFormatType, ReportStateType, SortKeyType, StateType, StatusType, SummaryKeyType, SummaryStateType } from "./enums";
 /**
  * @public
  */
@@ -199,6 +199,226 @@ export interface AccessKeyMetadata {
      */
     CreateDate?: Date | undefined;
 }
+/**
+ * <p>Contains the list of replacement values for a single template parameter used when
+ *          creating a role from a role template.</p>
+ * @public
+ */
+export interface ReplacementValueEntry {
+    /**
+     * <p>The list of replacement values for the template parameter.</p>
+     * @public
+     */
+    Values: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface AcquireRoleRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the role template to create the role from.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    TemplateArn: string | undefined;
+    /**
+     * <p>The minor version of the role template to use. If you do not specify a minor version,
+     *             the service uses the template's default minor version.</p>
+     * @public
+     */
+    TemplateMinorVersion?: number | undefined;
+    /**
+     * <p>A map of values to substitute for the parameters that are defined in the role template
+     *             version. Each key is a parameter name from the template, and each value is a structure
+     *             that contains the replacement values for that parameter.</p>
+     * @public
+     */
+    ReplacementValues?: Record<string, ReplacementValueEntry> | undefined;
+}
+/**
+ * <p>Contains information about an attached permissions boundary.</p>
+ *          <p>An attached permissions boundary is a managed policy that has been attached to a user or
+ *          role to set the permissions boundary.</p>
+ *          <p>For more information about permissions boundaries, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
+ *             identities </a> in the <i>IAM User Guide</i>.</p>
+ * @public
+ */
+export interface AttachedPermissionsBoundary {
+    /**
+     * <p> The permissions boundary usage type that indicates what type of IAM resource is used
+     *          as the permissions boundary for an entity. This data type can only have a value of
+     *             <code>Policy</code>.</p>
+     * @public
+     */
+    PermissionsBoundaryType?: PermissionsBoundaryAttachmentType | undefined;
+    /**
+     * <p> The ARN of the policy used to set the permissions boundary for the user or role.</p>
+     * @public
+     */
+    PermissionsBoundaryArn?: string | undefined;
+}
+/**
+ * <p>Contains information about the last time that an IAM role was used. This includes the
+ *          date and time and the Region in which the role was last used. Activity is only reported for
+ *          the trailing 400 days. This period can be shorter if your Region began supporting these
+ *          features within the last year. The role might have been used more than 400 days ago. For
+ *          more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM user
+ *          Guide</i>.</p>
+ *          <p>This data type is returned as a response element in the <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetRole.html">GetRole</a> and <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccountAuthorizationDetails.html">GetAccountAuthorizationDetails</a> operations.</p>
+ * @public
+ */
+export interface RoleLastUsed {
+    /**
+     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
+     *             format</a> that the role was last used.</p>
+     *          <p>This field is null if the role has not been used within the IAM tracking period. For
+     *          more information about the tracking period, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM User Guide</i>.
+     *       </p>
+     * @public
+     */
+    LastUsedDate?: Date | undefined;
+    /**
+     * <p>The name of the Amazon Web Services Region in which the role was last used.</p>
+     * @public
+     */
+    Region?: string | undefined;
+}
+/**
+ * <p>Contains information about the role template that a role was created from.</p>
+ * @public
+ */
+export interface SourceRoleTemplate {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the role template that the role was created
+     *          from.</p>
+     * @public
+     */
+    TemplateArn: string | undefined;
+    /**
+     * <p>The minor version of the role template that was used to create the role.</p>
+     * @public
+     */
+    TemplateMinorVersion: number | undefined;
+}
+/**
+ * <p>A structure that represents user-provided metadata that can be associated with an IAM
+ *       resource. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
+ *       <i>IAM User Guide</i>.</p>
+ * @public
+ */
+export interface Tag {
+    /**
+     * <p>The key name that can be used to look up or retrieve the associated value. For example,
+     *         <code>Department</code> or <code>Cost Center</code> are common choices.</p>
+     * @public
+     */
+    Key: string | undefined;
+    /**
+     * <p>The value associated with this tag. For example, tags with a key name of
+     *         <code>Department</code> could have values such as <code>Human Resources</code>,
+     *         <code>Accounting</code>, and <code>Support</code>. Tags with a key name of <code>Cost
+     *         Center</code> might have values that consist of the number associated with the different
+     *       cost centers in your company. Typically, many resources have tags with the same key name but
+     *       with different values.</p>
+     * @public
+     */
+    Value: string | undefined;
+}
+/**
+ * <p>Contains information about an IAM role. This structure is returned as a response
+ *          element in several API operations that interact with roles.</p>
+ * @public
+ */
+export interface Role {
+    /**
+     * <p> The path to the role. For more information about paths, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM identifiers</a> in the
+     *             <i>IAM User Guide</i>. </p>
+     * @public
+     */
+    Path: string | undefined;
+    /**
+     * <p>The friendly name that identifies the role.</p>
+     * @public
+     */
+    RoleName: string | undefined;
+    /**
+     * <p> The stable and unique string identifying the role. For more information about IDs, see
+     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM
+     *             identifiers</a> in the <i>IAM User Guide</i>. </p>
+     * @public
+     */
+    RoleId: string | undefined;
+    /**
+     * <p> The Amazon Resource Name (ARN) specifying the role. For more information about ARNs and
+     *          how to use them in policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM identifiers</a> in the
