ark-sdk-python 2.0.14__py3-none-any.whl → 2.1.1__py3-none-any.whl

ark_sdk_python/actions/ark_profiles_action.py

@@ -172,7 +172,6 @@ class ArkProfilesAction(ArkAction):
 
         Raises:
             ArkException: _description_
-            ArkException: _description_
         """
         if args.profile_cmd == 'list':
             self.__run_list_action(args)

ark_sdk_python/actions/ark_service_exec_action.py

@@ -87,7 +87,9 @@ class ArkServiceExecAction(ArkExecAction):
         """
         action_def, action_dest = self.__deduce_action_command_def(args.command, args)
         action_value = args.__dict__[action_dest]
-        api_name = action_dest.replace('_action', '').replace('-', '_')
+        api_name = action_dest.replace('_action', '')
+        # cli sub-commands use dashes, but function names use underscores
+        api_name = api_name.replace('-', '_')
         while '_' in api_name and not hasattr(api, api_name):
             api_name = api_name.rsplit('_', 1)[0]
         service = getattr(api, api_name)

ark_sdk_python/ark.py

@@ -14,11 +14,10 @@ import argcomplete
 import urllib3
 
 from ark_sdk_python.actions import ArkAction, ArkCacheAction, ArkConfigureAction, ArkLoginAction, ArkProfilesAction, ArkServiceExecAction
+from ark_sdk_python.common.ark_version import __version__
 
 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
 
-__version__ = '2.0.14'
-
 
 def main():
     parser: argparse.ArgumentParser = argparse.ArgumentParser()

ark_sdk_python/ark_api.py

@@ -83,7 +83,7 @@ class ArkAPI:
     @property
     def identity_connectors(self) -> "ArkIdentityConnectorsService":
         """
-        Returns the Identity Connectors Service if the appropriate authenticators were given
+        Returns the Identity Connectors Service if the appropriate authenticators were provided.
 
         Returns:
             ArkIdentityConnectorsService: _description_
@@ -95,7 +95,7 @@ class ArkAPI:
     @property
     def identity_directories(self) -> "ArkIdentityDirectoriesService":
         """
-        Returns the Identity Directories Service if the appropriate authenticators were given
+        Returns the Identity Directories Service if the appropriate authenticators were provided.
 
         Returns:
             ArkIdentityDirectoriesService: _description_
@@ -107,7 +107,7 @@ class ArkAPI:
     @property
     def identity_policies(self) -> "ArkIdentityPoliciesService":
         """
-        Returns the Identity Policies Service if the appropriate authenticators were given
+        Returns the Identity Policies Service if the appropriate authenticators were provided.
 
         Returns:
             ArkIdentityPoliciesService: _description_
@@ -119,7 +119,7 @@ class ArkAPI:
     @property
     def identity_roles(self) -> "ArkIdentityRolesService":
         """
-        Returns the Identity Roles Service if the appropriate authenticators were given
+        Returns the Identity Roles Service if the appropriate authenticators were provided.
 
         Returns:
             ArkIdentityRolesService: _description_
@@ -131,7 +131,7 @@ class ArkAPI:
     @property
     def identity_users(self) -> "ArkIdentityUsersService":
         """
-        Returns the Identity Users Service if the appropriate authenticators were given
+        Returns the Identity Users Service if the appropriate authenticators were provided.
 
         Returns:
             ArkIdentityUsersService: _description_
@@ -141,28 +141,28 @@ class ArkAPI:
         return cast(ArkIdentityUsersService, self.service(ArkIdentityUsersService))
 
     @property
-    def sia_access(self) -> "ArkSIAAccessService":
+    def sm(self) -> "ArkSMService":
         """
-        Returns the SIA Access service if the appropriate authenticators were given
+        Returns the Session Monitoring service if the appropriate authenticators were provided.
 
         Returns:
-            ArkSIAAccessService: _description_
+            ArkSMService: _description_
         """
-        from ark_sdk_python.services.sia.access import ArkSIAAccessService
+        from ark_sdk_python.services.sm import ArkSMService
 
-        return cast(ArkSIAAccessService, self.service(ArkSIAAccessService))
+        return cast(ArkSMService, self.service(ArkSMService))
 
     @property
-    def sia_ssh_ca(self) -> "ArkSIASSHCAService":
+    def sia_workspaces_target_sets(self) -> "ArkSIATargetSetsWorkspaceService":
         """
-        Returns the SIA SSH CA service if the appropriate authenticators were given
+        Returns the SIA Target Sets Workspace service if the appropriate authenticators were provided.
 
