AWS SDK for .NET Documentation
AmazonIdentityManagementServiceClient Class
AmazonAmazon.IdentityManagementAmazonIdentityManagementServiceClient Did this page help you?   Yes   No    Tell us about it...
Implementation for accessing IdentityManagementService AWS Identity and Access Management

AWS Identity and Access Management (IAM) is a web service that you can use to manage users and user permissions under your AWS account. This guide provides descriptions of the IAM API. For general information about IAM, see AWS Identity and Access Management (IAM). For the user guide for IAM, see Using IAM.

Note:
AWS provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .NET, iOS, Android, etc.). The SDKs provide a convenient way to create programmatic access to IAM and AWS. For example, the SDKs take care of tasks such as cryptographically signing requests (see below), managing errors, and retrying requests automatically. For information about the AWS SDKs, including how to download and install them, see the Tools for Amazon Web Services page.

Using the IAM Query API, you make direct calls to the IAM web service. IAM supports GET and POST requests for all actions. That is, the API does not require you to use GET for some actions and POST for others. However, GET requests are subject to the limitation size of a URL. Therefore, for operations that require larger sizes, use a POST request.

Signing Requests

Requests must be signed using an access key ID and a secret access key. We strongly recommend that you do not use your AWS account access key ID and secret access key for everyday work with IAM. You can use the access key ID and secret access key for an IAM user or you can use the AWS Security Token Service to generate temporary security credentials and use those to sign requests.

To sign requests, we recommend that you use Signature Version 4. If you have an existing application that uses Signature Version 2, you do not have to update it to use Signature Version 4. However, some operations now require Signature Version 4. The documentation for operations that require version 4 indicate this requirement.

Recording API requests

IAM supports AWS CloudTrail, which is a service that records AWS calls for your AWS account and delivers log files to an Amazon S3 bucket. By using information collected by CloudTrail, you can determine what requests were successfully made to IAM, who made the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find your log files, see the AWS CloudTrail User Guide.

Additional Resources

For more information, see the following:

Declaration Syntax
C#
public class AmazonIdentityManagementServiceClient : AmazonWebServiceClient, 
	AmazonIdentityManagementService, IDisposable
Members
All MembersConstructorsMethodsEvents



IconMemberDescription
AmazonIdentityManagementServiceClient()()()()
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance. Example App.config with credentials set.
CopyC#
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    <appSettings>
        <add key="AWSAccessKey" value="********************"/>
        <add key="AWSSecretKey" value="****************************************"/>
    </appSettings>
</configuration>

AmazonIdentityManagementServiceClient(RegionEndpoint)
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance. Example App.config with credentials set.
CopyC#
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    <appSettings>
        <add key="AWSAccessKey" value="********************"/>
        <add key="AWSSecretKey" value="****************************************"/>
    </appSettings>
</configuration>

AmazonIdentityManagementServiceClient(AmazonIdentityManagementServiceConfig)
Constructs AmazonIdentityManagementServiceClient with the credentials loaded from the application's default configuration, and if unsuccessful from the Instance Profile service on an EC2 instance. Example App.config with credentials set.
CopyC#
<?xml version="1.0" encoding="utf-8" ?>
<configuration>
    <appSettings>
        <add key="AWSAccessKey" value="********************"/>
        <add key="AWSSecretKey" value="****************************************"/>
    </appSettings>
</configuration>

AmazonIdentityManagementServiceClient(AWSCredentials)
Constructs AmazonIdentityManagementServiceClient with AWS Credentials

AmazonIdentityManagementServiceClient(AWSCredentials, RegionEndpoint)
Constructs AmazonIdentityManagementServiceClient with AWS Credentials

AmazonIdentityManagementServiceClient(AWSCredentials, AmazonIdentityManagementServiceConfig)
Constructs AmazonIdentityManagementServiceClient with AWS Credentials and an AmazonIdentityManagementServiceClient Configuration object.

AmazonIdentityManagementServiceClient(String, String)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key

AmazonIdentityManagementServiceClient(String, String, RegionEndpoint)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key

AmazonIdentityManagementServiceClient(String, String, AmazonIdentityManagementServiceConfig)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID, AWS Secret Key and an AmazonIdentityManagementServiceClient Configuration object.