+     *             <i>IAM User Guide</i> guide. </p>
+     * @public
+     */
+    Arn: string | undefined;
+    /**
+     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
+     *             format</a>, when the role was created.</p>
+     * @public
+     */
+    CreateDate: Date | undefined;
+    /**
+     * <p>The policy that grants an entity permission to assume the role.</p>
+     * @public
+     */
+    AssumeRolePolicyDocument?: string | undefined;
+    /**
+     * <p>A description of the role that you provide.</p>
+     * @public
+     */
+    Description?: string | undefined;
+    /**
+     * <p>The maximum session duration (in seconds) for the specified role. Anyone who uses the
+     *          CLI, or API to assume the role can specify the duration using the optional
+     *             <code>DurationSeconds</code> API parameter or <code>duration-seconds</code> CLI
+     *          parameter.</p>
+     * @public
+     */
+    MaxSessionDuration?: number | undefined;
+    /**
+     * <p>The ARN of the policy used to set the permissions boundary for the role.</p>
+     *          <p>For more information about permissions boundaries, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
+     *             identities </a> in the <i>IAM User Guide</i>.</p>
+     * @public
+     */
+    PermissionsBoundary?: AttachedPermissionsBoundary | undefined;
+    /**
+     * <p>A list of tags that are attached to the role. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
+     *       <i>IAM User Guide</i>.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>Contains information about the last time that an IAM role was used. This includes the
+     *          date and time and the Region in which the role was last used. Activity is only reported for
+     *          the trailing 400 days. This period can be shorter if your Region began supporting these
+     *          features within the last year. The role might have been used more than 400 days ago. For
+     *          more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM user
+     *          Guide</i>.</p>
+     * @public
+     */
+    RoleLastUsed?: RoleLastUsed | undefined;
+    /**
+     * <p>Contains information about the role template that this role was created from. This
+     *          member is present only for roles created with <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html">AcquireRole</a>.</p>
+     * @public
+     */
+    SourceRoleTemplate?: SourceRoleTemplate | undefined;
+}
+/**
+ * @public
+ */
+export interface AcquireRoleResponse {
+    /**
+     * <p>A structure that contains details about the IAM role that was created.</p>
+     * @public
+     */
+    Role: Role | undefined;
+}
 /**
  * @public
  */
@@ -264,28 +484,6 @@ export interface AssociateDelegationRequestRequest {
      */
     DelegationRequestId: string | undefined;
 }
-/**
- * <p>Contains information about an attached permissions boundary.</p>
- *          <p>An attached permissions boundary is a managed policy that has been attached to a user or
- *          role to set the permissions boundary.</p>
- *          <p>For more information about permissions boundaries, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
- *             identities </a> in the <i>IAM User Guide</i>.</p>
- * @public
- */
-export interface AttachedPermissionsBoundary {
-    /**
-     * <p> The permissions boundary usage type that indicates what type of IAM resource is used
-     *          as the permissions boundary for an entity. This data type can only have a value of
-     *             <code>Policy</code>.</p>
-     * @public
-     */
-    PermissionsBoundaryType?: PermissionsBoundaryAttachmentType | undefined;
-    /**
-     * <p> The ARN of the policy used to set the permissions boundary for the user or role.</p>
-     * @public
-     */
-    PermissionsBoundaryArn?: string | undefined;
-}
 /**
  * <p>Contains information about an attached policy.</p>
  *          <p>An attached policy is a managed policy that has been attached to a user, group, or role.
@@ -639,30 +837,6 @@ export interface CreateGroupResponse {
      */
     Group: Group | undefined;
 }
-/**
- * <p>A structure that represents user-provided metadata that can be associated with an IAM
- *       resource. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
- *       <i>IAM User Guide</i>.</p>
- * @public
- */
-export interface Tag {
-    /**
-     * <p>The key name that can be used to look up or retrieve the associated value. For example,
-     *         <code>Department</code> or <code>Cost Center</code> are common choices.</p>
-     * @public
-     */
-    Key: string | undefined;
-    /**
-     * <p>The value associated with this tag. For example, tags with a key name of
-     *         <code>Department</code> could have values such as <code>Human Resources</code>,
-     *         <code>Accounting</code>, and <code>Support</code>. Tags with a key name of <code>Cost
-     *         Center</code> might have values that consist of the number associated with the different
-     *       cost centers in your company. Typically, many resources have tags with the same key name but
-     *       with different values.</p>
-     * @public
-     */
-    Value: string | undefined;
-}
 /**
  * @public
  */
@@ -697,111 +871,6 @@ export interface CreateInstanceProfileRequest {
      */
     Tags?: Tag[] | undefined;
 }
-/**
- * <p>Contains information about the last time that an IAM role was used. This includes the
- *          date and time and the Region in which the role was last used. Activity is only reported for
- *          the trailing 400 days. This period can be shorter if your Region began supporting these
- *          features within the last year. The role might have been used more than 400 days ago. For
- *          more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM user
- *          Guide</i>.</p>
- *          <p>This data type is returned as a response element in the <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetRole.html">GetRole</a> and <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccountAuthorizationDetails.html">GetAccountAuthorizationDetails</a> operations.</p>
- * @public
- */
-export interface RoleLastUsed {
-    /**
-     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
-     *             format</a> that the role was last used.</p>
-     *          <p>This field is null if the role has not been used within the IAM tracking period. For
-     *          more information about the tracking period, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM User Guide</i>.
