Module Smaws_Client_SSOAdmin

SSO Admin client library built on EIO.

Types

module Types : sig ... end

Builders

val make_update_trusted_token_issuer_response : unit -> unit
val make_oidc_jwt_update_configuration : ?jwks_retrieval_option:Types.jwks_retrieval_option -> ?identity_store_attribute_path:Types.jmes_path -> ?claim_attribute_path:Types.claim_attribute_path -> unit -> Types.oidc_jwt_update_configuration
val make_update_trusted_token_issuer_request : ?trusted_token_issuer_configuration: Types.trusted_token_issuer_update_configuration -> ?name:Types.trusted_token_issuer_name -> trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.update_trusted_token_issuer_request
val make_update_permission_set_response : unit -> unit
val make_update_permission_set_request : ?relay_state:Types.relay_state -> ?session_duration:Types.duration -> ?description:Types.permission_set_description -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.update_permission_set_request
val make_update_instance_response : unit -> unit
val make_encryption_configuration : ?kms_key_arn:Types.kms_key_arn -> key_type:Types.kms_key_type -> unit -> Types.encryption_configuration
val make_update_instance_request : ?encryption_configuration:Types.encryption_configuration -> ?name:Types.name_type -> instance_arn:Types.instance_arn -> unit -> Types.update_instance_request
val make_update_instance_access_control_attribute_configuration_response : unit -> unit
val make_access_control_attribute_value : source:Types.access_control_attribute_value_source_list -> unit -> Types.access_control_attribute_value
val make_instance_access_control_attribute_configuration : access_control_attributes:Types.access_control_attribute_list -> unit -> Types.instance_access_control_attribute_configuration
val make_update_instance_access_control_attribute_configuration_request : instance_access_control_attribute_configuration: Types.instance_access_control_attribute_configuration -> instance_arn:Types.instance_arn -> unit -> Types.update_instance_access_control_attribute_configuration_request
val make_update_application_response : unit -> unit
val make_sign_in_options : ?application_url:Types.application_url -> origin:Types.sign_in_origin -> unit -> Types.sign_in_options
val make_update_application_portal_options : ?sign_in_options:Types.sign_in_options -> unit -> Types.update_application_portal_options
val make_update_application_request : ?portal_options:Types.update_application_portal_options -> ?status:Types.application_status -> ?description:Types.description -> ?name:Types.application_name_type -> application_arn:Types.application_arn -> unit -> Types.update_application_request
val make_untag_resource_response : unit -> unit
val make_untag_resource_request : ?instance_arn:Types.instance_arn -> tag_keys:Types.tag_key_list -> resource_arn:Types.taggable_resource_arn -> unit -> Types.untag_resource_request
val make_trusted_token_issuer_metadata : ?trusted_token_issuer_type:Types.trusted_token_issuer_type -> ?name:Types.trusted_token_issuer_name -> ?trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.trusted_token_issuer_metadata
val make_oidc_jwt_configuration : jwks_retrieval_option:Types.jwks_retrieval_option -> identity_store_attribute_path:Types.jmes_path -> claim_attribute_path:Types.claim_attribute_path -> issuer_url:Types.trusted_token_issuer_url -> unit -> Types.oidc_jwt_configuration
val make_token_exchange_grant : unit -> unit
val make_tag_resource_response : unit -> unit
val make_tag : value:Types.tag_value -> key:Types.tag_key -> unit -> Types.tag
val make_tag_resource_request : ?instance_arn:Types.instance_arn -> tags:Types.tag_list -> resource_arn:Types.taggable_resource_arn -> unit -> Types.tag_resource_request
val make_scope_details : ?authorized_targets:Types.scope_targets -> scope:Types.scope -> unit -> Types.scope_details
val make_remove_region_response : ?status:Types.region_status -> unit -> Types.remove_region_response
val make_remove_region_request : region_name:Types.region_name -> instance_arn:Types.instance_arn -> unit -> Types.remove_region_request
val make_put_permissions_boundary_to_permission_set_response : unit -> unit
val make_customer_managed_policy_reference : ?path:Types.managed_policy_path -> name:Types.managed_policy_name -> unit -> Types.customer_managed_policy_reference
val make_permissions_boundary : ?managed_policy_arn:Types.managed_policy_arn -> ?customer_managed_policy_reference:Types.customer_managed_policy_reference -> unit -> Types.permissions_boundary
val make_put_permissions_boundary_to_permission_set_request : permissions_boundary:Types.permissions_boundary -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.put_permissions_boundary_to_permission_set_request
val make_put_inline_policy_to_permission_set_response : unit -> unit
val make_put_inline_policy_to_permission_set_request : inline_policy:Types.permission_set_policy_document -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.put_inline_policy_to_permission_set_request
val make_put_application_session_configuration_response : unit -> unit
val make_put_application_session_configuration_request : ?user_background_session_application_status: Types.user_background_session_application_status -> application_arn:Types.application_arn -> unit -> Types.put_application_session_configuration_request
val make_put_application_assignment_configuration_response : unit -> unit
val make_put_application_assignment_configuration_request : assignment_required:Types.assignment_required -> application_arn:Types.application_arn -> unit -> Types.put_application_assignment_configuration_request
val make_permission_set_provisioning_status : ?created_date:Types.date -> ?failure_reason:Types.reason -> ?permission_set_arn:Types.permission_set_arn -> ?account_id:Types.account_id -> ?request_id:Types.uu_id -> ?status:Types.status_values -> unit -> Types.permission_set_provisioning_status
