@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AbstractAWSSSOAdmin extends Object implements AWSSSOAdmin
AWSSSOAdmin
. Convenient method forms pass through to the corresponding overload
that takes a request object, which throws an UnsupportedOperationException
.ENDPOINT_PREFIX
public AttachManagedPolicyToPermissionSetResult attachManagedPolicyToPermissionSet(AttachManagedPolicyToPermissionSetRequest request)
AWSSSOAdmin
Attaches an IAM managed policy ARN to a permission set.
If the permission set is already referenced by one or more account assignments, you will need to call
ProvisionPermissionSet
after this action to apply the corresponding IAM policy updates to
all assigned accounts.
attachManagedPolicyToPermissionSet
in interface AWSSSOAdmin
public CreateAccountAssignmentResult createAccountAssignment(CreateAccountAssignmentRequest request)
AWSSSOAdmin
Assigns access to a principal for a specified AWS account using a specified permission set.
The term principal here refers to a user or group that is defined in AWS SSO.
As part of a successful CreateAccountAssignment
call, the specified permission set will
automatically be provisioned to the account in the form of an IAM policy attached to the SSO-created IAM role. If
the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts
will not be updated automatically. In this case, you will need to call
ProvisionPermissionSet
to make these updates.
createAccountAssignment
in interface AWSSSOAdmin
public CreatePermissionSetResult createPermissionSet(CreatePermissionSetRequest request)
AWSSSOAdmin
Creates a permission set within a specified SSO instance.
To grant users and groups access to AWS account resources, use CreateAccountAssignment
.
createPermissionSet
in interface AWSSSOAdmin
public DeleteAccountAssignmentResult deleteAccountAssignment(DeleteAccountAssignmentRequest request)
AWSSSOAdmin
Deletes a principal's access from a specified AWS account using a specified permission set.
deleteAccountAssignment
in interface AWSSSOAdmin
public DeleteInlinePolicyFromPermissionSetResult deleteInlinePolicyFromPermissionSet(DeleteInlinePolicyFromPermissionSetRequest request)
AWSSSOAdmin
Deletes the inline policy from a specified permission set.
deleteInlinePolicyFromPermissionSet
in interface AWSSSOAdmin
public DeletePermissionSetResult deletePermissionSet(DeletePermissionSetRequest request)
AWSSSOAdmin
Deletes the specified permission set.
deletePermissionSet
in interface AWSSSOAdmin
public DescribeAccountAssignmentCreationStatusResult describeAccountAssignmentCreationStatus(DescribeAccountAssignmentCreationStatusRequest request)
AWSSSOAdmin
Describes the status of the assignment creation request.
describeAccountAssignmentCreationStatus
in interface AWSSSOAdmin
public DescribeAccountAssignmentDeletionStatusResult describeAccountAssignmentDeletionStatus(DescribeAccountAssignmentDeletionStatusRequest request)
AWSSSOAdmin
Describes the status of the assignment deletion request.
describeAccountAssignmentDeletionStatus
in interface AWSSSOAdmin
public DescribePermissionSetResult describePermissionSet(DescribePermissionSetRequest request)
AWSSSOAdmin
Gets the details of the permission set.
describePermissionSet
in interface AWSSSOAdmin
public DescribePermissionSetProvisioningStatusResult describePermissionSetProvisioningStatus(DescribePermissionSetProvisioningStatusRequest request)
AWSSSOAdmin
Describes the status for the given permission set provisioning request.
describePermissionSetProvisioningStatus
in interface AWSSSOAdmin
public DetachManagedPolicyFromPermissionSetResult detachManagedPolicyFromPermissionSet(DetachManagedPolicyFromPermissionSetRequest request)
AWSSSOAdmin
Detaches the attached IAM managed policy ARN from the specified permission set.
detachManagedPolicyFromPermissionSet
in interface AWSSSOAdmin
public GetInlinePolicyForPermissionSetResult getInlinePolicyForPermissionSet(GetInlinePolicyForPermissionSetRequest request)
AWSSSOAdmin
Obtains the inline policy assigned to the permission set.
