From c8e1db31a20e47a2a19005f635eafd96535c9c11 Mon Sep 17 00:00:00 2001 From: awstools Date: Fri, 1 Sep 2023 18:12:34 +0000 Subject: [PATCH] feat(client-identitystore): New Identity Store content for China Region launch --- clients/client-identitystore/README.md | 12 +- .../client-identitystore/src/Identitystore.ts | 12 +- .../src/IdentitystoreClient.ts | 12 +- .../src/commands/DescribeGroupCommand.ts | 5 + .../DescribeGroupMembershipCommand.ts | 5 + .../src/commands/DescribeUserCommand.ts | 5 + .../src/commands/GetGroupIdCommand.ts | 5 + .../commands/GetGroupMembershipIdCommand.ts | 5 + .../src/commands/GetUserIdCommand.ts | 5 + .../src/commands/IsMemberInGroupsCommand.ts | 5 + .../commands/ListGroupMembershipsCommand.ts | 5 + .../ListGroupMembershipsForMemberCommand.ts | 5 + .../src/commands/ListGroupsCommand.ts | 5 + .../src/commands/ListUsersCommand.ts | 5 + .../src/endpoint/ruleset.ts | 2 +- clients/client-identitystore/src/index.ts | 12 +- .../src/models/models_0.ts | 12 +- .../sdk-codegen/aws-models/identitystore.json | 542 ++++++++---------- 18 files changed, 331 insertions(+), 328 deletions(-) diff --git a/clients/client-identitystore/README.md b/clients/client-identitystore/README.md index a1556a332799..a3e1676bc706 100644 --- a/clients/client-identitystore/README.md +++ b/clients/client-identitystore/README.md @@ -6,19 +6,15 @@ AWS SDK for JavaScript Identitystore Client for Node.js, Browser and React Native. -

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of +

The Identity Store service used by IAM Identity Center provides a single place to retrieve all of your identities (users and groups). For more information, see the IAM Identity Center User Guide.

- +

This reference guide describes the identity store operations that you can call +programmatically and includes detailed information about data types and errors.

-

Although AWS Single Sign-On was renamed, the sso and -identitystore API namespaces will continue to retain their original name for -backward compatibility purposes. For more information, see IAM Identity Center rename.

+

IAM Identity Center uses the sso and identitystore API namespaces.

 -

This reference guide describes the identity store operations that you can call -programatically and includes detailed information about data types and errors.

- ## Installing To install the this package, simply type add or install @aws-sdk/client-identitystore diff --git a/clients/client-identitystore/src/Identitystore.ts b/clients/client-identitystore/src/Identitystore.ts index 0a147f90edd1..f3cb9b1bbaaa 100644 --- a/clients/client-identitystore/src/Identitystore.ts +++ b/clients/client-identitystore/src/Identitystore.ts @@ -336,18 +336,14 @@ export interface Identitystore { /** * @public - *

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of + *

The Identity Store service used by IAM Identity Center provides a single place to retrieve all of * your identities (users and groups). For more information, see the IAM Identity Center User * Guide.

- * + *

This reference guide describes the identity store operations that you can call + * programmatically and includes detailed information about data types and errors.

* - *

Although AWS Single Sign-On was renamed, the sso and - * identitystore API namespaces will continue to retain their original name for - * backward compatibility purposes. For more information, see IAM Identity Center rename.

+ *

IAM Identity Center uses the sso and identitystore API namespaces.

* - * - *

This reference guide describes the identity store operations that you can call - * programatically and includes detailed information about data types and errors.

*/ export class Identitystore extends IdentitystoreClient implements Identitystore {} createAggregatedClient(commands, Identitystore); diff --git a/clients/client-identitystore/src/IdentitystoreClient.ts b/clients/client-identitystore/src/IdentitystoreClient.ts index 5bbe94962bc7..c2f881d78315 100644 --- a/clients/client-identitystore/src/IdentitystoreClient.ts +++ b/clients/client-identitystore/src/IdentitystoreClient.ts @@ -316,18 +316,14 @@ export interface IdentitystoreClientResolvedConfig extends IdentitystoreClientRe /** * @public - *

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of + *

The Identity Store service used by IAM Identity Center provides a single place to retrieve all of * your identities (users and groups). For more information, see the IAM Identity Center User * Guide.

- * + *

This reference guide describes the identity store operations that you can call + * programmatically and includes detailed information about data types and errors.