AmazonIdentityManagementServiceClient(String, String, String)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key

AmazonIdentityManagementServiceClient(String, String, String, RegionEndpoint)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID and AWS Secret Key

AmazonIdentityManagementServiceClient(String, String, String, AmazonIdentityManagementServiceConfig)
Constructs AmazonIdentityManagementServiceClient with AWS Access Key ID, AWS Secret Key and an AmazonIdentityManagementServiceClient Configuration object.

AddRoleToInstanceProfile(AddRoleToInstanceProfileRequest)
Adds the specified role to the specified instance profile. For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles.

AddUserToGroup(AddUserToGroupRequest)
Adds the specified user to the specified group.

AfterResponseEvent
Occurs after a response is received from the service.
(Inherited from AmazonWebServiceClient.)
BeforeRequestEvent
Occurs before a request is issued against the service.
(Inherited from AmazonWebServiceClient.)
BeginAddRoleToInstanceProfile(AddRoleToInstanceProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the AddRoleToInstanceProfile operation.

BeginAddUserToGroup(AddUserToGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the AddUserToGroup operation.

BeginChangePassword(ChangePasswordRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ChangePassword operation.

BeginCreateAccessKey(CreateAccessKeyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateAccessKey operation.

BeginCreateAccountAlias(CreateAccountAliasRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateAccountAlias operation.

BeginCreateGroup(CreateGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateGroup operation.

BeginCreateInstanceProfile(CreateInstanceProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateInstanceProfile operation.

BeginCreateLoginProfile(CreateLoginProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateLoginProfile operation.

BeginCreateRole(CreateRoleRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateRole operation.

BeginCreateSAMLProvider(CreateSAMLProviderRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateSAMLProvider operation.

BeginCreateUser(CreateUserRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateUser operation.

BeginCreateVirtualMFADevice(CreateVirtualMFADeviceRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the CreateVirtualMFADevice operation.

BeginDeactivateMFADevice(DeactivateMFADeviceRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeactivateMFADevice operation.

BeginDeleteAccessKey(DeleteAccessKeyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteAccessKey operation.

BeginDeleteAccountAlias(DeleteAccountAliasRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteAccountAlias operation.

BeginDeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteAccountPasswordPolicy operation.

BeginDeleteGroup(DeleteGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteGroup operation.

BeginDeleteGroupPolicy(DeleteGroupPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteGroupPolicy operation.

BeginDeleteInstanceProfile(DeleteInstanceProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteInstanceProfile operation.

BeginDeleteLoginProfile(DeleteLoginProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteLoginProfile operation.

BeginDeleteRole(DeleteRoleRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteRole operation.

BeginDeleteRolePolicy(DeleteRolePolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteRolePolicy operation.

BeginDeleteSAMLProvider(DeleteSAMLProviderRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteSAMLProvider operation.

BeginDeleteServerCertificate(DeleteServerCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteServerCertificate operation.

BeginDeleteSigningCertificate(DeleteSigningCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteSigningCertificate operation.

BeginDeleteUser(DeleteUserRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteUser operation.

BeginDeleteUserPolicy(DeleteUserPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteUserPolicy operation.

BeginDeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the DeleteVirtualMFADevice operation.

BeginEnableMFADevice(EnableMFADeviceRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the EnableMFADevice operation.

BeginGetAccountPasswordPolicy(GetAccountPasswordPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetAccountPasswordPolicy operation.

BeginGetAccountSummary(GetAccountSummaryRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetAccountSummary operation.

BeginGetGroup(GetGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetGroup operation.

BeginGetGroupPolicy(GetGroupPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetGroupPolicy operation.

BeginGetInstanceProfile(GetInstanceProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetInstanceProfile operation.

BeginGetLoginProfile(GetLoginProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetLoginProfile operation.

BeginGetRole(GetRoleRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetRole operation.

BeginGetRolePolicy(GetRolePolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetRolePolicy operation.

BeginGetSAMLProvider(GetSAMLProviderRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetSAMLProvider operation.

BeginGetServerCertificate(GetServerCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetServerCertificate operation.

BeginGetUser(GetUserRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetUser operation.

BeginGetUserPolicy(GetUserPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the GetUserPolicy operation.

BeginListAccessKeys(ListAccessKeysRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListAccessKeys operation.