         Returns:
-            ArkSIASSHCAService: _description_
+            ArkSIATargetSetsWorkspaceService: _description_
         """
-        from ark_sdk_python.services.sia.ssh_ca import ArkSIASSHCAService
+        from ark_sdk_python.services.sia.workspaces.targetsets import ArkSIATargetSetsWorkspaceService
 
-        return cast(ArkSIASSHCAService, self.service(ArkSIASSHCAService))
+        return cast(ArkSIATargetSetsWorkspaceService, self.service(ArkSIATargetSetsWorkspaceService))
 
     @property
     def sia_workspaces_db(self) -> "ArkSIADBWorkspaceService":
@@ -176,18 +176,6 @@ class ArkAPI:
 
         return cast(ArkSIADBWorkspaceService, self.service(ArkSIADBWorkspaceService))
 
-    @property
-    def sia_workspaces_target_sets(self) -> "ArkSIATargetSetsWorkspaceService":
-        """
-        Returns the SIA Target Sets Workspace service if the appropriate authenticators were provided.
-
-        Returns:
-            ArkSIATargetSetsWorkspaceService: _description_
-        """
-        from ark_sdk_python.services.sia.workspaces.targetsets import ArkSIATargetSetsWorkspaceService
-
-        return cast(ArkSIATargetSetsWorkspaceService, self.service(ArkSIATargetSetsWorkspaceService))
-
     @property
     def sia_policies_vm(self) -> "ArkSIAVMPoliciesService":
         """
@@ -212,6 +200,18 @@ class ArkAPI:
 
         return cast(ArkSIADBPoliciesService, self.service(ArkSIADBPoliciesService))
 
+    @property
+    def sia_secrets_vm(self) -> "ArkSIAVMSecretsService":
+        """
+        Returns the SIA VM Secrets service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkSIAVMSecretsService: _description_
+        """
+        from ark_sdk_python.services.sia.secrets.vm import ArkSIAVMSecretsService
+
+        return cast(ArkSIAVMSecretsService, self.service(ArkSIAVMSecretsService))
+
     @property
     def sia_secrets_db(self) -> "ArkSIADBSecretsService":
         """
@@ -225,16 +225,28 @@ class ArkAPI:
         return cast(ArkSIADBSecretsService, self.service(ArkSIADBSecretsService))
 
     @property
-    def sia_secrets_vm(self) -> "ArkSIAVMSecretsService":
+    def sia_access(self) -> "ArkSIAAccessService":
         """
-        Returns the SIA VM Secrets service if the appropriate authenticators were provided.
+        Returns the SIA Access service if the appropriate authenticators were provided.
 
         Returns:
-            ArkSIAVMSecretsService: _description_
+            ArkSIAAccessService: _description_
         """
-        from ark_sdk_python.services.sia.secrets.vm import ArkSIAVMSecretsService
+        from ark_sdk_python.services.sia.access import ArkSIAAccessService
 
-        return cast(ArkSIAVMSecretsService, self.service(ArkSIAVMSecretsService))
+        return cast(ArkSIAAccessService, self.service(ArkSIAAccessService))
+
+    @property
+    def sia_ssh_ca(self) -> "ArkSIASSHCAService":
+        """
+        Returns the SIA SSH CA service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkSIASSHCAService: _description_
+        """
+        from ark_sdk_python.services.sia.ssh_ca import ArkSIASSHCAService
+
+        return cast(ArkSIASSHCAService, self.service(ArkSIASSHCAService))
 
     @property
     def sia_sso(self) -> "ArkSIASSOService":
@@ -275,7 +287,7 @@ class ArkAPI:
     @property
     def sia_k8s(self) -> "ArkSIAK8SService":
         """
-        Returns the SIA Policies service if the appropriate authenticators were provided.
+        Returns the SIA K8S service if the appropriate authenticators were provided.
 
