ssoadmin/aws.sdk.kotlin.services.ssoadmin.model

Package-level declarations

Types

These are IAM Identity Center identity store attributes that you can configure for use in attributes-based access control (ABAC). You can create permissions policies that determine who can access your Amazon Web Services resources based upon the configured attribute values. When you enable ABAC and specify AccessControlAttributes, IAM Identity Center passes the attribute values of the authenticated user into IAM for use in policy evaluation.

AccessControlAttributeValue

class AccessControlAttributeValue

The value used for mapping a specified attribute to an identity source. For more information, see Attribute mappings in the IAM Identity Center User Guide.

AccessDeniedException

class AccessDeniedException : SsoAdminException

You do not have sufficient access to perform this action.

AccountAssignment

class AccountAssignment

The assignment that indicates a principal's limited access to a specified Amazon Web Services account with a specified permission set.

AccountAssignmentForPrincipal

class AccountAssignmentForPrincipal

A structure that describes an assignment of an Amazon Web Services account to a principal and the permissions that principal has in the account.

AccountAssignmentOperationStatus

class AccountAssignmentOperationStatus

The status of the creation or deletion operation of an assignment that a principal needs to access an account.

AccountAssignmentOperationStatusMetadata

class AccountAssignmentOperationStatusMetadata

Provides information about the AccountAssignment creation request.

Application

class Application

A structure that describes an application that uses IAM Identity Center for access management.

ApplicationAssignment

class ApplicationAssignment

A structure that describes an assignment of a principal to an application.

ApplicationAssignmentForPrincipal

class ApplicationAssignmentForPrincipal

A structure that describes an application to which a principal is assigned.

ApplicationProvider

class ApplicationProvider

A structure that describes a provider that can be used to connect an Amazon Web Services managed application or customer managed application to IAM Identity Center.

ApplicationStatus

sealed class ApplicationStatus

ApplicationVisibility

sealed class ApplicationVisibility

AttachCustomerManagedPolicyReferenceToPermissionSetRequest

class AttachCustomerManagedPolicyReferenceToPermissionSetRequest

AttachCustomerManagedPolicyReferenceToPermissionSetResponse

class AttachCustomerManagedPolicyReferenceToPermissionSetResponse

AttachedManagedPolicy

class AttachedManagedPolicy

A structure that stores a list of managed policy ARNs that describe the associated Amazon Web Services managed policy.

AttachManagedPolicyToPermissionSetRequest

class AttachManagedPolicyToPermissionSetRequest

AttachManagedPolicyToPermissionSetResponse

class AttachManagedPolicyToPermissionSetResponse

AuthenticationMethod

sealed class AuthenticationMethod

A structure that describes an authentication method that can be used by an application.

AuthenticationMethodItem

class AuthenticationMethodItem

A structure that describes an authentication method and its type.

AuthenticationMethodType

sealed class AuthenticationMethodType

AuthorizationCodeGrant

class AuthorizationCodeGrant

A structure that defines configuration settings for an application that supports the OAuth 2.0 Authorization Code Grant.

AuthorizedTokenIssuer

class AuthorizedTokenIssuer

A structure that describes a trusted token issuer and associates it with a set of authorized audiences.

ConflictException

class ConflictException : SsoAdminException

Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.

CreateAccountAssignmentRequest

class CreateAccountAssignmentRequest

CreateAccountAssignmentResponse

class CreateAccountAssignmentResponse

CreateApplicationAssignmentRequest

class CreateApplicationAssignmentRequest

CreateApplicationAssignmentResponse

class CreateApplicationAssignmentResponse

CreateApplicationRequest

class CreateApplicationRequest

CreateApplicationResponse

class CreateApplicationResponse

CreateInstanceAccessControlAttributeConfigurationRequest

class CreateInstanceAccessControlAttributeConfigurationRequest

CreateInstanceAccessControlAttributeConfigurationResponse

class CreateInstanceAccessControlAttributeConfigurationResponse

CreateInstanceRequest

class CreateInstanceRequest

CreateInstanceResponse

class CreateInstanceResponse

CreatePermissionSetRequest

class CreatePermissionSetRequest

CreatePermissionSetResponse

class CreatePermissionSetResponse

CreateTrustedTokenIssuerRequest

class CreateTrustedTokenIssuerRequest

CreateTrustedTokenIssuerResponse

class CreateTrustedTokenIssuerResponse

CustomerManagedPolicyReference

class CustomerManagedPolicyReference

Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.