val make_provision_permission_set_response : ?permission_set_provisioning_status:Types.permission_set_provisioning_status -> unit -> Types.provision_permission_set_response
val make_provision_permission_set_request : ?target_id:Types.target_id -> target_type:Types.provision_target_type -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.provision_permission_set_request
val make_list_trusted_token_issuers_response : ?next_token:Types.token -> ?trusted_token_issuers:Types.trusted_token_issuer_list -> unit -> Types.list_trusted_token_issuers_response
val make_list_trusted_token_issuers_request : ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_trusted_token_issuers_request
val make_list_tags_for_resource_response : ?next_token:Types.token -> ?tags:Types.tag_list -> unit -> Types.list_tags_for_resource_response
val make_list_tags_for_resource_request : ?next_token:Types.token -> ?instance_arn:Types.instance_arn -> resource_arn:Types.taggable_resource_arn -> unit -> Types.list_tags_for_resource_request
val make_region_metadata : ?is_primary_region:Types.is_primary_region -> ?added_date:Types.date -> ?status:Types.region_status -> ?region_name:Types.region_name -> unit -> Types.region_metadata
val make_list_regions_response : ?next_token:Types.token -> ?regions:Types.region_metadata_list -> unit -> Types.list_regions_response
val make_list_regions_request : ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_regions_request
val make_list_permission_sets_provisioned_to_account_response : ?permission_sets:Types.permission_set_list -> ?next_token:Types.token -> unit -> Types.list_permission_sets_provisioned_to_account_response
val make_list_permission_sets_provisioned_to_account_request : ?next_token:Types.token -> ?max_results:Types.max_results -> ?provisioning_status:Types.provisioning_status -> account_id:Types.account_id -> instance_arn:Types.instance_arn -> unit -> Types.list_permission_sets_provisioned_to_account_request
val make_list_permission_sets_response : ?next_token:Types.token -> ?permission_sets:Types.permission_set_list -> unit -> Types.list_permission_sets_response
val make_list_permission_sets_request : ?max_results:Types.max_results -> ?next_token:Types.token -> instance_arn:Types.instance_arn -> unit -> Types.list_permission_sets_request
val make_permission_set_provisioning_status_metadata : ?created_date:Types.date -> ?request_id:Types.uu_id -> ?status:Types.status_values -> unit -> Types.permission_set_provisioning_status_metadata
val make_list_permission_set_provisioning_status_response : ?next_token:Types.token -> ?permission_sets_provisioning_status: Types.permission_set_provisioning_status_list -> unit -> Types.list_permission_set_provisioning_status_response
val make_operation_status_filter : ?status:Types.status_values -> unit -> Types.operation_status_filter
val make_list_permission_set_provisioning_status_request : ?filter:Types.operation_status_filter -> ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_permission_set_provisioning_status_request
val make_attached_managed_policy : ?arn:Types.managed_policy_arn -> ?name:Types.name -> unit -> Types.attached_managed_policy
val make_list_managed_policies_in_permission_set_response : ?next_token:Types.token -> ?attached_managed_policies:Types.attached_managed_policy_list -> unit -> Types.list_managed_policies_in_permission_set_response
val make_list_managed_policies_in_permission_set_request : ?next_token:Types.token -> ?max_results:Types.max_results -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.list_managed_policies_in_permission_set_request
val make_instance_metadata : ?regions:Types.region_metadata_list -> ?primary_region:Types.region_name -> ?status_reason:Types.reason -> ?status:Types.instance_status -> ?created_date:Types.date -> ?name:Types.name_type -> ?owner_account_id:Types.account_id -> ?identity_store_id:Types.id -> ?instance_arn:Types.instance_arn -> unit -> Types.instance_metadata
val make_list_instances_response : ?next_token:Types.token -> ?instances:Types.instance_list -> unit -> Types.list_instances_response
val make_list_instances_request : ?next_token:Types.token -> ?max_results:Types.max_results -> unit -> Types.list_instances_request
val make_list_customer_managed_policy_references_in_permission_set_response : ?next_token:Types.token -> ?customer_managed_policy_references: Types.customer_managed_policy_reference_list -> unit -> Types.list_customer_managed_policy_references_in_permission_set_response
val make_list_customer_managed_policy_references_in_permission_set_request : ?next_token:Types.token -> ?max_results:Types.max_results -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.list_customer_managed_policy_references_in_permission_set_request
val make_portal_options : ?visibility:Types.application_visibility -> ?sign_in_options:Types.sign_in_options -> unit -> Types.portal_options
val make_application : ?created_from:Types.region_name -> ?created_date:Types.date -> ?description:Types.description -> ?portal_options:Types.portal_options -> ?status:Types.application_status -> ?identity_store_arn:Types.identity_store_arn -> ?instance_arn:Types.instance_arn -> ?application_account:Types.account_id -> ?name:Types.application_name_type -> ?application_provider_arn:Types.application_provider_arn -> ?application_arn:Types.application_arn -> unit -> Types.application
val make_list_applications_response : ?next_token:Types.token -> ?applications:Types.application_list -> unit -> Types.list_applications_response
val make_list_applications_filter : ?application_provider:Types.application_provider_arn -> ?application_account:Types.account_id -> unit -> Types.list_applications_filter
val make_list_applications_request : ?filter:Types.list_applications_filter -> ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_applications_request
val make_display_data : ?description:Types.description -> ?icon_url:Types.icon_url -> ?display_name:Types.name -> unit -> Types.display_data
