Types

      
 All Types  Classes  
 NameDescription
AccessKey

The AccessKey data type contains information about an AWS access key.

This data type is used as a response element in the actions CreateAccessKey and ListAccessKeys.

AccessKeyMetadata

The AccessKey data type contains information about an AWS access key, without its secret key.

This data type is used as a response element in the action ListAccessKeys.

AddUserToGroupRequest
Container for the parameters to the AddUserToGroup operation.

Adds the specified user to the specified group.

AddUserToGroupResponse
Returns information about the AddUserToGroup response metadata. The AddUserToGroup operation has a void result type.
ChangePasswordRequest
Container for the parameters to the ChangePassword operation.

Changes the password of the IAM user calling ChangePassword . The root account password is not affected by this action. For information about modifying passwords, see Managing Passwords.

ChangePasswordResponse
Returns information about the ChangePassword response metadata. The ChangePassword operation has a void result type.
CreateAccessKeyRequest
Container for the parameters to the CreateAccessKey operation.

Creates a new AWS Secret Access Key and corresponding AWS Access Key ID for the specified user. The default status for new keys is Active .

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

IMPORTANT:To ensure the security of your AWS account, the Secret Access Key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys.

CreateAccessKeyResponse
Returns information about the CreateAccessKeyResult response and response metadata.
CreateAccessKeyResult

Contains the result of a successful invocation of the CreateAccessKey action.

CreateAccountAliasRequest
Container for the parameters to the CreateAccountAlias operation.

This action creates an alias for your AWS account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

CreateAccountAliasResponse
Returns information about the CreateAccountAlias response metadata. The CreateAccountAlias operation has a void result type.
CreateGroupRequest
Container for the parameters to the CreateGroup operation.

Creates a new group.

For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

CreateGroupResponse
Returns information about the CreateGroupResult response and response metadata.
CreateGroupResult

Contains the result of a successful invocation of the CreateGroup action.

CreateLoginProfileRequest
Container for the parameters to the CreateLoginProfile operation.

Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console. For more information about managing passwords, see Managing Passwords in Using IAM .

CreateLoginProfileResponse
Returns information about the CreateLoginProfileResult response and response metadata.
CreateLoginProfileResult

Contains the result of a successful invocation of the CreateLoginProfile action.

CreateUserRequest
Container for the parameters to the CreateUser operation.

Creates a new user for your AWS account.

For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management .

CreateUserResponse
Returns information about the CreateUserResult response and response metadata.
CreateUserResult

Contains the result of a successful invocation of the CreateUser action.

CreateVirtualMFADeviceRequest
Container for the parameters to the CreateVirtualMFADevice operation.

Creates a new virtual MFA device for the AWS account. After creating the virtual MFA, use EnableMFADevice to attach the MFA device to an IAM user. For more information about creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access Management .

For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management .

IMPORTANT:The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures.

CreateVirtualMFADeviceResponse
Returns information about the CreateVirtualMFADeviceResult response and response metadata.
CreateVirtualMFADeviceResult

Contains the result of a successful invocation of the CreateVirtualMFADevice action.

DeactivateMFADeviceRequest
Container for the parameters to the DeactivateMFADevice operation.

Deactivates the specified MFA device and removes it from association with the user name for which it was originally enabled.

DeactivateMFADeviceResponse
Returns information about the DeactivateMFADevice response metadata. The DeactivateMFADevice operation has a void result type.
DeleteAccessKeyRequest
Container for the parameters to the DeleteAccessKey operation.

Deletes the access key associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

DeleteAccessKeyResponse
Returns information about the DeleteAccessKey response metadata. The DeleteAccessKey operation has a void result type.
DeleteAccountAliasRequest
Container for the parameters to the DeleteAccountAlias operation.

Deletes the specified AWS account alias. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

DeleteAccountAliasResponse
Returns information about the DeleteAccountAlias response metadata. The DeleteAccountAlias operation has a void result type.
DeleteAccountPasswordPolicyRequest
Container for the parameters to the DeleteAccountPasswordPolicy operation.

Deletes the password policy for the AWS account.

DeleteAccountPasswordPolicyResponse
Returns information about the DeleteAccountPasswordPolicy response metadata. The DeleteAccountPasswordPolicy operation has a void result type.
DeleteConflictException
AmazonIdentityManagementService exception
DeleteGroupPolicyRequest
Container for the parameters to the DeleteGroupPolicy operation.

Deletes the specified policy that is associated with the specified group.

DeleteGroupPolicyResponse
Returns information about the DeleteGroupPolicy response metadata. The DeleteGroupPolicy operation has a void result type.
DeleteGroupRequest
Container for the parameters to the DeleteGroup operation.