* - *

Although AWS Single Sign-On was renamed, the sso and - * identitystore API namespaces will continue to retain their original name for - * backward compatibility purposes. For more information, see IAM Identity Center rename.

+ *

IAM Identity Center uses the sso and identitystore API namespaces.

* - * - *

This reference guide describes the identity store operations that you can call - * programatically and includes detailed information about data types and errors.

*/ export class IdentitystoreClient extends __Client< __HttpHandlerOptions, diff --git a/clients/client-identitystore/src/commands/DescribeGroupCommand.ts b/clients/client-identitystore/src/commands/DescribeGroupCommand.ts index 8fcaddee7d34..ed41f10223f9 100644 --- a/clients/client-identitystore/src/commands/DescribeGroupCommand.ts +++ b/clients/client-identitystore/src/commands/DescribeGroupCommand.ts @@ -42,6 +42,11 @@ export interface DescribeGroupCommandOutput extends DescribeGroupResponse, __Met * @public *

Retrieves the group metadata and attributes from GroupId in an identity * store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/DescribeGroupMembershipCommand.ts b/clients/client-identitystore/src/commands/DescribeGroupMembershipCommand.ts index 13e776801421..571a98bab82c 100644 --- a/clients/client-identitystore/src/commands/DescribeGroupMembershipCommand.ts +++ b/clients/client-identitystore/src/commands/DescribeGroupMembershipCommand.ts @@ -37,6 +37,11 @@ export interface DescribeGroupMembershipCommandOutput extends DescribeGroupMembe /** * @public *

Retrieves membership metadata and attributes from MembershipId in an identity store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/DescribeUserCommand.ts b/clients/client-identitystore/src/commands/DescribeUserCommand.ts index 2fe77b2d442f..ce0e7b84ccab 100644 --- a/clients/client-identitystore/src/commands/DescribeUserCommand.ts +++ b/clients/client-identitystore/src/commands/DescribeUserCommand.ts @@ -37,6 +37,11 @@ export interface DescribeUserCommandOutput extends DescribeUserResponse, __Metad /** * @public *

Retrieves the user metadata and attributes from the UserId in an identity store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/GetGroupIdCommand.ts b/clients/client-identitystore/src/commands/GetGroupIdCommand.ts index a72814cafe18..e814359c9f84 100644 --- a/clients/client-identitystore/src/commands/GetGroupIdCommand.ts +++ b/clients/client-identitystore/src/commands/GetGroupIdCommand.ts @@ -37,6 +37,11 @@ export interface GetGroupIdCommandOutput extends GetGroupIdResponse, __MetadataB /** * @public *

Retrieves GroupId in an identity store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/GetGroupMembershipIdCommand.ts b/clients/client-identitystore/src/commands/GetGroupMembershipIdCommand.ts index 6da3ef3e3054..89fcacf95477 100644 --- a/clients/client-identitystore/src/commands/GetGroupMembershipIdCommand.ts +++ b/clients/client-identitystore/src/commands/GetGroupMembershipIdCommand.ts @@ -37,6 +37,11 @@ export interface GetGroupMembershipIdCommandOutput extends GetGroupMembershipIdR /** * @public *

Retrieves the MembershipId in an identity store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/GetUserIdCommand.ts b/clients/client-identitystore/src/commands/GetUserIdCommand.ts index 98ee932ce847..2b2bdefc12d4 100644 --- a/clients/client-identitystore/src/commands/GetUserIdCommand.ts +++ b/clients/client-identitystore/src/commands/GetUserIdCommand.ts @@ -37,6 +37,11 @@ export interface GetUserIdCommandOutput extends GetUserIdResponse, __MetadataBea /** * @public *

Retrieves the UserId in an identity store.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/IsMemberInGroupsCommand.ts b/clients/client-identitystore/src/commands/IsMemberInGroupsCommand.ts index 3023594effd7..c49cc8d3a669 100644 --- a/clients/client-identitystore/src/commands/IsMemberInGroupsCommand.ts +++ b/clients/client-identitystore/src/commands/IsMemberInGroupsCommand.ts @@ -41,6 +41,11 @@ export interface IsMemberInGroupsCommandOutput extends IsMemberInGroupsResponse, /** * @public *

