AmazonIdentityManagementClient (AWS SDK for Java

Overview

Package

Class

Index

Help

Did this page help you?
Yes No Tell us about it...

PREV CLASS NEXT CLASS

FRAMES NO FRAMES

SUMMARY: NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

com.amazonaws.services.identitymanagement
Class AmazonIdentityManagementClient

java.lang.Object
  com.amazonaws.AmazonWebServiceClient
      com.amazonaws.services.identitymanagement.AmazonIdentityManagementClient

All Implemented Interfaces:: AmazonIdentityManagement

Direct Known Subclasses:: AmazonIdentityManagementAsyncClient

public class AmazonIdentityManagementClient
extends AmazonWebServiceClient
implements AmazonIdentityManagement
extends AmazonWebServiceClient
implements AmazonIdentityManagement

Client for accessing AmazonIdentityManagement. All service calls made using this client are blocking, and will not return until the service call completes.

AWS Identity and Access Management

This guide provides descriptions of the Identity and Access Management (IAM) API as well as links to related content in the guide, Using IAM .

IAM is a web service that enables AWS customers to manage users and user permissions under their AWS account. For more information about this product go to AWS Identity and Access Management (IAM) . For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference . For general information about using the Query API with IAM, go to Making Query Requests in Using IAM .

If you're new to AWS and need additional technical information about a specific AWS product, you can find the product's technical documentation at http://aws.amazon.com/documentation/ .

Constructor Summary
`AmazonIdentityManagementClient()` Constructs a new client to invoke service methods on AmazonIdentityManagement.
`AmazonIdentityManagementClient(AWSCredentials awsCredentials)` Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials.
`AmazonIdentityManagementClient(AWSCredentials awsCredentials, ClientConfiguration clientConfiguration)` Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials and client configuration options.
`AmazonIdentityManagementClient(AWSCredentialsProvider awsCredentialsProvider)` Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials provider.
`AmazonIdentityManagementClient(AWSCredentialsProvider awsCredentialsProvider, ClientConfiguration clientConfiguration)` Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials provider and client configuration options.
`AmazonIdentityManagementClient(ClientConfiguration clientConfiguration)` Constructs a new client to invoke service methods on AmazonIdentityManagement.

Method Summary
`void`	`addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest)` Adds the specified role to the specified instance profile.
`void`	`addUserToGroup(AddUserToGroupRequest addUserToGroupRequest)` Adds the specified user to the specified group.
`void`	`changePassword(ChangePasswordRequest changePasswordRequest)` Changes the password of the IAM user calling `ChangePassword` .
`CreateAccessKeyResult`	`createAccessKey()` Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user.
`CreateAccessKeyResult`	`createAccessKey(CreateAccessKeyRequest createAccessKeyRequest)` Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user.
`void`	`createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest)` This action creates an alias for your AWS account.
`CreateGroupResult`	`createGroup(CreateGroupRequest createGroupRequest)` Creates a new group.
`CreateInstanceProfileResult`	`createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest)` Creates a new instance profile.
`CreateLoginProfileResult`	`createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest)` Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console.
`CreateRoleResult`	`createRole(CreateRoleRequest createRoleRequest)` Creates a new role for your AWS account.
`CreateUserResult`	`createUser(CreateUserRequest createUserRequest)` Creates a new user for your AWS account.
`CreateVirtualMFADeviceResult`	`createVirtualMFADevice(CreateVirtualMFADeviceRequest createVirtualMFADeviceRequest)` Creates a new virtual MFA device for the AWS account.
`void`	`deactivateMFADevice(DeactivateMFADeviceRequest deactivateMFADeviceRequest)` Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.
`void`	`deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest)` Deletes the access key associated with the specified user.
`void`	`deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest)` Deletes the specified AWS account alias.
`void`	`deleteAccountPasswordPolicy()` Deletes the password policy for the AWS account.
`void`	`deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest)` Deletes the password policy for the AWS account.
`void`	`deleteGroup(DeleteGroupRequest deleteGroupRequest)` Deletes the specified group.
`void`	`deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest)` Deletes the specified policy that is associated with the specified group.
`void`	`deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest)` Deletes the specified instance profile.
`void`	`deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest)` Deletes the password for the specified user, which terminates the user's ability to access AWS services through the AWS Management Console.
`void`	`deleteRole(DeleteRoleRequest deleteRoleRequest)` Deletes the specified role.
`void`	`deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest)` Deletes the specified policy associated with the specified role.
`void`	`deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest)` Deletes the specified server certificate.
`void`	`deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest)` Deletes the specified signing certificate associated with the specified user.
`void`	`deleteUser(DeleteUserRequest deleteUserRequest)` Deletes the specified user.
`void`	`deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest)` Deletes the specified policy associated with the specified user.
`void`	`deleteVirtualMFADevice(DeleteVirtualMFADeviceRequest deleteVirtualMFADeviceRequest)` Deletes a virtual MFA device.
`void`	`enableMFADevice(EnableMFADeviceRequest enableMFADeviceRequest)` Enables the specified MFA device and associates it with the specified user name.
`GetAccountPasswordPolicyResult`	`getAccountPasswordPolicy()` Retrieves the password policy for the AWS account.
`GetAccountPasswordPolicyResult`	`getAccountPasswordPolicy(GetAccountPasswordPolicyRequest getAccountPasswordPolicyRequest)` Retrieves the password policy for the AWS account.
`GetAccountSummaryResult`	`getAccountSummary()` Retrieves account level information about account entity usage and IAM quotas.
`GetAccountSummaryResult`	`getAccountSummary(GetAccountSummaryRequest getAccountSummaryRequest)` Retrieves account level information about account entity usage and IAM quotas.
`ResponseMetadata`	`getCachedResponseMetadata(AmazonWebServiceRequest request)` Returns additional metadata for a previously executed successful, request, typically used for debugging issues where a service isn't acting as expected.
`GetGroupResult`	`getGroup(GetGroupRequest getGroupRequest)` Returns a list of users that are in the specified group.
`GetGroupPolicyResult`	`getGroupPolicy(GetGroupPolicyRequest getGroupPolicyRequest)` Retrieves the specified policy document for the specified group.
`GetInstanceProfileResult`	`getInstanceProfile(GetInstanceProfileRequest getInstanceProfileRequest)` Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role.
`GetLoginProfileResult`	`getLoginProfile(GetLoginProfileRequest getLoginProfileRequest)` Retrieves the user name and password create date for the specified user.
`GetRoleResult`	`getRole(GetRoleRequest getRoleRequest)` Retrieves information about the specified role, including the role's path, GUID, ARN, and the policy granting permission to EC2 to assume the role.
`GetRolePolicyResult`	`getRolePolicy(GetRolePolicyRequest getRolePolicyRequest)` Retrieves the specified policy document for the specified role.
`GetServerCertificateResult`	`getServerCertificate(GetServerCertificateRequest getServerCertificateRequest)` Retrieves information about the specified server certificate.
`GetUserResult`	`getUser()` Retrieves information about the specified user, including the user's path, GUID, and ARN.
`GetUserResult`	`getUser(GetUserRequest getUserRequest)` Retrieves information about the specified user, including the user's path, GUID, and ARN.
`GetUserPolicyResult`	`getUserPolicy(GetUserPolicyRequest getUserPolicyRequest)` Retrieves the specified policy document for the specified user.
`ListAccessKeysResult`	`listAccessKeys()` Returns information about the Access Key IDs associated with the specified user.
`ListAccessKeysResult`	`listAccessKeys(ListAccessKeysRequest listAccessKeysRequest)` Returns information about the Access Key IDs associated with the specified user.
`ListAccountAliasesResult`	`listAccountAliases()` Lists the account aliases associated with the account.
`ListAccountAliasesResult`	`listAccountAliases(ListAccountAliasesRequest listAccountAliasesRequest)` Lists the account aliases associated with the account.
`ListGroupPoliciesResult`	`listGroupPolicies(ListGroupPoliciesRequest listGroupPoliciesRequest)` Lists the names of the policies associated with the specified group.
`ListGroupsResult`	`listGroups()` Lists the groups that have the specified path prefix.
`ListGroupsResult`	`listGroups(ListGroupsRequest listGroupsRequest)` Lists the groups that have the specified path prefix.
`ListGroupsForUserResult`	`listGroupsForUser(ListGroupsForUserRequest listGroupsForUserRequest)` Lists the groups the specified user belongs to.
`ListInstanceProfilesResult`	`listInstanceProfiles()` Lists the instance profiles that have the specified path prefix.
`ListInstanceProfilesResult`	`listInstanceProfiles(ListInstanceProfilesRequest listInstanceProfilesRequest)` Lists the instance profiles that have the specified path prefix.
`ListInstanceProfilesForRoleResult`	`listInstanceProfilesForRole(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)` Lists the instance profiles that have the specified associated role.
`ListMFADevicesResult`	`listMFADevices()` Lists the MFA devices.
`ListMFADevicesResult`	`listMFADevices(ListMFADevicesRequest listMFADevicesRequest)` Lists the MFA devices.
`ListRolePoliciesResult`	`listRolePolicies(ListRolePoliciesRequest listRolePoliciesRequest)` Lists the names of the policies associated with the specified role.
`ListRolesResult`	`listRoles()` Lists the roles that have the specified path prefix.
`ListRolesResult`	`listRoles(ListRolesRequest listRolesRequest)` Lists the roles that have the specified path prefix.
`ListServerCertificatesResult`	`listServerCertificates()` Lists the server certificates that have the specified path prefix.
`ListServerCertificatesResult`	`listServerCertificates(ListServerCertificatesRequest listServerCertificatesRequest)` Lists the server certificates that have the specified path prefix.
`ListSigningCertificatesResult`	`listSigningCertificates()` Returns information about the signing certificates associated with the specified user.
`ListSigningCertificatesResult`	`listSigningCertificates(ListSigningCertificatesRequest listSigningCertificatesRequest)` Returns information about the signing certificates associated with the specified user.
`ListUserPoliciesResult`	`listUserPolicies(ListUserPoliciesRequest listUserPoliciesRequest)` Lists the names of the policies associated with the specified user.
`ListUsersResult`	`listUsers()` Lists the users that have the specified path prefix.
`ListUsersResult`	`listUsers(ListUsersRequest listUsersRequest)` Lists the users that have the specified path prefix.
`ListVirtualMFADevicesResult`	`listVirtualMFADevices()` Lists the virtual MFA devices under the AWS account by assignment status.
`ListVirtualMFADevicesResult`	`listVirtualMFADevices(ListVirtualMFADevicesRequest listVirtualMFADevicesRequest)` Lists the virtual MFA devices under the AWS account by assignment status.
`void`	`putGroupPolicy(PutGroupPolicyRequest putGroupPolicyRequest)` Adds (or updates) a policy document associated with the specified group.
`void`	`putRolePolicy(PutRolePolicyRequest putRolePolicyRequest)` Adds (or updates) a policy document associated with the specified role.
`void`	`putUserPolicy(PutUserPolicyRequest putUserPolicyRequest)` Adds (or updates) a policy document associated with the specified user.
`void`	`removeRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest removeRoleFromInstanceProfileRequest)` Removes the specified role from the specified instance profile.
`void`	`removeUserFromGroup(RemoveUserFromGroupRequest removeUserFromGroupRequest)` Removes the specified user from the specified group.
`void`	`resyncMFADevice(ResyncMFADeviceRequest resyncMFADeviceRequest)` Synchronizes the specified MFA device with AWS servers.
`void`	`setEndpoint(String endpoint, String serviceName, String regionId)` Overrides the default endpoint for this client ("https://iam.amazonaws.com") and explicitly provides an AWS region ID and AWS service name to use when the client calculates a signature for requests.
`void`	`updateAccessKey(UpdateAccessKeyRequest updateAccessKeyRequest)` Changes the status of the specified access key from Active to Inactive, or vice versa.
`void`	`updateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest updateAccountPasswordPolicyRequest)` Updates the password policy settings for the account.
`void`	`updateAssumeRolePolicy(UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest)` Updates the policy that grants an entity permission to assume a role.
`void`	`updateGroup(UpdateGroupRequest updateGroupRequest)` Updates the name and/or the path of the specified group.
`void`	`updateLoginProfile(UpdateLoginProfileRequest updateLoginProfileRequest)` Changes the password for the specified user.
`void`	`updateServerCertificate(UpdateServerCertificateRequest updateServerCertificateRequest)` Updates the name and/or the path of the specified server certificate.
`void`	`updateSigningCertificate(UpdateSigningCertificateRequest updateSigningCertificateRequest)` Changes the status of the specified signing certificate from active to disabled, or vice versa.
`void`	`updateUser(UpdateUserRequest updateUserRequest)` Updates the name and/or the path of the specified user.
`UploadServerCertificateResult`	`uploadServerCertificate(UploadServerCertificateRequest uploadServerCertificateRequest)` Uploads a server certificate entity for the AWS account.
`UploadSigningCertificateResult`	`uploadSigningCertificate(UploadSigningCertificateRequest uploadSigningCertificateRequest)` Uploads an X.509 signing certificate and associates it with the specified user.