val make_resource_server_scope_details : ?detailed_title:Types.description -> ?long_description:Types.description -> unit -> Types.resource_server_scope_details
val make_resource_server_config : ?scopes:Types.resource_server_scopes -> unit -> Types.resource_server_config
val make_application_provider : ?resource_server_config:Types.resource_server_config -> ?display_data:Types.display_data -> ?federation_protocol:Types.federation_protocol -> application_provider_arn:Types.application_provider_arn -> unit -> Types.application_provider
val make_list_application_providers_response : ?next_token:Types.token -> ?application_providers:Types.application_provider_list -> unit -> Types.list_application_providers_response
val make_list_application_providers_request : ?next_token:Types.token -> ?max_results:Types.max_results -> unit -> Types.list_application_providers_request
val make_application_assignment_for_principal : ?principal_type:Types.principal_type -> ?principal_id:Types.principal_id -> ?application_arn:Types.application_arn -> unit -> Types.application_assignment_for_principal
val make_list_application_assignments_for_principal_response : ?next_token:Types.token -> ?application_assignments:Types.application_assignment_list_for_principal -> unit -> Types.list_application_assignments_for_principal_response
val make_list_application_assignments_filter : ?application_arn:Types.application_arn -> unit -> Types.list_application_assignments_filter
val make_list_application_assignments_for_principal_request : ?max_results:Types.max_results -> ?next_token:Types.token -> ?filter:Types.list_application_assignments_filter -> principal_type:Types.principal_type -> principal_id:Types.principal_id -> instance_arn:Types.instance_arn -> unit -> Types.list_application_assignments_for_principal_request
val make_application_assignment : principal_type:Types.principal_type -> principal_id:Types.principal_id -> application_arn:Types.application_arn -> unit -> Types.application_assignment
val make_list_application_assignments_response : ?next_token:Types.token -> ?application_assignments:Types.application_assignments_list -> unit -> Types.list_application_assignments_response
val make_list_application_assignments_request : ?next_token:Types.token -> ?max_results:Types.max_results -> application_arn:Types.application_arn -> unit -> Types.list_application_assignments_request
val make_list_accounts_for_provisioned_permission_set_response : ?next_token:Types.token -> ?account_ids:Types.account_list -> unit -> Types.list_accounts_for_provisioned_permission_set_response
val make_list_accounts_for_provisioned_permission_set_request : ?next_token:Types.token -> ?max_results:Types.max_results -> ?provisioning_status:Types.provisioning_status -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.list_accounts_for_provisioned_permission_set_request
val make_account_assignment_for_principal : ?principal_type:Types.principal_type -> ?principal_id:Types.principal_id -> ?permission_set_arn:Types.permission_set_arn -> ?account_id:Types.account_id -> unit -> Types.account_assignment_for_principal
val make_list_account_assignments_for_principal_response : ?next_token:Types.token -> ?account_assignments:Types.account_assignment_list_for_principal -> unit -> Types.list_account_assignments_for_principal_response
val make_list_account_assignments_filter : ?account_id:Types.account_id -> unit -> Types.list_account_assignments_filter
val make_list_account_assignments_for_principal_request : ?max_results:Types.max_results -> ?next_token:Types.token -> ?filter:Types.list_account_assignments_filter -> principal_type:Types.principal_type -> principal_id:Types.principal_id -> instance_arn:Types.instance_arn -> unit -> Types.list_account_assignments_for_principal_request
val make_account_assignment : ?principal_id:Types.principal_id -> ?principal_type:Types.principal_type -> ?permission_set_arn:Types.permission_set_arn -> ?account_id:Types.account_id -> unit -> Types.account_assignment
val make_list_account_assignments_response : ?next_token:Types.token -> ?account_assignments:Types.account_assignment_list -> unit -> Types.list_account_assignments_response
val make_list_account_assignments_request : ?next_token:Types.token -> ?max_results:Types.max_results -> permission_set_arn:Types.permission_set_arn -> account_id:Types.target_id -> instance_arn:Types.instance_arn -> unit -> Types.list_account_assignments_request
val make_account_assignment_operation_status_metadata : ?created_date:Types.date -> ?request_id:Types.uu_id -> ?status:Types.status_values -> unit -> Types.account_assignment_operation_status_metadata
val make_list_account_assignment_deletion_status_response : ?next_token:Types.token -> ?account_assignments_deletion_status: Types.account_assignment_operation_status_list -> unit -> Types.list_account_assignment_deletion_status_response
val make_list_account_assignment_deletion_status_request : ?filter:Types.operation_status_filter -> ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_account_assignment_deletion_status_request
val make_list_account_assignment_creation_status_response : ?next_token:Types.token -> ?account_assignments_creation_status: Types.account_assignment_operation_status_list -> unit -> Types.list_account_assignment_creation_status_response
val make_list_account_assignment_creation_status_request : ?filter:Types.operation_status_filter -> ?next_token:Types.token -> ?max_results:Types.max_results -> instance_arn:Types.instance_arn -> unit -> Types.list_account_assignment_creation_status_request
val make_get_permissions_boundary_for_permission_set_response : ?permissions_boundary:Types.permissions_boundary -> unit -> Types.get_permissions_boundary_for_permission_set_response
val make_get_permissions_boundary_for_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.get_permissions_boundary_for_permission_set_request