Checks the user's membership in all requested groups and returns if the member exists in all queried groups.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/ListGroupMembershipsCommand.ts b/clients/client-identitystore/src/commands/ListGroupMembershipsCommand.ts index 913d410519bd..07220b5c122d 100644 --- a/clients/client-identitystore/src/commands/ListGroupMembershipsCommand.ts +++ b/clients/client-identitystore/src/commands/ListGroupMembershipsCommand.ts @@ -37,6 +37,11 @@ export interface ListGroupMembershipsCommandOutput extends ListGroupMembershipsR /** * @public *

For the specified group in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/ListGroupMembershipsForMemberCommand.ts b/clients/client-identitystore/src/commands/ListGroupMembershipsForMemberCommand.ts index 4e057bce8996..1841758feeb9 100644 --- a/clients/client-identitystore/src/commands/ListGroupMembershipsForMemberCommand.ts +++ b/clients/client-identitystore/src/commands/ListGroupMembershipsForMemberCommand.ts @@ -42,6 +42,11 @@ export interface ListGroupMembershipsForMemberCommandOutput /** * @public *

For the specified member in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/ListGroupsCommand.ts b/clients/client-identitystore/src/commands/ListGroupsCommand.ts index 5b687eaa2d84..a5371a92123b 100644 --- a/clients/client-identitystore/src/commands/ListGroupsCommand.ts +++ b/clients/client-identitystore/src/commands/ListGroupsCommand.ts @@ -43,6 +43,11 @@ export interface ListGroupsCommandOutput extends ListGroupsResponse, __MetadataB * @public *

Lists all groups in the identity store. Returns a paginated list of complete Group objects. * Filtering for a Group by the DisplayName attribute is deprecated. Instead, use the GetGroupId API action.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/commands/ListUsersCommand.ts b/clients/client-identitystore/src/commands/ListUsersCommand.ts index 45b68e58ba5c..986b7ae779f4 100644 --- a/clients/client-identitystore/src/commands/ListUsersCommand.ts +++ b/clients/client-identitystore/src/commands/ListUsersCommand.ts @@ -43,6 +43,11 @@ export interface ListUsersCommandOutput extends ListUsersResponse, __MetadataBea * @public *

Lists all users in the identity store. Returns a paginated list of complete User objects. * Filtering for a User by the UserName attribute is deprecated. Instead, use the GetUserId API action.

+ * + *

If you have administrator access to a member account, you can use this API from the member account. + * Read about member accounts in the + * Organizations User Guide.

+ * * @example * Use a bare-bones client and the command you need to make an API call. * ```javascript diff --git a/clients/client-identitystore/src/endpoint/ruleset.ts b/clients/client-identitystore/src/endpoint/ruleset.ts index 55f1f1e4f688..ab48e918919d 100644 --- a/clients/client-identitystore/src/endpoint/ruleset.ts +++ b/clients/client-identitystore/src/endpoint/ruleset.ts @@ -28,5 +28,5 @@ o={[t]:"booleanEquals",[u]:[true,{[t]:f,[u]:[n,"supportsDualStack"]}]}, p=[j], q=[k], r=[{[v]:"Region"}]; -const _data={version:"1.0",parameters:{Region:g,UseDualStack:h,UseFIPS:h,Endpoint:g},rules:[{conditions:[{[t]:a,[u]:[i]}],type:b,rules:[{conditions:p,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{type:b,rules:[{conditions:q,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:i,properties:l,headers:l},type:d}]}]},{type:b,rules:[{conditions:[{[t]:a,[u]:r}],type:b,rules:[{conditions:[{[t]:"aws.partition",[u]:r,assign:e}],type:b,rules:[{conditions:[j,k],type:b,rules:[{conditions:[m,o],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://identitystore-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:p,type:b,rules:[{conditions:[m],type:b,rules:[{type:b,rules:[{conditions:[{[t]:"stringEquals",[u]:["aws-us-gov",{[t]:f,[u]:[n,"name"]}]}],endpoint:{url:"https://identitystore.{Region}.amazonaws.com",properties:l,headers:l},type:d},{endpoint:{url:"https://identitystore-fips.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:q,type:b,rules:[{conditions:[o],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://identitystore.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{type:b,rules:[{endpoint:{url:"https://identitystore.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]}]}]},{error:"Invalid Configuration: Missing Region",type:c}]}]}; +const _data={version:"1.0",parameters:{Region:g,UseDualStack:h,UseFIPS:h,Endpoint:g},rules:[{conditions:[{[t]:a,[u]:[i]}],type:b,rules:[{conditions:p,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{conditions:q,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:i,properties:l,headers:l},type:d}]},{conditions:[{[t]:a,[u]:r}],type:b,rules:[{conditions:[{[t]:"aws.partition",[u]:r,assign:e}],type:b,rules:[{conditions:[j,k],type:b,rules:[{conditions:[m,o],type:b,rules:[{endpoint:{url:"https://identitystore-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:p,type:b,rules:[{conditions:[m],type:b,rules:[{conditions:[{[t]:"stringEquals",[u]:["aws-us-gov",{[t]:f,[u]:[n,"name"]}]}],endpoint:{url:"https://identitystore.{Region}.amazonaws.com",properties:l,headers:l},type:d},{endpoint:{url:"https://identitystore-fips.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:q,type:b,rules:[{conditions:[o],type:b,rules:[{endpoint:{url:"https://identitystore.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{endpoint:{url:"https://identitystore.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]}]},{error:"Invalid Configuration: Missing Region",type:c}]}; export const ruleSet: RuleSetObject = _data; diff --git a/clients/client-identitystore/src/index.ts b/clients/client-identitystore/src/index.ts index 99a09e9e7027..878b02d5a669 100644 --- a/clients/client-identitystore/src/index.ts +++ b/clients/client-identitystore/src/index.ts @@ -1,19 +1,15 @@ // smithy-typescript generated code /* eslint-disable */ /** - *

