@Generated(value="software.amazon.awssdk:codegen") public interface IamClient extends SdkClient
builder()
method.
AWS Identity and Access Management (IAM) is a web service for securely controlling access to AWS services. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users and applications can access. For more information about IAM, see AWS Identity and Access Management (IAM) and the AWS Identity and Access Management User Guide.
Modifier and Type | Field and Description |
---|---|
static String |
SERVICE_METADATA_ID
Value for looking up the service's metadata from the
ServiceMetadataProvider . |
static String |
SERVICE_NAME |
Modifier and Type | Method and Description |
---|---|
default AddClientIdToOpenIdConnectProviderResponse |
addClientIDToOpenIDConnectProvider(AddClientIdToOpenIdConnectProviderRequest addClientIdToOpenIdConnectProviderRequest)
Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM
OpenID Connect (OIDC) provider resource.
|
default AddClientIdToOpenIdConnectProviderResponse |
addClientIDToOpenIDConnectProvider(Consumer<AddClientIdToOpenIdConnectProviderRequest.Builder> addClientIdToOpenIdConnectProviderRequest)
Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM
OpenID Connect (OIDC) provider resource.
|
default AddRoleToInstanceProfileResponse |
addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest)
Adds the specified IAM role to the specified instance profile.
|
default AddRoleToInstanceProfileResponse |
addRoleToInstanceProfile(Consumer<AddRoleToInstanceProfileRequest.Builder> addRoleToInstanceProfileRequest)
Adds the specified IAM role to the specified instance profile.
|
default AddUserToGroupResponse |
addUserToGroup(AddUserToGroupRequest addUserToGroupRequest)
Adds the specified user to the specified group.
|
default AddUserToGroupResponse |
addUserToGroup(Consumer<AddUserToGroupRequest.Builder> addUserToGroupRequest)
Adds the specified user to the specified group.
|
default AttachGroupPolicyResponse |
attachGroupPolicy(AttachGroupPolicyRequest attachGroupPolicyRequest)
Attaches the specified managed policy to the specified IAM group.
|
default AttachGroupPolicyResponse |
attachGroupPolicy(Consumer<AttachGroupPolicyRequest.Builder> attachGroupPolicyRequest)
Attaches the specified managed policy to the specified IAM group.
|
default AttachRolePolicyResponse |
attachRolePolicy(AttachRolePolicyRequest attachRolePolicyRequest)
Attaches the specified managed policy to the specified IAM role.
|
default AttachRolePolicyResponse |
attachRolePolicy(Consumer<AttachRolePolicyRequest.Builder> attachRolePolicyRequest)
Attaches the specified managed policy to the specified IAM role.
|
default AttachUserPolicyResponse |
attachUserPolicy(AttachUserPolicyRequest attachUserPolicyRequest)
Attaches the specified managed policy to the specified user.
|
default AttachUserPolicyResponse |
attachUserPolicy(Consumer<AttachUserPolicyRequest.Builder> attachUserPolicyRequest)
Attaches the specified managed policy to the specified user.
|
static IamClientBuilder |
builder()
Create a builder that can be used to configure and create a
IamClient . |
default ChangePasswordResponse |
changePassword(ChangePasswordRequest changePasswordRequest)
Changes the password of the IAM user who is calling this operation.
|
default ChangePasswordResponse |
changePassword(Consumer<ChangePasswordRequest.Builder> changePasswordRequest)
Changes the password of the IAM user who is calling this operation.
|
default CreateAccessKeyResponse |
createAccessKey()
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
|
default CreateAccessKeyResponse |
createAccessKey(Consumer<CreateAccessKeyRequest.Builder> createAccessKeyRequest)
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
|
default CreateAccessKeyResponse |
createAccessKey(CreateAccessKeyRequest createAccessKeyRequest)
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
|
default CreateAccountAliasResponse |
createAccountAlias(Consumer<CreateAccountAliasRequest.Builder> createAccountAliasRequest)
Creates an alias for your AWS account.
|
default CreateAccountAliasResponse |
createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest)
Creates an alias for your AWS account.
|
default CreateGroupResponse |
createGroup(Consumer<CreateGroupRequest.Builder> createGroupRequest)
Creates a new group.
|
default CreateGroupResponse |
createGroup(CreateGroupRequest createGroupRequest)
Creates a new group.
|
default CreateInstanceProfileResponse |
createInstanceProfile(Consumer<CreateInstanceProfileRequest.Builder> createInstanceProfileRequest)
Creates a new instance profile.
|
default CreateInstanceProfileResponse |
createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest)
Creates a new instance profile.
|
default CreateLoginProfileResponse |
createLoginProfile(Consumer<CreateLoginProfileRequest.Builder> createLoginProfileRequest)
Creates a password for the specified IAM user.
|
default CreateLoginProfileResponse |
createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest)
Creates a password for the specified IAM user.
|
default CreateOpenIdConnectProviderResponse |
createOpenIDConnectProvider(Consumer<CreateOpenIdConnectProviderRequest.Builder> createOpenIdConnectProviderRequest)
Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
|
default CreateOpenIdConnectProviderResponse |
createOpenIDConnectProvider(CreateOpenIdConnectProviderRequest createOpenIdConnectProviderRequest)
Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
|
default CreatePolicyResponse |
createPolicy(Consumer<CreatePolicyRequest.Builder> createPolicyRequest)
Creates a new managed policy for your AWS account.
|
default CreatePolicyResponse |
createPolicy(CreatePolicyRequest createPolicyRequest)
Creates a new managed policy for your AWS account.
|
default CreatePolicyVersionResponse |
createPolicyVersion(Consumer<CreatePolicyVersionRequest.Builder> createPolicyVersionRequest)
Creates a new version of the specified managed policy.
|
default CreatePolicyVersionResponse |
createPolicyVersion(CreatePolicyVersionRequest createPolicyVersionRequest)
Creates a new version of the specified managed policy.
|
default CreateRoleResponse |
createRole(Consumer<CreateRoleRequest.Builder> createRoleRequest)
Creates a new role for your AWS account.
|
default CreateRoleResponse |
createRole(CreateRoleRequest createRoleRequest)
Creates a new role for your AWS account.
|
default CreateSamlProviderResponse |
createSAMLProvider(Consumer<CreateSamlProviderRequest.Builder> createSamlProviderRequest)
Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
|
default CreateSamlProviderResponse |
createSAMLProvider(CreateSamlProviderRequest createSamlProviderRequest)
Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
|
default CreateServiceLinkedRoleResponse |
createServiceLinkedRole(Consumer<CreateServiceLinkedRoleRequest.Builder> createServiceLinkedRoleRequest)
Creates an IAM role that is linked to a specific AWS service.
|
default CreateServiceLinkedRoleResponse |
createServiceLinkedRole(CreateServiceLinkedRoleRequest createServiceLinkedRoleRequest)
Creates an IAM role that is linked to a specific AWS service.
|
default CreateServiceSpecificCredentialResponse |
createServiceSpecificCredential(Consumer<CreateServiceSpecificCredentialRequest.Builder> createServiceSpecificCredentialRequest)
Generates a set of credentials consisting of a user name and password that can be used to access the service
specified in the request.
|
default CreateServiceSpecificCredentialResponse |
createServiceSpecificCredential(CreateServiceSpecificCredentialRequest createServiceSpecificCredentialRequest)
Generates a set of credentials consisting of a user name and password that can be used to access the service
specified in the request.
|
default CreateUserResponse |
createUser(Consumer<CreateUserRequest.Builder> createUserRequest)
Creates a new IAM user for your AWS account.
|
default CreateUserResponse |
createUser(CreateUserRequest createUserRequest)
Creates a new IAM user for your AWS account.
|
default CreateVirtualMfaDeviceResponse |
createVirtualMFADevice(Consumer<CreateVirtualMfaDeviceRequest.Builder> createVirtualMfaDeviceRequest)
Creates a new virtual MFA device for the AWS account.
|
default CreateVirtualMfaDeviceResponse |
createVirtualMFADevice(CreateVirtualMfaDeviceRequest createVirtualMfaDeviceRequest)
Creates a new virtual MFA device for the AWS account.
|
default DeactivateMfaDeviceResponse |
deactivateMFADevice(Consumer<DeactivateMfaDeviceRequest.Builder> deactivateMfaDeviceRequest)
Deactivates the specified MFA device and removes it from association with the user name for which it was
originally enabled.
|
default DeactivateMfaDeviceResponse |
deactivateMFADevice(DeactivateMfaDeviceRequest deactivateMfaDeviceRequest)
Deactivates the specified MFA device and removes it from association with the user name for which it was
originally enabled.
|
default DeleteAccessKeyResponse |
deleteAccessKey(Consumer<DeleteAccessKeyRequest.Builder> deleteAccessKeyRequest)
Deletes the access key pair associated with the specified IAM user.
|
default DeleteAccessKeyResponse |
deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest)
Deletes the access key pair associated with the specified IAM user.
|
default DeleteAccountAliasResponse |
deleteAccountAlias(Consumer<DeleteAccountAliasRequest.Builder> deleteAccountAliasRequest)
Deletes the specified AWS account alias.
|
default DeleteAccountAliasResponse |
deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest)
Deletes the specified AWS account alias.
|
default DeleteAccountPasswordPolicyResponse |
deleteAccountPasswordPolicy()
Deletes the password policy for the AWS account.
|
default DeleteAccountPasswordPolicyResponse |
deleteAccountPasswordPolicy(Consumer<DeleteAccountPasswordPolicyRequest.Builder> deleteAccountPasswordPolicyRequest)
Deletes the password policy for the AWS account.
|
default DeleteAccountPasswordPolicyResponse |
deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest)
Deletes the password policy for the AWS account.
|
default DeleteGroupResponse |
deleteGroup(Consumer<DeleteGroupRequest.Builder> deleteGroupRequest)
Deletes the specified IAM group.
|
default DeleteGroupResponse |
deleteGroup(DeleteGroupRequest deleteGroupRequest)
Deletes the specified IAM group.
|
default DeleteGroupPolicyResponse |
deleteGroupPolicy(Consumer<DeleteGroupPolicyRequest.Builder> deleteGroupPolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM group.
|
default DeleteGroupPolicyResponse |
deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM group.
|
default DeleteInstanceProfileResponse |
deleteInstanceProfile(Consumer<DeleteInstanceProfileRequest.Builder> deleteInstanceProfileRequest)
Deletes the specified instance profile.
|
default DeleteInstanceProfileResponse |
deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest)
Deletes the specified instance profile.
|
default DeleteLoginProfileResponse |
deleteLoginProfile(Consumer<DeleteLoginProfileRequest.Builder> deleteLoginProfileRequest)
Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services
through the AWS Management Console.
|
default DeleteLoginProfileResponse |
deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest)
Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services
through the AWS Management Console.
|
default DeleteOpenIdConnectProviderResponse |
deleteOpenIDConnectProvider(Consumer<DeleteOpenIdConnectProviderRequest.Builder> deleteOpenIdConnectProviderRequest)
Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
|
default DeleteOpenIdConnectProviderResponse |
deleteOpenIDConnectProvider(DeleteOpenIdConnectProviderRequest deleteOpenIdConnectProviderRequest)
Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
|
default DeletePolicyResponse |
deletePolicy(Consumer<DeletePolicyRequest.Builder> deletePolicyRequest)
Deletes the specified managed policy.
|
default DeletePolicyResponse |
deletePolicy(DeletePolicyRequest deletePolicyRequest)
Deletes the specified managed policy.
|
default DeletePolicyVersionResponse |
deletePolicyVersion(Consumer<DeletePolicyVersionRequest.Builder> deletePolicyVersionRequest)
Deletes the specified version from the specified managed policy.
|
default DeletePolicyVersionResponse |
deletePolicyVersion(DeletePolicyVersionRequest deletePolicyVersionRequest)
Deletes the specified version from the specified managed policy.
|
default DeleteRoleResponse |
deleteRole(Consumer<DeleteRoleRequest.Builder> deleteRoleRequest)
Deletes the specified role.
|
default DeleteRoleResponse |
deleteRole(DeleteRoleRequest deleteRoleRequest)
Deletes the specified role.
|
default DeleteRolePermissionsBoundaryResponse |
deleteRolePermissionsBoundary(Consumer<DeleteRolePermissionsBoundaryRequest.Builder> deleteRolePermissionsBoundaryRequest)
Deletes the permissions boundary for the specified IAM role.
|
default DeleteRolePermissionsBoundaryResponse |
deleteRolePermissionsBoundary(DeleteRolePermissionsBoundaryRequest deleteRolePermissionsBoundaryRequest)
Deletes the permissions boundary for the specified IAM role.
|
default DeleteRolePolicyResponse |
deleteRolePolicy(Consumer<DeleteRolePolicyRequest.Builder> deleteRolePolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM role.
|
default DeleteRolePolicyResponse |
deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM role.
|
default DeleteSamlProviderResponse |
deleteSAMLProvider(Consumer<DeleteSamlProviderRequest.Builder> deleteSamlProviderRequest)
Deletes a SAML provider resource in IAM.
|
default DeleteSamlProviderResponse |
deleteSAMLProvider(DeleteSamlProviderRequest deleteSamlProviderRequest)
Deletes a SAML provider resource in IAM.
|
default DeleteServerCertificateResponse |
deleteServerCertificate(Consumer<DeleteServerCertificateRequest.Builder> deleteServerCertificateRequest)
Deletes the specified server certificate.
|
default DeleteServerCertificateResponse |
deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest)
Deletes the specified server certificate.
|
default DeleteServiceLinkedRoleResponse |
deleteServiceLinkedRole(Consumer<DeleteServiceLinkedRoleRequest.Builder> deleteServiceLinkedRoleRequest)
Submits a service-linked role deletion request and returns a
DeletionTaskId , which you can use to
check the status of the deletion. |
default DeleteServiceLinkedRoleResponse |
deleteServiceLinkedRole(DeleteServiceLinkedRoleRequest deleteServiceLinkedRoleRequest)
Submits a service-linked role deletion request and returns a
DeletionTaskId , which you can use to
check the status of the deletion. |
default DeleteServiceSpecificCredentialResponse |
deleteServiceSpecificCredential(Consumer<DeleteServiceSpecificCredentialRequest.Builder> deleteServiceSpecificCredentialRequest)
Deletes the specified service-specific credential.
|
default DeleteServiceSpecificCredentialResponse |
deleteServiceSpecificCredential(DeleteServiceSpecificCredentialRequest deleteServiceSpecificCredentialRequest)
Deletes the specified service-specific credential.
|
default DeleteSigningCertificateResponse |
deleteSigningCertificate(Consumer<DeleteSigningCertificateRequest.Builder> deleteSigningCertificateRequest)
Deletes a signing certificate associated with the specified IAM user.
|
default DeleteSigningCertificateResponse |
deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest)
Deletes a signing certificate associated with the specified IAM user.
|
default DeleteSshPublicKeyResponse |
deleteSSHPublicKey(Consumer<DeleteSshPublicKeyRequest.Builder> deleteSshPublicKeyRequest)
Deletes the specified SSH public key.
|
default DeleteSshPublicKeyResponse |
deleteSSHPublicKey(DeleteSshPublicKeyRequest deleteSshPublicKeyRequest)
Deletes the specified SSH public key.
|
default DeleteUserResponse |
deleteUser(Consumer<DeleteUserRequest.Builder> deleteUserRequest)
Deletes the specified IAM user.
|
default DeleteUserResponse |
deleteUser(DeleteUserRequest deleteUserRequest)
Deletes the specified IAM user.
|
default DeleteUserPermissionsBoundaryResponse |
deleteUserPermissionsBoundary(Consumer<DeleteUserPermissionsBoundaryRequest.Builder> deleteUserPermissionsBoundaryRequest)
Deletes the permissions boundary for the specified IAM user.
|
default DeleteUserPermissionsBoundaryResponse |
deleteUserPermissionsBoundary(DeleteUserPermissionsBoundaryRequest deleteUserPermissionsBoundaryRequest)
Deletes the permissions boundary for the specified IAM user.
|
default DeleteUserPolicyResponse |
deleteUserPolicy(Consumer<DeleteUserPolicyRequest.Builder> deleteUserPolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM user.
|
default DeleteUserPolicyResponse |
deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest)
Deletes the specified inline policy that is embedded in the specified IAM user.
|
default DeleteVirtualMfaDeviceResponse |
deleteVirtualMFADevice(Consumer<DeleteVirtualMfaDeviceRequest.Builder> deleteVirtualMfaDeviceRequest)
Deletes a virtual MFA device.
|
default DeleteVirtualMfaDeviceResponse |
deleteVirtualMFADevice(DeleteVirtualMfaDeviceRequest deleteVirtualMfaDeviceRequest)
Deletes a virtual MFA device.
|
default DetachGroupPolicyResponse |
detachGroupPolicy(Consumer<DetachGroupPolicyRequest.Builder> detachGroupPolicyRequest)
Removes the specified managed policy from the specified IAM group.
|
default DetachGroupPolicyResponse |
detachGroupPolicy(DetachGroupPolicyRequest detachGroupPolicyRequest)
Removes the specified managed policy from the specified IAM group.
|
default DetachRolePolicyResponse |
detachRolePolicy(Consumer<DetachRolePolicyRequest.Builder> detachRolePolicyRequest)
Removes the specified managed policy from the specified role.
|
default DetachRolePolicyResponse |
detachRolePolicy(DetachRolePolicyRequest detachRolePolicyRequest)
Removes the specified managed policy from the specified role.
|
default DetachUserPolicyResponse |
detachUserPolicy(Consumer<DetachUserPolicyRequest.Builder> detachUserPolicyRequest)
Removes the specified managed policy from the specified user.
