AWS SDK for .NET Documentation
Amazon.IdentityManagement.Model Namespace
AmazonAmazon.IdentityManagement.Model Did this page help you?   Yes   No    Tell us about it...
 
Declaration Syntax
C#
namespace Amazon.IdentityManagement.Model
Types
All TypesClasses
IconTypeDescription
AccessKey
The AccessKey data type contains information about an AWS access key.

This data type is used as a response element in the actions CreateAccessKey and ListAccessKeys.


AccessKeyMetadata
The AccessKey data type contains information about an AWS access key, without its secret key.

This data type is used as a response element in the action ListAccessKeys.


AddRoleToInstanceProfileRequest
Container for the parameters to the AddRoleToInstanceProfile operation. Adds the specified role to the specified instance profile. For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles.

AddRoleToInstanceProfileResponse
Returns information about the AddRoleToInstanceProfileResult response and response metadata.

AddUserToGroupRequest
Container for the parameters to the AddUserToGroup operation. Adds the specified user to the specified group.

AddUserToGroupResponse
Returns information about the AddUserToGroupResult response and response metadata.

ChangePasswordRequest
Container for the parameters to the ChangePassword operation. Changes the password of the IAM user calling
CopyC#
ChangePassword
. The root account password is not affected by this action. For information about modifying passwords, see Managing Passwords.

ChangePasswordResponse
Returns information about the ChangePasswordResult response and response metadata.

CreateAccessKeyRequest
Container for the parameters to the CreateAccessKey operation. Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is
CopyC#
Active
.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.

To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.

CreateAccessKeyResponse
Returns information about the CreateAccessKeyResult response and response metadata.

CreateAccessKeyResult
Contains the result of a successful invocation of the CreateAccessKey action.

CreateAccountAliasRequest
Container for the parameters to the CreateAccountAlias operation. This action creates an alias for your AWS account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

CreateAccountAliasResponse
Returns information about the CreateAccountAliasResult response and response metadata.

CreateGroupRequest
Container for the parameters to the CreateGroup operation. Creates a new group.

For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateGroupResponse
Returns information about the CreateGroupResult response and response metadata.

CreateGroupResult
Contains the result of a successful invocation of the CreateGroup action.

CreateInstanceProfileRequest
Container for the parameters to the CreateInstanceProfile operation. Creates a new instance profile. For information about instance profiles, go to About Instance Profiles.

For information about the number of instance profiles you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateInstanceProfileResponse
Returns information about the CreateInstanceProfileResult response and response metadata.

CreateInstanceProfileResult
Contains the result of a successful invocation of the CreateInstanceProfile action.

CreateLoginProfileRequest
Container for the parameters to the CreateLoginProfile operation. Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console. For more information about managing passwords, see Managing Passwords in Using IAM.

CreateLoginProfileResponse
Returns information about the CreateLoginProfileResult response and response metadata.

CreateLoginProfileResult
Contains the result of a successful invocation of the CreateLoginProfile action.

CreateRoleRequest
Container for the parameters to the CreateRole operation. Creates a new role for your AWS account. For more information about roles, go to Working with Roles. For information about limitations on role names and the number of roles you can create, go to Limitations on IAM Entities in Using AWS Identity and Access Management.

The example policy grants permission to an EC2 instance to assume the role. The policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


CreateRoleResponse
Returns information about the CreateRoleResult response and response metadata.

CreateRoleResult
Contains the result of a successful invocation of the CreateRole action.

CreateSAMLProviderRequest
Container for the parameters to the CreateSAMLProvider operation. Creates an IAM entity to describe an identity provider (IdP) that supports SAML 2.0.

The SAML provider that you create with this operation can be used as a principal in a role's trust policy to establish a trust relationship between AWS and a SAML identity provider. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.

When you create the SAML provider, you upload an a SAML metadata document that you get from your IdP and that includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.

Note:
This operation requires Signature Version 4.