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of + *

The Identity Store service used by IAM Identity Center provides a single place to retrieve all of * your identities (users and groups). For more information, see the IAM Identity Center User * Guide.

- * + *

This reference guide describes the identity store operations that you can call + * programmatically and includes detailed information about data types and errors.

* - *

Although AWS Single Sign-On was renamed, the sso and - * identitystore API namespaces will continue to retain their original name for - * backward compatibility purposes. For more information, see IAM Identity Center rename.

+ *

IAM Identity Center uses the sso and identitystore API namespaces.

* * - *

This reference guide describes the identity store operations that you can call - * programatically and includes detailed information about data types and errors.

- * * @packageDocumentation */ export * from "./IdentitystoreClient"; diff --git a/clients/client-identitystore/src/models/models_0.ts b/clients/client-identitystore/src/models/models_0.ts index 060b750c393f..bf9b7224c424 100644 --- a/clients/client-identitystore/src/models/models_0.ts +++ b/clients/client-identitystore/src/models/models_0.ts @@ -126,7 +126,7 @@ export interface UniqueAttribute { /** * @public *

The value of the attribute. This is a Document type. - * This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

+ * This type is not supported by Java V1, Go V1, and older versions of the CLI.

*/ AttributeValue: __DocumentType | undefined; } @@ -202,7 +202,7 @@ export interface AttributeOperation { /** * @public *

The value of the attribute. This is a Document type. - * This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

+ * This type is not supported by Java V1, Go V1, and older versions of the CLI.

*/ AttributeValue?: __DocumentType; } @@ -816,8 +816,8 @@ export interface CreateGroupRequest { /** * @public *

A string containing the name of the group. This value is commonly displayed when the - * group is referenced. "Administrator" and "AWSAdministrators" are reserved names and can't be used for users - * or groups.

+ * group is referenced. Administrator and AWSAdministrators are + * reserved names and can't be used for users or groups.

*/ DisplayName?: string; @@ -1300,8 +1300,8 @@ export interface CreateUserRequest { *

A unique string used to identify the user. The length limit is 128 characters. This * value can consist of letters, accented characters, symbols, numbers, and punctuation. This * value is specified at the time the user is created and stored as an attribute of the user - * object in the identity store. "Administrator" and "AWSAdministrators" are reserved names and can't be used for users - * or groups.

+ * object in the identity store. Administrator and AWSAdministrators + * are reserved names and can't be used for users or groups.

*/ UserName?: string; diff --git a/codegen/sdk-codegen/aws-models/identitystore.json b/codegen/sdk-codegen/aws-models/identitystore.json index 6bad82d6a3b0..377b4ee756e8 100644 --- a/codegen/sdk-codegen/aws-models/identitystore.json +++ b/codegen/sdk-codegen/aws-models/identitystore.json @@ -55,7 +55,7 @@ "name": "identitystore" }, "aws.protocols#awsJson1_1": {}, - "smithy.api#documentation": "

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of\n your identities (users and groups). For more information, see the IAM Identity Center User\n Guide.

