AWS Identity and Access Management (IAM) is a web service that you can use to manage users and user permissions under your AWS account. This guide provides descriptions of the IAM API. For general information about IAM, see AWS Identity and Access Management (IAM). For the user guide for IAM, see Using IAM.
Note: |
---|
AWS provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .NET, iOS, Android, etc.). The SDKs provide a convenient way to create programmatic access to IAM and AWS. For example, the SDKs take care of tasks such as cryptographically signing requests (see below), managing errors, and retrying requests automatically. For information about the AWS SDKs, including how to download and install them, see the Tools for Amazon Web Services page. |
Using the IAM Query API, you make direct calls to the IAM web service. IAM supports GET and POST requests for all actions. That is, the API does not require you to use GET for some actions and POST for others. However, GET requests are subject to the limitation size of a URL. Therefore, for operations that require larger sizes, use a POST request.
Signing Requests
Requests must be signed using an access key ID and a secret access key. We strongly recommend that you do not use your AWS account access key ID and secret access key for everyday work with IAM. You can use the access key ID and secret access key for an IAM user or you can use the AWS Security Token Service to generate temporary security credentials and use those to sign requests.
To sign requests, we recommend that you use Signature Version 4. If you have an existing application that uses Signature Version 2, you do not have to update it to use Signature Version 4. However, some operations now require Signature Version 4. The documentation for operations that require version 4 indicate this requirement.
Recording API requests
IAM supports AWS CloudTrail, which is a service that records AWS calls for your AWS account and delivers log files to an Amazon S3 bucket. By using information collected by CloudTrail, you can determine what requests were successfully made to IAM, who made the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find your log files, see the AWS CloudTrail User Guide.
Additional Resources
For more information, see the following:
- AWS Security Credentials. This topic provides general information about the types of credentials used for accessing AWS.
- IAM Best Practices. This topic presents a list of suggestions for using the IAM service to help secure your AWS resources.
- AWS Security Token Service. This guide describes how to create and use temporary security credentials.
- Signing AWS API Requests. This set of topics walk you through the process of signing a request using an access key ID and secret access key.
C# |
public class AmazonIdentityManagementServiceClient : AmazonWebServiceClient, AmazonIdentityManagementService, IDisposable
All Members | Constructors | Methods | Events | ||
Icon | Member | Description | ||
---|---|---|---|---|
AmazonIdentityManagementServiceClient()()()() |
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's
default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance.
Example App.config with credentials set.
CopyC# <?xml version="1.0" encoding="utf-8" ?> <configuration> <appSettings> <add key="AWSAccessKey" value="********************"/> <add key="AWSSecretKey" value="****************************************"/> </appSettings> </configuration> | |||
AmazonIdentityManagementServiceClient(RegionEndpoint) |
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's
default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance.
Example App.config with credentials set.
CopyC# <?xml version="1.0" encoding="utf-8" ?> <configuration> <appSettings> <add key="AWSAccessKey" value="********************"/> <add key="AWSSecretKey" value="****************************************"/> </appSettings> </configuration> | |||
AmazonIdentityManagementServiceClient(AmazonIdentityManagementServiceConfig) |
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's
default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance.
Example App.config with credentials set.
CopyC# <?xml version="1.0" encoding="utf-8" ?> <configuration> <appSettings> <add key="AWSAccessKey" value="********************"/> <add key="AWSSecretKey" value="****************************************"/> </appSettings> </configuration> | |||
AmazonIdentityManagementServiceClient(AWSCredentials) |
Constructs AmazonIdentityManagementServiceClient with AWS Credentials
| |||
AmazonIdentityManagementServiceClient(AWSCredentials, RegionEndpoint) |
Constructs AmazonIdentityManagementServiceClient with AWS Credentials
| |||
AmazonIdentityManagementServiceClient(AWSCredentials, AmazonIdentityManagementServiceConfig) |
Constructs AmazonIdentityManagementServiceClient with AWS Credentials and an
AmazonIdentityManagementServiceClient Configuration object.
| |||
AmazonIdentityManagementServiceClient(String, String) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key
| |||
AmazonIdentityManagementServiceClient(String, String, RegionEndpoint) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key
| |||
AmazonIdentityManagementServiceClient(String, String, AmazonIdentityManagementServiceConfig) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID, AWS Secret Key and an
AmazonIdentityManagementServiceClient Configuration object.
| |||
AmazonIdentityManagementServiceClient(String, String, String) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key
| |||
AmazonIdentityManagementServiceClient(String, String, String, RegionEndpoint) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key
| |||
AmazonIdentityManagementServiceClient(String, String, String, AmazonIdentityManagementServiceConfig) |
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID, AWS Secret Key and an
AmazonIdentityManagementServiceClient Configuration object.
| |||
AddRoleToInstanceProfile(AddRoleToInstanceProfileRequest) |
Adds the specified role to the specified instance profile. For more information about
roles, go to Working
with Roles. For more information about instance profiles, go to About
Instance Profiles.
| |||
AddUserToGroup(AddUserToGroupRequest) |
Adds the specified user to the specified group.
| |||
AfterResponseEvent |
Occurs after a response is received from the service.
