IamClient (AWS SDK for Java

All Superinterfaces:

AutoCloseable, SdkAutoCloseable, SdkClient
```
@Generated(value="software.amazon.awssdk:codegen")
public interface IamClient
extends SdkClient
```
Service client for accessing IAM. This can be created using the static builder() method. AWS Identity and Access Management
AWS Identity and Access Management (IAM) is a web service for securely controlling access to AWS services. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users and applications can access. For more information about IAM, see AWS Identity and Access Management (IAM) and the AWS Identity and Access Management User Guide.

Field Summary

Fields
Modifier and Type Field and Description

static String SERVICE_METADATA_ID
Value for looking up the service's metadata from the ServiceMetadataProvider.

static String SERVICE_NAME

Fields
Modifier and Type	Field and Description
`static String`	`SERVICE_METADATA_ID` Value for looking up the service's metadata from the `ServiceMetadataProvider`.
`static String`	`SERVICE_NAME`

Method Summary

All Methods Static Methods Instance Methods Default Methods
Modifier and Type	Method and Description
`default AddClientIdToOpenIdConnectProviderResponse`	`addClientIDToOpenIDConnectProvider(AddClientIdToOpenIdConnectProviderRequest addClientIdToOpenIdConnectProviderRequest)` Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
`default AddClientIdToOpenIdConnectProviderResponse`	`addClientIDToOpenIDConnectProvider(Consumer<AddClientIdToOpenIdConnectProviderRequest.Builder> addClientIdToOpenIdConnectProviderRequest)` Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
`default AddRoleToInstanceProfileResponse`	`addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest)` Adds the specified IAM role to the specified instance profile.
`default AddRoleToInstanceProfileResponse`	`addRoleToInstanceProfile(Consumer<AddRoleToInstanceProfileRequest.Builder> addRoleToInstanceProfileRequest)` Adds the specified IAM role to the specified instance profile.
`default AddUserToGroupResponse`	`addUserToGroup(AddUserToGroupRequest addUserToGroupRequest)` Adds the specified user to the specified group.
`default AddUserToGroupResponse`	`addUserToGroup(Consumer<AddUserToGroupRequest.Builder> addUserToGroupRequest)` Adds the specified user to the specified group.
`default AttachGroupPolicyResponse`	`attachGroupPolicy(AttachGroupPolicyRequest attachGroupPolicyRequest)` Attaches the specified managed policy to the specified IAM group.
`default AttachGroupPolicyResponse`	`attachGroupPolicy(Consumer<AttachGroupPolicyRequest.Builder> attachGroupPolicyRequest)` Attaches the specified managed policy to the specified IAM group.
`default AttachRolePolicyResponse`	`attachRolePolicy(AttachRolePolicyRequest attachRolePolicyRequest)` Attaches the specified managed policy to the specified IAM role.
`default AttachRolePolicyResponse`	`attachRolePolicy(Consumer<AttachRolePolicyRequest.Builder> attachRolePolicyRequest)` Attaches the specified managed policy to the specified IAM role.
`default AttachUserPolicyResponse`	`attachUserPolicy(AttachUserPolicyRequest attachUserPolicyRequest)` Attaches the specified managed policy to the specified user.
`default AttachUserPolicyResponse`	`attachUserPolicy(Consumer<AttachUserPolicyRequest.Builder> attachUserPolicyRequest)` Attaches the specified managed policy to the specified user.
`static IamClientBuilder`	`builder()` Create a builder that can be used to configure and create a `IamClient`.
`default ChangePasswordResponse`	`changePassword(ChangePasswordRequest changePasswordRequest)` Changes the password of the IAM user who is calling this operation.
`default ChangePasswordResponse`	`changePassword(Consumer<ChangePasswordRequest.Builder> changePasswordRequest)` Changes the password of the IAM user who is calling this operation.
`default CreateAccessKeyResponse`	`createAccessKey()` Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
`default CreateAccessKeyResponse`	`createAccessKey(Consumer<CreateAccessKeyRequest.Builder> createAccessKeyRequest)` Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
`default CreateAccessKeyResponse`	`createAccessKey(CreateAccessKeyRequest createAccessKeyRequest)` Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
`default CreateAccountAliasResponse`	`createAccountAlias(Consumer<CreateAccountAliasRequest.Builder> createAccountAliasRequest)` Creates an alias for your AWS account.
`default CreateAccountAliasResponse`	`createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest)` Creates an alias for your AWS account.
`default CreateGroupResponse`	`createGroup(Consumer<CreateGroupRequest.Builder> createGroupRequest)` Creates a new group.
`default CreateGroupResponse`	`createGroup(CreateGroupRequest createGroupRequest)` Creates a new group.
`default CreateInstanceProfileResponse`	`createInstanceProfile(Consumer<CreateInstanceProfileRequest.Builder> createInstanceProfileRequest)` Creates a new instance profile.
`default CreateInstanceProfileResponse`	`createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest)` Creates a new instance profile.
`default CreateLoginProfileResponse`	`createLoginProfile(Consumer<CreateLoginProfileRequest.Builder> createLoginProfileRequest)` Creates a password for the specified IAM user.
`default CreateLoginProfileResponse`	`createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest)` Creates a password for the specified IAM user.
`default CreateOpenIdConnectProviderResponse`	`createOpenIDConnectProvider(Consumer<CreateOpenIdConnectProviderRequest.Builder> createOpenIdConnectProviderRequest)` Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
`default CreateOpenIdConnectProviderResponse`	`createOpenIDConnectProvider(CreateOpenIdConnectProviderRequest createOpenIdConnectProviderRequest)` Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
`default CreatePolicyResponse`	`createPolicy(Consumer<CreatePolicyRequest.Builder> createPolicyRequest)` Creates a new managed policy for your AWS account.
`default CreatePolicyResponse`	`createPolicy(CreatePolicyRequest createPolicyRequest)` Creates a new managed policy for your AWS account.
`default CreatePolicyVersionResponse`	`createPolicyVersion(Consumer<CreatePolicyVersionRequest.Builder> createPolicyVersionRequest)` Creates a new version of the specified managed policy.
`default CreatePolicyVersionResponse`	`createPolicyVersion(CreatePolicyVersionRequest createPolicyVersionRequest)` Creates a new version of the specified managed policy.
`default CreateRoleResponse`	`createRole(Consumer<CreateRoleRequest.Builder> createRoleRequest)` Creates a new role for your AWS account.
`default CreateRoleResponse`	`createRole(CreateRoleRequest createRoleRequest)` Creates a new role for your AWS account.
`default CreateSamlProviderResponse`	`createSAMLProvider(Consumer<CreateSamlProviderRequest.Builder> createSamlProviderRequest)` Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
`default CreateSamlProviderResponse`	`createSAMLProvider(CreateSamlProviderRequest createSamlProviderRequest)` Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
`default CreateServiceLinkedRoleResponse`	`createServiceLinkedRole(Consumer<CreateServiceLinkedRoleRequest.Builder> createServiceLinkedRoleRequest)` Creates an IAM role that is linked to a specific AWS service.
`default CreateServiceLinkedRoleResponse`	`createServiceLinkedRole(CreateServiceLinkedRoleRequest createServiceLinkedRoleRequest)` Creates an IAM role that is linked to a specific AWS service.
`default CreateServiceSpecificCredentialResponse`	`createServiceSpecificCredential(Consumer<CreateServiceSpecificCredentialRequest.Builder> createServiceSpecificCredentialRequest)` Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request.
`default CreateServiceSpecificCredentialResponse`	`createServiceSpecificCredential(CreateServiceSpecificCredentialRequest createServiceSpecificCredentialRequest)` Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request.
`default CreateUserResponse`	`createUser(Consumer<CreateUserRequest.Builder> createUserRequest)` Creates a new IAM user for your AWS account.
`default CreateUserResponse`	`createUser(CreateUserRequest createUserRequest)` Creates a new IAM user for your AWS account.
`default CreateVirtualMfaDeviceResponse`	`createVirtualMFADevice(Consumer<CreateVirtualMfaDeviceRequest.Builder> createVirtualMfaDeviceRequest)` Creates a new virtual MFA device for the AWS account.
`default CreateVirtualMfaDeviceResponse`	`createVirtualMFADevice(CreateVirtualMfaDeviceRequest createVirtualMfaDeviceRequest)` Creates a new virtual MFA device for the AWS account.
`default DeactivateMfaDeviceResponse`	`deactivateMFADevice(Consumer<DeactivateMfaDeviceRequest.Builder> deactivateMfaDeviceRequest)` Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
`default DeactivateMfaDeviceResponse`	`deactivateMFADevice(DeactivateMfaDeviceRequest deactivateMfaDeviceRequest)` Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
`default DeleteAccessKeyResponse`	`deleteAccessKey(Consumer<DeleteAccessKeyRequest.Builder> deleteAccessKeyRequest)` Deletes the access key pair associated with the specified IAM user.
`default DeleteAccessKeyResponse`	`deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest)` Deletes the access key pair associated with the specified IAM user.
`default DeleteAccountAliasResponse`	`deleteAccountAlias(Consumer<DeleteAccountAliasRequest.Builder> deleteAccountAliasRequest)` Deletes the specified AWS account alias.
`default DeleteAccountAliasResponse`	`deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest)` Deletes the specified AWS account alias.
`default DeleteAccountPasswordPolicyResponse`	`deleteAccountPasswordPolicy()` Deletes the password policy for the AWS account.
`default DeleteAccountPasswordPolicyResponse`	`deleteAccountPasswordPolicy(Consumer<DeleteAccountPasswordPolicyRequest.Builder> deleteAccountPasswordPolicyRequest)` Deletes the password policy for the AWS account.
`default DeleteAccountPasswordPolicyResponse`	`deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest)` Deletes the password policy for the AWS account.
`default DeleteGroupResponse`	`deleteGroup(Consumer<DeleteGroupRequest.Builder> deleteGroupRequest)` Deletes the specified IAM group.
`default DeleteGroupResponse`	`deleteGroup(DeleteGroupRequest deleteGroupRequest)` Deletes the specified IAM group.
`default DeleteGroupPolicyResponse`	`deleteGroupPolicy(Consumer<DeleteGroupPolicyRequest.Builder> deleteGroupPolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM group.
`default DeleteGroupPolicyResponse`	`deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM group.
`default DeleteInstanceProfileResponse`	`deleteInstanceProfile(Consumer<DeleteInstanceProfileRequest.Builder> deleteInstanceProfileRequest)` Deletes the specified instance profile.
`default DeleteInstanceProfileResponse`	`deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest)` Deletes the specified instance profile.
`default DeleteLoginProfileResponse`	`deleteLoginProfile(Consumer<DeleteLoginProfileRequest.Builder> deleteLoginProfileRequest)` Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
`default DeleteLoginProfileResponse`	`deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest)` Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
`default DeleteOpenIdConnectProviderResponse`	`deleteOpenIDConnectProvider(Consumer<DeleteOpenIdConnectProviderRequest.Builder> deleteOpenIdConnectProviderRequest)` Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
`default DeleteOpenIdConnectProviderResponse`	`deleteOpenIDConnectProvider(DeleteOpenIdConnectProviderRequest deleteOpenIdConnectProviderRequest)` Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
`default DeletePolicyResponse`	`deletePolicy(Consumer<DeletePolicyRequest.Builder> deletePolicyRequest)` Deletes the specified managed policy.
`default DeletePolicyResponse`	`deletePolicy(DeletePolicyRequest deletePolicyRequest)` Deletes the specified managed policy.
`default DeletePolicyVersionResponse`	`deletePolicyVersion(Consumer<DeletePolicyVersionRequest.Builder> deletePolicyVersionRequest)` Deletes the specified version from the specified managed policy.
`default DeletePolicyVersionResponse`	`deletePolicyVersion(DeletePolicyVersionRequest deletePolicyVersionRequest)` Deletes the specified version from the specified managed policy.
`default DeleteRoleResponse`	`deleteRole(Consumer<DeleteRoleRequest.Builder> deleteRoleRequest)` Deletes the specified role.
`default DeleteRoleResponse`	`deleteRole(DeleteRoleRequest deleteRoleRequest)` Deletes the specified role.
`default DeleteRolePermissionsBoundaryResponse`	`deleteRolePermissionsBoundary(Consumer<DeleteRolePermissionsBoundaryRequest.Builder> deleteRolePermissionsBoundaryRequest)` Deletes the permissions boundary for the specified IAM role.
`default DeleteRolePermissionsBoundaryResponse`	`deleteRolePermissionsBoundary(DeleteRolePermissionsBoundaryRequest deleteRolePermissionsBoundaryRequest)` Deletes the permissions boundary for the specified IAM role.
`default DeleteRolePolicyResponse`	`deleteRolePolicy(Consumer<DeleteRolePolicyRequest.Builder> deleteRolePolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM role.
`default DeleteRolePolicyResponse`	`deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM role.
`default DeleteSamlProviderResponse`	`deleteSAMLProvider(Consumer<DeleteSamlProviderRequest.Builder> deleteSamlProviderRequest)` Deletes a SAML provider resource in IAM.
`default DeleteSamlProviderResponse`	`deleteSAMLProvider(DeleteSamlProviderRequest deleteSamlProviderRequest)` Deletes a SAML provider resource in IAM.
`default DeleteServerCertificateResponse`	`deleteServerCertificate(Consumer<DeleteServerCertificateRequest.Builder> deleteServerCertificateRequest)` Deletes the specified server certificate.
`default DeleteServerCertificateResponse`	`deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest)` Deletes the specified server certificate.
`default DeleteServiceLinkedRoleResponse`	`deleteServiceLinkedRole(Consumer<DeleteServiceLinkedRoleRequest.Builder> deleteServiceLinkedRoleRequest)` Submits a service-linked role deletion request and returns a `DeletionTaskId`, which you can use to check the status of the deletion.
`default DeleteServiceLinkedRoleResponse`	`deleteServiceLinkedRole(DeleteServiceLinkedRoleRequest deleteServiceLinkedRoleRequest)` Submits a service-linked role deletion request and returns a `DeletionTaskId`, which you can use to check the status of the deletion.
`default DeleteServiceSpecificCredentialResponse`	`deleteServiceSpecificCredential(Consumer<DeleteServiceSpecificCredentialRequest.Builder> deleteServiceSpecificCredentialRequest)` Deletes the specified service-specific credential.
`default DeleteServiceSpecificCredentialResponse`	`deleteServiceSpecificCredential(DeleteServiceSpecificCredentialRequest deleteServiceSpecificCredentialRequest)` Deletes the specified service-specific credential.
`default DeleteSigningCertificateResponse`	`deleteSigningCertificate(Consumer<DeleteSigningCertificateRequest.Builder> deleteSigningCertificateRequest)` Deletes a signing certificate associated with the specified IAM user.
`default DeleteSigningCertificateResponse`	`deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest)` Deletes a signing certificate associated with the specified IAM user.
`default DeleteSshPublicKeyResponse`	`deleteSSHPublicKey(Consumer<DeleteSshPublicKeyRequest.Builder> deleteSshPublicKeyRequest)` Deletes the specified SSH public key.
`default DeleteSshPublicKeyResponse`	`deleteSSHPublicKey(DeleteSshPublicKeyRequest deleteSshPublicKeyRequest)` Deletes the specified SSH public key.
`default DeleteUserResponse`	`deleteUser(Consumer<DeleteUserRequest.Builder> deleteUserRequest)` Deletes the specified IAM user.
`default DeleteUserResponse`	`deleteUser(DeleteUserRequest deleteUserRequest)` Deletes the specified IAM user.
`default DeleteUserPermissionsBoundaryResponse`	`deleteUserPermissionsBoundary(Consumer<DeleteUserPermissionsBoundaryRequest.Builder> deleteUserPermissionsBoundaryRequest)` Deletes the permissions boundary for the specified IAM user.
`default DeleteUserPermissionsBoundaryResponse`	`deleteUserPermissionsBoundary(DeleteUserPermissionsBoundaryRequest deleteUserPermissionsBoundaryRequest)` Deletes the permissions boundary for the specified IAM user.
`default DeleteUserPolicyResponse`	`deleteUserPolicy(Consumer<DeleteUserPolicyRequest.Builder> deleteUserPolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM user.
`default DeleteUserPolicyResponse`	`deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest)` Deletes the specified inline policy that is embedded in the specified IAM user.
`default DeleteVirtualMfaDeviceResponse`	`deleteVirtualMFADevice(Consumer<DeleteVirtualMfaDeviceRequest.Builder> deleteVirtualMfaDeviceRequest)` Deletes a virtual MFA device.
`default DeleteVirtualMfaDeviceResponse`	`deleteVirtualMFADevice(DeleteVirtualMfaDeviceRequest deleteVirtualMfaDeviceRequest)` Deletes a virtual MFA device.
`default DetachGroupPolicyResponse`	`detachGroupPolicy(Consumer<DetachGroupPolicyRequest.Builder> detachGroupPolicyRequest)` Removes the specified managed policy from the specified IAM group.
`default DetachGroupPolicyResponse`	`detachGroupPolicy(DetachGroupPolicyRequest detachGroupPolicyRequest)` Removes the specified managed policy from the specified IAM group.
`default DetachRolePolicyResponse`	`detachRolePolicy(Consumer<DetachRolePolicyRequest.Builder> detachRolePolicyRequest)` Removes the specified managed policy from the specified role.
`default DetachRolePolicyResponse`	`detachRolePolicy(DetachRolePolicyRequest detachRolePolicyRequest)` Removes the specified managed policy from the specified role.
`default DetachUserPolicyResponse`	`detachUserPolicy(Consumer<DetachUserPolicyRequest.Builder> detachUserPolicyRequest)` Removes the specified managed policy from the specified user.
`default DetachUserPolicyResponse`	`detachUserPolicy(DetachUserPolicyRequest detachUserPolicyRequest)` Removes the specified managed policy from the specified user.
`default EnableMfaDeviceResponse`	`enableMFADevice(Consumer<EnableMfaDeviceRequest.Builder> enableMfaDeviceRequest)` Enables the specified MFA device and associates it with the specified IAM user.
`default EnableMfaDeviceResponse`	`enableMFADevice(EnableMfaDeviceRequest enableMfaDeviceRequest)` Enables the specified MFA device and associates it with the specified IAM user.
`default GenerateCredentialReportResponse`	`generateCredentialReport()` Generates a credential report for the AWS account.
`default GenerateCredentialReportResponse`	`generateCredentialReport(Consumer<GenerateCredentialReportRequest.Builder> generateCredentialReportRequest)` Generates a credential report for the AWS account.
`default GenerateCredentialReportResponse`	`generateCredentialReport(GenerateCredentialReportRequest generateCredentialReportRequest)` Generates a credential report for the AWS account.
`default GenerateOrganizationsAccessReportResponse`	`generateOrganizationsAccessReport(Consumer<GenerateOrganizationsAccessReportRequest.Builder> generateOrganizationsAccessReportRequest)` Generates a report for service last accessed data for AWS Organizations.
`default GenerateOrganizationsAccessReportResponse`	`generateOrganizationsAccessReport(GenerateOrganizationsAccessReportRequest generateOrganizationsAccessReportRequest)` Generates a report for service last accessed data for AWS Organizations.
`default GenerateServiceLastAccessedDetailsResponse`	`generateServiceLastAccessedDetails(Consumer<GenerateServiceLastAccessedDetailsRequest.Builder> generateServiceLastAccessedDetailsRequest)` Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used in an attempt to access AWS services.
`default GenerateServiceLastAccessedDetailsResponse`	`generateServiceLastAccessedDetails(GenerateServiceLastAccessedDetailsRequest generateServiceLastAccessedDetailsRequest)` Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used in an attempt to access AWS services.
`default GetAccessKeyLastUsedResponse`	`getAccessKeyLastUsed(Consumer<GetAccessKeyLastUsedRequest.Builder> getAccessKeyLastUsedRequest)` Retrieves information about when the specified access key was last used.
`default GetAccessKeyLastUsedResponse`	`getAccessKeyLastUsed(GetAccessKeyLastUsedRequest getAccessKeyLastUsedRequest)` Retrieves information about when the specified access key was last used.
`default GetAccountAuthorizationDetailsResponse`	`getAccountAuthorizationDetails()` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountAuthorizationDetailsResponse`	`getAccountAuthorizationDetails(Consumer<GetAccountAuthorizationDetailsRequest.Builder> getAccountAuthorizationDetailsRequest)` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountAuthorizationDetailsResponse`	`getAccountAuthorizationDetails(GetAccountAuthorizationDetailsRequest getAccountAuthorizationDetailsRequest)` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountAuthorizationDetailsIterable`	`getAccountAuthorizationDetailsPaginator()` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountAuthorizationDetailsIterable`	`getAccountAuthorizationDetailsPaginator(Consumer<GetAccountAuthorizationDetailsRequest.Builder> getAccountAuthorizationDetailsRequest)` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountAuthorizationDetailsIterable`	`getAccountAuthorizationDetailsPaginator(GetAccountAuthorizationDetailsRequest getAccountAuthorizationDetailsRequest)` Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their relationships to one another.
`default GetAccountPasswordPolicyResponse`	`getAccountPasswordPolicy()` Retrieves the password policy for the AWS account.
`default GetAccountPasswordPolicyResponse`	`getAccountPasswordPolicy(Consumer<GetAccountPasswordPolicyRequest.Builder> getAccountPasswordPolicyRequest)` Retrieves the password policy for the AWS account.
`default GetAccountPasswordPolicyResponse`	`getAccountPasswordPolicy(GetAccountPasswordPolicyRequest getAccountPasswordPolicyRequest)` Retrieves the password policy for the AWS account.
`default GetAccountSummaryResponse`	`getAccountSummary()` Retrieves information about IAM entity usage and IAM quotas in the AWS account.
`default GetAccountSummaryResponse`	`getAccountSummary(Consumer<GetAccountSummaryRequest.Builder> getAccountSummaryRequest)` Retrieves information about IAM entity usage and IAM quotas in the AWS account.
`default GetAccountSummaryResponse`	`getAccountSummary(GetAccountSummaryRequest getAccountSummaryRequest)` Retrieves information about IAM entity usage and IAM quotas in the AWS account.
`default GetContextKeysForCustomPolicyResponse`	`getContextKeysForCustomPolicy(Consumer<GetContextKeysForCustomPolicyRequest.Builder> getContextKeysForCustomPolicyRequest)` Gets a list of all of the context keys referenced in the input policies.
`default GetContextKeysForCustomPolicyResponse`	`getContextKeysForCustomPolicy(GetContextKeysForCustomPolicyRequest getContextKeysForCustomPolicyRequest)` Gets a list of all of the context keys referenced in the input policies.
`default GetContextKeysForPrincipalPolicyResponse`	`getContextKeysForPrincipalPolicy(Consumer<GetContextKeysForPrincipalPolicyRequest.Builder> getContextKeysForPrincipalPolicyRequest)` Gets a list of all of the context keys referenced in all the IAM policies that are attached to the specified IAM entity.
`default GetContextKeysForPrincipalPolicyResponse`	`getContextKeysForPrincipalPolicy(GetContextKeysForPrincipalPolicyRequest getContextKeysForPrincipalPolicyRequest)` Gets a list of all of the context keys referenced in all the IAM policies that are attached to the specified IAM entity.
`default GetCredentialReportResponse`	`getCredentialReport()` Retrieves a credential report for the AWS account.
`default GetCredentialReportResponse`	`getCredentialReport(Consumer<GetCredentialReportRequest.Builder> getCredentialReportRequest)` Retrieves a credential report for the AWS account.
`default GetCredentialReportResponse`	`getCredentialReport(GetCredentialReportRequest getCredentialReportRequest)` Retrieves a credential report for the AWS account.
`default GetGroupResponse`	`getGroup(Consumer<GetGroupRequest.Builder> getGroupRequest)` Returns a list of IAM users that are in the specified IAM group.
`default GetGroupResponse`	`getGroup(GetGroupRequest getGroupRequest)` Returns a list of IAM users that are in the specified IAM group.
`default GetGroupIterable`	`getGroupPaginator(Consumer<GetGroupRequest.Builder> getGroupRequest)` Returns a list of IAM users that are in the specified IAM group.
`default GetGroupIterable`	`getGroupPaginator(GetGroupRequest getGroupRequest)` Returns a list of IAM users that are in the specified IAM group.
`default GetGroupPolicyResponse`	`getGroupPolicy(Consumer<GetGroupPolicyRequest.Builder> getGroupPolicyRequest)` Retrieves the specified inline policy document that is embedded in the specified IAM group.
`default GetGroupPolicyResponse`	`getGroupPolicy(GetGroupPolicyRequest getGroupPolicyRequest)` Retrieves the specified inline policy document that is embedded in the specified IAM group.
`default GetInstanceProfileResponse`	`getInstanceProfile(Consumer<GetInstanceProfileRequest.Builder> getInstanceProfileRequest)` Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role.
`default GetInstanceProfileResponse`	`getInstanceProfile(GetInstanceProfileRequest getInstanceProfileRequest)` Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role.
`default GetLoginProfileResponse`	`getLoginProfile(Consumer<GetLoginProfileRequest.Builder> getLoginProfileRequest)` Retrieves the user name and password creation date for the specified IAM user.
