AWS-IAM.yml

category: IT Services
sectionOrder:
- Connect
- Collect
commonfields:
  id: AWS - IAM
  version: -1
configuration:
- display: Role Arn
  name: roleArn
  required: false
  type: 0
  section: Connect
- display: Role Session Name
  name: roleSessionName
  required: false
  type: 0
  section: Connect
- display: AWS Default Region
  name: defaultRegion
  options:
  - us-east-1
  - us-east-2
  - us-west-1
  - us-west-2
  - ca-central-1
  - eu-west-1
  - eu-central-1
  - eu-west-2
  - ap-northeast-1
  - ap-northeast-2
  - ap-southeast-1
  - ap-southeast-2
  - ap-south-1
  - sa-east-1
  - eu-north-1
  - eu-west-3
  - us-gov-east-1
  - us-gov-west-1
  required: false
  type: 15
  section: Collect
  advanced: true
- display: Role Session Duration
  name: sessionDuration
  required: false
  type: 0
  section: Connect
  advanced: true
- display: Access Key
  name: credentials
  required: false
  type: 9
  displaypassword: Secret Key
  section: Connect
- display: Access Key
  name: access_key
  required: false
  type: 0
  hidden: true
  section: Connect
- display: Secret Key
  name: secret_key
  required: false
  type: 4
  hidden: true
  section: Connect
- additionalinfo: The time in seconds till a timeout exception is reached. You can specify just the read timeout (for example 60) or also the connect timeout followed after a comma (for example 60,10). If a connect timeout is not specified, a default of 10 second will be used.
  defaultvalue: 60,10
  display: Timeout
  name: timeout
  required: false
  type: 0
  section: Connect
  advanced: true
- additionalinfo: 'The maximum number of retry attempts when connection or throttling errors are encountered. Set to 0 to disable retries. The default value is 5 and the limit is 10. Note: Increasing the number of retries will increase the execution time.'
  defaultvalue: '5'
  display: Retries
  name: retries
  required: false
  type: 0
  section: Connect
  advanced: true
- display: Trust any certificate (not secure)
  name: insecure
  required: false
  type: 8
  section: Connect
  advanced: true
- display: Use system proxy settings
  name: proxy
  required: false
  type: 8
  section: Connect
  advanced: true
description: Amazon Web Services Identity and Access Management (IAM)
display: AWS - Identity and Access Management
name: AWS - IAM
script:
  commands:
  - arguments:
    - default: false
      description: The name of the user to create.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The path for the user name. This parameter is optional. If it is not included, it defaults to a slash (/).
      isArray: false
      name: path
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new IAM user for your AWS account.
    execution: false
    name: aws-iam-create-user
    outputs:
    - contextPath: AWS.IAM.Users.UserName
      description: The friendly name identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.UserId
      description: The stable and unique string identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.Arn
      description: The Amazon Resource Name (ARN) that identifies the user.
      type: string
    - contextPath: AWS.IAM.Users.CreateDate
      description: The date and time, when the user was created.
      type: date
    - contextPath: AWS.IAM.Users.Path
      description: The path to the user.
      type: string
  - arguments:
    - default: false
      description: The name of the user to get information about.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Retrieves information about the specified IAM user, including the user's creation date, path, unique ID, and ARN.
    execution: false
    name: aws-iam-get-user
    outputs:
    - contextPath: AWS.IAM.Users.UserName
      description: The friendly name identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.UserId
      description: The stable and unique string identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.Arn
      description: The Amazon Resource Name (ARN) that identifies the user.
      type: string
    - contextPath: AWS.IAM.Users.CreateDate
      description: The date and time when the user was created.
      type: date
    - contextPath: AWS.IAM.Users.Path
      description: The path to the user.
      type: string
    - contextPath: AWS.IAM.Users.PasswordLastUsed
      description: The date and time,  when the user's password was last used to sign in to an AWS website.
      type: date
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists the IAM users, returns all users in the AWS account.
    execution: false
    name: aws-iam-list-users
    outputs:
    - contextPath: AWS.IAM.Users.UserName
      description: The friendly name identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.UserId
      description: The stable and unique string identifying the user.
      type: string
    - contextPath: AWS.IAM.Users.Arn
      description: The Amazon Resource Name (ARN) that identifies the user.
      type: string
    - contextPath: AWS.IAM.Users.CreateDate
      description: The date and time when the user was created.
      type: date
    - contextPath: AWS.IAM.Users.Path
      description: The path to the user.
      type: string
    - contextPath: AWS.IAM.Users.PasswordLastUsed
      description: The date and time when the password was last used.
      type: date
  - arguments:
    - default: false
      description: Name of the user to update.
      isArray: false
      name: oldUserName
      required: true
      secret: false
    - default: false
      description: New name for the user. Include this parameter only if you're changing the user's name.
      isArray: false
      name: newUserName
      required: false
      secret: false
    - default: false
      description: New path for the IAM user. Include this parameter only if you're changing the user's path.
      isArray: false
      name: newPath
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Updates the name and/or the path of the specified IAM user.