(Inherited from AmazonWebServiceClient.) | |||
BeforeRequestEvent |
Occurs before a request is issued against the service.
(Inherited from AmazonWebServiceClient.) | |||
BeginAddRoleToInstanceProfile(AddRoleToInstanceProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the AddRoleToInstanceProfile operation.
| |||
BeginAddUserToGroup(AddUserToGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the AddUserToGroup operation.
| |||
BeginChangePassword(ChangePasswordRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ChangePassword operation.
| |||
BeginCreateAccessKey(CreateAccessKeyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateAccessKey operation.
| |||
BeginCreateAccountAlias(CreateAccountAliasRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateAccountAlias operation.
| |||
BeginCreateGroup(CreateGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateGroup operation.
| |||
BeginCreateInstanceProfile(CreateInstanceProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateInstanceProfile operation.
| |||
BeginCreateLoginProfile(CreateLoginProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateLoginProfile operation.
| |||
BeginCreateRole(CreateRoleRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateRole operation.
| |||
BeginCreateSAMLProvider(CreateSAMLProviderRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateSAMLProvider operation.
| |||
BeginCreateUser(CreateUserRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateUser operation.
| |||
BeginCreateVirtualMFADevice(CreateVirtualMFADeviceRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the CreateVirtualMFADevice operation.
| |||
BeginDeactivateMFADevice(DeactivateMFADeviceRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeactivateMFADevice operation.
| |||
BeginDeleteAccessKey(DeleteAccessKeyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteAccessKey operation.
| |||
BeginDeleteAccountAlias(DeleteAccountAliasRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteAccountAlias operation.
| |||
BeginDeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteAccountPasswordPolicy operation.
| |||
BeginDeleteGroup(DeleteGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteGroup operation.
| |||
BeginDeleteGroupPolicy(DeleteGroupPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteGroupPolicy operation.
| |||
BeginDeleteInstanceProfile(DeleteInstanceProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteInstanceProfile operation.
| |||
BeginDeleteLoginProfile(DeleteLoginProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteLoginProfile operation.
| |||
BeginDeleteRole(DeleteRoleRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteRole operation.
| |||
BeginDeleteRolePolicy(DeleteRolePolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteRolePolicy operation.
| |||
BeginDeleteSAMLProvider(DeleteSAMLProviderRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteSAMLProvider operation.
| |||
BeginDeleteServerCertificate(DeleteServerCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteServerCertificate operation.
| |||
BeginDeleteSigningCertificate(DeleteSigningCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteSigningCertificate operation.
| |||
BeginDeleteUser(DeleteUserRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteUser operation.
| |||
BeginDeleteUserPolicy(DeleteUserPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteUserPolicy operation.
| |||
BeginDeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the DeleteVirtualMFADevice operation.
| |||
BeginEnableMFADevice(EnableMFADeviceRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the EnableMFADevice operation.
| |||
BeginGetAccountPasswordPolicy(GetAccountPasswordPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetAccountPasswordPolicy operation.
| |||
BeginGetAccountSummary(GetAccountSummaryRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetAccountSummary operation.
| |||
BeginGetGroup(GetGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetGroup operation.
| |||
BeginGetGroupPolicy(GetGroupPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetGroupPolicy operation.
| |||
BeginGetInstanceProfile(GetInstanceProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetInstanceProfile operation.
| |||
BeginGetLoginProfile(GetLoginProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetLoginProfile operation.
| |||
BeginGetRole(GetRoleRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetRole operation.
| |||
BeginGetRolePolicy(GetRolePolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetRolePolicy operation.
| |||
BeginGetSAMLProvider(GetSAMLProviderRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetSAMLProvider operation.
| |||
BeginGetServerCertificate(GetServerCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetServerCertificate operation.
| |||
BeginGetUser(GetUserRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetUser operation.
| |||
BeginGetUserPolicy(GetUserPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the GetUserPolicy operation.
| |||
BeginListAccessKeys(ListAccessKeysRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListAccessKeys operation.
| |||
BeginListAccountAliases(ListAccountAliasesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListAccountAliases operation.
| |||
BeginListGroupPolicies(ListGroupPoliciesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListGroupPolicies operation.
| |||
BeginListGroups(ListGroupsRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListGroups operation.
| |||
BeginListGroupsForUser(ListGroupsForUserRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListGroupsForUser operation.
| |||
BeginListInstanceProfiles(ListInstanceProfilesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListInstanceProfiles operation.
| |||
BeginListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListInstanceProfilesForRole operation.
| |||
BeginListMFADevices(ListMFADevicesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListMFADevices operation.
| |||
BeginListRolePolicies(ListRolePoliciesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListRolePolicies operation.
| |||
BeginListRoles(ListRolesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListRoles operation.