-     *       </p>
-     * @public
-     */
-    LastUsedDate?: Date | undefined;
-    /**
-     * <p>The name of the Amazon Web Services Region in which the role was last used.</p>
-     * @public
-     */
-    Region?: string | undefined;
-}
-/**
- * <p>Contains information about an IAM role. This structure is returned as a response
- *          element in several API operations that interact with roles.</p>
- * @public
- */
-export interface Role {
-    /**
-     * <p> The path to the role. For more information about paths, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM identifiers</a> in the
-     *             <i>IAM User Guide</i>. </p>
-     * @public
-     */
-    Path: string | undefined;
-    /**
-     * <p>The friendly name that identifies the role.</p>
-     * @public
-     */
-    RoleName: string | undefined;
-    /**
-     * <p> The stable and unique string identifying the role. For more information about IDs, see
-     *             <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM
-     *             identifiers</a> in the <i>IAM User Guide</i>. </p>
-     * @public
-     */
-    RoleId: string | undefined;
-    /**
-     * <p> The Amazon Resource Name (ARN) specifying the role. For more information about ARNs and
-     *          how to use them in policies, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html">IAM identifiers</a> in the
-     *             <i>IAM User Guide</i> guide. </p>
-     * @public
-     */
-    Arn: string | undefined;
-    /**
-     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
-     *             format</a>, when the role was created.</p>
-     * @public
-     */
-    CreateDate: Date | undefined;
-    /**
-     * <p>The policy that grants an entity permission to assume the role.</p>
-     * @public
-     */
-    AssumeRolePolicyDocument?: string | undefined;
-    /**
-     * <p>A description of the role that you provide.</p>
-     * @public
-     */
-    Description?: string | undefined;
-    /**
-     * <p>The maximum session duration (in seconds) for the specified role. Anyone who uses the
-     *          CLI, or API to assume the role can specify the duration using the optional
-     *             <code>DurationSeconds</code> API parameter or <code>duration-seconds</code> CLI
-     *          parameter.</p>
-     * @public
-     */
-    MaxSessionDuration?: number | undefined;
-    /**
-     * <p>The ARN of the policy used to set the permissions boundary for the role.</p>
-     *          <p>For more information about permissions boundaries, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
-     *             identities </a> in the <i>IAM User Guide</i>.</p>
-     * @public
-     */
-    PermissionsBoundary?: AttachedPermissionsBoundary | undefined;
-    /**
-     * <p>A list of tags that are attached to the role. For more information about tagging, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html">Tagging IAM resources</a> in the
-     *       <i>IAM User Guide</i>.</p>
-     * @public
-     */
-    Tags?: Tag[] | undefined;
-    /**
-     * <p>Contains information about the last time that an IAM role was used. This includes the
-     *          date and time and the Region in which the role was last used. Activity is only reported for
-     *          the trailing 400 days. This period can be shorter if your Region began supporting these
-     *          features within the last year. The role might have been used more than 400 days ago. For
-     *          more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_access-advisor.html#access-advisor_tracking-period">Regions where data is tracked</a> in the <i>IAM user
-     *          Guide</i>.</p>
-     * @public
-     */
-    RoleLastUsed?: RoleLastUsed | undefined;
-}
 /**
  * <p>Contains information about an instance profile.</p>
  *          <p>This data type is used as a response element in the following operations:</p>
@@ -3034,6 +3103,22 @@ export interface GetAccountPasswordPolicyResponse {
      */
     PasswordPolicy: PasswordPolicy | undefined;
 }
+/**
+ * @public
+ */
+export interface GetAccountPropertiesRequest {
+}
+/**
+ * @public
+ */
+export interface GetAccountPropertiesResponse {
+    /**
+     * <p>A map of account property key-value pairs. Keys are in the format
+     *                 <code>Namespace/PropertyName</code>.</p>
+     * @public
+     */
+    Properties?: Record<string, string> | undefined;
+}
 /**
  * <p>Contains the response to a successful <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetAccountSummary.html">GetAccountSummary</a> request.
  *     </p>
@@ -3899,6 +3984,255 @@ export interface GetRolePolicyResponse {
      */
     PolicyDocument: string | undefined;
 }
+/**
+ * @public
+ */
+export interface GetRoleTemplateVersionRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the role template whose version you want to
+     *             retrieve.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    TemplateArn: string | undefined;
+    /**
+     * <p>The minor version of the role template to retrieve. If you do not specify a minor
+     *             version, the service returns the template's default minor version.</p>
+     * @public
+     */
+    MinorVersion?: number | undefined;
+}
+/**
+ * <p>Contains an inline policy template that the service embeds in roles that you create from a
+ *          role template.</p>
+ * @public
+ */
+export interface InlinePolicy {
+    /**
+     * <p>The name of the inline policy.</p>
+     * @public
+     */
+    PolicyName: string | undefined;
+    /**
+     * <p>The inline policy document.</p>
+     * @public
+     */
+    PolicyDocument: string | undefined;
+}
+/**
+ * <p>Defines a parameter that a role template accepts. You supply values for these parameters
+ *          when you create a role with <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html">AcquireRole</a>.</p>
+ * @public
+ */
+export interface ParameterDefinition {
+    /**
+     * <p>The name of the parameter.</p>
+     * @public
+     */
+    Name: string | undefined;
+    /**
+     * <p>The data type of the parameter. Valid values are <code>String</code>,
+     *             <code>StringList</code>, <code>Number</code>, <code>NumberList</code>,
+     *             <code>Arn</code>, and <code>ArnList</code>.</p>
+     * @public
+     */
+    Type: ParameterTypeType | undefined;
+    /**
+     * <p>An optional subtype that further constrains the values that are allowed for the
+     *          parameter.</p>
+     * @public
+     */
+    SubType?: string | undefined;
+    /**
+     * <p>A description of the parameter.</p>
+     * @public
+     */
+    Description?: string | undefined;
+    /**
+     * <p>Specifies whether you must supply a value for the parameter when you create a role from
+     *          the template.</p>
+     * @public
+     */
+    IsRequired?: boolean | undefined;
+    /**
+     * <p>The value that the service uses for the parameter when you do not supply one.</p>
+     * @public
+     */
+    DefaultValue?: string | undefined;
+    /**
+     * <p>Specifies whether you can change the parameter value after you create the role.</p>
+     * @public
+     */
+    Immutable?: boolean | undefined;
+}
+/**
+ * <p>Represents a tag that is applied to roles that are created from a role template. The key
+ *          and value can include <code>@\{parameter\}</code> placeholders that are replaced with
+ *          template parameter values when the role is created.</p>
+ * @public
+ */
+export interface TagTemplate {
+    /**
+     * <p>The key name of the tag.</p>
+     * @public
+     */
+    Key: string | undefined;
+    /**
+     * <p>The value associated with the tag key.</p>
+     * @public
+     */
+    Value: string | undefined;
+}
+/**
+ * <p>Contains information about a version of an IAM role template, including the
+ *          configuration that is used to create roles with <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html">AcquireRole</a>. This structure
+ *          is returned as a response element by the <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetRoleTemplateVersion.html">GetRoleTemplateVersion</a> operation.</p>
+ * @public
+ */
+export interface RoleTemplateVersion {
+    /**
+     * <p>The Amazon Resource Name (ARN) that identifies the role template.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    TemplateArn?: string | undefined;
+    /**
+     * <p>The friendly name that identifies the role template.</p>
+     * @public
+     */