DeleteAccountAssignmentRequest

class DeleteAccountAssignmentRequest

DeleteAccountAssignmentResponse

class DeleteAccountAssignmentResponse

DeleteApplicationAccessScopeRequest

class DeleteApplicationAccessScopeRequest

DeleteApplicationAccessScopeResponse

class DeleteApplicationAccessScopeResponse

DeleteApplicationAssignmentRequest

class DeleteApplicationAssignmentRequest

DeleteApplicationAssignmentResponse

class DeleteApplicationAssignmentResponse

DeleteApplicationAuthenticationMethodRequest

class DeleteApplicationAuthenticationMethodRequest

DeleteApplicationAuthenticationMethodResponse

class DeleteApplicationAuthenticationMethodResponse

DeleteApplicationGrantRequest

class DeleteApplicationGrantRequest

DeleteApplicationGrantResponse

class DeleteApplicationGrantResponse

DeleteApplicationRequest

class DeleteApplicationRequest

DeleteApplicationResponse

class DeleteApplicationResponse

DeleteInlinePolicyFromPermissionSetRequest

class DeleteInlinePolicyFromPermissionSetRequest

DeleteInlinePolicyFromPermissionSetResponse

class DeleteInlinePolicyFromPermissionSetResponse

DeleteInstanceAccessControlAttributeConfigurationRequest

class DeleteInstanceAccessControlAttributeConfigurationRequest

DeleteInstanceAccessControlAttributeConfigurationResponse

class DeleteInstanceAccessControlAttributeConfigurationResponse

DeleteInstanceRequest

class DeleteInstanceRequest

DeleteInstanceResponse

class DeleteInstanceResponse

DeletePermissionsBoundaryFromPermissionSetRequest

class DeletePermissionsBoundaryFromPermissionSetRequest

DeletePermissionsBoundaryFromPermissionSetResponse

class DeletePermissionsBoundaryFromPermissionSetResponse

DeletePermissionSetRequest

class DeletePermissionSetRequest

DeletePermissionSetResponse

class DeletePermissionSetResponse

DeleteTrustedTokenIssuerRequest

class DeleteTrustedTokenIssuerRequest

DeleteTrustedTokenIssuerResponse

class DeleteTrustedTokenIssuerResponse

DescribeAccountAssignmentCreationStatusRequest

class DescribeAccountAssignmentCreationStatusRequest

DescribeAccountAssignmentCreationStatusResponse

class DescribeAccountAssignmentCreationStatusResponse

DescribeAccountAssignmentDeletionStatusRequest

class DescribeAccountAssignmentDeletionStatusRequest

DescribeAccountAssignmentDeletionStatusResponse

class DescribeAccountAssignmentDeletionStatusResponse

DescribeApplicationAssignmentRequest

class DescribeApplicationAssignmentRequest

DescribeApplicationAssignmentResponse

class DescribeApplicationAssignmentResponse

DescribeApplicationProviderRequest

class DescribeApplicationProviderRequest

DescribeApplicationProviderResponse

class DescribeApplicationProviderResponse

DescribeApplicationRequest

class DescribeApplicationRequest

DescribeApplicationResponse

class DescribeApplicationResponse

DescribeInstanceAccessControlAttributeConfigurationRequest

class DescribeInstanceAccessControlAttributeConfigurationRequest

DescribeInstanceAccessControlAttributeConfigurationResponse

class DescribeInstanceAccessControlAttributeConfigurationResponse

DescribeInstanceRequest

class DescribeInstanceRequest

DescribeInstanceResponse

class DescribeInstanceResponse

DescribePermissionSetProvisioningStatusRequest

class DescribePermissionSetProvisioningStatusRequest

DescribePermissionSetProvisioningStatusResponse

class DescribePermissionSetProvisioningStatusResponse

DescribePermissionSetRequest

class DescribePermissionSetRequest

DescribePermissionSetResponse

class DescribePermissionSetResponse

DescribeTrustedTokenIssuerRequest

class DescribeTrustedTokenIssuerRequest

DescribeTrustedTokenIssuerResponse

class DescribeTrustedTokenIssuerResponse

DetachCustomerManagedPolicyReferenceFromPermissionSetRequest

class DetachCustomerManagedPolicyReferenceFromPermissionSetRequest

DetachCustomerManagedPolicyReferenceFromPermissionSetResponse

class DetachCustomerManagedPolicyReferenceFromPermissionSetResponse

DetachManagedPolicyFromPermissionSetRequest

class DetachManagedPolicyFromPermissionSetRequest