| |||
BeginListSAMLProviders(ListSAMLProvidersRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListSAMLProviders operation.
| |||
BeginListServerCertificates(ListServerCertificatesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListServerCertificates operation.
| |||
BeginListSigningCertificates(ListSigningCertificatesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListSigningCertificates operation.
| |||
BeginListUserPolicies(ListUserPoliciesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListUserPolicies operation.
| |||
BeginListUsers(ListUsersRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListUsers operation.
| |||
BeginListVirtualMFADevices(ListVirtualMFADevicesRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ListVirtualMFADevices operation.
| |||
BeginPutGroupPolicy(PutGroupPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the PutGroupPolicy operation.
| |||
BeginPutRolePolicy(PutRolePolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the PutRolePolicy operation.
| |||
BeginPutUserPolicy(PutUserPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the PutUserPolicy operation.
| |||
BeginRemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the RemoveRoleFromInstanceProfile operation.
| |||
BeginRemoveUserFromGroup(RemoveUserFromGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the RemoveUserFromGroup operation.
| |||
BeginResyncMFADevice(ResyncMFADeviceRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the ResyncMFADevice operation.
| |||
BeginUpdateAccessKey(UpdateAccessKeyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateAccessKey operation.
| |||
BeginUpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateAccountPasswordPolicy operation.
| |||
BeginUpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateAssumeRolePolicy operation.
| |||
BeginUpdateGroup(UpdateGroupRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateGroup operation.
| |||
BeginUpdateLoginProfile(UpdateLoginProfileRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateLoginProfile operation.
| |||
BeginUpdateSAMLProvider(UpdateSAMLProviderRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateSAMLProvider operation.
| |||
BeginUpdateServerCertificate(UpdateServerCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateServerCertificate operation.
| |||
BeginUpdateSigningCertificate(UpdateSigningCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateSigningCertificate operation.
| |||
BeginUpdateUser(UpdateUserRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UpdateUser operation.
| |||
BeginUploadServerCertificate(UploadServerCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UploadServerCertificate operation.
| |||
BeginUploadSigningCertificate(UploadSigningCertificateRequest, AsyncCallback, Object) |
Initiates the asynchronous execution of the UploadSigningCertificate operation.
| |||
ChangePassword(ChangePasswordRequest) |
Changes the password of the IAM user calling CopyC# ChangePassword | |||
CreateAccessKey()()()() |
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
The default status for new keys is CopyC# Active If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. | |||
CreateAccessKey(CreateAccessKeyRequest) |
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user.
The default status for new keys is CopyC# Active If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. | |||
CreateAccountAlias(CreateAccountAliasRequest) |
This action creates an alias for your AWS account. For information about using an
AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
and Access Management.
| |||
CreateGroup(CreateGroupRequest) |
Creates a new group.
For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | |||
CreateInstanceProfile(CreateInstanceProfileRequest) |
Creates a new instance profile. For information about instance profiles, go to About
Instance Profiles.
For information about the number of instance profiles you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | |||
CreateLoginProfile(CreateLoginProfileRequest) |
Creates a password for the specified user, giving the user the ability to access AWS
services through the AWS Management Console. For more information about managing
passwords, see Managing Passwords in Using IAM.
| |||
CreateRole(CreateRoleRequest) |
Creates a new role for your AWS account. For more information about roles, go to Working
with Roles. For information about limitations on role names and the number of
roles you can create, go to Limitations on IAM Entities in Using AWS Identity and Access Management.
The example policy grants permission to an EC2 instance to assume the role. The policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | |||
CreateSAMLProvider(CreateSAMLProviderRequest) |
Creates an IAM entity to describe an identity provider (IdP) that supports SAML 2.0.
The SAML provider that you create with this operation can be used as a principal in a role's trust policy to establish a trust relationship between AWS and a SAML identity provider. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS. When you create the SAML provider, you upload an a SAML metadata document that you get from your IdP and that includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.
For more information, see Giving Console Access Using SAML and Creating Temporary Security Credentials for SAML Federation in the Using Temporary Credentials guide. | |||
CreateUser(CreateUserRequest) |
Creates a new user for your AWS account.
For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | |||
CreateVirtualMFADevice(CreateVirtualMFADeviceRequest) |
Creates a new virtual MFA device for the AWS account. After creating the virtual MFA,
use EnableMFADevice to attach the MFA device to an IAM user. For more
information about creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access
Management.