Methods inherited from class com.amazonaws.AmazonWebServiceClient
`addRequestHandler, getTimeOffset, removeRequestHandler, setConfiguration, setEndpoint, setRegion, setTimeOffset, shutdown, withTimeOffset`

Methods inherited from class java.lang.Object
`equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

Methods inherited from interface com.amazonaws.services.identitymanagement.AmazonIdentityManagement
`setEndpoint, setRegion, shutdown`

Constructor Detail

AmazonIdentityManagementClient

public AmazonIdentityManagementClient()

Constructs a new client to invoke service methods on AmazonIdentityManagement. A credentials provider chain will be used that searches for credentials in this order:

Environment Variables - AWS_ACCESS_KEY_ID and AWS_SECRET_KEY
Java System Properties - aws.accessKeyId and aws.secretKey
Instance profile credentials delivered through the Amazon EC2 metadata service

All service calls made using this new client object are blocking, and will not return until the service call completes.

See Also:: DefaultAWSCredentialsProvider

AmazonIdentityManagementClient

public AmazonIdentityManagementClient(ClientConfiguration clientConfiguration)

Constructs a new client to invoke service methods on AmazonIdentityManagement. A credentials provider chain will be used that searches for credentials in this order:

Environment Variables - AWS_ACCESS_KEY_ID and AWS_SECRET_KEY
Java System Properties - aws.accessKeyId and aws.secretKey
Instance profile credentials delivered through the Amazon EC2 metadata service

All service calls made using this new client object are blocking, and will not return until the service call completes.

Parameters:: clientConfiguration - The client configuration options controlling how this client connects to AmazonIdentityManagement (ex: proxy settings, retry counts, etc.).
See Also:: DefaultAWSCredentialsProvider

AmazonIdentityManagementClient

public AmazonIdentityManagementClient(AWSCredentials awsCredentials)

Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials.

All service calls made using this new client object are blocking, and will not return until the service call completes.

Parameters:: awsCredentials - The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.

AmazonIdentityManagementClient

public AmazonIdentityManagementClient(AWSCredentials awsCredentials,
                                      ClientConfiguration clientConfiguration)

Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials and client configuration options.

All service calls made using this new client object are blocking, and will not return until the service call completes.

