-
Notifications
You must be signed in to change notification settings - Fork 573
/
DeleteRolePermissionsBoundaryCommand.ts
166 lines (155 loc) · 6.23 KB
/
DeleteRolePermissionsBoundaryCommand.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
// smithy-typescript generated code
import { EndpointParameterInstructions, getEndpointPlugin } from "@aws-sdk/middleware-endpoint";
import { getSerdePlugin } from "@aws-sdk/middleware-serde";
import { Command as $Command } from "@aws-sdk/smithy-client";
import {
FinalizeHandlerArguments,
Handler,
HandlerExecutionContext,
HttpHandlerOptions as __HttpHandlerOptions,
MetadataBearer as __MetadataBearer,
MiddlewareStack,
} from "@aws-sdk/types";
import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@smithy/protocol-http";
import { SerdeContext as __SerdeContext } from "@smithy/types";
import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
import { DeleteRolePermissionsBoundaryRequest } from "../models/models_0";
import {
de_DeleteRolePermissionsBoundaryCommand,
se_DeleteRolePermissionsBoundaryCommand,
} from "../protocols/Aws_query";
/**
* @public
*/
export { __MetadataBearer, $Command };
/**
* @public
*
* The input for {@link DeleteRolePermissionsBoundaryCommand}.
*/
export interface DeleteRolePermissionsBoundaryCommandInput extends DeleteRolePermissionsBoundaryRequest {}
/**
* @public
*
* The output of {@link DeleteRolePermissionsBoundaryCommand}.
*/
export interface DeleteRolePermissionsBoundaryCommandOutput extends __MetadataBearer {}
/**
* @public
* <p>Deletes the permissions boundary for the specified IAM role. </p>
* <p>You cannot set the boundary for a service-linked role.</p>
* <important>
* <p>Deleting the permissions boundary for a role might increase its permissions. For
* example, it might allow anyone who assumes the role to perform all the actions
* granted in its permissions policies.</p>
* </important>
* @example
* Use a bare-bones client and the command you need to make an API call.
* ```javascript
* import { IAMClient, DeleteRolePermissionsBoundaryCommand } from "@aws-sdk/client-iam"; // ES Modules import
* // const { IAMClient, DeleteRolePermissionsBoundaryCommand } = require("@aws-sdk/client-iam"); // CommonJS import
* const client = new IAMClient(config);
* const input = { // DeleteRolePermissionsBoundaryRequest
* RoleName: "STRING_VALUE", // required
* };
* const command = new DeleteRolePermissionsBoundaryCommand(input);
* const response = await client.send(command);
* // {};
*
* ```
*
* @param DeleteRolePermissionsBoundaryCommandInput - {@link DeleteRolePermissionsBoundaryCommandInput}
* @returns {@link DeleteRolePermissionsBoundaryCommandOutput}
* @see {@link DeleteRolePermissionsBoundaryCommandInput} for command's `input` shape.
* @see {@link DeleteRolePermissionsBoundaryCommandOutput} for command's `response` shape.
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
*
* @throws {@link NoSuchEntityException} (client fault)
* <p>The request was rejected because it referenced a resource entity that does not exist. The
* error message describes the resource.</p>
*
* @throws {@link ServiceFailureException} (server fault)
* <p>The request processing has failed because of an unknown error, exception or
* failure.</p>
*
* @throws {@link UnmodifiableEntityException} (client fault)
* <p>The request was rejected because service-linked roles are protected Amazon Web Services resources. Only
* the service that depends on the service-linked role can modify or delete the role on your
* behalf. The error message includes the name of the service that depends on this service-linked
* role. You must request the change through that service.</p>
*
* @throws {@link IAMServiceException}
* <p>Base exception class for all service exceptions from IAM service.</p>
*
*/
export class DeleteRolePermissionsBoundaryCommand extends $Command<
DeleteRolePermissionsBoundaryCommandInput,
DeleteRolePermissionsBoundaryCommandOutput,
IAMClientResolvedConfig
> {
// Start section: command_properties
// End section: command_properties
public static getEndpointParameterInstructions(): EndpointParameterInstructions {
return {
UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
Endpoint: { type: "builtInParams", name: "endpoint" },
Region: { type: "builtInParams", name: "region" },
UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
};
}
/**
* @public
*/
constructor(readonly input: DeleteRolePermissionsBoundaryCommandInput) {
// Start section: command_constructor
super();
// End section: command_constructor
}
/**
* @internal
*/
resolveMiddleware(
clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
configuration: IAMClientResolvedConfig,
options?: __HttpHandlerOptions
): Handler<DeleteRolePermissionsBoundaryCommandInput, DeleteRolePermissionsBoundaryCommandOutput> {
this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
this.middlewareStack.use(
getEndpointPlugin(configuration, DeleteRolePermissionsBoundaryCommand.getEndpointParameterInstructions())
);
const stack = clientStack.concat(this.middlewareStack);
const { logger } = configuration;
const clientName = "IAMClient";
const commandName = "DeleteRolePermissionsBoundaryCommand";
const handlerExecutionContext: HandlerExecutionContext = {
logger,
clientName,
commandName,
inputFilterSensitiveLog: (_: any) => _,
outputFilterSensitiveLog: (_: any) => _,
};
const { requestHandler } = configuration;
return stack.resolve(
(request: FinalizeHandlerArguments<any>) =>
requestHandler.handle(request.request as __HttpRequest, options || {}),
handlerExecutionContext
);
}
/**
* @internal
*/
private serialize(input: DeleteRolePermissionsBoundaryCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
return se_DeleteRolePermissionsBoundaryCommand(input, context);
}
/**
* @internal
*/
private deserialize(
output: __HttpResponse,
context: __SerdeContext
): Promise<DeleteRolePermissionsBoundaryCommandOutput> {
return de_DeleteRolePermissionsBoundaryCommand(output, context);
}
// Start section: command_body_extra
// End section: command_body_extra
}