|
default DetachUserPolicyResponse |
detachUserPolicy(DetachUserPolicyRequest detachUserPolicyRequest)
Removes the specified managed policy from the specified user.
|
default EnableMfaDeviceResponse |
enableMFADevice(Consumer<EnableMfaDeviceRequest.Builder> enableMfaDeviceRequest)
Enables the specified MFA device and associates it with the specified IAM user.
|
default EnableMfaDeviceResponse |
enableMFADevice(EnableMfaDeviceRequest enableMfaDeviceRequest)
Enables the specified MFA device and associates it with the specified IAM user.
|
default GenerateCredentialReportResponse |
generateCredentialReport()
Generates a credential report for the AWS account.
|
default GenerateCredentialReportResponse |
generateCredentialReport(Consumer<GenerateCredentialReportRequest.Builder> generateCredentialReportRequest)
Generates a credential report for the AWS account.
|
default GenerateCredentialReportResponse |
generateCredentialReport(GenerateCredentialReportRequest generateCredentialReportRequest)
Generates a credential report for the AWS account.
|
default GenerateOrganizationsAccessReportResponse |
generateOrganizationsAccessReport(Consumer<GenerateOrganizationsAccessReportRequest.Builder> generateOrganizationsAccessReportRequest)
Generates a report for service last accessed data for AWS Organizations.
|
default GenerateOrganizationsAccessReportResponse |
generateOrganizationsAccessReport(GenerateOrganizationsAccessReportRequest generateOrganizationsAccessReportRequest)
Generates a report for service last accessed data for AWS Organizations.
|
default GenerateServiceLastAccessedDetailsResponse |
generateServiceLastAccessedDetails(Consumer<GenerateServiceLastAccessedDetailsRequest.Builder> generateServiceLastAccessedDetailsRequest)
Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used
in an attempt to access AWS services.
|
default GenerateServiceLastAccessedDetailsResponse |
generateServiceLastAccessedDetails(GenerateServiceLastAccessedDetailsRequest generateServiceLastAccessedDetailsRequest)
Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used
in an attempt to access AWS services.
|
default GetAccessKeyLastUsedResponse |
getAccessKeyLastUsed(Consumer<GetAccessKeyLastUsedRequest.Builder> getAccessKeyLastUsedRequest)
Retrieves information about when the specified access key was last used.
|
default GetAccessKeyLastUsedResponse |
getAccessKeyLastUsed(GetAccessKeyLastUsedRequest getAccessKeyLastUsedRequest)
Retrieves information about when the specified access key was last used.
|
default GetAccountAuthorizationDetailsResponse |
getAccountAuthorizationDetails()
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountAuthorizationDetailsResponse |
getAccountAuthorizationDetails(Consumer<GetAccountAuthorizationDetailsRequest.Builder> getAccountAuthorizationDetailsRequest)
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountAuthorizationDetailsResponse |
getAccountAuthorizationDetails(GetAccountAuthorizationDetailsRequest getAccountAuthorizationDetailsRequest)
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountAuthorizationDetailsIterable |
getAccountAuthorizationDetailsPaginator()
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountAuthorizationDetailsIterable |
getAccountAuthorizationDetailsPaginator(Consumer<GetAccountAuthorizationDetailsRequest.Builder> getAccountAuthorizationDetailsRequest)
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountAuthorizationDetailsIterable |
getAccountAuthorizationDetailsPaginator(GetAccountAuthorizationDetailsRequest getAccountAuthorizationDetailsRequest)
Retrieves information about all IAM users, groups, roles, and policies in your AWS account, including their
relationships to one another.
|
default GetAccountPasswordPolicyResponse |
getAccountPasswordPolicy()
Retrieves the password policy for the AWS account.
|
default GetAccountPasswordPolicyResponse |
getAccountPasswordPolicy(Consumer<GetAccountPasswordPolicyRequest.Builder> getAccountPasswordPolicyRequest)
Retrieves the password policy for the AWS account.
|
default GetAccountPasswordPolicyResponse |
getAccountPasswordPolicy(GetAccountPasswordPolicyRequest getAccountPasswordPolicyRequest)
Retrieves the password policy for the AWS account.
|
default GetAccountSummaryResponse |
getAccountSummary()
Retrieves information about IAM entity usage and IAM quotas in the AWS account.
|
default GetAccountSummaryResponse |
getAccountSummary(Consumer<GetAccountSummaryRequest.Builder> getAccountSummaryRequest)
Retrieves information about IAM entity usage and IAM quotas in the AWS account.
|
default GetAccountSummaryResponse |
getAccountSummary(GetAccountSummaryRequest getAccountSummaryRequest)
Retrieves information about IAM entity usage and IAM quotas in the AWS account.
|
default GetContextKeysForCustomPolicyResponse |
getContextKeysForCustomPolicy(Consumer<GetContextKeysForCustomPolicyRequest.Builder> getContextKeysForCustomPolicyRequest)
Gets a list of all of the context keys referenced in the input policies.
|
default GetContextKeysForCustomPolicyResponse |
getContextKeysForCustomPolicy(GetContextKeysForCustomPolicyRequest getContextKeysForCustomPolicyRequest)
Gets a list of all of the context keys referenced in the input policies.
|
default GetContextKeysForPrincipalPolicyResponse |
getContextKeysForPrincipalPolicy(Consumer<GetContextKeysForPrincipalPolicyRequest.Builder> getContextKeysForPrincipalPolicyRequest)
Gets a list of all of the context keys referenced in all the IAM policies that are attached to the specified IAM
entity.
|
default GetContextKeysForPrincipalPolicyResponse |
getContextKeysForPrincipalPolicy(GetContextKeysForPrincipalPolicyRequest getContextKeysForPrincipalPolicyRequest)
Gets a list of all of the context keys referenced in all the IAM policies that are attached to the specified IAM
entity.
|
default GetCredentialReportResponse |
getCredentialReport()
Retrieves a credential report for the AWS account.
|
default GetCredentialReportResponse |
getCredentialReport(Consumer<GetCredentialReportRequest.Builder> getCredentialReportRequest)
Retrieves a credential report for the AWS account.
|
default GetCredentialReportResponse |
getCredentialReport(GetCredentialReportRequest getCredentialReportRequest)
Retrieves a credential report for the AWS account.
|
default GetGroupResponse |
getGroup(Consumer<GetGroupRequest.Builder> getGroupRequest)
Returns a list of IAM users that are in the specified IAM group.
|
default GetGroupResponse |
getGroup(GetGroupRequest getGroupRequest)
Returns a list of IAM users that are in the specified IAM group.
|
default GetGroupIterable |
getGroupPaginator(Consumer<GetGroupRequest.Builder> getGroupRequest)
Returns a list of IAM users that are in the specified IAM group.
|
default GetGroupIterable |
getGroupPaginator(GetGroupRequest getGroupRequest)
Returns a list of IAM users that are in the specified IAM group.
|
default GetGroupPolicyResponse |
getGroupPolicy(Consumer<GetGroupPolicyRequest.Builder> getGroupPolicyRequest)
Retrieves the specified inline policy document that is embedded in the specified IAM group.
|
default GetGroupPolicyResponse |
getGroupPolicy(GetGroupPolicyRequest getGroupPolicyRequest)
Retrieves the specified inline policy document that is embedded in the specified IAM group.
|
default GetInstanceProfileResponse |
getInstanceProfile(Consumer<GetInstanceProfileRequest.Builder> getInstanceProfileRequest)
Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and
role.
|
default GetInstanceProfileResponse |
getInstanceProfile(GetInstanceProfileRequest getInstanceProfileRequest)
Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and
role.
|
default GetLoginProfileResponse |
getLoginProfile(Consumer<GetLoginProfileRequest.Builder> getLoginProfileRequest)
Retrieves the user name and password creation date for the specified IAM user.
|
default GetLoginProfileResponse |
getLoginProfile(GetLoginProfileRequest getLoginProfileRequest)
Retrieves the user name and password creation date for the specified IAM user.
|
default GetOpenIdConnectProviderResponse |
getOpenIDConnectProvider(Consumer<GetOpenIdConnectProviderRequest.Builder> getOpenIdConnectProviderRequest)
Returns information about the specified OpenID Connect (OIDC) provider resource object in IAM.
|
default GetOpenIdConnectProviderResponse |
getOpenIDConnectProvider(GetOpenIdConnectProviderRequest getOpenIdConnectProviderRequest)
Returns information about the specified OpenID Connect (OIDC) provider resource object in IAM.
|
default GetOrganizationsAccessReportResponse |
getOrganizationsAccessReport(Consumer<GetOrganizationsAccessReportRequest.Builder> getOrganizationsAccessReportRequest)
Retrieves the service last accessed data report for AWS Organizations that was previously generated using the
GenerateOrganizationsAccessReport operation. |
default GetOrganizationsAccessReportResponse |
getOrganizationsAccessReport(GetOrganizationsAccessReportRequest getOrganizationsAccessReportRequest)
Retrieves the service last accessed data report for AWS Organizations that was previously generated using the
GenerateOrganizationsAccessReport operation. |
default GetPolicyResponse |
getPolicy(Consumer<GetPolicyRequest.Builder> getPolicyRequest)
Retrieves information about the specified managed policy, including the policy's default version and the total
number of IAM users, groups, and roles to which the policy is attached.
|
default GetPolicyResponse |
getPolicy(GetPolicyRequest getPolicyRequest)
Retrieves information about the specified managed policy, including the policy's default version and the total
number of IAM users, groups, and roles to which the policy is attached.
|
default GetPolicyVersionResponse |
getPolicyVersion(Consumer<GetPolicyVersionRequest.Builder> getPolicyVersionRequest)
Retrieves information about the specified version of the specified managed policy, including the policy document.
|
default GetPolicyVersionResponse |
getPolicyVersion(GetPolicyVersionRequest getPolicyVersionRequest)
Retrieves information about the specified version of the specified managed policy, including the policy document.
|
default GetRoleResponse |
getRole(Consumer<GetRoleRequest.Builder> getRoleRequest)
Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy
that grants permission to assume the role.
|
default GetRoleResponse |
getRole(GetRoleRequest getRoleRequest)
Retrieves information about the specified role, including the role's path, GUID, ARN, and the role's trust policy
that grants permission to assume the role.
|
default GetRolePolicyResponse |
getRolePolicy(Consumer<GetRolePolicyRequest.Builder> getRolePolicyRequest)
Retrieves the specified inline policy document that is embedded with the specified IAM role.
|
default GetRolePolicyResponse |
getRolePolicy(GetRolePolicyRequest getRolePolicyRequest)
Retrieves the specified inline policy document that is embedded with the specified IAM role.
|
default GetSamlProviderResponse |
getSAMLProvider(Consumer<GetSamlProviderRequest.Builder> getSamlProviderRequest)
Returns the SAML provider metadocument that was uploaded when the IAM SAML provider resource object was created
or updated.
|
default GetSamlProviderResponse |
getSAMLProvider(GetSamlProviderRequest getSamlProviderRequest)
Returns the SAML provider metadocument that was uploaded when the IAM SAML provider resource object was created
or updated.
|
default GetServerCertificateResponse |
getServerCertificate(Consumer<GetServerCertificateRequest.Builder> getServerCertificateRequest)
Retrieves information about the specified server certificate stored in IAM.
|
default GetServerCertificateResponse |
getServerCertificate(GetServerCertificateRequest getServerCertificateRequest)
Retrieves information about the specified server certificate stored in IAM.
|
default GetServiceLastAccessedDetailsResponse |
getServiceLastAccessedDetails(Consumer<GetServiceLastAccessedDetailsRequest.Builder> getServiceLastAccessedDetailsRequest)
Retrieves a service last accessed report that was created using the
GenerateServiceLastAccessedDetails operation. |
default GetServiceLastAccessedDetailsResponse |
getServiceLastAccessedDetails(GetServiceLastAccessedDetailsRequest getServiceLastAccessedDetailsRequest)
Retrieves a service last accessed report that was created using the
GenerateServiceLastAccessedDetails operation. |
default GetServiceLastAccessedDetailsWithEntitiesResponse |
getServiceLastAccessedDetailsWithEntities(Consumer<GetServiceLastAccessedDetailsWithEntitiesRequest.Builder> getServiceLastAccessedDetailsWithEntitiesRequest)
After you generate a group or policy report using the
GenerateServiceLastAccessedDetails operation,
you can use the JobId parameter in GetServiceLastAccessedDetailsWithEntities . |
default GetServiceLastAccessedDetailsWithEntitiesResponse |
getServiceLastAccessedDetailsWithEntities(GetServiceLastAccessedDetailsWithEntitiesRequest getServiceLastAccessedDetailsWithEntitiesRequest)
After you generate a group or policy report using the
GenerateServiceLastAccessedDetails operation,
you can use the JobId parameter in GetServiceLastAccessedDetailsWithEntities . |
default GetServiceLinkedRoleDeletionStatusResponse |
getServiceLinkedRoleDeletionStatus(Consumer<GetServiceLinkedRoleDeletionStatusRequest.Builder> getServiceLinkedRoleDeletionStatusRequest)
Retrieves the status of your service-linked role deletion.
|
default GetServiceLinkedRoleDeletionStatusResponse |
getServiceLinkedRoleDeletionStatus(GetServiceLinkedRoleDeletionStatusRequest getServiceLinkedRoleDeletionStatusRequest)
Retrieves the status of your service-linked role deletion.
|
default GetSshPublicKeyResponse |
getSSHPublicKey(Consumer<GetSshPublicKeyRequest.Builder> getSshPublicKeyRequest)
Retrieves the specified SSH public key, including metadata about the key.
|
default GetSshPublicKeyResponse |
getSSHPublicKey(GetSshPublicKeyRequest getSshPublicKeyRequest)
Retrieves the specified SSH public key, including metadata about the key.
|
default GetUserResponse |
getUser()
Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
|
default GetUserResponse |
getUser(Consumer<GetUserRequest.Builder> getUserRequest)
Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
|
default GetUserResponse |
getUser(GetUserRequest getUserRequest)
Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
|
default GetUserPolicyResponse |
getUserPolicy(Consumer<GetUserPolicyRequest.Builder> getUserPolicyRequest)
Retrieves the specified inline policy document that is embedded in the specified IAM user.
|
default GetUserPolicyResponse |
getUserPolicy(GetUserPolicyRequest getUserPolicyRequest)
Retrieves the specified inline policy document that is embedded in the specified IAM user.
|
default ListAccessKeysResponse |
listAccessKeys()
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccessKeysResponse |
listAccessKeys(Consumer<ListAccessKeysRequest.Builder> listAccessKeysRequest)
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccessKeysResponse |
listAccessKeys(ListAccessKeysRequest listAccessKeysRequest)
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccessKeysIterable |
listAccessKeysPaginator()
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccessKeysIterable |
listAccessKeysPaginator(Consumer<ListAccessKeysRequest.Builder> listAccessKeysRequest)
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccessKeysIterable |
listAccessKeysPaginator(ListAccessKeysRequest listAccessKeysRequest)
Returns information about the access key IDs associated with the specified IAM user.
|
default ListAccountAliasesResponse |
listAccountAliases()
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAccountAliasesResponse |
listAccountAliases(Consumer<ListAccountAliasesRequest.Builder> listAccountAliasesRequest)
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAccountAliasesResponse |
listAccountAliases(ListAccountAliasesRequest listAccountAliasesRequest)
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAccountAliasesIterable |
listAccountAliasesPaginator()
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAccountAliasesIterable |
listAccountAliasesPaginator(Consumer<ListAccountAliasesRequest.Builder> listAccountAliasesRequest)
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAccountAliasesIterable |
listAccountAliasesPaginator(ListAccountAliasesRequest listAccountAliasesRequest)
Lists the account alias associated with the AWS account (Note: you can have only one).
|
default ListAttachedGroupPoliciesResponse |
listAttachedGroupPolicies(Consumer<ListAttachedGroupPoliciesRequest.Builder> listAttachedGroupPoliciesRequest)
Lists all managed policies that are attached to the specified IAM group.
|
default ListAttachedGroupPoliciesResponse |
listAttachedGroupPolicies(ListAttachedGroupPoliciesRequest listAttachedGroupPoliciesRequest)
Lists all managed policies that are attached to the specified IAM group.
|
default ListAttachedGroupPoliciesIterable |
listAttachedGroupPoliciesPaginator(Consumer<ListAttachedGroupPoliciesRequest.Builder> listAttachedGroupPoliciesRequest)
Lists all managed policies that are attached to the specified IAM group.
|
default ListAttachedGroupPoliciesIterable |
listAttachedGroupPoliciesPaginator(ListAttachedGroupPoliciesRequest listAttachedGroupPoliciesRequest)
Lists all managed policies that are attached to the specified IAM group.
|
default ListAttachedRolePoliciesResponse |
listAttachedRolePolicies(Consumer<ListAttachedRolePoliciesRequest.Builder> listAttachedRolePoliciesRequest)
Lists all managed policies that are attached to the specified IAM role.
|
default ListAttachedRolePoliciesResponse |
listAttachedRolePolicies(ListAttachedRolePoliciesRequest listAttachedRolePoliciesRequest)
Lists all managed policies that are attached to the specified IAM role.
|
default ListAttachedRolePoliciesIterable |
listAttachedRolePoliciesPaginator(Consumer<ListAttachedRolePoliciesRequest.Builder> listAttachedRolePoliciesRequest)
Lists all managed policies that are attached to the specified IAM role.