Parameters:: awsCredentials - The AWS credentials (access key ID and secret key) to use when authenticating with AWS services.; clientConfiguration - The client configuration options controlling how this client connects to AmazonIdentityManagement (ex: proxy settings, retry counts, etc.).

AmazonIdentityManagementClient

public AmazonIdentityManagementClient(AWSCredentialsProvider awsCredentialsProvider)

Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials provider.

All service calls made using this new client object are blocking, and will not return until the service call completes.

Parameters:: awsCredentialsProvider - The AWS credentials provider which will provide credentials to authenticate requests with AWS services.

AmazonIdentityManagementClient

public AmazonIdentityManagementClient(AWSCredentialsProvider awsCredentialsProvider,
                                      ClientConfiguration clientConfiguration)

Constructs a new client to invoke service methods on AmazonIdentityManagement using the specified AWS account credentials provider and client configuration options.

All service calls made using this new client object are blocking, and will not return until the service call completes.

Parameters:: awsCredentialsProvider - The AWS credentials provider which will provide credentials to authenticate requests with AWS services.; clientConfiguration - The client configuration options controlling how this client connects to AmazonIdentityManagement (ex: proxy settings, retry counts, etc.).

Method Detail

deleteAccountAlias

public void deleteAccountAlias(DeleteAccountAliasRequest deleteAccountAliasRequest)
                        throws AmazonServiceException,
                               AmazonClientException

Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

Specified by:: deleteAccountAlias in interface AmazonIdentityManagement

Parameters:: deleteAccountAliasRequest - Container for the necessary parameters to execute the DeleteAccountAlias service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listGroups

public ListGroupsResult listGroups(ListGroupsRequest listGroupsRequest)
                            throws AmazonServiceException,
                                   AmazonClientException

Lists the groups that have the specified path prefix.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listGroups in interface AmazonIdentityManagement

Parameters:: listGroupsRequest - Container for the necessary parameters to execute the ListGroups service method on AmazonIdentityManagement.
Returns:: The response from the ListGroups service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteAccessKey

public void deleteAccessKey(DeleteAccessKeyRequest deleteAccessKeyRequest)
                     throws AmazonServiceException,
                            AmazonClientException

Deletes the access key associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

Specified by:: deleteAccessKey in interface AmazonIdentityManagement

Parameters:: deleteAccessKeyRequest - Container for the necessary parameters to execute the DeleteAccessKey service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteVirtualMFADevice

public void deleteVirtualMFADevice(DeleteVirtualMFADeviceRequest deleteVirtualMFADeviceRequest)
                            throws AmazonServiceException,
                                   AmazonClientException

Deletes a virtual MFA device.

NOTE:You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.

Specified by:: deleteVirtualMFADevice in interface AmazonIdentityManagement

Parameters:: deleteVirtualMFADeviceRequest - Container for the necessary parameters to execute the DeleteVirtualMFADevice service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteUserPolicy

public void deleteUserPolicy(DeleteUserPolicyRequest deleteUserPolicyRequest)
                      throws AmazonServiceException,
                             AmazonClientException

Deletes the specified policy associated with the specified user.

Specified by:: deleteUserPolicy in interface AmazonIdentityManagement

Parameters:: deleteUserPolicyRequest - Container for the necessary parameters to execute the DeleteUserPolicy service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

putUserPolicy

public void putUserPolicy(PutUserPolicyRequest putUserPolicyRequest)
                   throws AmazonServiceException,
                          AmazonClientException

Adds (or updates) a policy document associated with the specified user. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management .

For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because policy documents can be large, you should use POST rather than GET when calling PutUserPolicy. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Specified by:: putUserPolicy in interface AmazonIdentityManagement

Parameters:: putUserPolicyRequest - Container for the necessary parameters to execute the PutUserPolicy service method on AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listServerCertificates

public ListServerCertificatesResult listServerCertificates(ListServerCertificatesRequest listServerCertificatesRequest)
                                                    throws AmazonServiceException,
                                                           AmazonClientException

Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listServerCertificates in interface AmazonIdentityManagement

Parameters:: listServerCertificatesRequest - Container for the necessary parameters to execute the ListServerCertificates service method on AmazonIdentityManagement.
Returns:: The response from the ListServerCertificates service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getUserPolicy

public GetUserPolicyResult getUserPolicy(GetUserPolicyRequest getUserPolicyRequest)
                                  throws AmazonServiceException,
                                         AmazonClientException

Retrieves the specified policy document for the specified user. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: getUserPolicy in interface AmazonIdentityManagement

Parameters:: getUserPolicyRequest - Container for the necessary parameters to execute the GetUserPolicy service method on AmazonIdentityManagement.
Returns:: The response from the GetUserPolicy service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateServerCertificate

public void updateServerCertificate(UpdateServerCertificateRequest updateServerCertificateRequest)
                             throws AmazonServiceException,
                                    AmazonClientException

Updates the name and/or the path of the specified server certificate.

IMPORTANT: You should understand the implications of changing a server certificate's path or name. For more information, see Managing Server Certificates in Using AWS Identity and Access Management.

NOTE:To change a server certificate name the requester must have appropriate permissions on both the source object and the target object. For example, to change the name from ProductionCert to ProdCert, the entity making the request must have permission on ProductionCert and ProdCert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

Specified by:: updateServerCertificate in interface AmazonIdentityManagement

Parameters:: updateServerCertificateRequest - Container for the necessary parameters to execute the UpdateServerCertificate service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateUser

public void updateUser(UpdateUserRequest updateUserRequest)
                throws AmazonServiceException,
                       AmazonClientException

Updates the name and/or the path of the specified user.

IMPORTANT: You should understand the implications of changing a user's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.

NOTE:To change a user name the requester must have appropriate permissions on both the source object and the target object. For example, to change Bob to Robert, the entity making the request must have permission on Bob and Robert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

Specified by:: updateUser in interface AmazonIdentityManagement

Parameters:: updateUserRequest - Container for the necessary parameters to execute the UpdateUser service method on AmazonIdentityManagement.
Throws:: EntityTemporarilyUnmodifiableException; NoSuchEntityException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

putRolePolicy

public void putRolePolicy(PutRolePolicyRequest putRolePolicyRequest)
                   throws AmazonServiceException,
                          AmazonClientException

Adds (or updates) a policy document associated with the specified role. For information about policies, go to Overview of Policies in Using AWS Identity and Access Management .

For information about limits on the policies you can associate with a role, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because policy documents can be large, you should use POST rather than GET when calling PutRolePolicy. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Specified by:: putRolePolicy in interface AmazonIdentityManagement

Parameters:: putRolePolicyRequest - Container for the necessary parameters to execute the PutRolePolicy service method on AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateSigningCertificate

public void updateSigningCertificate(UpdateSigningCertificateRequest updateSigningCertificateRequest)
                              throws AmazonServiceException,
                                     AmazonClientException

Changes the status of the specified signing certificate from active to disabled, or vice versa. This action can be used to disable a user's signing certificate as part of a certificate rotation work flow.

If the UserName field is not specified, the UserName is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management .

Specified by:: updateSigningCertificate in interface AmazonIdentityManagement

Parameters:: updateSigningCertificateRequest - Container for the necessary parameters to execute the UpdateSigningCertificate service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteGroupPolicy

public void deleteGroupPolicy(DeleteGroupPolicyRequest deleteGroupPolicyRequest)
                       throws AmazonServiceException,
                              AmazonClientException

Deletes the specified policy that is associated with the specified group.