For more information, see Giving Console Access Using SAML and Creating Temporary Security Credentials for SAML Federation in the Using Temporary Credentials guide.


CreateSAMLProviderResponse
Returns information about the CreateSAMLProviderResult response and response metadata.

CreateSAMLProviderResult
Contains the result of a successful invocation of the CreateSAMLProvider action.

CreateUserRequest
Container for the parameters to the CreateUser operation. Creates a new user for your AWS account.

For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateUserResponse
Returns information about the CreateUserResult response and response metadata.

CreateUserResult
Contains the result of a successful invocation of the CreateUser action.

CreateVirtualMFADeviceRequest
Container for the parameters to the CreateVirtualMFADevice operation. Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access Management.

For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management.

The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.

CreateVirtualMFADeviceResponse
Returns information about the CreateVirtualMFADeviceResult response and response metadata.

CreateVirtualMFADeviceResult
Contains the result of a successful invocation of the CreateVirtualMFADevice action.

DeactivateMFADeviceRequest
Container for the parameters to the DeactivateMFADevice operation. Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.

DeactivateMFADeviceResponse
Returns information about the DeactivateMFADeviceResult response and response metadata.

DeleteAccessKeyRequest
Container for the parameters to the DeleteAccessKey operation. Deletes the access key associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.


DeleteAccessKeyResponse
Returns information about the DeleteAccessKeyResult response and response metadata.

DeleteAccountAliasRequest
Container for the parameters to the DeleteAccountAlias operation. Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

DeleteAccountAliasResponse
Returns information about the DeleteAccountAliasResult response and response metadata.

DeleteAccountPasswordPolicyRequest
Container for the parameters to the DeleteAccountPasswordPolicy operation. Deletes the password policy for the AWS account.

DeleteAccountPasswordPolicyResponse
Returns information about the DeleteAccountPasswordPolicyResult response and response metadata.

DeleteConflictException
IdentityManagementService exception

DeleteGroupPolicyRequest
Container for the parameters to the DeleteGroupPolicy operation. Deletes the specified policy that is associated with the specified group.

DeleteGroupPolicyResponse
Returns information about the DeleteGroupPolicyResult response and response metadata.

DeleteGroupRequest
Container for the parameters to the DeleteGroup operation. Deletes the specified group. The group must not contain any users or have any attached policies.

DeleteGroupResponse
Returns information about the DeleteGroupResult response and response metadata.

DeleteInstanceProfileRequest
Container for the parameters to the DeleteInstanceProfile operation. Deletes the specified instance profile. The instance profile must not have an associated role. Make sure you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

For more information about instance profiles, go to About Instance Profiles.


DeleteInstanceProfileResponse
Returns information about the DeleteInstanceProfileResult response and response metadata.

DeleteLoginProfileRequest
Container for the parameters to the DeleteLoginProfile operation. Deletes the password for the specified user, which terminates the user's ability to access AWS services through the AWS Management Console. Deleting a user's password does not prevent a user from accessing IAM through the command line interface or the API. To prevent all user access you must also either make the access key inactive or delete it. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.

DeleteLoginProfileResponse
Returns information about the DeleteLoginProfileResult response and response metadata.

DeleteRolePolicyRequest
Container for the parameters to the DeleteRolePolicy operation. Deletes the specified policy associated with the specified role.

DeleteRolePolicyResponse
Returns information about the DeleteRolePolicyResult response and response metadata.

DeleteRoleRequest
Container for the parameters to the DeleteRole operation. Deletes the specified role. The role must not have any policies attached. For more information about roles, go to Working with Roles. Make sure you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

DeleteRoleResponse
Returns information about the DeleteRoleResult response and response metadata.

DeleteSAMLProviderRequest
Container for the parameters to the DeleteSAMLProvider operation. Deletes a SAML provider.

Deleting the provider does not update any roles that reference the SAML provider as a principal in their trust policies. Any attempt to assume a role that references a SAML provider that has been deleted will fail.