BeginListAccountAliases(ListAccountAliasesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListAccountAliases operation.

BeginListGroupPolicies(ListGroupPoliciesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListGroupPolicies operation.

BeginListGroups(ListGroupsRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListGroups operation.

BeginListGroupsForUser(ListGroupsForUserRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListGroupsForUser operation.

BeginListInstanceProfiles(ListInstanceProfilesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListInstanceProfiles operation.

BeginListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListInstanceProfilesForRole operation.

BeginListMFADevices(ListMFADevicesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListMFADevices operation.

BeginListRolePolicies(ListRolePoliciesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListRolePolicies operation.

BeginListRoles(ListRolesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListRoles operation.

BeginListSAMLProviders(ListSAMLProvidersRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListSAMLProviders operation.

BeginListServerCertificates(ListServerCertificatesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListServerCertificates operation.

BeginListSigningCertificates(ListSigningCertificatesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListSigningCertificates operation.

BeginListUserPolicies(ListUserPoliciesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListUserPolicies operation.

BeginListUsers(ListUsersRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListUsers operation.

BeginListVirtualMFADevices(ListVirtualMFADevicesRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ListVirtualMFADevices operation.

BeginPutGroupPolicy(PutGroupPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the PutGroupPolicy operation.

BeginPutRolePolicy(PutRolePolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the PutRolePolicy operation.

BeginPutUserPolicy(PutUserPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the PutUserPolicy operation.

BeginRemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the RemoveRoleFromInstanceProfile operation.

BeginRemoveUserFromGroup(RemoveUserFromGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the RemoveUserFromGroup operation.

BeginResyncMFADevice(ResyncMFADeviceRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the ResyncMFADevice operation.

BeginUpdateAccessKey(UpdateAccessKeyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateAccessKey operation.

BeginUpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateAccountPasswordPolicy operation.

BeginUpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateAssumeRolePolicy operation.

BeginUpdateGroup(UpdateGroupRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateGroup operation.

BeginUpdateLoginProfile(UpdateLoginProfileRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateLoginProfile operation.

BeginUpdateSAMLProvider(UpdateSAMLProviderRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateSAMLProvider operation.

BeginUpdateServerCertificate(UpdateServerCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateServerCertificate operation.

BeginUpdateSigningCertificate(UpdateSigningCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateSigningCertificate operation.

BeginUpdateUser(UpdateUserRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UpdateUser operation.

BeginUploadServerCertificate(UploadServerCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UploadServerCertificate operation.

BeginUploadSigningCertificate(UploadSigningCertificateRequest, AsyncCallback, Object)
Initiates the asynchronous execution of the UploadSigningCertificate operation.

ChangePassword(ChangePasswordRequest)
Changes the password of the IAM user calling
CopyC#
ChangePassword
. The root account password is not affected by this action. For information about modifying passwords, see Managing Passwords.

CreateAccessKey()()()()
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is
CopyC#
Active
.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.

To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.

CreateAccessKey(CreateAccessKeyRequest)
Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is
CopyC#
Active
.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.

To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.

CreateAccountAlias(CreateAccountAliasRequest)
This action creates an alias for your AWS account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

CreateGroup(CreateGroupRequest)
Creates a new group.

For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateInstanceProfile(CreateInstanceProfileRequest)
Creates a new instance profile. For information about instance profiles, go to About Instance Profiles.

For information about the number of instance profiles you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateLoginProfile(CreateLoginProfileRequest)
Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console. For more information about managing passwords, see Managing Passwords in Using IAM.

CreateRole(CreateRoleRequest)
Creates a new role for your AWS account. For more information about roles, go to Working with Roles. For information about limitations on role names and the number of roles you can create, go to Limitations on IAM Entities in Using AWS Identity and Access Management.

The example policy grants permission to an EC2 instance to assume the role. The policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


CreateSAMLProvider(CreateSAMLProviderRequest)
Creates an IAM entity to describe an identity provider (IdP) that supports SAML 2.0.

The SAML provider that you create with this operation can be used as a principal in a role's trust policy to establish a trust relationship between AWS and a SAML identity provider. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS.

When you create the SAML provider, you upload an a SAML metadata document that you get from your IdP and that includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP.

Note:
This operation requires Signature Version 4.