val make_get_inline_policy_for_permission_set_response : ?inline_policy:Types.permission_set_policy_document -> unit -> Types.get_inline_policy_for_permission_set_response
val make_get_inline_policy_for_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.get_inline_policy_for_permission_set_request
val make_get_application_session_configuration_response : ?user_background_session_application_status: Types.user_background_session_application_status -> unit -> Types.get_application_session_configuration_response
val make_get_application_session_configuration_request : application_arn:Types.application_arn -> unit -> Types.get_application_session_configuration_request
val make_get_application_assignment_configuration_response : assignment_required:Types.assignment_required -> unit -> Types.get_application_assignment_configuration_response
val make_get_application_assignment_configuration_request : application_arn:Types.application_arn -> unit -> Types.get_application_assignment_configuration_request
val make_detach_managed_policy_from_permission_set_response : unit -> unit
val make_detach_managed_policy_from_permission_set_request : managed_policy_arn:Types.managed_policy_arn -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.detach_managed_policy_from_permission_set_request
val make_detach_customer_managed_policy_reference_from_permission_set_response : unit -> unit
val make_detach_customer_managed_policy_reference_from_permission_set_request : customer_managed_policy_reference:Types.customer_managed_policy_reference -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.detach_customer_managed_policy_reference_from_permission_set_request
val make_describe_trusted_token_issuer_response : ?trusted_token_issuer_configuration:Types.trusted_token_issuer_configuration -> ?trusted_token_issuer_type:Types.trusted_token_issuer_type -> ?name:Types.trusted_token_issuer_name -> ?trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.describe_trusted_token_issuer_response
val make_describe_trusted_token_issuer_request : trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.describe_trusted_token_issuer_request
val make_describe_region_response : ?is_primary_region:Types.is_primary_region -> ?added_date:Types.date -> ?status:Types.region_status -> ?region_name:Types.region_name -> unit -> Types.describe_region_response
val make_describe_region_request : region_name:Types.region_name -> instance_arn:Types.instance_arn -> unit -> Types.describe_region_request
val make_describe_permission_set_provisioning_status_response : ?permission_set_provisioning_status:Types.permission_set_provisioning_status -> unit -> Types.describe_permission_set_provisioning_status_response
val make_describe_permission_set_provisioning_status_request : provision_permission_set_request_id:Types.uu_id -> instance_arn:Types.instance_arn -> unit -> Types.describe_permission_set_provisioning_status_request
val make_permission_set : ?relay_state:Types.relay_state -> ?session_duration:Types.duration -> ?created_date:Types.date -> ?description:Types.permission_set_description -> ?permission_set_arn:Types.permission_set_arn -> ?name:Types.permission_set_name -> unit -> Types.permission_set
val make_describe_permission_set_response : ?permission_set:Types.permission_set -> unit -> Types.describe_permission_set_response
val make_describe_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.describe_permission_set_request
val make_describe_instance_access_control_attribute_configuration_response : ?instance_access_control_attribute_configuration: Types.instance_access_control_attribute_configuration -> ?status_reason: Types.instance_access_control_attribute_configuration_status_reason -> ?status:Types.instance_access_control_attribute_configuration_status -> unit -> Types.describe_instance_access_control_attribute_configuration_response
val make_describe_instance_access_control_attribute_configuration_request : instance_arn:Types.instance_arn -> unit -> Types.describe_instance_access_control_attribute_configuration_request
val make_encryption_configuration_details : ?encryption_status_reason:Types.reason -> ?encryption_status:Types.kms_key_status -> ?kms_key_arn:Types.kms_key_arn -> ?key_type:Types.kms_key_type -> unit -> Types.encryption_configuration_details
val make_describe_instance_response : ?encryption_configuration_details:Types.encryption_configuration_details -> ?status_reason:Types.reason -> ?status:Types.instance_status -> ?created_date:Types.date -> ?name:Types.name_type -> ?owner_account_id:Types.account_id -> ?identity_store_id:Types.id -> ?instance_arn:Types.instance_arn -> unit -> Types.describe_instance_response
val make_describe_instance_request : instance_arn:Types.instance_arn -> unit -> Types.describe_instance_request
val make_describe_application_provider_response : ?resource_server_config:Types.resource_server_config -> ?display_data:Types.display_data -> ?federation_protocol:Types.federation_protocol -> application_provider_arn:Types.application_provider_arn -> unit -> Types.describe_application_provider_response
val make_describe_application_provider_request : application_provider_arn:Types.application_provider_arn -> unit -> Types.describe_application_provider_request
val make_describe_application_assignment_response : ?application_arn:Types.application_arn -> ?principal_id:Types.principal_id -> ?principal_type:Types.principal_type -> unit -> Types.describe_application_assignment_response
val make_describe_application_assignment_request : principal_type:Types.principal_type -> principal_id:Types.principal_id -> application_arn:Types.application_arn -> unit -> Types.describe_application_assignment_request