For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management. The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures. | |||
DeactivateMFADevice(DeactivateMFADeviceRequest) |
Deactivates the specified MFA device and removes it from association with the user
name for which it was originally enabled.
| |||
DeleteAccessKey(DeleteAccessKeyRequest) |
Deletes the access key associated with the specified user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. | |||
DeleteAccountAlias(DeleteAccountAliasRequest) |
Deletes the specified AWS account alias. For information about using an AWS account
alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
and Access Management.
| |||
DeleteAccountPasswordPolicy()()()() |
Deletes the password policy for the AWS account.
| |||
DeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest) |
Deletes the password policy for the AWS account.
| |||
DeleteGroup(DeleteGroupRequest) |
Deletes the specified group. The group must not contain any users or have any attached policies.
| |||
DeleteGroupPolicy(DeleteGroupPolicyRequest) |
Deletes the specified policy that is associated with the specified group.
| |||
DeleteInstanceProfile(DeleteInstanceProfileRequest) |
Deletes the specified instance profile. The instance profile must not have an associated role.
Make sure you do not have any Amazon EC2 instances running with the instance
profile you are about to delete. Deleting a role or instance profile that is associated
with a running instance will break any applications running on the instance. For more information about instance profiles, go to About Instance Profiles. | |||
DeleteLoginProfile(DeleteLoginProfileRequest) |
Deletes the password for the specified user, which terminates the user's ability to
access AWS services through the AWS Management Console.
Deleting a user's password does not prevent a user from accessing IAM
through the command line interface or the API. To prevent all user access you must
also either make the access key inactive or delete it. For more information about
making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.
| |||
DeleteRole(DeleteRoleRequest) |
Deletes the specified role. The role must not have any policies attached. For more information
about roles, go to Working
with Roles.
Make sure you do not have any Amazon EC2 instances running with the role
you are about to delete. Deleting a role or instance profile that is associated
with a running instance will break any applications running on the instance. | |||
DeleteRolePolicy(DeleteRolePolicyRequest) |
Deletes the specified policy associated with the specified role.
| |||
DeleteSAMLProvider(DeleteSAMLProviderRequest) |
Deletes a SAML provider.
Deleting the provider does not update any roles that reference the SAML provider as a principal in their trust policies. Any attempt to assume a role that references a SAML provider that has been deleted will fail.
| |||
DeleteServerCertificate(DeleteServerCertificateRequest) |
Deletes the specified server certificate.
If you are using a server certificate with Elastic Load Balancing, deleting
the certificate could have implications for your application. If Elastic Load Balancing
doesn't detect the deletion of bound certificates, it may continue to use the certificates.
This could cause Elastic Load Balancing to stop accepting traffic. We recommend
that you remove the reference to the certificate from Elastic Load Balancing before
using this command to delete the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference. | |||
DeleteSigningCertificate(DeleteSigningCertificateRequest) |
Deletes the specified signing certificate associated with the specified user.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. | |||
DeleteUser(DeleteUserRequest) |
Deletes the specified user. The user must not belong to any groups, have any keys
or signing certificates, or have any attached policies.
| |||
DeleteUserPolicy(DeleteUserPolicyRequest) |
Deletes the specified policy associated with the specified user.
| |||
DeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest) |
Deletes a virtual MFA device.
| |||
Dispose()()()() |
Disposes of all managed and unmanaged resources.
(Inherited from AmazonWebServiceClient.) | |||
EnableMFADevice(EnableMFADeviceRequest) |
Enables the specified MFA device and associates it with the specified user name. When enabled,
the MFA device is required for every subsequent login by the user name associated with
the device.
| |||
EndAddRoleToInstanceProfile(IAsyncResult) |
Finishes the asynchronous execution of the AddRoleToInstanceProfile operation.
| |||
EndAddUserToGroup(IAsyncResult) |
Finishes the asynchronous execution of the AddUserToGroup operation.
| |||
EndChangePassword(IAsyncResult) |
Finishes the asynchronous execution of the ChangePassword operation.
| |||
EndCreateAccessKey(IAsyncResult) |
Finishes the asynchronous execution of the CreateAccessKey operation.
| |||
EndCreateAccountAlias(IAsyncResult) |
Finishes the asynchronous execution of the CreateAccountAlias operation.
| |||
EndCreateGroup(IAsyncResult) |
Finishes the asynchronous execution of the CreateGroup operation.
| |||
EndCreateInstanceProfile(IAsyncResult) |
Finishes the asynchronous execution of the CreateInstanceProfile operation.
| |||
EndCreateLoginProfile(IAsyncResult) |
Finishes the asynchronous execution of the CreateLoginProfile operation.
| |||
EndCreateRole(IAsyncResult) |
Finishes the asynchronous execution of the CreateRole operation.
| |||
EndCreateSAMLProvider(IAsyncResult) |
Finishes the asynchronous execution of the CreateSAMLProvider operation.
| |||
EndCreateUser(IAsyncResult) |
Finishes the asynchronous execution of the CreateUser operation.
| |||
EndCreateVirtualMFADevice(IAsyncResult) |
Finishes the asynchronous execution of the CreateVirtualMFADevice operation.
| |||
EndDeactivateMFADevice(IAsyncResult) |
Finishes the asynchronous execution of the DeactivateMFADevice operation.
| |||
EndDeleteAccessKey(IAsyncResult) |
Finishes the asynchronous execution of the DeleteAccessKey operation.