|
default ListAttachedRolePoliciesIterable |
listAttachedRolePoliciesPaginator(ListAttachedRolePoliciesRequest listAttachedRolePoliciesRequest)
Lists all managed policies that are attached to the specified IAM role.
|
default ListAttachedUserPoliciesResponse |
listAttachedUserPolicies(Consumer<ListAttachedUserPoliciesRequest.Builder> listAttachedUserPoliciesRequest)
Lists all managed policies that are attached to the specified IAM user.
|
default ListAttachedUserPoliciesResponse |
listAttachedUserPolicies(ListAttachedUserPoliciesRequest listAttachedUserPoliciesRequest)
Lists all managed policies that are attached to the specified IAM user.
|
default ListAttachedUserPoliciesIterable |
listAttachedUserPoliciesPaginator(Consumer<ListAttachedUserPoliciesRequest.Builder> listAttachedUserPoliciesRequest)
Lists all managed policies that are attached to the specified IAM user.
|
default ListAttachedUserPoliciesIterable |
listAttachedUserPoliciesPaginator(ListAttachedUserPoliciesRequest listAttachedUserPoliciesRequest)
Lists all managed policies that are attached to the specified IAM user.
|
default ListEntitiesForPolicyResponse |
listEntitiesForPolicy(Consumer<ListEntitiesForPolicyRequest.Builder> listEntitiesForPolicyRequest)
Lists all IAM users, groups, and roles that the specified managed policy is attached to.
|
default ListEntitiesForPolicyResponse |
listEntitiesForPolicy(ListEntitiesForPolicyRequest listEntitiesForPolicyRequest)
Lists all IAM users, groups, and roles that the specified managed policy is attached to.
|
default ListEntitiesForPolicyIterable |
listEntitiesForPolicyPaginator(Consumer<ListEntitiesForPolicyRequest.Builder> listEntitiesForPolicyRequest)
Lists all IAM users, groups, and roles that the specified managed policy is attached to.
|
default ListEntitiesForPolicyIterable |
listEntitiesForPolicyPaginator(ListEntitiesForPolicyRequest listEntitiesForPolicyRequest)
Lists all IAM users, groups, and roles that the specified managed policy is attached to.
|
default ListGroupPoliciesResponse |
listGroupPolicies(Consumer<ListGroupPoliciesRequest.Builder> listGroupPoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM group.
|
default ListGroupPoliciesResponse |
listGroupPolicies(ListGroupPoliciesRequest listGroupPoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM group.
|
default ListGroupPoliciesIterable |
listGroupPoliciesPaginator(Consumer<ListGroupPoliciesRequest.Builder> listGroupPoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM group.
|
default ListGroupPoliciesIterable |
listGroupPoliciesPaginator(ListGroupPoliciesRequest listGroupPoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM group.
|
default ListGroupsResponse |
listGroups()
Lists the IAM groups that have the specified path prefix.
|
default ListGroupsResponse |
listGroups(Consumer<ListGroupsRequest.Builder> listGroupsRequest)
Lists the IAM groups that have the specified path prefix.
|
default ListGroupsResponse |
listGroups(ListGroupsRequest listGroupsRequest)
Lists the IAM groups that have the specified path prefix.
|
default ListGroupsForUserResponse |
listGroupsForUser(Consumer<ListGroupsForUserRequest.Builder> listGroupsForUserRequest)
Lists the IAM groups that the specified IAM user belongs to.
|
default ListGroupsForUserResponse |
listGroupsForUser(ListGroupsForUserRequest listGroupsForUserRequest)
Lists the IAM groups that the specified IAM user belongs to.
|
default ListGroupsForUserIterable |
listGroupsForUserPaginator(Consumer<ListGroupsForUserRequest.Builder> listGroupsForUserRequest)
Lists the IAM groups that the specified IAM user belongs to.
|
default ListGroupsForUserIterable |
listGroupsForUserPaginator(ListGroupsForUserRequest listGroupsForUserRequest)
Lists the IAM groups that the specified IAM user belongs to.
|
default ListGroupsIterable |
listGroupsPaginator()
Lists the IAM groups that have the specified path prefix.
|
default ListGroupsIterable |
listGroupsPaginator(Consumer<ListGroupsRequest.Builder> listGroupsRequest)
Lists the IAM groups that have the specified path prefix.
|
default ListGroupsIterable |
listGroupsPaginator(ListGroupsRequest listGroupsRequest)
Lists the IAM groups that have the specified path prefix.
|
default ListInstanceProfilesResponse |
listInstanceProfiles()
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfilesResponse |
listInstanceProfiles(Consumer<ListInstanceProfilesRequest.Builder> listInstanceProfilesRequest)
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfilesResponse |
listInstanceProfiles(ListInstanceProfilesRequest listInstanceProfilesRequest)
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfilesForRoleResponse |
listInstanceProfilesForRole(Consumer<ListInstanceProfilesForRoleRequest.Builder> listInstanceProfilesForRoleRequest)
Lists the instance profiles that have the specified associated IAM role.
|
default ListInstanceProfilesForRoleResponse |
listInstanceProfilesForRole(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)
Lists the instance profiles that have the specified associated IAM role.
|
default ListInstanceProfilesForRoleIterable |
listInstanceProfilesForRolePaginator(Consumer<ListInstanceProfilesForRoleRequest.Builder> listInstanceProfilesForRoleRequest)
Lists the instance profiles that have the specified associated IAM role.
|
default ListInstanceProfilesForRoleIterable |
listInstanceProfilesForRolePaginator(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)
Lists the instance profiles that have the specified associated IAM role.
|
default ListInstanceProfilesIterable |
listInstanceProfilesPaginator()
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfilesIterable |
listInstanceProfilesPaginator(Consumer<ListInstanceProfilesRequest.Builder> listInstanceProfilesRequest)
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfilesIterable |
listInstanceProfilesPaginator(ListInstanceProfilesRequest listInstanceProfilesRequest)
Lists the instance profiles that have the specified path prefix.
|
default ListInstanceProfileTagsResponse |
listInstanceProfileTags(Consumer<ListInstanceProfileTagsRequest.Builder> listInstanceProfileTagsRequest)
Lists the tags that are attached to the specified IAM instance profile.
|
default ListInstanceProfileTagsResponse |
listInstanceProfileTags(ListInstanceProfileTagsRequest listInstanceProfileTagsRequest)
Lists the tags that are attached to the specified IAM instance profile.
|
default ListMfaDevicesResponse |
listMFADevices()
Lists the MFA devices for an IAM user.
|
default ListMfaDevicesResponse |
listMFADevices(Consumer<ListMfaDevicesRequest.Builder> listMfaDevicesRequest)
Lists the MFA devices for an IAM user.
|
default ListMfaDevicesResponse |
listMFADevices(ListMfaDevicesRequest listMfaDevicesRequest)
Lists the MFA devices for an IAM user.
|
default ListMFADevicesIterable |
listMFADevicesPaginator()
Lists the MFA devices for an IAM user.
|
default ListMFADevicesIterable |
listMFADevicesPaginator(Consumer<ListMfaDevicesRequest.Builder> listMfaDevicesRequest)
Lists the MFA devices for an IAM user.
|
default ListMFADevicesIterable |
listMFADevicesPaginator(ListMfaDevicesRequest listMfaDevicesRequest)
Lists the MFA devices for an IAM user.
|
default ListMfaDeviceTagsResponse |
listMFADeviceTags(Consumer<ListMfaDeviceTagsRequest.Builder> listMfaDeviceTagsRequest)
Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device.
|
default ListMfaDeviceTagsResponse |
listMFADeviceTags(ListMfaDeviceTagsRequest listMfaDeviceTagsRequest)
Lists the tags that are attached to the specified IAM virtual multi-factor authentication (MFA) device.
|
default ListOpenIdConnectProvidersResponse |
listOpenIDConnectProviders()
Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
|
default ListOpenIdConnectProvidersResponse |
listOpenIDConnectProviders(Consumer<ListOpenIdConnectProvidersRequest.Builder> listOpenIdConnectProvidersRequest)
Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
|
default ListOpenIdConnectProvidersResponse |
listOpenIDConnectProviders(ListOpenIdConnectProvidersRequest listOpenIdConnectProvidersRequest)
Lists information about the IAM OpenID Connect (OIDC) provider resource objects defined in the AWS account.
|
default ListOpenIdConnectProviderTagsResponse |
listOpenIDConnectProviderTags(Consumer<ListOpenIdConnectProviderTagsRequest.Builder> listOpenIdConnectProviderTagsRequest)
Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible identity provider.
|
default ListOpenIdConnectProviderTagsResponse |
listOpenIDConnectProviderTags(ListOpenIdConnectProviderTagsRequest listOpenIdConnectProviderTagsRequest)
Lists the tags that are attached to the specified OpenID Connect (OIDC)-compatible identity provider.
|
default ListPoliciesResponse |
listPolicies()
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPoliciesResponse |
listPolicies(Consumer<ListPoliciesRequest.Builder> listPoliciesRequest)
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPoliciesResponse |
listPolicies(ListPoliciesRequest listPoliciesRequest)
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPoliciesGrantingServiceAccessResponse |
listPoliciesGrantingServiceAccess(Consumer<ListPoliciesGrantingServiceAccessRequest.Builder> listPoliciesGrantingServiceAccessRequest)
Retrieves a list of policies that the IAM identity (user, group, or role) can use to access each specified
service.
|
default ListPoliciesGrantingServiceAccessResponse |
listPoliciesGrantingServiceAccess(ListPoliciesGrantingServiceAccessRequest listPoliciesGrantingServiceAccessRequest)
Retrieves a list of policies that the IAM identity (user, group, or role) can use to access each specified
service.
|
default ListPoliciesIterable |
listPoliciesPaginator()
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPoliciesIterable |
listPoliciesPaginator(Consumer<ListPoliciesRequest.Builder> listPoliciesRequest)
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPoliciesIterable |
listPoliciesPaginator(ListPoliciesRequest listPoliciesRequest)
Lists all the managed policies that are available in your AWS account, including your own customer-defined
managed policies and all AWS managed policies.
|
default ListPolicyTagsResponse |
listPolicyTags(Consumer<ListPolicyTagsRequest.Builder> listPolicyTagsRequest)
Lists the tags that are attached to the specified IAM customer managed policy.
|
default ListPolicyTagsResponse |
listPolicyTags(ListPolicyTagsRequest listPolicyTagsRequest)
Lists the tags that are attached to the specified IAM customer managed policy.
|
default ListPolicyVersionsResponse |
listPolicyVersions(Consumer<ListPolicyVersionsRequest.Builder> listPolicyVersionsRequest)
Lists information about the versions of the specified managed policy, including the version that is currently set
as the policy's default version.
|
default ListPolicyVersionsResponse |
listPolicyVersions(ListPolicyVersionsRequest listPolicyVersionsRequest)
Lists information about the versions of the specified managed policy, including the version that is currently set
as the policy's default version.
|
default ListPolicyVersionsIterable |
listPolicyVersionsPaginator(Consumer<ListPolicyVersionsRequest.Builder> listPolicyVersionsRequest)
Lists information about the versions of the specified managed policy, including the version that is currently set
as the policy's default version.
|
default ListPolicyVersionsIterable |
listPolicyVersionsPaginator(ListPolicyVersionsRequest listPolicyVersionsRequest)
Lists information about the versions of the specified managed policy, including the version that is currently set
as the policy's default version.
|
default ListRolePoliciesResponse |
listRolePolicies(Consumer<ListRolePoliciesRequest.Builder> listRolePoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM role.
|
default ListRolePoliciesResponse |
listRolePolicies(ListRolePoliciesRequest listRolePoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM role.
|
default ListRolePoliciesIterable |
listRolePoliciesPaginator(Consumer<ListRolePoliciesRequest.Builder> listRolePoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM role.
|
default ListRolePoliciesIterable |
listRolePoliciesPaginator(ListRolePoliciesRequest listRolePoliciesRequest)
Lists the names of the inline policies that are embedded in the specified IAM role.
|
default ListRolesResponse |
listRoles()
Lists the IAM roles that have the specified path prefix.
|
default ListRolesResponse |
listRoles(Consumer<ListRolesRequest.Builder> listRolesRequest)
Lists the IAM roles that have the specified path prefix.
|
default ListRolesResponse |
listRoles(ListRolesRequest listRolesRequest)
Lists the IAM roles that have the specified path prefix.
|
default ListRolesIterable |
listRolesPaginator()
Lists the IAM roles that have the specified path prefix.
|
default ListRolesIterable |
listRolesPaginator(Consumer<ListRolesRequest.Builder> listRolesRequest)
Lists the IAM roles that have the specified path prefix.
|
default ListRolesIterable |
listRolesPaginator(ListRolesRequest listRolesRequest)
Lists the IAM roles that have the specified path prefix.
|
default ListRoleTagsResponse |
listRoleTags(Consumer<ListRoleTagsRequest.Builder> listRoleTagsRequest)
Lists the tags that are attached to the specified role.
|
default ListRoleTagsResponse |
listRoleTags(ListRoleTagsRequest listRoleTagsRequest)
Lists the tags that are attached to the specified role.
|
default ListSamlProvidersResponse |
listSAMLProviders()
Lists the SAML provider resource objects defined in IAM in the account.
|
default ListSamlProvidersResponse |
listSAMLProviders(Consumer<ListSamlProvidersRequest.Builder> listSamlProvidersRequest)
Lists the SAML provider resource objects defined in IAM in the account.
|
default ListSamlProvidersResponse |
listSAMLProviders(ListSamlProvidersRequest listSamlProvidersRequest)
Lists the SAML provider resource objects defined in IAM in the account.
|
default ListSamlProviderTagsResponse |
listSAMLProviderTags(Consumer<ListSamlProviderTagsRequest.Builder> listSamlProviderTagsRequest)
Lists the tags that are attached to the specified Security Assertion Markup Language (SAML) identity provider.
|
default ListSamlProviderTagsResponse |
listSAMLProviderTags(ListSamlProviderTagsRequest listSamlProviderTagsRequest)
Lists the tags that are attached to the specified Security Assertion Markup Language (SAML) identity provider.
|
default ListServerCertificatesResponse |
listServerCertificates()
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificatesResponse |
listServerCertificates(Consumer<ListServerCertificatesRequest.Builder> listServerCertificatesRequest)
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificatesResponse |
listServerCertificates(ListServerCertificatesRequest listServerCertificatesRequest)
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificatesIterable |
listServerCertificatesPaginator()
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificatesIterable |
listServerCertificatesPaginator(Consumer<ListServerCertificatesRequest.Builder> listServerCertificatesRequest)
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificatesIterable |
listServerCertificatesPaginator(ListServerCertificatesRequest listServerCertificatesRequest)
Lists the server certificates stored in IAM that have the specified path prefix.
|
default ListServerCertificateTagsResponse |
listServerCertificateTags(Consumer<ListServerCertificateTagsRequest.Builder> listServerCertificateTagsRequest)
Lists the tags that are attached to the specified IAM server certificate.
|
default ListServerCertificateTagsResponse |
listServerCertificateTags(ListServerCertificateTagsRequest listServerCertificateTagsRequest)
Lists the tags that are attached to the specified IAM server certificate.
|
default ListServiceSpecificCredentialsResponse |
listServiceSpecificCredentials()
Returns information about the service-specific credentials associated with the specified IAM user.
|
default ListServiceSpecificCredentialsResponse |
listServiceSpecificCredentials(Consumer<ListServiceSpecificCredentialsRequest.Builder> listServiceSpecificCredentialsRequest)
Returns information about the service-specific credentials associated with the specified IAM user.
|
default ListServiceSpecificCredentialsResponse |
listServiceSpecificCredentials(ListServiceSpecificCredentialsRequest listServiceSpecificCredentialsRequest)
Returns information about the service-specific credentials associated with the specified IAM user.
|
default ListSigningCertificatesResponse |
listSigningCertificates()
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSigningCertificatesResponse |
listSigningCertificates(Consumer<ListSigningCertificatesRequest.Builder> listSigningCertificatesRequest)
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSigningCertificatesResponse |
listSigningCertificates(ListSigningCertificatesRequest listSigningCertificatesRequest)
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSigningCertificatesIterable |
listSigningCertificatesPaginator()
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSigningCertificatesIterable |
listSigningCertificatesPaginator(Consumer<ListSigningCertificatesRequest.Builder> listSigningCertificatesRequest)
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSigningCertificatesIterable |
listSigningCertificatesPaginator(ListSigningCertificatesRequest listSigningCertificatesRequest)
Returns information about the signing certificates associated with the specified IAM user.
|
default ListSshPublicKeysResponse |
listSSHPublicKeys()
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListSshPublicKeysResponse |
listSSHPublicKeys(Consumer<ListSshPublicKeysRequest.Builder> listSshPublicKeysRequest)
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListSshPublicKeysResponse |
listSSHPublicKeys(ListSshPublicKeysRequest listSshPublicKeysRequest)
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListSSHPublicKeysIterable |
listSSHPublicKeysPaginator()
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListSSHPublicKeysIterable |
listSSHPublicKeysPaginator(Consumer<ListSshPublicKeysRequest.Builder> listSshPublicKeysRequest)
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListSSHPublicKeysIterable |
listSSHPublicKeysPaginator(ListSshPublicKeysRequest listSshPublicKeysRequest)
Returns information about the SSH public keys associated with the specified IAM user.
|
default ListUserPoliciesResponse |
listUserPolicies(Consumer<ListUserPoliciesRequest.Builder> listUserPoliciesRequest)
Lists the names of the inline policies embedded in the specified IAM user.