Note:
This operation requires Signature Version 4.

DeleteSAMLProviderResponse
Returns information about the DeleteSAMLProviderResult response and response metadata.

DeleteServerCertificateRequest
Container for the parameters to the DeleteServerCertificate operation. Deletes the specified server certificate. If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.

DeleteServerCertificateResponse
Returns information about the DeleteServerCertificateResult response and response metadata.

DeleteSigningCertificateRequest
Container for the parameters to the DeleteSigningCertificate operation. Deletes the specified signing certificate associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.


DeleteSigningCertificateResponse
Returns information about the DeleteSigningCertificateResult response and response metadata.

DeleteUserPolicyRequest
Container for the parameters to the DeleteUserPolicy operation. Deletes the specified policy associated with the specified user.

DeleteUserPolicyResponse
Returns information about the DeleteUserPolicyResult response and response metadata.

DeleteUserRequest
Container for the parameters to the DeleteUser operation. Deletes the specified user. The user must not belong to any groups, have any keys or signing certificates, or have any attached policies.

DeleteUserResponse
Returns information about the DeleteUserResult response and response metadata.

DeleteVirtualMFADeviceRequest
Container for the parameters to the DeleteVirtualMFADevice operation. Deletes a virtual MFA device.
Note:
You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.

DeleteVirtualMFADeviceResponse
Returns information about the DeleteVirtualMFADeviceResult response and response metadata.

DuplicateCertificateException
IdentityManagementService exception

EnableMFADeviceRequest
Container for the parameters to the EnableMFADevice operation. Enables the specified MFA device and associates it with the specified user name. When enabled, the MFA device is required for every subsequent login by the user name associated with the device.

EnableMFADeviceResponse
Returns information about the EnableMFADeviceResult response and response metadata.

EntityAlreadyExistsException
IdentityManagementService exception

EntityTemporarilyUnmodifiableException
IdentityManagementService exception

GetAccountPasswordPolicyRequest
Container for the parameters to the GetAccountPasswordPolicy operation. Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy.

GetAccountPasswordPolicyResponse
Returns information about the GetAccountPasswordPolicyResult response and response metadata.

GetAccountPasswordPolicyResult
Contains the result of a successful invocation of the GetAccountPasswordPolicy action.

GetAccountSummaryRequest
Container for the parameters to the GetAccountSummary operation. Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management.


GetAccountSummaryResponse
Returns information about the GetAccountSummaryResult response and response metadata.

GetAccountSummaryResult
Contains the result of a successful invocation of the GetAccountSummary action.

GetGroupPolicyRequest
Container for the parameters to the GetGroupPolicy operation. Retrieves the specified policy document for the specified group. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

GetGroupPolicyResponse
Returns information about the GetGroupPolicyResult response and response metadata.

GetGroupPolicyResult
Contains the result of a successful invocation of the GetGroupPolicy action.

GetGroupRequest
Container for the parameters to the GetGroup operation. Returns a list of users that are in the specified group. You can paginate the results using the
CopyC#
MaxItems
and
CopyC#
Marker
parameters.

GetGroupResponse
Returns information about the GetGroupResult response and response metadata.

GetGroupResult
Contains the result of a successful invocation of the GetGroup action.

GetInstanceProfileRequest
Container for the parameters to the GetInstanceProfile operation. Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role. For more information about instance profiles, go to About Instance Profiles. For more information about ARNs, go to ARNs.

GetInstanceProfileResponse
Returns information about the GetInstanceProfileResult response and response metadata.

GetInstanceProfileResult
Contains the result of a successful invocation of the GetInstanceProfile action.

GetLoginProfileRequest
Container for the parameters to the GetLoginProfile operation. Retrieves the user name and password-creation date for the specified user. If the user has not been assigned a password, the action returns a 404 (
CopyC#
NoSuchEntity
) error.

GetLoginProfileResponse
Returns information about the GetLoginProfileResult response and response metadata.