| |||
EndDeleteAccountAlias(IAsyncResult) |
Finishes the asynchronous execution of the DeleteAccountAlias operation.
| |||
EndDeleteAccountPasswordPolicy(IAsyncResult) |
Finishes the asynchronous execution of the DeleteAccountPasswordPolicy operation.
| |||
EndDeleteGroup(IAsyncResult) |
Finishes the asynchronous execution of the DeleteGroup operation.
| |||
EndDeleteGroupPolicy(IAsyncResult) |
Finishes the asynchronous execution of the DeleteGroupPolicy operation.
| |||
EndDeleteInstanceProfile(IAsyncResult) |
Finishes the asynchronous execution of the DeleteInstanceProfile operation.
| |||
EndDeleteLoginProfile(IAsyncResult) |
Finishes the asynchronous execution of the DeleteLoginProfile operation.
| |||
EndDeleteRole(IAsyncResult) |
Finishes the asynchronous execution of the DeleteRole operation.
| |||
EndDeleteRolePolicy(IAsyncResult) |
Finishes the asynchronous execution of the DeleteRolePolicy operation.
| |||
EndDeleteSAMLProvider(IAsyncResult) |
Finishes the asynchronous execution of the DeleteSAMLProvider operation.
| |||
EndDeleteServerCertificate(IAsyncResult) |
Finishes the asynchronous execution of the DeleteServerCertificate operation.
| |||
EndDeleteSigningCertificate(IAsyncResult) |
Finishes the asynchronous execution of the DeleteSigningCertificate operation.
| |||
EndDeleteUser(IAsyncResult) |
Finishes the asynchronous execution of the DeleteUser operation.
| |||
EndDeleteUserPolicy(IAsyncResult) |
Finishes the asynchronous execution of the DeleteUserPolicy operation.
| |||
EndDeleteVirtualMFADevice(IAsyncResult) |
Finishes the asynchronous execution of the DeleteVirtualMFADevice operation.
| |||
EndEnableMFADevice(IAsyncResult) |
Finishes the asynchronous execution of the EnableMFADevice operation.
| |||
EndGetAccountPasswordPolicy(IAsyncResult) |
Finishes the asynchronous execution of the GetAccountPasswordPolicy operation.
| |||
EndGetAccountSummary(IAsyncResult) |
Finishes the asynchronous execution of the GetAccountSummary operation.
| |||
EndGetGroup(IAsyncResult) |
Finishes the asynchronous execution of the GetGroup operation.
| |||
EndGetGroupPolicy(IAsyncResult) |
Finishes the asynchronous execution of the GetGroupPolicy operation.
| |||
EndGetInstanceProfile(IAsyncResult) |
Finishes the asynchronous execution of the GetInstanceProfile operation.
| |||
EndGetLoginProfile(IAsyncResult) |
Finishes the asynchronous execution of the GetLoginProfile operation.
| |||
EndGetRole(IAsyncResult) |
Finishes the asynchronous execution of the GetRole operation.
| |||
EndGetRolePolicy(IAsyncResult) |
Finishes the asynchronous execution of the GetRolePolicy operation.
| |||
EndGetSAMLProvider(IAsyncResult) |
Finishes the asynchronous execution of the GetSAMLProvider operation.
| |||
EndGetServerCertificate(IAsyncResult) |
Finishes the asynchronous execution of the GetServerCertificate operation.
| |||
EndGetUser(IAsyncResult) |
Finishes the asynchronous execution of the GetUser operation.
| |||
EndGetUserPolicy(IAsyncResult) |
Finishes the asynchronous execution of the GetUserPolicy operation.
| |||
EndListAccessKeys(IAsyncResult) |
Finishes the asynchronous execution of the ListAccessKeys operation.
| |||
EndListAccountAliases(IAsyncResult) |
Finishes the asynchronous execution of the ListAccountAliases operation.
| |||
EndListGroupPolicies(IAsyncResult) |
Finishes the asynchronous execution of the ListGroupPolicies operation.
| |||
EndListGroups(IAsyncResult) |
Finishes the asynchronous execution of the ListGroups operation.
| |||
EndListGroupsForUser(IAsyncResult) |
Finishes the asynchronous execution of the ListGroupsForUser operation.
| |||
EndListInstanceProfiles(IAsyncResult) |
Finishes the asynchronous execution of the ListInstanceProfiles operation.
| |||
EndListInstanceProfilesForRole(IAsyncResult) |
Finishes the asynchronous execution of the ListInstanceProfilesForRole operation.
| |||
EndListMFADevices(IAsyncResult) |
Finishes the asynchronous execution of the ListMFADevices operation.
| |||
EndListRolePolicies(IAsyncResult) |
Finishes the asynchronous execution of the ListRolePolicies operation.
| |||
EndListRoles(IAsyncResult) |
Finishes the asynchronous execution of the ListRoles operation.
| |||
EndListSAMLProviders(IAsyncResult) |
Finishes the asynchronous execution of the ListSAMLProviders operation.