getInlinePolicyForPermissionSet
in interface AWSSSOAdmin
public ListAccountAssignmentCreationStatusResult listAccountAssignmentCreationStatus(ListAccountAssignmentCreationStatusRequest request)
AWSSSOAdmin
Lists the status of the AWS account assignment creation requests for a specified SSO instance.
listAccountAssignmentCreationStatus
in interface AWSSSOAdmin
public ListAccountAssignmentDeletionStatusResult listAccountAssignmentDeletionStatus(ListAccountAssignmentDeletionStatusRequest request)
AWSSSOAdmin
Lists the status of the AWS account assignment deletion requests for a specified SSO instance.
listAccountAssignmentDeletionStatus
in interface AWSSSOAdmin
public ListAccountAssignmentsResult listAccountAssignments(ListAccountAssignmentsRequest request)
AWSSSOAdmin
Lists the assignee of the specified AWS account with the specified permission set.
listAccountAssignments
in interface AWSSSOAdmin
public ListAccountsForProvisionedPermissionSetResult listAccountsForProvisionedPermissionSet(ListAccountsForProvisionedPermissionSetRequest request)
AWSSSOAdmin
Lists all the AWS accounts where the specified permission set is provisioned.
listAccountsForProvisionedPermissionSet
in interface AWSSSOAdmin
public ListInstancesResult listInstances(ListInstancesRequest request)
AWSSSOAdmin
Lists the SSO instances that the caller has access to.
listInstances
in interface AWSSSOAdmin
public ListManagedPoliciesInPermissionSetResult listManagedPoliciesInPermissionSet(ListManagedPoliciesInPermissionSetRequest request)
AWSSSOAdmin
Lists the IAM managed policy that is attached to a specified permission set.
listManagedPoliciesInPermissionSet
in interface AWSSSOAdmin
public ListPermissionSetProvisioningStatusResult listPermissionSetProvisioningStatus(ListPermissionSetProvisioningStatusRequest request)
AWSSSOAdmin
Lists the status of the permission set provisioning requests for a specified SSO instance.
listPermissionSetProvisioningStatus
in interface AWSSSOAdmin
public ListPermissionSetsResult listPermissionSets(ListPermissionSetsRequest request)
AWSSSOAdmin
Lists the PermissionSets in an SSO instance.
listPermissionSets
in interface AWSSSOAdmin
public ListPermissionSetsProvisionedToAccountResult listPermissionSetsProvisionedToAccount(ListPermissionSetsProvisionedToAccountRequest request)
AWSSSOAdmin
Lists all the permission sets that are provisioned to a specified AWS account.
listPermissionSetsProvisionedToAccount
in interface AWSSSOAdmin
public ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)
AWSSSOAdmin
Lists the tags that are attached to a specified resource.
listTagsForResource
in interface AWSSSOAdmin
public ProvisionPermissionSetResult provisionPermissionSet(ProvisionPermissionSetRequest request)
AWSSSOAdmin
The process by which a specified permission set is provisioned to the specified target.
provisionPermissionSet
in interface AWSSSOAdmin
public PutInlinePolicyToPermissionSetResult putInlinePolicyToPermissionSet(PutInlinePolicyToPermissionSetRequest request)
AWSSSOAdmin
Attaches an IAM inline policy to a permission set.
If the permission set is already referenced by one or more account assignments, you will need to call
ProvisionPermissionSet
after this action to apply the corresponding IAM policy updates to
all assigned accounts.
putInlinePolicyToPermissionSet
in interface AWSSSOAdmin
public TagResourceResult tagResource(TagResourceRequest request)
AWSSSOAdmin
Associates a set of tags with a specified resource.
tagResource
in interface AWSSSOAdmin
public UntagResourceResult untagResource(UntagResourceRequest request)
AWSSSOAdmin
Disassociates a set of tags from a specified resource.
untagResource
in interface AWSSSOAdmin
public UpdatePermissionSetResult updatePermissionSet(UpdatePermissionSetRequest request)
AWSSSOAdmin
Updates an existing permission set.
updatePermissionSet
in interface AWSSSOAdmin
public void shutdown()
AWSSSOAdmin
shutdown
in interface AWSSSOAdmin
public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
AWSSSOAdmin
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
getCachedResponseMetadata
in interface AWSSSOAdmin
request
- The originally executed request.