GetLoginProfileResult
Contains the result of a successful invocation of the GetLoginProfile action.

GetRolePolicyRequest
Container for the parameters to the GetRolePolicy operation. Retrieves the specified policy document for the specified role. For more information about roles, go to Working with Roles.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


GetRolePolicyResponse
Returns information about the GetRolePolicyResult response and response metadata.

GetRolePolicyResult
Contains the result of a successful invocation of the GetRolePolicy action.

GetRoleRequest
Container for the parameters to the GetRole operation. Retrieves information about the specified role, including the role's path, GUID, ARN, and the policy granting permission to assume the role. For more information about ARNs, go to ARNs. For more information about roles, go to Working with Roles.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


GetRoleResponse
Returns information about the GetRoleResult response and response metadata.

GetRoleResult
Contains the result of a successful invocation of the GetRole action.

GetSAMLProviderRequest
Container for the parameters to the GetSAMLProvider operation. Returns the SAML provider metadocument that was uploaded when the provider was created or updated.
Note:
This operation requires Signature Version 4.

GetSAMLProviderResponse
Returns information about the GetSAMLProviderResult response and response metadata.

GetSAMLProviderResult
Contains the result of a successful invocation of the GetSAMLProvider action.

GetServerCertificateRequest
Container for the parameters to the GetServerCertificate operation. Retrieves information about the specified server certificate.

GetServerCertificateResponse
Returns information about the GetServerCertificateResult response and response metadata.

GetServerCertificateResult
Contains the result of a successful invocation of the GetServerCertificate action.

GetUserPolicyRequest
Container for the parameters to the GetUserPolicy operation. Retrieves the specified policy document for the specified user. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

GetUserPolicyResponse
Returns information about the GetUserPolicyResult response and response metadata.

GetUserPolicyResult
Contains the result of a successful invocation of the GetUserPolicy action.

GetUserRequest
Container for the parameters to the GetUser operation. Retrieves information about the specified user, including the user's path, unique ID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.


GetUserResponse
Returns information about the GetUserResult response and response metadata.

GetUserResult
Contains the result of a successful invocation of the GetUser action.

Group
The Group data type contains information about a group.

This data type is used as a response element in the following actions:


InstanceProfile
The InstanceProfile data type contains information about an instance profile.

This data type is used as a response element in the following actions:


InvalidAuthenticationCodeException
IdentityManagementService exception

InvalidCertificateException
IdentityManagementService exception

InvalidInputException
IdentityManagementService exception

InvalidUserTypeException
IdentityManagementService exception

KeyPairMismatchException
IdentityManagementService exception

LimitExceededException
IdentityManagementService exception

ListAccessKeysRequest
Container for the parameters to the ListAccessKeys operation. Returns information about the access key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Note:
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

ListAccessKeysResponse
Returns information about the ListAccessKeysResult response and response metadata.

ListAccessKeysResult
Contains the result of a successful invocation of the ListAccessKeys action.

ListAccountAliasesRequest
Container for the parameters to the ListAccountAliases operation. Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListAccountAliasesResponse
Returns information about the ListAccountAliasesResult response and response metadata.

ListAccountAliasesResult
Contains the result of a successful invocation of the ListAccountAliases action.

ListGroupPoliciesRequest
Container for the parameters to the ListGroupPolicies operation. Lists the names of the policies associated with the specified group. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroupPoliciesResponse
Returns information about the ListGroupPoliciesResult response and response metadata.

ListGroupPoliciesResult
Contains the result of a successful invocation of the ListGroupPolicies action.

ListGroupsForUserRequest
Container for the parameters to the ListGroupsForUser operation. Lists the groups the specified user belongs to.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroupsForUserResponse
Returns information about the ListGroupsForUserResult response and response metadata.

ListGroupsForUserResult
Contains the result of a successful invocation of the ListGroupsForUser action.

ListGroupsRequest
Container for the parameters to the ListGroups operation. Lists the groups that have the specified path prefix.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroupsResponse
Returns information about the ListGroupsResult response and response metadata.