\n \n \n

Although AWS Single Sign-On was renamed, the sso and\n identitystore API namespaces will continue to retain their original name for\n backward compatibility purposes. For more information, see IAM Identity Center rename.

\n \n \n

This reference guide describes the identity store operations that you can call\n programatically and includes detailed information about data types and errors.

", + "smithy.api#documentation": "

The Identity Store service used by IAM Identity Center provides a single place to retrieve all of\n your identities (users and groups). For more information, see the IAM Identity Center User\n Guide.

\n

This reference guide describes the identity store operations that you can call\n programmatically and includes detailed information about data types and errors.

\n \n

IAM Identity Center uses the sso and identitystore API namespaces.

\n ", "smithy.api#title": "AWS SSO Identity Store", "smithy.rules#endpointRuleSet": { "version": "1.0", @@ -117,52 +117,56 @@ "type": "error" }, { - "conditions": [], - "type": "tree", - "rules": [ + "conditions": [ { - "conditions": [ + "fn": "booleanEquals", + "argv": [ { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", - "type": "error" - }, - { - "conditions": [], - "endpoint": { - "url": { - "ref": "Endpoint" + "ref": "UseDualStack" }, - "properties": {}, - "headers": {} - }, - "type": "endpoint" + true + ] } - ] + ], + "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", + "type": "error" + }, + { + "conditions": [], + "endpoint": { + "url": { + "ref": "Endpoint" + }, + "properties": {}, + "headers": {} + }, + "type": "endpoint" } ] }, { - "conditions": [], + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "Region" + } + ] + } + ], "type": "tree", "rules": [ { "conditions": [ { - "fn": "isSet", + "fn": "aws.partition", "argv": [ { "ref": "Region" } - ] + ], + "assign": "PartitionResult" } ], "type": "tree", @@ -170,13 +174,22 @@ { "conditions": [ { - "fn": "aws.partition", + "fn": "booleanEquals", "argv": [ { - "ref": "Region" - } - ], - "assign": "PartitionResult" + "ref": "UseFIPS" + }, + true + ] + }, + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true + ] } ], "type": "tree", @@ -186,92 +199,83 @@ { "fn": "booleanEquals", "argv": [ + true, { - "ref": "UseFIPS" - }, - true + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + } ] }, { "fn": "booleanEquals", "argv": [ + true, { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", + "fn": "getAttr", "argv": [ - true, { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - } - ] - }, - { - "fn": "booleanEquals", - "argv": [ - true, - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://identitystore-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } + "ref": "PartitionResult" + }, + "supportsDualStack" ] } ] - }, + } + ], + "type": "tree", + "rules": [ { "conditions": [], - "error": "FIPS and DualStack are enabled, but this partition does not support one or both", - "type": "error" + "endpoint": { + "url": "https://identitystore-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } ] }, + { + "conditions": [], + "error": "FIPS and DualStack are enabled, but this partition does not support one or both", + "type": "error" + } + ] + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseFIPS" + }, + true + ] + } + ], + "type": "tree", + "rules": [ { "conditions": [ { "fn": "booleanEquals", "argv": [ + true, { - "ref": "UseFIPS" - }, - true + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + } ] } ], @@ -280,155 +284,115 @@ { "conditions": [ { - "fn": "booleanEquals", + "fn": "stringEquals", "argv": [ - true, + "aws-us-gov", { "fn": "getAttr", "argv": [ { "ref": "PartitionResult" }, - "supportsFIPS" + "name" ] } ] } ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "stringEquals", - "argv": [ - "aws-us-gov", - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "name" - ] - } - ] - } - ], - "endpoint": { - "url": "https://identitystore.{Region}.amazonaws.com", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - }, - { - "conditions": [], - "endpoint": { - "url": "https://identitystore-fips.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - } - ] + "endpoint": { + "url": "https://identitystore.{Region}.amazonaws.com", + "properties": {}, + "headers": {} + }, + "type": "endpoint" }, { "conditions": [], - "error": "FIPS is enabled but this partition does not support FIPS", - "type": "error" + "endpoint": { + "url": "https://identitystore-fips.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } ] }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" + } + ] + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true + ] + } + ], + "type": "tree", + "rules": [ { "conditions": [ { "fn": "booleanEquals", "argv": [ + true, { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", + "fn": "getAttr", "argv": [ - true, - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ { - "conditions": [], - "endpoint": { - "url": "https://identitystore.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } + "ref": "PartitionResult" + }, + "supportsDualStack" ] } ] - }, - { - "conditions": [], - "error": "DualStack is enabled but this partition does not support DualStack", - "type": "error" } - ] - }, - { - "conditions": [], + ], "type": "tree", "rules": [ { "conditions": [], "endpoint": { - "url": "https://identitystore.{Region}.{PartitionResult#dnsSuffix}", + "url": "https://identitystore.{Region}.{PartitionResult#dualStackDnsSuffix}", "properties": {}, "headers": {} }, "type": "endpoint" } ] + }, + { + "conditions": [], + "error": "DualStack is enabled but this partition does not support DualStack", + "type": "error" } ] + }, + { + "conditions": [], + "endpoint": { + "url": "https://identitystore.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } ] - }, - { - "conditions": [], - "error": "Invalid Configuration: Missing Region", - "type": "error" } ] + }, + { + "conditions": [], + "error": "Invalid Configuration: Missing Region", + "type": "error" } ] }, @@ -443,8 +407,8 @@ }, "params": { "Region": "ap-northeast-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -456,8 +420,8 @@ }, "params": { "Region": "ap-northeast-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -469,8 +433,8 @@ }, "params": { "Region": "ap-south-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -482,8 +446,8 @@ }, "params": { "Region": "ap-southeast-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -495,8 +459,8 @@ }, "params": { "Region": "ap-southeast-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -508,8 +472,8 @@ }, "params": { "Region": "ca-central-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -521,8 +485,8 @@ }, "params": { "Region": "eu-central-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -534,8 +498,8 @@ }, "params": { "Region": "eu-north-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -547,8 +511,8 @@ }, "params": { "Region": "eu-west-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -560,8 +524,8 @@ }, "params": { "Region": "eu-west-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -573,8 +537,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -586,8 +550,8 @@ }, "params": { "Region": "us-east-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -599,8 +563,8 @@ }, "params": { "Region": "us-west-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -612,8 +576,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -625,8 +589,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -638,8 +602,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -651,8 +615,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -664,8 +628,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -677,8 +641,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -690,8 +654,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -703,8 +667,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -716,8 +680,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -729,8 +693,8 @@ }, "params": { "Region": "us-gov-west-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -742,8 +706,8 @@ }, "params": { "Region": "us-gov-west-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -755,8 +719,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -768,8 +732,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -779,8 +743,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -792,8 +756,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -803,8 +767,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -816,8 +780,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -827,8 +791,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -840,8 +804,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -851,8 +815,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -864,8 +828,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -877,8 +841,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, "UseFIPS": false, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -890,8 +854,8 @@ } }, "params": { - "UseDualStack": false, "UseFIPS": false, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -902,8 +866,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, "UseFIPS": true, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -914,8 +878,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, "UseFIPS": false, + "UseDualStack": true, "Endpoint": "https://example.com" } }, @@ -1051,7 +1015,7 @@ "AttributeValue": { "target": "com.amazonaws.identitystore#AttributeValue", "traits": { - "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

