String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String accessKeyId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String status
Active means the key is
valid for API calls, while Inactive means it is not.
Constraints:
Allowed Values: Active, Inactive
String secretAccessKey
Date createDate
Date lastUsedDate
The user does not have an access key.
An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
There is no sign-in data associated with the user
String serviceName
The user does not have an access key.
An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
There is no sign-in data associated with the user
String region
The user does not have an access key.
An access key exists but has never been used, at least not since IAM started tracking this information on April 22nd, 2015.
There is no sign-in data associated with the user
For more information about AWS regions, see Regions and Endpoints in the Amazon Web Services General Reference.
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String accessKeyId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String status
Active means the key is
valid for API calls; Inactive means it is not.
Constraints:
Allowed Values: Active, Inactive
Date createDate
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
String clientID
Constraints:
Length: 1 - 255
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String oldPassword
Constraints:
Length: 1 - 128
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String newPassword
Constraints:
Length: 1 - 128
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String contextKeyName
aws:SourceIp or
s3:VersionId.
Constraints:
Length: 5 - 256
com.amazonaws.internal.ListWithAutoConstructFlag<T> contextKeyValues
Condition element in an input policy.String contextKeyType
ContextKeyValues parameter.
Constraints:
Allowed Values: string, stringList, numeric, numericList, boolean, booleanList, ip, ipList, binary, binaryList, date, dateList
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
AccessKey accessKey
String accountAlias
Constraints:
Length: 3 - 63
Pattern: ^[a-z0-9](([a-z0-9]|-(?!-))*[a-z0-9])?$
String path
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
Group group
String instanceProfileName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String path
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
InstanceProfile instanceProfile
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String password
Constraints:
Length: 1 - 128
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
Boolean passwordResetRequired
LoginProfile loginProfile
String url
iss claim in the provider's
OpenID Connect ID tokens. Per the OIDC standard, path components are
allowed but query parameters are not. Typically the URL consists of
only a host name, like "https://server.example.org" or
"https://example.com". You cannot register the same provider multiple times in a single AWS account. If you try to submit a URL that has already been used for an OpenID Connect provider in the AWS account, you will get an error.
Constraints:
Length: 1 - 255
com.amazonaws.internal.ListWithAutoConstructFlag<T> clientIDList
client_id parameter on OAuth requests.) You can register multiple client IDs with the same provider. For example, you might have multiple applications that use the same OIDC provider. You cannot register more than 100 client IDs with a single IAM OIDC provider.
There is no defined format for a client ID. The
CreateOpenIDConnectProviderRequest action accepts client
IDs up to 255 characters long.
com.amazonaws.internal.ListWithAutoConstructFlag<T> thumbprintList
The server certificate thumbprint is the hex-encoded SHA-1 hash value of the X.509 certificate used by the domain where the OpenID Connect provider makes its keys available. It is always a 40-character string.
You must provide at least one thumbprint when creating an IAM OIDC
provider. For example, if the OIDC provider is
server.example.com and the provider stores its keys at
"https://keys.server.example.com/openid-connect", the thumbprint
string would be the hex-encoded SHA-1 hash value of the certificate
used by https://keys.server.example.com.
For more information about obtaining the OIDC provider's thumbprint, see Obtaining the Thumbprint for an OpenID Connect Provider in the IAM User Guide.
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String path
For more information about paths, see IAM Identifiers in the IAM User Guide.
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String description
Typically used to store information about the permissions defined in the policy. For example, "Grants access to production DynamoDB tables."
The policy description is immutable. After a value is assigned, it cannot be changed.
Constraints:
Length: 0 - 1000
Policy policy
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
Boolean setAsDefault
When this parameter is true, the new policy version
becomes the operative version; that is, the version that is in effect
for the IAM users, groups, and roles that the policy is attached to.
For more information about managed policy versions, see Versioning for Managed Policies in the IAM User Guide.