ListGroupsResult
Contains the result of a successful invocation of the ListGroups action.

ListInstanceProfilesForRoleRequest
Container for the parameters to the ListInstanceProfilesForRole operation. Lists the instance profiles that have the specified associated role. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListInstanceProfilesForRoleResponse
Returns information about the ListInstanceProfilesForRoleResult response and response metadata.

ListInstanceProfilesForRoleResult
Contains the result of a successful invocation of the ListInstanceProfilesForRole action.

ListInstanceProfilesRequest
Container for the parameters to the ListInstanceProfiles operation. Lists the instance profiles that have the specified path prefix. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListInstanceProfilesResponse
Returns information about the ListInstanceProfilesResult response and response metadata.

ListInstanceProfilesResult
Contains the result of a successful invocation of the ListInstanceProfiles action.

ListMFADevicesRequest
Container for the parameters to the ListMFADevices operation. Lists the MFA devices. If the request includes the user name, then this action lists all the MFA devices associated with the specified user name. If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListMFADevicesResponse
Returns information about the ListMFADevicesResult response and response metadata.

ListMFADevicesResult
Contains the result of a successful invocation of the ListMFADevices action.

ListRolePoliciesRequest
Container for the parameters to the ListRolePolicies operation. Lists the names of the policies associated with the specified role. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListRolePoliciesResponse
Returns information about the ListRolePoliciesResult response and response metadata.

ListRolePoliciesResult
Contains the result of a successful invocation of the ListRolePolicies action.

ListRolesRequest
Container for the parameters to the ListRoles operation. Lists the roles that have the specified path prefix. If there are none, the action returns an empty list. For more information about roles, go to Working with Roles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


ListRolesResponse
Returns information about the ListRolesResult response and response metadata.

ListRolesResult
Contains the result of a successful invocation of the ListRoles action.

ListSAMLProvidersRequest
Container for the parameters to the ListSAMLProviders operation. Lists the SAML providers in the account.
Note:
This operation requires Signature Version 4.

ListSAMLProvidersResponse
Returns information about the ListSAMLProvidersResult response and response metadata.

ListSAMLProvidersResult
Contains the result of a successful invocation of the ListSAMLProviders action.

ListServerCertificatesRequest
Container for the parameters to the ListServerCertificates operation. Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListServerCertificatesResponse
Returns information about the ListServerCertificatesResult response and response metadata.

ListServerCertificatesResult
Contains the result of a successful invocation of the ListServerCertificates action.

ListSigningCertificatesRequest
Container for the parameters to the ListSigningCertificates operation. Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the user name is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.


ListSigningCertificatesResponse
Returns information about the ListSigningCertificatesResult response and response metadata.

ListSigningCertificatesResult
Contains the result of a successful invocation of the ListSigningCertificates action.

ListUserPoliciesRequest
Container for the parameters to the ListUserPolicies operation. Lists the names of the policies associated with the specified user. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListUserPoliciesResponse
Returns information about the ListUserPoliciesResult response and response metadata.

ListUserPoliciesResult
Contains the result of a successful invocation of the ListUserPolicies action.

ListUsersRequest
Container for the parameters to the ListUsers operation. Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListUsersResponse
Returns information about the ListUsersResult response and response metadata.

ListUsersResult
Contains the result of a successful invocation of the ListUsers action.

ListVirtualMFADevicesRequest
Container for the parameters to the ListVirtualMFADevices operation. Lists the virtual MFA devices under the AWS account by assignment status. If you do not specify an assignment status, the action returns a list of all virtual MFA devices. Assignment status can be
CopyC#
Assigned
,
CopyC#
Unassigned
, or
CopyC#
Any
.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListVirtualMFADevicesResponse
Returns information about the ListVirtualMFADevicesResult response and response metadata.

ListVirtualMFADevicesResult
Contains the result of a successful invocation of the ListVirtualMFADevices action.