+    TemplateName?: string | undefined;
+    /**
+     * <p>The identifier of the role template version.</p>
+     * @public
+     */
+    TemplateVersionId?: string | undefined;
+    /**
+     * <p>The description of the role template.</p>
+     * @public
+     */
+    Description?: string | undefined;
+    /**
+     * <p>The major version number of the role template.</p>
+     * @public
+     */
+    MajorVersion?: number | undefined;
+    /**
+     * <p>The minor version that the service uses by default when you create a role from this template
+     *          without specifying a minor version.</p>
+     * @public
+     */
+    DefaultMinorVersion?: number | undefined;
+    /**
+     * <p>Indicates that the role template is managed by an Amazon Web Services service.</p>
+     * @public
+     */
+    ManagedByType?: ManagedByTypeType | undefined;
+    /**
+     * <p>The identifier of the Amazon Web Services service that manages the role template.</p>
+     * @public
+     */
+    ManagedByValue?: string | undefined;
+    /**
+     * <p>Specifies whether the role template is enabled. When a template is disabled, you cannot
+     *          create roles from it.</p>
+     * @public
+     */
+    Enabled?: boolean | undefined;
+    /**
+     * <p>The minor version number of this role template version.</p>
+     * @public
+     */
+    MinorVersion?: number | undefined;
+    /**
+     * <p>The pattern that is used to generate the name of a role that is created from this
+     *          template. The pattern can include <code>@\{parameter\}</code> placeholders that are replaced
+     *          with the values you supply in the <code>ReplacementValues</code> parameter of <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html">AcquireRole</a>.</p>
+     * @public
+     */
+    RoleNamePattern?: string | undefined;
+    /**
+     * <p>The pattern that is used to generate the path of a role that is created from this
+     *          template.</p>
+     * @public
+     */
+    RolePathPattern?: string | undefined;
+    /**
+     * <p>The pattern that is used to generate the description of a role that is created from this
+     *          template.</p>
+     * @public
+     */
+    RoleDescriptionPattern?: string | undefined;
+    /**
+     * <p>The trust policy template that grants an entity permission to assume roles that you
+     *          create from this template.</p>
+     * @public
+     */
+    AssumeRolePolicyDocumentTemplate?: string | undefined;
+    /**
+     * <p>A list of inline policy templates that the service embeds in roles that you create from
+     *          this template.</p>
+     * @public
+     */
+    InlinePolicyTemplates?: InlinePolicy[] | undefined;
+    /**
+     * <p>A list of the ARNs of the managed policies that the service attaches to roles that you
+     *          create from this template.</p>
+     * @public
+     */
+    ManagedPolicyArns?: string[] | undefined;
+    /**
+     * <p>The ARN of the policy that sets the permissions boundary for roles that you create from
+     *          this template.</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    PermissionBoundaryArn?: string | undefined;
+    /**
+     * <p>A list of the parameters that are defined for this role template version. You supply
+     *          values for these parameters when you create a role with <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_AcquireRole.html">AcquireRole</a>.</p>
+     * @public
+     */
+    ParametersDefinition?: ParameterDefinition[] | undefined;
+    /**
+     * <p>A list of tag templates that are applied to roles that are created from this
+     *          template.</p>
+     * @public
+     */
+    RoleTagsTemplate?: TagTemplate[] | undefined;
+    /**
+     * <p>The maximum session duration (in seconds) for roles that are created from this
+     *          template.</p>
+     * @public
+     */
+    MaxSessionDuration?: number | undefined;
+    /**
+     * <p>Specifies whether this specific minor version of the role template is enabled.</p>
+     * @public
+     */
+    VersionEnabled?: boolean | undefined;
+    /**
+     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
+     *             format</a>, when the role template version was created.</p>
+     * @public
+     */
+    CreateTimestamp?: Date | undefined;
+    /**
+     * <p>The date and time, in <a href="http://www.iso.org/iso/iso8601">ISO 8601 date-time
+     *             format</a>, when the role template version was last updated.</p>
+     * @public
+     */
+    UpdateTimestamp?: Date | undefined;
+}
+/**
+ * @public
+ */
+export interface GetRoleTemplateVersionResponse {
+    /**
+     * <p>A structure that contains details about the requested role template version.</p>
+     * @public
+     */
+    RoleTemplateVersion: RoleTemplateVersion | undefined;
+}
 /**
  * @public
  */
@@ -7128,17 +7462,38 @@ export interface ListVirtualMFADevicesResponse {
 /**
  * @public
  */
-export interface PutGroupPolicyRequest {
+export interface PutAccountPropertiesRequest {
     /**
-     * <p>The name of the group to associate the policy with.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-.</p>
+     * <p>A map of property key-value pairs to set. All keys must belong to the same
+     *             namespace.</p>
+     *          <p>Each key uses the format <code>Namespace/PropertyName</code>. The key must contain
+     *             exactly one <code>/</code> separating the namespace from the property name, and cannot
+     *             start or end with <code>/</code>.</p>
+     *          <p>The service validates each value based on the property key's expected type. For
+     *             example, boolean properties expect <code>true</code> or <code>false</code>.</p>
      * @public
      */
-    GroupName: string | undefined;
-    /**
-     * <p>The name of the policy document.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+    Properties: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface PutAccountPropertiesResponse {
+}
+/**
+ * @public
+ */
+export interface PutGroupPolicyRequest {
+    /**
+     * <p>The name of the group to associate the policy with.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
+     *     characters with no spaces. You can also include any of the following characters: _+=,.@-.</p>
+     * @public
+     */
+    GroupName: string | undefined;
+    /**
+     * <p>The name of the policy document.</p>
+     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
      *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
      * @public
      */
@@ -7515,6 +7870,23 @@ export interface ContextEntry {
      */
     ContextKeyType?: ContextKeyTypeEnum | undefined;
 }
+/**
+ * <p>Represents one level of an Organizations hierarchy—the organization root, an organizational
+ *          unit (OU), or an account—together with the service control policies (SCPs) that apply at
+ *          that level. Each element in the list represents one level of the hierarchy, ordered from
+ *          the organization root down to the account.</p>
+ *          <p>For more information about SCPs, see <a href="https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html">Service control
+ *             policies (SCPs)</a> in the <i>Organizations User Guide</i>.</p>
+ * @public
+ */
+export interface OrderedOrganizationPolicyType {
+    /**
+     * <p>A list of SCP documents that apply at this level of the Organizations hierarchy. Each document
+     *          is specified as a string containing the complete, valid JSON text of an SCP.</p>
+     * @public
+     */
+    ServiceControlPolicyInputList?: string[] | undefined;
+}
 /**
  * @public
  */
@@ -7577,6 +7949,18 @@ export interface SimulateCustomPolicyRequest {
      * @public
      */
     PermissionsBoundaryPolicyInputList?: string[] | undefined;
+    /**
+     * <p>An ordered list of service control policies (SCPs) to include in the simulation. Each
+     *             element represents one level of an Organizations hierarchy, from the organization root to the
+     *             account.</p>
+     *          <p>The simulator evaluates SCPs in the order that you provide, consistent with how Organizations
+     *             enforces SCPs. The first element must represent the organization root, and the last
+     *             element must represent the account. Any elements between them represent organizational
+     *             units (OUs) in descending order.</p>