PolicyVersion policyVersion
String path
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String assumeRolePolicyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
Role role
String sAMLMetadataDocument
For more information, see About SAML 2.0-based Federation in the IAM User Guide
Constraints:
Length: 1000 - 10000000
String name
Constraints:
Length: 1 - 128
Pattern: [\w._-]+
String sAMLProviderArn
Constraints:
Length: 20 - 2048
String path
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
User user
String path
This parameter is optional. If it is not included, it defaults to a slash (/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String virtualMFADeviceName
Constraints:
Length: 1 -
Pattern: [\w+=,.@-]+
VirtualMFADevice virtualMFADevice
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String serialNumber
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
String accountAlias
Constraints:
Length: 3 - 63
Pattern: ^[a-z0-9](([a-z0-9]|-(?!-))*[a-z0-9])?$
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String instanceProfileName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String versionId
For more information about managed policy versions, see Versioning for Managed Policies in the IAM User Guide.
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sAMLProviderArn
Constraints:
Length: 20 - 2048
String serverCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String serialNumber
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String serialNumber
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
String authenticationCode1
Constraints:
Length: 6 - 6
Pattern: [\d]+
String authenticationCode2
Constraints:
Length: 6 - 6
Pattern: [\d]+
String evalActionName
Constraints:
Length: 3 - 128
String evalResourceName
Constraints:
Length: 1 - 2048
String evalDecision
Constraints:
Allowed Values: allowed, explicitDeny, implicitDeny
com.amazonaws.internal.ListWithAutoConstructFlag<T> matchedStatements
com.amazonaws.internal.ListWithAutoConstructFlag<T> missingContextValues
If the response includes any keys in this list, then the reported results might be untrustworthy because the simulation could not completely evaluate all of the conditions specified in the policies that would occur in a real world request.
Map<K,V> evalDecisionDetails
com.amazonaws.internal.ListWithAutoConstructFlag<T> resourceSpecificResults
String accessKeyId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
AccessKeyLastUsed accessKeyLastUsed
com.amazonaws.internal.ListWithAutoConstructFlag<T> filter
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> userDetailList
com.amazonaws.internal.ListWithAutoConstructFlag<T> groupDetailList
com.amazonaws.internal.ListWithAutoConstructFlag<T> roleDetailList
com.amazonaws.internal.ListWithAutoConstructFlag<T> policies
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
PasswordPolicy passwordPolicy
This data type is used as a response element in the GetAccountPasswordPolicy action.
Map<K,V> summaryMap
SummaryMap contains the following
keys:
AccessKeysPerUserQuota
The maximum number of active access keys allowed for each IAM user.
AccountAccessKeysPresent
This value is 1 if the AWS account (root) has an access key, otherwise it is 0.
AccountMFAEnabled
This value is 1 if the AWS account (root) has an MFA device assigned, otherwise it is 0.
AccountSigningCertificatesPresent
This value is 1 if the AWS account (root) has a signing certificate, otherwise it is 0.
AssumeRolePolicySizeQuota
The maximum allowed size for assume role policy documents (trust policies), in non-whitespace characters.
AttachedPoliciesPerGroupQuota
The maximum number of managed policies that can be attached to an IAM group.
AttachedPoliciesPerRoleQuota
The maximum number of managed policies that can be attached to an IAM role.
AttachedPoliciesPerUserQuota
The maximum number of managed policies that can be attached to an IAM user.
GroupPolicySizeQuota
The maximum allowed size for the aggregate of all inline policies embedded in an IAM group, in non-whitespace characters.
Groups
The number of IAM groups in the AWS account.
GroupsPerUserQuota
The maximum number of IAM groups each IAM user can belong to.
GroupsQuota
The maximum number of IAM groups allowed in the AWS account.
InstanceProfiles
The number of instance profiles in the AWS account.
InstanceProfilesQuota
The maximum number of instance profiles allowed in the AWS account.
MFADevices
The number of MFA devices in the AWS account, including those assigned and unassigned.
MFADevicesInUse
The number of MFA devices that have been assigned to an IAM user or to the AWS account (root).
Policies
The number of customer managed policies in the AWS account.
PoliciesQuota
The maximum number of customer managed policies allowed in the AWS account.
PolicySizeQuota
The maximum allowed size of a customer managed policy, in non-whitespace characters.
PolicyVersionsInUse
The number of managed policies that are attached to IAM users, groups, or roles in the AWS account.
PolicyVersionsInUseQuota
The maximum number of managed policies that can be attached to IAM users, groups, or roles in the AWS account.
Providers
The number of identity providers in the AWS account.
RolePolicySizeQuota
The maximum allowed size for the aggregate of all inline policies (access policies, not the trust policy) embedded in an IAM role, in non-whitespace characters.