| |||
EndListServerCertificates(IAsyncResult) |
Finishes the asynchronous execution of the ListServerCertificates operation.
| |||
EndListSigningCertificates(IAsyncResult) |
Finishes the asynchronous execution of the ListSigningCertificates operation.
| |||
EndListUserPolicies(IAsyncResult) |
Finishes the asynchronous execution of the ListUserPolicies operation.
| |||
EndListUsers(IAsyncResult) |
Finishes the asynchronous execution of the ListUsers operation.
| |||
EndListVirtualMFADevices(IAsyncResult) |
Finishes the asynchronous execution of the ListVirtualMFADevices operation.
| |||
EndPutGroupPolicy(IAsyncResult) |
Finishes the asynchronous execution of the PutGroupPolicy operation.
| |||
EndPutRolePolicy(IAsyncResult) |
Finishes the asynchronous execution of the PutRolePolicy operation.
| |||
EndPutUserPolicy(IAsyncResult) |
Finishes the asynchronous execution of the PutUserPolicy operation.
| |||
EndRemoveRoleFromInstanceProfile(IAsyncResult) |
Finishes the asynchronous execution of the RemoveRoleFromInstanceProfile operation.
| |||
EndRemoveUserFromGroup(IAsyncResult) |
Finishes the asynchronous execution of the RemoveUserFromGroup operation.
| |||
EndResyncMFADevice(IAsyncResult) |
Finishes the asynchronous execution of the ResyncMFADevice operation.
| |||
EndUpdateAccessKey(IAsyncResult) |
Finishes the asynchronous execution of the UpdateAccessKey operation.
| |||
EndUpdateAccountPasswordPolicy(IAsyncResult) |
Finishes the asynchronous execution of the UpdateAccountPasswordPolicy operation.
| |||
EndUpdateAssumeRolePolicy(IAsyncResult) |
Finishes the asynchronous execution of the UpdateAssumeRolePolicy operation.
| |||
EndUpdateGroup(IAsyncResult) |
Finishes the asynchronous execution of the UpdateGroup operation.
| |||
EndUpdateLoginProfile(IAsyncResult) |
Finishes the asynchronous execution of the UpdateLoginProfile operation.
| |||
EndUpdateSAMLProvider(IAsyncResult) |
Finishes the asynchronous execution of the UpdateSAMLProvider operation.
| |||
EndUpdateServerCertificate(IAsyncResult) |
Finishes the asynchronous execution of the UpdateServerCertificate operation.
| |||
EndUpdateSigningCertificate(IAsyncResult) |
Finishes the asynchronous execution of the UpdateSigningCertificate operation.
| |||
EndUpdateUser(IAsyncResult) |
Finishes the asynchronous execution of the UpdateUser operation.
| |||
EndUploadServerCertificate(IAsyncResult) |
Finishes the asynchronous execution of the UploadServerCertificate operation.
| |||
EndUploadSigningCertificate(IAsyncResult) |
Finishes the asynchronous execution of the UploadSigningCertificate operation.
| |||
Equals(Object) | (Inherited from Object.) | |||
ExceptionEvent |
Occurs after an exception is encountered.
(Inherited from AmazonWebServiceClient.) | |||
GetAccountPasswordPolicy()()()() |
Retrieves the password policy for the AWS account. For more information about using
a password policy, go to Managing
an IAM Password Policy.
| |||
GetAccountPasswordPolicy(GetAccountPasswordPolicyRequest) |
Retrieves the password policy for the AWS account. For more information about using
a password policy, go to Managing
an IAM Password Policy.
| |||
GetAccountSummary()()()() |
Retrieves account level information about account entity usage and IAM quotas.
For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management. | |||
GetAccountSummary(GetAccountSummaryRequest) |
Retrieves account level information about account entity usage and IAM quotas.
For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management. | |||
GetGroup(GetGroupRequest) |
Returns a list of users that are in the specified group. You can paginate the results
using the CopyC# MaxItems CopyC# Marker | |||
GetGroupPolicy(GetGroupPolicyRequest) |
Retrieves the specified policy document for the specified group. The returned policy
is URL-encoded according to RFC 3986. For more information about RFC 3986, go to
http://www.faqs.org/rfcs/rfc3986.html.
| |||
GetHashCode()()()() | Serves as a hash function for a particular type. (Inherited from Object.) | |||
GetInstanceProfile(GetInstanceProfileRequest) |
Retrieves information about the specified instance profile, including the instance
profile's path, GUID, ARN, and role. For more information about instance profiles,
go to About
Instance Profiles. For more information about ARNs, go to ARNs.
| |||
GetLoginProfile(GetLoginProfileRequest) |
Retrieves the user name and password-creation date for the specified user. If the
user has not been assigned a password, the action returns a 404 ( CopyC# NoSuchEntity | |||
GetRole(GetRoleRequest) |
Retrieves information about the specified role, including the role's path, GUID, ARN,
and the policy granting permission to assume the role. For more information about
ARNs, go to ARNs.