|
default ListUserPoliciesResponse |
listUserPolicies(ListUserPoliciesRequest listUserPoliciesRequest)
Lists the names of the inline policies embedded in the specified IAM user.
|
default ListUserPoliciesIterable |
listUserPoliciesPaginator(Consumer<ListUserPoliciesRequest.Builder> listUserPoliciesRequest)
Lists the names of the inline policies embedded in the specified IAM user.
|
default ListUserPoliciesIterable |
listUserPoliciesPaginator(ListUserPoliciesRequest listUserPoliciesRequest)
Lists the names of the inline policies embedded in the specified IAM user.
|
default ListUsersResponse |
listUsers()
Lists the IAM users that have the specified path prefix.
|
default ListUsersResponse |
listUsers(Consumer<ListUsersRequest.Builder> listUsersRequest)
Lists the IAM users that have the specified path prefix.
|
default ListUsersResponse |
listUsers(ListUsersRequest listUsersRequest)
Lists the IAM users that have the specified path prefix.
|
default ListUsersIterable |
listUsersPaginator()
Lists the IAM users that have the specified path prefix.
|
default ListUsersIterable |
listUsersPaginator(Consumer<ListUsersRequest.Builder> listUsersRequest)
Lists the IAM users that have the specified path prefix.
|
default ListUsersIterable |
listUsersPaginator(ListUsersRequest listUsersRequest)
Lists the IAM users that have the specified path prefix.
|
default ListUserTagsResponse |
listUserTags(Consumer<ListUserTagsRequest.Builder> listUserTagsRequest)
Lists the tags that are attached to the specified IAM user.
|
default ListUserTagsResponse |
listUserTags(ListUserTagsRequest listUserTagsRequest)
Lists the tags that are attached to the specified IAM user.
|
default ListVirtualMfaDevicesResponse |
listVirtualMFADevices()
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default ListVirtualMfaDevicesResponse |
listVirtualMFADevices(Consumer<ListVirtualMfaDevicesRequest.Builder> listVirtualMfaDevicesRequest)
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default ListVirtualMfaDevicesResponse |
listVirtualMFADevices(ListVirtualMfaDevicesRequest listVirtualMfaDevicesRequest)
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default ListVirtualMFADevicesIterable |
listVirtualMFADevicesPaginator()
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default ListVirtualMFADevicesIterable |
listVirtualMFADevicesPaginator(Consumer<ListVirtualMfaDevicesRequest.Builder> listVirtualMfaDevicesRequest)
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default ListVirtualMFADevicesIterable |
listVirtualMFADevicesPaginator(ListVirtualMfaDevicesRequest listVirtualMfaDevicesRequest)
Lists the virtual MFA devices defined in the AWS account by assignment status.
|
default PutGroupPolicyResponse |
putGroupPolicy(Consumer<PutGroupPolicyRequest.Builder> putGroupPolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM group.
|
default PutGroupPolicyResponse |
putGroupPolicy(PutGroupPolicyRequest putGroupPolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM group.
|
default PutRolePermissionsBoundaryResponse |
putRolePermissionsBoundary(Consumer<PutRolePermissionsBoundaryRequest.Builder> putRolePermissionsBoundaryRequest)
Adds or updates the policy that is specified as the IAM role's permissions boundary.
|
default PutRolePermissionsBoundaryResponse |
putRolePermissionsBoundary(PutRolePermissionsBoundaryRequest putRolePermissionsBoundaryRequest)
Adds or updates the policy that is specified as the IAM role's permissions boundary.
|
default PutRolePolicyResponse |
putRolePolicy(Consumer<PutRolePolicyRequest.Builder> putRolePolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM role.
|
default PutRolePolicyResponse |
putRolePolicy(PutRolePolicyRequest putRolePolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM role.
|
default PutUserPermissionsBoundaryResponse |
putUserPermissionsBoundary(Consumer<PutUserPermissionsBoundaryRequest.Builder> putUserPermissionsBoundaryRequest)
Adds or updates the policy that is specified as the IAM user's permissions boundary.
|
default PutUserPermissionsBoundaryResponse |
putUserPermissionsBoundary(PutUserPermissionsBoundaryRequest putUserPermissionsBoundaryRequest)
Adds or updates the policy that is specified as the IAM user's permissions boundary.
|
default PutUserPolicyResponse |
putUserPolicy(Consumer<PutUserPolicyRequest.Builder> putUserPolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM user.
|
default PutUserPolicyResponse |
putUserPolicy(PutUserPolicyRequest putUserPolicyRequest)
Adds or updates an inline policy document that is embedded in the specified IAM user.
|
default RemoveClientIdFromOpenIdConnectProviderResponse |
removeClientIDFromOpenIDConnectProvider(Consumer<RemoveClientIdFromOpenIdConnectProviderRequest.Builder> removeClientIdFromOpenIdConnectProviderRequest)
Removes the specified client ID (also known as audience) from the list of client IDs registered for the specified
IAM OpenID Connect (OIDC) provider resource object.
|
default RemoveClientIdFromOpenIdConnectProviderResponse |
removeClientIDFromOpenIDConnectProvider(RemoveClientIdFromOpenIdConnectProviderRequest removeClientIdFromOpenIdConnectProviderRequest)
Removes the specified client ID (also known as audience) from the list of client IDs registered for the specified
IAM OpenID Connect (OIDC) provider resource object.
|
default RemoveRoleFromInstanceProfileResponse |
removeRoleFromInstanceProfile(Consumer<RemoveRoleFromInstanceProfileRequest.Builder> removeRoleFromInstanceProfileRequest)
Removes the specified IAM role from the specified EC2 instance profile.
|
default RemoveRoleFromInstanceProfileResponse |
removeRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest removeRoleFromInstanceProfileRequest)
Removes the specified IAM role from the specified EC2 instance profile.
|
default RemoveUserFromGroupResponse |
removeUserFromGroup(Consumer<RemoveUserFromGroupRequest.Builder> removeUserFromGroupRequest)
Removes the specified user from the specified group.
|
default RemoveUserFromGroupResponse |
removeUserFromGroup(RemoveUserFromGroupRequest removeUserFromGroupRequest)
Removes the specified user from the specified group.
|
default ResetServiceSpecificCredentialResponse |
resetServiceSpecificCredential(Consumer<ResetServiceSpecificCredentialRequest.Builder> resetServiceSpecificCredentialRequest)
Resets the password for a service-specific credential.
|
default ResetServiceSpecificCredentialResponse |
resetServiceSpecificCredential(ResetServiceSpecificCredentialRequest resetServiceSpecificCredentialRequest)
Resets the password for a service-specific credential.
|
default ResyncMfaDeviceResponse |
resyncMFADevice(Consumer<ResyncMfaDeviceRequest.Builder> resyncMfaDeviceRequest)
Synchronizes the specified MFA device with its IAM resource object on the AWS servers.
|
default ResyncMfaDeviceResponse |
resyncMFADevice(ResyncMfaDeviceRequest resyncMfaDeviceRequest)
Synchronizes the specified MFA device with its IAM resource object on the AWS servers.
|
static ServiceMetadata |
serviceMetadata() |
default SetDefaultPolicyVersionResponse |
setDefaultPolicyVersion(Consumer<SetDefaultPolicyVersionRequest.Builder> setDefaultPolicyVersionRequest)
Sets the specified version of the specified policy as the policy's default (operative) version.
|
default SetDefaultPolicyVersionResponse |
setDefaultPolicyVersion(SetDefaultPolicyVersionRequest setDefaultPolicyVersionRequest)
Sets the specified version of the specified policy as the policy's default (operative) version.
|
default SetSecurityTokenServicePreferencesResponse |
setSecurityTokenServicePreferences(Consumer<SetSecurityTokenServicePreferencesRequest.Builder> setSecurityTokenServicePreferencesRequest)
Sets the specified version of the global endpoint token as the token version used for the AWS account.
|
default SetSecurityTokenServicePreferencesResponse |
setSecurityTokenServicePreferences(SetSecurityTokenServicePreferencesRequest setSecurityTokenServicePreferencesRequest)
Sets the specified version of the global endpoint token as the token version used for the AWS account.
|
default SimulateCustomPolicyResponse |
simulateCustomPolicy(Consumer<SimulateCustomPolicyRequest.Builder> simulateCustomPolicyRequest)
Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and
AWS resources to determine the policies' effective permissions.
|
default SimulateCustomPolicyResponse |
simulateCustomPolicy(SimulateCustomPolicyRequest simulateCustomPolicyRequest)
Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and
AWS resources to determine the policies' effective permissions.
|
default SimulateCustomPolicyIterable |
simulateCustomPolicyPaginator(Consumer<SimulateCustomPolicyRequest.Builder> simulateCustomPolicyRequest)
Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and
AWS resources to determine the policies' effective permissions.
|
default SimulateCustomPolicyIterable |
simulateCustomPolicyPaginator(SimulateCustomPolicyRequest simulateCustomPolicyRequest)
Simulate how a set of IAM policies and optionally a resource-based policy works with a list of API operations and
AWS resources to determine the policies' effective permissions.
|
default SimulatePrincipalPolicyResponse |
simulatePrincipalPolicy(Consumer<SimulatePrincipalPolicyRequest.Builder> simulatePrincipalPolicyRequest)
Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS
resources to determine the policies' effective permissions.
|
default SimulatePrincipalPolicyResponse |
simulatePrincipalPolicy(SimulatePrincipalPolicyRequest simulatePrincipalPolicyRequest)
Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS
resources to determine the policies' effective permissions.
|
default SimulatePrincipalPolicyIterable |
simulatePrincipalPolicyPaginator(Consumer<SimulatePrincipalPolicyRequest.Builder> simulatePrincipalPolicyRequest)
Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS
resources to determine the policies' effective permissions.
|
default SimulatePrincipalPolicyIterable |
simulatePrincipalPolicyPaginator(SimulatePrincipalPolicyRequest simulatePrincipalPolicyRequest)
Simulate how a set of IAM policies attached to an IAM entity works with a list of API operations and AWS
resources to determine the policies' effective permissions.
|
default TagInstanceProfileResponse |
tagInstanceProfile(Consumer<TagInstanceProfileRequest.Builder> tagInstanceProfileRequest)
Adds one or more tags to an IAM instance profile.
|
default TagInstanceProfileResponse |
tagInstanceProfile(TagInstanceProfileRequest tagInstanceProfileRequest)
Adds one or more tags to an IAM instance profile.
|
default TagMfaDeviceResponse |
tagMFADevice(Consumer<TagMfaDeviceRequest.Builder> tagMfaDeviceRequest)
Adds one or more tags to an IAM virtual multi-factor authentication (MFA) device.
|
default TagMfaDeviceResponse |
tagMFADevice(TagMfaDeviceRequest tagMfaDeviceRequest)
Adds one or more tags to an IAM virtual multi-factor authentication (MFA) device.
|
default TagOpenIdConnectProviderResponse |
tagOpenIDConnectProvider(Consumer<TagOpenIdConnectProviderRequest.Builder> tagOpenIdConnectProviderRequest)
Adds one or more tags to an OpenID Connect (OIDC)-compatible identity provider.
|
default TagOpenIdConnectProviderResponse |
tagOpenIDConnectProvider(TagOpenIdConnectProviderRequest tagOpenIdConnectProviderRequest)
Adds one or more tags to an OpenID Connect (OIDC)-compatible identity provider.
|
default TagPolicyResponse |
tagPolicy(Consumer<TagPolicyRequest.Builder> tagPolicyRequest)
Adds one or more tags to an IAM customer managed policy.
|
default TagPolicyResponse |
tagPolicy(TagPolicyRequest tagPolicyRequest)
Adds one or more tags to an IAM customer managed policy.
|
default TagRoleResponse |
tagRole(Consumer<TagRoleRequest.Builder> tagRoleRequest)
Adds one or more tags to an IAM role.
|
default TagRoleResponse |
tagRole(TagRoleRequest tagRoleRequest)
Adds one or more tags to an IAM role.
|
default TagSamlProviderResponse |
tagSAMLProvider(Consumer<TagSamlProviderRequest.Builder> tagSamlProviderRequest)
Adds one or more tags to a Security Assertion Markup Language (SAML) identity provider.
|
default TagSamlProviderResponse |
tagSAMLProvider(TagSamlProviderRequest tagSamlProviderRequest)
Adds one or more tags to a Security Assertion Markup Language (SAML) identity provider.
|
default TagServerCertificateResponse |
tagServerCertificate(Consumer<TagServerCertificateRequest.Builder> tagServerCertificateRequest)
Adds one or more tags to an IAM server certificate.
|
default TagServerCertificateResponse |
tagServerCertificate(TagServerCertificateRequest tagServerCertificateRequest)
Adds one or more tags to an IAM server certificate.
|
default TagUserResponse |
tagUser(Consumer<TagUserRequest.Builder> tagUserRequest)
Adds one or more tags to an IAM user.
|
default TagUserResponse |
tagUser(TagUserRequest tagUserRequest)
Adds one or more tags to an IAM user.
|
default UntagInstanceProfileResponse |
untagInstanceProfile(Consumer<UntagInstanceProfileRequest.Builder> untagInstanceProfileRequest)
Removes the specified tags from the IAM instance profile.
|
default UntagInstanceProfileResponse |
untagInstanceProfile(UntagInstanceProfileRequest untagInstanceProfileRequest)
Removes the specified tags from the IAM instance profile.
|
default UntagMfaDeviceResponse |
untagMFADevice(Consumer<UntagMfaDeviceRequest.Builder> untagMfaDeviceRequest)
Removes the specified tags from the IAM virtual multi-factor authentication (MFA) device.
|
default UntagMfaDeviceResponse |
untagMFADevice(UntagMfaDeviceRequest untagMfaDeviceRequest)
Removes the specified tags from the IAM virtual multi-factor authentication (MFA) device.
|
default UntagOpenIdConnectProviderResponse |
untagOpenIDConnectProvider(Consumer<UntagOpenIdConnectProviderRequest.Builder> untagOpenIdConnectProviderRequest)
Removes the specified tags from the specified OpenID Connect (OIDC)-compatible identity provider in IAM.
|
default UntagOpenIdConnectProviderResponse |
untagOpenIDConnectProvider(UntagOpenIdConnectProviderRequest untagOpenIdConnectProviderRequest)
Removes the specified tags from the specified OpenID Connect (OIDC)-compatible identity provider in IAM.
|
default UntagPolicyResponse |
untagPolicy(Consumer<UntagPolicyRequest.Builder> untagPolicyRequest)
Removes the specified tags from the customer managed policy.
|
default UntagPolicyResponse |
untagPolicy(UntagPolicyRequest untagPolicyRequest)
Removes the specified tags from the customer managed policy.
|
default UntagRoleResponse |
untagRole(Consumer<UntagRoleRequest.Builder> untagRoleRequest)
Removes the specified tags from the role.
|
default UntagRoleResponse |
untagRole(UntagRoleRequest untagRoleRequest)
Removes the specified tags from the role.
|
default UntagSamlProviderResponse |
untagSAMLProvider(Consumer<UntagSamlProviderRequest.Builder> untagSamlProviderRequest)
Removes the specified tags from the specified Security Assertion Markup Language (SAML) identity provider in IAM.
|
default UntagSamlProviderResponse |
untagSAMLProvider(UntagSamlProviderRequest untagSamlProviderRequest)
Removes the specified tags from the specified Security Assertion Markup Language (SAML) identity provider in IAM.
|
default UntagServerCertificateResponse |
untagServerCertificate(Consumer<UntagServerCertificateRequest.Builder> untagServerCertificateRequest)
Removes the specified tags from the IAM server certificate.
|
default UntagServerCertificateResponse |
untagServerCertificate(UntagServerCertificateRequest untagServerCertificateRequest)
Removes the specified tags from the IAM server certificate.
|
default UntagUserResponse |
untagUser(Consumer<UntagUserRequest.Builder> untagUserRequest)
Removes the specified tags from the user.
|
default UntagUserResponse |
untagUser(UntagUserRequest untagUserRequest)
Removes the specified tags from the user.
|
default UpdateAccessKeyResponse |
updateAccessKey(Consumer<UpdateAccessKeyRequest.Builder> updateAccessKeyRequest)
Changes the status of the specified access key from Active to Inactive, or vice versa.
|
default UpdateAccessKeyResponse |
updateAccessKey(UpdateAccessKeyRequest updateAccessKeyRequest)
Changes the status of the specified access key from Active to Inactive, or vice versa.
|
default UpdateAccountPasswordPolicyResponse |
updateAccountPasswordPolicy()
Updates the password policy settings for the AWS account.
|
default UpdateAccountPasswordPolicyResponse |
updateAccountPasswordPolicy(Consumer<UpdateAccountPasswordPolicyRequest.Builder> updateAccountPasswordPolicyRequest)
Updates the password policy settings for the AWS account.
|
default UpdateAccountPasswordPolicyResponse |
updateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest updateAccountPasswordPolicyRequest)
Updates the password policy settings for the AWS account.
|
default UpdateAssumeRolePolicyResponse |
updateAssumeRolePolicy(Consumer<UpdateAssumeRolePolicyRequest.Builder> updateAssumeRolePolicyRequest)
Updates the policy that grants an IAM entity permission to assume a role.
|
default UpdateAssumeRolePolicyResponse |
updateAssumeRolePolicy(UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest)
Updates the policy that grants an IAM entity permission to assume a role.
|
default UpdateGroupResponse |
updateGroup(Consumer<UpdateGroupRequest.Builder> updateGroupRequest)
Updates the name and/or the path of the specified IAM group.
|
default UpdateGroupResponse |
updateGroup(UpdateGroupRequest updateGroupRequest)
Updates the name and/or the path of the specified IAM group.