Specified by:: deleteGroupPolicy in interface AmazonIdentityManagement

Parameters:: deleteGroupPolicyRequest - Container for the necessary parameters to execute the DeleteGroupPolicy service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listUsers

public ListUsersResult listUsers(ListUsersRequest listUsersRequest)
                          throws AmazonServiceException,
                                 AmazonClientException

Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listUsers in interface AmazonIdentityManagement

Parameters:: listUsersRequest - Container for the necessary parameters to execute the ListUsers service method on AmazonIdentityManagement.
Returns:: The response from the ListUsers service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateGroup

public void updateGroup(UpdateGroupRequest updateGroupRequest)
                 throws AmazonServiceException,
                        AmazonClientException

Updates the name and/or the path of the specified group.

IMPORTANT: You should understand the implications of changing a group's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.

NOTE:To change a group name the requester must have appropriate permissions on both the source object and the target object. For example, to change Managers to MGRs, the entity making the request must have permission on Managers and MGRs, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

Specified by:: updateGroup in interface AmazonIdentityManagement

Parameters:: updateGroupRequest - Container for the necessary parameters to execute the UpdateGroup service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createUser

public CreateUserResult createUser(CreateUserRequest createUserRequest)
                            throws AmazonServiceException,
                                   AmazonClientException

Creates a new user for your AWS account.

For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: createUser in interface AmazonIdentityManagement

Parameters:: createUserRequest - Container for the necessary parameters to execute the CreateUser service method on AmazonIdentityManagement.
Returns:: The response from the CreateUser service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

enableMFADevice

public void enableMFADevice(EnableMFADeviceRequest enableMFADeviceRequest)
                     throws AmazonServiceException,
                            AmazonClientException

Enables the specified MFA device and associates it with the specified user name. When enabled, the MFA device is required for every subsequent login by the user name associated with the device.

Specified by:: enableMFADevice in interface AmazonIdentityManagement

Parameters:: enableMFADeviceRequest - Container for the necessary parameters to execute the EnableMFADevice service method on AmazonIdentityManagement.
Throws:: EntityTemporarilyUnmodifiableException; NoSuchEntityException; InvalidAuthenticationCodeException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteAccountPasswordPolicy

public void deleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest deleteAccountPasswordPolicyRequest)
                                 throws AmazonServiceException,
                                        AmazonClientException

Deletes the password policy for the AWS account.

Specified by:: deleteAccountPasswordPolicy in interface AmazonIdentityManagement

Parameters:: deleteAccountPasswordPolicyRequest - Container for the necessary parameters to execute the DeleteAccountPasswordPolicy service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getLoginProfile

public GetLoginProfileResult getLoginProfile(GetLoginProfileRequest getLoginProfileRequest)
                                      throws AmazonServiceException,
                                             AmazonClientException

Retrieves the user name and password create date for the specified user.

Specified by:: getLoginProfile in interface AmazonIdentityManagement

Parameters:: getLoginProfileRequest - Container for the necessary parameters to execute the GetLoginProfile service method on AmazonIdentityManagement.
Returns:: The response from the GetLoginProfile service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

uploadServerCertificate

public UploadServerCertificateResult uploadServerCertificate(UploadServerCertificateRequest uploadServerCertificateRequest)
                                                      throws AmazonServiceException,
                                                             AmazonClientException

Uploads a server certificate entity for the AWS account. The server certificate entity includes a public key certificate, a private key, and an optional certificate chain, which should all be PEM-encoded.

For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because the body of the public key certificate, private key, and the certificate chain can be large, you should use POST rather than GET when calling UploadServerCertificate. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Specified by:: uploadServerCertificate in interface AmazonIdentityManagement

Parameters:: uploadServerCertificateRequest - Container for the necessary parameters to execute the UploadServerCertificate service method on AmazonIdentityManagement.
Returns:: The response from the UploadServerCertificate service method, as returned by AmazonIdentityManagement.
Throws:: KeyPairMismatchException; MalformedCertificateException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createGroup

public CreateGroupResult createGroup(CreateGroupRequest createGroupRequest)
                              throws AmazonServiceException,
                                     AmazonClientException

Creates a new group.

For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: createGroup in interface AmazonIdentityManagement

Parameters:: createGroupRequest - Container for the necessary parameters to execute the CreateGroup service method on AmazonIdentityManagement.
Returns:: The response from the CreateGroup service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createAccountAlias

public void createAccountAlias(CreateAccountAliasRequest createAccountAliasRequest)
                        throws AmazonServiceException,
                               AmazonClientException

This action creates an alias for your AWS account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

Specified by:: createAccountAlias in interface AmazonIdentityManagement

Parameters:: createAccountAliasRequest - Container for the necessary parameters to execute the CreateAccountAlias service method on AmazonIdentityManagement.
Throws:: EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteUser

public void deleteUser(DeleteUserRequest deleteUserRequest)
                throws AmazonServiceException,
                       AmazonClientException

Deletes the specified user. The user must not belong to any groups, have any keys or signing certificates, or have any attached policies.

Specified by:: deleteUser in interface AmazonIdentityManagement

Parameters:: deleteUserRequest - Container for the necessary parameters to execute the DeleteUser service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deactivateMFADevice

public void deactivateMFADevice(DeactivateMFADeviceRequest deactivateMFADeviceRequest)
                         throws AmazonServiceException,
                                AmazonClientException

Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.

Specified by:: deactivateMFADevice in interface AmazonIdentityManagement

Parameters:: deactivateMFADeviceRequest - Container for the necessary parameters to execute the DeactivateMFADevice service method on AmazonIdentityManagement.
Throws:: EntityTemporarilyUnmodifiableException; NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

removeUserFromGroup

public void removeUserFromGroup(RemoveUserFromGroupRequest removeUserFromGroupRequest)
                         throws AmazonServiceException,
                                AmazonClientException

Removes the specified user from the specified group.

Specified by:: removeUserFromGroup in interface AmazonIdentityManagement

Parameters:: removeUserFromGroupRequest - Container for the necessary parameters to execute the RemoveUserFromGroup service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteRole

public void deleteRole(DeleteRoleRequest deleteRoleRequest)
                throws AmazonServiceException,
                       AmazonClientException

Deletes the specified role. The role must not have any policies attached. For more information about roles, go to Working with Roles .

IMPORTANT:Make sure you do not have any Amazon EC2 instances running with the role you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

Specified by:: deleteRole in interface AmazonIdentityManagement

Parameters:: deleteRoleRequest - Container for the necessary parameters to execute the DeleteRole service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteServerCertificate

public void deleteServerCertificate(DeleteServerCertificateRequest deleteServerCertificateRequest)
                             throws AmazonServiceException,
                                    AmazonClientException

Deletes the specified server certificate.

IMPORTANT:If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.

Specified by:: deleteServerCertificate in interface AmazonIdentityManagement

Parameters:: deleteServerCertificateRequest - Container for the necessary parameters to execute the DeleteServerCertificate service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createAccessKey

public CreateAccessKeyResult createAccessKey(CreateAccessKeyRequest createAccessKeyRequest)
                                      throws AmazonServiceException,
                                             AmazonClientException

Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user. The default status for new keys is Active .

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

IMPORTANT:To ensure the security of your AWS account, the Secret Access Key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.

Specified by:: createAccessKey in interface AmazonIdentityManagement

Parameters:: createAccessKeyRequest - Container for the necessary parameters to execute the CreateAccessKey service method on AmazonIdentityManagement.
Returns:: The response from the CreateAccessKey service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getUser

public GetUserResult getUser(GetUserRequest getUserRequest)
                      throws AmazonServiceException,
                             AmazonClientException

Retrieves information about the specified user, including the user's path, GUID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request.

Specified by:: getUser in interface AmazonIdentityManagement

Parameters:: getUserRequest - Container for the necessary parameters to execute the GetUser service method on AmazonIdentityManagement.
Returns:: The response from the GetUser service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

resyncMFADevice

public void resyncMFADevice(ResyncMFADeviceRequest resyncMFADeviceRequest)
                     throws AmazonServiceException,
                            AmazonClientException

Synchronizes the specified MFA device with AWS servers.