For more information about roles, go to Working
with Roles.
The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | |||
GetRolePolicy(GetRolePolicyRequest) |
Retrieves the specified policy document for the specified role. For more information
about roles, go to Working
with Roles.
The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | |||
GetSAMLProvider(GetSAMLProviderRequest) |
Returns the SAML provider metadocument that was uploaded when the provider was created
or updated.
| |||
GetServerCertificate(GetServerCertificateRequest) |
Retrieves information about the specified server certificate.
| |||
GetType()()()() | Gets the type of the current instance. (Inherited from Object.) | |||
GetUser()()()() |
Retrieves information about the specified user, including the user's path, unique
ID, and ARN.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. | |||
GetUser(GetUserRequest) |
Retrieves information about the specified user, including the user's path, unique
ID, and ARN.
If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. | |||
GetUserPolicy(GetUserPolicyRequest) |
Retrieves the specified policy document for the specified user. The returned policy
is URL-encoded according to RFC 3986. For more information about RFC 3986, go to
http://www.faqs.org/rfcs/rfc3986.html.
| |||
ListAccessKeys()()()() |
Returns information about the access key IDs associated with the specified user. If
there are none, the action returns an empty list.
Although each user is limited to a small number of keys, you can still paginate the
results using the
If the
| |||
ListAccessKeys(ListAccessKeysRequest) |
Returns information about the access key IDs associated with the specified user. If
there are none, the action returns an empty list.
Although each user is limited to a small number of keys, you can still paginate the
results using the
If the
| |||
ListAccountAliases()()()() |
Lists the account aliases associated with the account. For information about using
an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
and Access Management.
You can paginate the results using the | |||
ListAccountAliases(ListAccountAliasesRequest) |
Lists the account aliases associated with the account. For information about using
an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
and Access Management.
You can paginate the results using the | |||
ListGroupPolicies(ListGroupPoliciesRequest) |
Lists the names of the policies associated with the specified group. If there are
none, the action returns an empty list.
You can paginate the results using the | |||
ListGroups()()()() |
Lists the groups that have the specified path prefix.
You can paginate the results using the | |||
ListGroups(ListGroupsRequest) |
Lists the groups that have the specified path prefix.
You can paginate the results using the | |||
ListGroupsForUser(ListGroupsForUserRequest) |
Lists the groups the specified user belongs to.
You can paginate the results using the | |||
ListInstanceProfiles()()()() |
Lists the instance profiles that have the specified path prefix. If there are none,
the action returns an empty list. For more information about instance profiles,
go to About
Instance Profiles.
You can paginate the results using the | |||
ListInstanceProfiles(ListInstanceProfilesRequest) |
Lists the instance profiles that have the specified path prefix. If there are none,
the action returns an empty list. For more information about instance profiles,
go to About
Instance Profiles.
You can paginate the results using the | |||
ListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest) |
Lists the instance profiles that have the specified associated role. If there are
none, the action returns an empty list. For more information about instance profiles,
go to About
Instance Profiles.
You can paginate the results using the | |||
ListMFADevices()()()() |
Lists the MFA devices. If the request includes the user name, then this action lists
all the MFA devices associated with the specified user name. If you do not specify
a user name, IAM determines the user name implicitly based on the AWS access key
ID signing the request.
You can paginate the results using the | |||
ListMFADevices(ListMFADevicesRequest) |
Lists the MFA devices. If the request includes the user name, then this action lists
all the MFA devices associated with the specified user name. If you do not specify
a user name, IAM determines the user name implicitly based on the AWS access key
ID signing the request.
You can paginate the results using the | |||
ListRolePolicies(ListRolePoliciesRequest) |
Lists the names of the policies associated with the specified role. If there are none,
the action returns an empty list.
You can paginate the results using the | |||
ListRoles()()()() |
Lists the roles that have the specified path prefix. If there are none, the action
returns an empty list. For more information about roles, go to Working
with Roles.
You can paginate the results using the The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | |||
ListRoles(ListRolesRequest) |
Lists the roles that have the specified path prefix. If there are none, the action
returns an empty list. For more information about roles, go to Working
with Roles.
You can paginate the results using the The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | |||
ListSAMLProviders()()()() |
Lists the SAML providers in the account.
| |||
ListSAMLProviders(ListSAMLProvidersRequest) |
Lists the SAML providers in the account.
| |||
ListServerCertificates()()()() |
Lists the server certificates that have the specified path prefix. If none exist,
the action returns an empty list.
You can paginate the results using the | |||
ListServerCertificates(ListServerCertificatesRequest) |
Lists the server certificates that have the specified path prefix. If none exist,
the action returns an empty list.
You can paginate the results using the | |||
ListSigningCertificates()()()() |
Returns information about the signing certificates associated with the specified user.
If there are none, the action returns an empty list.
Although each user is limited to a small number of signing certificates, you can still paginate
the results using the
If the | |||
ListSigningCertificates(ListSigningCertificatesRequest) |
Returns information about the signing certificates associated with the specified user.