Deletes the specified group. The group must not contain any users or have any attached policies.

DeleteGroupResponse
Returns information about the DeleteGroup response metadata. The DeleteGroup operation has a void result type.
DeleteLoginProfileRequest
Container for the parameters to the DeleteLoginProfile operation.

Deletes the password for the specified user, which terminates the user's ability to access AWS services through the AWS Management Console.

IMPORTANT:Deleting a user's password does not prevent a user from accessing IAM through the command line interface or the API. To prevent all user access you must also either make the access key inactive or delete it. For more information about making keys inactive or deleting them, see UpdateAccessKey and DeleteAccessKey.

DeleteLoginProfileResponse
Returns information about the DeleteLoginProfile response metadata. The DeleteLoginProfile operation has a void result type.
DeleteServerCertificateRequest
Container for the parameters to the DeleteServerCertificate operation.

Deletes the specified server certificate.

IMPORTANT:If you are using a server certificate with Elastic Load Balancing, deleting the certificate could have implications for your application. If Elastic Load Balancing doesn't detect the deletion of bound certificates, it may continue to use the certificates. This could cause Elastic Load Balancing to stop accepting traffic. We recommend that you remove the reference to the certificate from Elastic Load Balancing before using this command to delete the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API Reference.

DeleteServerCertificateResponse
Returns information about the DeleteServerCertificate response metadata. The DeleteServerCertificate operation has a void result type.
DeleteSigningCertificateRequest
Container for the parameters to the DeleteSigningCertificate operation.

Deletes the specified signing certificate associated with the specified user.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users.

DeleteSigningCertificateResponse
Returns information about the DeleteSigningCertificate response metadata. The DeleteSigningCertificate operation has a void result type.
DeleteUserPolicyRequest
Container for the parameters to the DeleteUserPolicy operation.

Deletes the specified policy associated with the specified user.

DeleteUserPolicyResponse
Returns information about the DeleteUserPolicy response metadata. The DeleteUserPolicy operation has a void result type.
DeleteUserRequest
Container for the parameters to the DeleteUser operation.

Deletes the specified user. The user must not belong to any groups, have any keys or signing certificates, or have any attached policies.

DeleteUserResponse
Returns information about the DeleteUser response metadata. The DeleteUser operation has a void result type.
DeleteVirtualMFADeviceRequest
Container for the parameters to the DeleteVirtualMFADevice operation.

Deletes a virtual MFA device.

NOTE:You must deactivate a user's virtual MFA device before you can delete it. For information about deactivating MFA devices, see DeactivateMFADevice.

DeleteVirtualMFADeviceResponse
Returns information about the DeleteVirtualMFADevice response metadata. The DeleteVirtualMFADevice operation has a void result type.
DuplicateCertificateException
AmazonIdentityManagementService exception
EnableMFADeviceRequest
Container for the parameters to the EnableMFADevice operation.

Enables the specified MFA device and associates it with the specified user name. When enabled, the MFA device is required for every subsequent login by the user name associated with the device.

EnableMFADeviceResponse
Returns information about the EnableMFADevice response metadata. The EnableMFADevice operation has a void result type.
EntityAlreadyExistsException
AmazonIdentityManagementService exception
EntityTemporarilyUnmodifiableException
AmazonIdentityManagementService exception
GetAccountPasswordPolicyRequest
Container for the parameters to the GetAccountPasswordPolicy operation.

Retrieves the password policy for the AWS account. For more information about using a password policy, go to Managing an IAM Password Policy.

GetAccountPasswordPolicyResponse
Returns information about the GetAccountPasswordPolicyResult response and response metadata.
GetAccountPasswordPolicyResult
Get Account Password Policy Result
GetAccountSummaryRequest
Container for the parameters to the GetAccountSummary operation.

Retrieves account level information about account entity usage and IAM quotas.

For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management .

GetAccountSummaryResponse
Returns information about the GetAccountSummaryResult response and response metadata.
GetAccountSummaryResult

Contains the result of a successful invocation of the GetAccountSummary action.

GetGroupPolicyRequest
Container for the parameters to the GetGroupPolicy operation.

Retrieves the specified policy document for the specified group. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

GetGroupPolicyResponse
Returns information about the GetGroupPolicyResult response and response metadata.
GetGroupPolicyResult

Contains the result of a successful invocation of the GetGroupPolicy action.

GetGroupRequest
Container for the parameters to the GetGroup operation.

Returns a list of users that are in the specified group. You can paginate the results using the MaxItems and Marker parameters.