val make_describe_application_response : ?created_from:Types.region_name -> ?created_date:Types.date -> ?description:Types.description -> ?portal_options:Types.portal_options -> ?status:Types.application_status -> ?identity_store_arn:Types.identity_store_arn -> ?instance_arn:Types.instance_arn -> ?application_account:Types.account_id -> ?name:Types.application_name_type -> ?application_provider_arn:Types.application_provider_arn -> ?application_arn:Types.application_arn -> unit -> Types.describe_application_response
val make_describe_application_request : application_arn:Types.application_arn -> unit -> Types.describe_application_request
val make_account_assignment_operation_status : ?created_date:Types.date -> ?principal_id:Types.principal_id -> ?principal_type:Types.principal_type -> ?permission_set_arn:Types.permission_set_arn -> ?target_type:Types.target_type -> ?target_id:Types.target_id -> ?failure_reason:Types.reason -> ?request_id:Types.uu_id -> ?status:Types.status_values -> unit -> Types.account_assignment_operation_status
val make_describe_account_assignment_deletion_status_response : ?account_assignment_deletion_status:Types.account_assignment_operation_status -> unit -> Types.describe_account_assignment_deletion_status_response
val make_describe_account_assignment_deletion_status_request : account_assignment_deletion_request_id:Types.uu_id -> instance_arn:Types.instance_arn -> unit -> Types.describe_account_assignment_deletion_status_request
val make_describe_account_assignment_creation_status_response : ?account_assignment_creation_status:Types.account_assignment_operation_status -> unit -> Types.describe_account_assignment_creation_status_response
val make_describe_account_assignment_creation_status_request : account_assignment_creation_request_id:Types.uu_id -> instance_arn:Types.instance_arn -> unit -> Types.describe_account_assignment_creation_status_request
val make_delete_trusted_token_issuer_response : unit -> unit
val make_delete_trusted_token_issuer_request : trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.delete_trusted_token_issuer_request
val make_delete_permission_set_response : unit -> unit
val make_delete_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.delete_permission_set_request
val make_delete_permissions_boundary_from_permission_set_response : unit -> unit
val make_delete_permissions_boundary_from_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.delete_permissions_boundary_from_permission_set_request
val make_delete_instance_access_control_attribute_configuration_response : unit -> unit
val make_delete_instance_access_control_attribute_configuration_request : instance_arn:Types.instance_arn -> unit -> Types.delete_instance_access_control_attribute_configuration_request
val make_delete_instance_response : unit -> unit
val make_delete_instance_request : instance_arn:Types.instance_arn -> unit -> Types.delete_instance_request
val make_delete_inline_policy_from_permission_set_response : unit -> unit
val make_delete_inline_policy_from_permission_set_request : permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.delete_inline_policy_from_permission_set_request
val make_delete_application_assignment_response : unit -> unit
val make_delete_application_assignment_request : principal_type:Types.principal_type -> principal_id:Types.principal_id -> application_arn:Types.application_arn -> unit -> Types.delete_application_assignment_request
val make_delete_application_response : unit -> unit
val make_delete_application_request : application_arn:Types.application_arn -> unit -> Types.delete_application_request
val make_delete_account_assignment_response : ?account_assignment_deletion_status:Types.account_assignment_operation_status -> unit -> Types.delete_account_assignment_response
val make_delete_account_assignment_request : principal_id:Types.principal_id -> principal_type:Types.principal_type -> permission_set_arn:Types.permission_set_arn -> target_type:Types.target_type -> target_id:Types.target_id -> instance_arn:Types.instance_arn -> unit -> Types.delete_account_assignment_request
val make_create_trusted_token_issuer_response : ?trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.create_trusted_token_issuer_response
val make_create_trusted_token_issuer_request : ?tags:Types.tag_list -> ?client_token:Types.client_token -> trusted_token_issuer_configuration:Types.trusted_token_issuer_configuration -> trusted_token_issuer_type:Types.trusted_token_issuer_type -> name:Types.trusted_token_issuer_name -> instance_arn:Types.instance_arn -> unit -> Types.create_trusted_token_issuer_request
val make_create_permission_set_response : ?permission_set:Types.permission_set -> unit -> Types.create_permission_set_response
val make_create_permission_set_request : ?tags:Types.tag_list -> ?relay_state:Types.relay_state -> ?session_duration:Types.duration -> ?description:Types.permission_set_description -> instance_arn:Types.instance_arn -> name:Types.permission_set_name -> unit -> Types.create_permission_set_request
val make_create_instance_access_control_attribute_configuration_response : unit -> unit
val make_create_instance_access_control_attribute_configuration_request : instance_access_control_attribute_configuration: Types.instance_access_control_attribute_configuration -> instance_arn:Types.instance_arn -> unit -> Types.create_instance_access_control_attribute_configuration_request
val make_create_instance_response : ?instance_arn:Types.instance_arn -> unit -> Types.create_instance_response
val make_create_instance_request : ?tags:Types.tag_list -> ?client_token:Types.client_token -> ?name:Types.name_type -> unit -> Types.create_instance_request
val make_create_application_assignment_response : unit -> unit
val make_create_application_assignment_request : principal_type:Types.principal_type -> principal_id:Types.principal_id -> application_arn:Types.application_arn -> unit -> Types.create_application_assignment_request
val make_create_application_response : ?identity_store_arn:Types.identity_store_arn -> ?instance_arn:Types.instance_arn -> ?application_arn:Types.application_arn -> unit -> Types.create_application_response