DetachManagedPolicyFromPermissionSetResponse

class DetachManagedPolicyFromPermissionSetResponse

DisplayData

class DisplayData

A structure that describes how the portal represents an application provider.

FederationProtocol

sealed class FederationProtocol

GetApplicationAccessScopeRequest

class GetApplicationAccessScopeRequest

GetApplicationAccessScopeResponse

class GetApplicationAccessScopeResponse

GetApplicationAssignmentConfigurationRequest

class GetApplicationAssignmentConfigurationRequest

GetApplicationAssignmentConfigurationResponse

class GetApplicationAssignmentConfigurationResponse

GetApplicationAuthenticationMethodRequest

class GetApplicationAuthenticationMethodRequest

GetApplicationAuthenticationMethodResponse

class GetApplicationAuthenticationMethodResponse

GetApplicationGrantRequest

class GetApplicationGrantRequest

GetApplicationGrantResponse

class GetApplicationGrantResponse

GetInlinePolicyForPermissionSetRequest

class GetInlinePolicyForPermissionSetRequest

GetInlinePolicyForPermissionSetResponse

class GetInlinePolicyForPermissionSetResponse

GetPermissionsBoundaryForPermissionSetRequest

class GetPermissionsBoundaryForPermissionSetRequest

GetPermissionsBoundaryForPermissionSetResponse

class GetPermissionsBoundaryForPermissionSetResponse

Grant

sealed class Grant

The Grant union represents the set of possible configuration options for the selected grant type. Exactly one member of the union must be specified, and must match the grant type selected.

GrantItem

class GrantItem

A structure that defines a single grant and its configuration.

GrantType

sealed class GrantType

IamAuthenticationMethod

class IamAuthenticationMethod

A structure that describes details for authentication that uses IAM.

InstanceAccessControlAttributeConfiguration

class InstanceAccessControlAttributeConfiguration

Specifies the attributes to add to your attribute-based access control (ABAC) configuration.

InstanceAccessControlAttributeConfigurationStatus

sealed class InstanceAccessControlAttributeConfigurationStatus

InstanceMetadata

class InstanceMetadata

Provides information about the IAM Identity Center instance.

InstanceStatus

sealed class InstanceStatus

InternalServerException

class InternalServerException : SsoAdminException

The request processing has failed because of an unknown error, exception, or failure with an internal server.

JwksRetrievalOption

sealed class JwksRetrievalOption

JwtBearerGrant

class JwtBearerGrant

A structure that defines configuration settings for an application that supports the JWT Bearer Token Authorization Grant. The AuthorizedAudience field is the aud claim. For more information, see RFC 7523.

ListAccountAssignmentCreationStatusRequest

class ListAccountAssignmentCreationStatusRequest

ListAccountAssignmentCreationStatusResponse

class ListAccountAssignmentCreationStatusResponse

ListAccountAssignmentDeletionStatusRequest

class ListAccountAssignmentDeletionStatusRequest

ListAccountAssignmentDeletionStatusResponse

class ListAccountAssignmentDeletionStatusResponse

ListAccountAssignmentsFilter

class ListAccountAssignmentsFilter

A structure that describes a filter for account assignments.

ListAccountAssignmentsForPrincipalRequest

class ListAccountAssignmentsForPrincipalRequest

ListAccountAssignmentsForPrincipalResponse

class ListAccountAssignmentsForPrincipalResponse

ListAccountAssignmentsRequest

class ListAccountAssignmentsRequest

ListAccountAssignmentsResponse

class ListAccountAssignmentsResponse

ListAccountsForProvisionedPermissionSetRequest

class ListAccountsForProvisionedPermissionSetRequest

ListAccountsForProvisionedPermissionSetResponse

class ListAccountsForProvisionedPermissionSetResponse

ListApplicationAccessScopesRequest

class ListApplicationAccessScopesRequest

ListApplicationAccessScopesResponse

class ListApplicationAccessScopesResponse

ListApplicationAssignmentsFilter

class ListApplicationAssignmentsFilter

A structure that describes a filter for application assignments.