|
default UpdateLoginProfileResponse |
updateLoginProfile(Consumer<UpdateLoginProfileRequest.Builder> updateLoginProfileRequest)
Changes the password for the specified IAM user.
|
default UpdateLoginProfileResponse |
updateLoginProfile(UpdateLoginProfileRequest updateLoginProfileRequest)
Changes the password for the specified IAM user.
|
default UpdateOpenIdConnectProviderThumbprintResponse |
updateOpenIDConnectProviderThumbprint(Consumer<UpdateOpenIdConnectProviderThumbprintRequest.Builder> updateOpenIdConnectProviderThumbprintRequest)
Replaces the existing list of server certificate thumbprints associated with an OpenID Connect (OIDC) provider
resource object with a new list of thumbprints.
|
default UpdateOpenIdConnectProviderThumbprintResponse |
updateOpenIDConnectProviderThumbprint(UpdateOpenIdConnectProviderThumbprintRequest updateOpenIdConnectProviderThumbprintRequest)
Replaces the existing list of server certificate thumbprints associated with an OpenID Connect (OIDC) provider
resource object with a new list of thumbprints.
|
default UpdateRoleResponse |
updateRole(Consumer<UpdateRoleRequest.Builder> updateRoleRequest)
Updates the description or maximum session duration setting of a role.
|
default UpdateRoleResponse |
updateRole(UpdateRoleRequest updateRoleRequest)
Updates the description or maximum session duration setting of a role.
|
default UpdateRoleDescriptionResponse |
updateRoleDescription(Consumer<UpdateRoleDescriptionRequest.Builder> updateRoleDescriptionRequest)
Use UpdateRole instead.
|
default UpdateRoleDescriptionResponse |
updateRoleDescription(UpdateRoleDescriptionRequest updateRoleDescriptionRequest)
Use UpdateRole instead.
|
default UpdateSamlProviderResponse |
updateSAMLProvider(Consumer<UpdateSamlProviderRequest.Builder> updateSamlProviderRequest)
Updates the metadata document for an existing SAML provider resource object.
|
default UpdateSamlProviderResponse |
updateSAMLProvider(UpdateSamlProviderRequest updateSamlProviderRequest)
Updates the metadata document for an existing SAML provider resource object.
|
default UpdateServerCertificateResponse |
updateServerCertificate(Consumer<UpdateServerCertificateRequest.Builder> updateServerCertificateRequest)
Updates the name and/or the path of the specified server certificate stored in IAM.
|
default UpdateServerCertificateResponse |
updateServerCertificate(UpdateServerCertificateRequest updateServerCertificateRequest)
Updates the name and/or the path of the specified server certificate stored in IAM.
|
default UpdateServiceSpecificCredentialResponse |
updateServiceSpecificCredential(Consumer<UpdateServiceSpecificCredentialRequest.Builder> updateServiceSpecificCredentialRequest)
Sets the status of a service-specific credential to
Active or Inactive . |
default UpdateServiceSpecificCredentialResponse |
updateServiceSpecificCredential(UpdateServiceSpecificCredentialRequest updateServiceSpecificCredentialRequest)
Sets the status of a service-specific credential to
Active or Inactive . |
default UpdateSigningCertificateResponse |
updateSigningCertificate(Consumer<UpdateSigningCertificateRequest.Builder> updateSigningCertificateRequest)
Changes the status of the specified user signing certificate from active to disabled, or vice versa.
|
default UpdateSigningCertificateResponse |
updateSigningCertificate(UpdateSigningCertificateRequest updateSigningCertificateRequest)
Changes the status of the specified user signing certificate from active to disabled, or vice versa.
|
default UpdateSshPublicKeyResponse |
updateSSHPublicKey(Consumer<UpdateSshPublicKeyRequest.Builder> updateSshPublicKeyRequest)
Sets the status of an IAM user's SSH public key to active or inactive.
|
default UpdateSshPublicKeyResponse |
updateSSHPublicKey(UpdateSshPublicKeyRequest updateSshPublicKeyRequest)
Sets the status of an IAM user's SSH public key to active or inactive.
|
default UpdateUserResponse |
updateUser(Consumer<UpdateUserRequest.Builder> updateUserRequest)
Updates the name and/or the path of the specified IAM user.
|
default UpdateUserResponse |
updateUser(UpdateUserRequest updateUserRequest)
Updates the name and/or the path of the specified IAM user.
|
default UploadServerCertificateResponse |
uploadServerCertificate(Consumer<UploadServerCertificateRequest.Builder> uploadServerCertificateRequest)
Uploads a server certificate entity for the AWS account.
|
default UploadServerCertificateResponse |
uploadServerCertificate(UploadServerCertificateRequest uploadServerCertificateRequest)
Uploads a server certificate entity for the AWS account.
|
default UploadSigningCertificateResponse |
uploadSigningCertificate(Consumer<UploadSigningCertificateRequest.Builder> uploadSigningCertificateRequest)
Uploads an X.509 signing certificate and associates it with the specified IAM user.
|
default UploadSigningCertificateResponse |
uploadSigningCertificate(UploadSigningCertificateRequest uploadSigningCertificateRequest)
Uploads an X.509 signing certificate and associates it with the specified IAM user.
|
default UploadSshPublicKeyResponse |
uploadSSHPublicKey(Consumer<UploadSshPublicKeyRequest.Builder> uploadSshPublicKeyRequest)
Uploads an SSH public key and associates it with the specified IAM user.
|
default UploadSshPublicKeyResponse |
uploadSSHPublicKey(UploadSshPublicKeyRequest uploadSshPublicKeyRequest)
Uploads an SSH public key and associates it with the specified IAM user.
|
default IamWaiter |
waiter()
Create an instance of
IamWaiter using this client. |
serviceName
close
static final String SERVICE_NAME
static final String SERVICE_METADATA_ID
ServiceMetadataProvider
.static IamClientBuilder builder()
IamClient
.default AddClientIdToOpenIdConnectProviderResponse addClientIDToOpenIDConnectProvider(AddClientIdToOpenIdConnectProviderRequest addClientIdToOpenIdConnectProviderRequest) throws InvalidInputException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.
addClientIdToOpenIdConnectProviderRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AddClientIdToOpenIdConnectProviderResponse addClientIDToOpenIDConnectProvider(Consumer<AddClientIdToOpenIdConnectProviderRequest.Builder> addClientIdToOpenIdConnectProviderRequest) throws InvalidInputException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource.
This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.
This is a convenience which creates an instance of the AddClientIdToOpenIdConnectProviderRequest.Builder
avoiding the need to create one manually via AddClientIdToOpenIdConnectProviderRequest.builder()
addClientIdToOpenIdConnectProviderRequest
- A Consumer
that will call methods on AddClientIDToOpenIDConnectProviderRequest.Builder
to
create a request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AddRoleToInstanceProfileResponse addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest) throws NoSuchEntityException, EntityAlreadyExistsException, LimitExceededException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of AWS because of eventual consistency. To force the change, you must disassociate the instance profile and then associate the instance profile, or you can stop your instance and then restart it.
The caller of this operation must be granted the PassRole
permission on the IAM role by a
permissions policy.
For more information about roles, see Working with roles. For more information about instance profiles, see About instance profiles.
addRoleToInstanceProfileRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AddRoleToInstanceProfileResponse addRoleToInstanceProfile(Consumer<AddRoleToInstanceProfileRequest.Builder> addRoleToInstanceProfileRequest) throws NoSuchEntityException, EntityAlreadyExistsException, LimitExceededException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of AWS because of eventual consistency. To force the change, you must disassociate the instance profile and then associate the instance profile, or you can stop your instance and then restart it.
The caller of this operation must be granted the PassRole
permission on the IAM role by a
permissions policy.
For more information about roles, see Working with roles. For more information about instance profiles, see About instance profiles.
This is a convenience which creates an instance of the AddRoleToInstanceProfileRequest.Builder
avoiding
the need to create one manually via AddRoleToInstanceProfileRequest.builder()
addRoleToInstanceProfileRequest
- A Consumer
that will call methods on AddRoleToInstanceProfileRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AddUserToGroupResponse addUserToGroup(AddUserToGroupRequest addUserToGroupRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds the specified user to the specified group.
addUserToGroupRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AddUserToGroupResponse addUserToGroup(Consumer<AddUserToGroupRequest.Builder> addUserToGroupRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Adds the specified user to the specified group.
This is a convenience which creates an instance of the AddUserToGroupRequest.Builder
avoiding the need to
create one manually via AddUserToGroupRequest.builder()
addUserToGroupRequest
- A Consumer
that will call methods on AddUserToGroupRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachGroupPolicyResponse attachGroupPolicy(AttachGroupPolicyRequest attachGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified IAM group.
You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use PutGroupPolicy.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about policies, see Managed policies and inline policies in the IAM User Guide.
attachGroupPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachGroupPolicyResponse attachGroupPolicy(Consumer<AttachGroupPolicyRequest.Builder> attachGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified IAM group.
You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use PutGroupPolicy.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the AttachGroupPolicyRequest.Builder
avoiding the need
to create one manually via AttachGroupPolicyRequest.builder()
attachGroupPolicyRequest
- A Consumer
that will call methods on AttachGroupPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachRolePolicyResponse attachRolePolicy(AttachRolePolicyRequest attachRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, UnmodifiableEntityException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy.
You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using CreateRole. You can update a role's trust policy using UpdateAssumeRolePolicy.
Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use PutRolePolicy. For more information about policies, see Managed policies and inline policies in the IAM User Guide.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
attachRolePolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachRolePolicyResponse attachRolePolicy(Consumer<AttachRolePolicyRequest.Builder> attachRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, UnmodifiableEntityException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy.
You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using CreateRole. You can update a role's trust policy using UpdateAssumeRolePolicy.
Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use PutRolePolicy. For more information about policies, see Managed policies and inline policies in the IAM User Guide.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
This is a convenience which creates an instance of the AttachRolePolicyRequest.Builder
avoiding the need
to create one manually via AttachRolePolicyRequest.builder()
attachRolePolicyRequest
- A Consumer
that will call methods on AttachRolePolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachUserPolicyResponse attachUserPolicy(AttachUserPolicyRequest attachUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified user.
You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use PutUserPolicy.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about policies, see Managed policies and inline policies in the IAM User Guide.
attachUserPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default AttachUserPolicyResponse attachUserPolicy(Consumer<AttachUserPolicyRequest.Builder> attachUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, PolicyNotAttachableException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Attaches the specified managed policy to the specified user.
You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use PutUserPolicy.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the AttachUserPolicyRequest.Builder
avoiding the need
to create one manually via AttachUserPolicyRequest.builder()
attachUserPolicyRequest
- A Consumer
that will call methods on AttachUserPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.PolicyNotAttachableException
- The request failed because AWS service role policies can only be attached to the service-linked role for
that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default ChangePasswordResponse changePassword(ChangePasswordRequest changePasswordRequest) throws NoSuchEntityException, InvalidUserTypeException, LimitExceededException, EntityTemporarilyUnmodifiableException, PasswordPolicyViolationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Changes the password of the IAM user who is calling this operation. This operation can be performed using the AWS CLI, the AWS API, or the My Security Credentials page in the AWS Management Console. The AWS account root user password is not affected by this operation.
Use UpdateLoginProfile to use the AWS CLI, the AWS API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see Managing passwords in the IAM User Guide.
changePasswordRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.InvalidUserTypeException
- The request was rejected because the type of user for the transaction was incorrect.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.PasswordPolicyViolationException
- The request was rejected because the provided password did not meet the requirements imposed by the
account password policy.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default ChangePasswordResponse changePassword(Consumer<ChangePasswordRequest.Builder> changePasswordRequest) throws NoSuchEntityException, InvalidUserTypeException, LimitExceededException, EntityTemporarilyUnmodifiableException, PasswordPolicyViolationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Changes the password of the IAM user who is calling this operation. This operation can be performed using the AWS CLI, the AWS API, or the My Security Credentials page in the AWS Management Console. The AWS account root user password is not affected by this operation.
Use UpdateLoginProfile to use the AWS CLI, the AWS API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see Managing passwords in the IAM User Guide.
This is a convenience which creates an instance of the ChangePasswordRequest.Builder
avoiding the need to
create one manually via ChangePasswordRequest.builder()
changePasswordRequest
- A Consumer
that will call methods on ChangePasswordRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.InvalidUserTypeException
- The request was rejected because the type of user for the transaction was incorrect.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.PasswordPolicyViolationException
- The request was rejected because the provided password did not meet the requirements imposed by the
account password policy.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateAccessKeyResponse createAccessKey() throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default
status for new keys is Active
.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
createAccessKey(CreateAccessKeyRequest)
,
AWS API
Documentationdefault CreateAccessKeyResponse createAccessKey(CreateAccessKeyRequest createAccessKeyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default
status for new keys is Active
.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
createAccessKeyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateAccessKeyResponse createAccessKey(Consumer<CreateAccessKeyRequest.Builder> createAccessKeyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default
status for new keys is Active
.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials. This is true even if the AWS account has no associated users.
For information about quotas on the number of keys you can create, see IAM and STS quotas in the IAM User Guide.
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.
This is a convenience which creates an instance of the CreateAccessKeyRequest.Builder
avoiding the need
to create one manually via CreateAccessKeyRequest.builder()
createAccessKeyRequest
- A Consumer
that will call methods on CreateAccessKeyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateAccountAliasResponse createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest) throws EntityAlreadyExistsException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an alias for your AWS account. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
createAccountAliasRequest
- EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateAccountAliasResponse createAccountAlias(Consumer<CreateAccountAliasRequest.Builder> createAccountAliasRequest) throws EntityAlreadyExistsException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an alias for your AWS account. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
This is a convenience which creates an instance of the CreateAccountAliasRequest.Builder
avoiding the
need to create one manually via CreateAccountAliasRequest.builder()
createAccountAliasRequest
- A Consumer
that will call methods on CreateAccountAliasRequest.Builder
to create a
request.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateGroupResponse createGroup(CreateGroupRequest createGroupRequest) throws LimitExceededException, EntityAlreadyExistsException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new group.
For information about the number of groups you can create, see IAM and STS quotas in the IAM User Guide.
createGroupRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateGroupResponse createGroup(Consumer<CreateGroupRequest.Builder> createGroupRequest) throws LimitExceededException, EntityAlreadyExistsException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new group.
For information about the number of groups you can create, see IAM and STS quotas in the IAM User Guide.
This is a convenience which creates an instance of the CreateGroupRequest.Builder
avoiding the need to
create one manually via CreateGroupRequest.builder()
createGroupRequest
- A Consumer
that will call methods on CreateGroupRequest.Builder
to create a request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateInstanceProfileResponse createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest) throws EntityAlreadyExistsException, InvalidInputException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new instance profile. For information about instance profiles, see Using roles for applications on Amazon EC2 in the IAM User Guide, and Instance profiles in the Amazon EC2 User Guide.
For information about the number of instance profiles you can create, see IAM object quotas in the IAM User Guide.
createInstanceProfileRequest
- EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateInstanceProfileResponse createInstanceProfile(Consumer<CreateInstanceProfileRequest.Builder> createInstanceProfileRequest) throws EntityAlreadyExistsException, InvalidInputException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new instance profile. For information about instance profiles, see Using roles for applications on Amazon EC2 in the IAM User Guide, and Instance profiles in the Amazon EC2 User Guide.
For information about the number of instance profiles you can create, see IAM object quotas in the IAM User Guide.
This is a convenience which creates an instance of the CreateInstanceProfileRequest.Builder
avoiding the
need to create one manually via CreateInstanceProfileRequest.builder()
createInstanceProfileRequest
- A Consumer
that will call methods on CreateInstanceProfileRequest.Builder
to create a
request.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateLoginProfileResponse createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest) throws EntityAlreadyExistsException, NoSuchEntityException, PasswordPolicyViolationException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the AWS Management Console.
You can use the AWS CLI, the AWS API, or the Users page in the IAM console to create a password for any IAM user. Use ChangePassword to update your own existing password in the My Security Credentials page in the AWS Management Console.
For more information about managing passwords, see Managing passwords in the IAM User Guide.
createLoginProfileRequest
- EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.PasswordPolicyViolationException
- The request was rejected because the provided password did not meet the requirements imposed by the
account password policy.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateLoginProfileResponse createLoginProfile(Consumer<CreateLoginProfileRequest.Builder> createLoginProfileRequest) throws EntityAlreadyExistsException, NoSuchEntityException, PasswordPolicyViolationException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a password for the specified IAM user. A password allows an IAM user to access AWS services through the AWS Management Console.
You can use the AWS CLI, the AWS API, or the Users page in the IAM console to create a password for any IAM user. Use ChangePassword to update your own existing password in the My Security Credentials page in the AWS Management Console.
For more information about managing passwords, see Managing passwords in the IAM User Guide.
This is a convenience which creates an instance of the CreateLoginProfileRequest.Builder
avoiding the
need to create one manually via CreateLoginProfileRequest.builder()
createLoginProfileRequest
- A Consumer
that will call methods on CreateLoginProfileRequest.Builder
to create a
request.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.PasswordPolicyViolationException
- The request was rejected because the provided password did not meet the requirements imposed by the
account password policy.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateOpenIdConnectProviderResponse createOpenIDConnectProvider(CreateOpenIdConnectProviderRequest createOpenIdConnectProviderRequest) throws InvalidInputException, EntityAlreadyExistsException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
The OIDC provider that you create with this operation can be used as a principal in a role's trust policy. Such a policy establishes a trust relationship between AWS and the OIDC provider.