val make_create_application_request : ?client_token:Types.client_token -> ?status:Types.application_status -> ?tags:Types.tag_list -> ?portal_options:Types.portal_options -> ?description:Types.description -> name:Types.application_name_type -> application_provider_arn:Types.application_provider_arn -> instance_arn:Types.instance_arn -> unit -> Types.create_application_request
val make_create_account_assignment_response : ?account_assignment_creation_status:Types.account_assignment_operation_status -> unit -> Types.create_account_assignment_response
val make_create_account_assignment_request : principal_id:Types.principal_id -> principal_type:Types.principal_type -> permission_set_arn:Types.permission_set_arn -> target_type:Types.target_type -> target_id:Types.target_id -> instance_arn:Types.instance_arn -> unit -> Types.create_account_assignment_request
val make_attach_managed_policy_to_permission_set_response : unit -> unit
val make_attach_managed_policy_to_permission_set_request : managed_policy_arn:Types.managed_policy_arn -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.attach_managed_policy_to_permission_set_request
val make_attach_customer_managed_policy_reference_to_permission_set_response : unit -> unit
val make_attach_customer_managed_policy_reference_to_permission_set_request : customer_managed_policy_reference:Types.customer_managed_policy_reference -> permission_set_arn:Types.permission_set_arn -> instance_arn:Types.instance_arn -> unit -> Types.attach_customer_managed_policy_reference_to_permission_set_request
val make_add_region_response : ?status:Types.region_status -> unit -> Types.add_region_response
val make_add_region_request : region_name:Types.region_name -> instance_arn:Types.instance_arn -> unit -> Types.add_region_request
val make_refresh_token_grant : unit -> unit
val make_authorization_code_grant : ?redirect_uris:Types.redirect_uris -> unit -> Types.authorization_code_grant
val make_authorized_token_issuer : ?authorized_audiences:Types.token_issuer_audiences -> ?trusted_token_issuer_arn:Types.trusted_token_issuer_arn -> unit -> Types.authorized_token_issuer
val make_jwt_bearer_grant : ?authorized_token_issuers:Types.authorized_token_issuers -> unit -> Types.jwt_bearer_grant
val make_put_application_grant_request : grant:Types.grant -> grant_type:Types.grant_type -> application_arn:Types.application_arn -> unit -> Types.put_application_grant_request
val make_iam_authentication_method : actor_policy:Types.actor_policy_document -> unit -> Types.iam_authentication_method
val make_put_application_authentication_method_request : authentication_method:Types.authentication_method -> authentication_method_type:Types.authentication_method_type -> application_arn:Types.application_arn -> unit -> Types.put_application_authentication_method_request
val make_put_application_access_scope_request : ?authorized_targets:Types.scope_targets -> application_arn:Types.application_arn -> scope:Types.scope -> unit -> Types.put_application_access_scope_request
val make_grant_item : grant:Types.grant -> grant_type:Types.grant_type -> unit -> Types.grant_item
val make_list_application_grants_response : ?next_token:Types.token -> grants:Types.grants -> unit -> Types.list_application_grants_response
val make_list_application_grants_request : ?next_token:Types.token -> application_arn:Types.application_arn -> unit -> Types.list_application_grants_request
val make_authentication_method_item : ?authentication_method:Types.authentication_method -> ?authentication_method_type:Types.authentication_method_type -> unit -> Types.authentication_method_item
val make_list_application_authentication_methods_response : ?next_token:Types.token -> ?authentication_methods:Types.authentication_methods -> unit -> Types.list_application_authentication_methods_response
val make_list_application_authentication_methods_request : ?next_token:Types.token -> application_arn:Types.application_arn -> unit -> Types.list_application_authentication_methods_request
val make_list_application_access_scopes_response : ?next_token:Types.token -> scopes:Types.scopes -> unit -> Types.list_application_access_scopes_response
val make_list_application_access_scopes_request : ?next_token:Types.token -> ?max_results:Types.max_results -> application_arn:Types.application_arn -> unit -> Types.list_application_access_scopes_request
val make_get_application_grant_response : grant:Types.grant -> unit -> Types.get_application_grant_response
val make_get_application_grant_request : grant_type:Types.grant_type -> application_arn:Types.application_arn -> unit -> Types.get_application_grant_request
val make_get_application_authentication_method_response : ?authentication_method:Types.authentication_method -> unit -> Types.get_application_authentication_method_response
val make_get_application_authentication_method_request : authentication_method_type:Types.authentication_method_type -> application_arn:Types.application_arn -> unit -> Types.get_application_authentication_method_request
val make_get_application_access_scope_response : ?authorized_targets:Types.scope_targets -> scope:Types.scope -> unit -> Types.get_application_access_scope_response
val make_get_application_access_scope_request : scope:Types.scope -> application_arn:Types.application_arn -> unit -> Types.get_application_access_scope_request
val make_delete_application_grant_request : grant_type:Types.grant_type -> application_arn:Types.application_arn -> unit -> Types.delete_application_grant_request
val make_delete_application_authentication_method_request : authentication_method_type:Types.authentication_method_type -> application_arn:Types.application_arn -> unit -> Types.delete_application_authentication_method_request
val make_delete_application_access_scope_request : scope:Types.scope -> application_arn:Types.application_arn -> unit -> Types.delete_application_access_scope_request

