-
Notifications
You must be signed in to change notification settings - Fork 573
/
DeleteRoleCommand.ts
187 lines (176 loc) · 7.4 KB
/
DeleteRoleCommand.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
// smithy-typescript generated code
import { EndpointParameterInstructions, getEndpointPlugin } from "@aws-sdk/middleware-endpoint";
import { getSerdePlugin } from "@aws-sdk/middleware-serde";
import { HttpRequest as __HttpRequest, HttpResponse as __HttpResponse } from "@aws-sdk/protocol-http";
import { Command as $Command } from "@aws-sdk/smithy-client";
import {
FinalizeHandlerArguments,
Handler,
HandlerExecutionContext,
HttpHandlerOptions as __HttpHandlerOptions,
MetadataBearer as __MetadataBearer,
MiddlewareStack,
SerdeContext as __SerdeContext,
} from "@aws-sdk/types";
import { IAMClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../IAMClient";
import { DeleteRoleRequest } from "../models/models_0";
import { deserializeAws_queryDeleteRoleCommand, serializeAws_queryDeleteRoleCommand } from "../protocols/Aws_query";
/**
* @public
*
* The input for {@link DeleteRoleCommand}.
*/
export interface DeleteRoleCommandInput extends DeleteRoleRequest {}
/**
* @public
*
* The output of {@link DeleteRoleCommand}.
*/
export interface DeleteRoleCommandOutput extends __MetadataBearer {}
/**
* @public
* <p>Deletes the specified role. Unlike the Amazon Web Services Management Console, when you delete a role
* programmatically, you must delete the items attached to the role manually, or the
* deletion fails. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_manage_delete.html#roles-managingrole-deleting-cli">Deleting an IAM role</a>. Before attempting to delete a role, remove the
* following attached items: </p>
* <ul>
* <li>
* <p>Inline policies (<a>DeleteRolePolicy</a>)</p>
* </li>
* <li>
* <p>Attached managed policies (<a>DetachRolePolicy</a>)</p>
* </li>
* <li>
* <p>Instance profile (<a>RemoveRoleFromInstanceProfile</a>)</p>
* </li>
* <li>
* <p>Optional – Delete instance profile after detaching from role for
* resource clean up (<a>DeleteInstanceProfile</a>)</p>
* </li>
* </ul>
* <important>
* <p>Make sure that you do not have any Amazon EC2 instances running with the role you
* are about to delete. Deleting a role or instance profile that is associated with a
* running instance will break any applications running on the instance.</p>
* </important>
* @example
* Use a bare-bones client and the command you need to make an API call.
* ```javascript
* import { IAMClient, DeleteRoleCommand } from "@aws-sdk/client-iam"; // ES Modules import
* // const { IAMClient, DeleteRoleCommand } = require("@aws-sdk/client-iam"); // CommonJS import
* const client = new IAMClient(config);
* const command = new DeleteRoleCommand(input);
* const response = await client.send(command);
* ```
*
* @param DeleteRoleCommandInput - {@link DeleteRoleCommandInput}
* @returns {@link DeleteRoleCommandOutput}
* @see {@link DeleteRoleCommandInput} for command's `input` shape.
* @see {@link DeleteRoleCommandOutput} for command's `response` shape.
* @see {@link IAMClientResolvedConfig | config} for IAMClient's `config` shape.
*
* @throws {@link ConcurrentModificationException} (client fault)
* <p>The request was rejected because multiple requests to change this object were submitted
* simultaneously. Wait a few minutes and submit your request again.</p>
*
* @throws {@link DeleteConflictException} (client fault)
* <p>The request was rejected because it attempted to delete a resource that has attached
* subordinate entities. The error message describes these entities.</p>
*
* @throws {@link LimitExceededException} (client fault)
* <p>The request was rejected because it attempted to create resources beyond the current
* Amazon Web Services account limits. The error message describes the limit exceeded.</p>
*
* @throws {@link NoSuchEntityException} (client fault)
* <p>The request was rejected because it referenced a resource entity that does not exist. The
* error message describes the resource.</p>
*
* @throws {@link ServiceFailureException} (server fault)
* <p>The request processing has failed because of an unknown error, exception or
* failure.</p>
*
* @throws {@link UnmodifiableEntityException} (client fault)
* <p>The request was rejected because service-linked roles are protected Amazon Web Services resources. Only
* the service that depends on the service-linked role can modify or delete the role on your
* behalf. The error message includes the name of the service that depends on this service-linked
* role. You must request the change through that service.</p>
*
*
* @example To delete an IAM role
* ```javascript
* // The following command removes the role named Test-Role.
* const input = {
* "RoleName": "Test-Role"
* };
* const command = new DeleteRoleCommand(input);
* await client.send(command);
* // example id: 053cdf74-9bda-44b8-bdbb-140fd5a32603
* ```
*
*/
export class DeleteRoleCommand extends $Command<
DeleteRoleCommandInput,
DeleteRoleCommandOutput,
IAMClientResolvedConfig
> {
// Start section: command_properties
// End section: command_properties
public static getEndpointParameterInstructions(): EndpointParameterInstructions {
return {
UseFIPS: { type: "builtInParams", name: "useFipsEndpoint" },
Endpoint: { type: "builtInParams", name: "endpoint" },
Region: { type: "builtInParams", name: "region" },
UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
};
}
/**
* @public
*/
constructor(readonly input: DeleteRoleCommandInput) {
// Start section: command_constructor
super();
// End section: command_constructor
}
/**
* @internal
*/
resolveMiddleware(
clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
configuration: IAMClientResolvedConfig,
options?: __HttpHandlerOptions
): Handler<DeleteRoleCommandInput, DeleteRoleCommandOutput> {
this.middlewareStack.use(getSerdePlugin(configuration, this.serialize, this.deserialize));
this.middlewareStack.use(getEndpointPlugin(configuration, DeleteRoleCommand.getEndpointParameterInstructions()));
const stack = clientStack.concat(this.middlewareStack);
const { logger } = configuration;
const clientName = "IAMClient";
const commandName = "DeleteRoleCommand";
const handlerExecutionContext: HandlerExecutionContext = {
logger,
clientName,
commandName,
inputFilterSensitiveLog: (_: any) => _,
outputFilterSensitiveLog: (_: any) => _,
};
const { requestHandler } = configuration;
return stack.resolve(
(request: FinalizeHandlerArguments<any>) =>
requestHandler.handle(request.request as __HttpRequest, options || {}),
handlerExecutionContext
);
}
/**
* @internal
*/
private serialize(input: DeleteRoleCommandInput, context: __SerdeContext): Promise<__HttpRequest> {
return serializeAws_queryDeleteRoleCommand(input, context);
}
/**
* @internal
*/
private deserialize(output: __HttpResponse, context: __SerdeContext): Promise<DeleteRoleCommandOutput> {
return deserializeAws_queryDeleteRoleCommand(output, context);
}
// Start section: command_body_extra
// End section: command_body_extra
}