When you create the IAM OIDC provider, you specify the following:
The URL of the OIDC identity provider (IdP) to trust
A list of client IDs (also known as audiences) that identify the application or applications that are allowed to authenticate using the OIDC provider
A list of thumbprints of one or more server certificates that the IdP uses
You get all of this information from the OIDC IdP that you want to use to access AWS.
The trust for the OIDC provider is derived from the IAM provider that this operation creates. Therefore, it is best to limit access to the CreateOpenIDConnectProvider operation to highly privileged users.
createOpenIdConnectProviderRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateOpenIdConnectProviderResponse createOpenIDConnectProvider(Consumer<CreateOpenIdConnectProviderRequest.Builder> createOpenIdConnectProviderRequest) throws InvalidInputException, EntityAlreadyExistsException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM entity to describe an identity provider (IdP) that supports OpenID Connect (OIDC).
The OIDC provider that you create with this operation can be used as a principal in a role's trust policy. Such a policy establishes a trust relationship between AWS and the OIDC provider.
When you create the IAM OIDC provider, you specify the following:
The URL of the OIDC identity provider (IdP) to trust
A list of client IDs (also known as audiences) that identify the application or applications that are allowed to authenticate using the OIDC provider
A list of thumbprints of one or more server certificates that the IdP uses
You get all of this information from the OIDC IdP that you want to use to access AWS.
The trust for the OIDC provider is derived from the IAM provider that this operation creates. Therefore, it is best to limit access to the CreateOpenIDConnectProvider operation to highly privileged users.
This is a convenience which creates an instance of the CreateOpenIdConnectProviderRequest.Builder
avoiding the need to create one manually via CreateOpenIdConnectProviderRequest.builder()
createOpenIdConnectProviderRequest
- A Consumer
that will call methods on CreateOpenIDConnectProviderRequest.Builder
to create
a request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreatePolicyResponse createPolicy(CreatePolicyRequest createPolicyRequest) throws InvalidInputException, LimitExceededException, EntityAlreadyExistsException, MalformedPolicyDocumentException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new managed policy for your AWS account.
This operation creates a policy version with a version identifier of v1
and sets v1 as the policy's
default version. For more information about policy versions, see Versioning for managed
policies in the IAM User Guide.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about managed policies in general, see Managed policies and inline policies in the IAM User Guide.
createPolicyRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreatePolicyResponse createPolicy(Consumer<CreatePolicyRequest.Builder> createPolicyRequest) throws InvalidInputException, LimitExceededException, EntityAlreadyExistsException, MalformedPolicyDocumentException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new managed policy for your AWS account.
This operation creates a policy version with a version identifier of v1
and sets v1 as the policy's
default version. For more information about policy versions, see Versioning for managed
policies in the IAM User Guide.
As a best practice, you can validate your IAM policies. To learn more, see Validating IAM policies in the IAM User Guide.
For more information about managed policies in general, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the CreatePolicyRequest.Builder
avoiding the need to
create one manually via CreatePolicyRequest.builder()
createPolicyRequest
- A Consumer
that will call methods on CreatePolicyRequest.Builder
to create a request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreatePolicyVersionResponse createPolicyVersion(CreatePolicyVersionRequest createPolicyVersionRequest) throws NoSuchEntityException, MalformedPolicyDocumentException, InvalidInputException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new version of the specified managed policy. To update a managed policy, you create a new policy version. A managed policy can have up to five versions. If the policy has five versions, you must delete an existing version using DeletePolicyVersion before you create a new version.
Optionally, you can set the new version as the policy's default version. The default version is the version that is in effect for the IAM users, groups, and roles to which the policy is attached.
For more information about managed policy versions, see Versioning for managed policies in the IAM User Guide.
createPolicyVersionRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreatePolicyVersionResponse createPolicyVersion(Consumer<CreatePolicyVersionRequest.Builder> createPolicyVersionRequest) throws NoSuchEntityException, MalformedPolicyDocumentException, InvalidInputException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new version of the specified managed policy. To update a managed policy, you create a new policy version. A managed policy can have up to five versions. If the policy has five versions, you must delete an existing version using DeletePolicyVersion before you create a new version.
Optionally, you can set the new version as the policy's default version. The default version is the version that is in effect for the IAM users, groups, and roles to which the policy is attached.
For more information about managed policy versions, see Versioning for managed policies in the IAM User Guide.
This is a convenience which creates an instance of the CreatePolicyVersionRequest.Builder
avoiding the
need to create one manually via CreatePolicyVersionRequest.builder()
createPolicyVersionRequest
- A Consumer
that will call methods on CreatePolicyVersionRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateRoleResponse createRole(CreateRoleRequest createRoleRequest) throws LimitExceededException, InvalidInputException, EntityAlreadyExistsException, MalformedPolicyDocumentException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new role for your AWS account. For more information about roles, see IAM roles. For information about quotas for role names and the number of roles you can create, see IAM and STS quotas in the IAM User Guide.
createRoleRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateRoleResponse createRole(Consumer<CreateRoleRequest.Builder> createRoleRequest) throws LimitExceededException, InvalidInputException, EntityAlreadyExistsException, MalformedPolicyDocumentException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new role for your AWS account. For more information about roles, see IAM roles. For information about quotas for role names and the number of roles you can create, see IAM and STS quotas in the IAM User Guide.
This is a convenience which creates an instance of the CreateRoleRequest.Builder
avoiding the need to
create one manually via CreateRoleRequest.builder()
createRoleRequest
- A Consumer
that will call methods on CreateRoleRequest.Builder
to create a request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.MalformedPolicyDocumentException
- The request was rejected because the policy document was malformed. The error message describes the
specific error.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateSamlProviderResponse createSAMLProvider(CreateSamlProviderRequest createSamlProviderRequest) throws InvalidInputException, EntityAlreadyExistsException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
The SAML provider resource that you create with this operation can be used as a principal in an IAM role's trust policy. Such a policy can enable federated users who sign in using the SAML IdP to assume the role. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.
When you create the SAML provider resource, you upload a SAML metadata document that you get from your IdP. That document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that the IdP sends. You must generate the metadata document using the identity management software that is used as your organization's IdP.
This operation requires Signature Version 4.
For more information, see Enabling SAML 2.0 federated users to access the AWS Management Console and About SAML 2.0-based federation in the IAM User Guide.
createSamlProviderRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateSamlProviderResponse createSAMLProvider(Consumer<CreateSamlProviderRequest.Builder> createSamlProviderRequest) throws InvalidInputException, EntityAlreadyExistsException, LimitExceededException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM resource that describes an identity provider (IdP) that supports SAML 2.0.
The SAML provider resource that you create with this operation can be used as a principal in an IAM role's trust policy. Such a policy can enable federated users who sign in using the SAML IdP to assume the role. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.
When you create the SAML provider resource, you upload a SAML metadata document that you get from your IdP. That document includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that the IdP sends. You must generate the metadata document using the identity management software that is used as your organization's IdP.
This operation requires Signature Version 4.
For more information, see Enabling SAML 2.0 federated users to access the AWS Management Console and About SAML 2.0-based federation in the IAM User Guide.
This is a convenience which creates an instance of the CreateSamlProviderRequest.Builder
avoiding the
need to create one manually via CreateSamlProviderRequest.builder()
createSamlProviderRequest
- A Consumer
that will call methods on CreateSAMLProviderRequest.Builder
to create a
request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateServiceLinkedRoleResponse createServiceLinkedRole(CreateServiceLinkedRoleRequest createServiceLinkedRoleRequest) throws InvalidInputException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM role that is linked to a specific AWS service. The service controls the attached policies and when the role can be deleted. This helps ensure that the service is not broken by an unexpectedly changed or deleted role, which could put your AWS resources into an unknown state. Allowing the service to control the role helps improve service stability and proper cleanup when a service and its role are no longer needed. For more information, see Using service-linked roles in the IAM User Guide.
To attach a policy to this service-linked role, you must make the request using the AWS service that depends on this role.
createServiceLinkedRoleRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateServiceLinkedRoleResponse createServiceLinkedRole(Consumer<CreateServiceLinkedRoleRequest.Builder> createServiceLinkedRoleRequest) throws InvalidInputException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates an IAM role that is linked to a specific AWS service. The service controls the attached policies and when the role can be deleted. This helps ensure that the service is not broken by an unexpectedly changed or deleted role, which could put your AWS resources into an unknown state. Allowing the service to control the role helps improve service stability and proper cleanup when a service and its role are no longer needed. For more information, see Using service-linked roles in the IAM User Guide.
To attach a policy to this service-linked role, you must make the request using the AWS service that depends on this role.
This is a convenience which creates an instance of the CreateServiceLinkedRoleRequest.Builder
avoiding
the need to create one manually via CreateServiceLinkedRoleRequest.builder()
createServiceLinkedRoleRequest
- A Consumer
that will call methods on CreateServiceLinkedRoleRequest.Builder
to create a
request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateServiceSpecificCredentialResponse createServiceSpecificCredential(CreateServiceSpecificCredentialRequest createServiceSpecificCredentialRequest) throws LimitExceededException, NoSuchEntityException, ServiceNotSupportedException, AwsServiceException, SdkClientException, IamException
Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request. These credentials are generated by IAM, and can be used only for the specified service.
You can have a maximum of two sets of service-specific credentials for each supported service per user.
You can create service-specific credentials for AWS CodeCommit and Amazon Keyspaces (for Apache Cassandra).
You can reset the password to a new service-generated value by calling ResetServiceSpecificCredential.
For more information about service-specific credentials, see Using IAM with AWS CodeCommit: Git credentials, SSH keys, and AWS access keys in the IAM User Guide.
createServiceSpecificCredentialRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceNotSupportedException
- The specified service does not support service-specific credentials.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateServiceSpecificCredentialResponse createServiceSpecificCredential(Consumer<CreateServiceSpecificCredentialRequest.Builder> createServiceSpecificCredentialRequest) throws LimitExceededException, NoSuchEntityException, ServiceNotSupportedException, AwsServiceException, SdkClientException, IamException
Generates a set of credentials consisting of a user name and password that can be used to access the service specified in the request. These credentials are generated by IAM, and can be used only for the specified service.
You can have a maximum of two sets of service-specific credentials for each supported service per user.
You can create service-specific credentials for AWS CodeCommit and Amazon Keyspaces (for Apache Cassandra).
You can reset the password to a new service-generated value by calling ResetServiceSpecificCredential.
For more information about service-specific credentials, see Using IAM with AWS CodeCommit: Git credentials, SSH keys, and AWS access keys in the IAM User Guide.
This is a convenience which creates an instance of the CreateServiceSpecificCredentialRequest.Builder
avoiding the need to create one manually via CreateServiceSpecificCredentialRequest.builder()
createServiceSpecificCredentialRequest
- A Consumer
that will call methods on CreateServiceSpecificCredentialRequest.Builder
to
create a request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceNotSupportedException
- The specified service does not support service-specific credentials.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateUserResponse createUser(CreateUserRequest createUserRequest) throws LimitExceededException, EntityAlreadyExistsException, NoSuchEntityException, InvalidInputException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new IAM user for your AWS account.
For information about quotas for the number of IAM users you can create, see IAM and STS quotas in the IAM User Guide.
createUserRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateUserResponse createUser(Consumer<CreateUserRequest.Builder> createUserRequest) throws LimitExceededException, EntityAlreadyExistsException, NoSuchEntityException, InvalidInputException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new IAM user for your AWS account.
For information about quotas for the number of IAM users you can create, see IAM and STS quotas in the IAM User Guide.
This is a convenience which creates an instance of the CreateUserRequest.Builder
avoiding the need to
create one manually via CreateUserRequest.builder()
createUserRequest
- A Consumer
that will call methods on CreateUserRequest.Builder
to create a request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateVirtualMfaDeviceResponse createVirtualMFADevice(CreateVirtualMfaDeviceRequest createVirtualMfaDeviceRequest) throws LimitExceededException, InvalidInputException, EntityAlreadyExistsException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, see Using a virtual MFA device in the IAM User Guide.
For information about the maximum number of MFA devices you can create, see IAM and STS quotas in the IAM User Guide.
The seed information contained in the QR code and the Base32 string should be treated like any other secret access information. In other words, protect the seed information as you would your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.
createVirtualMfaDeviceRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default CreateVirtualMfaDeviceResponse createVirtualMFADevice(Consumer<CreateVirtualMfaDeviceRequest.Builder> createVirtualMfaDeviceRequest) throws LimitExceededException, InvalidInputException, EntityAlreadyExistsException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, see Using a virtual MFA device in the IAM User Guide.
For information about the maximum number of MFA devices you can create, see IAM and STS quotas in the IAM User Guide.
The seed information contained in the QR code and the Base32 string should be treated like any other secret access information. In other words, protect the seed information as you would your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.
This is a convenience which creates an instance of the CreateVirtualMfaDeviceRequest.Builder
avoiding the
need to create one manually via CreateVirtualMfaDeviceRequest.builder()
createVirtualMfaDeviceRequest
- A Consumer
that will call methods on CreateVirtualMFADeviceRequest.Builder
to create a
request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeactivateMfaDeviceResponse deactivateMFADevice(DeactivateMfaDeviceRequest deactivateMfaDeviceRequest) throws EntityTemporarilyUnmodifiableException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
For more information about creating and working with virtual MFA devices, see Enabling a virtual multi-factor authentication (MFA) device in the IAM User Guide.
deactivateMfaDeviceRequest
- EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeactivateMfaDeviceResponse deactivateMFADevice(Consumer<DeactivateMfaDeviceRequest.Builder> deactivateMfaDeviceRequest) throws EntityTemporarilyUnmodifiableException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
For more information about creating and working with virtual MFA devices, see Enabling a virtual multi-factor authentication (MFA) device in the IAM User Guide.
This is a convenience which creates an instance of the DeactivateMfaDeviceRequest.Builder
avoiding the
need to create one manually via DeactivateMfaDeviceRequest.builder()
deactivateMfaDeviceRequest
- A Consumer
that will call methods on DeactivateMFADeviceRequest.Builder
to create a
request.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccessKeyResponse deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the access key pair associated with the specified IAM user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated users.
deleteAccessKeyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccessKeyResponse deleteAccessKey(Consumer<DeleteAccessKeyRequest.Builder> deleteAccessKeyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the access key pair associated with the specified IAM user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated users.
This is a convenience which creates an instance of the DeleteAccessKeyRequest.Builder
avoiding the need
to create one manually via DeleteAccessKeyRequest.builder()
deleteAccessKeyRequest
- A Consumer
that will call methods on DeleteAccessKeyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccountAliasResponse deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
deleteAccountAliasRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccountAliasResponse deleteAccountAlias(Consumer<DeleteAccountAliasRequest.Builder> deleteAccountAliasRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an alias for your AWS account ID in the IAM User Guide.
This is a convenience which creates an instance of the DeleteAccountAliasRequest.Builder
avoiding the
need to create one manually via DeleteAccountAliasRequest.builder()
deleteAccountAliasRequest
- A Consumer
that will call methods on DeleteAccountAliasRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy() throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the password policy for the AWS account. There are no parameters.
NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest)
,
AWS API Documentationdefault DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the password policy for the AWS account. There are no parameters.
deleteAccountPasswordPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteAccountPasswordPolicyResponse deleteAccountPasswordPolicy(Consumer<DeleteAccountPasswordPolicyRequest.Builder> deleteAccountPasswordPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the password policy for the AWS account. There are no parameters.
This is a convenience which creates an instance of the DeleteAccountPasswordPolicyRequest.Builder
avoiding the need to create one manually via DeleteAccountPasswordPolicyRequest.builder()
deleteAccountPasswordPolicyRequest
- A Consumer
that will call methods on DeleteAccountPasswordPolicyRequest.Builder
to create
a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteGroupResponse deleteGroup(DeleteGroupRequest deleteGroupRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified IAM group. The group must not contain any users or have any attached policies.
deleteGroupRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteGroupResponse deleteGroup(Consumer<DeleteGroupRequest.Builder> deleteGroupRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified IAM group. The group must not contain any users or have any attached policies.
This is a convenience which creates an instance of the DeleteGroupRequest.Builder
avoiding the need to
create one manually via DeleteGroupRequest.builder()
deleteGroupRequest
- A Consumer
that will call methods on DeleteGroupRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteGroupPolicyResponse deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM group.
A group can also have managed policies attached to it. To detach a managed policy from a group, use DetachGroupPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
deleteGroupPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteGroupPolicyResponse deleteGroupPolicy(Consumer<DeleteGroupPolicyRequest.Builder> deleteGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM group.
A group can also have managed policies attached to it. To detach a managed policy from a group, use DetachGroupPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DeleteGroupPolicyRequest.Builder
avoiding the need
to create one manually via DeleteGroupPolicyRequest.builder()
deleteGroupPolicyRequest
- A Consumer
that will call methods on DeleteGroupPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteInstanceProfileResponse deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified instance profile. The instance profile must not have an associated role.
Make sure that you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
For more information about instance profiles, see About instance profiles.
deleteInstanceProfileRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteInstanceProfileResponse deleteInstanceProfile(Consumer<DeleteInstanceProfileRequest.Builder> deleteInstanceProfileRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified instance profile. The instance profile must not have an associated role.
Make sure that you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
For more information about instance profiles, see About instance profiles.