GetGroupResponse
Returns information about the GetGroupResult response and response metadata.
GetGroupResult

Contains the result of a successful invocation of the GetGroup action.

GetLoginProfileRequest
Container for the parameters to the GetLoginProfile operation.

Retrieves the user name and password create date for the specified user.

GetLoginProfileResponse
Returns information about the GetLoginProfileResult response and response metadata.
GetLoginProfileResult

Contains the result of a successful invocation of the GetLoginProfile action.

GetServerCertificateRequest
Container for the parameters to the GetServerCertificate operation.

Retrieves information about the specified server certificate.

GetServerCertificateResponse
Returns information about the GetServerCertificateResult response and response metadata.
GetServerCertificateResult

Contains the result of a successful invocation of the GetServerCertificate action.

GetUserPolicyRequest
Container for the parameters to the GetUserPolicy operation.

Retrieves the specified policy document for the specified user. The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html.

GetUserPolicyResponse
Returns information about the GetUserPolicyResult response and response metadata.
GetUserPolicyResult

Contains the result of a successful invocation of the GetUserPolicy action.

GetUserRequest
Container for the parameters to the GetUser operation.

Retrieves information about the specified user, including the user's path, GUID, and ARN.

If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request.

GetUserResponse
Returns information about the GetUserResult response and response metadata.
GetUserResult

Contains the result of a successful invocation of the GetUser action.

Group

The Group data type contains information about a group.

This data type is used as a response element in the following actions:

  • CreateGroup
  • GetGroup
  • ListGroups
InvalidAuthenticationCodeException
AmazonIdentityManagementService exception
InvalidCertificateException
AmazonIdentityManagementService exception
InvalidUserTypeException
AmazonIdentityManagementService exception
KeyPairMismatchException
AmazonIdentityManagementService exception
LimitExceededException
AmazonIdentityManagementService exception
ListAccessKeysRequest
Container for the parameters to the ListAccessKeys operation.

Returns information about the Access Key IDs associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of keys, you can still paginate the results using the MaxItems and Marker parameters.

If the UserName field is not specified, the UserName is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

NOTE:To ensure the security of your AWS account, the secret access key is accessible only during key and user creation.

ListAccessKeysResponse
Returns information about the ListAccessKeysResult response and response metadata.
ListAccessKeysResult

Contains the result of a successful invocation of the ListAccessKeys action.

ListAccountAliasesRequest
Container for the parameters to the ListAccountAliases operation.

Lists the account aliases associated with the account. For information about using an AWS account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity and Access Management .

You can paginate the results using the MaxItems and Marker parameters.

ListAccountAliasesResponse
Returns information about the ListAccountAliasesResult response and response metadata.
ListAccountAliasesResult

Contains the result of a successful invocation of the ListAccountAliases action.

ListGroupPoliciesRequest
Container for the parameters to the ListGroupPolicies operation.

Lists the names of the policies associated with the specified group. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

ListGroupPoliciesResponse
Returns information about the ListGroupPoliciesResult response and response metadata.
ListGroupPoliciesResult

Contains the result of a successful invocation of the ListGroupPolicies action.

ListGroupsForUserRequest
Container for the parameters to the ListGroupsForUser operation.

Lists the groups the specified user belongs to.

You can paginate the results using the MaxItems and Marker parameters.

ListGroupsForUserResponse
Returns information about the ListGroupsForUserResult response and response metadata.
ListGroupsForUserResult

Contains the result of a successful invocation of the ListGroupsForUser action.

ListGroupsRequest
Container for the parameters to the ListGroups operation.

Lists the groups that have the specified path prefix.

You can paginate the results using the MaxItems and Marker parameters.

ListGroupsResponse
Returns information about the ListGroupsResult response and response metadata.
ListGroupsResult

Contains the result of a successful invocation of the ListGroups action.

ListMFADevicesRequest
Container for the parameters to the ListMFADevices operation.

Lists the MFA devices. If the request includes the user name, then this action lists all the MFA devices associated with the specified user name. If you do not specify a user name, IAM determines the user name implicitly based on the AWS Access Key ID signing the request.

You can paginate the results using the MaxItems and Marker parameters.

ListMFADevicesResponse
Returns information about the ListMFADevicesResult response and response metadata.
ListMFADevicesResult

Contains the result of a successful invocation of the ListMFADevices action.

ListServerCertificatesRequest
Container for the parameters to the ListServerCertificates operation.

Lists the server certificates that have the specified path prefix. If none exist, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

ListServerCertificatesResponse
Returns information about the ListServerCertificatesResult response and response metadata.
ListServerCertificatesResult

Contains the result of a successful invocation of the ListServerCertificates action.