For more information, see Giving Console Access Using SAML and Creating Temporary Security Credentials for SAML Federation in the Using Temporary Credentials guide.


CreateUser(CreateUserRequest)
Creates a new user for your AWS account.

For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.


CreateVirtualMFADevice(CreateVirtualMFADeviceRequest)
Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access Management.

For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management.

The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.

DeactivateMFADevice(DeactivateMFADeviceRequest)
Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.

DeleteAccessKey(DeleteAccessKeyRequest)
Deletes the access key associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.


DeleteAccountAlias(DeleteAccountAliasRequest)
Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

DeleteAccountPasswordPolicy()()()()
Deletes the password policy for the AWS account.

DeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest)
Deletes the password policy for the AWS account.

DeleteGroup(DeleteGroupRequest)
Deletes the specified group. The group must not contain any users or have any attached policies.

DeleteGroupPolicy(DeleteGroupPolicyRequest)
Deletes the specified policy that is associated with the specified group.

DeleteInstanceProfile(DeleteInstanceProfileRequest)
Deletes the specified instance profile. The instance profile must not have an associated role. Make sure you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

For more information about instance profiles, go to About Instance Profiles.


DeleteLoginProfile(DeleteLoginProfileRequest)
Deletes the password for the specified user, which terminates the user's ability to access AWS services through the AWS Management Console. Deleting a user's password does not prevent a user from accessing IAM through the command line interface or the API. To prevent all user access you must also either make the access key inactive or delete it. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.

DeleteRole(DeleteRoleRequest)
Deletes the specified role. The role must not have any policies attached. For more information about roles, go to Working with Roles. Make sure you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

DeleteRolePolicy(DeleteRolePolicyRequest)
Deletes the specified policy associated with the specified role.

DeleteSAMLProvider(DeleteSAMLProviderRequest)
Deletes a SAML provider.

Deleting the provider does not update any roles that reference the SAML provider as a principal in their trust policies. Any attempt to assume a role that references a SAML provider that has been deleted will fail.

Note:
This operation requires Signature Version 4.

DeleteServerCertificate(DeleteServerCertificateRequest)
Deletes the specified server certificate. If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.

DeleteSigningCertificate(DeleteSigningCertificateRequest)
Deletes the specified signing certificate associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.


DeleteUser(DeleteUserRequest)
Deletes the specified user. The user must not belong to any groups, have any keys or signing certificates, or have any attached policies.

DeleteUserPolicy(DeleteUserPolicyRequest)
Deletes the specified policy associated with the specified user.

DeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest)
Deletes a virtual MFA device.
Note:
You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.

Dispose()()()()
Disposes of all managed and unmanaged resources.
(Inherited from AmazonWebServiceClient.)
EnableMFADevice(EnableMFADeviceRequest)
Enables the specified MFA device and associates it with the specified user name. When enabled, the MFA device is required for every subsequent login by the user name associated with the device.

EndAddRoleToInstanceProfile(IAsyncResult)
Finishes the asynchronous execution of the AddRoleToInstanceProfile operation.

EndAddUserToGroup(IAsyncResult)
Finishes the asynchronous execution of the AddUserToGroup operation.

EndChangePassword(IAsyncResult)
Finishes the asynchronous execution of the ChangePassword operation.

EndCreateAccessKey(IAsyncResult)
Finishes the asynchronous execution of the CreateAccessKey operation.

EndCreateAccountAlias(IAsyncResult)
Finishes the asynchronous execution of the CreateAccountAlias operation.

EndCreateGroup(IAsyncResult)
Finishes the asynchronous execution of the CreateGroup operation.

EndCreateInstanceProfile(IAsyncResult)
Finishes the asynchronous execution of the CreateInstanceProfile operation.

EndCreateLoginProfile(IAsyncResult)
Finishes the asynchronous execution of the CreateLoginProfile operation.

EndCreateRole(IAsyncResult)
Finishes the asynchronous execution of the CreateRole operation.

EndCreateSAMLProvider(IAsyncResult)
Finishes the asynchronous execution of the CreateSAMLProvider operation.

EndCreateUser(IAsyncResult)
Finishes the asynchronous execution of the CreateUser operation.

EndCreateVirtualMFADevice(IAsyncResult)
Finishes the asynchronous execution of the CreateVirtualMFADevice operation.