This is a convenience which creates an instance of the DeleteInstanceProfileRequest.Builder
avoiding the
need to create one manually via DeleteInstanceProfileRequest.builder()
deleteInstanceProfileRequest
- A Consumer
that will call methods on DeleteInstanceProfileRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteLoginProfileResponse deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest) throws EntityTemporarilyUnmodifiableException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
You can use the AWS CLI, the AWS API, or the Users page in the IAM console to delete a password for any IAM user. You can use ChangePassword to update, but not delete, your own password in the My Security Credentials page in the AWS Management Console.
Deleting a user's password does not prevent a user from accessing AWS through the command line interface or the API. To prevent all user access, you must also either make any access keys inactive or delete them. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.
deleteLoginProfileRequest
- EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteLoginProfileResponse deleteLoginProfile(Consumer<DeleteLoginProfileRequest.Builder> deleteLoginProfileRequest) throws EntityTemporarilyUnmodifiableException, NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
You can use the AWS CLI, the AWS API, or the Users page in the IAM console to delete a password for any IAM user. You can use ChangePassword to update, but not delete, your own password in the My Security Credentials page in the AWS Management Console.
Deleting a user's password does not prevent a user from accessing AWS through the command line interface or the API. To prevent all user access, you must also either make any access keys inactive or delete them. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.
This is a convenience which creates an instance of the DeleteLoginProfileRequest.Builder
avoiding the
need to create one manually via DeleteLoginProfileRequest.builder()
deleteLoginProfileRequest
- A Consumer
that will call methods on DeleteLoginProfileRequest.Builder
to create a
request.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteOpenIdConnectProviderResponse deleteOpenIDConnectProvider(DeleteOpenIdConnectProviderRequest deleteOpenIdConnectProviderRequest) throws InvalidInputException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
Deleting an IAM OIDC provider resource does not update any roles that reference the provider as a principal in their trust policies. Any attempt to assume a role that references a deleted provider fails.
This operation is idempotent; it does not fail or return an error if you call the operation for a provider that does not exist.
deleteOpenIdConnectProviderRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteOpenIdConnectProviderResponse deleteOpenIDConnectProvider(Consumer<DeleteOpenIdConnectProviderRequest.Builder> deleteOpenIdConnectProviderRequest) throws InvalidInputException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes an OpenID Connect identity provider (IdP) resource object in IAM.
Deleting an IAM OIDC provider resource does not update any roles that reference the provider as a principal in their trust policies. Any attempt to assume a role that references a deleted provider fails.
This operation is idempotent; it does not fail or return an error if you call the operation for a provider that does not exist.
This is a convenience which creates an instance of the DeleteOpenIdConnectProviderRequest.Builder
avoiding the need to create one manually via DeleteOpenIdConnectProviderRequest.builder()
deleteOpenIdConnectProviderRequest
- A Consumer
that will call methods on DeleteOpenIDConnectProviderRequest.Builder
to create
a request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeletePolicyResponse deletePolicy(DeletePolicyRequest deletePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, DeleteConflictException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified managed policy.
Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to. In addition, you must delete all the policy's versions. The following steps describe the process for deleting a managed policy:
Detach the policy from all users, groups, and roles that the policy is attached to, using DetachUserPolicy, DetachGroupPolicy, or DetachRolePolicy. To list all the users, groups, and roles that a policy is attached to, use ListEntitiesForPolicy.
Delete all versions of the policy using DeletePolicyVersion. To list the policy's versions, use ListPolicyVersions. You cannot use DeletePolicyVersion to delete the version that is marked as the default version. You delete the policy's default version in the next step of the process.
Delete the policy (this automatically deletes the policy's default version) using this operation.
For information about managed policies, see Managed policies and inline policies in the IAM User Guide.
deletePolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeletePolicyResponse deletePolicy(Consumer<DeletePolicyRequest.Builder> deletePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, DeleteConflictException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified managed policy.
Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to. In addition, you must delete all the policy's versions. The following steps describe the process for deleting a managed policy:
Detach the policy from all users, groups, and roles that the policy is attached to, using DetachUserPolicy, DetachGroupPolicy, or DetachRolePolicy. To list all the users, groups, and roles that a policy is attached to, use ListEntitiesForPolicy.
Delete all versions of the policy using DeletePolicyVersion. To list the policy's versions, use ListPolicyVersions. You cannot use DeletePolicyVersion to delete the version that is marked as the default version. You delete the policy's default version in the next step of the process.
Delete the policy (this automatically deletes the policy's default version) using this operation.
For information about managed policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DeletePolicyRequest.Builder
avoiding the need to
create one manually via DeletePolicyRequest.builder()
deletePolicyRequest
- A Consumer
that will call methods on DeletePolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeletePolicyVersionResponse deletePolicyVersion(DeletePolicyVersionRequest deletePolicyVersionRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, DeleteConflictException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified version from the specified managed policy.
You cannot delete the default version from a policy using this operation. To delete the default version from a policy, use DeletePolicy. To find out which version of a policy is marked as the default version, use ListPolicyVersions.
For information about versions for managed policies, see Versioning for managed policies in the IAM User Guide.
deletePolicyVersionRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeletePolicyVersionResponse deletePolicyVersion(Consumer<DeletePolicyVersionRequest.Builder> deletePolicyVersionRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, DeleteConflictException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified version from the specified managed policy.
You cannot delete the default version from a policy using this operation. To delete the default version from a policy, use DeletePolicy. To find out which version of a policy is marked as the default version, use ListPolicyVersions.
For information about versions for managed policies, see Versioning for managed policies in the IAM User Guide.
This is a convenience which creates an instance of the DeletePolicyVersionRequest.Builder
avoiding the
need to create one manually via DeletePolicyVersionRequest.builder()
deletePolicyVersionRequest
- A Consumer
that will call methods on DeletePolicyVersionRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRoleResponse deleteRole(DeleteRoleRequest deleteRoleRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, UnmodifiableEntityException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified role. The role must not have any policies attached. For more information about roles, see Working with roles.
Make sure that you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
deleteRoleRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRoleResponse deleteRole(Consumer<DeleteRoleRequest.Builder> deleteRoleRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, UnmodifiableEntityException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified role. The role must not have any policies attached. For more information about roles, see Working with roles.
Make sure that you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.
This is a convenience which creates an instance of the DeleteRoleRequest.Builder
avoiding the need to
create one manually via DeleteRoleRequest.builder()
deleteRoleRequest
- A Consumer
that will call methods on DeleteRoleRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRolePermissionsBoundaryResponse deleteRolePermissionsBoundary(DeleteRolePermissionsBoundaryRequest deleteRolePermissionsBoundaryRequest) throws NoSuchEntityException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the permissions boundary for the specified IAM role.
Deleting the permissions boundary for a role might increase its permissions. For example, it might allow anyone who assumes the role to perform all the actions granted in its permissions policies.
deleteRolePermissionsBoundaryRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRolePermissionsBoundaryResponse deleteRolePermissionsBoundary(Consumer<DeleteRolePermissionsBoundaryRequest.Builder> deleteRolePermissionsBoundaryRequest) throws NoSuchEntityException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the permissions boundary for the specified IAM role.
Deleting the permissions boundary for a role might increase its permissions. For example, it might allow anyone who assumes the role to perform all the actions granted in its permissions policies.
This is a convenience which creates an instance of the DeleteRolePermissionsBoundaryRequest.Builder
avoiding the need to create one manually via DeleteRolePermissionsBoundaryRequest.builder()
deleteRolePermissionsBoundaryRequest
- A Consumer
that will call methods on DeleteRolePermissionsBoundaryRequest.Builder
to
create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRolePolicyResponse deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM role.
A role can also have managed policies attached to it. To detach a managed policy from a role, use DetachRolePolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
deleteRolePolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteRolePolicyResponse deleteRolePolicy(Consumer<DeleteRolePolicyRequest.Builder> deleteRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM role.
A role can also have managed policies attached to it. To detach a managed policy from a role, use DetachRolePolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DeleteRolePolicyRequest.Builder
avoiding the need
to create one manually via DeleteRolePolicyRequest.builder()
deleteRolePolicyRequest
- A Consumer
that will call methods on DeleteRolePolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSamlProviderResponse deleteSAMLProvider(DeleteSamlProviderRequest deleteSamlProviderRequest) throws InvalidInputException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a SAML provider resource in IAM.
Deleting the provider resource from IAM does not update any roles that reference the SAML provider resource's ARN as a principal in their trust policies. Any attempt to assume a role that references a non-existent provider resource ARN fails.
This operation requires Signature Version 4.
deleteSamlProviderRequest
- InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSamlProviderResponse deleteSAMLProvider(Consumer<DeleteSamlProviderRequest.Builder> deleteSamlProviderRequest) throws InvalidInputException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a SAML provider resource in IAM.
Deleting the provider resource from IAM does not update any roles that reference the SAML provider resource's ARN as a principal in their trust policies. Any attempt to assume a role that references a non-existent provider resource ARN fails.
This operation requires Signature Version 4.
This is a convenience which creates an instance of the DeleteSamlProviderRequest.Builder
avoiding the
need to create one manually via DeleteSamlProviderRequest.builder()
deleteSamlProviderRequest
- A Consumer
that will call methods on DeleteSAMLProviderRequest.Builder
to create a
request.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSshPublicKeyResponse deleteSSHPublicKey(DeleteSshPublicKeyRequest deleteSshPublicKeyRequest) throws NoSuchEntityException, AwsServiceException, SdkClientException, IamException
Deletes the specified SSH public key.
The SSH public key deleted by this operation is used only for authenticating the associated IAM user to an AWS CodeCommit repository. For more information about using SSH keys to authenticate to an AWS CodeCommit repository, see Set up AWS CodeCommit for SSH connections in the AWS CodeCommit User Guide.
deleteSshPublicKeyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSshPublicKeyResponse deleteSSHPublicKey(Consumer<DeleteSshPublicKeyRequest.Builder> deleteSshPublicKeyRequest) throws NoSuchEntityException, AwsServiceException, SdkClientException, IamException
Deletes the specified SSH public key.
The SSH public key deleted by this operation is used only for authenticating the associated IAM user to an AWS CodeCommit repository. For more information about using SSH keys to authenticate to an AWS CodeCommit repository, see Set up AWS CodeCommit for SSH connections in the AWS CodeCommit User Guide.
This is a convenience which creates an instance of the DeleteSshPublicKeyRequest.Builder
avoiding the
need to create one manually via DeleteSshPublicKeyRequest.builder()
deleteSshPublicKeyRequest
- A Consumer
that will call methods on DeleteSSHPublicKeyRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServerCertificateResponse deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified server certificate.
For more information about working with server certificates, see Working with server certificates in the IAM User Guide. This topic also includes a list of AWS services that can use the server certificates that you manage with IAM.
If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, see DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.
deleteServerCertificateRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServerCertificateResponse deleteServerCertificate(Consumer<DeleteServerCertificateRequest.Builder> deleteServerCertificateRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified server certificate.
For more information about working with server certificates, see Working with server certificates in the IAM User Guide. This topic also includes a list of AWS services that can use the server certificates that you manage with IAM.
If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, see DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.
This is a convenience which creates an instance of the DeleteServerCertificateRequest.Builder
avoiding
the need to create one manually via DeleteServerCertificateRequest.builder()
deleteServerCertificateRequest
- A Consumer
that will call methods on DeleteServerCertificateRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServiceLinkedRoleResponse deleteServiceLinkedRole(DeleteServiceLinkedRoleRequest deleteServiceLinkedRoleRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Submits a service-linked role deletion request and returns a DeletionTaskId
, which you can use to
check the status of the deletion. Before you call this operation, confirm that the role has no active sessions
and that any resources used by the role in the linked service are deleted. If you call this operation more than
once for the same service-linked role and an earlier deletion task is not complete, then the
DeletionTaskId
of the earlier request is returned.
If you submit a deletion request for a service-linked role whose linked service is still accessing a resource, then the deletion task fails. If it fails, the GetServiceLinkedRoleDeletionStatus operation returns the reason for the failure, usually including the resources that must be deleted. To delete the service-linked role, you must first remove those resources from the linked service and then submit the deletion request again. Resources are specific to the service that is linked to the role. For more information about removing resources from a service, see the AWS documentation for your service.
For more information about service-linked roles, see Roles terms and concepts: AWS service-linked role in the IAM User Guide.
deleteServiceLinkedRoleRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServiceLinkedRoleResponse deleteServiceLinkedRole(Consumer<DeleteServiceLinkedRoleRequest.Builder> deleteServiceLinkedRoleRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Submits a service-linked role deletion request and returns a DeletionTaskId
, which you can use to
check the status of the deletion. Before you call this operation, confirm that the role has no active sessions
and that any resources used by the role in the linked service are deleted. If you call this operation more than
once for the same service-linked role and an earlier deletion task is not complete, then the
DeletionTaskId
of the earlier request is returned.
If you submit a deletion request for a service-linked role whose linked service is still accessing a resource, then the deletion task fails. If it fails, the GetServiceLinkedRoleDeletionStatus operation returns the reason for the failure, usually including the resources that must be deleted. To delete the service-linked role, you must first remove those resources from the linked service and then submit the deletion request again. Resources are specific to the service that is linked to the role. For more information about removing resources from a service, see the AWS documentation for your service.
For more information about service-linked roles, see Roles terms and concepts: AWS service-linked role in the IAM User Guide.
This is a convenience which creates an instance of the DeleteServiceLinkedRoleRequest.Builder
avoiding
the need to create one manually via DeleteServiceLinkedRoleRequest.builder()
deleteServiceLinkedRoleRequest
- A Consumer
that will call methods on DeleteServiceLinkedRoleRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServiceSpecificCredentialResponse deleteServiceSpecificCredential(DeleteServiceSpecificCredentialRequest deleteServiceSpecificCredentialRequest) throws NoSuchEntityException, AwsServiceException, SdkClientException, IamException
Deletes the specified service-specific credential.
deleteServiceSpecificCredentialRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteServiceSpecificCredentialResponse deleteServiceSpecificCredential(Consumer<DeleteServiceSpecificCredentialRequest.Builder> deleteServiceSpecificCredentialRequest) throws NoSuchEntityException, AwsServiceException, SdkClientException, IamException
Deletes the specified service-specific credential.
This is a convenience which creates an instance of the DeleteServiceSpecificCredentialRequest.Builder
avoiding the need to create one manually via DeleteServiceSpecificCredentialRequest.builder()
deleteServiceSpecificCredentialRequest
- A Consumer
that will call methods on DeleteServiceSpecificCredentialRequest.Builder
to
create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSigningCertificateResponse deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a signing certificate associated with the specified IAM user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated IAM users.
deleteSigningCertificateRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteSigningCertificateResponse deleteSigningCertificate(Consumer<DeleteSigningCertificateRequest.Builder> deleteSigningCertificateRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a signing certificate associated with the specified IAM user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. This operation works for access keys under the AWS account. Consequently, you can use this operation to manage AWS account root user credentials even if the AWS account has no associated IAM users.
This is a convenience which creates an instance of the DeleteSigningCertificateRequest.Builder
avoiding
the need to create one manually via DeleteSigningCertificateRequest.builder()
deleteSigningCertificateRequest
- A Consumer
that will call methods on DeleteSigningCertificateRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserResponse deleteUser(DeleteUserRequest deleteUserRequest) throws LimitExceededException, NoSuchEntityException, DeleteConflictException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified IAM user. Unlike the AWS Management Console, when you delete a user programmatically, you must delete the items attached to the user manually, or the deletion fails. For more information, see Deleting an IAM user. Before attempting to delete a user, remove the following items:
Password (DeleteLoginProfile)
Access keys (DeleteAccessKey)
Signing certificate (DeleteSigningCertificate)
SSH public key (DeleteSSHPublicKey)
Git credentials (DeleteServiceSpecificCredential)
Multi-factor authentication (MFA) device (DeactivateMFADevice, DeleteVirtualMFADevice)
Inline policies (DeleteUserPolicy)
Attached managed policies (DetachUserPolicy)
Group memberships (RemoveUserFromGroup)
deleteUserRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserResponse deleteUser(Consumer<DeleteUserRequest.Builder> deleteUserRequest) throws LimitExceededException, NoSuchEntityException, DeleteConflictException, ConcurrentModificationException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified IAM user. Unlike the AWS Management Console, when you delete a user programmatically, you must delete the items attached to the user manually, or the deletion fails. For more information, see Deleting an IAM user. Before attempting to delete a user, remove the following items:
Password (DeleteLoginProfile)
Access keys (DeleteAccessKey)
Signing certificate (DeleteSigningCertificate)
SSH public key (DeleteSSHPublicKey)
Git credentials (DeleteServiceSpecificCredential)
Multi-factor authentication (MFA) device (DeactivateMFADevice, DeleteVirtualMFADevice)
Inline policies (DeleteUserPolicy)
Attached managed policies (DetachUserPolicy)
Group memberships (RemoveUserFromGroup)
This is a convenience which creates an instance of the DeleteUserRequest.Builder
avoiding the need to
create one manually via DeleteUserRequest.builder()
deleteUserRequest
- A Consumer
that will call methods on DeleteUserRequest.Builder
to create a request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.ConcurrentModificationException
- The request was rejected because multiple requests to change this object were submitted simultaneously.
Wait a few minutes and submit your request again.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserPermissionsBoundaryResponse deleteUserPermissionsBoundary(DeleteUserPermissionsBoundaryRequest deleteUserPermissionsBoundaryRequest) throws NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the permissions boundary for the specified IAM user.
Deleting the permissions boundary for a user might increase its permissions by allowing the user to perform all the actions granted in its permissions policies.
deleteUserPermissionsBoundaryRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserPermissionsBoundaryResponse deleteUserPermissionsBoundary(Consumer<DeleteUserPermissionsBoundaryRequest.Builder> deleteUserPermissionsBoundaryRequest) throws NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the permissions boundary for the specified IAM user.