Operations

module DeleteApplicationAccessScope : sig ... end

Deletes an IAM Identity Center access scope from an application.

Deletes an authentication method from an application.

module DeleteApplicationGrant : sig ... end

Deletes a grant from an application.

module GetApplicationAccessScope : sig ... end

Retrieves the authorized targets for an IAM Identity Center access scope for an application.

Retrieves details about an authentication method used by an application.

module GetApplicationGrant : sig ... end

Retrieves details about an application grant.

module ListApplicationAccessScopes : sig ... end

Lists the access scopes and authorized targets associated with an application.

Lists all of the authentication methods supported by the specified application.

module ListApplicationGrants : sig ... end

List the grants associated with an application.

module PutApplicationAccessScope : sig ... end

Adds or updates the list of authorized targets for an IAM Identity Center access scope for an application.

Adds or updates an authentication method for an application.

module PutApplicationGrant : sig ... end

Creates a configuration for an application to use grants. Conceptually grants are authorization to request actions related to tokens. This configuration will be used when parties are requesting and receiving tokens during the trusted identity propagation process. For more information on the IAM Identity Center supported grant workflows, see SAML 2.0 and OAuth 2.0.

module AddRegion : sig ... end

Adds a Region to an IAM Identity Center instance. This operation initiates an asynchronous workflow to replicate the IAM Identity Center instance to the target Region. The Region status is set to ADDING at first and changes to ACTIVE when the workflow completes.

Attaches the specified customer managed policy to the specified PermissionSet.

Attaches an Amazon Web Services managed policy ARN to a permission set.

module CreateAccountAssignment : sig ... end

Assigns access to a principal for a specified Amazon Web Services account using a specified permission set.

module CreateApplication : sig ... end

Creates an OAuth 2.0 customer managed application in IAM Identity Center for the given application provider.

module CreateApplicationAssignment : sig ... end

Grant application access to a user or group.

module CreateInstance : sig ... end

Creates an instance of IAM Identity Center for a standalone Amazon Web Services account that is not managed by Organizations or a member Amazon Web Services account in an organization. You can create only one instance per account and across all Amazon Web Services Regions.

Enables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.

module CreatePermissionSet : sig ... end

Creates a permission set within a specified IAM Identity Center instance.

module CreateTrustedTokenIssuer : sig ... end

Creates a connection to a trusted token issuer in an instance of IAM Identity Center. A trusted token issuer enables trusted identity propagation to be used with applications that authenticate outside of Amazon Web Services.

module DeleteAccountAssignment : sig ... end

Deletes a principal's access from a specified Amazon Web Services account using a specified permission set.

module DeleteApplication : sig ... end

Deletes the association with the application. The connected service resource still exists.

module DeleteApplicationAssignment : sig ... end

Revoke application access to an application by deleting application assignments for a user or group.

Deletes the inline policy from a specified permission set.

module DeleteInstance : sig ... end

Deletes the instance of IAM Identity Center. Only the account that owns the instance can call this API. Neither the delegated administrator nor member account can delete the organization instance, but those roles can delete their own instance.

Disables the attributes-based access control (ABAC) feature for the specified IAM Identity Center instance and deletes all of the attribute mappings that have been configured. Once deleted, any attributes that are received from an identity source and any custom attributes you have previously configured will not be passed. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.

Deletes the permissions boundary from a specified PermissionSet.

module DeletePermissionSet : sig ... end

Deletes the specified permission set.

module DeleteTrustedTokenIssuer : sig ... end

Deletes a trusted token issuer configuration from an instance of IAM Identity Center.

Describes the status of the assignment creation request.

Describes the status of the assignment deletion request.

module DescribeApplication : sig ... end

Retrieves the details of an application associated with an instance of IAM Identity Center.

module DescribeApplicationAssignment : sig ... end

Retrieves a direct assignment of a user or group to an application. If the user doesn’t have a direct assignment to the application, the user may still have access to the application through a group. Therefore, don’t use this API to test access to an application for a user. Instead use ListApplicationAssignmentsForPrincipal.

module DescribeApplicationProvider : sig ... end

Retrieves details about a provider that can be used to connect an Amazon Web Services managed application or customer managed application to IAM Identity Center.

module DescribeInstance : sig ... end

Returns the details of an instance of IAM Identity Center. The status can be one of the following:

Returns the list of IAM Identity Center identity store attributes that have been configured to work with attributes-based access control (ABAC) for the specified IAM Identity Center instance. This will not return attributes configured and sent by an external identity provider. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.

module DescribePermissionSet : sig ... end

Gets the details of the permission set.