EndDeactivateMFADevice(IAsyncResult)
Finishes the asynchronous execution of the DeactivateMFADevice operation.

EndDeleteAccessKey(IAsyncResult)
Finishes the asynchronous execution of the DeleteAccessKey operation.

EndDeleteAccountAlias(IAsyncResult)
Finishes the asynchronous execution of the DeleteAccountAlias operation.

EndDeleteAccountPasswordPolicy(IAsyncResult)
Finishes the asynchronous execution of the DeleteAccountPasswordPolicy operation.

EndDeleteGroup(IAsyncResult)
Finishes the asynchronous execution of the DeleteGroup operation.

EndDeleteGroupPolicy(IAsyncResult)
Finishes the asynchronous execution of the DeleteGroupPolicy operation.

EndDeleteInstanceProfile(IAsyncResult)
Finishes the asynchronous execution of the DeleteInstanceProfile operation.

EndDeleteLoginProfile(IAsyncResult)
Finishes the asynchronous execution of the DeleteLoginProfile operation.

EndDeleteRole(IAsyncResult)
Finishes the asynchronous execution of the DeleteRole operation.

EndDeleteRolePolicy(IAsyncResult)
Finishes the asynchronous execution of the DeleteRolePolicy operation.

EndDeleteSAMLProvider(IAsyncResult)
Finishes the asynchronous execution of the DeleteSAMLProvider operation.

EndDeleteServerCertificate(IAsyncResult)
Finishes the asynchronous execution of the DeleteServerCertificate operation.

EndDeleteSigningCertificate(IAsyncResult)
Finishes the asynchronous execution of the DeleteSigningCertificate operation.

EndDeleteUser(IAsyncResult)
Finishes the asynchronous execution of the DeleteUser operation.

EndDeleteUserPolicy(IAsyncResult)
Finishes the asynchronous execution of the DeleteUserPolicy operation.

EndDeleteVirtualMFADevice(IAsyncResult)
Finishes the asynchronous execution of the DeleteVirtualMFADevice operation.

EndEnableMFADevice(IAsyncResult)
Finishes the asynchronous execution of the EnableMFADevice operation.

EndGetAccountPasswordPolicy(IAsyncResult)
Finishes the asynchronous execution of the GetAccountPasswordPolicy operation.

EndGetAccountSummary(IAsyncResult)
Finishes the asynchronous execution of the GetAccountSummary operation.

EndGetGroup(IAsyncResult)
Finishes the asynchronous execution of the GetGroup operation.

EndGetGroupPolicy(IAsyncResult)
Finishes the asynchronous execution of the GetGroupPolicy operation.

EndGetInstanceProfile(IAsyncResult)
Finishes the asynchronous execution of the GetInstanceProfile operation.

EndGetLoginProfile(IAsyncResult)
Finishes the asynchronous execution of the GetLoginProfile operation.

EndGetRole(IAsyncResult)
Finishes the asynchronous execution of the GetRole operation.

EndGetRolePolicy(IAsyncResult)
Finishes the asynchronous execution of the GetRolePolicy operation.

EndGetSAMLProvider(IAsyncResult)
Finishes the asynchronous execution of the GetSAMLProvider operation.

EndGetServerCertificate(IAsyncResult)
Finishes the asynchronous execution of the GetServerCertificate operation.

EndGetUser(IAsyncResult)
Finishes the asynchronous execution of the GetUser operation.

EndGetUserPolicy(IAsyncResult)
Finishes the asynchronous execution of the GetUserPolicy operation.

EndListAccessKeys(IAsyncResult)
Finishes the asynchronous execution of the ListAccessKeys operation.

EndListAccountAliases(IAsyncResult)
Finishes the asynchronous execution of the ListAccountAliases operation.

EndListGroupPolicies(IAsyncResult)
Finishes the asynchronous execution of the ListGroupPolicies operation.

EndListGroups(IAsyncResult)
Finishes the asynchronous execution of the ListGroups operation.

EndListGroupsForUser(IAsyncResult)
Finishes the asynchronous execution of the ListGroupsForUser operation.

EndListInstanceProfiles(IAsyncResult)
Finishes the asynchronous execution of the ListInstanceProfiles operation.