ListSigningCertificatesRequest
Container for the parameters to the ListSigningCertificates operation.

Returns information about the signing certificates associated with the specified user. If there are none, the action returns an empty list.

Although each user is limited to a small number of signing certificates, you can still paginate the results using the MaxItems and Marker parameters.

If the UserName field is not specified, the user name is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

ListSigningCertificatesResponse
Returns information about the ListSigningCertificatesResult response and response metadata.
ListSigningCertificatesResult

Contains the result of a successful invocation of the ListSigningCertificates action.

ListUserPoliciesRequest
Container for the parameters to the ListUserPolicies operation.

Lists the names of the policies associated with the specified user. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

ListUserPoliciesResponse
Returns information about the ListUserPoliciesResult response and response metadata.
ListUserPoliciesResult

Contains the result of a successful invocation of the ListUserPolicies action.

ListUsersRequest
Container for the parameters to the ListUsers operation.

Lists the users that have the specified path prefix. If there are none, the action returns an empty list.

You can paginate the results using the MaxItems and Marker parameters.

ListUsersResponse
Returns information about the ListUsersResult response and response metadata.
ListUsersResult

Contains the result of a successful invocation of the ListUsers action.

ListVirtualMFADevicesRequest
Container for the parameters to the ListVirtualMFADevices operation.

Lists the virtual MFA devices under the AWS account by assignment status. If you do not specify an assignment status, the action returns a list of all virtual MFA devices. Assignment status can be Assigned , Unassigned , or Any .

You can paginate the results using the MaxItems and Marker parameters.

ListVirtualMFADevicesResponse
Returns information about the ListVirtualMFADevicesResult response and response metadata.
ListVirtualMFADevicesResult

Contains the result of a successful invocation of the ListVirtualMFADevices action.

LoginProfile

The LoginProfile data type contains the user name and password create date for a user.

This data type is used as a response element in the actions CreateLoginProfile and GetLoginProfile.

MalformedCertificateException
AmazonIdentityManagementService exception
MalformedPolicyDocumentException
AmazonIdentityManagementService exception
MFADevice

The MFADevice data type contains information about an MFA device.

This data type is used as a response element in the action ListMFADevices.

NoSuchEntityException
AmazonIdentityManagementService exception
PasswordPolicy
Password Policy
PasswordPolicyViolationException
AmazonIdentityManagementService exception
PutGroupPolicyRequest
Container for the parameters to the PutGroupPolicy operation.

Adds (or updates) a policy document associated with the specified group. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management .

For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because policy documents can be large, you should use POST rather than GET when calling PutGroupPolicy. For more information, see Making Query Requests in Using AWS Identity and Access Management.

PutGroupPolicyResponse
Returns information about the PutGroupPolicy response metadata. The PutGroupPolicy operation has a void result type.
PutUserPolicyRequest
Container for the parameters to the PutUserPolicy operation.

Adds (or updates) a policy document associated with the specified user. For information about policies, refer to Overview of Policies in Using AWS Identity and Access Management .

For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because policy documents can be large, you should use POST rather than GET when calling PutUserPolicy. For more information, see Making Query Requests in Using AWS Identity and Access Management.

PutUserPolicyResponse
Returns information about the PutUserPolicy response metadata. The PutUserPolicy operation has a void result type.
RemoveUserFromGroupRequest
Container for the parameters to the RemoveUserFromGroup operation.

Removes the specified user from the specified group.

RemoveUserFromGroupResponse
Returns information about the RemoveUserFromGroup response metadata. The RemoveUserFromGroup operation has a void result type.
ResyncMFADeviceRequest
Container for the parameters to the ResyncMFADevice operation.

Synchronizes the specified MFA device with AWS servers.

ResyncMFADeviceResponse
Returns information about the ResyncMFADevice response metadata. The ResyncMFADevice operation has a void result type.
ServerCertificate

The ServerCertificate data type contains information about a server certificate.

This data type is used as a response element in the action GetServerCertificate.

ServerCertificateMetadata

ServerCertificateMetadata contains information about a server certificate without its certificate body, certificate chain, and private key.

This data type is used as a response element in the action UploadServerCertificate and ListServerCertificates.

SigningCertificate

The SigningCertificate data type contains information about an X.509 signing certificate.

This data type is used as a response element in the actions UploadSigningCertificate and ListSigningCertificates.

UpdateAccessKeyRequest
Container for the parameters to the UpdateAccessKey operation.

Changes the status of the specified access key from Active to Inactive, or vice versa. This action can be used to disable a user's key as part of a key rotation work flow.

If the UserName field is not specified, the UserName is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management .