`default GetLoginProfileResponse`	`getLoginProfile(GetLoginProfileRequest getLoginProfileRequest)` Retrieves the user name and password creation date for the specified IAM user.
`default GetOpenIdConnectProviderResponse`	`getOpenIDConnectProvider(Consumer<GetOpenIdConnectProviderRequest.Builder> getOpenIdConnectProviderRequest)` Returns information about the specified OpenID Connect (OIDC) provider resource object in IAM.
`default GetOpenIdConnectProviderResponse`	`getOpenIDConnectProvider(GetOpenIdConnectProviderRequest getOpenIdConnectProviderRequest)` Returns information about the specified OpenID Connect (OIDC) provider resource object in IAM.
`default GetOrganizationsAccessReportResponse`	`getOrganizationsAccessReport(Consumer<GetOrganizationsAccessReportRequest.Builder> getOrganizationsAccessReportRequest)` Retrieves the service last accessed data report for AWS Organizations that was previously generated using the `GenerateOrganizationsAccessReport` operation.
`default GetOrganizationsAccessReportResponse`	`getOrganizationsAccessReport(GetOrganizationsAccessReportRequest getOrganizationsAccessReportRequest)` Retrieves the service last accessed data report for AWS Organizations that was previously generated using the `GenerateOrganizationsAccessReport` operation.
`default GetPolicyResponse`	`getPolicy(Consumer<GetPolicyRequest.Builder> getPolicyRequest)` Retrieves information about the specified managed policy, including the policy's default version and the total number of IAM users, groups, and roles to which the policy is attached.
`default GetPolicyResponse`	`getPolicy(GetPolicyRequest getPolicyRequest)` Retrieves information about the specified managed policy, including the policy's default version and the total number of IAM users, groups, and roles to which the policy is attached.
`default GetPolicyVersionResponse`	`getPolicyVersion(Consumer<GetPolicyVersionRequest.Builder> getPolicyVersionRequest)` Retrieves information about the specified version of the specified managed policy, including the policy document.
`default GetPolicyVersionResponse`	`getPolicyVersion(GetPolicyVersionRequest getPolicyVersionRequest)` Retrieves information about the specified version of the specified managed policy, including the policy document.
`default GetRoleResponse`	`getRole(Consumer<GetRoleRequest.Builder> getRoleRequest)` Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy that grants permission to assume the role.
`default GetRoleResponse`	`getRole(GetRoleRequest getRoleRequest)` Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy that grants permission to assume the role.
`default GetRolePolicyResponse`	`getRolePolicy(Consumer<GetRolePolicyRequest.Builder> getRolePolicyRequest)` Retrieves the specified inline policy document that is embedded with the specified IAM role.
`default GetRolePolicyResponse`	`getRolePolicy(GetRolePolicyRequest getRolePolicyRequest)` Retrieves the specified inline policy document that is embedded with the specified IAM role.
`default GetSamlProviderResponse`	`getSAMLProvider(Consumer<GetSamlProviderRequest.Builder> getSamlProviderRequest)` Returns the SAML provider metadocument that was uploaded when the IAM SAML provider resource object was created or updated.
`default GetSamlProviderResponse`	`getSAMLProvider(GetSamlProviderRequest getSamlProviderRequest)` Returns the SAML provider metadocument that was uploaded when the IAM SAML provider resource object was created or updated.
`default GetServerCertificateResponse`	`getServerCertificate(Consumer<GetServerCertificateRequest.Builder> getServerCertificateRequest)` Retrieves information about the specified server certificate stored in IAM.
`default GetServerCertificateResponse`	`getServerCertificate(GetServerCertificateRequest getServerCertificateRequest)` Retrieves information about the specified server certificate stored in IAM.
`default GetServiceLastAccessedDetailsResponse`	`getServiceLastAccessedDetails(Consumer<GetServiceLastAccessedDetailsRequest.Builder> getServiceLastAccessedDetailsRequest)` Retrieves a service last accessed report that was created using the `GenerateServiceLastAccessedDetails` operation.
`default GetServiceLastAccessedDetailsResponse`	`getServiceLastAccessedDetails(GetServiceLastAccessedDetailsRequest getServiceLastAccessedDetailsRequest)` Retrieves a service last accessed report that was created using the `GenerateServiceLastAccessedDetails` operation.
`default GetServiceLastAccessedDetailsWithEntitiesResponse`	`getServiceLastAccessedDetailsWithEntities(Consumer<GetServiceLastAccessedDetailsWithEntitiesRequest.Builder> getServiceLastAccessedDetailsWithEntitiesRequest)` After you generate a group or policy report using the `GenerateServiceLastAccessedDetails` operation, you can use the `JobId` parameter in `GetServiceLastAccessedDetailsWithEntities`.
`default GetServiceLastAccessedDetailsWithEntitiesResponse`	`getServiceLastAccessedDetailsWithEntities(GetServiceLastAccessedDetailsWithEntitiesRequest getServiceLastAccessedDetailsWithEntitiesRequest)` After you generate a group or policy report using the `GenerateServiceLastAccessedDetails` operation, you can use the `JobId` parameter in `GetServiceLastAccessedDetailsWithEntities`.
`default GetServiceLinkedRoleDeletionStatusResponse`	`getServiceLinkedRoleDeletionStatus(Consumer<GetServiceLinkedRoleDeletionStatusRequest.Builder> getServiceLinkedRoleDeletionStatusRequest)` Retrieves the status of your service-linked role deletion.
`default GetServiceLinkedRoleDeletionStatusResponse`	`getServiceLinkedRoleDeletionStatus(GetServiceLinkedRoleDeletionStatusRequest getServiceLinkedRoleDeletionStatusRequest)` Retrieves the status of your service-linked role deletion.
`default GetSshPublicKeyResponse`	`getSSHPublicKey(Consumer<GetSshPublicKeyRequest.Builder> getSshPublicKeyRequest)` Retrieves the specified SSH public key, including metadata about the key.
`default GetSshPublicKeyResponse`	`getSSHPublicKey(GetSshPublicKeyRequest getSshPublicKeyRequest)` Retrieves the specified SSH public key, including metadata about the key.
`default GetUserResponse`	`getUser()` Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
`default GetUserResponse`	`getUser(Consumer<GetUserRequest.Builder> getUserRequest)` Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
`default GetUserResponse`	`getUser(GetUserRequest getUserRequest)` Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
`default GetUserPolicyResponse`	`getUserPolicy(Consumer<GetUserPolicyRequest.Builder> getUserPolicyRequest)` Retrieves the specified inline policy document that is embedded in the specified IAM user.
`default GetUserPolicyResponse`	`getUserPolicy(GetUserPolicyRequest getUserPolicyRequest)` Retrieves the specified inline policy document that is embedded in the specified IAM user.
`default ListAccessKeysResponse`	`listAccessKeys()` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccessKeysResponse`	`listAccessKeys(Consumer<ListAccessKeysRequest.Builder> listAccessKeysRequest)` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccessKeysResponse`	`listAccessKeys(ListAccessKeysRequest listAccessKeysRequest)` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccessKeysIterable`	`listAccessKeysPaginator()` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccessKeysIterable`	`listAccessKeysPaginator(Consumer<ListAccessKeysRequest.Builder> listAccessKeysRequest)` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccessKeysIterable`	`listAccessKeysPaginator(ListAccessKeysRequest listAccessKeysRequest)` Returns information about the access key IDs associated with the specified IAM user.
`default ListAccountAliasesResponse`	`listAccountAliases()` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAccountAliasesResponse`	`listAccountAliases(Consumer<ListAccountAliasesRequest.Builder> listAccountAliasesRequest)` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAccountAliasesResponse`	`listAccountAliases(ListAccountAliasesRequest listAccountAliasesRequest)` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAccountAliasesIterable`	`listAccountAliasesPaginator()` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAccountAliasesIterable`	`listAccountAliasesPaginator(Consumer<ListAccountAliasesRequest.Builder> listAccountAliasesRequest)` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAccountAliasesIterable`	`listAccountAliasesPaginator(ListAccountAliasesRequest listAccountAliasesRequest)` Lists the account alias associated with the AWS account (Note: you can have only one).
`default ListAttachedGroupPoliciesResponse`	`listAttachedGroupPolicies(Consumer<ListAttachedGroupPoliciesRequest.Builder> listAttachedGroupPoliciesRequest)` Lists all managed policies that are attached to the specified IAM group.
`default ListAttachedGroupPoliciesResponse`	`listAttachedGroupPolicies(ListAttachedGroupPoliciesRequest listAttachedGroupPoliciesRequest)` Lists all managed policies that are attached to the specified IAM group.
`default ListAttachedGroupPoliciesIterable`	`listAttachedGroupPoliciesPaginator(Consumer<ListAttachedGroupPoliciesRequest.Builder> listAttachedGroupPoliciesRequest)` Lists all managed policies that are attached to the specified IAM group.
`default ListAttachedGroupPoliciesIterable`	`listAttachedGroupPoliciesPaginator(ListAttachedGroupPoliciesRequest listAttachedGroupPoliciesRequest)` Lists all managed policies that are attached to the specified IAM group.
`default ListAttachedRolePoliciesResponse`	`listAttachedRolePolicies(Consumer<ListAttachedRolePoliciesRequest.Builder> listAttachedRolePoliciesRequest)` Lists all managed policies that are attached to the specified IAM role.
`default ListAttachedRolePoliciesResponse`	`listAttachedRolePolicies(ListAttachedRolePoliciesRequest listAttachedRolePoliciesRequest)` Lists all managed policies that are attached to the specified IAM role.
`default ListAttachedRolePoliciesIterable`	`listAttachedRolePoliciesPaginator(Consumer<ListAttachedRolePoliciesRequest.Builder> listAttachedRolePoliciesRequest)` Lists all managed policies that are attached to the specified IAM role.
`default ListAttachedRolePoliciesIterable`	`listAttachedRolePoliciesPaginator(ListAttachedRolePoliciesRequest listAttachedRolePoliciesRequest)` Lists all managed policies that are attached to the specified IAM role.
`default ListAttachedUserPoliciesResponse`	`listAttachedUserPolicies(Consumer<ListAttachedUserPoliciesRequest.Builder> listAttachedUserPoliciesRequest)` Lists all managed policies that are attached to the specified IAM user.
`default ListAttachedUserPoliciesResponse`	`listAttachedUserPolicies(ListAttachedUserPoliciesRequest listAttachedUserPoliciesRequest)` Lists all managed policies that are attached to the specified IAM user.
`default ListAttachedUserPoliciesIterable`	`listAttachedUserPoliciesPaginator(Consumer<ListAttachedUserPoliciesRequest.Builder> listAttachedUserPoliciesRequest)` Lists all managed policies that are attached to the specified IAM user.
`default ListAttachedUserPoliciesIterable`	`listAttachedUserPoliciesPaginator(ListAttachedUserPoliciesRequest listAttachedUserPoliciesRequest)` Lists all managed policies that are attached to the specified IAM user.
`default ListEntitiesForPolicyResponse`	`listEntitiesForPolicy(Consumer<ListEntitiesForPolicyRequest.Builder> listEntitiesForPolicyRequest)` Lists all IAM users, groups, and roles that the specified managed policy is attached to.
`default ListEntitiesForPolicyResponse`	`listEntitiesForPolicy(ListEntitiesForPolicyRequest listEntitiesForPolicyRequest)` Lists all IAM users, groups, and roles that the specified managed policy is attached to.
`default ListEntitiesForPolicyIterable`	`listEntitiesForPolicyPaginator(Consumer<ListEntitiesForPolicyRequest.Builder> listEntitiesForPolicyRequest)` Lists all IAM users, groups, and roles that the specified managed policy is attached to.
`default ListEntitiesForPolicyIterable`	`listEntitiesForPolicyPaginator(ListEntitiesForPolicyRequest listEntitiesForPolicyRequest)` Lists all IAM users, groups, and roles that the specified managed policy is attached to.
`default ListGroupPoliciesResponse`	`listGroupPolicies(Consumer<ListGroupPoliciesRequest.Builder> listGroupPoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM group.
`default ListGroupPoliciesResponse`	`listGroupPolicies(ListGroupPoliciesRequest listGroupPoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM group.
`default ListGroupPoliciesIterable`	`listGroupPoliciesPaginator(Consumer<ListGroupPoliciesRequest.Builder> listGroupPoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM group.
`default ListGroupPoliciesIterable`	`listGroupPoliciesPaginator(ListGroupPoliciesRequest listGroupPoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM group.
`default ListGroupsResponse`	`listGroups()` Lists the IAM groups that have the specified path prefix.
`default ListGroupsResponse`	`listGroups(Consumer<ListGroupsRequest.Builder> listGroupsRequest)` Lists the IAM groups that have the specified path prefix.
`default ListGroupsResponse`	`listGroups(ListGroupsRequest listGroupsRequest)` Lists the IAM groups that have the specified path prefix.
`default ListGroupsForUserResponse`	`listGroupsForUser(Consumer<ListGroupsForUserRequest.Builder> listGroupsForUserRequest)` Lists the IAM groups that the specified IAM user belongs to.
`default ListGroupsForUserResponse`	`listGroupsForUser(ListGroupsForUserRequest listGroupsForUserRequest)` Lists the IAM groups that the specified IAM user belongs to.
`default ListGroupsForUserIterable`	`listGroupsForUserPaginator(Consumer<ListGroupsForUserRequest.Builder> listGroupsForUserRequest)` Lists the IAM groups that the specified IAM user belongs to.
`default ListGroupsForUserIterable`	`listGroupsForUserPaginator(ListGroupsForUserRequest listGroupsForUserRequest)` Lists the IAM groups that the specified IAM user belongs to.
`default ListGroupsIterable`	`listGroupsPaginator()` Lists the IAM groups that have the specified path prefix.
`default ListGroupsIterable`	`listGroupsPaginator(Consumer<ListGroupsRequest.Builder> listGroupsRequest)` Lists the IAM groups that have the specified path prefix.
`default ListGroupsIterable`	`listGroupsPaginator(ListGroupsRequest listGroupsRequest)` Lists the IAM groups that have the specified path prefix.
`default ListInstanceProfilesResponse`	`listInstanceProfiles()` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfilesResponse`	`listInstanceProfiles(Consumer<ListInstanceProfilesRequest.Builder> listInstanceProfilesRequest)` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfilesResponse`	`listInstanceProfiles(ListInstanceProfilesRequest listInstanceProfilesRequest)` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfilesForRoleResponse`	`listInstanceProfilesForRole(Consumer<ListInstanceProfilesForRoleRequest.Builder> listInstanceProfilesForRoleRequest)` Lists the instance profiles that have the specified associated IAM role.
`default ListInstanceProfilesForRoleResponse`	`listInstanceProfilesForRole(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)` Lists the instance profiles that have the specified associated IAM role.
`default ListInstanceProfilesForRoleIterable`	`listInstanceProfilesForRolePaginator(Consumer<ListInstanceProfilesForRoleRequest.Builder> listInstanceProfilesForRoleRequest)` Lists the instance profiles that have the specified associated IAM role.
`default ListInstanceProfilesForRoleIterable`	`listInstanceProfilesForRolePaginator(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)` Lists the instance profiles that have the specified associated IAM role.
`default ListInstanceProfilesIterable`	`listInstanceProfilesPaginator()` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfilesIterable`	`listInstanceProfilesPaginator(Consumer<ListInstanceProfilesRequest.Builder> listInstanceProfilesRequest)` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfilesIterable`	`listInstanceProfilesPaginator(ListInstanceProfilesRequest listInstanceProfilesRequest)` Lists the instance profiles that have the specified path prefix.
`default ListInstanceProfileTagsResponse`	`listInstanceProfileTags(Consumer<ListInstanceProfileTagsRequest.Builder> listInstanceProfileTagsRequest)` Lists the tags that are attached to the specified IAM instance profile.
`default ListInstanceProfileTagsResponse`	`listInstanceProfileTags(ListInstanceProfileTagsRequest listInstanceProfileTagsRequest)` Lists the tags that are attached to the specified IAM instance profile.
`default ListMfaDevicesResponse`	`listMFADevices()` Lists the MFA devices for an IAM user.
`default ListMfaDevicesResponse`	`listMFADevices(Consumer<ListMfaDevicesRequest.Builder> listMfaDevicesRequest)` Lists the MFA devices for an IAM user.
`default ListMfaDevicesResponse`	`listMFADevices(ListMfaDevicesRequest listMfaDevicesRequest)` Lists the MFA devices for an IAM user.
`default ListMFADevicesIterable`	`listMFADevicesPaginator()` Lists the MFA devices for an IAM user.
`default ListMFADevicesIterable`	`listMFADevicesPaginator(Consumer<ListMfaDevicesRequest.Builder> listMfaDevicesRequest)` Lists the MFA devices for an IAM user.
`default ListMFADevicesIterable`	`listMFADevicesPaginator(ListMfaDevicesRequest listMfaDevicesRequest)` Lists the MFA devices for an IAM user.
`default ListMfaDeviceTagsResponse`	`listMFADeviceTags(Consumer<ListMfaDeviceTagsRequest.Builder> listMfaDeviceTagsRequest)` Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device.
`default ListMfaDeviceTagsResponse`	`listMFADeviceTags(ListMfaDeviceTagsRequest listMfaDeviceTagsRequest)` Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device.
`default ListOpenIdConnectProvidersResponse`	`listOpenIDConnectProviders()` Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
`default ListOpenIdConnectProvidersResponse`	`listOpenIDConnectProviders(Consumer<ListOpenIdConnectProvidersRequest.Builder> listOpenIdConnectProvidersRequest)` Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
`default ListOpenIdConnectProvidersResponse`	`listOpenIDConnectProviders(ListOpenIdConnectProvidersRequest listOpenIdConnectProvidersRequest)` Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
`default ListOpenIdConnectProviderTagsResponse`	`listOpenIDConnectProviderTags(Consumer<ListOpenIdConnectProviderTagsRequest.Builder> listOpenIdConnectProviderTagsRequest)` Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible identity provider.
`default ListOpenIdConnectProviderTagsResponse`	`listOpenIDConnectProviderTags(ListOpenIdConnectProviderTagsRequest listOpenIdConnectProviderTagsRequest)` Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible identity provider.
`default ListPoliciesResponse`	`listPolicies()` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPoliciesResponse`	`listPolicies(Consumer<ListPoliciesRequest.Builder> listPoliciesRequest)` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPoliciesResponse`	`listPolicies(ListPoliciesRequest listPoliciesRequest)` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPoliciesGrantingServiceAccessResponse`	`listPoliciesGrantingServiceAccess(Consumer<ListPoliciesGrantingServiceAccessRequest.Builder> listPoliciesGrantingServiceAccessRequest)` Retrieves a list of policies that the IAM identity (user, group, or role) can use to access each specified service.
`default ListPoliciesGrantingServiceAccessResponse`	`listPoliciesGrantingServiceAccess(ListPoliciesGrantingServiceAccessRequest listPoliciesGrantingServiceAccessRequest)` Retrieves a list of policies that the IAM identity (user, group, or role) can use to access each specified service.
`default ListPoliciesIterable`	`listPoliciesPaginator()` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPoliciesIterable`	`listPoliciesPaginator(Consumer<ListPoliciesRequest.Builder> listPoliciesRequest)` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPoliciesIterable`	`listPoliciesPaginator(ListPoliciesRequest listPoliciesRequest)` Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
`default ListPolicyTagsResponse`	`listPolicyTags(Consumer<ListPolicyTagsRequest.Builder> listPolicyTagsRequest)` Lists the tags that are attached to the specified IAM customer managed policy.
`default ListPolicyTagsResponse`	`listPolicyTags(ListPolicyTagsRequest listPolicyTagsRequest)` Lists the tags that are attached to the specified IAM customer managed policy.
`default ListPolicyVersionsResponse`	`listPolicyVersions(Consumer<ListPolicyVersionsRequest.Builder> listPolicyVersionsRequest)` Lists information about the versions of the specified managed policy, including the version that is currently set as the policy's default version.
`default ListPolicyVersionsResponse`	`listPolicyVersions(ListPolicyVersionsRequest listPolicyVersionsRequest)` Lists information about the versions of the specified managed policy, including the version that is currently set as the policy's default version.
`default ListPolicyVersionsIterable`	`listPolicyVersionsPaginator(Consumer<ListPolicyVersionsRequest.Builder> listPolicyVersionsRequest)` Lists information about the versions of the specified managed policy, including the version that is currently set as the policy's default version.
`default ListPolicyVersionsIterable`	`listPolicyVersionsPaginator(ListPolicyVersionsRequest listPolicyVersionsRequest)` Lists information about the versions of the specified managed policy, including the version that is currently set as the policy's default version.
`default ListRolePoliciesResponse`	`listRolePolicies(Consumer<ListRolePoliciesRequest.Builder> listRolePoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM role.
`default ListRolePoliciesResponse`	`listRolePolicies(ListRolePoliciesRequest listRolePoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM role.
`default ListRolePoliciesIterable`	`listRolePoliciesPaginator(Consumer<ListRolePoliciesRequest.Builder> listRolePoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM role.
`default ListRolePoliciesIterable`	`listRolePoliciesPaginator(ListRolePoliciesRequest listRolePoliciesRequest)` Lists the names of the inline policies that are embedded in the specified IAM role.
`default ListRolesResponse`	`listRoles()` Lists the IAM roles that have the specified path prefix.
`default ListRolesResponse`	`listRoles(Consumer<ListRolesRequest.Builder> listRolesRequest)` Lists the IAM roles that have the specified path prefix.
`default ListRolesResponse`	`listRoles(ListRolesRequest listRolesRequest)` Lists the IAM roles that have the specified path prefix.
`default ListRolesIterable`	`listRolesPaginator()` Lists the IAM roles that have the specified path prefix.
`default ListRolesIterable`	`listRolesPaginator(Consumer<ListRolesRequest.Builder> listRolesRequest)` Lists the IAM roles that have the specified path prefix.
`default ListRolesIterable`	`listRolesPaginator(ListRolesRequest listRolesRequest)` Lists the IAM roles that have the specified path prefix.
`default ListRoleTagsResponse`	`listRoleTags(Consumer<ListRoleTagsRequest.Builder> listRoleTagsRequest)` Lists the tags that are attached to the specified role.
`default ListRoleTagsResponse`	`listRoleTags(ListRoleTagsRequest listRoleTagsRequest)` Lists the tags that are attached to the specified role.
`default ListSamlProvidersResponse`	`listSAMLProviders()` Lists the SAML provider resource objects defined in IAM in the account.
`default ListSamlProvidersResponse`	`listSAMLProviders(Consumer<ListSamlProvidersRequest.Builder> listSamlProvidersRequest)` Lists the SAML provider resource objects defined in IAM in the account.
`default ListSamlProvidersResponse`	`listSAMLProviders(ListSamlProvidersRequest listSamlProvidersRequest)` Lists the SAML provider resource objects defined in IAM in the account.
`default ListSamlProviderTagsResponse`	`listSAMLProviderTags(Consumer<ListSamlProviderTagsRequest.Builder> listSamlProviderTagsRequest)` Lists the tags that are attached to the specified Security Assertion Markup Language (SAML) identity provider.
`default ListSamlProviderTagsResponse`	`listSAMLProviderTags(ListSamlProviderTagsRequest listSamlProviderTagsRequest)` Lists the tags that are attached to the specified Security Assertion Markup Language (SAML) identity provider.
`default ListServerCertificatesResponse`	`listServerCertificates()` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificatesResponse`	`listServerCertificates(Consumer<ListServerCertificatesRequest.Builder> listServerCertificatesRequest)` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificatesResponse`	`listServerCertificates(ListServerCertificatesRequest listServerCertificatesRequest)` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificatesIterable`	`listServerCertificatesPaginator()` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificatesIterable`	`listServerCertificatesPaginator(Consumer<ListServerCertificatesRequest.Builder> listServerCertificatesRequest)` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificatesIterable`	`listServerCertificatesPaginator(ListServerCertificatesRequest listServerCertificatesRequest)` Lists the server certificates stored in IAM that have the specified path prefix.
`default ListServerCertificateTagsResponse`	`listServerCertificateTags(Consumer<ListServerCertificateTagsRequest.Builder> listServerCertificateTagsRequest)` Lists the tags that are attached to the specified IAM server certificate.
`default ListServerCertificateTagsResponse`	`listServerCertificateTags(ListServerCertificateTagsRequest listServerCertificateTagsRequest)` Lists the tags that are attached to the specified IAM server certificate.