+     *          <p>Use this parameter to simulate the effect of an SCP hierarchy without calling <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html">SimulatePrincipalPolicy</a>.</p>
+     * @public
+     */
+    OrderedOrganizationPolicyInputList?: OrderedOrganizationPolicyType[] | undefined;
     /**
      * <p>A list of names of API operations to evaluate in the simulation. Each operation is
      *             evaluated against each resource. Each operation must include the service identifier,
@@ -7650,12 +8034,12 @@ export interface SimulateCustomPolicyRequest {
      */
     ResourceOwner?: string | undefined;
     /**
-     * <p>The ARN of the IAM user that you want to use as the simulated caller of the API
-     *             operations. <code>CallerArn</code> is required if you include a
+     * <p>The ARN of the IAM user, group, or role that you want to use as the simulated
+     *             caller of the API operations. <code>CallerArn</code> is required if you include a
      *                 <code>ResourcePolicy</code> so that the policy's <code>Principal</code> element has
      *             a value to use in evaluating the policy.</p>
-     *          <p>You can specify only the ARN of an IAM user. You cannot specify the ARN of an
-     *             assumed role, federated user, or a service principal.</p>
+     *          <p>You cannot specify the ARN of an assumed role, federated user, or a service
+     *             principal.</p>
      * @public
      */
     CallerArn?: string | undefined;
@@ -7871,6 +8255,22 @@ export interface ResourceSpecificResult {
  *             </code> and <code>
  *                <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_SimulatePrincipalPolicy.html">SimulatePrincipalPolicy</a>
  *             </code>.</p>
+ *          <important>
+ *             <p>The simulator now returns a single <code>EvaluationResult</code> per action,
+ *             regardless of how many resource ARNs are provided. Previously, simulating one action
+ *             against N resources returned N evaluation results, each containing the same aggregate
+ *             decision. The top-level fields (<code>EvalDecision</code>,
+ *             <code>MatchedStatements</code>, <code>MissingContextValues</code>,
+ *             <code>EvalDecisionDetails</code>) now represent the
+ *             <i>aggregate</i> decision across all requested resources. The top-level
+ *             <code>EvalDecision</code> reflects the most restrictive decision across all resources
+ *             (for example, if any resource produces <code>explicitDeny</code>, the top-level
+ *             decision is <code>explicitDeny</code>).</p>
+ *             <p>To see the decision for each individual resource, use
+ *             <code>ResourceSpecificResults</code>. If your application parses evaluation results per
+ *             resource ARN, update your code to read per-resource decisions from
+ *                <code>ResourceSpecificResults</code> rather than from the top-level result.</p>
+ *          </important>
  * @public
  */
 export interface EvaluationResult {
@@ -7880,7 +8280,16 @@ export interface EvaluationResult {
      */
     EvalActionName: string | undefined;
     /**
-     * <p>The ARN of the resource that the indicated API operation was tested on.</p>
+     * <p>The ARN template for the simulated resource type (for example,
+     *             <code>arn:$\{Partition\}:s3:::$\{BucketName\}/$\{KeyName\}</code>), or <code>*</code> if no
+     *          ARN format is defined for the action. This is not a specific customer-provided resource
+     *          ARN. To find the decision for a specific resource, use
+     *             <code>ResourceSpecificResults</code>.</p>
+     *          <note>
+     *             <p>If you previously relied on <code>EvalResourceName</code> to identify which specific
+     *             resource a result applies to, you must now use the <code>EvalResourceName</code> field
+     *             within individual entries in <code>ResourceSpecificResults</code> instead.</p>
+     *          </note>
      * @public
      */
     EvalResourceName?: string | undefined;
@@ -7894,6 +8303,12 @@ export interface EvaluationResult {
      *          scenario. Remember that even if multiple statements allow the operation on the resource, if
      *          only one statement denies that operation, then the explicit deny overrides any allow. In
      *          addition, the deny statement is the only entry included in the result.</p>
+     *          <p>In the top-level result, this field contains the union of matched statements across all
+     *          requested resources. Only statements that contributed to the reported decision are
+     *          included. For per-resource matched statements, see
+     *             <code>ResourceSpecificResults</code>. This field doesn't include statements from
+     *          service control policies (SCPs). Only statements from identity-based and resource-based
+     *          policies appear here.</p>
      * @public
      */
     MatchedStatements?: Statement[] | undefined;
@@ -7904,6 +8319,10 @@ export interface EvaluationResult {
      *          blank. If you include a list of resources, then any missing context values are instead
      *          included under the <code>ResourceSpecificResults</code> section. To discover the context
      *          keys used by a set of policies, you can call <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetContextKeysForCustomPolicy.html">GetContextKeysForCustomPolicy</a> or <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_GetContextKeysForPrincipalPolicy.html">GetContextKeysForPrincipalPolicy</a>.</p>
+     *          <p>In the top-level result, this field contains the deduplicated set of missing context
+     *          values across all requested resources. This field doesn't include context keys referenced
+     *          by service control policies (SCPs). Only context keys referenced by identity-based and
+     *          resource-based policies appear here.</p>
      * @public
      */
     MissingContextValues?: string[] | undefined;
@@ -7911,6 +8330,9 @@ export interface EvaluationResult {
      * <p>A structure that details how Organizations and its service control policies affect the results of
      *          the simulation. Only applies if the simulated user's account is part of an
      *          organization.</p>
+     *          <p>For resources that don't support organization-level evaluation, this field is omitted
+     *          from the top-level result. For per-resource details, see
+     *             <code>ResourceSpecificResults</code>.</p>
      * @public
      */
     OrganizationsDecisionDetail?: OrganizationsDecisionDetail | undefined;
@@ -7924,6 +8346,8 @@ export interface EvaluationResult {
      * <p>Additional details about the results of the cross-account evaluation decision. This
      *          parameter is populated for only cross-account simulations. It contains a brief summary of
      *          how each policy type contributes to the final evaluation decision.</p>
+     *          <p>In the top-level result, this map reports the most restrictive decision per policy
+     *          type across all requested resources.</p>
      *          <p>If the simulation evaluates policies within the same account and includes a resource
      *          ARN, then the parameter is present but the response is empty. If the simulation evaluates
      *          policies within the same account and specifies all resources (<code>*</code>), then the
@@ -7973,6 +8397,103 @@ export interface SimulatePolicyResponse {
      */
     Marker?: string | undefined;
 }
+/**
+ * <p>Identifies one or more inline policies that are embedded in IAM users, groups, or
+ *          roles, by the name of the policy together with the type and name of the entity that it is
+ *          attached to. Wildcard characters in the entity name can match multiple entities, so a
+ *          single identifier can select more than one attached inline policy.</p>
+ * @public
+ */
+export interface InlinePolicyIdentifierType {
+    /**
+     * <p>The name of the inline policy.</p>
+     * @public
+     */
+    PolicyName: string | undefined;
+    /**
+     * <p>The type of IAM entity that the inline policy is attached to.</p>
+     * @public
+     */
+    AttachmentType: AttachmentType | undefined;
+    /**
+     * <p>The name of the IAM user, group, or role that the inline policy is attached to.