ListApplicationAssignmentsForPrincipalRequest

class ListApplicationAssignmentsForPrincipalRequest

ListApplicationAssignmentsForPrincipalResponse

class ListApplicationAssignmentsForPrincipalResponse

ListApplicationAssignmentsRequest

class ListApplicationAssignmentsRequest

ListApplicationAssignmentsResponse

class ListApplicationAssignmentsResponse

ListApplicationAuthenticationMethodsRequest

class ListApplicationAuthenticationMethodsRequest

ListApplicationAuthenticationMethodsResponse

class ListApplicationAuthenticationMethodsResponse

ListApplicationGrantsRequest

class ListApplicationGrantsRequest

ListApplicationGrantsResponse

class ListApplicationGrantsResponse

ListApplicationProvidersRequest

class ListApplicationProvidersRequest

ListApplicationProvidersResponse

class ListApplicationProvidersResponse

ListApplicationsFilter

class ListApplicationsFilter

A structure that describes a filter for applications.

ListApplicationsRequest

class ListApplicationsRequest

ListApplicationsResponse

class ListApplicationsResponse

ListCustomerManagedPolicyReferencesInPermissionSetRequest

class ListCustomerManagedPolicyReferencesInPermissionSetRequest

ListCustomerManagedPolicyReferencesInPermissionSetResponse

class ListCustomerManagedPolicyReferencesInPermissionSetResponse

ListInstancesRequest

class ListInstancesRequest

ListInstancesResponse

class ListInstancesResponse

ListManagedPoliciesInPermissionSetRequest

class ListManagedPoliciesInPermissionSetRequest

ListManagedPoliciesInPermissionSetResponse

class ListManagedPoliciesInPermissionSetResponse

ListPermissionSetProvisioningStatusRequest

class ListPermissionSetProvisioningStatusRequest

ListPermissionSetProvisioningStatusResponse

class ListPermissionSetProvisioningStatusResponse

ListPermissionSetsProvisionedToAccountRequest

class ListPermissionSetsProvisionedToAccountRequest

ListPermissionSetsProvisionedToAccountResponse

class ListPermissionSetsProvisionedToAccountResponse

ListPermissionSetsRequest

class ListPermissionSetsRequest

ListPermissionSetsResponse

class ListPermissionSetsResponse

ListTagsForResourceRequest

class ListTagsForResourceRequest

ListTagsForResourceResponse

class ListTagsForResourceResponse

ListTrustedTokenIssuersRequest

class ListTrustedTokenIssuersRequest

ListTrustedTokenIssuersResponse

class ListTrustedTokenIssuersResponse

OidcJwtConfiguration

class OidcJwtConfiguration

A structure that describes configuration settings for a trusted token issuer that supports OpenID Connect (OIDC) and JSON Web Tokens (JWTs).

OidcJwtUpdateConfiguration

class OidcJwtUpdateConfiguration

A structure that describes updated configuration settings for a trusted token issuer that supports OpenID Connect (OIDC) and JSON Web Tokens (JWTs).

OperationStatusFilter

class OperationStatusFilter

Filters the operation status list based on the passed attribute value.

PermissionsBoundary

class PermissionsBoundary

Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want to set as a permissions boundary. Specify either CustomerManagedPolicyReference to use the name and path of a customer managed policy, or ManagedPolicyArn to use the ARN of an Amazon Web Services managed policy. A permissions boundary represents the maximum permissions that any policy can grant your role. For more information, see Permissions boundaries for IAM entities in the IAM User Guide.

PermissionSet

class PermissionSet

An entity that contains IAM policies.

PermissionSetProvisioningStatus

class PermissionSetProvisioningStatus

A structure that is used to provide the status of the provisioning operation for a specified permission set.

PermissionSetProvisioningStatusMetadata

class PermissionSetProvisioningStatusMetadata

Provides information about the permission set provisioning status.

PortalOptions

class PortalOptions

A structure that describes the options for the access portal associated with an application.