Specified by:: resyncMFADevice in interface AmazonIdentityManagement

Parameters:: resyncMFADeviceRequest - Container for the necessary parameters to execute the ResyncMFADevice service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; InvalidAuthenticationCodeException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listMFADevices

public ListMFADevicesResult listMFADevices(ListMFADevicesRequest listMFADevicesRequest)
                                    throws AmazonServiceException,
                                           AmazonClientException

Lists the MFA devices. If the request includes the user name, then this action lists all the MFA devices associated with the specified user name. If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listMFADevices in interface AmazonIdentityManagement

Parameters:: listMFADevicesRequest - Container for the necessary parameters to execute the ListMFADevices service method on AmazonIdentityManagement.
Returns:: The response from the ListMFADevices service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createVirtualMFADevice

public CreateVirtualMFADeviceResult createVirtualMFADevice(CreateVirtualMFADeviceRequest createVirtualMFADeviceRequest)
                                                    throws AmazonServiceException,
                                                           AmazonClientException

Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access Management .

For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management .

IMPORTANT:The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.

Specified by:: createVirtualMFADevice in interface AmazonIdentityManagement

Parameters:: createVirtualMFADeviceRequest - Container for the necessary parameters to execute the CreateVirtualMFADevice service method on AmazonIdentityManagement.
Returns:: The response from the CreateVirtualMFADevice service method, as returned by AmazonIdentityManagement.
Throws:: LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listInstanceProfiles

public ListInstanceProfilesResult listInstanceProfiles(ListInstanceProfilesRequest listInstanceProfilesRequest)
                                                throws AmazonServiceException,
                                                       AmazonClientException

Lists the instance profiles that have the specified path prefix. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listInstanceProfiles in interface AmazonIdentityManagement

Parameters:: listInstanceProfilesRequest - Container for the necessary parameters to execute the ListInstanceProfiles service method on AmazonIdentityManagement.
Returns:: The response from the ListInstanceProfiles service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateAccessKey

public void updateAccessKey(UpdateAccessKeyRequest updateAccessKeyRequest)
                     throws AmazonServiceException,
                            AmazonClientException

Changes the status of the specified access key from Active to Inactive, or vice versa. This action can be used to disable a user's key as part of a key rotation work flow.

For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management .

Specified by:: updateAccessKey in interface AmazonIdentityManagement

Parameters:: updateAccessKeyRequest - Container for the necessary parameters to execute the UpdateAccessKey service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

addUserToGroup

public void addUserToGroup(AddUserToGroupRequest addUserToGroupRequest)
                    throws AmazonServiceException,
                           AmazonClientException

Adds the specified user to the specified group.

Specified by:: addUserToGroup in interface AmazonIdentityManagement

Parameters:: addUserToGroupRequest - Container for the necessary parameters to execute the AddUserToGroup service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getGroup

public GetGroupResult getGroup(GetGroupRequest getGroupRequest)
                        throws AmazonServiceException,
                               AmazonClientException

Returns a list of users that are in the specified group. You can paginate the results using the MaxItems and Marker parameters.

Specified by:: getGroup in interface AmazonIdentityManagement

Parameters:: getGroupRequest - Container for the necessary parameters to execute the GetGroup service method on AmazonIdentityManagement.
Returns:: The response from the GetGroup service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listAccountAliases

public ListAccountAliasesResult listAccountAliases(ListAccountAliasesRequest listAccountAliasesRequest)
                                            throws AmazonServiceException,
                                                   AmazonClientException

Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listAccountAliases in interface AmazonIdentityManagement

Parameters:: listAccountAliasesRequest - Container for the necessary parameters to execute the ListAccountAliases service method on AmazonIdentityManagement.
Returns:: The response from the ListAccountAliases service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteGroup

public void deleteGroup(DeleteGroupRequest deleteGroupRequest)
                 throws AmazonServiceException,
                        AmazonClientException

Deletes the specified group. The group must not contain any users or have any attached policies.

Specified by:: deleteGroup in interface AmazonIdentityManagement

Parameters:: deleteGroupRequest - Container for the necessary parameters to execute the DeleteGroup service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getRole

public GetRoleResult getRole(GetRoleRequest getRoleRequest)
                      throws AmazonServiceException,
                             AmazonClientException

Retrieves information about the specified role, including the role's path, GUID, ARN, and the policy granting permission to EC2 to assume the role. For more information about ARNs, go to ARNs. For more information about roles, go to Working with Roles .

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: getRole in interface AmazonIdentityManagement

Parameters:: getRoleRequest - Container for the necessary parameters to execute the GetRole service method on AmazonIdentityManagement.
Returns:: The response from the GetRole service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listRolePolicies

public ListRolePoliciesResult listRolePolicies(ListRolePoliciesRequest listRolePoliciesRequest)
                                        throws AmazonServiceException,
                                               AmazonClientException

Lists the names of the policies associated with the specified role. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listRolePolicies in interface AmazonIdentityManagement

Parameters:: listRolePoliciesRequest - Container for the necessary parameters to execute the ListRolePolicies service method on AmazonIdentityManagement.
Returns:: The response from the ListRolePolicies service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listSigningCertificates

public ListSigningCertificatesResult listSigningCertificates(ListSigningCertificatesRequest listSigningCertificatesRequest)
                                                      throws AmazonServiceException,
                                                             AmazonClientException

Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the MaxItems and Marker parameters.

If the UserName field is not specified, the user name is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

Specified by:: listSigningCertificates in interface AmazonIdentityManagement

Parameters:: listSigningCertificatesRequest - Container for the necessary parameters to execute the ListSigningCertificates service method on AmazonIdentityManagement.
Returns:: The response from the ListSigningCertificates service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

uploadSigningCertificate

public UploadSigningCertificateResult uploadSigningCertificate(UploadSigningCertificateRequest uploadSigningCertificateRequest)
                                                        throws AmazonServiceException,
                                                               AmazonClientException

Uploads an X.509 signing certificate and associates it with the specified user. Some AWS services use X.509 signing certificates to validate requests that are signed with a corresponding private key. When you upload the certificate, its default status is Active .

NOTE:Because the body of a X.509 certificate can be large, you should use POST rather than GET when calling UploadSigningCertificate. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Specified by:: uploadSigningCertificate in interface AmazonIdentityManagement

Parameters:: uploadSigningCertificateRequest - Container for the necessary parameters to execute the UploadSigningCertificate service method on AmazonIdentityManagement.
Returns:: The response from the UploadSigningCertificate service method, as returned by AmazonIdentityManagement.
Throws:: DuplicateCertificateException; InvalidCertificateException; MalformedCertificateException; NoSuchEntityException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteInstanceProfile

public void deleteInstanceProfile(DeleteInstanceProfileRequest deleteInstanceProfileRequest)
                           throws AmazonServiceException,
                                  AmazonClientException

Deletes the specified instance profile. The instance profile must not have an associated role.

IMPORTANT:Make sure you do not have any Amazon EC2 instances running with the instance profile you are about to delete. Deleting a role or instance profile that is associated with a running instance will break any applications running on the instance.

For more information about instance profiles, go to About Instance Profiles .

Specified by:: deleteInstanceProfile in interface AmazonIdentityManagement

Parameters:: deleteInstanceProfileRequest - Container for the necessary parameters to execute the DeleteInstanceProfile service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; DeleteConflictException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createRole

public CreateRoleResult createRole(CreateRoleRequest createRoleRequest)
                            throws AmazonServiceException,
                                   AmazonClientException

Creates a new role for your AWS account. For more information about roles, go to Working with Roles . For information about limitations on role names and the number of roles you can create, go to Limitations on IAM Entities in Using AWS Identity and Access Management .