+     *          Wildcard characters are supported to match multiple entities: use at most one
+     *          <code>*</code> (matches any sequence of characters, including none), and any number of
+     *          <code>?</code> (each matches exactly one character).</p>
+     * @public
+     */
+    AttachmentName: string | undefined;
+}
+/**
+ * <p>Identifies one or more policies as a union type. Specify exactly one of
+ *          <code>PolicyType</code>, <code>PolicyArn</code>, or
+ *          <code>InlinePolicyIdentifier</code> to identify policies by their type, by Amazon
+ *          Resource Name (ARN), or by the name of an inline policy and the entity it is attached
+ *          to.</p>
+ * @public
+ */
+export type PolicyIdentifier = PolicyIdentifier.InlinePolicyIdentifierMember | PolicyIdentifier.PolicyArnMember | PolicyIdentifier.PolicyTypeMember | PolicyIdentifier.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace PolicyIdentifier {
+    /**
+     * <p>The policy type to identify. All policies of the specified type are matched.</p>
+     * @public
+     */
+    interface PolicyTypeMember {
+        PolicyType: PolicyIdentifierPolicyType;
+        PolicyArn?: never;
+        InlinePolicyIdentifier?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>The Amazon Resource Name (ARN) of an Amazon Web Services managed policy or a customer managed policy
+     *          that is attached to an IAM user, group, or role. Wildcard characters are supported in
+     *          the resource name portion of the ARN to match multiple managed policies: use at most one
+     *          <code>*</code> (matches any sequence of characters, including none), and any number of
+     *          <code>?</code> (each matches exactly one character).</p>
+     *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
+     * @public
+     */
+    interface PolicyArnMember {
+        PolicyType?: never;
+        PolicyArn: string;
+        InlinePolicyIdentifier?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>An inline policy identifier consisting of a policy name and the entity it is attached
+     *          to. Wildcard characters (<code>*</code> and <code>?</code>) in the entity name can match
+     *          multiple entities.</p>
+     * @public
+     */
+    interface InlinePolicyIdentifierMember {
+        PolicyType?: never;
+        PolicyArn?: never;
+        InlinePolicyIdentifier: InlinePolicyIdentifierType;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        PolicyType?: never;
+        PolicyArn?: never;
+        InlinePolicyIdentifier?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        PolicyType: (value: PolicyIdentifierPolicyType) => T;
+        PolicyArn: (value: string) => T;
+        InlinePolicyIdentifier: (value: InlinePolicyIdentifierType) => T;
+        _: (name: string, value: any) => T;
+    }
+}
 /**
  * @public
  */
@@ -8044,6 +8565,22 @@ export interface SimulatePrincipalPolicyRequest {
      * @public
      */
     PermissionsBoundaryPolicyInputList?: string[] | undefined;
+    /**
+     * <p>A list of policies to exclude from the simulation. Use this parameter to test what
+     *             the simulation result would be if a policy were removed, without changing which
+     *             policies are actually attached to the principal identified by
+     *             <code>PolicySourceArn</code>.</p>
+     *          <p>Each entry is a <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_PolicyIdentifier.html">PolicyIdentifier</a>
+     *             that identifies one or more policies to exclude by policy type, by Amazon Resource Name
+     *             (ARN), or by the name of an inline policy and the entity it is attached to.</p>
+     *          <p>Syntactically invalid identifiers, such as malformed ARNs or wildcards in disallowed
+     *             positions, cause the request to fail with an <code>InvalidInput</code> error.
+     *             Syntactically valid identifiers that don't match any attached policy are ignored.