`default ListServiceSpecificCredentialsResponse`	`listServiceSpecificCredentials()` Returns information about the service-specific credentials associated with the specified IAM user.
`default ListServiceSpecificCredentialsResponse`	`listServiceSpecificCredentials(Consumer<ListServiceSpecificCredentialsRequest.Builder> listServiceSpecificCredentialsRequest)` Returns information about the service-specific credentials associated with the specified IAM user.
`default ListServiceSpecificCredentialsResponse`	`listServiceSpecificCredentials(ListServiceSpecificCredentialsRequest listServiceSpecificCredentialsRequest)` Returns information about the service-specific credentials associated with the specified IAM user.
`default ListSigningCertificatesResponse`	`listSigningCertificates()` Returns information about the signing certificates associated with the specified IAM user.
`default ListSigningCertificatesResponse`	`listSigningCertificates(Consumer<ListSigningCertificatesRequest.Builder> listSigningCertificatesRequest)` Returns information about the signing certificates associated with the specified IAM user.
`default ListSigningCertificatesResponse`	`listSigningCertificates(ListSigningCertificatesRequest listSigningCertificatesRequest)` Returns information about the signing certificates associated with the specified IAM user.
`default ListSigningCertificatesIterable`	`listSigningCertificatesPaginator()` Returns information about the signing certificates associated with the specified IAM user.
`default ListSigningCertificatesIterable`	`listSigningCertificatesPaginator(Consumer<ListSigningCertificatesRequest.Builder> listSigningCertificatesRequest)` Returns information about the signing certificates associated with the specified IAM user.
`default ListSigningCertificatesIterable`	`listSigningCertificatesPaginator(ListSigningCertificatesRequest listSigningCertificatesRequest)` Returns information about the signing certificates associated with the specified IAM user.
`default ListSshPublicKeysResponse`	`listSSHPublicKeys()` Returns information about the SSH public keys associated with the specified IAM user.
`default ListSshPublicKeysResponse`	`listSSHPublicKeys(Consumer<ListSshPublicKeysRequest.Builder> listSshPublicKeysRequest)` Returns information about the SSH public keys associated with the specified IAM user.
`default ListSshPublicKeysResponse`	`listSSHPublicKeys(ListSshPublicKeysRequest listSshPublicKeysRequest)` Returns information about the SSH public keys associated with the specified IAM user.
`default ListSSHPublicKeysIterable`	`listSSHPublicKeysPaginator()` Returns information about the SSH public keys associated with the specified IAM user.
`default ListSSHPublicKeysIterable`	`listSSHPublicKeysPaginator(Consumer<ListSshPublicKeysRequest.Builder> listSshPublicKeysRequest)` Returns information about the SSH public keys associated with the specified IAM user.
`default ListSSHPublicKeysIterable`	`listSSHPublicKeysPaginator(ListSshPublicKeysRequest listSshPublicKeysRequest)` Returns information about the SSH public keys associated with the specified IAM user.
`default ListUserPoliciesResponse`	`listUserPolicies(Consumer<ListUserPoliciesRequest.Builder> listUserPoliciesRequest)` Lists the names of the inline policies embedded in the specified IAM user.
`default ListUserPoliciesResponse`	`listUserPolicies(ListUserPoliciesRequest listUserPoliciesRequest)` Lists the names of the inline policies embedded in the specified IAM user.
`default ListUserPoliciesIterable`	`listUserPoliciesPaginator(Consumer<ListUserPoliciesRequest.Builder> listUserPoliciesRequest)` Lists the names of the inline policies embedded in the specified IAM user.
`default ListUserPoliciesIterable`	`listUserPoliciesPaginator(ListUserPoliciesRequest listUserPoliciesRequest)` Lists the names of the inline policies embedded in the specified IAM user.
`default ListUsersResponse`	`listUsers()` Lists the IAM users that have the specified path prefix.
`default ListUsersResponse`	`listUsers(Consumer<ListUsersRequest.Builder> listUsersRequest)` Lists the IAM users that have the specified path prefix.
`default ListUsersResponse`	`listUsers(ListUsersRequest listUsersRequest)` Lists the IAM users that have the specified path prefix.
`default ListUsersIterable`	`listUsersPaginator()` Lists the IAM users that have the specified path prefix.
`default ListUsersIterable`	`listUsersPaginator(Consumer<ListUsersRequest.Builder> listUsersRequest)` Lists the IAM users that have the specified path prefix.
`default ListUsersIterable`	`listUsersPaginator(ListUsersRequest listUsersRequest)` Lists the IAM users that have the specified path prefix.
`default ListUserTagsResponse`	`listUserTags(Consumer<ListUserTagsRequest.Builder> listUserTagsRequest)` Lists the tags that are attached to the specified IAM user.
`default ListUserTagsResponse`	`listUserTags(ListUserTagsRequest listUserTagsRequest)` Lists the tags that are attached to the specified IAM user.
`default ListVirtualMfaDevicesResponse`	`listVirtualMFADevices()` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default ListVirtualMfaDevicesResponse`	`listVirtualMFADevices(Consumer<ListVirtualMfaDevicesRequest.Builder> listVirtualMfaDevicesRequest)` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default ListVirtualMfaDevicesResponse`	`listVirtualMFADevices(ListVirtualMfaDevicesRequest listVirtualMfaDevicesRequest)` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default ListVirtualMFADevicesIterable`	`listVirtualMFADevicesPaginator()` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default ListVirtualMFADevicesIterable`	`listVirtualMFADevicesPaginator(Consumer<ListVirtualMfaDevicesRequest.Builder> listVirtualMfaDevicesRequest)` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default ListVirtualMFADevicesIterable`	`listVirtualMFADevicesPaginator(ListVirtualMfaDevicesRequest listVirtualMfaDevicesRequest)` Lists the virtual MFA devices defined in the AWS account by assignment status.
`default PutGroupPolicyResponse`	`putGroupPolicy(Consumer<PutGroupPolicyRequest.Builder> putGroupPolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM group.
`default PutGroupPolicyResponse`	`putGroupPolicy(PutGroupPolicyRequest putGroupPolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM group.
`default PutRolePermissionsBoundaryResponse`	`putRolePermissionsBoundary(Consumer<PutRolePermissionsBoundaryRequest.Builder> putRolePermissionsBoundaryRequest)` Adds or updates the policy that is specified as the IAM role's permissions boundary.
`default PutRolePermissionsBoundaryResponse`	`putRolePermissionsBoundary(PutRolePermissionsBoundaryRequest putRolePermissionsBoundaryRequest)` Adds or updates the policy that is specified as the IAM role's permissions boundary.
`default PutRolePolicyResponse`	`putRolePolicy(Consumer<PutRolePolicyRequest.Builder> putRolePolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM role.
`default PutRolePolicyResponse`	`putRolePolicy(PutRolePolicyRequest putRolePolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM role.
`default PutUserPermissionsBoundaryResponse`	`putUserPermissionsBoundary(Consumer<PutUserPermissionsBoundaryRequest.Builder> putUserPermissionsBoundaryRequest)` Adds or updates the policy that is specified as the IAM user's permissions boundary.
`default PutUserPermissionsBoundaryResponse`	`putUserPermissionsBoundary(PutUserPermissionsBoundaryRequest putUserPermissionsBoundaryRequest)` Adds or updates the policy that is specified as the IAM user's permissions boundary.
`default PutUserPolicyResponse`	`putUserPolicy(Consumer<PutUserPolicyRequest.Builder> putUserPolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM user.
`default PutUserPolicyResponse`	`putUserPolicy(PutUserPolicyRequest putUserPolicyRequest)` Adds or updates an inline policy document that is embedded in the specified IAM user.
`default RemoveClientIdFromOpenIdConnectProviderResponse`	`removeClientIDFromOpenIDConnectProvider(Consumer<RemoveClientIdFromOpenIdConnectProviderRequest.Builder> removeClientIdFromOpenIdConnectProviderRequest)` Removes the specified client ID (also known as audience) from the list of client IDs registered for the specified IAM OpenID Connect (OIDC) provider resource object.
`default RemoveClientIdFromOpenIdConnectProviderResponse`	`removeClientIDFromOpenIDConnectProvider(RemoveClientIdFromOpenIdConnectProviderRequest removeClientIdFromOpenIdConnectProviderRequest)` Removes the specified client ID (also known as audience) from the list of client IDs registered for the specified IAM OpenID Connect (OIDC) provider resource object.
`default RemoveRoleFromInstanceProfileResponse`	`removeRoleFromInstanceProfile(Consumer<RemoveRoleFromInstanceProfileRequest.Builder> removeRoleFromInstanceProfileRequest)` Removes the specified IAM role from the specified EC2 instance profile.
`default RemoveRoleFromInstanceProfileResponse`	`removeRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest removeRoleFromInstanceProfileRequest)` Removes the specified IAM role from the specified EC2 instance profile.
`default RemoveUserFromGroupResponse`	`removeUserFromGroup(Consumer<RemoveUserFromGroupRequest.Builder> removeUserFromGroupRequest)` Removes the specified user from the specified group.
`default RemoveUserFromGroupResponse`	`removeUserFromGroup(RemoveUserFromGroupRequest removeUserFromGroupRequest)` Removes the specified user from the specified group.
`default ResetServiceSpecificCredentialResponse`	`resetServiceSpecificCredential(Consumer<ResetServiceSpecificCredentialRequest.Builder> resetServiceSpecificCredentialRequest)` Resets the password for a service-specific credential.
`default ResetServiceSpecificCredentialResponse`	`resetServiceSpecificCredential(ResetServiceSpecificCredentialRequest resetServiceSpecificCredentialRequest)` Resets the password for a service-specific credential.
`default ResyncMfaDeviceResponse`	`resyncMFADevice(Consumer<ResyncMfaDeviceRequest.Builder> resyncMfaDeviceRequest)` Synchronizes the specified MFA device with its IAM resource object on the AWS servers.
`default ResyncMfaDeviceResponse`	`resyncMFADevice(ResyncMfaDeviceRequest resyncMfaDeviceRequest)` Synchronizes the specified MFA device with its IAM resource object on the AWS servers.
`static ServiceMetadata`	`serviceMetadata()`
`default SetDefaultPolicyVersionResponse`	`setDefaultPolicyVersion(Consumer<SetDefaultPolicyVersionRequest.Builder> setDefaultPolicyVersionRequest)` Sets the specified version of the specified policy as the policy's default (operative) version.
`default SetDefaultPolicyVersionResponse`	`setDefaultPolicyVersion(SetDefaultPolicyVersionRequest setDefaultPolicyVersionRequest)` Sets the specified version of the specified policy as the policy's default (operative) version.
`default SetSecurityTokenServicePreferencesResponse`	`setSecurityTokenServicePreferences(Consumer<SetSecurityTokenServicePreferencesRequest.Builder> setSecurityTokenServicePreferencesRequest)` Sets the specified version of the global endpoint token as the token version used for the AWS account.
`default SetSecurityTokenServicePreferencesResponse`	`setSecurityTokenServicePreferences(SetSecurityTokenServicePreferencesRequest setSecurityTokenServicePreferencesRequest)` Sets the specified version of the global endpoint token as the token version used for the AWS account.
`default SimulateCustomPolicyResponse`	`simulateCustomPolicy(Consumer<SimulateCustomPolicyRequest.Builder> simulateCustomPolicyRequest)` Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulateCustomPolicyResponse`	`simulateCustomPolicy(SimulateCustomPolicyRequest simulateCustomPolicyRequest)` Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulateCustomPolicyIterable`	`simulateCustomPolicyPaginator(Consumer<SimulateCustomPolicyRequest.Builder> simulateCustomPolicyRequest)` Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulateCustomPolicyIterable`	`simulateCustomPolicyPaginator(SimulateCustomPolicyRequest simulateCustomPolicyRequest)` Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulatePrincipalPolicyResponse`	`simulatePrincipalPolicy(Consumer<SimulatePrincipalPolicyRequest.Builder> simulatePrincipalPolicyRequest)` Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulatePrincipalPolicyResponse`	`simulatePrincipalPolicy(SimulatePrincipalPolicyRequest simulatePrincipalPolicyRequest)` Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulatePrincipalPolicyIterable`	`simulatePrincipalPolicyPaginator(Consumer<SimulatePrincipalPolicyRequest.Builder> simulatePrincipalPolicyRequest)` Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default SimulatePrincipalPolicyIterable`	`simulatePrincipalPolicyPaginator(SimulatePrincipalPolicyRequest simulatePrincipalPolicyRequest)` Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS resources to determine the policies' effective permissions.
`default TagInstanceProfileResponse`	`tagInstanceProfile(Consumer<TagInstanceProfileRequest.Builder> tagInstanceProfileRequest)` Adds one or more tags to an IAM instance profile.
`default TagInstanceProfileResponse`	`tagInstanceProfile(TagInstanceProfileRequest tagInstanceProfileRequest)` Adds one or more tags to an IAM instance profile.
`default TagMfaDeviceResponse`	`tagMFADevice(Consumer<TagMfaDeviceRequest.Builder> tagMfaDeviceRequest)` Adds one or more tags to an IAM virtual multi-factor authentication (MFA) device.
`default TagMfaDeviceResponse`	`tagMFADevice(TagMfaDeviceRequest tagMfaDeviceRequest)` Adds one or more tags to an IAM virtual multi-factor authentication (MFA) device.
`default TagOpenIdConnectProviderResponse`	`tagOpenIDConnectProvider(Consumer<TagOpenIdConnectProviderRequest.Builder> tagOpenIdConnectProviderRequest)` Adds one or more tags to an OpenID Connect (OIDC)-compatible identity provider.
`default TagOpenIdConnectProviderResponse`	`tagOpenIDConnectProvider(TagOpenIdConnectProviderRequest tagOpenIdConnectProviderRequest)` Adds one or more tags to an OpenID Connect (OIDC)-compatible identity provider.
`default TagPolicyResponse`	`tagPolicy(Consumer<TagPolicyRequest.Builder> tagPolicyRequest)` Adds one or more tags to an IAM customer managed policy.
`default TagPolicyResponse`	`tagPolicy(TagPolicyRequest tagPolicyRequest)` Adds one or more tags to an IAM customer managed policy.
`default TagRoleResponse`	`tagRole(Consumer<TagRoleRequest.Builder> tagRoleRequest)` Adds one or more tags to an IAM role.
`default TagRoleResponse`	`tagRole(TagRoleRequest tagRoleRequest)` Adds one or more tags to an IAM role.
`default TagSamlProviderResponse`	`tagSAMLProvider(Consumer<TagSamlProviderRequest.Builder> tagSamlProviderRequest)` Adds one or more tags to a Security Assertion Markup Language (SAML) identity provider.
`default TagSamlProviderResponse`	`tagSAMLProvider(TagSamlProviderRequest tagSamlProviderRequest)` Adds one or more tags to a Security Assertion Markup Language (SAML) identity provider.
`default TagServerCertificateResponse`	`tagServerCertificate(Consumer<TagServerCertificateRequest.Builder> tagServerCertificateRequest)` Adds one or more tags to an IAM server certificate.
`default TagServerCertificateResponse`	`tagServerCertificate(TagServerCertificateRequest tagServerCertificateRequest)` Adds one or more tags to an IAM server certificate.
`default TagUserResponse`	`tagUser(Consumer<TagUserRequest.Builder> tagUserRequest)` Adds one or more tags to an IAM user.
`default TagUserResponse`	`tagUser(TagUserRequest tagUserRequest)` Adds one or more tags to an IAM user.
`default UntagInstanceProfileResponse`	`untagInstanceProfile(Consumer<UntagInstanceProfileRequest.Builder> untagInstanceProfileRequest)` Removes the specified tags from the IAM instance profile.
`default UntagInstanceProfileResponse`	`untagInstanceProfile(UntagInstanceProfileRequest untagInstanceProfileRequest)` Removes the specified tags from the IAM instance profile.
`default UntagMfaDeviceResponse`	`untagMFADevice(Consumer<UntagMfaDeviceRequest.Builder> untagMfaDeviceRequest)` Removes the specified tags from the IAM virtual multi-factor authentication (MFA) device.
`default UntagMfaDeviceResponse`	`untagMFADevice(UntagMfaDeviceRequest untagMfaDeviceRequest)` Removes the specified tags from the IAM virtual multi-factor authentication (MFA) device.
`default UntagOpenIdConnectProviderResponse`	`untagOpenIDConnectProvider(Consumer<UntagOpenIdConnectProviderRequest.Builder> untagOpenIdConnectProviderRequest)` Removes the specified tags from the specified OpenID Connect (OIDC)-compatible identity provider in IAM.
`default UntagOpenIdConnectProviderResponse`	`untagOpenIDConnectProvider(UntagOpenIdConnectProviderRequest untagOpenIdConnectProviderRequest)` Removes the specified tags from the specified OpenID Connect (OIDC)-compatible identity provider in IAM.
`default UntagPolicyResponse`	`untagPolicy(Consumer<UntagPolicyRequest.Builder> untagPolicyRequest)` Removes the specified tags from the customer managed policy.
`default UntagPolicyResponse`	`untagPolicy(UntagPolicyRequest untagPolicyRequest)` Removes the specified tags from the customer managed policy.
`default UntagRoleResponse`	`untagRole(Consumer<UntagRoleRequest.Builder> untagRoleRequest)` Removes the specified tags from the role.
`default UntagRoleResponse`	`untagRole(UntagRoleRequest untagRoleRequest)` Removes the specified tags from the role.
`default UntagSamlProviderResponse`	`untagSAMLProvider(Consumer<UntagSamlProviderRequest.Builder> untagSamlProviderRequest)` Removes the specified tags from the specified Security Assertion Markup Language (SAML) identity provider in IAM.
`default UntagSamlProviderResponse`	`untagSAMLProvider(UntagSamlProviderRequest untagSamlProviderRequest)` Removes the specified tags from the specified Security Assertion Markup Language (SAML) identity provider in IAM.
`default UntagServerCertificateResponse`	`untagServerCertificate(Consumer<UntagServerCertificateRequest.Builder> untagServerCertificateRequest)` Removes the specified tags from the IAM server certificate.
`default UntagServerCertificateResponse`	`untagServerCertificate(UntagServerCertificateRequest untagServerCertificateRequest)` Removes the specified tags from the IAM server certificate.
`default UntagUserResponse`	`untagUser(Consumer<UntagUserRequest.Builder> untagUserRequest)` Removes the specified tags from the user.
`default UntagUserResponse`	`untagUser(UntagUserRequest untagUserRequest)` Removes the specified tags from the user.
`default UpdateAccessKeyResponse`	`updateAccessKey(Consumer<UpdateAccessKeyRequest.Builder> updateAccessKeyRequest)` Changes the status of the specified access key from Active to Inactive, or vice versa.
`default UpdateAccessKeyResponse`	`updateAccessKey(UpdateAccessKeyRequest updateAccessKeyRequest)` Changes the status of the specified access key from Active to Inactive, or vice versa.
`default UpdateAccountPasswordPolicyResponse`	`updateAccountPasswordPolicy()` Updates the password policy settings for the AWS account.
`default UpdateAccountPasswordPolicyResponse`	`updateAccountPasswordPolicy(Consumer<UpdateAccountPasswordPolicyRequest.Builder> updateAccountPasswordPolicyRequest)` Updates the password policy settings for the AWS account.
`default UpdateAccountPasswordPolicyResponse`	`updateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest updateAccountPasswordPolicyRequest)` Updates the password policy settings for the AWS account.
`default UpdateAssumeRolePolicyResponse`	`updateAssumeRolePolicy(Consumer<UpdateAssumeRolePolicyRequest.Builder> updateAssumeRolePolicyRequest)` Updates the policy that grants an IAM entity permission to assume a role.
`default UpdateAssumeRolePolicyResponse`	`updateAssumeRolePolicy(UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest)` Updates the policy that grants an IAM entity permission to assume a role.
`default UpdateGroupResponse`	`updateGroup(Consumer<UpdateGroupRequest.Builder> updateGroupRequest)` Updates the name and/or the path of the specified IAM group.
`default UpdateGroupResponse`	`updateGroup(UpdateGroupRequest updateGroupRequest)` Updates the name and/or the path of the specified IAM group.
`default UpdateLoginProfileResponse`	`updateLoginProfile(Consumer<UpdateLoginProfileRequest.Builder> updateLoginProfileRequest)` Changes the password for the specified IAM user.
`default UpdateLoginProfileResponse`	`updateLoginProfile(UpdateLoginProfileRequest updateLoginProfileRequest)` Changes the password for the specified IAM user.
`default UpdateOpenIdConnectProviderThumbprintResponse`	`updateOpenIDConnectProviderThumbprint(Consumer<UpdateOpenIdConnectProviderThumbprintRequest.Builder> updateOpenIdConnectProviderThumbprintRequest)` Replaces the existing list of server certificate thumbprints associated with an OpenID Connect (OIDC) provider resource object with a new list of thumbprints.
`default UpdateOpenIdConnectProviderThumbprintResponse`	`updateOpenIDConnectProviderThumbprint(UpdateOpenIdConnectProviderThumbprintRequest updateOpenIdConnectProviderThumbprintRequest)` Replaces the existing list of server certificate thumbprints associated with an OpenID Connect (OIDC) provider resource object with a new list of thumbprints.
`default UpdateRoleResponse`	`updateRole(Consumer<UpdateRoleRequest.Builder> updateRoleRequest)` Updates the description or maximum session duration setting of a role.
`default UpdateRoleResponse`	`updateRole(UpdateRoleRequest updateRoleRequest)` Updates the description or maximum session duration setting of a role.
`default UpdateRoleDescriptionResponse`	`updateRoleDescription(Consumer<UpdateRoleDescriptionRequest.Builder> updateRoleDescriptionRequest)` Use UpdateRole instead.
`default UpdateRoleDescriptionResponse`	`updateRoleDescription(UpdateRoleDescriptionRequest updateRoleDescriptionRequest)` Use UpdateRole instead.
`default UpdateSamlProviderResponse`	`updateSAMLProvider(Consumer<UpdateSamlProviderRequest.Builder> updateSamlProviderRequest)` Updates the metadata document for an existing SAML provider resource object.
`default UpdateSamlProviderResponse`	`updateSAMLProvider(UpdateSamlProviderRequest updateSamlProviderRequest)` Updates the metadata document for an existing SAML provider resource object.
`default UpdateServerCertificateResponse`	`updateServerCertificate(Consumer<UpdateServerCertificateRequest.Builder> updateServerCertificateRequest)` Updates the name and/or the path of the specified server certificate stored in IAM.
`default UpdateServerCertificateResponse`	`updateServerCertificate(UpdateServerCertificateRequest updateServerCertificateRequest)` Updates the name and/or the path of the specified server certificate stored in IAM.
`default UpdateServiceSpecificCredentialResponse`	`updateServiceSpecificCredential(Consumer<UpdateServiceSpecificCredentialRequest.Builder> updateServiceSpecificCredentialRequest)` Sets the status of a service-specific credential to `Active` or `Inactive`.
`default UpdateServiceSpecificCredentialResponse`	`updateServiceSpecificCredential(UpdateServiceSpecificCredentialRequest updateServiceSpecificCredentialRequest)` Sets the status of a service-specific credential to `Active` or `Inactive`.
`default UpdateSigningCertificateResponse`	`updateSigningCertificate(Consumer<UpdateSigningCertificateRequest.Builder> updateSigningCertificateRequest)` Changes the status of the specified user signing certificate from active to disabled, or vice versa.
`default UpdateSigningCertificateResponse`	`updateSigningCertificate(UpdateSigningCertificateRequest updateSigningCertificateRequest)` Changes the status of the specified user signing certificate from active to disabled, or vice versa.
`default UpdateSshPublicKeyResponse`	`updateSSHPublicKey(Consumer<UpdateSshPublicKeyRequest.Builder> updateSshPublicKeyRequest)` Sets the status of an IAM user's SSH public key to active or inactive.
`default UpdateSshPublicKeyResponse`	`updateSSHPublicKey(UpdateSshPublicKeyRequest updateSshPublicKeyRequest)` Sets the status of an IAM user's SSH public key to active or inactive.
`default UpdateUserResponse`	`updateUser(Consumer<UpdateUserRequest.Builder> updateUserRequest)` Updates the name and/or the path of the specified IAM user.
`default UpdateUserResponse`	`updateUser(UpdateUserRequest updateUserRequest)` Updates the name and/or the path of the specified IAM user.
`default UploadServerCertificateResponse`	`uploadServerCertificate(Consumer<UploadServerCertificateRequest.Builder> uploadServerCertificateRequest)` Uploads a server certificate entity for the AWS account.
`default UploadServerCertificateResponse`	`uploadServerCertificate(UploadServerCertificateRequest uploadServerCertificateRequest)` Uploads a server certificate entity for the AWS account.
`default UploadSigningCertificateResponse`	`uploadSigningCertificate(Consumer<UploadSigningCertificateRequest.Builder> uploadSigningCertificateRequest)` Uploads an X.509 signing certificate and associates it with the specified IAM user.
`default UploadSigningCertificateResponse`	`uploadSigningCertificate(UploadSigningCertificateRequest uploadSigningCertificateRequest)` Uploads an X.509 signing certificate and associates it with the specified IAM user.
`default UploadSshPublicKeyResponse`	`uploadSSHPublicKey(Consumer<UploadSshPublicKeyRequest.Builder> uploadSshPublicKeyRequest)` Uploads an SSH public key and associates it with the specified IAM user.
`default UploadSshPublicKeyResponse`	`uploadSSHPublicKey(UploadSshPublicKeyRequest uploadSshPublicKeyRequest)` Uploads an SSH public key and associates it with the specified IAM user.
`default IamWaiter`	`waiter()` Create an instance of `IamWaiter` using this client.