The policy grants permission to an EC2 instance to assume the role. The policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html . Currently, only EC2 instances can assume roles.

Specified by:: createRole in interface AmazonIdentityManagement

Parameters:: createRoleRequest - Container for the necessary parameters to execute the CreateRole service method on AmazonIdentityManagement.
Returns:: The response from the CreateRole service method, as returned by AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateLoginProfile

public void updateLoginProfile(UpdateLoginProfileRequest updateLoginProfileRequest)
                        throws AmazonServiceException,
                               AmazonClientException

Changes the password for the specified user.

Specified by:: updateLoginProfile in interface AmazonIdentityManagement

Parameters:: updateLoginProfileRequest - Container for the necessary parameters to execute the UpdateLoginProfile service method on AmazonIdentityManagement.
Throws:: PasswordPolicyViolationException; EntityTemporarilyUnmodifiableException; NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteLoginProfile

public void deleteLoginProfile(DeleteLoginProfileRequest deleteLoginProfileRequest)
                        throws AmazonServiceException,
                               AmazonClientException

Deletes the password for the specified user, which terminates the user's ability to access AWS services through the AWS Management Console.

IMPORTANT:Deleting a user's password does not prevent a user from accessing IAM through the command line interface or the API. To prevent all user access you must also either make the access key inactive or delete it. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.

Specified by:: deleteLoginProfile in interface AmazonIdentityManagement

Parameters:: deleteLoginProfileRequest - Container for the necessary parameters to execute the DeleteLoginProfile service method on AmazonIdentityManagement.
Throws:: EntityTemporarilyUnmodifiableException; NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

changePassword

public void changePassword(ChangePasswordRequest changePasswordRequest)
                    throws AmazonServiceException,
                           AmazonClientException

Changes the password of the IAM user calling ChangePassword . The root account password is not affected by this action. For information about modifying passwords, see Managing Passwords .

Specified by:: changePassword in interface AmazonIdentityManagement

Parameters:: changePasswordRequest - Container for the necessary parameters to execute the ChangePassword service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; InvalidUserTypeException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getServerCertificate

public GetServerCertificateResult getServerCertificate(GetServerCertificateRequest getServerCertificateRequest)
                                                throws AmazonServiceException,
                                                       AmazonClientException

Retrieves information about the specified server certificate.

Specified by:: getServerCertificate in interface AmazonIdentityManagement

Parameters:: getServerCertificateRequest - Container for the necessary parameters to execute the GetServerCertificate service method on AmazonIdentityManagement.
Returns:: The response from the GetServerCertificate service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

putGroupPolicy

public void putGroupPolicy(PutGroupPolicyRequest putGroupPolicyRequest)
                    throws AmazonServiceException,
                           AmazonClientException

Adds (or updates) a policy document associated with the specified group. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management .

For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because policy documents can be large, you should use POST rather than GET when calling PutGroupPolicy. For information about setting up signatures and authorization through the API, go to Signing AWS API Requests in the AWS General Reference. For general information about using the Query API with IAM, go to Making Query Requests in Using IAM.

Specified by:: putGroupPolicy in interface AmazonIdentityManagement

Parameters:: putGroupPolicyRequest - Container for the necessary parameters to execute the PutGroupPolicy service method on AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteSigningCertificate

public void deleteSigningCertificate(DeleteSigningCertificateRequest deleteSigningCertificateRequest)
                              throws AmazonServiceException,
                                     AmazonClientException

Deletes the specified signing certificate associated with the specified user.

Specified by:: deleteSigningCertificate in interface AmazonIdentityManagement

Parameters:: deleteSigningCertificateRequest - Container for the necessary parameters to execute the DeleteSigningCertificate service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listUserPolicies

public ListUserPoliciesResult listUserPolicies(ListUserPoliciesRequest listUserPoliciesRequest)
                                        throws AmazonServiceException,
                                               AmazonClientException

Lists the names of the policies associated with the specified user. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listUserPolicies in interface AmazonIdentityManagement

Parameters:: listUserPoliciesRequest - Container for the necessary parameters to execute the ListUserPolicies service method on AmazonIdentityManagement.
Returns:: The response from the ListUserPolicies service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listAccessKeys

public ListAccessKeysResult listAccessKeys(ListAccessKeysRequest listAccessKeysRequest)
                                    throws AmazonServiceException,
                                           AmazonClientException

Returns information about the Access Key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the MaxItems and Marker parameters.

NOTE:To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

Specified by:: listAccessKeys in interface AmazonIdentityManagement

Parameters:: listAccessKeysRequest - Container for the necessary parameters to execute the ListAccessKeys service method on AmazonIdentityManagement.
Returns:: The response from the ListAccessKeys service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listGroupsForUser

public ListGroupsForUserResult listGroupsForUser(ListGroupsForUserRequest listGroupsForUserRequest)
                                          throws AmazonServiceException,
                                                 AmazonClientException

Lists the groups the specified user belongs to.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listGroupsForUser in interface AmazonIdentityManagement

Parameters:: listGroupsForUserRequest - Container for the necessary parameters to execute the ListGroupsForUser service method on AmazonIdentityManagement.
Returns:: The response from the ListGroupsForUser service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

addRoleToInstanceProfile

public void addRoleToInstanceProfile(AddRoleToInstanceProfileRequest addRoleToInstanceProfileRequest)
                              throws AmazonServiceException,
                                     AmazonClientException

Adds the specified role to the specified instance profile. For more information about roles, go to Working with Roles . For more information about instance profiles, go to About Instance Profiles .

Specified by:: addRoleToInstanceProfile in interface AmazonIdentityManagement

Parameters:: addRoleToInstanceProfileRequest - Container for the necessary parameters to execute the AddRoleToInstanceProfile service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getGroupPolicy

public GetGroupPolicyResult getGroupPolicy(GetGroupPolicyRequest getGroupPolicyRequest)
                                    throws AmazonServiceException,
                                           AmazonClientException

Retrieves the specified policy document for the specified group. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: getGroupPolicy in interface AmazonIdentityManagement

Parameters:: getGroupPolicyRequest - Container for the necessary parameters to execute the GetGroupPolicy service method on AmazonIdentityManagement.
Returns:: The response from the GetGroupPolicy service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getRolePolicy

public GetRolePolicyResult getRolePolicy(GetRolePolicyRequest getRolePolicyRequest)
                                  throws AmazonServiceException,
                                         AmazonClientException

Retrieves the specified policy document for the specified role. For more information about roles, go to Working with Roles .

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: getRolePolicy in interface AmazonIdentityManagement

Parameters:: getRolePolicyRequest - Container for the necessary parameters to execute the GetRolePolicy service method on AmazonIdentityManagement.
Returns:: The response from the GetRolePolicy service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listInstanceProfilesForRole

public ListInstanceProfilesForRoleResult listInstanceProfilesForRole(ListInstanceProfilesForRoleRequest listInstanceProfilesForRoleRequest)
                                                              throws AmazonServiceException,
                                                                     AmazonClientException

Lists the instance profiles that have the specified associated role. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listInstanceProfilesForRole in interface AmazonIdentityManagement

Parameters:: listInstanceProfilesForRoleRequest - Container for the necessary parameters to execute the ListInstanceProfilesForRole service method on AmazonIdentityManagement.
Returns:: The response from the ListInstanceProfilesForRole service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listVirtualMFADevices

public ListVirtualMFADevicesResult listVirtualMFADevices(ListVirtualMFADevicesRequest listVirtualMFADevicesRequest)
                                                  throws AmazonServiceException,
                                                         AmazonClientException

Lists the virtual MFA devices under the AWS account by assignment status. If you do not specify an assignment status, the action returns a list of all virtual MFA devices. Assignment status can be Assigned , Unassigned , or Any .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listVirtualMFADevices in interface AmazonIdentityManagement

Parameters:: listVirtualMFADevicesRequest - Container for the necessary parameters to execute the ListVirtualMFADevices service method on AmazonIdentityManagement.
Returns:: The response from the ListVirtualMFADevices service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteRolePolicy

public void deleteRolePolicy(DeleteRolePolicyRequest deleteRolePolicyRequest)
                      throws AmazonServiceException,
                             AmazonClientException

Deletes the specified policy associated with the specified role.