+     *             Resource control policies (RCPs) are not supported in this release; identifiers that
+     *             target RCPs are also ignored.</p>
+     * @public
+     */
+    PolicyExclusionList?: PolicyIdentifier[] | undefined;
     /**
      * <p>A list of names of API operations to evaluate in the simulation. Each operation is
      *             evaluated for each resource. Each operation must include the service identifier, such as
@@ -8110,20 +8647,21 @@ export interface SimulatePrincipalPolicyRequest {
      */
     ResourceOwner?: string | undefined;
     /**
-     * <p>The ARN of the IAM user that you want to specify as the simulated caller of the API
-     *             operations. If you do not specify a <code>CallerArn</code>, it defaults to the ARN of
-     *             the user that you specify in <code>PolicySourceArn</code>, if you specified a user. If
-     *             you include both a <code>PolicySourceArn</code> (for example,
-     *                 <code>arn:aws:iam::123456789012:user/David</code>) and a <code>CallerArn</code> (for
-     *             example, <code>arn:aws:iam::123456789012:user/Bob</code>), the result is that you
-     *             simulate calling the API operations as Bob, as if Bob had David's policies.</p>
-     *          <p>You can specify only the ARN of an IAM user. You cannot specify the ARN of an
-     *             assumed role, federated user, or a service principal.</p>
+     * <p>The ARN of the IAM user, group, or role that you want to specify as the simulated
+     *             caller of the API operations. If you do not specify a <code>CallerArn</code>, it
+     *             defaults to the ARN of the user, group, or role that you specify in
+     *                 <code>PolicySourceArn</code>. If you include both a <code>PolicySourceArn</code>
+     *             (for example, <code>arn:aws:iam::123456789012:user/David</code>) and a
+     *                 <code>CallerArn</code> (for example,
+     *                 <code>arn:aws:iam::123456789012:user/Bob</code>), the result is that you simulate
+     *             calling the API operations as Bob, as if Bob had David's policies.</p>
+     *          <p>You can specify the ARN of an IAM user, group, or role. You cannot specify the ARN
+     *             of an assumed role, federated user, or a service principal.</p>
      *          <p>
      *             <code>CallerArn</code> is required if you include a <code>ResourcePolicy</code> and
-     *             the <code>PolicySourceArn</code> is not the ARN for an IAM user. This is required so
-     *             that the resource-based policy's <code>Principal</code> element has a value to use in
-     *             evaluating the policy.</p>
+     *             the <code>PolicySourceArn</code> is not the ARN for an IAM user, group, or role. This
+     *             is required so that the resource-based policy's <code>Principal</code> element has a
+     *             value to use in evaluating the policy.</p>
      *          <p>For more information about ARNs, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> in the <i>Amazon Web Services General Reference</i>.</p>
      * @public
      */
@@ -8288,447 +8826,3 @@ export interface TagRoleRequest {
      */
     Tags: Tag[] | undefined;
 }
-/**
- * @public
- */
-export interface TagSAMLProviderRequest {
-    /**
-     * <p>The ARN of the SAML identity provider in IAM to which you want to add tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    SAMLProviderArn: string | undefined;
-    /**
-     * <p>The list of tags that you want to attach to the SAML identity provider in IAM.
-     *       Each tag consists of a key name and an associated value.</p>
-     * @public
-     */
-    Tags: Tag[] | undefined;
-}
-/**
- * @public
- */
-export interface TagServerCertificateRequest {
-    /**
-     * <p>The name of the IAM server certificate to which you want to add tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    ServerCertificateName: string | undefined;
-    /**
-     * <p>The list of tags that you want to attach to the IAM server certificate.
-     *       Each tag consists of a key name and an associated value.</p>
-     * @public
-     */
-    Tags: Tag[] | undefined;
-}
-/**
- * @public
- */
-export interface TagUserRequest {
-    /**
-     * <p>The name of the IAM user to which you want to add tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    UserName: string | undefined;
-    /**
-     * <p>The list of tags that you want to attach to the IAM user. Each tag consists of a key name and an associated value.</p>
-     * @public
-     */
-    Tags: Tag[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagInstanceProfileRequest {
-    /**
-     * <p>The name of the IAM instance profile from which you want to remove tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    InstanceProfileName: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified instance profile.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagMFADeviceRequest {
-    /**
-     * <p>The unique identifier for the IAM virtual MFA device from which you want to remove
-     *       tags. For virtual MFA devices, the serial number is the same as the ARN.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    SerialNumber: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified instance profile.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagOpenIDConnectProviderRequest {
-    /**
-     * <p>The ARN of the OIDC provider in IAM from which you want to remove tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    OpenIDConnectProviderArn: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified OIDC provider.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagPolicyRequest {
-    /**
-     * <p>The ARN of the IAM customer managed policy from which you want to remove
-     *       tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    PolicyArn: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified policy.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagRoleRequest {
-    /**
-     * <p>The name of the IAM role from which you want to remove tags.</p>
-     *          <p>This parameter accepts (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that consist of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    RoleName: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified role.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagSAMLProviderRequest {
-    /**
-     * <p>The ARN of the SAML identity provider in IAM from which you want to remove
-     *       tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    SAMLProviderArn: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified SAML identity provider.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagServerCertificateRequest {
-    /**
-     * <p>The name of the IAM server certificate from which you want to remove tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    ServerCertificateName: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified IAM server certificate.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UntagUserRequest {
-    /**
-     * <p>The name of the IAM user from which you want to remove tags.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    UserName: string | undefined;
-    /**
-     * <p>A list of key names as a simple array of strings. The tags with matching keys are
-     *       removed from the specified user.</p>
-     * @public
-     */
-    TagKeys: string[] | undefined;
-}
-/**
- * @public
- */
-export interface UpdateAccessKeyRequest {
-    /**
-     * <p>The name of the user whose key you want to update.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    UserName?: string | undefined;
-    /**
-     * <p>The access key ID of the secret access key you want to update.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters that can
-     *     consist of any upper or lowercased letter or digit.</p>
-     * @public
-     */
-    AccessKeyId: string | undefined;
-    /**
-     * <p> The status you want to assign to the secret access key. <code>Active</code> means
-     *             that the key can be used for programmatic calls to Amazon Web Services, while <code>Inactive</code>
-     *             means that the key cannot be used.</p>
-     * @public
-     */
-    Status: StatusType | undefined;
-}
-/**
- * @public
- */
-export interface UpdateAccountPasswordPolicyRequest {
-    /**
-     * <p>The minimum number of characters allowed in an IAM user password.</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>6</code>.</p>
-     * @public
-     */
-    MinimumPasswordLength?: number | undefined;
-    /**
-     * <p>Specifies whether IAM user passwords must contain at least one of the following
-     *             non-alphanumeric characters:</p>
-     *          <p>! @ # $ % ^ & * ( ) _ + - = [ ] \{ \} | '</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that passwords do not require at least one