Roles
The number of IAM roles in the AWS account.
RolesQuota
The maximum number of IAM roles allowed in the AWS account.
ServerCertificates
The number of server certificates in the AWS account.
ServerCertificatesQuota
The maximum number of server certificates allowed in the AWS account.
SigningCertificatesPerUserQuota
The maximum number of X.509 signing certificates allowed for each IAM user.
UserPolicySizeQuota
The maximum allowed size for the aggregate of all inline policies embedded in an IAM user, in non-whitespace characters.
Users
The number of IAM users in the AWS account.
UsersQuota
The maximum number of IAM users allowed in the AWS account.
VersionsPerPolicyQuota
The maximum number of policy versions allowed for each managed policy.
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyInputList
Condition elements. Each document is specified as a
string containing the complete, valid JSON text of an IAM policy.com.amazonaws.internal.ListWithAutoConstructFlag<T> contextKeyNames
Condition
elements of the input policies.String policySourceArn
Constraints:
Length: 20 - 2048
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyInputList
Condition elements.com.amazonaws.internal.ListWithAutoConstructFlag<T> contextKeyNames
Condition
elements of the input policies.ByteBuffer content
String reportFormat
Constraints:
Allowed Values: text/csv
Date generatedTime
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
Group group
com.amazonaws.internal.ListWithAutoConstructFlag<T> users
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String instanceProfileName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
InstanceProfile instanceProfile
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
LoginProfile loginProfile
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
String url
Constraints:
Length: 1 - 255
com.amazonaws.internal.ListWithAutoConstructFlag<T> clientIDList
com.amazonaws.internal.ListWithAutoConstructFlag<T> thumbprintList
Date createDate
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
Policy policy
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String versionId
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
PolicyVersion policyVersion
For more information about managed policy versions, see Versioning for Managed Policies in the IAM User Guide.
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
Role role
String sAMLProviderArn
Constraints:
Length: 20 - 2048
String sAMLMetadataDocument
Constraints:
Length: 1000 - 10000000
Date createDate
Date validUntil
String serverCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
ServerCertificate serverCertificate
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sSHPublicKeyId
Constraints:
Length: 20 - 128
Pattern: [\w]+
String encoding
SSH. To
retrieve the public key in PEM format, use PEM.
Constraints:
Allowed Values: SSH, PEM
SSHPublicKey sSHPublicKey
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String userName
This parameter is optional. If it is not included, it defaults to the user making the request.
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
User user
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String groupId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
Constraints:
Length: 20 - 2048
Date createDate
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String groupId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
Date createDate
com.amazonaws.internal.ListWithAutoConstructFlag<T> groupPolicyList
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedManagedPolicies
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String instanceProfileName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String instanceProfileId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
Constraints:
Length: 20 - 2048
Date createDate
com.amazonaws.internal.ListWithAutoConstructFlag<T> roles
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> accessKeyMetadata
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> accountAliases
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String pathPrefix
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedPolicies
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String pathPrefix
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedPolicies
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String pathPrefix
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedPolicies
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String entityFilter
For example, when
EntityFilter is Role, only the roles that
are attached to the specified policy are returned. This parameter is
optional. If it is not included, all attached entities (users, groups,
and roles) are returned.
Constraints:
Allowed Values: User, Role, Group, LocalManagedPolicy, AWSManagedPolicy
String pathPrefix
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyGroups
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyUsers
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyRoles
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyNames
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> groups
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String pathPrefix
/division_abc/subdivision_xyz/ gets all groups whose path
starts with /division_abc/subdivision_xyz/. This parameter is optional. If it is not included, it defaults to a slash (/), listing all groups.
Constraints:
Length: 1 - 512
Pattern: \u002F[\u0021-\u007F]*
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> groups
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> instanceProfiles
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String pathPrefix
/application_abc/component_xyz/ gets all instance
profiles whose path starts with
/application_abc/component_xyz/. This parameter is optional. If it is not included, it defaults to a slash (/), listing all instance profiles.
Constraints:
Length: 1 - 512
Pattern: \u002F[\u0021-\u007F]*
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> instanceProfiles
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> mFADevices
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> openIDConnectProviderList
String scope
To list only AWS
managed policies, set Scope to AWS. To list
only the customer managed policies in your AWS account, set
Scope to Local.