Describes the status for the given permission set provisioning request.

module DescribeRegion : sig ... end

Retrieves details about a specific Region enabled in an IAM Identity Center instance. Details include the Region name, current status (ACTIVE, ADDING, or REMOVING), the date when the Region was added, and whether it is the primary Region. The request must be made from one of the enabled Regions of the IAM Identity Center instance.

module DescribeTrustedTokenIssuer : sig ... end

Retrieves details about a trusted token issuer configuration stored in an instance of IAM Identity Center. Details include the name of the trusted token issuer, the issuer URL, and the path of the source attribute and the destination attribute for a trusted token issuer configuration.

Detaches the specified customer managed policy from the specified PermissionSet.

Detaches the attached Amazon Web Services managed policy ARN from the specified permission set.

Retrieves the configuration of PutApplicationAssignmentConfiguration.

Retrieves the session configuration for an application in IAM Identity Center.

module GetInlinePolicyForPermissionSet : sig ... end

Obtains the inline policy assigned to the permission set.

Obtains the permissions boundary for a specified PermissionSet.

Lists the status of the Amazon Web Services account assignment creation requests for a specified IAM Identity Center instance.

Lists the status of the Amazon Web Services account assignment deletion requests for a specified IAM Identity Center instance.

module ListAccountAssignments : sig ... end

Lists the assignee of the specified Amazon Web Services account with the specified permission set.

Retrieves a list of the IAM Identity Center associated Amazon Web Services accounts that the principal has access to. This action must be called from the management account containing your organization instance of IAM Identity Center. This action is not valid for account instances of IAM Identity Center.

Lists all the Amazon Web Services accounts where the specified permission set is provisioned.

module ListApplicationAssignments : sig ... end

Lists Amazon Web Services account users that are assigned to an application.

Lists the applications to which a specified principal is assigned. You must provide a filter when calling this action from a member account against your organization instance of IAM Identity Center. A filter is not required when called from the management account against an organization instance of IAM Identity Center, or from a member account against an account instance of IAM Identity Center in the same account.

module ListApplicationProviders : sig ... end

Lists the application providers configured in the IAM Identity Center identity store.

module ListApplications : sig ... end

Lists all applications associated with the instance of IAM Identity Center. When listing applications for an organization instance in the management account, member accounts must use the applicationAccount parameter to filter the list to only applications created from that account. When listing applications for an account instance in the same member account, a filter is not required.

Lists all customer managed policies attached to a specified PermissionSet.

module ListInstances : sig ... end

Lists the details of the organization and account instances of IAM Identity Center that were created in or visible to the account calling this API.

Lists the Amazon Web Services managed policy that is attached to a specified permission set.

Lists the status of the permission set provisioning requests for a specified IAM Identity Center instance.

module ListPermissionSets : sig ... end

Lists the PermissionSets in an IAM Identity Center instance.

Lists all the permission sets that are provisioned to a specified Amazon Web Services account.

module ListRegions : sig ... end

Lists all enabled Regions of an IAM Identity Center instance, including those that are being added or removed. This operation returns Regions with ACTIVE, ADDING, or REMOVING status.

module ListTagsForResource : sig ... end

Lists the tags that are attached to a specified resource.

module ListTrustedTokenIssuers : sig ... end

Lists all the trusted token issuers configured in an instance of IAM Identity Center.

module ProvisionPermissionSet : sig ... end

The process by which a specified permission set is provisioned to the specified target.

Configure how users gain access to an application. If AssignmentsRequired is true (default value), users don’t have access to the application unless an assignment is created using the CreateApplicationAssignment API. If false, all users have access to the application. If an assignment is created using CreateApplicationAssignment., the user retains access if AssignmentsRequired is set to true.

Updates the session configuration for an application in IAM Identity Center.

module PutInlinePolicyToPermissionSet : sig ... end

Attaches an inline policy to a permission set.

Attaches an Amazon Web Services managed or customer managed policy to the specified PermissionSet as a permissions boundary.

module RemoveRegion : sig ... end

Removes an additional Region from an IAM Identity Center instance. This operation initiates an asynchronous workflow to clean up IAM Identity Center resources in the specified additional Region. The Region status is set to REMOVING and the Region record is deleted when the workflow completes. The request must be made from the primary Region. The target Region cannot be the primary Region, and no other add or remove Region workflows can be in progress.

module TagResource : sig ... end

Associates a set of tags with a specified resource.

module UntagResource : sig ... end

Disassociates a set of tags from a specified resource.

module UpdateApplication : sig ... end

Updates application properties.

module UpdateInstance : sig ... end

Update the details for the instance of IAM Identity Center that is owned by the Amazon Web Services account.

Updates the IAM Identity Center identity store attributes that you can use with the IAM Identity Center instance for attributes-based access control (ABAC). When using an external identity provider as an identity source, you can pass attributes through the SAML assertion as an alternative to configuring attributes from the IAM Identity Center identity store. If a SAML assertion passes any of these attributes, IAM Identity Center replaces the attribute value with the value from the IAM Identity Center identity store. For more information about ABAC, see Attribute-Based Access Control in the IAM Identity Center User Guide.

module UpdatePermissionSet : sig ... end

Updates an existing permission set.

module UpdateTrustedTokenIssuer : sig ... end
module Json_serializers : sig ... end
module Json_deserializers : sig ... end