Methods inherited from interface software.amazon.awssdk.core.SdkClient
serviceName

Methods inherited from interface software.amazon.awssdk.utils.SdkAutoCloseable
close

- Field Detail
  - SERVICE_NAME
```
static final String SERVICE_NAME
```
    See Also:
    
    Constant Field Values
  - SERVICE_METADATA_ID
```
static final String SERVICE_METADATA_ID
```
    Value for looking up the service's metadata from the ServiceMetadataProvider.
    
    See Also:
    
    Constant Field Values
- Method Detail
  - builder
```
static IamClientBuilder builder()
```
    Create a builder that can be used to configure and create a IamClient.
  - addClientIDToOpenIDConnectProvider
```
default AddClientIdToOpenIdConnectProviderResponse addClientIDToOpenIDConnectProvider(AddClientIdToOpenIdConnectProviderRequest addClientIdToOpenIdConnectProviderRequest)
                                                                               throws InvalidInputException,
                                                                                      NoSuchEntityException,
                                                                                      LimitExceededException,
                                                                                      ServiceFailureException,
                                                                                      AwsServiceException,
                                                                                      SdkClientException,
                                                                                      IamException
```
    Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
    
    This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.
    
    Parameters:
    
    addClientIdToOpenIdConnectProviderRequest -
    
    Returns:
    
    Result of the AddClientIDToOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - addClientIDToOpenIDConnectProvider
```
default AddClientIdToOpenIdConnectProviderResponse addClientIDToOpenIDConnectProvider(Consumer<AddClientIdToOpenIdConnectProviderRequest.Builder> addClientIdToOpenIdConnectProviderRequest)
                                                                               throws InvalidInputException,
                                                                                      NoSuchEntityException,
                                                                                      LimitExceededException,
                                                                                      ServiceFailureException,
                                                                                      AwsServiceException,
                                                                                      SdkClientException,
                                                                                      IamException
```
    Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
    
    This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.
    
    This is a convenience which creates an instance of the AddClientIdToOpenIdConnectProviderRequest.Builder avoiding the need to create one manually via AddClientIdToOpenIdConnectProviderRequest.builder()
    
    Parameters:
    
    addClientIdToOpenIdConnectProviderRequest - A Consumer that will call methods on AddClientIDToOpenIDConnectProviderRequest.Builder to create a request.
    
    Returns:
    
    Result of the AddClientIDToOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - addRoleToInstanceProfile
```
default AddRoleToInstanceProfileResponse addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest)
                                                           throws NoSuchEntityException,
                                                                  EntityAlreadyExistsException,
                                                                  LimitExceededException,
                                                                  UnmodifiableEntityException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of AWS because of eventual consistency. To force the change, you must disassociate the instance profile and then associate the instance profile, or you can stop your instance and then restart it.
    
    The caller of this operation must be granted the PassRole permission on the IAM role by a permissions policy.
    
    For more information about roles, see Working with roles. For more information about instance profiles, see About instance profiles.
    
    Parameters:
    
    addRoleToInstanceProfileRequest -
    
    Returns:
    
    Result of the AddRoleToInstanceProfile operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - addRoleToInstanceProfile
```
default AddRoleToInstanceProfileResponse addRoleToInstanceProfile(Consumer<AddRoleToInstanceProfileRequest.Builder> addRoleToInstanceProfileRequest)
                                                           throws NoSuchEntityException,
                                                                  EntityAlreadyExistsException,
                                                                  LimitExceededException,
                                                                  UnmodifiableEntityException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of AWS because of eventual consistency. To force the change, you must disassociate the instance profile and then associate the instance profile, or you can stop your instance and then restart it.
    
    The caller of this operation must be granted the PassRole permission on the IAM role by a permissions policy.
    
    For more information about roles, see Working with roles. For more information about instance profiles, see About instance profiles.
    
    This is a convenience which creates an instance of the AddRoleToInstanceProfileRequest.Builder avoiding the need to create one manually via AddRoleToInstanceProfileRequest.builder()
    
    Parameters:
    
    addRoleToInstanceProfileRequest - A Consumer that will call methods on AddRoleToInstanceProfileRequest.Builder to create a request.
    
    Returns:
    
    Result of the AddRoleToInstanceProfile operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - addUserToGroup
```
default AddUserToGroupResponse addUserToGroup(AddUserToGroupRequest addUserToGroupRequest)
                                       throws NoSuchEntityException,
                                              LimitExceededException,
                                              ServiceFailureException,
                                              AwsServiceException,
                                              SdkClientException,
                                              IamException
```
    Adds the specified user to the specified group.
    
    Parameters:
    
    addUserToGroupRequest -
    
    Returns:
    
    Result of the AddUserToGroup operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - addUserToGroup
```
default AddUserToGroupResponse addUserToGroup(Consumer<AddUserToGroupRequest.Builder> addUserToGroupRequest)
                                       throws NoSuchEntityException,
                                              LimitExceededException,
                                              ServiceFailureException,
                                              AwsServiceException,
                                              SdkClientException,
                                              IamException
```
    Adds the specified user to the specified group.
    
    This is a convenience which creates an instance of the AddUserToGroupRequest.Builder avoiding the need to create one manually via AddUserToGroupRequest.builder()
    
    Parameters:
    
    addUserToGroupRequest - A Consumer that will call methods on AddUserToGroupRequest.Builder to create a request.
    
    Returns:
    
    Result of the AddUserToGroup operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachGroupPolicy
```
default AttachGroupPolicyResponse attachGroupPolicy(AttachGroupPolicyRequest attachGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    InvalidInputException,
                                                    PolicyNotAttachableException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Attaches the specified managed policy to the specified IAM group.
    
    You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use PutGroupPolicy.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    attachGroupPolicyRequest -
    
    Returns:
    
    Result of the AttachGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachGroupPolicy
```
default AttachGroupPolicyResponse attachGroupPolicy(Consumer<AttachGroupPolicyRequest.Builder> attachGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    InvalidInputException,
                                                    PolicyNotAttachableException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Attaches the specified managed policy to the specified IAM group.
    