This parameter is
optional. If it is not included, or if it is set to All,
all policies are returned.
Constraints:
Allowed Values: All, AWS, Local
Boolean onlyAttached
When
OnlyAttached is true, the returned list
contains only the policies that are attached to a user, group, or
role. When OnlyAttached is false, or when
the parameter is not included, all policies are returned.
String pathPrefix
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> policies
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> versions
For more information about managed policy versions, see Versioning for Managed Policies in the IAM User Guide.
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyNames
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String pathPrefix
/application_abc/component_xyz/ gets all roles whose path
starts with /application_abc/component_xyz/. This parameter is optional. If it is not included, it defaults to a slash (/), listing all roles.
Constraints:
Length: 1 - 512
Pattern: \u002F[\u0021-\u007F]*
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> roles
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> sAMLProviderList
String pathPrefix
/company/servercerts would get all server certificates
for which the path starts with /company/servercerts. This parameter is optional. If it is not included, it defaults to a slash (/), listing all server certificates.
Constraints:
Length: 1 - 512
Pattern: \u002F[\u0021-\u007F]*
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> serverCertificateMetadataList
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> certificates
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> sSHPublicKeys
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyNames
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String pathPrefix
/division_abc/subdivision_xyz/, which would get all user
names whose path starts with
/division_abc/subdivision_xyz/. This parameter is optional. If it is not included, it defaults to a slash (/), listing all user names.
Constraints:
Length: 1 - 512
Pattern: \u002F[\u0021-\u007F]*
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> users
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String assignmentStatus
AssignmentStatus, the action defaults to
Any which lists both assigned and unassigned virtual MFA
devices.
Constraints:
Allowed Values: Assigned, Unassigned, Any
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
com.amazonaws.internal.ListWithAutoConstructFlag<T> virtualMFADevices
AssignmentStatus value that was passed in the request.Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
Date createDate
Boolean passwordResetRequired
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyId
For more information about IDs, see IAM Identifiers in the Using IAM guide.
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String path
For more information about paths, see IAM Identifiers in the Using IAM guide.
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String defaultVersionId
For more information about policy versions, see Versioning for Managed Policies in the Using IAM guide.
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
Integer attachmentCount
Boolean isAttachable
String description
Constraints:
Length: 0 - 1000
Date createDate
Date updateDate
When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyVersionList
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String serialNumber
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
Date enableDate
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
Integer minimumPasswordLength
Constraints:
Range: 6 - 128
Boolean requireSymbols
Boolean requireNumbers
Boolean requireUppercaseCharacters
Boolean requireLowercaseCharacters
Boolean allowUsersToChangePassword
Boolean expirePasswords
Integer maxPasswordAge
Constraints:
Range: 1 - 1095
Integer passwordReusePrevention
Constraints:
Range: 1 - 24
Boolean hardExpiry
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyId
For more information about IDs, see IAM Identifiers in the Using IAM guide.
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String path
For more information about paths, see IAM Identifiers in the Using IAM guide.
Constraints:
Pattern: ((/[A-Za-z0-9\.,\+@=_-]+)*)/
String defaultVersionId
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
Integer attachmentCount
Boolean isAttachable
String description
This element is included in the response to the GetPolicy operation. It is not included in the response to the ListPolicies operation.
Constraints:
Length: 0 - 1000
Date createDate
Date updateDate
When a policy has only one version, this field contains the date and time when the policy was created. When a policy has more than one version, this field contains the date and time when the most recent policy version was created.
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String document
The policy document is returned in the response to the GetPolicyVersion and GetAccountAuthorizationDetails operations. It is not returned in the response to the CreatePolicyVersion or ListPolicyVersions operations.
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String versionId
Policy version identifiers
always begin with v (always lowercase). When a policy is
created, the first policy version is v1.
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
Boolean isDefaultVersion
Date createDate
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String policyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
String clientID
Constraints:
Length: 1 - 255
String evalResourceName
Constraints:
Length: 1 - 2048
String evalResourceDecision
EvalResourceName.