If there are none, the action returns an empty list.
Although each user is limited to a small number of signing certificates, you can still paginate
the results using the
If the | |||
ListUserPolicies(ListUserPoliciesRequest) |
Lists the names of the policies associated with the specified user. If there are none,
the action returns an empty list.
You can paginate the results using the | |||
ListUsers()()()() |
Lists the users that have the specified path prefix. If there are none, the action
returns an empty list.
You can paginate the results using the | |||
ListUsers(ListUsersRequest) |
Lists the users that have the specified path prefix. If there are none, the action
returns an empty list.
You can paginate the results using the | |||
ListVirtualMFADevices()()()() |
Lists the virtual MFA devices under the AWS account by assignment status. If you
do not specify an assignment status, the action returns a list of all virtual MFA
devices. Assignment status can be CopyC# Assigned CopyC# Unassigned CopyC# Any
You can paginate the results using the | |||
ListVirtualMFADevices(ListVirtualMFADevicesRequest) |
Lists the virtual MFA devices under the AWS account by assignment status. If you
do not specify an assignment status, the action returns a list of all virtual MFA
devices. Assignment status can be CopyC# Assigned CopyC# Unassigned CopyC# Any
You can paginate the results using the | |||
PutGroupPolicy(PutGroupPolicyRequest) |
Adds (or updates) a policy document associated with the specified group. For information about
policies, refer to Overview of Policies in Using AWS Identity and Access Management.
For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management.
| |||
PutRolePolicy(PutRolePolicyRequest) |
Adds (or updates) a policy document associated with the specified role. For information
about policies, go to Overview of Policies in Using AWS Identity and Access Management.
For information about limits on the policies you can associate with a role, see Limitations on IAM Entities in Using AWS Identity and Access Management.
| |||
PutUserPolicy(PutUserPolicyRequest) |
Adds (or updates) a policy document associated with the specified user. For information
about policies, refer to Overview of Policies in Using AWS Identity and Access Management.
For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management.
| |||
RemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest) |
Removes the specified role from the specified instance profile.
Make sure you do not have any Amazon EC2 instances running with the role
you are about to remove from the instance profile. Removing a role from an instance
profile that is associated with a running instance will break any applications running
on the instance. For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles. | |||
RemoveUserFromGroup(RemoveUserFromGroupRequest) |
Removes the specified user from the specified group.
| |||
ResyncMFADevice(ResyncMFADeviceRequest) |
Synchronizes the specified MFA device with AWS servers.
| |||
ToString()()()() | Returns a string that represents the current object. (Inherited from Object.) | |||
UpdateAccessKey(UpdateAccessKeyRequest) |
Changes the status of the specified access key from Active to Inactive, or vice versa.
This action can be used to disable a user's key as part of a key rotation work flow.
If the For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management. | |||
UpdateAccountPasswordPolicy()()()() |
Updates the password policy settings for the account. For more information about using
a password policy, go to Managing
an IAM Password Policy.
| |||
UpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest) |
Updates the password policy settings for the account. For more information about using
a password policy, go to Managing
an IAM Password Policy.
| |||
UpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest) |
Updates the policy that grants an entity permission to assume a role. For more information
about roles, go to Working
with Roles.
| |||
UpdateGroup(UpdateGroupRequest) |
Updates the name and/or the path of the specified group.
You should understand the implications of changing a group's path or
name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
| |||
UpdateLoginProfile(UpdateLoginProfileRequest) |
Changes the password for the specified user.
| |||
UpdateSAMLProvider(UpdateSAMLProviderRequest) |
Updates the metadata document for an existing SAML provider.
| |||
UpdateServerCertificate(UpdateServerCertificateRequest) |
Updates the name and/or the path of the specified server certificate.
You should understand the implications of changing a server certificate's
path or name. For more information, see Managing Server Certificates in Using AWS Identity and Access
Management.
| |||
UpdateSigningCertificate(UpdateSigningCertificateRequest) |
Changes the status of the specified signing certificate from active to disabled, or
vice versa. This action can be used to disable a user's signing certificate as part
of a certificate rotation work flow.
If the For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management. | |||
UpdateUser(UpdateUserRequest) |
Updates the name and/or the path of the specified user.
You should understand the implications of changing a user's path or
name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
| |||
UploadServerCertificate(UploadServerCertificateRequest) |
Uploads a server certificate entity for the AWS account. The server certificate entity includes
a public key certificate, a private key, and an optional certificate chain, which should
all be PEM-encoded.
For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management.
| |||
UploadSigningCertificate(UploadSigningCertificateRequest) |
Uploads an X.509 signing certificate and associates it with the specified user. Some
AWS services use X.509 signing certificates to validate requests that are signed
with a corresponding private key. When you upload the certificate, its default status
is CopyC# Active
If the
|
Object | ||
AmazonWebServiceClient | ||
AmazonIdentityManagementServiceClient |