-     *             symbol character.</p>
-     * @public
-     */
-    RequireSymbols?: boolean | undefined;
-    /**
-     * <p>Specifies whether IAM user passwords must contain at least one numeric character (0
-     *             to 9).</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that passwords do not require at least one
-     *             numeric character.</p>
-     * @public
-     */
-    RequireNumbers?: boolean | undefined;
-    /**
-     * <p>Specifies whether IAM user passwords must contain at least one uppercase character
-     *             from the ISO basic Latin alphabet (A to Z).</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that passwords do not require at least one
-     *             uppercase character.</p>
-     * @public
-     */
-    RequireUppercaseCharacters?: boolean | undefined;
-    /**
-     * <p>Specifies whether IAM user passwords must contain at least one lowercase character
-     *             from the ISO basic Latin alphabet (a to z).</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that passwords do not require at least one
-     *             lowercase character.</p>
-     * @public
-     */
-    RequireLowercaseCharacters?: boolean | undefined;
-    /**
-     * <p> Allows all IAM users in your account to use the Amazon Web Services Management Console to change their own
-     *             passwords. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_enable-user-change.html">Permitting
-     *                 IAM users to change their own passwords</a> in the
-     *                 <i>IAM User Guide</i>.</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that IAM users in the account do not
-     *             automatically have permissions to change their own password.</p>
-     * @public
-     */
-    AllowUsersToChangePassword?: boolean | undefined;
-    /**
-     * <p>The number of days that an IAM user password is valid.</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>0</code>. The result is that IAM user passwords never expire.</p>
-     * @public
-     */
-    MaxPasswordAge?: number | undefined;
-    /**
-     * <p>Specifies the number of previous passwords that IAM users are prevented from
-     *             reusing.</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>0</code>. The result is that IAM users are not prevented from reusing
-     *             previous passwords.</p>
-     * @public
-     */
-    PasswordReusePrevention?: number | undefined;
-    /**
-     * <p> Prevents IAM users who are accessing the account via the Amazon Web Services Management Console from setting a
-     *             new console password after their password has expired. The IAM user cannot access the
-     *             console until an administrator resets the password.</p>
-     *          <p>If you do not specify a value for this parameter, then the operation uses the default
-     *             value of <code>false</code>. The result is that IAM users can change their passwords
-     *             after they expire and continue to sign in as the user.</p>
-     *          <note>
-     *             <p> In the Amazon Web Services Management Console, the custom password policy option <b>Allow
-     *                     users to change their own password</b> gives IAM users permissions to
-     *                     <code>iam:ChangePassword</code> for only their user and to the
-     *                     <code>iam:GetAccountPasswordPolicy</code> action. This option does not attach a
-     *                 permissions policy to each user, rather the permissions are applied at the
-     *                 account-level for all users by IAM. IAM users with
-     *                     <code>iam:ChangePassword</code> permission and active access keys can reset
-     *                 their own expired console password using the CLI or API.</p>
-     *          </note>
-     * @public
-     */
-    HardExpiry?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface UpdateAssumeRolePolicyRequest {
-    /**
-     * <p>The name of the role to update with the new policy.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    RoleName: string | undefined;
-    /**
-     * <p>The policy that grants an entity permission to assume the role.</p>
-     *          <p>You must provide policies in JSON format in IAM. However, for CloudFormation
-     *             templates formatted in YAML, you can provide the policy in JSON or YAML format. CloudFormation always converts a YAML policy to JSON format before submitting it to
-     *             IAM.</p>
-     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
-     *     used to validate this parameter is a string of characters consisting of the following:</p>
-     *          <ul>
-     *             <li>
-     *                <p>Any printable ASCII
-     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
-     *             </li>
-     *             <li>
-     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
-     *     (through <code>\u00FF</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
-     *     carriage return (<code>\u000D</code>)</p>
-     *             </li>
-     *          </ul>
-     * @public
-     */
-    PolicyDocument: string | undefined;
-}
-/**
- * @public
- */
-export interface UpdateDelegationRequestRequest {
-    /**
-     * <p>The unique identifier of the delegation request to update.</p>
-     * @public
-     */
-    DelegationRequestId: string | undefined;
-    /**
-     * <p>Additional notes or comments to add to the delegation request.</p>
-     * @public
-     */
-    Notes?: string | undefined;
-}
-/**
- * @public
- */
-export interface UpdateGroupRequest {
-    /**
-     * <p>Name of the IAM group to update. If you're changing the name of the group, this is
-     *             the original name.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    GroupName: string | undefined;
-    /**
-     * <p>New path for the IAM group. Only include this if changing the group's path.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting
-     *     of either a forward slash (/) by itself or a string that must begin and end with forward slashes.
-     *     In addition, it can contain any ASCII character from the ! (<code>\u0021</code>) through the DEL character (<code>\u007F</code>), including
-     *     most punctuation characters, digits, and upper and lowercased letters.</p>
-     * @public
-     */
-    NewPath?: string | undefined;
-    /**
-     * <p>New name for the IAM group. Only include this if changing the group's name.</p>
-     *          <p>IAM user, group, role, and policy names must be unique within the account. Names are
-     *             not distinguished by case. For example, you cannot create resources named both
-     *             "MyResource" and "myresource".</p>
-     * @public
-     */
-    NewGroupName?: string | undefined;
-}
-/**
- * @public
- */
-export interface UpdateLoginProfileRequest {
-    /**
-     * <p>The name of the user whose password you want to update.</p>
-     *          <p>This parameter allows (through its <a href="http://wikipedia.org/wiki/regex">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric
-     *     characters with no spaces. You can also include any of the following characters: _+=,.@-</p>
-     * @public
-     */
-    UserName: string | undefined;
-    /**
-     * <p>The new password for the specified IAM user.</p>
-     *          <p>The <a href="http://wikipedia.org/wiki/regex">regex pattern</a>
-     *     used to validate this parameter is a string of characters consisting of the following:</p>
-     *          <ul>
-     *             <li>
-     *                <p>Any printable ASCII
-     *     character ranging from the space character (<code>\u0020</code>) through the end of the ASCII character range</p>
-     *             </li>
-     *             <li>
-     *                <p>The printable characters in the Basic Latin and  Latin-1 Supplement character set
-     *     (through <code>\u00FF</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>The special characters tab (<code>\u0009</code>), line feed (<code>\u000A</code>), and
-     *     carriage return (<code>\u000D</code>)</p>
-     *             </li>
-     *          </ul>
-     *          <p>However, the format can be further restricted by the account administrator by setting
-     *             a password policy on the Amazon Web Services account. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAccountPasswordPolicy.html">UpdateAccountPasswordPolicy</a>.</p>
-     * @public
-     */
-    Password?: string | undefined;
-    /**
-     * <p>Allows this new password to be used only once by requiring the specified IAM user to
-     *             set a new password on next sign-in.</p>
-     * @public
-     */
-    PasswordResetRequired?: boolean | undefined;
-}