Constraints:
Allowed Values: allowed, explicitDeny, implicitDeny
com.amazonaws.internal.ListWithAutoConstructFlag<T> matchedStatements
com.amazonaws.internal.ListWithAutoConstructFlag<T> missingContextValues
Map<K,V> evalDecisionDetails
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String serialNumber
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
String authenticationCode1
Constraints:
Length: 6 - 6
Pattern: [\d]+
String authenticationCode2
Constraints:
Length: 6 - 6
Pattern: [\d]+
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String roleId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
Constraints:
Length: 20 - 2048
Date createDate
String assumeRolePolicyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String roleName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String roleId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
Date createDate
String assumeRolePolicyDocument
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> instanceProfileList
com.amazonaws.internal.ListWithAutoConstructFlag<T> rolePolicyList
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedManagedPolicies
ServerCertificateMetadata serverCertificateMetadata
String certificateBody
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String certificateChain
Constraints:
Length: 1 - 2097152
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String serverCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String serverCertificateId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
Constraints:
Length: 20 - 2048
Date uploadDate
Date expiration
String policyArn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
String versionId
For more information about managed policy versions, see Versioning for Managed Policies in the IAM User Guide.
Constraints:
Pattern: v[1-9][0-9]*(\.[A-Za-z0-9-]*)?
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String certificateId
Constraints:
Length: 24 - 128
Pattern: [\w]+
String certificateBody
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String status
Active means the
key is valid for API calls, while Inactive means it is
not.
Constraints:
Allowed Values: Active, Inactive
Date uploadDate
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyInputList
ResourcePolicy parameter. The policies cannot be
"scope-down" policies, such as you could include in a call to GetFederationToken
or one of the AssumeRole
APIs to restrict what a user can do while using the temporary
credentials.com.amazonaws.internal.ListWithAutoConstructFlag<T> actionNames
iam:CreateUser.com.amazonaws.internal.ListWithAutoConstructFlag<T> resourceArns
*
(all resources). Each API in the ActionNames parameter is
evaluated for each resource in this list. The simulation determines
the access result (allowed or denied) of each combination and reports
it in the response. The simulation does not automatically retrieve
policies for the specified resources. If you want to include a
resource policy in the simulation, then you must include the policy as
a string in the ResourcePolicy parameter.
If you
include a ResourcePolicy, then it must be applicable to
all of the resources included in the simulation or you receive an
invalid input error.
String resourcePolicy
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String resourceOwner
ResourceOwner is specified, it is
also used as the account owner of any ResourcePolicy
included in the simulation. If the ResourceOwner
parameter is not specified, then the owner of the resources and the
resource policy defaults to the account of the identity provided in
CallerArn. This parameter is required only if you specify
a resource-based policy and account that owns the resource is
different from the account that owns the simulated calling user
CallerArn.
Constraints:
Length: 1 - 2048
String callerArn
CallerArn is required if you include a
ResourcePolicy so that the policy's
Principal element has a value to use in evaluating the
policy. You can specify only the ARN of an IAM user. You cannot specify the ARN of an assumed role, federated user, or a service principal.
Constraints:
Length: 1 - 2048
com.amazonaws.internal.ListWithAutoConstructFlag<T> contextEntries
Condition
element in one of the simulated IAM permission policies, the
corresponding value is supplied.String resourceHandlingOption
Each of the EC2 scenarios requires that you specify instance, image, and security-group resources. If your scenario includes an EBS volume, then you must specify that volume as a resource. If the EC2 scenario includes VPC, then you must supply the network-interface resource. If it includes an IP subnet, then you must specify the subnet resource. For more information on the EC2 scenario options, see Supported Platforms in the AWS EC2 User Guide.
EC2-Classic-InstanceStore
instance, image, security-group
EC2-Classic-EBS
instance, image, security-group, volume
EC2-VPC-InstanceStore
instance, image, security-group, network-interface
EC2-VPC-InstanceStore-Subnet
instance, image, security-group, network-interface, subnet
EC2-VPC-EBS
instance, image, security-group, network-interface, volume
EC2-VPC-EBS-Subnet
instance, image, security-group, network-interface, subnet, volume
Constraints:
Length: 1 - 64
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> evaluationResults
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String policySourceArn
Constraints:
Length: 20 - 2048
com.amazonaws.internal.ListWithAutoConstructFlag<T> policyInputList
com.amazonaws.internal.ListWithAutoConstructFlag<T> actionNames
iam:CreateUser.com.amazonaws.internal.ListWithAutoConstructFlag<T> resourceArns
*
(all resources). Each API in the ActionNames parameter is
evaluated for each resource in this list. The simulation determines
the access result (allowed or denied) of each combination and reports
it in the response. The simulation does not automatically retrieve
policies for the specified resources. If you want to include a
resource policy in the simulation, then you must include the policy as
a string in the ResourcePolicy parameter.