" + "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the CLI.

" } } }, @@ -1084,7 +1048,7 @@ "com.amazonaws.identitystore#AttributeValue": { "type": "document", "traits": { - "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

" + "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the CLI.

" } }, "com.amazonaws.identitystore#ConflictException": { @@ -1237,7 +1201,7 @@ "DisplayName": { "target": "com.amazonaws.identitystore#GroupDisplayName", "traits": { - "smithy.api#documentation": "

A string containing the name of the group. This value is commonly displayed when the\n group is referenced. \"Administrator\" and \"AWSAdministrators\" are reserved names and can't be used for users\n or groups.

" + "smithy.api#documentation": "

A string containing the name of the group. This value is commonly displayed when the\n group is referenced. Administrator and AWSAdministrators are\n reserved names and can't be used for users or groups.

" } }, "Description": { @@ -1306,7 +1270,7 @@ "UserName": { "target": "com.amazonaws.identitystore#UserName", "traits": { - "smithy.api#documentation": "

A unique string used to identify the user. The length limit is 128 characters. This\n value can consist of letters, accented characters, symbols, numbers, and punctuation. This\n value is specified at the time the user is created and stored as an attribute of the user\n object in the identity store. \"Administrator\" and \"AWSAdministrators\" are reserved names and can't be used for users\n or groups.