EndListInstanceProfilesForRole(IAsyncResult)
Finishes the asynchronous execution of the ListInstanceProfilesForRole operation.

EndListMFADevices(IAsyncResult)
Finishes the asynchronous execution of the ListMFADevices operation.

EndListRolePolicies(IAsyncResult)
Finishes the asynchronous execution of the ListRolePolicies operation.

EndListRoles(IAsyncResult)
Finishes the asynchronous execution of the ListRoles operation.

EndListSAMLProviders(IAsyncResult)
Finishes the asynchronous execution of the ListSAMLProviders operation.

EndListServerCertificates(IAsyncResult)
Finishes the asynchronous execution of the ListServerCertificates operation.

EndListSigningCertificates(IAsyncResult)
Finishes the asynchronous execution of the ListSigningCertificates operation.

EndListUserPolicies(IAsyncResult)
Finishes the asynchronous execution of the ListUserPolicies operation.

EndListUsers(IAsyncResult)
Finishes the asynchronous execution of the ListUsers operation.

EndListVirtualMFADevices(IAsyncResult)
Finishes the asynchronous execution of the ListVirtualMFADevices operation.

EndPutGroupPolicy(IAsyncResult)
Finishes the asynchronous execution of the PutGroupPolicy operation.

EndPutRolePolicy(IAsyncResult)
Finishes the asynchronous execution of the PutRolePolicy operation.

EndPutUserPolicy(IAsyncResult)
Finishes the asynchronous execution of the PutUserPolicy operation.

EndRemoveRoleFromInstanceProfile(IAsyncResult)
Finishes the asynchronous execution of the RemoveRoleFromInstanceProfile operation.

EndRemoveUserFromGroup(IAsyncResult)
Finishes the asynchronous execution of the RemoveUserFromGroup operation.

EndResyncMFADevice(IAsyncResult)
Finishes the asynchronous execution of the ResyncMFADevice operation.

EndUpdateAccessKey(IAsyncResult)
Finishes the asynchronous execution of the UpdateAccessKey operation.

EndUpdateAccountPasswordPolicy(IAsyncResult)
Finishes the asynchronous execution of the UpdateAccountPasswordPolicy operation.

EndUpdateAssumeRolePolicy(IAsyncResult)
Finishes the asynchronous execution of the UpdateAssumeRolePolicy operation.

EndUpdateGroup(IAsyncResult)
Finishes the asynchronous execution of the UpdateGroup operation.

EndUpdateLoginProfile(IAsyncResult)
Finishes the asynchronous execution of the UpdateLoginProfile operation.

EndUpdateSAMLProvider(IAsyncResult)
Finishes the asynchronous execution of the UpdateSAMLProvider operation.

EndUpdateServerCertificate(IAsyncResult)
Finishes the asynchronous execution of the UpdateServerCertificate operation.

EndUpdateSigningCertificate(IAsyncResult)
Finishes the asynchronous execution of the UpdateSigningCertificate operation.

EndUpdateUser(IAsyncResult)
Finishes the asynchronous execution of the UpdateUser operation.

EndUploadServerCertificate(IAsyncResult)
Finishes the asynchronous execution of the UploadServerCertificate operation.

EndUploadSigningCertificate(IAsyncResult)
Finishes the asynchronous execution of the UploadSigningCertificate operation.

Equals(Object)
Determines whether the specified Object is equal to the current Object.
(Inherited from Object.)
ExceptionEvent
Occurs after an exception is encountered.
(Inherited from AmazonWebServiceClient.)
GetAccountPasswordPolicy()()()()
Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy.

GetAccountPasswordPolicy(GetAccountPasswordPolicyRequest)
Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy.

GetAccountSummary()()()()
Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management.


GetAccountSummary(GetAccountSummaryRequest)
Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management.


GetGroup(GetGroupRequest)
Returns a list of users that are in the specified group. You can paginate the results using the
CopyC#
MaxItems
and
CopyC#
Marker
parameters.

GetGroupPolicy(GetGroupPolicyRequest)
Retrieves the specified policy document for the specified group. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

GetHashCode()()()()
Serves as a hash function for a particular type.
(Inherited from Object.)
GetInstanceProfile(GetInstanceProfileRequest)
Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role. For more information about instance profiles, go to About Instance Profiles. For more information about ARNs, go to ARNs.