LoginProfile
The LoginProfile data type contains the user name and password create date for a user.

This data type is used as a response element in the actions CreateLoginProfile and GetLoginProfile.


MalformedCertificateException
IdentityManagementService exception

MalformedPolicyDocumentException
IdentityManagementService exception

MFADevice
The
CopyC#
MFADevice
data type contains information about an MFA device.

This data type is used as a response element in the action ListMFADevices.


NoSuchEntityException
IdentityManagementService exception

PasswordPolicy
The PasswordPolicy data type contains information about the account password policy.

This data type is used as a response element in the action GetAccountPasswordPolicy.


PasswordPolicyViolationException
IdentityManagementService exception

PutGroupPolicyRequest
Container for the parameters to the PutGroupPolicy operation. Adds (or updates) a policy document associated with the specified group. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutGroupPolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

PutGroupPolicyResponse
Returns information about the PutGroupPolicyResult response and response metadata.

PutRolePolicyRequest
Container for the parameters to the PutRolePolicy operation. Adds (or updates) a policy document associated with the specified role. For information about policies, go to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the policies you can associate with a role, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutRolePolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

PutRolePolicyResponse
Returns information about the PutRolePolicyResult response and response metadata.

PutUserPolicyRequest
Container for the parameters to the PutUserPolicy operation. Adds (or updates) a policy document associated with the specified user. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutUserPolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

PutUserPolicyResponse
Returns information about the PutUserPolicyResult response and response metadata.

RemoveRoleFromInstanceProfileRequest
Container for the parameters to the RemoveRoleFromInstanceProfile operation. Removes the specified role from the specified instance profile. Make sure you do not have any Amazon EC2 instances running with the role you are about to remove from the instance profile. Removing a role from an instance profile that is associated with a running instance will break any applications running on the instance.

For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles.


RemoveRoleFromInstanceProfileResponse
Returns information about the RemoveRoleFromInstanceProfileResult response and response metadata.

RemoveUserFromGroupRequest
Container for the parameters to the RemoveUserFromGroup operation. Removes the specified user from the specified group.

RemoveUserFromGroupResponse
Returns information about the RemoveUserFromGroupResult response and response metadata.

ResyncMFADeviceRequest
Container for the parameters to the ResyncMFADevice operation. Synchronizes the specified MFA device with AWS servers.

ResyncMFADeviceResponse
Returns information about the ResyncMFADeviceResult response and response metadata.

Role
The Role data type contains information about a role.

This data type is used as a response element in the following actions:


SAMLProviderListEntry
The list of SAML providers for this account.

ServerCertificate
The ServerCertificate data type contains information about a server certificate.

This data type is used as a response element in the action GetServerCertificate.


ServerCertificateMetadata
ServerCertificateMetadata contains information about a server certificate without its certificate body, certificate chain, and private key.

This data type is used as a response element in the action UploadServerCertificate and ListServerCertificates.


SigningCertificate
The SigningCertificate data type contains information about an X.509 signing certificate.

This data type is used as a response element in the actions UploadSigningCertificate and ListSigningCertificates.


UpdateAccessKeyRequest
Container for the parameters to the UpdateAccessKey operation. Changes the status of the specified access key from Active to Inactive, or vice versa. This action can be used to disable a user's key as part of a key rotation work flow.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management.


UpdateAccessKeyResponse
Returns information about the UpdateAccessKeyResult response and response metadata.

UpdateAccountPasswordPolicyRequest
Container for the parameters to the UpdateAccountPasswordPolicy operation. Updates the password policy settings for the account. For more information about using a password policy, go to Managing an IAM Password Policy.

UpdateAccountPasswordPolicyResponse
Returns information about the UpdateAccountPasswordPolicyResult response and response metadata.

UpdateAssumeRolePolicyRequest
Container for the parameters to the UpdateAssumeRolePolicy operation. Updates the policy that grants an entity permission to assume a role. For more information about roles, go to Working with Roles.