         Returns:
             ArkSIAK8SService: _description_
@@ -285,21 +297,21 @@ class ArkAPI:
         return cast(ArkSIAK8SService, self.service(ArkSIAK8SService))
 
     @property
-    def sm(self) -> "ArkSMService":
+    def sia_settings(self) -> "ArkSIASettingsService":
         """
-        Returns the SM service if the appropriate authenticators were given
+        Returns the SIA Settings service if the appropriate authenticators were provided.
 
         Returns:
-            ArkSMService: _description_
+            ArkSIASettingsService: _description_
         """
-        from ark_sdk_python.services.sm import ArkSMService
+        from ark_sdk_python.services.sia.settings import ArkSIASettingsService
 
-        return cast(ArkSMService, self.service(ArkSMService))
+        return cast(ArkSIASettingsService, self.service(ArkSIASettingsService))
 
     @property
     def pcloud_accounts(self) -> "ArkPCloudAccountsService":
         """
-        Returns the PCloud Accounts service if the appropriate authenticators were given
+        Returns the PCloud Accounts service if the appropriate authenticators were provided.
 
         Returns:
             ArkPCloudAccountsService: _description_
@@ -311,7 +323,7 @@ class ArkAPI:
     @property
     def pcloud_safes(self) -> "ArkPCloudSafesService":
         """
-        Returns the PCloud Safes service if the appropriate authenticators were given
+        Returns the PCloud Safes service if the appropriate authenticators were provided.
 
         Returns:
             ArkPCloudSafesService: _description_
@@ -323,7 +335,7 @@ class ArkAPI:
     @property
     def pcloud_platforms(self) -> "ArkPCloudPlatformsService":
         """
-        Returns the PCloud Platforms service if the appropriate authenticators were given
+        Returns the PCloud Platforms service if the appropriate authenticators were provided.
 
         Returns:
             ArkPCloudPlatformsService: _description_
@@ -335,7 +347,7 @@ class ArkAPI:
     @property
     def pcloud_applications(self) -> "ArkPCloudApplicationsService":
         """
-        Returns the PCloud Applications service if the appropriate authenticators were given
+        Returns the PCloud Applications service if the appropriate authenticators were provided.
 
         Returns:
             ArkPCloudApplicationsService: _description_
@@ -347,7 +359,7 @@ class ArkAPI:
     @property
     def cmgr(self) -> "ArkCmgrService":
         """
-        Returns the Connector Management service if the appropriate authenticators were given
+        Returns the Connector Management service if the appropriate authenticators were provided.
 
         Returns:
             ArkCmgrService: _description_
@@ -355,3 +367,55 @@ class ArkAPI:
         from ark_sdk_python.services.cmgr import ArkCmgrService
 
         return cast(ArkCmgrService, self.service(ArkCmgrService))
+
+    @property
+    def uap(self) -> "ArkUAPService":
+        """
+        Returns the UAP Executions service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkUAPService: _description_
+        """
+
+        from ark_sdk_python.services.uap.ark_uap_service import ArkUAPService
+
+        return cast(ArkUAPService, self.service(ArkUAPService))
+
+    @property
+    def uap_sca(self) -> "ArkUAPSCAService":
+        """
+        Returns the UAP SCA Executions service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkUAPSCAService: _description_
+        """
+
+        from ark_sdk_python.services.uap.sca.ark_uap_sca_service import ArkUAPSCAService
+
+        return cast(ArkUAPSCAService, self.service(ArkUAPSCAService))
+
+    @property
+    def uap_db(self) -> "ArkUAPSIADBService":
+        """
+        Returns the UAP SIA DB Executions service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkUAPSIADBService: _description_
+        """
+
+        from ark_sdk_python.services.uap.sia.db.ark_uap_sia_db_service import ArkUAPSIADBService
+
+        return cast(ArkUAPSIADBService, self.service(ArkUAPSIADBService))
+
+    @property
+    def uap_vm(self) -> "ArkUAPSIAVMService":
+        """
+        Returns the UAP SIA VM Executions service if the appropriate authenticators were provided.
+
+        Returns:
+            ArkUAPSIAVMService: _description_
+        """
+
+        from ark_sdk_python.services.uap.sia.vm.ark_uap_sia_vm_service import ArkUAPSIAVMService
+
+        return cast(ArkUAPSIAVMService, self.service(ArkUAPSIAVMService))