GetLoginProfile(GetLoginProfileRequest)
Retrieves the user name and password-creation date for the specified user. If the user has not been assigned a password, the action returns a 404 (
CopyC#
NoSuchEntity
) error.

GetRole(GetRoleRequest)
Retrieves information about the specified role, including the role's path, GUID, ARN, and the policy granting permission to assume the role. For more information about ARNs, go to ARNs. For more information about roles, go to Working with Roles.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


GetRolePolicy(GetRolePolicyRequest)
Retrieves the specified policy document for the specified role. For more information about roles, go to Working with Roles.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


GetSAMLProvider(GetSAMLProviderRequest)
Returns the SAML provider metadocument that was uploaded when the provider was created or updated.
Note:
This operation requires Signature Version 4.

GetServerCertificate(GetServerCertificateRequest)
Retrieves information about the specified server certificate.

GetType()()()()
Gets the type of the current instance.
(Inherited from Object.)
GetUser()()()()
Retrieves information about the specified user, including the user's path, unique ID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.


GetUser(GetUserRequest)
Retrieves information about the specified user, including the user's path, unique ID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.


GetUserPolicy(GetUserPolicyRequest)
Retrieves the specified policy document for the specified user. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

ListAccessKeys()()()()
Returns information about the access key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Note:
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

ListAccessKeys(ListAccessKeysRequest)
Returns information about the access key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Note:
To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

ListAccountAliases()()()()
Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListAccountAliases(ListAccountAliasesRequest)
Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroupPolicies(ListGroupPoliciesRequest)
Lists the names of the policies associated with the specified group. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroups()()()()
Lists the groups that have the specified path prefix.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroups(ListGroupsRequest)
Lists the groups that have the specified path prefix.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListGroupsForUser(ListGroupsForUserRequest)
Lists the groups the specified user belongs to.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListInstanceProfiles()()()()
Lists the instance profiles that have the specified path prefix. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListInstanceProfiles(ListInstanceProfilesRequest)
Lists the instance profiles that have the specified path prefix. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest)
Lists the instance profiles that have the specified associated role. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListMFADevices()()()()
Lists the MFA devices. If the request includes the user name, then this action lists all the MFA devices associated with the specified user name. If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListMFADevices(ListMFADevicesRequest)
Lists the MFA devices. If the request includes the user name, then this action lists all the MFA devices associated with the specified user name. If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListRolePolicies(ListRolePoliciesRequest)
Lists the names of the policies associated with the specified role. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListRoles()()()()
Lists the roles that have the specified path prefix. If there are none, the action returns an empty list. For more information about roles, go to Working with Roles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


ListRoles(ListRolesRequest)
Lists the roles that have the specified path prefix. If there are none, the action returns an empty list. For more information about roles, go to Working with Roles.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.


ListSAMLProviders()()()()
Lists the SAML providers in the account.
Note:
This operation requires Signature Version 4.

ListSAMLProviders(ListSAMLProvidersRequest)
Lists the SAML providers in the account.
Note:
This operation requires Signature Version 4.

ListServerCertificates()()()()
Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListServerCertificates(ListServerCertificatesRequest)
Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListSigningCertificates()()()()
Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the user name is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.


ListSigningCertificates(ListSigningCertificatesRequest)
Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.

If the

CopyC#
UserName
field is not specified, the user name is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.


ListUserPolicies(ListUserPoliciesRequest)
Lists the names of the policies associated with the specified user. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListUsers()()()()
Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListUsers(ListUsersRequest)
Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListVirtualMFADevices()()()()
Lists the virtual MFA devices under the AWS account by assignment status. If you do not specify an assignment status, the action returns a list of all virtual MFA devices. Assignment status can be
CopyC#
Assigned
,
CopyC#
Unassigned
, or
CopyC#
Any
.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


ListVirtualMFADevices(ListVirtualMFADevicesRequest)
Lists the virtual MFA devices under the AWS account by assignment status. If you do not specify an assignment status, the action returns a list of all virtual MFA devices. Assignment status can be
CopyC#
Assigned
,
CopyC#
Unassigned
, or
CopyC#
Any
.

You can paginate the results using the

CopyC#
MaxItems
and
CopyC#
Marker
parameters.