UpdateAssumeRolePolicyResponse
Returns information about the UpdateAssumeRolePolicyResult response and response metadata.

UpdateGroupRequest
Container for the parameters to the UpdateGroup operation. Updates the name and/or the path of the specified group. You should understand the implications of changing a group's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
Note:
To change a group name the requester must have appropriate permissions on both the source object and the target object. For example, to change Managers to MGRs, the entity making the request must have permission on Managers and MGRs, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateGroupResponse
Returns information about the UpdateGroupResult response and response metadata.

UpdateLoginProfileRequest
Container for the parameters to the UpdateLoginProfile operation. Changes the password for the specified user.

UpdateLoginProfileResponse
Returns information about the UpdateLoginProfileResult response and response metadata.

UpdateSAMLProviderRequest
Container for the parameters to the UpdateSAMLProvider operation. Updates the metadata document for an existing SAML provider.
Note:
This operation requires Signature Version 4.

UpdateSAMLProviderResponse
Returns information about the UpdateSAMLProviderResult response and response metadata.

UpdateSAMLProviderResult
Contains the result of a successful invocation of the UpdateSAMLProvider action.

UpdateServerCertificateRequest
Container for the parameters to the UpdateServerCertificate operation. Updates the name and/or the path of the specified server certificate. You should understand the implications of changing a server certificate's path or name. For more information, see Managing Server Certificates in Using AWS Identity and Access Management.
Note:
To change a server certificate name the requester must have appropriate permissions on both the source object and the target object. For example, to change the name from ProductionCert to ProdCert, the entity making the request must have permission on ProductionCert and ProdCert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateServerCertificateResponse
Returns information about the UpdateServerCertificateResult response and response metadata.

UpdateSigningCertificateRequest
Container for the parameters to the UpdateSigningCertificate operation. Changes the status of the specified signing certificate from active to disabled, or vice versa. This action can be used to disable a user's signing certificate as part of a certificate rotation work flow.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management.


UpdateSigningCertificateResponse
Returns information about the UpdateSigningCertificateResult response and response metadata.

UpdateUserRequest
Container for the parameters to the UpdateUser operation. Updates the name and/or the path of the specified user. You should understand the implications of changing a user's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
Note:
To change a user name the requester must have appropriate permissions on both the source object and the target object. For example, to change Bob to Robert, the entity making the request must have permission on Bob and Robert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateUserResponse
Returns information about the UpdateUserResult response and response metadata.

UploadServerCertificateRequest
Container for the parameters to the UploadServerCertificate operation. Uploads a server certificate entity for the AWS account. The server certificate entity includes a public key certificate, a private key, and an optional certificate chain, which should all be PEM-encoded.

For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because the body of the public key certificate, private key, and the certificate chain can be large, you should use POST rather than GET when calling
CopyC#
UploadServerCertificate
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

UploadServerCertificateResponse
Returns information about the UploadServerCertificateResult response and response metadata.

UploadServerCertificateResult
Contains the result of a successful invocation of the UploadServerCertificate action.

UploadSigningCertificateRequest
Container for the parameters to the UploadSigningCertificate operation. Uploads an X.509 signing certificate and associates it with the specified user. Some AWS services use X.509 signing certificates to validate requests that are signed with a corresponding private key. When you upload the certificate, its default status is
CopyC#
Active
.

If the

CopyC#
UserName
field is not specified, the user name is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Note:
Because the body of a X.509 certificate can be large, you should use POST rather than GET when calling
CopyC#
UploadSigningCertificate
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

UploadSigningCertificateResponse
Returns information about the UploadSigningCertificateResult response and response metadata.

UploadSigningCertificateResult
Contains the result of a successful invocation of the UploadSigningCertificate action.

User
The User data type contains information about a user.

This data type is used as a response element in the following actions:


VirtualMFADevice
The
CopyC#
VirtualMFADevice
data type contains information about a virtual MFA device.