Specified by:: deleteRolePolicy in interface AmazonIdentityManagement

Parameters:: deleteRolePolicyRequest - Container for the necessary parameters to execute the DeleteRolePolicy service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createInstanceProfile

public CreateInstanceProfileResult createInstanceProfile(CreateInstanceProfileRequest createInstanceProfileRequest)
                                                  throws AmazonServiceException,
                                                         AmazonClientException

Creates a new instance profile. For information about instance profiles, go to About Instance Profiles .

For information about the number of instance profiles you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: createInstanceProfile in interface AmazonIdentityManagement

Parameters:: createInstanceProfileRequest - Container for the necessary parameters to execute the CreateInstanceProfile service method on AmazonIdentityManagement.
Returns:: The response from the CreateInstanceProfile service method, as returned by AmazonIdentityManagement.
Throws:: LimitExceededException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listGroupPolicies

public ListGroupPoliciesResult listGroupPolicies(ListGroupPoliciesRequest listGroupPoliciesRequest)
                                          throws AmazonServiceException,
                                                 AmazonClientException

Lists the names of the policies associated with the specified group. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listGroupPolicies in interface AmazonIdentityManagement

Parameters:: listGroupPoliciesRequest - Container for the necessary parameters to execute the ListGroupPolicies service method on AmazonIdentityManagement.
Returns:: The response from the ListGroupPolicies service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createLoginProfile

public CreateLoginProfileResult createLoginProfile(CreateLoginProfileRequest createLoginProfileRequest)
                                            throws AmazonServiceException,
                                                   AmazonClientException

Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console. For more information about managing passwords, see Managing Passwords in Using IAM .

Specified by:: createLoginProfile in interface AmazonIdentityManagement

Parameters:: createLoginProfileRequest - Container for the necessary parameters to execute the CreateLoginProfile service method on AmazonIdentityManagement.
Returns:: The response from the CreateLoginProfile service method, as returned by AmazonIdentityManagement.
Throws:: PasswordPolicyViolationException; NoSuchEntityException; EntityAlreadyExistsException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

removeRoleFromInstanceProfile

public void removeRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest removeRoleFromInstanceProfileRequest)
                                   throws AmazonServiceException,
                                          AmazonClientException

Removes the specified role from the specified instance profile.

IMPORTANT:Make sure you do not have any Amazon EC2 instances running with the role you are about to remove from the instance profile. Removing a role from an instance profile that is associated with a running instance will break any applications running on the instance.

For more information about roles, go to Working with Roles . For more information about instance profiles, go to About Instance Profiles .

Specified by:: removeRoleFromInstanceProfile in interface AmazonIdentityManagement

Parameters:: removeRoleFromInstanceProfileRequest - Container for the necessary parameters to execute the RemoveRoleFromInstanceProfile service method on AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateAccountPasswordPolicy

public void updateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest updateAccountPasswordPolicyRequest)
                                 throws AmazonServiceException,
                                        AmazonClientException

Updates the password policy settings for the account. For more information about using a password policy, go to Managing an IAM Password Policy .

Specified by:: updateAccountPasswordPolicy in interface AmazonIdentityManagement

Parameters:: updateAccountPasswordPolicyRequest - Container for the necessary parameters to execute the UpdateAccountPasswordPolicy service method on AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

updateAssumeRolePolicy

public void updateAssumeRolePolicy(UpdateAssumeRolePolicyRequest updateAssumeRolePolicyRequest)
                            throws AmazonServiceException,
                                   AmazonClientException

Updates the policy that grants an entity permission to assume a role. Currently, only an Amazon EC2 instance can assume a role. For more information about roles, go to Working with Roles .

Specified by:: updateAssumeRolePolicy in interface AmazonIdentityManagement

Parameters:: updateAssumeRolePolicyRequest - Container for the necessary parameters to execute the UpdateAssumeRolePolicy service method on AmazonIdentityManagement.
Throws:: MalformedPolicyDocumentException; NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getInstanceProfile

public GetInstanceProfileResult getInstanceProfile(GetInstanceProfileRequest getInstanceProfileRequest)
                                            throws AmazonServiceException,
                                                   AmazonClientException

Retrieves information about the specified instance profile, including the instance profile's path, GUID, ARN, and role. For more information about instance profiles, go to About Instance Profiles . For more information about ARNs, go to ARNs .

Specified by:: getInstanceProfile in interface AmazonIdentityManagement

Parameters:: getInstanceProfileRequest - Container for the necessary parameters to execute the GetInstanceProfile service method on AmazonIdentityManagement.
Returns:: The response from the GetInstanceProfile service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listRoles

public ListRolesResult listRoles(ListRolesRequest listRolesRequest)
                          throws AmazonServiceException,
                                 AmazonClientException

Lists the roles that have the specified path prefix. If there are none, the action returns an empty list. For more information about roles, go to Working with Roles .

You can paginate the results using the MaxItems and Marker parameters.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: listRoles in interface AmazonIdentityManagement

Parameters:: listRolesRequest - Container for the necessary parameters to execute the ListRoles service method on AmazonIdentityManagement.
Returns:: The response from the ListRoles service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getAccountSummary

public GetAccountSummaryResult getAccountSummary(GetAccountSummaryRequest getAccountSummaryRequest)
                                          throws AmazonServiceException,
                                                 AmazonClientException

Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: getAccountSummary in interface AmazonIdentityManagement

Parameters:: getAccountSummaryRequest - Container for the necessary parameters to execute the GetAccountSummary service method on AmazonIdentityManagement.
Returns:: The response from the GetAccountSummary service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getAccountPasswordPolicy

public GetAccountPasswordPolicyResult getAccountPasswordPolicy(GetAccountPasswordPolicyRequest getAccountPasswordPolicyRequest)
                                                        throws AmazonServiceException,
                                                               AmazonClientException

Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy .

Specified by:: getAccountPasswordPolicy in interface AmazonIdentityManagement

Parameters:: getAccountPasswordPolicyRequest - Container for the necessary parameters to execute the GetAccountPasswordPolicy service method on AmazonIdentityManagement.
Returns:: The response from the GetAccountPasswordPolicy service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listGroups

public ListGroupsResult listGroups()
                            throws AmazonServiceException,
                                   AmazonClientException

Lists the groups that have the specified path prefix.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listGroups in interface AmazonIdentityManagement

Returns:: The response from the ListGroups service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listServerCertificates

public ListServerCertificatesResult listServerCertificates()
                                                    throws AmazonServiceException,
                                                           AmazonClientException

Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listServerCertificates in interface AmazonIdentityManagement

Returns:: The response from the ListServerCertificates service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listUsers

public ListUsersResult listUsers()
                          throws AmazonServiceException,
                                 AmazonClientException

Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listUsers in interface AmazonIdentityManagement

Returns:: The response from the ListUsers service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

deleteAccountPasswordPolicy

public void deleteAccountPasswordPolicy()
                                 throws AmazonServiceException,
                                        AmazonClientException

Deletes the password policy for the AWS account.