PutGroupPolicy(PutGroupPolicyRequest)
Adds (or updates) a policy document associated with the specified group. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutGroupPolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

PutRolePolicy(PutRolePolicyRequest)
Adds (or updates) a policy document associated with the specified role. For information about policies, go to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the policies you can associate with a role, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutRolePolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

PutUserPolicy(PutUserPolicyRequest)
Adds (or updates) a policy document associated with the specified user. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management.

For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because policy documents can be large, you should use POST rather than GET when calling
CopyC#
PutUserPolicy
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

RemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest)
Removes the specified role from the specified instance profile. Make sure you do not have any Amazon EC2 instances running with the role you are about to remove from the instance profile. Removing a role from an instance profile that is associated with a running instance will break any applications running on the instance.

For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles.


RemoveUserFromGroup(RemoveUserFromGroupRequest)
Removes the specified user from the specified group.

ResyncMFADevice(ResyncMFADeviceRequest)
Synchronizes the specified MFA device with AWS servers.

ToString()()()()
Returns a string that represents the current object.
(Inherited from Object.)
UpdateAccessKey(UpdateAccessKeyRequest)
Changes the status of the specified access key from Active to Inactive, or vice versa. This action can be used to disable a user's key as part of a key rotation work flow.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management.


UpdateAccountPasswordPolicy()()()()
Updates the password policy settings for the account. For more information about using a password policy, go to Managing an IAM Password Policy.

UpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest)
Updates the password policy settings for the account. For more information about using a password policy, go to Managing an IAM Password Policy.

UpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest)
Updates the policy that grants an entity permission to assume a role. For more information about roles, go to Working with Roles.

UpdateGroup(UpdateGroupRequest)
Updates the name and/or the path of the specified group. You should understand the implications of changing a group's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
Note:
To change a group name the requester must have appropriate permissions on both the source object and the target object. For example, to change Managers to MGRs, the entity making the request must have permission on Managers and MGRs, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateLoginProfile(UpdateLoginProfileRequest)
Changes the password for the specified user.

UpdateSAMLProvider(UpdateSAMLProviderRequest)
Updates the metadata document for an existing SAML provider.
Note:
This operation requires Signature Version 4.

UpdateServerCertificate(UpdateServerCertificateRequest)
Updates the name and/or the path of the specified server certificate. You should understand the implications of changing a server certificate's path or name. For more information, see Managing Server Certificates in Using AWS Identity and Access Management.
Note:
To change a server certificate name the requester must have appropriate permissions on both the source object and the target object. For example, to change the name from ProductionCert to ProdCert, the entity making the request must have permission on ProductionCert and ProdCert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateSigningCertificate(UpdateSigningCertificateRequest)
Changes the status of the specified signing certificate from active to disabled, or vice versa. This action can be used to disable a user's signing certificate as part of a certificate rotation work flow.

If the

CopyC#
UserName
field is not specified, the UserName is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management.


UpdateUser(UpdateUserRequest)
Updates the name and/or the path of the specified user. You should understand the implications of changing a user's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.
Note:
To change a user name the requester must have appropriate permissions on both the source object and the target object. For example, to change Bob to Robert, the entity making the request must have permission on Bob and Robert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UploadServerCertificate(UploadServerCertificateRequest)
Uploads a server certificate entity for the AWS account. The server certificate entity includes a public key certificate, a private key, and an optional certificate chain, which should all be PEM-encoded.

For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management.

Note:
Because the body of the public key certificate, private key, and the certificate chain can be large, you should use POST rather than GET when calling
CopyC#
UploadServerCertificate
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

UploadSigningCertificate(UploadSigningCertificateRequest)
Uploads an X.509 signing certificate and associates it with the specified user. Some AWS services use X.509 signing certificates to validate requests that are signed with a corresponding private key. When you upload the certificate, its default status is
CopyC#
Active
.

If the

CopyC#
UserName
field is not specified, the user name is determined implicitly based on the AWS access key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Note:
Because the body of a X.509 certificate can be large, you should use POST rather than GET when calling
CopyC#
UploadSigningCertificate
. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Inheritance Hierarchy
Object
AmazonWebServiceClient
 AmazonIdentityManagementServiceClient

Assembly: AWSSDK (Module: AWSSDK) Version: 1.5.60.0 (1.5.60.0)