PrincipalType

sealed class PrincipalType

ProvisioningStatus

sealed class ProvisioningStatus

ProvisionPermissionSetRequest

class ProvisionPermissionSetRequest

ProvisionPermissionSetResponse

class ProvisionPermissionSetResponse

ProvisionTargetType

sealed class ProvisionTargetType

PutApplicationAccessScopeRequest

class PutApplicationAccessScopeRequest

PutApplicationAccessScopeResponse

class PutApplicationAccessScopeResponse

PutApplicationAssignmentConfigurationRequest

class PutApplicationAssignmentConfigurationRequest

PutApplicationAssignmentConfigurationResponse

class PutApplicationAssignmentConfigurationResponse

PutApplicationAuthenticationMethodRequest

class PutApplicationAuthenticationMethodRequest

PutApplicationAuthenticationMethodResponse

class PutApplicationAuthenticationMethodResponse

PutApplicationGrantRequest

class PutApplicationGrantRequest

PutApplicationGrantResponse

class PutApplicationGrantResponse

PutInlinePolicyToPermissionSetRequest

class PutInlinePolicyToPermissionSetRequest

PutInlinePolicyToPermissionSetResponse

class PutInlinePolicyToPermissionSetResponse

PutPermissionsBoundaryToPermissionSetRequest

class PutPermissionsBoundaryToPermissionSetRequest

PutPermissionsBoundaryToPermissionSetResponse

class PutPermissionsBoundaryToPermissionSetResponse

RefreshTokenGrant

class RefreshTokenGrant

A structure that defines configuration settings for an application that supports the OAuth 2.0 Refresh Token Grant. For more, see RFC 6749.

ResourceNotFoundException

class ResourceNotFoundException : SsoAdminException

Indicates that a requested resource is not found.

ResourceServerConfig

class ResourceServerConfig

A structure that describes the configuration of a resource server.

ResourceServerScopeDetails

class ResourceServerScopeDetails

A structure that describes details for an IAM Identity Center access scope that is associated with a resource server.

ScopeDetails

class ScopeDetails

A structure that describes an IAM Identity Center access scope and its authorized targets.

ServiceQuotaExceededException

class ServiceQuotaExceededException : SsoAdminException

Indicates that the principal has crossed the permitted number of resources that can be created.

SignInOptions

class SignInOptions

A structure that describes the sign-in options for an application portal.

SignInOrigin

sealed class SignInOrigin

SsoAdminException

open class SsoAdminException : AwsServiceException

Base class for all service related exceptions thrown by the SsoAdmin client

StatusValues

sealed class StatusValues

Tag

class Tag

A set of key-value pairs that are used to manage the resource. Tags can only be applied to permission sets and cannot be applied to corresponding roles that IAM Identity Center creates in Amazon Web Services accounts.

TagResourceRequest

class TagResourceRequest

TagResourceResponse

class TagResourceResponse

TargetType

sealed class TargetType

ThrottlingException

class ThrottlingException : SsoAdminException

Indicates that the principal has crossed the throttling limits of the API operations.

TokenExchangeGrant

class TokenExchangeGrant

A structure that defines configuration settings for an application that supports the OAuth 2.0 Token Exchange Grant. For more information, see RFC 8693.

TrustedTokenIssuerConfiguration

sealed class TrustedTokenIssuerConfiguration

A structure that describes the configuration of a trusted token issuer. The structure and available settings are determined by the type of the trusted token issuer.

TrustedTokenIssuerMetadata

class TrustedTokenIssuerMetadata

A structure that describes a trusted token issuer.

TrustedTokenIssuerType

sealed class TrustedTokenIssuerType

TrustedTokenIssuerUpdateConfiguration

sealed class TrustedTokenIssuerUpdateConfiguration

A structure that contains details to be updated for a trusted token issuer configuration. The structure and settings that you can include depend on the type of the trusted token issuer being updated.

UntagResourceRequest

class UntagResourceRequest

UntagResourceResponse

class UntagResourceResponse

UpdateApplicationPortalOptions

class UpdateApplicationPortalOptions

A structure that describes the options for the access portal associated with an application that can be updated.

UpdateApplicationRequest

class UpdateApplicationRequest

UpdateApplicationResponse

class UpdateApplicationResponse