Specified by:: deleteAccountPasswordPolicy in interface AmazonIdentityManagement

Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

createAccessKey

public CreateAccessKeyResult createAccessKey()
                                      throws AmazonServiceException,
                                             AmazonClientException

Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user. The default status for new keys is Active .

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: createAccessKey in interface AmazonIdentityManagement

Returns:: The response from the CreateAccessKey service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; LimitExceededException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getUser

public GetUserResult getUser()
                      throws AmazonServiceException,
                             AmazonClientException

Retrieves information about the specified user, including the user's path, GUID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request.

Specified by:: getUser in interface AmazonIdentityManagement

Returns:: The response from the GetUser service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listMFADevices

public ListMFADevicesResult listMFADevices()
                                    throws AmazonServiceException,
                                           AmazonClientException

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listMFADevices in interface AmazonIdentityManagement

Returns:: The response from the ListMFADevices service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listInstanceProfiles

public ListInstanceProfilesResult listInstanceProfiles()
                                                throws AmazonServiceException,
                                                       AmazonClientException

Lists the instance profiles that have the specified path prefix. If there are none, the action returns an empty list. For more information about instance profiles, go to About Instance Profiles .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listInstanceProfiles in interface AmazonIdentityManagement

Returns:: The response from the ListInstanceProfiles service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listAccountAliases

public ListAccountAliasesResult listAccountAliases()
                                            throws AmazonServiceException,
                                                   AmazonClientException

Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listAccountAliases in interface AmazonIdentityManagement

Returns:: The response from the ListAccountAliases service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listSigningCertificates

public ListSigningCertificatesResult listSigningCertificates()
                                                      throws AmazonServiceException,
                                                             AmazonClientException

Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the MaxItems and Marker parameters.

Specified by:: listSigningCertificates in interface AmazonIdentityManagement

Returns:: The response from the ListSigningCertificates service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listAccessKeys

public ListAccessKeysResult listAccessKeys()
                                    throws AmazonServiceException,
                                           AmazonClientException

Returns information about the Access Key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the MaxItems and Marker parameters.

NOTE:To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

Specified by:: listAccessKeys in interface AmazonIdentityManagement

Returns:: The response from the ListAccessKeys service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listVirtualMFADevices

public ListVirtualMFADevicesResult listVirtualMFADevices()
                                                  throws AmazonServiceException,
                                                         AmazonClientException

You can paginate the results using the MaxItems and Marker parameters.

Specified by:: listVirtualMFADevices in interface AmazonIdentityManagement

Returns:: The response from the ListVirtualMFADevices service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

listRoles

public ListRolesResult listRoles()
                          throws AmazonServiceException,
                                 AmazonClientException

Lists the roles that have the specified path prefix. If there are none, the action returns an empty list. For more information about roles, go to Working with Roles .

You can paginate the results using the MaxItems and Marker parameters.

The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html .

Specified by:: listRoles in interface AmazonIdentityManagement

Returns:: The response from the ListRoles service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getAccountSummary

public GetAccountSummaryResult getAccountSummary()
                                          throws AmazonServiceException,
                                                 AmazonClientException

Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management .

Specified by:: getAccountSummary in interface AmazonIdentityManagement

Returns:: The response from the GetAccountSummary service method, as returned by AmazonIdentityManagement.
Throws:: AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

getAccountPasswordPolicy

public GetAccountPasswordPolicyResult getAccountPasswordPolicy()
                                                        throws AmazonServiceException,
                                                               AmazonClientException

Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy .

Specified by:: getAccountPasswordPolicy in interface AmazonIdentityManagement

Returns:: The response from the GetAccountPasswordPolicy service method, as returned by AmazonIdentityManagement.
Throws:: NoSuchEntityException; AmazonClientException - If any internal errors are encountered inside the client while attempting to make the request or handle the response. For example if a network connection is not available.; AmazonServiceException - If an error response is returned by AmazonIdentityManagement indicating either a problem with the data in the request, or a server side issue.

setEndpoint

public void setEndpoint(String endpoint,
                        String serviceName,
                        String regionId)
                 throws IllegalArgumentException

Overrides the default endpoint for this client ("https://iam.amazonaws.com") and explicitly provides an AWS region ID and AWS service name to use when the client calculates a signature for requests. In almost all cases, this region ID and service name are automatically determined from the endpoint, and callers should use the simpler one-argument form of setEndpoint instead of this method.

This method is not threadsafe. Endpoints should be configured when the client is created and before any service requests are made. Changing it afterwards creates inevitable race conditions for any service requests in transit.

Callers can pass in just the endpoint (ex: "iam.amazonaws.com") or a full URL, including the protocol (ex: "https://iam.amazonaws.com"). If the protocol is not specified here, the default protocol from this client's ClientConfiguration will be used, which by default is HTTPS.

For more information on using AWS regions with the AWS SDK for Java, and a complete list of all available endpoints for all AWS services, see: http://developer.amazonwebservices.com/connect/entry.jspa?externalID=3912

Parameters:: endpoint - The endpoint (ex: "iam.amazonaws.com") or a full URL, including the protocol (ex: "https://iam.amazonaws.com") of the region specific AWS endpoint this client will communicate with.; serviceName - The name of the AWS service to use when signing requests.; regionId - The ID of the region in which this service resides.
Throws:: IllegalArgumentException - If any problems are detected with the specified endpoint.

getCachedResponseMetadata

public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)

Returns additional metadata for a previously executed successful, request, typically used for debugging issues where a service isn't acting as expected. This data isn't considered part of the result data returned by an operation, so it's available through this separate, diagnostic interface.

Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.

Specified by:: getCachedResponseMetadata in interface AmazonIdentityManagement

Parameters:: request - The originally executed request
Returns:: The response metadata for the specified request, or null if none is available.

Overview

Package

Class

Index

Help

PREV CLASS NEXT CLASS

FRAMES NO FRAMES

SUMMARY: NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

Did this page help you?

com.amazonaws.services.identitymanagement Class AmazonIdentityManagementClient

AmazonIdentityManagementClient

AmazonIdentityManagementClient

AmazonIdentityManagementClient

AmazonIdentityManagementClient

AmazonIdentityManagementClient

AmazonIdentityManagementClient

deleteAccountAlias

listGroups

deleteAccessKey

deleteVirtualMFADevice

deleteUserPolicy

putUserPolicy

listServerCertificates

getUserPolicy

updateServerCertificate

updateUser

putRolePolicy

updateSigningCertificate

deleteGroupPolicy

listUsers

updateGroup

createUser

enableMFADevice

deleteAccountPasswordPolicy

getLoginProfile

uploadServerCertificate

createGroup

createAccountAlias

deleteUser

deactivateMFADevice

removeUserFromGroup

deleteRole

deleteServerCertificate

createAccessKey

getUser

resyncMFADevice

listMFADevices

createVirtualMFADevice

listInstanceProfiles

updateAccessKey

addUserToGroup

getGroup

listAccountAliases

deleteGroup

getRole

listRolePolicies

listSigningCertificates

uploadSigningCertificate

deleteInstanceProfile

createRole

updateLoginProfile

deleteLoginProfile

changePassword

getServerCertificate

putGroupPolicy

deleteSigningCertificate

listUserPolicies

listAccessKeys

listGroupsForUser

addRoleToInstanceProfile

getGroupPolicy

getRolePolicy

listInstanceProfilesForRole

listVirtualMFADevices

deleteRolePolicy

createInstanceProfile

listGroupPolicies

createLoginProfile

removeRoleFromInstanceProfile

updateAccountPasswordPolicy

updateAssumeRolePolicy

getInstanceProfile

listRoles

getAccountSummary

getAccountPasswordPolicy

listGroups

listServerCertificates

listUsers

com.amazonaws.services.identitymanagement
Class AmazonIdentityManagementClient