    You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use PutGroupPolicy.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the AttachGroupPolicyRequest.Builder avoiding the need to create one manually via AttachGroupPolicyRequest.builder()
    
    Parameters:
    
    attachGroupPolicyRequest - A Consumer that will call methods on AttachGroupPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the AttachGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachRolePolicy
```
default AttachRolePolicyResponse attachRolePolicy(AttachRolePolicyRequest attachRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  UnmodifiableEntityException,
                                                  PolicyNotAttachableException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy.
    
    You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using CreateRole. You can update a role's trust policy using UpdateAssumeRolePolicy.
    
    Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use PutRolePolicy. For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    Parameters:
    
    attachRolePolicyRequest -
    
    Returns:
    
    Result of the AttachRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachRolePolicy
```
default AttachRolePolicyResponse attachRolePolicy(Consumer<AttachRolePolicyRequest.Builder> attachRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  UnmodifiableEntityException,
                                                  PolicyNotAttachableException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy.
    
    You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using CreateRole. You can update a role's trust policy using UpdateAssumeRolePolicy.
    
    Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use PutRolePolicy. For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the AttachRolePolicyRequest.Builder avoiding the need to create one manually via AttachRolePolicyRequest.builder()
    
    Parameters:
    
    attachRolePolicyRequest - A Consumer that will call methods on AttachRolePolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the AttachRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachUserPolicy
```
default AttachUserPolicyResponse attachUserPolicy(AttachUserPolicyRequest attachUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  PolicyNotAttachableException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Attaches the specified managed policy to the specified user.
    
    You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use PutUserPolicy.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    attachUserPolicyRequest -
    
    Returns:
    
    Result of the AttachUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - attachUserPolicy
```
default AttachUserPolicyResponse attachUserPolicy(Consumer<AttachUserPolicyRequest.Builder> attachUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  PolicyNotAttachableException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Attaches the specified managed policy to the specified user.
    
    You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use PutUserPolicy.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the AttachUserPolicyRequest.Builder avoiding the need to create one manually via AttachUserPolicyRequest.builder()
    
    Parameters:
    
    attachUserPolicyRequest - A Consumer that will call methods on AttachUserPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the AttachUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    PolicyNotAttachableException - The request failed because AWS service role policies can only be attached to the service-linked role for that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - changePassword
```
default ChangePasswordResponse changePassword(ChangePasswordRequest changePasswordRequest)
                                       throws NoSuchEntityException,
                                              InvalidUserTypeException,
                                              LimitExceededException,
                                              EntityTemporarilyUnmodifiableException,
                                              PasswordPolicyViolationException,
                                              ServiceFailureException,
                                              AwsServiceException,
                                              SdkClientException,
                                              IamException
```
    Changes the password of the IAM user who is calling this operation. This operation can be performed using the AWS CLI, the AWS API, or the My Security Credentials page in the AWS Management Console. The AWS account root user password is not affected by this operation.
    
    Use UpdateLoginProfile to use the AWS CLI, the AWS API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see Managing passwords in the IAM User Guide.
    
    Parameters:
    
    changePasswordRequest -
    
    Returns:
    
    Result of the ChangePassword operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    InvalidUserTypeException - The request was rejected because the type of user for the transaction was incorrect.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    PasswordPolicyViolationException - The request was rejected because the provided password did not meet the requirements imposed by the account password policy.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - changePassword
```
default ChangePasswordResponse changePassword(Consumer<ChangePasswordRequest.Builder> changePasswordRequest)
                                       throws NoSuchEntityException,
                                              InvalidUserTypeException,
                                              LimitExceededException,
                                              EntityTemporarilyUnmodifiableException,
                                              PasswordPolicyViolationException,
                                              ServiceFailureException,
                                              AwsServiceException,
                                              SdkClientException,
                                              IamException
```
    Changes the password of the IAM user who is calling this operation. This operation can be performed using the AWS CLI, the AWS API, or the My Security Credentials page in the AWS Management Console. The AWS account root user password is not affected by this operation.
    
    Use UpdateLoginProfile to use the AWS CLI, the AWS API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see Managing passwords in the IAM User Guide.
    
    This is a convenience which creates an instance of the ChangePasswordRequest.Builder avoiding the need to create one manually via ChangePasswordRequest.builder()
    
    Parameters:
    
    changePasswordRequest - A Consumer that will call methods on ChangePasswordRequest.Builder to create a request.
    
    Returns:
    
    Result of the ChangePassword operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    InvalidUserTypeException - The request was rejected because the type of user for the transaction was incorrect.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    PasswordPolicyViolationException - The request was rejected because the provided password did not meet the requirements imposed by the account password policy.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createAccessKey
```
default CreateAccessKeyResponse createAccessKey()
                                         throws NoSuchEntityException,
                                                LimitExceededException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is Active.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
    
    For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
    
    To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
    
    Returns:
    
    Result of the CreateAccessKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    createAccessKey(CreateAccessKeyRequest), AWS API Documentation
  - createAccessKey
```
default CreateAccessKeyResponse createAccessKey(CreateAccessKeyRequest createAccessKeyRequest)
                                         throws NoSuchEntityException,
                                                LimitExceededException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is Active.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
    
    For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
    
    To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
    
    Parameters:
    
    createAccessKeyRequest -
    
    Returns:
    
    Result of the CreateAccessKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createAccessKey
```
default CreateAccessKeyResponse createAccessKey(Consumer<CreateAccessKeyRequest.Builder> createAccessKeyRequest)
                                         throws NoSuchEntityException,
                                                LimitExceededException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is Active.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
    
    For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
    
    To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
    
    This is a convenience which creates an instance of the CreateAccessKeyRequest.Builder avoiding the need to create one manually via CreateAccessKeyRequest.builder()
    
    Parameters:
    
    createAccessKeyRequest - A Consumer that will call methods on CreateAccessKeyRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateAccessKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createAccountAlias
```
default CreateAccountAliasResponse createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest)
                                               throws EntityAlreadyExistsException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates an alias for your AWS account. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
    
    Parameters:
    
    createAccountAliasRequest -
    
    Returns:
    
    Result of the CreateAccountAlias operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createAccountAlias
```
default CreateAccountAliasResponse createAccountAlias(Consumer<CreateAccountAliasRequest.Builder> createAccountAliasRequest)
                                               throws EntityAlreadyExistsException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates an alias for your AWS account. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateAccountAliasRequest.Builder avoiding the need to create one manually via CreateAccountAliasRequest.builder()
    
    Parameters:
    
    createAccountAliasRequest - A Consumer that will call methods on CreateAccountAliasRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateAccountAlias operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createGroup
```
default CreateGroupResponse createGroup(CreateGroupRequest createGroupRequest)
                                 throws LimitExceededException,
                                        EntityAlreadyExistsException,
                                        NoSuchEntityException,
                                        ServiceFailureException,
                                        AwsServiceException,
                                        SdkClientException,
                                        IamException
```
    Creates a new group.
    
    For information about the number of groups you can create, see IAM and STS quotas in the IAM User Guide.
    
    Parameters:
    
    createGroupRequest -
    
    Returns:
    
    Result of the CreateGroup operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createGroup
```
default CreateGroupResponse createGroup(Consumer<CreateGroupRequest.Builder> createGroupRequest)
                                 throws LimitExceededException,
                                        EntityAlreadyExistsException,
                                        NoSuchEntityException,
                                        ServiceFailureException,
                                        AwsServiceException,
                                        SdkClientException,
                                        IamException
```
    Creates a new group.
    
    For information about the number of groups you can create, see IAM and STS quotas in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateGroupRequest.Builder avoiding the need to create one manually via CreateGroupRequest.builder()
    
    Parameters:
    
    createGroupRequest - A Consumer that will call methods on CreateGroupRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateGroup operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createInstanceProfile
```
default CreateInstanceProfileResponse createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest)
                                                     throws EntityAlreadyExistsException,
                                                            InvalidInputException,
                                                            LimitExceededException,
                                                            ConcurrentModificationException,
                                                            ServiceFailureException,
                                                            AwsServiceException,
                                                            SdkClientException,
                                                            IamException
```
    Creates a new instance profile. For information about instance profiles, see Using roles for applications on Amazon EC2 in the IAM User Guide, and Instance profiles in the Amazon EC2 User Guide.
    
    For information about the number of instance profiles you can create, see IAM object quotas in the IAM User Guide.
    
    Parameters:
    
    createInstanceProfileRequest -
    
    Returns:
    
    Result of the CreateInstanceProfile operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createInstanceProfile
```
default CreateInstanceProfileResponse createInstanceProfile(Consumer<CreateInstanceProfileRequest.Builder> createInstanceProfileRequest)
                                                     throws EntityAlreadyExistsException,
                                                            InvalidInputException,
                                                            LimitExceededException,
                                                            ConcurrentModificationException,
                                                            ServiceFailureException,
                                                            AwsServiceException,
                                                            SdkClientException,
                                                            IamException
```
    Creates a new instance profile. For information about instance profiles, see Using roles for applications on Amazon EC2 in the IAM User Guide, and Instance profiles in the Amazon EC2 User Guide.
    
    For information about the number of instance profiles you can create, see IAM object quotas in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateInstanceProfileRequest.Builder avoiding the need to create one manually via CreateInstanceProfileRequest.builder()
    
    Parameters:
    
    createInstanceProfileRequest - A Consumer that will call methods on CreateInstanceProfileRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateInstanceProfile operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createLoginProfile
```
default CreateLoginProfileResponse createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest)
                                               throws EntityAlreadyExistsException,
                                                      NoSuchEntityException,
                                                      PasswordPolicyViolationException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the AWS Management Console.
    
    You can use the AWS CLI, the AWS API, or the Users page in the IAM console to create a password for any IAM user. Use ChangePassword to update your own existing password in the My Security Credentials page in the AWS Management Console.
    
    For more information about managing passwords, see Managing passwords in the IAM User Guide.
    
    Parameters:
    
    createLoginProfileRequest -
    
    Returns:
    
    Result of the CreateLoginProfile operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    PasswordPolicyViolationException - The request was rejected because the provided password did not meet the requirements imposed by the account password policy.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createLoginProfile
```
default CreateLoginProfileResponse createLoginProfile(Consumer<CreateLoginProfileRequest.Builder> createLoginProfileRequest)
                                               throws EntityAlreadyExistsException,
                                                      NoSuchEntityException,
                                                      PasswordPolicyViolationException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the AWS Management Console.
    
    You can use the AWS CLI, the AWS API, or the Users page in the IAM console to create a password for any IAM user. Use ChangePassword to update your own existing password in the My Security Credentials page in the AWS Management Console.
    
    For more information about managing passwords, see Managing passwords in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateLoginProfileRequest.Builder avoiding the need to create one manually via CreateLoginProfileRequest.builder()
    
    Parameters:
    
    createLoginProfileRequest - A Consumer that will call methods on CreateLoginProfileRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateLoginProfile operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    PasswordPolicyViolationException - The request was rejected because the provided password did not meet the requirements imposed by the account password policy.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createOpenIDConnectProvider
```
default CreateOpenIdConnectProviderResponse createOpenIDConnectProvider(CreateOpenIdConnectProviderRequest createOpenIdConnectProviderRequest)
                                                                 throws InvalidInputException,
                                                                        EntityAlreadyExistsException,
                                                                        LimitExceededException,
                                                                        ConcurrentModificationException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
    
    The OIDC provider that you create with this operation can be used as a principal in a role's trust policy. Such a policy establishes a trust relationship between AWS and the OIDC provider.
    
    When you create the IAM OIDC provider, you specify the following:
    - The URL of the OIDC identity provider (IdP) to trust
    - A list of client IDs (also known as audiences) that identify the application or applications that are allowed to authenticate using the OIDC provider
    - A list of thumbprints of one or more server certificates that the IdP uses
    You get all of this information from the OIDC IdP that you want to use to access AWS.
    
    The trust for the OIDC provider is derived from the IAM provider that this operation creates. Therefore, it is best to limit access to the CreateOpenIDConnectProvider operation to highly privileged users.
    Parameters:
    
    createOpenIdConnectProviderRequest -
    
    Returns:
    
    Result of the CreateOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createOpenIDConnectProvider
```
default CreateOpenIdConnectProviderResponse createOpenIDConnectProvider(Consumer<CreateOpenIdConnectProviderRequest.Builder> createOpenIdConnectProviderRequest)
                                                                 throws InvalidInputException,
                                                                        EntityAlreadyExistsException,
                                                                        LimitExceededException,
                                                                        ConcurrentModificationException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
    
    The OIDC provider that you create with this operation can be used as a principal in a role's trust policy. Such a policy establishes a trust relationship between AWS and the OIDC provider.
    
    When you create the IAM OIDC provider, you specify the following:
    - The URL of the OIDC identity provider (IdP) to trust
    - A list of client IDs (also known as audiences) that identify the application or applications that are allowed to authenticate using the OIDC provider
    - A list of thumbprints of one or more server certificates that the IdP uses
    You get all of this information from the OIDC IdP that you want to use to access AWS.
    
    The trust for the OIDC provider is derived from the IAM provider that this operation creates. Therefore, it is best to limit access to the CreateOpenIDConnectProvider operation to highly privileged users.
    
    This is a convenience which creates an instance of the CreateOpenIdConnectProviderRequest.Builder avoiding the need to create one manually via CreateOpenIdConnectProviderRequest.builder()
    Parameters:
    
    createOpenIdConnectProviderRequest - A Consumer that will call methods on CreateOpenIDConnectProviderRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createPolicy
```
default CreatePolicyResponse createPolicy(CreatePolicyRequest createPolicyRequest)
                                   throws InvalidInputException,
                                          LimitExceededException,
                                          EntityAlreadyExistsException,
                                          MalformedPolicyDocumentException,
                                          ConcurrentModificationException,
                                          ServiceFailureException,
                                          AwsServiceException,
                                          SdkClientException,
                                          IamException
```
    Creates a new managed policy for your AWS account.
    
    This operation creates a policy version with a version identifier of v1 and sets v1 as the policy's default version. For more information about policy versions, see Versioning for managed policies in the IAM User Guide.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about managed policies in general, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    createPolicyRequest -
    
    Returns:
    
    Result of the CreatePolicy operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createPolicy
```
default CreatePolicyResponse createPolicy(Consumer<CreatePolicyRequest.Builder> createPolicyRequest)
                                   throws InvalidInputException,
                                          LimitExceededException,
                                          EntityAlreadyExistsException,
                                          MalformedPolicyDocumentException,
                                          ConcurrentModificationException,
                                          ServiceFailureException,
                                          AwsServiceException,
                                          SdkClientException,
                                          IamException
```
    Creates a new managed policy for your AWS account.
    
    This operation creates a policy version with a version identifier of v1 and sets v1 as the policy's default version. For more information about policy versions, see Versioning for managed policies in the IAM User Guide.
    
    As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
    
    For more information about managed policies in general, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreatePolicyRequest.Builder avoiding the need to create one manually via CreatePolicyRequest.builder()
    
    Parameters:
    
    createPolicyRequest - A Consumer that will call methods on CreatePolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreatePolicy operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createPolicyVersion
```
default CreatePolicyVersionResponse createPolicyVersion(CreatePolicyVersionRequest createPolicyVersionRequest)
                                                 throws NoSuchEntityException,
                                                        MalformedPolicyDocumentException,
                                                        InvalidInputException,
                                                        LimitExceededException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Creates a new version of the specified managed policy. To update a managed policy, you create a new policy version. A managed policy can have up to five versions. If the policy has five versions, you must delete an existing version using DeletePolicyVersion before you create a new version.
    
    Optionally, you can set the new version as the policy's default version. The default version is the version that is in effect for the IAM users, groups, and roles to which the policy is attached.
    
    For more information about managed policy versions, see Versioning for managed policies in the IAM User Guide.
    
    Parameters:
    
    createPolicyVersionRequest -
    
    Returns:
    
    Result of the CreatePolicyVersion operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createPolicyVersion
```
default CreatePolicyVersionResponse createPolicyVersion(Consumer<CreatePolicyVersionRequest.Builder> createPolicyVersionRequest)
                                                 throws NoSuchEntityException,
                                                        MalformedPolicyDocumentException,
                                                        InvalidInputException,
                                                        LimitExceededException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Creates a new version of the specified managed policy. To update a managed policy, you create a new policy version. A managed policy can have up to five versions. If the policy has five versions, you must delete an existing version using DeletePolicyVersion before you create a new version.
    
    Optionally, you can set the new version as the policy's default version. The default version is the version that is in effect for the IAM users, groups, and roles to which the policy is attached.
    
    For more information about managed policy versions, see Versioning for managed policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreatePolicyVersionRequest.Builder avoiding the need to create one manually via CreatePolicyVersionRequest.builder()
    
    Parameters:
    
    createPolicyVersionRequest - A Consumer that will call methods on CreatePolicyVersionRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreatePolicyVersion operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createRole
```
default CreateRoleResponse createRole(CreateRoleRequest createRoleRequest)
                               throws LimitExceededException,
                                      InvalidInputException,
                                      EntityAlreadyExistsException,
                                      MalformedPolicyDocumentException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Creates a new role for your AWS account. For more information about roles, see IAM roles. For information about quotas for role names and the number of roles you can create, see IAM and STS quotas in the IAM User Guide.
    
    Parameters:
    
    createRoleRequest -
    
    Returns:
    
    Result of the CreateRole operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createRole
```
default CreateRoleResponse createRole(Consumer<CreateRoleRequest.Builder> createRoleRequest)
                               throws LimitExceededException,
                                      InvalidInputException,
                                      EntityAlreadyExistsException,
                                      MalformedPolicyDocumentException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Creates a new role for your AWS account. For more information about roles, see IAM roles. For information about quotas for role names and the number of roles you can create, see IAM and STS quotas in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateRoleRequest.Builder avoiding the need to create one manually via CreateRoleRequest.builder()
    
    Parameters:
    
    createRoleRequest - A Consumer that will call methods on CreateRoleRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateRole operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    MalformedPolicyDocumentException - The request was rejected because the policy document was malformed. The error message describes the specific error.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createSAMLProvider
```
default CreateSamlProviderResponse createSAMLProvider(CreateSamlProviderRequest createSamlProviderRequest)
                                               throws InvalidInputException,
                                                      EntityAlreadyExistsException,
                                                      LimitExceededException,
                                                      ConcurrentModificationException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
    
    The SAML provider resource that you create with this operation can be used as a principal in an IAM role's trust policy. Such a policy can enable federated users who sign in using the SAML IdP to assume the role. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.
    
    When you create the SAML provider resource, you upload a SAML metadata document that you get from your IdP. That document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that the IdP sends. You must generate the metadata document using the identity management software that is used as your organization's IdP.
    
    This operation requires Signature Version 4.
    
    For more information, see Enabling SAML 2.0 federated users to access the AWS Management Console and About SAML 2.0-based federation in the IAM User Guide.
    
    Parameters:
    
    createSamlProviderRequest -
    
    Returns:
    
    Result of the CreateSAMLProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createSAMLProvider
```
default CreateSamlProviderResponse createSAMLProvider(Consumer<CreateSamlProviderRequest.Builder> createSamlProviderRequest)
                                               throws InvalidInputException,
                                                      EntityAlreadyExistsException,
                                                      LimitExceededException,
                                                      ConcurrentModificationException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
    
    The SAML provider resource that you create with this operation can be used as a principal in an IAM role's trust policy. Such a policy can enable federated users who sign in using the SAML IdP to assume the role. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.
    
    When you create the SAML provider resource, you upload a SAML metadata document that you get from your IdP. That document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that the IdP sends. You must generate the metadata document using the identity management software that is used as your organization's IdP.
    
    This operation requires Signature Version 4.
    
    For more information, see Enabling SAML 2.0 federated users to access the AWS Management Console and About SAML 2.0-based federation in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateSamlProviderRequest.Builder avoiding the need to create one manually via CreateSamlProviderRequest.builder()
    
    Parameters:
    
    createSamlProviderRequest - A Consumer that will call methods on CreateSAMLProviderRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateSAMLProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createServiceLinkedRole
```
default CreateServiceLinkedRoleResponse createServiceLinkedRole(CreateServiceLinkedRoleRequest createServiceLinkedRoleRequest)
                                                         throws InvalidInputException,
                                                                LimitExceededException,
                                                                NoSuchEntityException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Creates an IAM role that is linked to a specific AWS service. The service controls the attached policies and when the role can be deleted. This helps ensure that the service is not broken by an unexpectedly changed or deleted role, which could put your AWS resources into an unknown state. Allowing the service to control the role helps improve service stability and proper cleanup when a service and its role are no longer needed. For more information, see Using service-linked roles in the IAM User Guide.
    
    To attach a policy to this service-linked role, you must make the request using the AWS service that depends on this role.
    