String resourcePolicy
Constraints:
Length: 1 - 131072
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String resourceOwner
ResourceOwner is specified, it is
also used as the account owner of any ResourcePolicy
included in the simulation. If the ResourceOwner
parameter is not specified, then the owner of the resources and the
resource policy defaults to the account of the identity provided in
CallerArn. This parameter is required only if you specify
a resource-based policy and account that owns the resource is
different from the account that owns the simulated calling user
CallerArn.
Constraints:
Length: 1 - 2048
String callerArn
CallerArn, it
defaults to the ARN of the user that you specify in
PolicySourceArn, if you specified a user. If you include
both a PolicySourceArn (for example,
arn:aws:iam::123456789012:user/David) and a
CallerArn (for example,
arn:aws:iam::123456789012:user/Bob), the result is that
you simulate calling the APIs as Bob, as if Bob had David's policies.
You can specify only the ARN of an IAM user. You cannot specify the ARN of an assumed role, federated user, or a service principal.
CallerArn is required if you include a
ResourcePolicy and the PolicySourceArn is
not the ARN for an IAM user. This is required so that the
resource-based policy's Principal element has a value to
use in evaluating the policy.
Constraints:
Length: 1 - 2048
com.amazonaws.internal.ListWithAutoConstructFlag<T> contextEntries
Condition
element in one of the simulated policies, the corresponding value is
supplied.String resourceHandlingOption
Each of the EC2 scenarios requires that you specify instance, image, and security-group resources. If your scenario includes an EBS volume, then you must specify that volume as a resource. If the EC2 scenario includes VPC, then you must supply the network-interface resource. If it includes an IP subnet, then you must specify the subnet resource. For more information on the EC2 scenario options, see Supported Platforms in the AWS EC2 User Guide.
EC2-Classic-InstanceStore
instance, image, security-group
EC2-Classic-EBS
instance, image, security-group, volume
EC2-VPC-InstanceStore
instance, image, security-group, network-interface
EC2-VPC-InstanceStore-Subnet
instance, image, security-group, network-interface, subnet
EC2-VPC-EBS
instance, image, security-group, network-interface, volume
EC2-VPC-EBS-Subnet
instance, image, security-group, network-interface, subnet, volume
Constraints:
Length: 1 - 64
Integer maxItems
IsTruncated response element
is true. This parameter is optional. If you do not
include it, it defaults to 100. Note that IAM might return fewer
results, even when there are more results available. In that case, the
IsTruncated response element returns true
and Marker contains a value to include in the subsequent
call that tells the service where to continue from.
Constraints:
Range: 1 - 1000
String marker
Marker element in the response that
you received to indicate where the next call should start.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
com.amazonaws.internal.ListWithAutoConstructFlag<T> evaluationResults
Boolean isTruncated
Marker request parameter to retrieve more
items. Note that IAM might return fewer than the MaxItems
number of results even when there are more results available. We
recommend that you check IsTruncated after every call to
ensure that you receive all of your results.String marker
IsTruncated is true, this element is
present and contains the value to use for the Marker
parameter in a subsequent pagination request.
Constraints:
Length: 1 - 320
Pattern: [\u0020-\u00FF]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sSHPublicKeyId
Constraints:
Length: 20 - 128
Pattern: [\w]+
String fingerprint
Constraints:
Length: 48 - 48
Pattern: [:\w]+
String sSHPublicKeyBody
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String status
Active means the key
can be used for authentication with an AWS CodeCommit repository.
Inactive means the key cannot be used.
Constraints:
Allowed Values: Active, Inactive
Date uploadDate
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sSHPublicKeyId
Constraints:
Length: 20 - 128
Pattern: [\w]+
String status
Active means the key
can be used for authentication with an AWS CodeCommit repository.
Inactive means the key cannot be used.
Constraints:
Allowed Values: Active, Inactive
Date uploadDate
String sourcePolicyId
String sourcePolicyType
Constraints:
Allowed Values: user, group, role, aws-managed, user-managed, resource, none
Position startPosition
Statement in
an IAM policy.Position endPosition
Statement in an IAM
policy.String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String accessKeyId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String status
Active means the key can be used for API calls to AWS,
while Inactive means the key cannot be used.