UpdateAccessKeyResponse
Returns information about the UpdateAccessKey response metadata. The UpdateAccessKey operation has a void result type.
UpdateAccountPasswordPolicyRequest
Container for the parameters to the UpdateAccountPasswordPolicy operation.

Updates the password policy settings for the account. For more information about using a password policy, go to Managing an IAM Password Policy.

UpdateAccountPasswordPolicyResponse
Returns information about the UpdateAccountPasswordPolicy response metadata. The UpdateAccountPasswordPolicy operation has a void result type.
UpdateGroupRequest
Container for the parameters to the UpdateGroup operation.

Updates the name and/or the path of the specified group.

IMPORTANT: You should understand the implications of changing a group's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.

NOTE:To change a group name the requester must have appropriate permissions on both the source object and the target object. For example, to change Managers to MGRs, the entity making the request must have permission on Managers and MGRs, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateGroupResponse
Returns information about the UpdateGroup response metadata. The UpdateGroup operation has a void result type.
UpdateLoginProfileRequest
Container for the parameters to the UpdateLoginProfile operation.

Changes the password for the specified user.

UpdateLoginProfileResponse
Returns information about the UpdateLoginProfile response metadata. The UpdateLoginProfile operation has a void result type.
UpdateServerCertificateRequest
Container for the parameters to the UpdateServerCertificate operation.

Updates the name and/or the path of the specified server certificate.

IMPORTANT: You should understand the implications of changing a server certificate's path or name. For more information, see Managing Server Certificates in Using AWS Identity and Access Management.

NOTE:To change a server certificate name the requester must have appropriate permissions on both the source object and the target object. For example, to change the name from ProductionCert to ProdCert, the entity making the request must have permission on ProductionCert and ProdCert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateServerCertificateResponse
Returns information about the UpdateServerCertificate response metadata. The UpdateServerCertificate operation has a void result type.
UpdateSigningCertificateRequest
Container for the parameters to the UpdateSigningCertificate operation.

Changes the status of the specified signing certificate from active to disabled, or vice versa. This action can be used to disable a user's signing certificate as part of a certificate rotation work flow.

If the UserName field is not specified, the UserName is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management .

UpdateSigningCertificateResponse
Returns information about the UpdateSigningCertificate response metadata. The UpdateSigningCertificate operation has a void result type.
UpdateUserRequest
Container for the parameters to the UpdateUser operation.

Updates the name and/or the path of the specified user.

IMPORTANT: You should understand the implications of changing a user's path or name. For more information, see Renaming Users and Groups in Using AWS Identity and Access Management.

NOTE:To change a user name the requester must have appropriate permissions on both the source object and the target object. For example, to change Bob to Robert, the entity making the request must have permission on Bob and Robert, or must have permission on all (*). For more information about permissions, see Permissions and Policies.

UpdateUserResponse
Returns information about the UpdateUser response metadata. The UpdateUser operation has a void result type.
UploadServerCertificateRequest
Container for the parameters to the UploadServerCertificate operation.

Uploads a server certificate entity for the AWS account. The server certificate entity includes a public key certificate, a private key, and an optional certificate chain, which should all be PEM-encoded.

For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management .

NOTE:Because the body of the public key certificate, private key, and the certificate chain can be large, you should use POST rather than GET when calling UploadServerCertificate. For more information, see Making Query Requests in Using AWS Identity and Access Management.

UploadServerCertificateResponse
Returns information about the UploadServerCertificateResult response and response metadata.
UploadServerCertificateResult

Contains the result of a successful invocation of the UploadServerCertificate action.

UploadSigningCertificateRequest
Container for the parameters to the UploadSigningCertificate operation.

Uploads an X.509 signing certificate and associates it with the specified user. Some AWS services use X.509 signing certificates to validate requests that are signed with a corresponding private key. When you upload the certificate, its default status is Active .

If the UserName field is not specified, the user name is determined implicitly based on the AWS Access Key ID used to sign the request. Because this action works for access keys under the AWS account, this API can be used to manage root credentials even if the AWS account has no associated users.

NOTE:Because the body of a X.509 certificate can be large, you should use POST rather than GET when calling UploadSigningCertificate. For more information, see Making Query Requests in Using AWS Identity and Access Management.

UploadSigningCertificateResponse
Returns information about the UploadSigningCertificateResult response and response metadata.
UploadSigningCertificateResult

Contains the result of a successful invocation of the UploadSigningCertificate action.

User

The User data type contains information about a user.

This data type is used as a response element in the following actions:

  • CreateUser

  • GetUser

  • ListUsers

VirtualMFADevice

The VirtualMFADevice data type contains information about a virtual MFA device.