    Parameters:
    
    createServiceLinkedRoleRequest -
    
    Returns:
    
    Result of the CreateServiceLinkedRole operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createServiceLinkedRole
```
default CreateServiceLinkedRoleResponse createServiceLinkedRole(Consumer<CreateServiceLinkedRoleRequest.Builder> createServiceLinkedRoleRequest)
                                                         throws InvalidInputException,
                                                                LimitExceededException,
                                                                NoSuchEntityException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Creates an IAM role that is linked to a specific AWS service. The service controls the attached policies and when the role can be deleted. This helps ensure that the service is not broken by an unexpectedly changed or deleted role, which could put your AWS resources into an unknown state. Allowing the service to control the role helps improve service stability and proper cleanup when a service and its role are no longer needed. For more information, see Using service-linked roles in the IAM User Guide.
    
    To attach a policy to this service-linked role, you must make the request using the AWS service that depends on this role.
    
    This is a convenience which creates an instance of the CreateServiceLinkedRoleRequest.Builder avoiding the need to create one manually via CreateServiceLinkedRoleRequest.builder()
    
    Parameters:
    
    createServiceLinkedRoleRequest - A Consumer that will call methods on CreateServiceLinkedRoleRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateServiceLinkedRole operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createServiceSpecificCredential
```
default CreateServiceSpecificCredentialResponse createServiceSpecificCredential(CreateServiceSpecificCredentialRequest createServiceSpecificCredentialRequest)
                                                                         throws LimitExceededException,
                                                                                NoSuchEntityException,
                                                                                ServiceNotSupportedException,
                                                                                AwsServiceException,
                                                                                SdkClientException,
                                                                                IamException
```
    Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request. These credentials are generated by IAM, and can be used only for the specified service.
    
    You can have a maximum of two sets of service-specific credentials for each supported service per user.
    
    You can create service-specific credentials for AWS CodeCommit and Amazon Keyspaces (for Apache Cassandra).
    
    You can reset the password to a new service-generated value by calling ResetServiceSpecificCredential.
    
    For more information about service-specific credentials, see Using IAM with AWS CodeCommit: Git credentials, SSH keys, and AWS access keys in the IAM User Guide.
    
    Parameters:
    
    createServiceSpecificCredentialRequest -
    
    Returns:
    
    Result of the CreateServiceSpecificCredential operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceNotSupportedException - The specified service does not support service-specific credentials.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createServiceSpecificCredential
```
default CreateServiceSpecificCredentialResponse createServiceSpecificCredential(Consumer<CreateServiceSpecificCredentialRequest.Builder> createServiceSpecificCredentialRequest)
                                                                         throws LimitExceededException,
                                                                                NoSuchEntityException,
                                                                                ServiceNotSupportedException,
                                                                                AwsServiceException,
                                                                                SdkClientException,
                                                                                IamException
```
    Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request. These credentials are generated by IAM, and can be used only for the specified service.
    
    You can have a maximum of two sets of service-specific credentials for each supported service per user.
    
    You can create service-specific credentials for AWS CodeCommit and Amazon Keyspaces (for Apache Cassandra).
    
    You can reset the password to a new service-generated value by calling ResetServiceSpecificCredential.
    
    For more information about service-specific credentials, see Using IAM with AWS CodeCommit: Git credentials, SSH keys, and AWS access keys in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateServiceSpecificCredentialRequest.Builder avoiding the need to create one manually via CreateServiceSpecificCredentialRequest.builder()
    
    Parameters:
    
    createServiceSpecificCredentialRequest - A Consumer that will call methods on CreateServiceSpecificCredentialRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateServiceSpecificCredential operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceNotSupportedException - The specified service does not support service-specific credentials.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createUser
```
default CreateUserResponse createUser(CreateUserRequest createUserRequest)
                               throws LimitExceededException,
                                      EntityAlreadyExistsException,
                                      NoSuchEntityException,
                                      InvalidInputException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Creates a new IAM user for your AWS account.
    
    For information about quotas for the number of IAM users you can create, see IAM and STS quotas in the IAM User Guide.
    
    Parameters:
    
    createUserRequest -
    
    Returns:
    
    Result of the CreateUser operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createUser
```
default CreateUserResponse createUser(Consumer<CreateUserRequest.Builder> createUserRequest)
                               throws LimitExceededException,
                                      EntityAlreadyExistsException,
                                      NoSuchEntityException,
                                      InvalidInputException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Creates a new IAM user for your AWS account.
    
    For information about quotas for the number of IAM users you can create, see IAM and STS quotas in the IAM User Guide.
    
    This is a convenience which creates an instance of the CreateUserRequest.Builder avoiding the need to create one manually via CreateUserRequest.builder()
    
    Parameters:
    
    createUserRequest - A Consumer that will call methods on CreateUserRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateUser operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createVirtualMFADevice
```
default CreateVirtualMfaDeviceResponse createVirtualMFADevice(CreateVirtualMfaDeviceRequest createVirtualMfaDeviceRequest)
                                                       throws LimitExceededException,
                                                              InvalidInputException,
                                                              EntityAlreadyExistsException,
                                                              ConcurrentModificationException,
                                                              ServiceFailureException,
                                                              AwsServiceException,
                                                              SdkClientException,
                                                              IamException
```
    Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, see Using a virtual MFA device in the IAM User Guide.
    
    For information about the maximum number of MFA devices you can create, see IAM and STS quotas in the IAM User Guide.
    
    The seed information contained in the QR code and the Base32 string should be treated like any other secret access information. In other words, protect the seed information as you would your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.
    
    Parameters:
    
    createVirtualMfaDeviceRequest -
    
    Returns:
    
    Result of the CreateVirtualMFADevice operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - createVirtualMFADevice
```
default CreateVirtualMfaDeviceResponse createVirtualMFADevice(Consumer<CreateVirtualMfaDeviceRequest.Builder> createVirtualMfaDeviceRequest)
                                                       throws LimitExceededException,
                                                              InvalidInputException,
                                                              EntityAlreadyExistsException,
                                                              ConcurrentModificationException,
                                                              ServiceFailureException,
                                                              AwsServiceException,
                                                              SdkClientException,
                                                              IamException
```
    Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, see Using a virtual MFA device in the IAM User Guide.
    
    For information about the maximum number of MFA devices you can create, see IAM and STS quotas in the IAM User Guide.
    
    The seed information contained in the QR code and the Base32 string should be treated like any other secret access information. In other words, protect the seed information as you would your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.
    
    This is a convenience which creates an instance of the CreateVirtualMfaDeviceRequest.Builder avoiding the need to create one manually via CreateVirtualMfaDeviceRequest.builder()
    
    Parameters:
    
    createVirtualMfaDeviceRequest - A Consumer that will call methods on CreateVirtualMFADeviceRequest.Builder to create a request.
    
    Returns:
    
    Result of the CreateVirtualMFADevice operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deactivateMFADevice
```
default DeactivateMfaDeviceResponse deactivateMFADevice(DeactivateMfaDeviceRequest deactivateMfaDeviceRequest)
                                                 throws EntityTemporarilyUnmodifiableException,
                                                        NoSuchEntityException,
                                                        LimitExceededException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
    
    For more information about creating and working with virtual MFA devices, see Enabling a virtual multi-factor authentication (MFA) device in the IAM User Guide.
    
    Parameters:
    
    deactivateMfaDeviceRequest -
    
    Returns:
    
    Result of the DeactivateMFADevice operation returned by the service.
    
    Throws:
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deactivateMFADevice
```
default DeactivateMfaDeviceResponse deactivateMFADevice(Consumer<DeactivateMfaDeviceRequest.Builder> deactivateMfaDeviceRequest)
                                                 throws EntityTemporarilyUnmodifiableException,
                                                        NoSuchEntityException,
                                                        LimitExceededException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
    
    For more information about creating and working with virtual MFA devices, see Enabling a virtual multi-factor authentication (MFA) device in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeactivateMfaDeviceRequest.Builder avoiding the need to create one manually via DeactivateMfaDeviceRequest.builder()
    
    Parameters:
    
    deactivateMfaDeviceRequest - A Consumer that will call methods on DeactivateMFADeviceRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeactivateMFADevice operation returned by the service.
    
    Throws:
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccessKey
```
default DeleteAccessKeyResponse deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest)
                                         throws NoSuchEntityException,
                                                LimitExceededException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Deletes the access key pair associated with the specified IAM user.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated users.
    
    Parameters:
    
    deleteAccessKeyRequest -
    
    Returns:
    
    Result of the DeleteAccessKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccessKey
```
default DeleteAccessKeyResponse deleteAccessKey(Consumer<DeleteAccessKeyRequest.Builder> deleteAccessKeyRequest)
                                         throws NoSuchEntityException,
                                                LimitExceededException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Deletes the access key pair associated with the specified IAM user.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated users.
    
    This is a convenience which creates an instance of the DeleteAccessKeyRequest.Builder avoiding the need to create one manually via DeleteAccessKeyRequest.builder()
    
    Parameters:
    
    deleteAccessKeyRequest - A Consumer that will call methods on DeleteAccessKeyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteAccessKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccountAlias
```
default DeleteAccountAliasResponse deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest)
                                               throws NoSuchEntityException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
    
    Parameters:
    
    deleteAccountAliasRequest -
    
    Returns:
    
    Result of the DeleteAccountAlias operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccountAlias
```
default DeleteAccountAliasResponse deleteAccountAlias(Consumer<DeleteAccountAliasRequest.Builder> deleteAccountAliasRequest)
                                               throws NoSuchEntityException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeleteAccountAliasRequest.Builder avoiding the need to create one manually via DeleteAccountAliasRequest.builder()
    
    Parameters:
    
    deleteAccountAliasRequest - A Consumer that will call methods on DeleteAccountAliasRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteAccountAlias operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccountPasswordPolicy
```
default DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy()
                                                                 throws NoSuchEntityException,
                                                                        LimitExceededException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Deletes the password policy for the AWS account. There are no parameters.
    
    Returns:
    
    Result of the DeleteAccountPasswordPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest), AWS API Documentation
  - deleteAccountPasswordPolicy
```
default DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest)
                                                                 throws NoSuchEntityException,
                                                                        LimitExceededException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Deletes the password policy for the AWS account. There are no parameters.
    
    Parameters:
    
    deleteAccountPasswordPolicyRequest -
    
    Returns:
    
    Result of the DeleteAccountPasswordPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteAccountPasswordPolicy
```
default DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy(Consumer<DeleteAccountPasswordPolicyRequest.Builder> deleteAccountPasswordPolicyRequest)
                                                                 throws NoSuchEntityException,
                                                                        LimitExceededException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Deletes the password policy for the AWS account. There are no parameters.
    
    This is a convenience which creates an instance of the DeleteAccountPasswordPolicyRequest.Builder avoiding the need to create one manually via DeleteAccountPasswordPolicyRequest.builder()
    
    Parameters:
    
    deleteAccountPasswordPolicyRequest - A Consumer that will call methods on DeleteAccountPasswordPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteAccountPasswordPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteGroup
```
default DeleteGroupResponse deleteGroup(DeleteGroupRequest deleteGroupRequest)
                                 throws NoSuchEntityException,
                                        DeleteConflictException,
                                        LimitExceededException,
                                        ServiceFailureException,
                                        AwsServiceException,
                                        SdkClientException,
                                        IamException
```
    Deletes the specified IAM group. The group must not contain any users or have any attached policies.
    
    Parameters:
    
    deleteGroupRequest -
    
    Returns:
    
    Result of the DeleteGroup operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteGroup
```
default DeleteGroupResponse deleteGroup(Consumer<DeleteGroupRequest.Builder> deleteGroupRequest)
                                 throws NoSuchEntityException,
                                        DeleteConflictException,
                                        LimitExceededException,
                                        ServiceFailureException,
                                        AwsServiceException,
                                        SdkClientException,
                                        IamException
```
    Deletes the specified IAM group. The group must not contain any users or have any attached policies.
    
    This is a convenience which creates an instance of the DeleteGroupRequest.Builder avoiding the need to create one manually via DeleteGroupRequest.builder()
    
    Parameters:
    
    deleteGroupRequest - A Consumer that will call methods on DeleteGroupRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteGroup operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteGroupPolicy
```
default DeleteGroupPolicyResponse deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM group.
    
    A group can also have managed policies attached to it. To detach a managed policy from a group, use DetachGroupPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    deleteGroupPolicyRequest -
    
    Returns:
    
    Result of the DeleteGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteGroupPolicy
```
default DeleteGroupPolicyResponse deleteGroupPolicy(Consumer<DeleteGroupPolicyRequest.Builder> deleteGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM group.
    
    A group can also have managed policies attached to it. To detach a managed policy from a group, use DetachGroupPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeleteGroupPolicyRequest.Builder avoiding the need to create one manually via DeleteGroupPolicyRequest.builder()
    
    Parameters:
    
    deleteGroupPolicyRequest - A Consumer that will call methods on DeleteGroupPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteInstanceProfile
```
default DeleteInstanceProfileResponse deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest)
                                                     throws NoSuchEntityException,
                                                            DeleteConflictException,
                                                            LimitExceededException,
                                                            ServiceFailureException,
                                                            AwsServiceException,
                                                            SdkClientException,
                                                            IamException
```
    Deletes the specified instance profile. The instance profile must not have an associated role.
    
    Make sure that you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
    
    For more information about instance profiles, see About instance profiles.
    
    Parameters:
    
    deleteInstanceProfileRequest -
    
    Returns:
    
    Result of the DeleteInstanceProfile operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteInstanceProfile
```
default DeleteInstanceProfileResponse deleteInstanceProfile(Consumer<DeleteInstanceProfileRequest.Builder> deleteInstanceProfileRequest)
                                                     throws NoSuchEntityException,
                                                            DeleteConflictException,
                                                            LimitExceededException,
                                                            ServiceFailureException,
                                                            AwsServiceException,
                                                            SdkClientException,
                                                            IamException
```
    Deletes the specified instance profile. The instance profile must not have an associated role.
    
    Make sure that you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
    
    For more information about instance profiles, see About instance profiles.
    
    This is a convenience which creates an instance of the DeleteInstanceProfileRequest.Builder avoiding the need to create one manually via DeleteInstanceProfileRequest.builder()
    
    Parameters:
    
    deleteInstanceProfileRequest - A Consumer that will call methods on DeleteInstanceProfileRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteInstanceProfile operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteLoginProfile
```
default DeleteLoginProfileResponse deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest)
                                               throws EntityTemporarilyUnmodifiableException,
                                                      NoSuchEntityException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
    
    You can use the AWS CLI, the AWS API, or the Users page in the IAM console to delete a password for any IAM user. You can use ChangePassword to update, but not delete, your own password in the My Security Credentials page in the AWS Management Console.
    
    Deleting a user's password does not prevent a user from accessing AWS through the command line interface or the API. To prevent all user access, you must also either make any access keys inactive or delete them. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.
    
    Parameters:
    
    deleteLoginProfileRequest -
    
    Returns:
    
    Result of the DeleteLoginProfile operation returned by the service.
    
    Throws:
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteLoginProfile
```
default DeleteLoginProfileResponse deleteLoginProfile(Consumer<DeleteLoginProfileRequest.Builder> deleteLoginProfileRequest)
                                               throws EntityTemporarilyUnmodifiableException,
                                                      NoSuchEntityException,
                                                      LimitExceededException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
    
    You can use the AWS CLI, the AWS API, or the Users page in the IAM console to delete a password for any IAM user. You can use ChangePassword to update, but not delete, your own password in the My Security Credentials page in the AWS Management Console.
    
    Deleting a user's password does not prevent a user from accessing AWS through the command line interface or the API. To prevent all user access, you must also either make any access keys inactive or delete them. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.
    
    This is a convenience which creates an instance of the DeleteLoginProfileRequest.Builder avoiding the need to create one manually via DeleteLoginProfileRequest.builder()
    
    Parameters:
    
    deleteLoginProfileRequest - A Consumer that will call methods on DeleteLoginProfileRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteLoginProfile operation returned by the service.
    
    Throws:
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteOpenIDConnectProvider
```
default DeleteOpenIdConnectProviderResponse deleteOpenIDConnectProvider(DeleteOpenIdConnectProviderRequest deleteOpenIdConnectProviderRequest)
                                                                 throws InvalidInputException,
                                                                        NoSuchEntityException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
    
    Deleting an IAM OIDC provider resource does not update any roles that reference the provider as a principal in their trust policies. Any attempt to assume a role that references a deleted provider fails.
    
    This operation is idempotent; it does not fail or return an error if you call the operation for a provider that does not exist.
    
    Parameters:
    
    deleteOpenIdConnectProviderRequest -
    
    Returns:
    
    Result of the DeleteOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteOpenIDConnectProvider
```
default DeleteOpenIdConnectProviderResponse deleteOpenIDConnectProvider(Consumer<DeleteOpenIdConnectProviderRequest.Builder> deleteOpenIdConnectProviderRequest)
                                                                 throws InvalidInputException,
                                                                        NoSuchEntityException,
                                                                        ServiceFailureException,
                                                                        AwsServiceException,
                                                                        SdkClientException,
                                                                        IamException
```
    Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
    
    Deleting an IAM OIDC provider resource does not update any roles that reference the provider as a principal in their trust policies. Any attempt to assume a role that references a deleted provider fails.
    
    This operation is idempotent; it does not fail or return an error if you call the operation for a provider that does not exist.
    
    This is a convenience which creates an instance of the DeleteOpenIdConnectProviderRequest.Builder avoiding the need to create one manually via DeleteOpenIdConnectProviderRequest.builder()
    
    Parameters:
    
    deleteOpenIdConnectProviderRequest - A Consumer that will call methods on DeleteOpenIDConnectProviderRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteOpenIDConnectProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deletePolicy
```
default DeletePolicyResponse deletePolicy(DeletePolicyRequest deletePolicyRequest)
                                   throws NoSuchEntityException,
                                          LimitExceededException,
                                          InvalidInputException,
                                          DeleteConflictException,
                                          ServiceFailureException,
                                          AwsServiceException,
                                          SdkClientException,
                                          IamException
```
    Deletes the specified managed policy.
    
    Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to. In addition, you must delete all the policy's versions. The following steps describe the process for deleting a managed policy:
    - Detach the policy from all users, groups, and roles that the policy is attached to, using DetachUserPolicy, DetachGroupPolicy, or DetachRolePolicy. To list all the users, groups, and roles that a policy is attached to, use ListEntitiesForPolicy.
    - Delete all versions of the policy using DeletePolicyVersion. To list the policy's versions, use ListPolicyVersions. You cannot use DeletePolicyVersion to delete the version that is marked as the default version. You delete the policy's default version in the next step of the process.
    - Delete the policy (this automatically deletes the policy's default version) using this operation.
    For information about managed policies, see Managed policies and inline policies in the IAM User Guide.
    Parameters:
    
    deletePolicyRequest -
    
    Returns:
    
    Result of the DeletePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deletePolicy
```
default DeletePolicyResponse deletePolicy(Consumer<DeletePolicyRequest.Builder> deletePolicyRequest)
                                   throws NoSuchEntityException,
                                          LimitExceededException,
                                          InvalidInputException,
                                          DeleteConflictException,
                                          ServiceFailureException,
                                          AwsServiceException,
                                          SdkClientException,
                                          IamException
```
    Deletes the specified managed policy.
    
    Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to. In addition, you must delete all the policy's versions. The following steps describe the process for deleting a managed policy:
    - Detach the policy from all users, groups, and roles that the policy is attached to, using DetachUserPolicy, DetachGroupPolicy, or DetachRolePolicy. To list all the users, groups, and roles that a policy is attached to, use ListEntitiesForPolicy.
    - Delete all versions of the policy using DeletePolicyVersion. To list the policy's versions, use ListPolicyVersions. You cannot use DeletePolicyVersion to delete the version that is marked as the default version. You delete the policy's default version in the next step of the process.
    - Delete the policy (this automatically deletes the policy's default version) using this operation.
    For information about managed policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeletePolicyRequest.Builder avoiding the need to create one manually via DeletePolicyRequest.builder()
    Parameters:
    
    deletePolicyRequest - A Consumer that will call methods on DeletePolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeletePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deletePolicyVersion
```
default DeletePolicyVersionResponse deletePolicyVersion(DeletePolicyVersionRequest deletePolicyVersionRequest)
                                                 throws NoSuchEntityException,
                                                        LimitExceededException,
                                                        InvalidInputException,
                                                        DeleteConflictException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Deletes the specified version from the specified managed policy.
    