ark_sdk_python/auth/identity/ark_identity.py

@@ -95,7 +95,7 @@ class ArkIdentity:
         self.__identity_url = self.__resolve_fqdn_from_username_or_subdomain(identity_url, identity_tenant_subdomain)
         if not self.__identity_url.startswith('https://'):
             self.__identity_url = f'https://{self.__identity_url}'
-        self.__mfa_type = mfa_type
+        self.__mfa_type = mfa_type or 'email'
         self.__logger = logger or get_logger(app=self.__class__.__name__)
         self.__interaction_process: Optional[Process] = None
         self.__is_polling: bool = False
@@ -472,10 +472,12 @@ class ArkIdentity:
     def is_password_required(cls, username: str, identity_url: Optional[str], identity_tenant_subdomain: Optional[str]) -> bool:
         """
         Checks whether or not the specified username is from an external IDP.
+
         Args:
             username (str): _description_
             identity_url (Optional[str]): _description_
             identity_tenant_subdomain (Optional[str]): _description_
+
         Returns:
             bool: _description_
         """
@@ -615,7 +617,7 @@ class ArkIdentity:
         Raises:
             ArkAuthException: _description_
         """
-        if not self.__session_details.token:
+        if not self.__session_details or not self.__session_details.token:
             # We only refresh platform token at the moment, call the normal authentication instead
             return self.auth_identity(profile, interactive, force)
 

ark_sdk_python/auth/identity/ark_identity_fqdn_resolver.py

@@ -6,6 +6,7 @@ from cachetools import LRUCache, cached
 from pydantic import ValidationError
 from requests import Session
 
+from ark_sdk_python.common.ark_user_agent import user_agent
 from ark_sdk_python.common.env import IDENTITY_ENV_URLS, ROOT_DOMAIN, AwsEnv
 from ark_sdk_python.models import ArkException
 from ark_sdk_python.models.common.identity import TenantFqdnResponse
@@ -19,21 +20,17 @@ class ArkIdentityFQDNResolver:
     @staticmethod
     @cached(cache=LRUCache(maxsize=1024))
     def default_headers() -> Dict[str, str]:
-        from fake_useragent import UserAgent
-
         return {
             'Content-Type': 'application/json',
             'X-IDAP-NATIVE-CLIENT': 'true',
-            'User-Agent': UserAgent(browsers=['chrome']).chrome,
+            'User-Agent': user_agent(),
             'OobIdPAuth': 'true',
         }
 
     @staticmethod
     @cached(cache=LRUCache(maxsize=1024))
     def default_system_headers() -> Dict[str, str]:
-        from fake_useragent import UserAgent
-
-        return {'X-IDAP-NATIVE-CLIENT': 'true', 'User-Agent': UserAgent(browsers=['chrome']).chrome}
+        return {'X-IDAP-NATIVE-CLIENT': 'true', 'User-Agent': user_agent()}
 
     @staticmethod
     @cached(cache=LRUCache(maxsize=1024))

ark_sdk_python/cli_services/sia/common/ark_sia_base_policies_editor_service.py

@@ -527,7 +527,6 @@ class ArkSIABasePoliciesEditorService(
         The function first calculates the differences between the local and remote policies to find out which policies were edited, including
         the policies selected for deletion and new, uncommitted policies. It also
         allows selecting whether to commit all the edited policies or only specific policies by name.
-
         After all policies are committed, the workspace is reorganized accordingly.
 
         Args:

ark_sdk_python/cli_services/sia/vm/ark_sia_vm_policies_editor_service.py

@@ -11,7 +11,13 @@ from ark_sdk_python.models.ark_profile import ArkProfile
 from ark_sdk_python.models.cli_services.sia.policies_editor.vm import ArkSIAVMGeneratePolicy
 from ark_sdk_python.models.common import ArkProtocolType, ArkWorkspaceType
 from ark_sdk_python.models.services import ArkServiceConfig
-from ark_sdk_python.models.services.sia.policies.common import ArkSIADeletePolicy, ArkSIAGetPolicy, ArkSIARuleStatus, ArkSIAUserData
+from ark_sdk_python.models.services.sia.policies.common import (
+    ArkSIADeletePolicy,
+    ArkSIAGetPolicy,
+    ArkSIARuleStatus,
+    ArkSIAUserData,
+    ArkSIAUserDataAttribute,
+)
 from ark_sdk_python.models.services.sia.policies.vm import (
     ArkSIAVMAddPolicy,
     ArkSIAVMAuthorizationRule,
@@ -46,7 +52,7 @@ DEFAULT_GENERATED_POLICY: Final[ArkSIAVMPolicy] = ArkSIAVMPolicy(
 )
 DEFAULT_GENERATED_AUTHORIZATION_RULE: Final[ArkSIAVMAuthorizationRule] = ArkSIAVMAuthorizationRule(
     rule_name='Default VM Rule',
-    user_data=ArkSIAUserData(roles=['DpaAdmin'], groups=[], users=[]),
+    user_data=ArkSIAUserData(roles=[ArkSIAUserDataAttribute(name='DpaAdmin')], groups=[], users=[]),
     connection_information=ArkSIAVMConnectionInformation(
         connect_as={},
         grant_access=2,