Constraints:
Allowed Values: Active, Inactive
Integer minimumPasswordLength
Default value: 6
Constraints:
Range: 6 - 128
Boolean requireSymbols
! @ # $ % ^ & * ( ) _ + - = [ ] { } | '
Default value: false
Boolean requireNumbers
Default value: false
Boolean requireUppercaseCharacters
Default value: false
Boolean requireLowercaseCharacters
Default value: false
Boolean allowUsersToChangePassword
Default value: false
Integer maxPasswordAge
Default value: 0
Constraints:
Range: 1 - 1095
Integer passwordReusePrevention
Default value: 0
Constraints:
Range: 1 - 24
Boolean hardExpiry
Default value: false
String groupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String newPath
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String newGroupName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String password
Constraints:
Length: 1 - 128
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
Boolean passwordResetRequired
String openIDConnectProviderArn
Constraints:
Length: 20 - 2048
com.amazonaws.internal.ListWithAutoConstructFlag<T> thumbprintList
String sAMLMetadataDocument
Constraints:
Length: 1000 - 10000000
String sAMLProviderArn
Constraints:
Length: 20 - 2048
String sAMLProviderArn
Constraints:
Length: 20 - 2048
String serverCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String newPath
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String newServerCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String certificateId
Constraints:
Length: 24 - 128
Pattern: [\w]+
String status
Active
means the certificate can be used for API calls to AWS, while
Inactive means the certificate cannot be used.
Constraints:
Allowed Values: Active, Inactive
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sSHPublicKeyId
Constraints:
Length: 20 - 128
Pattern: [\w]+
String status
Active means
the key can be used for authentication with an AWS CodeCommit
repository. Inactive means the key cannot be used.
Constraints:
Allowed Values: Active, Inactive
String userName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String newPath
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String newUserName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String path
This parameter is
optional. If it is not included, it defaults to a slash (/). --path option. The path must begin with
/cloudfront and must include a trailing slash (for
example, /cloudfront/test/).
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String serverCertificateName
Constraints:
Length: 1 - 128
Pattern: [\w+=,.@-]+
String certificateBody
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String privateKey
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
String certificateChain
Constraints:
Length: 1 - 2097152
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
ServerCertificateMetadata serverCertificateMetadata
SigningCertificate certificate
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String sSHPublicKeyBody
Constraints:
Length: 1 - 16384
Pattern: [\u0009\u000A\u000D\u0020-\u00FF]+
SSHPublicKey sSHPublicKey
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String userId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
Constraints:
Length: 20 - 2048
Date createDate
Date passwordLastUsed
The user does not have a password
The password exists but has never been used (at least not since IAM started tracking this information on October 20th, 2014
there is no sign-in data associated with the user
This value is returned only in the GetUser and ListUsers actions.
String path
Constraints:
Length: 1 - 512
Pattern: (\u002F)|(\u002F[\u0021-\u007F]+\u002F)
String userName
Constraints:
Length: 1 - 64
Pattern: [\w+=,.@-]+
String userId
Constraints:
Length: 16 - 32
Pattern: [\w]+
String arn
For more information about ARNs, go to Amazon Resource Names (ARNs) and AWS Service Namespaces in the AWS General Reference.
Constraints:
Length: 20 - 2048
Date createDate
com.amazonaws.internal.ListWithAutoConstructFlag<T> userPolicyList
com.amazonaws.internal.ListWithAutoConstructFlag<T> groupList
com.amazonaws.internal.ListWithAutoConstructFlag<T> attachedManagedPolicies
String serialNumber
VirtualMFADevice.
Constraints:
Length: 9 - 256
Pattern: [\w+=/:,.@-]+
ByteBuffer base32StringSeed
Base32StringSeed is Base64-encoded.ByteBuffer qRCodePNG
otpauth://totp/$virtualMFADeviceName@$AccountName?secret=$Base32String
where $virtualMFADeviceName is one of the create call
arguments, AccountName is the user name if set
(otherwise, the account ID otherwise), and Base32String
is the seed in Base32 format. The Base32String value is
Base64-encoded.User user
This data type is used as a response element in the following actions:
Date enableDate
Copyright © 2015. All rights reserved.