    You cannot delete the default version from a policy using this operation. To delete the default version from a policy, use DeletePolicy. To find out which version of a policy is marked as the default version, use ListPolicyVersions.
    
    For information about versions for managed policies, see Versioning for managed policies in the IAM User Guide.
    
    Parameters:
    
    deletePolicyVersionRequest -
    
    Returns:
    
    Result of the DeletePolicyVersion operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deletePolicyVersion
```
default DeletePolicyVersionResponse deletePolicyVersion(Consumer<DeletePolicyVersionRequest.Builder> deletePolicyVersionRequest)
                                                 throws NoSuchEntityException,
                                                        LimitExceededException,
                                                        InvalidInputException,
                                                        DeleteConflictException,
                                                        ServiceFailureException,
                                                        AwsServiceException,
                                                        SdkClientException,
                                                        IamException
```
    Deletes the specified version from the specified managed policy.
    
    You cannot delete the default version from a policy using this operation. To delete the default version from a policy, use DeletePolicy. To find out which version of a policy is marked as the default version, use ListPolicyVersions.
    
    For information about versions for managed policies, see Versioning for managed policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeletePolicyVersionRequest.Builder avoiding the need to create one manually via DeletePolicyVersionRequest.builder()
    
    Parameters:
    
    deletePolicyVersionRequest - A Consumer that will call methods on DeletePolicyVersionRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeletePolicyVersion operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRole
```
default DeleteRoleResponse deleteRole(DeleteRoleRequest deleteRoleRequest)
                               throws NoSuchEntityException,
                                      DeleteConflictException,
                                      LimitExceededException,
                                      UnmodifiableEntityException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Deletes the specified role. The role must not have any policies attached. For more information about roles, see Working with roles.
    
    Make sure that you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
    
    Parameters:
    
    deleteRoleRequest -
    
    Returns:
    
    Result of the DeleteRole operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRole
```
default DeleteRoleResponse deleteRole(Consumer<DeleteRoleRequest.Builder> deleteRoleRequest)
                               throws NoSuchEntityException,
                                      DeleteConflictException,
                                      LimitExceededException,
                                      UnmodifiableEntityException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Deletes the specified role. The role must not have any policies attached. For more information about roles, see Working with roles.
    
    Make sure that you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
    
    This is a convenience which creates an instance of the DeleteRoleRequest.Builder avoiding the need to create one manually via DeleteRoleRequest.builder()
    
    Parameters:
    
    deleteRoleRequest - A Consumer that will call methods on DeleteRoleRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteRole operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRolePermissionsBoundary
```
default DeleteRolePermissionsBoundaryResponse deleteRolePermissionsBoundary(DeleteRolePermissionsBoundaryRequest deleteRolePermissionsBoundaryRequest)
                                                                     throws NoSuchEntityException,
                                                                            UnmodifiableEntityException,
                                                                            ServiceFailureException,
                                                                            AwsServiceException,
                                                                            SdkClientException,
                                                                            IamException
```
    Deletes the permissions boundary for the specified IAM role.
    
    Deleting the permissions boundary for a role might increase its permissions. For example, it might allow anyone who assumes the role to perform all the actions granted in its permissions policies.
    
    Parameters:
    
    deleteRolePermissionsBoundaryRequest -
    
    Returns:
    
    Result of the DeleteRolePermissionsBoundary operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRolePermissionsBoundary
```
default DeleteRolePermissionsBoundaryResponse deleteRolePermissionsBoundary(Consumer<DeleteRolePermissionsBoundaryRequest.Builder> deleteRolePermissionsBoundaryRequest)
                                                                     throws NoSuchEntityException,
                                                                            UnmodifiableEntityException,
                                                                            ServiceFailureException,
                                                                            AwsServiceException,
                                                                            SdkClientException,
                                                                            IamException
```
    Deletes the permissions boundary for the specified IAM role.
    
    Deleting the permissions boundary for a role might increase its permissions. For example, it might allow anyone who assumes the role to perform all the actions granted in its permissions policies.
    
    This is a convenience which creates an instance of the DeleteRolePermissionsBoundaryRequest.Builder avoiding the need to create one manually via DeleteRolePermissionsBoundaryRequest.builder()
    
    Parameters:
    
    deleteRolePermissionsBoundaryRequest - A Consumer that will call methods on DeleteRolePermissionsBoundaryRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteRolePermissionsBoundary operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRolePolicy
```
default DeleteRolePolicyResponse deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  UnmodifiableEntityException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM role.
    
    A role can also have managed policies attached to it. To detach a managed policy from a role, use DetachRolePolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    deleteRolePolicyRequest -
    
    Returns:
    
    Result of the DeleteRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteRolePolicy
```
default DeleteRolePolicyResponse deleteRolePolicy(Consumer<DeleteRolePolicyRequest.Builder> deleteRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  UnmodifiableEntityException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM role.
    
    A role can also have managed policies attached to it. To detach a managed policy from a role, use DetachRolePolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeleteRolePolicyRequest.Builder avoiding the need to create one manually via DeleteRolePolicyRequest.builder()
    
    Parameters:
    
    deleteRolePolicyRequest - A Consumer that will call methods on DeleteRolePolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSAMLProvider
```
default DeleteSamlProviderResponse deleteSAMLProvider(DeleteSamlProviderRequest deleteSamlProviderRequest)
                                               throws InvalidInputException,
                                                      LimitExceededException,
                                                      NoSuchEntityException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes a SAML provider resource in IAM.
    
    Deleting the provider resource from IAM does not update any roles that reference the SAML provider resource's ARN as a principal in their trust policies. Any attempt to assume a role that references a non-existent provider resource ARN fails.
    
    This operation requires Signature Version 4.
    
    Parameters:
    
    deleteSamlProviderRequest -
    
    Returns:
    
    Result of the DeleteSAMLProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSAMLProvider
```
default DeleteSamlProviderResponse deleteSAMLProvider(Consumer<DeleteSamlProviderRequest.Builder> deleteSamlProviderRequest)
                                               throws InvalidInputException,
                                                      LimitExceededException,
                                                      NoSuchEntityException,
                                                      ServiceFailureException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes a SAML provider resource in IAM.
    
    Deleting the provider resource from IAM does not update any roles that reference the SAML provider resource's ARN as a principal in their trust policies. Any attempt to assume a role that references a non-existent provider resource ARN fails.
    
    This operation requires Signature Version 4.
    
    This is a convenience which creates an instance of the DeleteSamlProviderRequest.Builder avoiding the need to create one manually via DeleteSamlProviderRequest.builder()
    
    Parameters:
    
    deleteSamlProviderRequest - A Consumer that will call methods on DeleteSAMLProviderRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteSAMLProvider operation returned by the service.
    
    Throws:
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSSHPublicKey
```
default DeleteSshPublicKeyResponse deleteSSHPublicKey(DeleteSshPublicKeyRequest deleteSshPublicKeyRequest)
                                               throws NoSuchEntityException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the specified SSH public key.
    
    The SSH public key deleted by this operation is used only for authenticating the associated IAM user to an AWS CodeCommit repository. For more information about using SSH keys to authenticate to an AWS CodeCommit repository, see Set up AWS CodeCommit for SSH connections in the AWS CodeCommit User Guide.
    
    Parameters:
    
    deleteSshPublicKeyRequest -
    
    Returns:
    
    Result of the DeleteSSHPublicKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSSHPublicKey
```
default DeleteSshPublicKeyResponse deleteSSHPublicKey(Consumer<DeleteSshPublicKeyRequest.Builder> deleteSshPublicKeyRequest)
                                               throws NoSuchEntityException,
                                                      AwsServiceException,
                                                      SdkClientException,
                                                      IamException
```
    Deletes the specified SSH public key.
    
    The SSH public key deleted by this operation is used only for authenticating the associated IAM user to an AWS CodeCommit repository. For more information about using SSH keys to authenticate to an AWS CodeCommit repository, see Set up AWS CodeCommit for SSH connections in the AWS CodeCommit User Guide.
    
    This is a convenience which creates an instance of the DeleteSshPublicKeyRequest.Builder avoiding the need to create one manually via DeleteSshPublicKeyRequest.builder()
    
    Parameters:
    
    deleteSshPublicKeyRequest - A Consumer that will call methods on DeleteSSHPublicKeyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteSSHPublicKey operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServerCertificate
```
default DeleteServerCertificateResponse deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest)
                                                         throws NoSuchEntityException,
                                                                DeleteConflictException,
                                                                LimitExceededException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Deletes the specified server certificate.
    
    For more information about working with server certificates, see Working with server certificates in the IAM User Guide. This topic also includes a list of AWS services that can use the server certificates that you manage with IAM.
    
    If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, see DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.
    
    Parameters:
    
    deleteServerCertificateRequest -
    
    Returns:
    
    Result of the DeleteServerCertificate operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServerCertificate
```
default DeleteServerCertificateResponse deleteServerCertificate(Consumer<DeleteServerCertificateRequest.Builder> deleteServerCertificateRequest)
                                                         throws NoSuchEntityException,
                                                                DeleteConflictException,
                                                                LimitExceededException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Deletes the specified server certificate.
    
    For more information about working with server certificates, see Working with server certificates in the IAM User Guide. This topic also includes a list of AWS services that can use the server certificates that you manage with IAM.
    
    If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, see DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.
    
    This is a convenience which creates an instance of the DeleteServerCertificateRequest.Builder avoiding the need to create one manually via DeleteServerCertificateRequest.builder()
    
    Parameters:
    
    deleteServerCertificateRequest - A Consumer that will call methods on DeleteServerCertificateRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteServerCertificate operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServiceLinkedRole
```
default DeleteServiceLinkedRoleResponse deleteServiceLinkedRole(DeleteServiceLinkedRoleRequest deleteServiceLinkedRoleRequest)
                                                         throws NoSuchEntityException,
                                                                LimitExceededException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Submits a service-linked role deletion request and returns a DeletionTaskId, which you can use to check the status of the deletion. Before you call this operation, confirm that the role has no active sessions and that any resources used by the role in the linked service are deleted. If you call this operation more than once for the same service-linked role and an earlier deletion task is not complete, then the DeletionTaskId of the earlier request is returned.
    
    If you submit a deletion request for a service-linked role whose linked service is still accessing a resource, then the deletion task fails. If it fails, the GetServiceLinkedRoleDeletionStatus operation returns the reason for the failure, usually including the resources that must be deleted. To delete the service-linked role, you must first remove those resources from the linked service and then submit the deletion request again. Resources are specific to the service that is linked to the role. For more information about removing resources from a service, see the AWS documentation for your service.
    
    For more information about service-linked roles, see Roles terms and concepts: AWS service-linked role in the IAM User Guide.
    
    Parameters:
    
    deleteServiceLinkedRoleRequest -
    
    Returns:
    
    Result of the DeleteServiceLinkedRole operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServiceLinkedRole
```
default DeleteServiceLinkedRoleResponse deleteServiceLinkedRole(Consumer<DeleteServiceLinkedRoleRequest.Builder> deleteServiceLinkedRoleRequest)
                                                         throws NoSuchEntityException,
                                                                LimitExceededException,
                                                                ServiceFailureException,
                                                                AwsServiceException,
                                                                SdkClientException,
                                                                IamException
```
    Submits a service-linked role deletion request and returns a DeletionTaskId, which you can use to check the status of the deletion. Before you call this operation, confirm that the role has no active sessions and that any resources used by the role in the linked service are deleted. If you call this operation more than once for the same service-linked role and an earlier deletion task is not complete, then the DeletionTaskId of the earlier request is returned.
    
    If you submit a deletion request for a service-linked role whose linked service is still accessing a resource, then the deletion task fails. If it fails, the GetServiceLinkedRoleDeletionStatus operation returns the reason for the failure, usually including the resources that must be deleted. To delete the service-linked role, you must first remove those resources from the linked service and then submit the deletion request again. Resources are specific to the service that is linked to the role. For more information about removing resources from a service, see the AWS documentation for your service.
    
    For more information about service-linked roles, see Roles terms and concepts: AWS service-linked role in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeleteServiceLinkedRoleRequest.Builder avoiding the need to create one manually via DeleteServiceLinkedRoleRequest.builder()
    
    Parameters:
    
    deleteServiceLinkedRoleRequest - A Consumer that will call methods on DeleteServiceLinkedRoleRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteServiceLinkedRole operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServiceSpecificCredential
```
default DeleteServiceSpecificCredentialResponse deleteServiceSpecificCredential(DeleteServiceSpecificCredentialRequest deleteServiceSpecificCredentialRequest)
                                                                         throws NoSuchEntityException,
                                                                                AwsServiceException,
                                                                                SdkClientException,
                                                                                IamException
```
    Deletes the specified service-specific credential.
    
    Parameters:
    
    deleteServiceSpecificCredentialRequest -
    
    Returns:
    
    Result of the DeleteServiceSpecificCredential operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteServiceSpecificCredential
```
default DeleteServiceSpecificCredentialResponse deleteServiceSpecificCredential(Consumer<DeleteServiceSpecificCredentialRequest.Builder> deleteServiceSpecificCredentialRequest)
                                                                         throws NoSuchEntityException,
                                                                                AwsServiceException,
                                                                                SdkClientException,
                                                                                IamException
```
    Deletes the specified service-specific credential.
    
    This is a convenience which creates an instance of the DeleteServiceSpecificCredentialRequest.Builder avoiding the need to create one manually via DeleteServiceSpecificCredentialRequest.builder()
    
    Parameters:
    
    deleteServiceSpecificCredentialRequest - A Consumer that will call methods on DeleteServiceSpecificCredentialRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteServiceSpecificCredential operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSigningCertificate
```
default DeleteSigningCertificateResponse deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest)
                                                           throws NoSuchEntityException,
                                                                  LimitExceededException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Deletes a signing certificate associated with the specified IAM user.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated IAM users.
    
    Parameters:
    
    deleteSigningCertificateRequest -
    
    Returns:
    
    Result of the DeleteSigningCertificate operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteSigningCertificate
```
default DeleteSigningCertificateResponse deleteSigningCertificate(Consumer<DeleteSigningCertificateRequest.Builder> deleteSigningCertificateRequest)
                                                           throws NoSuchEntityException,
                                                                  LimitExceededException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Deletes a signing certificate associated with the specified IAM user.
    
    If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated IAM users.
    
    This is a convenience which creates an instance of the DeleteSigningCertificateRequest.Builder avoiding the need to create one manually via DeleteSigningCertificateRequest.builder()
    
    Parameters:
    
    deleteSigningCertificateRequest - A Consumer that will call methods on DeleteSigningCertificateRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteSigningCertificate operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUser
```
default DeleteUserResponse deleteUser(DeleteUserRequest deleteUserRequest)
                               throws LimitExceededException,
                                      NoSuchEntityException,
                                      DeleteConflictException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Deletes the specified IAM user. Unlike the AWS Management Console, when you delete a user programmatically, you must delete the items attached to the user manually, or the deletion fails. For more information, see Deleting an IAM user. Before attempting to delete a user, remove the following items:
    - Password (DeleteLoginProfile)
    - Access keys (DeleteAccessKey)
    - Signing certificate (DeleteSigningCertificate)
    - SSH public key (DeleteSSHPublicKey)
    - Git credentials (DeleteServiceSpecificCredential)
    - Multi-factor authentication (MFA) device (DeactivateMFADevice, DeleteVirtualMFADevice)
    - Inline policies (DeleteUserPolicy)
    - Attached managed policies (DetachUserPolicy)
    - Group memberships (RemoveUserFromGroup)
    Parameters:
    
    deleteUserRequest -
    
    Returns:
    
    Result of the DeleteUser operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUser
```
default DeleteUserResponse deleteUser(Consumer<DeleteUserRequest.Builder> deleteUserRequest)
                               throws LimitExceededException,
                                      NoSuchEntityException,
                                      DeleteConflictException,
                                      ConcurrentModificationException,
                                      ServiceFailureException,
                                      AwsServiceException,
                                      SdkClientException,
                                      IamException
```
    Deletes the specified IAM user. Unlike the AWS Management Console, when you delete a user programmatically, you must delete the items attached to the user manually, or the deletion fails. For more information, see Deleting an IAM user. Before attempting to delete a user, remove the following items:
    - Password (DeleteLoginProfile)
    - Access keys (DeleteAccessKey)
    - Signing certificate (DeleteSigningCertificate)
    - SSH public key (DeleteSSHPublicKey)
    - Git credentials (DeleteServiceSpecificCredential)
    - Multi-factor authentication (MFA) device (DeactivateMFADevice, DeleteVirtualMFADevice)
    - Inline policies (DeleteUserPolicy)
    - Attached managed policies (DetachUserPolicy)
    - Group memberships (RemoveUserFromGroup)
    This is a convenience which creates an instance of the DeleteUserRequest.Builder avoiding the need to create one manually via DeleteUserRequest.builder()
    Parameters:
    
    deleteUserRequest - A Consumer that will call methods on DeleteUserRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteUser operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    ConcurrentModificationException - The request was rejected because multiple requests to change this object were submitted simultaneously. Wait a few minutes and submit your request again.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUserPermissionsBoundary
```
default DeleteUserPermissionsBoundaryResponse deleteUserPermissionsBoundary(DeleteUserPermissionsBoundaryRequest deleteUserPermissionsBoundaryRequest)
                                                                     throws NoSuchEntityException,
                                                                            ServiceFailureException,
                                                                            AwsServiceException,
                                                                            SdkClientException,
                                                                            IamException
```
    Deletes the permissions boundary for the specified IAM user.
    
    Deleting the permissions boundary for a user might increase its permissions by allowing the user to perform all the actions granted in its permissions policies.
    
    Parameters:
    
    deleteUserPermissionsBoundaryRequest -
    
    Returns:
    
    Result of the DeleteUserPermissionsBoundary operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUserPermissionsBoundary
```
default DeleteUserPermissionsBoundaryResponse deleteUserPermissionsBoundary(Consumer<DeleteUserPermissionsBoundaryRequest.Builder> deleteUserPermissionsBoundaryRequest)
                                                                     throws NoSuchEntityException,
                                                                            ServiceFailureException,
                                                                            AwsServiceException,
                                                                            SdkClientException,
                                                                            IamException
```
    Deletes the permissions boundary for the specified IAM user.
    
    Deleting the permissions boundary for a user might increase its permissions by allowing the user to perform all the actions granted in its permissions policies.
    
    This is a convenience which creates an instance of the DeleteUserPermissionsBoundaryRequest.Builder avoiding the need to create one manually via DeleteUserPermissionsBoundaryRequest.builder()
    
    Parameters:
    
    deleteUserPermissionsBoundaryRequest - A Consumer that will call methods on DeleteUserPermissionsBoundaryRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteUserPermissionsBoundary operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUserPolicy
```
default DeleteUserPolicyResponse deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM user.
    
    A user can also have managed policies attached to it. To detach a managed policy from a user, use DetachUserPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    deleteUserPolicyRequest -
    
    Returns:
    
    Result of the DeleteUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteUserPolicy
```
default DeleteUserPolicyResponse deleteUserPolicy(Consumer<DeleteUserPolicyRequest.Builder> deleteUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Deletes the specified inline policy that is embedded in the specified IAM user.
    
    A user can also have managed policies attached to it. To detach a managed policy from a user, use DetachUserPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DeleteUserPolicyRequest.Builder avoiding the need to create one manually via DeleteUserPolicyRequest.builder()
    
    Parameters:
    
    deleteUserPolicyRequest - A Consumer that will call methods on DeleteUserPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteVirtualMFADevice
```
default DeleteVirtualMfaDeviceResponse deleteVirtualMFADevice(DeleteVirtualMfaDeviceRequest deleteVirtualMfaDeviceRequest)
                                                       throws NoSuchEntityException,
                                                              DeleteConflictException,
                                                              LimitExceededException,
                                                              ServiceFailureException,
                                                              AwsServiceException,
                                                              SdkClientException,
                                                              IamException
```
    Deletes a virtual MFA device.
    
    You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.
    
    Parameters:
    
    deleteVirtualMfaDeviceRequest -
    
    Returns:
    
    Result of the DeleteVirtualMFADevice operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - deleteVirtualMFADevice
```
default DeleteVirtualMfaDeviceResponse deleteVirtualMFADevice(Consumer<DeleteVirtualMfaDeviceRequest.Builder> deleteVirtualMfaDeviceRequest)
                                                       throws NoSuchEntityException,
                                                              DeleteConflictException,
                                                              LimitExceededException,
                                                              ServiceFailureException,
                                                              AwsServiceException,
                                                              SdkClientException,
                                                              IamException
```
    Deletes a virtual MFA device.
    
    You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.
    
    This is a convenience which creates an instance of the DeleteVirtualMfaDeviceRequest.Builder avoiding the need to create one manually via DeleteVirtualMfaDeviceRequest.builder()
    
    Parameters:
    
    deleteVirtualMfaDeviceRequest - A Consumer that will call methods on DeleteVirtualMFADeviceRequest.Builder to create a request.
    
    Returns:
    
    Result of the DeleteVirtualMFADevice operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    DeleteConflictException - The request was rejected because it attempted to delete a resource that has attached subordinate entities. The error message describes these entities.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachGroupPolicy
```
default DetachGroupPolicyResponse detachGroupPolicy(DetachGroupPolicyRequest detachGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    InvalidInputException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Removes the specified managed policy from the specified IAM group.
    