" + "smithy.api#documentation": "

A unique string used to identify the user. The length limit is 128 characters. This\n value can consist of letters, accented characters, symbols, numbers, and punctuation. This\n value is specified at the time the user is created and stored as an attribute of the user\n object in the identity store. Administrator and AWSAdministrators\n are reserved names and can't be used for users or groups.

" } }, "Name": { @@ -1560,7 +1524,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves the group metadata and attributes from GroupId in an identity\n store.

", + "smithy.api#documentation": "

Retrieves the group metadata and attributes from GroupId in an identity\n store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -1581,7 +1545,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves membership metadata and attributes from MembershipId in an identity store.

", + "smithy.api#documentation": "

Retrieves membership metadata and attributes from MembershipId in an identity store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -1709,7 +1673,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves the user metadata and attributes from the UserId in an identity store.

", + "smithy.api#documentation": "

Retrieves the user metadata and attributes from the UserId in an identity store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -1984,7 +1948,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves GroupId in an identity store.

", + "smithy.api#documentation": "

Retrieves GroupId in an identity store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -2043,7 +2007,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves the MembershipId in an identity store.

", + "smithy.api#documentation": "

Retrieves the MembershipId in an identity store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -2109,7 +2073,7 @@ } ], "traits": { - "smithy.api#documentation": "

Retrieves the UserId in an identity store.

", + "smithy.api#documentation": "

Retrieves the UserId in an identity store.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -2402,7 +2366,7 @@ } ], "traits": { - "smithy.api#documentation": "

Checks the user's membership in all requested groups and returns if the member exists in all queried groups.

", + "smithy.api#documentation": "

Checks the user's membership in all requested groups and returns if the member exists in all queried groups.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#readonly": {} } }, @@ -2461,7 +2425,7 @@ } ], "traits": { - "smithy.api#documentation": "

For the specified group in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

", + "smithy.api#documentation": "

For the specified group in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#paginated": { "inputToken": "NextToken", "items": "GroupMemberships", @@ -2488,7 +2452,7 @@ } ], "traits": { - "smithy.api#documentation": "

For the specified member in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

", + "smithy.api#documentation": "

For the specified member in the specified identity store, returns the list of all GroupMembership objects and returns results in paginated form.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#paginated": { "inputToken": "NextToken", "items": "GroupMemberships", @@ -2613,7 +2577,7 @@ } ], "traits": { - "smithy.api#documentation": "

Lists all groups in the identity store. Returns a paginated list of complete Group objects. \n Filtering for a Group by the DisplayName attribute is deprecated. Instead, use the GetGroupId API action.

", + "smithy.api#documentation": "

Lists all groups in the identity store. Returns a paginated list of complete Group objects. \n Filtering for a Group by the DisplayName attribute is deprecated. Instead, use the GetGroupId API action.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#paginated": { "inputToken": "NextToken", "items": "Groups", @@ -2691,7 +2655,7 @@ } ], "traits": { - "smithy.api#documentation": "

Lists all users in the identity store. Returns a paginated list of complete User objects. \n Filtering for a User by the UserName attribute is deprecated. Instead, use the GetUserId API action.

", + "smithy.api#documentation": "

Lists all users in the identity store. Returns a paginated list of complete User objects. \n Filtering for a User by the UserName attribute is deprecated. Instead, use the GetUserId API action.

\n \n

If you have administrator access to a member account, you can use this API from the member account. \n Read about member accounts in the \n Organizations User Guide.

\n ", "smithy.api#paginated": { "inputToken": "NextToken", "items": "Users", @@ -2826,7 +2790,7 @@ "min": 1, "max": 65535 }, - "smithy.api#pattern": "^[-a-zA-Z0-9+=/:]*$" + "smithy.api#pattern": "^[-a-zA-Z0-9+=/:_]*$" } }, "com.amazonaws.identitystore#PhoneNumber": { @@ -3028,7 +2992,7 @@ "AttributeValue": { "target": "com.amazonaws.identitystore#AttributeValue", "traits": { - "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

", + "smithy.api#documentation": "

The value of the attribute. This is a Document type.\n This type is not supported by Java V1, Go V1, and older versions of the CLI.

", "smithy.api#required": {} } }