ark_sdk_python/common/__init__.py

@@ -1,6 +1,8 @@
 from ark_sdk_python.common.ark_async_client import ArkAsyncClient
 from ark_sdk_python.common.ark_async_request import ArkAsyncRequest
 from ark_sdk_python.common.ark_client import ArkClient
+from ark_sdk_python.common.ark_ip_utils import is_ip_address
+from ark_sdk_python.common.ark_jwt_utils import ArkJWTUtils
 from ark_sdk_python.common.ark_keyring import ArkKeyring
 from ark_sdk_python.common.ark_logger import ArkLogger, get_logger
 from ark_sdk_python.common.ark_page import ArkPage
@@ -18,5 +20,7 @@ __all__ = [
     'ArkPollers',
     'ArkSystemConfig',
     'ArkLogger',
+    'ArkJWTUtils',
     'get_logger',
+    'is_ip_address',
 ]

ark_sdk_python/common/ark_async_client.py

@@ -36,7 +36,12 @@ class ArkAsyncClient(ABC, ArkClient):
         self.__async_request_settings = async_request_settings or ArkAsyncRequestSettings()
 
     @abstractmethod
-    def async_request_for(self, poll_model: ArkPollableModel, async_task: ArkAsyncTask) -> ArkAsyncRequest:
+    def async_request_for(
+        self,
+        poll_model: ArkPollableModel,
+        async_task: ArkAsyncTask,
+        request_class_type: Optional[Type[ArkAsyncRequest]] = None,
+    ) -> ArkAsyncRequest:
         """
         Creates an async request for the specified model and task.
         The request polls for async operations as defined by the poll model's implementation.
@@ -44,6 +49,7 @@ class ArkAsyncClient(ABC, ArkClient):
         Args:
             poll_model (ArkPollableModel): _description_
             async_task (ArkAsyncTask): _description_
+            request_class_type (Optional[Type[ArkAsyncRequest]]): _description_
 
         Returns:
             ArkAsyncRequest: _description_

ark_sdk_python/common/ark_async_request.py

@@ -1,5 +1,5 @@
 from abc import ABC, abstractmethod
-from typing import Callable
+from typing import Callable, Union
 
 from ark_sdk_python.common.ark_client import ArkClient
 from ark_sdk_python.common.ark_logger import get_logger
@@ -7,7 +7,7 @@ from ark_sdk_python.models.common import ArkAsyncRequestSettings, ArkAsyncStatus
 
 
 class ArkAsyncRequest(ABC):
-    def __init__(self, client: ArkClient, async_task: ArkAsyncTask, async_request_settings: ArkAsyncRequestSettings):
+    def __init__(self, client: ArkClient, async_task: Union[ArkAsyncTask, Callable], async_request_settings: ArkAsyncRequestSettings):
         self._async_task = async_task
         self._client = client
         self._async_request_settings = async_request_settings

ark_sdk_python/common/ark_client.py

@@ -8,6 +8,8 @@ from requests import Response, Session
 from requests.cookies import RequestsCookieJar
 
 from ark_sdk_python.common.ark_system_config import ArkSystemConfig
+from ark_sdk_python.common.ark_user_agent import user_agent
+from ark_sdk_python.common.ark_version import __version__
 