    A group can also have inline policies embedded with it. To delete an inline policy, use DeleteGroupPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    detachGroupPolicyRequest -
    
    Returns:
    
    Result of the DetachGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachGroupPolicy
```
default DetachGroupPolicyResponse detachGroupPolicy(Consumer<DetachGroupPolicyRequest.Builder> detachGroupPolicyRequest)
                                             throws NoSuchEntityException,
                                                    LimitExceededException,
                                                    InvalidInputException,
                                                    ServiceFailureException,
                                                    AwsServiceException,
                                                    SdkClientException,
                                                    IamException
```
    Removes the specified managed policy from the specified IAM group.
    
    A group can also have inline policies embedded with it. To delete an inline policy, use DeleteGroupPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DetachGroupPolicyRequest.Builder avoiding the need to create one manually via DetachGroupPolicyRequest.builder()
    
    Parameters:
    
    detachGroupPolicyRequest - A Consumer that will call methods on DetachGroupPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DetachGroupPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachRolePolicy
```
default DetachRolePolicyResponse detachRolePolicy(DetachRolePolicyRequest detachRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  UnmodifiableEntityException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Removes the specified managed policy from the specified role.
    
    A role can also have inline policies embedded with it. To delete an inline policy, use DeleteRolePolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    detachRolePolicyRequest -
    
    Returns:
    
    Result of the DetachRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachRolePolicy
```
default DetachRolePolicyResponse detachRolePolicy(Consumer<DetachRolePolicyRequest.Builder> detachRolePolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  UnmodifiableEntityException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Removes the specified managed policy from the specified role.
    
    A role can also have inline policies embedded with it. To delete an inline policy, use DeleteRolePolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DetachRolePolicyRequest.Builder avoiding the need to create one manually via DetachRolePolicyRequest.builder()
    
    Parameters:
    
    detachRolePolicyRequest - A Consumer that will call methods on DetachRolePolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DetachRolePolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    UnmodifiableEntityException - The request was rejected because only the service that depends on the service-linked role can modify or delete the role on your behalf. The error message includes the name of the service that depends on this service-linked role. You must request the change through that service.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachUserPolicy
```
default DetachUserPolicyResponse detachUserPolicy(DetachUserPolicyRequest detachUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Removes the specified managed policy from the specified user.
    
    A user can also have inline policies embedded with it. To delete an inline policy, use DeleteUserPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    Parameters:
    
    detachUserPolicyRequest -
    
    Returns:
    
    Result of the DetachUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - detachUserPolicy
```
default DetachUserPolicyResponse detachUserPolicy(Consumer<DetachUserPolicyRequest.Builder> detachUserPolicyRequest)
                                           throws NoSuchEntityException,
                                                  LimitExceededException,
                                                  InvalidInputException,
                                                  ServiceFailureException,
                                                  AwsServiceException,
                                                  SdkClientException,
                                                  IamException
```
    Removes the specified managed policy from the specified user.
    
    A user can also have inline policies embedded with it. To delete an inline policy, use DeleteUserPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
    
    This is a convenience which creates an instance of the DetachUserPolicyRequest.Builder avoiding the need to create one manually via DetachUserPolicyRequest.builder()
    
    Parameters:
    
    detachUserPolicyRequest - A Consumer that will call methods on DetachUserPolicyRequest.Builder to create a request.
    
    Returns:
    
    Result of the DetachUserPolicy operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - enableMFADevice
```
default EnableMfaDeviceResponse enableMFADevice(EnableMfaDeviceRequest enableMfaDeviceRequest)
                                         throws EntityAlreadyExistsException,
                                                EntityTemporarilyUnmodifiableException,
                                                InvalidAuthenticationCodeException,
                                                LimitExceededException,
                                                NoSuchEntityException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Enables the specified MFA device and associates it with the specified IAM user. When enabled, the MFA device is required for every subsequent login by the IAM user associated with the device.
    
    Parameters:
    
    enableMfaDeviceRequest -
    
    Returns:
    
    Result of the EnableMFADevice operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    InvalidAuthenticationCodeException - The request was rejected because the authentication code was not recognized. The error message describes the specific error.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - enableMFADevice
```
default EnableMfaDeviceResponse enableMFADevice(Consumer<EnableMfaDeviceRequest.Builder> enableMfaDeviceRequest)
                                         throws EntityAlreadyExistsException,
                                                EntityTemporarilyUnmodifiableException,
                                                InvalidAuthenticationCodeException,
                                                LimitExceededException,
                                                NoSuchEntityException,
                                                ServiceFailureException,
                                                AwsServiceException,
                                                SdkClientException,
                                                IamException
```
    Enables the specified MFA device and associates it with the specified IAM user. When enabled, the MFA device is required for every subsequent login by the IAM user associated with the device.
    
    This is a convenience which creates an instance of the EnableMfaDeviceRequest.Builder avoiding the need to create one manually via EnableMfaDeviceRequest.builder()
    
    Parameters:
    
    enableMfaDeviceRequest - A Consumer that will call methods on EnableMFADeviceRequest.Builder to create a request.
    
    Returns:
    
    Result of the EnableMFADevice operation returned by the service.
    
    Throws:
    
    EntityAlreadyExistsException - The request was rejected because it attempted to create a resource that already exists.
    
    EntityTemporarilyUnmodifiableException - The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user name that was deleted and then recreated. The error indicates that the request is likely to succeed if you try again after waiting several minutes. The error message describes the entity.
    
    InvalidAuthenticationCodeException - The request was rejected because the authentication code was not recognized. The error message describes the specific error.
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateCredentialReport
```
default GenerateCredentialReportResponse generateCredentialReport()
                                                           throws LimitExceededException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
    
    Returns:
    
    Result of the GenerateCredentialReport operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    generateCredentialReport(GenerateCredentialReportRequest), AWS API Documentation
  - generateCredentialReport
```
default GenerateCredentialReportResponse generateCredentialReport(GenerateCredentialReportRequest generateCredentialReportRequest)
                                                           throws LimitExceededException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
    
    Parameters:
    
    generateCredentialReportRequest -
    
    Returns:
    
    Result of the GenerateCredentialReport operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateCredentialReport
```
default GenerateCredentialReportResponse generateCredentialReport(Consumer<GenerateCredentialReportRequest.Builder> generateCredentialReportRequest)
                                                           throws LimitExceededException,
                                                                  ServiceFailureException,
                                                                  AwsServiceException,
                                                                  SdkClientException,
                                                                  IamException
```
    Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
    
    This is a convenience which creates an instance of the GenerateCredentialReportRequest.Builder avoiding the need to create one manually via GenerateCredentialReportRequest.builder()
    
    Parameters:
    
    generateCredentialReportRequest - A Consumer that will call methods on GenerateCredentialReportRequest.Builder to create a request.
    
    Returns:
    
    Result of the GenerateCredentialReport operation returned by the service.
    
    Throws:
    
    LimitExceededException - The request was rejected because it attempted to create resources beyond the current AWS account limits. The error message describes the limit exceeded.
    
    ServiceFailureException - The request processing has failed because of an unknown error, exception or failure.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateOrganizationsAccessReport
```
default GenerateOrganizationsAccessReportResponse generateOrganizationsAccessReport(GenerateOrganizationsAccessReportRequest generateOrganizationsAccessReportRequest)
                                                                             throws ReportGenerationLimitExceededException,
                                                                                    AwsServiceException,
                                                                                    SdkClientException,
                                                                                    IamException
```
    Generates a report for service last accessed data for AWS Organizations. You can generate a report for any entities (organization root, organizational unit, or account) or policies in your organization.
    
    To call this operation, you must be signed in using your AWS Organizations management account credentials. You can use your long-term IAM user or root user credentials, or temporary credentials from assuming an IAM role. SCPs must be enabled for your organization root. You must have the required IAM and AWS Organizations permissions. For more information, see Refining permissions using service last accessed data in the IAM User Guide.
    
    You can generate a service last accessed data report for entities by specifying only the entity's path. This data includes a list of services that are allowed by any service control policies (SCPs) that apply to the entity.
    
    You can generate a service last accessed data report for a policy by specifying an entity's path and an optional AWS Organizations policy ID. This data includes a list of services that are allowed by the specified SCP.
    
    For each service in both report types, the data includes the most recent account activity that the policy allows to account principals in the entity or the entity's children. For important information about the data, reporting period, permissions required, troubleshooting, and supported Regions see Reducing permissions using service last accessed data in the IAM User Guide.
    
    The data includes all attempts to access AWS, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that an account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
    
    This operation returns a JobId. Use this parameter in the GetOrganizationsAccessReport operation to check the status of the report generation. To check the status of this request, use the JobId parameter in the GetOrganizationsAccessReport operation and test the JobStatus response parameter. When the job is complete, you can retrieve the report.
    
    To generate a service last accessed data report for entities, specify an entity path without specifying the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned in the report.
    - Root – When you specify the organizations root as the entity, the resulting report lists all of the services allowed by SCPs that are attached to your root. For each service, the report includes data for all accounts in your organization except the management account, because the management account is not limited by SCPs.
    - OU – When you specify an organizational unit (OU) as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the OU and its parents. For each service, the report includes data for all accounts in the OU or its children. This data excludes the management account, because the management account is not limited by SCPs.
    - management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. For each service, the report includes data for only the management account.
    - Account – When you specify another account as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the account and its parents. For each service, the report includes data for only the specified account.
    To generate a service last accessed data report for policies, specify an entity path and the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned for each service.
    - Root – When you specify the root entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in your organization to which the SCP applies. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to any entities in the organization, then the report will return a list of services with no data.
    - OU – When you specify an OU entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in the OU or its children to which the SCP applies. This means that other accounts outside the OU that are affected by the SCP might not be included in the data. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to the OU or one of its children, the report will return a list of services with no data.
    - management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. If you specify a policy ID in the CLI or API, the policy is ignored. For each service, the report includes data for only the management account.
    - Account – When you specify another account entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for only the specified account. This means that other accounts in the organization that are affected by the SCP might not be included in the data. If the SCP is not attached to the account, the report will return a list of services with no data.
    Service last accessed data does not use other policy types when determining whether a principal could access a service. These other policy types include identity-based policies, resource-based policies, access control lists, IAM permissions boundaries, and STS assume role policies. It only applies SCP logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
    
    For more information about service last accessed data, see Reducing policy scope by viewing user activity in the IAM User Guide.
    Parameters:
    
    generateOrganizationsAccessReportRequest -
    
    Returns:
    
    Result of the GenerateOrganizationsAccessReport operation returned by the service.
    
    Throws:
    
    ReportGenerationLimitExceededException - The request failed because the maximum number of concurrent requests for this account are already running.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateOrganizationsAccessReport
```
default GenerateOrganizationsAccessReportResponse generateOrganizationsAccessReport(Consumer<GenerateOrganizationsAccessReportRequest.Builder> generateOrganizationsAccessReportRequest)
                                                                             throws ReportGenerationLimitExceededException,
                                                                                    AwsServiceException,
                                                                                    SdkClientException,
                                                                                    IamException
```
    Generates a report for service last accessed data for AWS Organizations. You can generate a report for any entities (organization root, organizational unit, or account) or policies in your organization.
    
    To call this operation, you must be signed in using your AWS Organizations management account credentials. You can use your long-term IAM user or root user credentials, or temporary credentials from assuming an IAM role. SCPs must be enabled for your organization root. You must have the required IAM and AWS Organizations permissions. For more information, see Refining permissions using service last accessed data in the IAM User Guide.
    
    You can generate a service last accessed data report for entities by specifying only the entity's path. This data includes a list of services that are allowed by any service control policies (SCPs) that apply to the entity.
    
    You can generate a service last accessed data report for a policy by specifying an entity's path and an optional AWS Organizations policy ID. This data includes a list of services that are allowed by the specified SCP.
    
    For each service in both report types, the data includes the most recent account activity that the policy allows to account principals in the entity or the entity's children. For important information about the data, reporting period, permissions required, troubleshooting, and supported Regions see Reducing permissions using service last accessed data in the IAM User Guide.
    
    The data includes all attempts to access AWS, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that an account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
    
    This operation returns a JobId. Use this parameter in the GetOrganizationsAccessReport operation to check the status of the report generation. To check the status of this request, use the JobId parameter in the GetOrganizationsAccessReport operation and test the JobStatus response parameter. When the job is complete, you can retrieve the report.
    
    To generate a service last accessed data report for entities, specify an entity path without specifying the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned in the report.
    - Root – When you specify the organizations root as the entity, the resulting report lists all of the services allowed by SCPs that are attached to your root. For each service, the report includes data for all accounts in your organization except the management account, because the management account is not limited by SCPs.
    - OU – When you specify an organizational unit (OU) as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the OU and its parents. For each service, the report includes data for all accounts in the OU or its children. This data excludes the management account, because the management account is not limited by SCPs.
    - management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. For each service, the report includes data for only the management account.
    - Account – When you specify another account as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the account and its parents. For each service, the report includes data for only the specified account.
    To generate a service last accessed data report for policies, specify an entity path and the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned for each service.
    - Root – When you specify the root entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in your organization to which the SCP applies. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to any entities in the organization, then the report will return a list of services with no data.
    - OU – When you specify an OU entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in the OU or its children to which the SCP applies. This means that other accounts outside the OU that are affected by the SCP might not be included in the data. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to the OU or one of its children, the report will return a list of services with no data.
    - management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. If you specify a policy ID in the CLI or API, the policy is ignored. For each service, the report includes data for only the management account.
    - Account – When you specify another account entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for only the specified account. This means that other accounts in the organization that are affected by the SCP might not be included in the data. If the SCP is not attached to the account, the report will return a list of services with no data.
    Service last accessed data does not use other policy types when determining whether a principal could access a service. These other policy types include identity-based policies, resource-based policies, access control lists, IAM permissions boundaries, and STS assume role policies. It only applies SCP logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
    
    For more information about service last accessed data, see Reducing policy scope by viewing user activity in the IAM User Guide.
    
    This is a convenience which creates an instance of the GenerateOrganizationsAccessReportRequest.Builder avoiding the need to create one manually via GenerateOrganizationsAccessReportRequest.builder()
    Parameters:
    
    generateOrganizationsAccessReportRequest - A Consumer that will call methods on GenerateOrganizationsAccessReportRequest.Builder to create a request.
    
    Returns:
    
    Result of the GenerateOrganizationsAccessReport operation returned by the service.
    
    Throws:
    
    ReportGenerationLimitExceededException - The request failed because the maximum number of concurrent requests for this account are already running.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateServiceLastAccessedDetails
```
default GenerateServiceLastAccessedDetailsResponse generateServiceLastAccessedDetails(GenerateServiceLastAccessedDetailsRequest generateServiceLastAccessedDetailsRequest)
                                                                               throws NoSuchEntityException,
                                                                                      InvalidInputException,
                                                                                      AwsServiceException,
                                                                                      SdkClientException,
                                                                                      IamException
```
    Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used in an attempt to access AWS services. Recent activity usually appears within four hours. IAM reports activity for the last 365 days, or less if your Region began supporting this feature within the last year. For more information, see Regions where data is tracked.
    
    The service last accessed data includes all attempts to access an AWS API, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that your account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
    
    The GenerateServiceLastAccessedDetails operation returns a JobId. Use this parameter in the following operations to retrieve the following details from your report:
    - GetServiceLastAccessedDetails – Use this operation for users, groups, roles, or policies to list every AWS service that the resource could access using permissions policies. For each service, the response includes information about the most recent access attempt.
      
      The JobId returned by GenerateServiceLastAccessedDetail must be used by the same role within a session, or by the same user when used to call GetServiceLastAccessedDetail.
    - GetServiceLastAccessedDetailsWithEntities – Use this operation for groups and policies to list information about the associated entities (users or roles) that attempted to access a specific AWS service.
    To check the status of the GenerateServiceLastAccessedDetails request, use the JobId parameter in the same operations and test the JobStatus response parameter.
    
    For additional information about the permissions policies that allow an identity (user, group, or role) to access specific services, use the ListPoliciesGrantingServiceAccess operation.
    
    Service last accessed data does not use other policy types when determining whether a resource could access a service. These other policy types include resource-based policies, access control lists, AWS Organizations policies, IAM permissions boundaries, and AWS STS assume role policies. It only applies permissions policy logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
    
    For more information about service and action last accessed data, see Reducing permissions using service last accessed data in the IAM User Guide.
    Parameters:
    
    generateServiceLastAccessedDetailsRequest -
    
    Returns:
    
    Result of the GenerateServiceLastAccessedDetails operation returned by the service.
    
    Throws:
    
    NoSuchEntityException - The request was rejected because it referenced a resource entity that does not exist. The error message describes the resource.
    
    InvalidInputException - The request was rejected because an invalid or out-of-range value was supplied for an input parameter.
    
    SdkException - Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for catch all scenarios.
    
    SdkClientException - If any client side error occurs such as an IO related failure, failure to get credentials, etc.
    
    IamException - Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.
    
    AwsServiceException
    
    See Also:
    
    AWS API Documentation
  - generateServiceLastAccessedDetails
```
default GenerateServiceLastAccessedDetailsResponse generateServiceLastAccessedDetails(Consumer<GenerateServiceLastAccessedDetailsRequest.Builder> generateServiceLastAccessedDetailsRequest)
                                                                               throws NoSuchEntityException,
                                                                                      InvalidInputException,
                                                                                      AwsServiceException,
                                                                                      
```

AWS SDK for Java API Reference - 2.16.46

Interface IamClient

Field Summary

Method Summary

Methods inherited from interface software.amazon.awssdk.core.SdkClient

Methods inherited from interface software.amazon.awssdk.utils.SdkAutoCloseable

Field Detail

SERVICE_NAME

SERVICE_METADATA_ID

Method Detail

builder

addClientIDToOpenIDConnectProvider

addClientIDToOpenIDConnectProvider

addRoleToInstanceProfile

addRoleToInstanceProfile

addUserToGroup

addUserToGroup

attachGroupPolicy

attachGroupPolicy

attachRolePolicy

attachRolePolicy

attachUserPolicy

attachUserPolicy

changePassword

changePassword

createAccessKey

createAccessKey

createAccessKey

createAccountAlias

createAccountAlias

createGroup

createGroup

createInstanceProfile

createInstanceProfile

createLoginProfile

createLoginProfile

createOpenIDConnectProvider

createOpenIDConnectProvider

createPolicy

createPolicy

createPolicyVersion

createPolicyVersion

createRole

createRole

createSAMLProvider

createSAMLProvider

createServiceLinkedRole

createServiceLinkedRole

createServiceSpecificCredential

createServiceSpecificCredential

createUser

createUser

createVirtualMFADevice

createVirtualMFADevice

deactivateMFADevice

deactivateMFADevice

deleteAccessKey

deleteAccessKey

deleteAccountAlias

deleteAccountAlias

deleteAccountPasswordPolicy

deleteAccountPasswordPolicy

deleteAccountPasswordPolicy

deleteGroup

deleteGroup

deleteGroupPolicy

deleteGroupPolicy

deleteInstanceProfile

deleteInstanceProfile

deleteLoginProfile

deleteLoginProfile

deleteOpenIDConnectProvider

deleteOpenIDConnectProvider

deletePolicy

deletePolicy

deletePolicyVersion

deletePolicyVersion

deleteRole

deleteRole

deleteRolePermissionsBoundary