Deleting the permissions boundary for a user might increase its permissions by allowing the user to perform all the actions granted in its permissions policies.
This is a convenience which creates an instance of the DeleteUserPermissionsBoundaryRequest.Builder
avoiding the need to create one manually via DeleteUserPermissionsBoundaryRequest.builder()
deleteUserPermissionsBoundaryRequest
- A Consumer
that will call methods on DeleteUserPermissionsBoundaryRequest.Builder
to
create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserPolicyResponse deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM user.
A user can also have managed policies attached to it. To detach a managed policy from a user, use DetachUserPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
deleteUserPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteUserPolicyResponse deleteUserPolicy(Consumer<DeleteUserPolicyRequest.Builder> deleteUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes the specified inline policy that is embedded in the specified IAM user.
A user can also have managed policies attached to it. To detach a managed policy from a user, use DetachUserPolicy. For more information about policies, refer to Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DeleteUserPolicyRequest.Builder
avoiding the need
to create one manually via DeleteUserPolicyRequest.builder()
deleteUserPolicyRequest
- A Consumer
that will call methods on DeleteUserPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteVirtualMfaDeviceResponse deleteVirtualMFADevice(DeleteVirtualMfaDeviceRequest deleteVirtualMfaDeviceRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a virtual MFA device.
You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.
deleteVirtualMfaDeviceRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DeleteVirtualMfaDeviceResponse deleteVirtualMFADevice(Consumer<DeleteVirtualMfaDeviceRequest.Builder> deleteVirtualMfaDeviceRequest) throws NoSuchEntityException, DeleteConflictException, LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Deletes a virtual MFA device.
You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.
This is a convenience which creates an instance of the DeleteVirtualMfaDeviceRequest.Builder
avoiding the
need to create one manually via DeleteVirtualMfaDeviceRequest.builder()
deleteVirtualMfaDeviceRequest
- A Consumer
that will call methods on DeleteVirtualMFADeviceRequest.Builder
to create a
request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.DeleteConflictException
- The request was rejected because it attempted to delete a resource that has attached subordinate
entities. The error message describes these entities.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachGroupPolicyResponse detachGroupPolicy(DetachGroupPolicyRequest detachGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified IAM group.
A group can also have inline policies embedded with it. To delete an inline policy, use DeleteGroupPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
detachGroupPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachGroupPolicyResponse detachGroupPolicy(Consumer<DetachGroupPolicyRequest.Builder> detachGroupPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified IAM group.
A group can also have inline policies embedded with it. To delete an inline policy, use DeleteGroupPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DetachGroupPolicyRequest.Builder
avoiding the need
to create one manually via DetachGroupPolicyRequest.builder()
detachGroupPolicyRequest
- A Consumer
that will call methods on DetachGroupPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachRolePolicyResponse detachRolePolicy(DetachRolePolicyRequest detachRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified role.
A role can also have inline policies embedded with it. To delete an inline policy, use DeleteRolePolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
detachRolePolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachRolePolicyResponse detachRolePolicy(Consumer<DetachRolePolicyRequest.Builder> detachRolePolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, UnmodifiableEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified role.
A role can also have inline policies embedded with it. To delete an inline policy, use DeleteRolePolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DetachRolePolicyRequest.Builder
avoiding the need
to create one manually via DetachRolePolicyRequest.builder()
detachRolePolicyRequest
- A Consumer
that will call methods on DetachRolePolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.UnmodifiableEntityException
- The request was rejected because only the service that depends on the service-linked role can modify or
delete the role on your behalf. The error message includes the name of the service that depends on this
service-linked role. You must request the change through that service.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachUserPolicyResponse detachUserPolicy(DetachUserPolicyRequest detachUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified user.
A user can also have inline policies embedded with it. To delete an inline policy, use DeleteUserPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
detachUserPolicyRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default DetachUserPolicyResponse detachUserPolicy(Consumer<DetachUserPolicyRequest.Builder> detachUserPolicyRequest) throws NoSuchEntityException, LimitExceededException, InvalidInputException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Removes the specified managed policy from the specified user.
A user can also have inline policies embedded with it. To delete an inline policy, use DeleteUserPolicy. For information about policies, see Managed policies and inline policies in the IAM User Guide.
This is a convenience which creates an instance of the DetachUserPolicyRequest.Builder
avoiding the need
to create one manually via DetachUserPolicyRequest.builder()
detachUserPolicyRequest
- A Consumer
that will call methods on DetachUserPolicyRequest.Builder
to create a request.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default EnableMfaDeviceResponse enableMFADevice(EnableMfaDeviceRequest enableMfaDeviceRequest) throws EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Enables the specified MFA device and associates it with the specified IAM user. When enabled, the MFA device is required for every subsequent login by the IAM user associated with the device.
enableMfaDeviceRequest
- EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.InvalidAuthenticationCodeException
- The request was rejected because the authentication code was not recognized. The error message describes
the specific error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default EnableMfaDeviceResponse enableMFADevice(Consumer<EnableMfaDeviceRequest.Builder> enableMfaDeviceRequest) throws EntityAlreadyExistsException, EntityTemporarilyUnmodifiableException, InvalidAuthenticationCodeException, LimitExceededException, NoSuchEntityException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Enables the specified MFA device and associates it with the specified IAM user. When enabled, the MFA device is required for every subsequent login by the IAM user associated with the device.
This is a convenience which creates an instance of the EnableMfaDeviceRequest.Builder
avoiding the need
to create one manually via EnableMfaDeviceRequest.builder()
enableMfaDeviceRequest
- A Consumer
that will call methods on EnableMFADeviceRequest.Builder
to create a request.EntityAlreadyExistsException
- The request was rejected because it attempted to create a resource that already exists.EntityTemporarilyUnmodifiableException
- The request was rejected because it referenced an entity that is temporarily unmodifiable, such as a user
name that was deleted and then recreated. The error indicates that the request is likely to succeed if
you try again after waiting several minutes. The error message describes the entity.InvalidAuthenticationCodeException
- The request was rejected because the authentication code was not recognized. The error message describes
the specific error.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateCredentialReportResponse generateCredentialReport() throws LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
generateCredentialReport(GenerateCredentialReportRequest)
,
AWS
API Documentationdefault GenerateCredentialReportResponse generateCredentialReport(GenerateCredentialReportRequest generateCredentialReportRequest) throws LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
generateCredentialReportRequest
- LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateCredentialReportResponse generateCredentialReport(Consumer<GenerateCredentialReportRequest.Builder> generateCredentialReportRequest) throws LimitExceededException, ServiceFailureException, AwsServiceException, SdkClientException, IamException
Generates a credential report for the AWS account. For more information about the credential report, see Getting credential reports in the IAM User Guide.
This is a convenience which creates an instance of the GenerateCredentialReportRequest.Builder
avoiding
the need to create one manually via GenerateCredentialReportRequest.builder()
generateCredentialReportRequest
- A Consumer
that will call methods on GenerateCredentialReportRequest.Builder
to create a
request.LimitExceededException
- The request was rejected because it attempted to create resources beyond the current AWS account limits.
The error message describes the limit exceeded.ServiceFailureException
- The request processing has failed because of an unknown error, exception or failure.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateOrganizationsAccessReportResponse generateOrganizationsAccessReport(GenerateOrganizationsAccessReportRequest generateOrganizationsAccessReportRequest) throws ReportGenerationLimitExceededException, AwsServiceException, SdkClientException, IamException
Generates a report for service last accessed data for AWS Organizations. You can generate a report for any entities (organization root, organizational unit, or account) or policies in your organization.
To call this operation, you must be signed in using your AWS Organizations management account credentials. You can use your long-term IAM user or root user credentials, or temporary credentials from assuming an IAM role. SCPs must be enabled for your organization root. You must have the required IAM and AWS Organizations permissions. For more information, see Refining permissions using service last accessed data in the IAM User Guide.
You can generate a service last accessed data report for entities by specifying only the entity's path. This data includes a list of services that are allowed by any service control policies (SCPs) that apply to the entity.
You can generate a service last accessed data report for a policy by specifying an entity's path and an optional AWS Organizations policy ID. This data includes a list of services that are allowed by the specified SCP.
For each service in both report types, the data includes the most recent account activity that the policy allows to account principals in the entity or the entity's children. For important information about the data, reporting period, permissions required, troubleshooting, and supported Regions see Reducing permissions using service last accessed data in the IAM User Guide.
The data includes all attempts to access AWS, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that an account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
This operation returns a JobId
. Use this parameter in the
GetOrganizationsAccessReport
operation to check the status of the report generation. To
check the status of this request, use the JobId
parameter in the
GetOrganizationsAccessReport
operation and test the JobStatus
response
parameter. When the job is complete, you can retrieve the report.
To generate a service last accessed data report for entities, specify an entity path without specifying the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned in the report.
Root – When you specify the organizations root as the entity, the resulting report lists all of the services allowed by SCPs that are attached to your root. For each service, the report includes data for all accounts in your organization except the management account, because the management account is not limited by SCPs.
OU – When you specify an organizational unit (OU) as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the OU and its parents. For each service, the report includes data for all accounts in the OU or its children. This data excludes the management account, because the management account is not limited by SCPs.
management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. For each service, the report includes data for only the management account.
Account – When you specify another account as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the account and its parents. For each service, the report includes data for only the specified account.
To generate a service last accessed data report for policies, specify an entity path and the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned for each service.
Root – When you specify the root entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in your organization to which the SCP applies. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to any entities in the organization, then the report will return a list of services with no data.
OU – When you specify an OU entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in the OU or its children to which the SCP applies. This means that other accounts outside the OU that are affected by the SCP might not be included in the data. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to the OU or one of its children, the report will return a list of services with no data.
management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. If you specify a policy ID in the CLI or API, the policy is ignored. For each service, the report includes data for only the management account.
Account – When you specify another account entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for only the specified account. This means that other accounts in the organization that are affected by the SCP might not be included in the data. If the SCP is not attached to the account, the report will return a list of services with no data.
Service last accessed data does not use other policy types when determining whether a principal could access a service. These other policy types include identity-based policies, resource-based policies, access control lists, IAM permissions boundaries, and STS assume role policies. It only applies SCP logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
For more information about service last accessed data, see Reducing policy scope by viewing user activity in the IAM User Guide.
generateOrganizationsAccessReportRequest
- ReportGenerationLimitExceededException
- The request failed because the maximum number of concurrent requests for this account are already
running.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateOrganizationsAccessReportResponse generateOrganizationsAccessReport(Consumer<GenerateOrganizationsAccessReportRequest.Builder> generateOrganizationsAccessReportRequest) throws ReportGenerationLimitExceededException, AwsServiceException, SdkClientException, IamException
Generates a report for service last accessed data for AWS Organizations. You can generate a report for any entities (organization root, organizational unit, or account) or policies in your organization.
To call this operation, you must be signed in using your AWS Organizations management account credentials. You can use your long-term IAM user or root user credentials, or temporary credentials from assuming an IAM role. SCPs must be enabled for your organization root. You must have the required IAM and AWS Organizations permissions. For more information, see Refining permissions using service last accessed data in the IAM User Guide.
You can generate a service last accessed data report for entities by specifying only the entity's path. This data includes a list of services that are allowed by any service control policies (SCPs) that apply to the entity.
You can generate a service last accessed data report for a policy by specifying an entity's path and an optional AWS Organizations policy ID. This data includes a list of services that are allowed by the specified SCP.
For each service in both report types, the data includes the most recent account activity that the policy allows to account principals in the entity or the entity's children. For important information about the data, reporting period, permissions required, troubleshooting, and supported Regions see Reducing permissions using service last accessed data in the IAM User Guide.
The data includes all attempts to access AWS, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that an account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
This operation returns a JobId
. Use this parameter in the
GetOrganizationsAccessReport
operation to check the status of the report generation. To
check the status of this request, use the JobId
parameter in the
GetOrganizationsAccessReport
operation and test the JobStatus
response
parameter. When the job is complete, you can retrieve the report.
To generate a service last accessed data report for entities, specify an entity path without specifying the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned in the report.
Root – When you specify the organizations root as the entity, the resulting report lists all of the services allowed by SCPs that are attached to your root. For each service, the report includes data for all accounts in your organization except the management account, because the management account is not limited by SCPs.
OU – When you specify an organizational unit (OU) as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the OU and its parents. For each service, the report includes data for all accounts in the OU or its children. This data excludes the management account, because the management account is not limited by SCPs.
management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. For each service, the report includes data for only the management account.
Account – When you specify another account as the entity, the resulting report lists all of the services allowed by SCPs that are attached to the account and its parents. For each service, the report includes data for only the specified account.
To generate a service last accessed data report for policies, specify an entity path and the optional AWS Organizations policy ID. The type of entity that you specify determines the data returned for each service.
Root – When you specify the root entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in your organization to which the SCP applies. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to any entities in the organization, then the report will return a list of services with no data.
OU – When you specify an OU entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for all accounts in the OU or its children to which the SCP applies. This means that other accounts outside the OU that are affected by the SCP might not be included in the data. This data excludes the management account, because the management account is not limited by SCPs. If the SCP is not attached to the OU or one of its children, the report will return a list of services with no data.
management account – When you specify the management account, the resulting report lists all AWS services, because the management account is not limited by SCPs. If you specify a policy ID in the CLI or API, the policy is ignored. For each service, the report includes data for only the management account.
Account – When you specify another account entity and a policy ID, the resulting report lists all of the services that are allowed by the specified SCP. For each service, the report includes data for only the specified account. This means that other accounts in the organization that are affected by the SCP might not be included in the data. If the SCP is not attached to the account, the report will return a list of services with no data.
Service last accessed data does not use other policy types when determining whether a principal could access a service. These other policy types include identity-based policies, resource-based policies, access control lists, IAM permissions boundaries, and STS assume role policies. It only applies SCP logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
For more information about service last accessed data, see Reducing policy scope by viewing user activity in the IAM User Guide.
This is a convenience which creates an instance of the GenerateOrganizationsAccessReportRequest.Builder
avoiding the need to create one manually via GenerateOrganizationsAccessReportRequest.builder()
generateOrganizationsAccessReportRequest
- A Consumer
that will call methods on GenerateOrganizationsAccessReportRequest.Builder
to
create a request.ReportGenerationLimitExceededException
- The request failed because the maximum number of concurrent requests for this account are already
running.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateServiceLastAccessedDetailsResponse generateServiceLastAccessedDetails(GenerateServiceLastAccessedDetailsRequest generateServiceLastAccessedDetailsRequest) throws NoSuchEntityException, InvalidInputException, AwsServiceException, SdkClientException, IamException
Generates a report that includes details about when an IAM resource (user, group, role, or policy) was last used in an attempt to access AWS services. Recent activity usually appears within four hours. IAM reports activity for the last 365 days, or less if your Region began supporting this feature within the last year. For more information, see Regions where data is tracked.
The service last accessed data includes all attempts to access an AWS API, not just the successful ones. This includes all attempts that were made using the AWS Management Console, the AWS API through any of the SDKs, or any of the command line tools. An unexpected entry in the service last accessed data does not mean that your account has been compromised, because the request might have been denied. Refer to your CloudTrail logs as the authoritative source for information about all API calls and whether they were successful or denied access. For more information, see Logging IAM events with CloudTrail in the IAM User Guide.
The GenerateServiceLastAccessedDetails
operation returns a JobId
. Use this parameter in
the following operations to retrieve the following details from your report:
GetServiceLastAccessedDetails – Use this operation for users, groups, roles, or policies to list every AWS service that the resource could access using permissions policies. For each service, the response includes information about the most recent access attempt.
The JobId
returned by GenerateServiceLastAccessedDetail
must be used by the same role
within a session, or by the same user when used to call GetServiceLastAccessedDetail
.
GetServiceLastAccessedDetailsWithEntities – Use this operation for groups and policies to list information about the associated entities (users or roles) that attempted to access a specific AWS service.
To check the status of the GenerateServiceLastAccessedDetails
request, use the JobId
parameter in the same operations and test the JobStatus
response parameter.
For additional information about the permissions policies that allow an identity (user, group, or role) to access specific services, use the ListPoliciesGrantingServiceAccess operation.
Service last accessed data does not use other policy types when determining whether a resource could access a service. These other policy types include resource-based policies, access control lists, AWS Organizations policies, IAM permissions boundaries, and AWS STS assume role policies. It only applies permissions policy logic. For more about the evaluation of policy types, see Evaluating policies in the IAM User Guide.
For more information about service and action last accessed data, see Reducing permissions using service last accessed data in the IAM User Guide.
generateServiceLastAccessedDetailsRequest
- NoSuchEntityException
- The request was rejected because it referenced a resource entity that does not exist. The error message
describes the resource.InvalidInputException
- The request was rejected because an invalid or out-of-range value was supplied for an input parameter.SdkException
- Base class for all exceptions that can be thrown by the SDK (both service and client). Can be used for
catch all scenarios.SdkClientException
- If any client side error occurs such as an IO related failure, failure to get credentials, etc.IamException
- Base class for all service exceptions. Unknown exceptions will be thrown as an instance of this type.AwsServiceException
default GenerateServiceLastAccessedDetailsResponse generateServiceLastAccessedDetails(Consumer<GenerateServiceLastAccessedDetailsRequest.Builder> generateServiceLastAccessedDetailsRequest) throws NoSuchEntityException, InvalidInputException, AwsServiceException,