 
 def allowed_gai_family():
@@ -34,8 +36,6 @@ class ArkClient:
         origin_verify: Optional[str] = None,
         origin_verify_header_name: str = 'x-origin-verify',
     ) -> None:
-        from fake_useragent import UserAgent
-
         self.__session = Session()
         self.__base_url = base_url
         self.__token = token
@@ -54,7 +54,7 @@ class ArkClient:
             else:
                 verify = ArkSystemConfig.is_verifiying_certificates()
         self.__session.verify = verify
-        self.__session.headers['User-Agent'] = UserAgent(browsers=['chrome']).googlechrome
+        self.__session.headers['User-Agent'] = user_agent()
         if origin_verify is not None and len(origin_verify) > 0:
             self.__session.headers[origin_verify_header_name] = origin_verify
 

ark_sdk_python/common/ark_ip_utils.py

@@ -0,0 +1,9 @@
+import ipaddress
+
+
+def is_ip_address(identifier: str) -> bool:
+    try:
+        ipaddress.ip_address(identifier)
+        return True
+    except ValueError:
+        return False

ark_sdk_python/common/ark_pollers.py

@@ -10,7 +10,7 @@ class ArkPollers:
             from colorama import Fore
 
             if async_status == ArkAsyncStatus.StartedPolling:
-                ArkArgsFormatter.print_colored(async_task.json(indent=4), fore=Fore.GREEN)
+                ArkArgsFormatter.print_colored(async_task.model_dump_json(indent=4), fore=Fore.GREEN)
                 ArkArgsFormatter.print_colored(
                     f'[ID: {async_task.task_id}] Started Polling...[Time Remaining: {time_left_seconds}s, '
                     f'Status: {async_task.task_status()}]',
@@ -35,7 +35,7 @@ class ArkPollers:
                     fore=Fore.CYAN,
                 )
             elif async_status == ArkAsyncStatus.AsyncTaskUpdated:
-                ArkArgsFormatter.print_colored(async_task.json(indent=4), fore=Fore.GREEN)
+                ArkArgsFormatter.print_colored(async_task.model_dump_json(indent=4), fore=Fore.GREEN)
                 ArkArgsFormatter.print_colored(
                     f'[ID: {async_task.task_id}] Still Polling...[Time Remaining: {time_left_seconds}s, '
                     f'Status: {async_task.task_status()}]',

ark_sdk_python/common/ark_user_agent.py

@@ -0,0 +1,7 @@
+from fake_useragent import UserAgent
+
+from ark_sdk_python.common.ark_version import __version__
+
+
+def user_agent() -> str:
+    return UserAgent(browsers=['chrome']).googlechrome + f' Ark-SDK-Python/{__version__}'

ark_sdk_python/common/ark_version.py

@@ -0,0 +1 @@
+__version__ = '2.1.1'

ark_sdk_python/examples/requests/uap_sca_add_policy_request.json

@@ -0,0 +1,61 @@
+{
+  "metadata": {
+    "name": "Cool Cloud Policy",
+    "description": "Cool Cloud Policy Description",
+    "policyTags": [
+      "cool_tag",
+      "cool_tag2"
+    ],
+    "policyEntitlement": {
+      "targetCategory": "Cloud console",
+      "locationType": "AWS",
+      "policyType": "Recurring"
+    },
+    "timeFrame": {
+      "fromTime": null,
+      "toTime": null
+    },
+    "status": {
+      "status": "Validating",
+      "statusCode": null,
+      "statusDescription": "Example status description",
+      "link": null
+    }
+  },
+  "principals": [
+    {
+      "id": "c2c7bcc6-9560-44e0-8dff-5be221cd37ee",
+      "name": "user@cyberark.cloud.12345",
+      "type": "User",
+      "sourceDirectoryName": "CyberArk Cloud Directory",
+      "sourceDirectoryId": "09B9A9B0-6CE8-465F-AB03-65766D33B05E"
+    }
+  ],
+  "conditions": {
+    "accessWindow": {
+      "daysOfTheWeek": [
+        0,
+        1,
+        2,
+        3,
+        4,
+        5,
+        6
+      ],
+      "fromHour": "05:00:00",
+      "toHour": "23:59:00"
+    },
+    "maxSessionDuration": 2
+  },
+  "delegationClassification": "Unrestricted",
+  "targets": {
+    "awsAccountTargets": [
+      {
+        "roleId": "arn:aws:iam::123456789012:role/RoleName",
+        "workspaceId": "123456789012",
+        "roleName": "RoleName",
+        "workspaceName": "WorkspaceName"
+      }
+    ]
+  }
+}