    execution: false
    name: aws-iam-update-user
  - arguments:
    - default: false
      description: The name of the user to delete.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified IAM user. The user must not belong to any groups or have any access keys, signing certificates, or attached policies.
    execution: false
    name: aws-iam-delete-user
  - arguments:
    - default: false
      description: The name of the user whose password you want to update.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The new password for the specified IAM user.
      isArray: false
      name: newPassword
      required: true
      secret: false
    - auto: PREDEFINED
      default: false
      description: Allows this new password to be used only once by requiring the specified IAM user to set a new password on next sign-in.
      isArray: false
      name: passwordResetRequired
      predefined:
      - 'True'
      - 'False'
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Changes the password for the specified IAM user.
    execution: false
    name: aws-iam-update-login-profile
  - arguments:
    - default: false
      description: The name of the group to create. Do not include the path in this value.
      isArray: false
      name: groupName
      required: false
      secret: false
    - default: false
      description: The path to the group.
      isArray: false
      name: path
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new iam group.
    execution: false
    name: aws-iam-create-group
    outputs:
    - contextPath: AWS.IAM.Groups.GroupName
      description: The friendly name that identifies the group.
      type: string
    - contextPath: AWS.IAM.Groups.GroupId
      description: The stable and unique string identifying the group.
      type: string
    - contextPath: AWS.IAM.Groups.Arn
      description: The Amazon Resource Name (ARN) specifying the group.
      type: string
    - contextPath: AWS.IAM.Groups.CreateDate
      description: The date and time when the group was created.
      type: date
    - contextPath: AWS.IAM.Groups.Path
      description: The path to the group.
      type: string
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists all the IAM groups in the AWS account
    execution: false
    name: aws-iam-list-groups
    outputs:
    - contextPath: AWS.IAM.Groups.GroupName
      description: The friendly name that identifies the group.
      type: string
    - contextPath: AWS.IAM.Groups.GroupId
      description: The stable and unique string identifying the group.
      type: string
    - contextPath: AWS.IAM.Groups.Arn
      description: The Amazon Resource Name (ARN) specifying the group.
      type: string
    - contextPath: AWS.IAM.Groups.CreateDate
      description: The date and time when the group was created.
      type: date
    - contextPath: AWS.IAM.Groups.Path
      description: The path to the group.
      type: string
  - arguments:
    - default: false
      description: The name of the user to list groups for.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists the IAM groups that the specified IAM user belongs to.
    execution: false
    name: aws-iam-list-groups-for-user
    outputs:
    - contextPath: AWS.IAM.Users.Groups.GroupName
      description: The friendly name that identifies the group.
      type: string
    - contextPath: AWS.IAM.Users.Groups.GroupId
      description: The stable and unique string identifying the group
      type: string
    - contextPath: AWS.IAM.Users.Groups.Arn
      description: The Amazon Resource Name (ARN) specifying the group.
      type: string
    - contextPath: AWS.IAM.Users.Groups.CreateDate
      description: The date and time when the group was created.
      type: date
    - contextPath: AWS.IAM.Users.Groups.Path
      description: The path to the group.
      type: string
  - arguments:
    - default: false
      description: The name of the user to add.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The name of the group to update.
      isArray: false
      name: groupName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Adds the specified user to the specified group.
    execution: false
    name: aws-iam-add-user-to-group
  - arguments:
    - default: false
      description: The name of the IAM user that the new key will belong to.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new AWS secret access key and corresponding AWS access key ID for the specified user. The default status for new keys is Active .
    execution: false
    name: aws-iam-create-access-key
    outputs:
    - contextPath: AWS.IAM.Users.AccessKeys.AccessKeyId
      description: The ID for this access key.
      type: string
    - contextPath: AWS.IAM.Users.AccessKeys.SecretAccessKey
      description: The secret key used to sign requests.
      type: string
    - contextPath: AWS.IAM.Users.AccessKeys.Status
      description: The status of the access key. Active means that the key is valid for API calls, while Inactive means it is not.
      type: string
    - contextPath: AWS.IAM.Users.AccessKeys.CreateDate
      description: The date when the access key was created.
      type: date
  - arguments:
    - default: false
      description: The name of the user whose key you want to update.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The access key ID of the secret access key you want to update.
      isArray: false
      name: accessKeyId
      required: true
      secret: false
    - auto: PREDEFINED
      default: false
      description: The status you want to assign to the secret access key. Active means that the key can be used for API calls to AWS, while Inactive means that the key cannot be used.
      isArray: false
      name: status
      predefined:
      - Active
      - Inactive
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Changes the status of the specified access key from Active to Inactive, or vice versa. This operation can be used to disable a user's key as part of a key rotation workflow.
    execution: false
    name: aws-iam-update-access-key
  - arguments:
    - default: false
      description: The name of the user.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Returns information about the access key IDs associated with the specified IAM user.
    execution: false
    name: aws-iam-list-access-keys-for-user
    outputs:
    - contextPath: AWS.IAM.Users.AccessKeys.AccessKeyId
      description: The ID for this access key.
      type: string
    - contextPath: AWS.IAM.Users.AccessKeys.Status
      description: The status of the access key. Active means the key is valid for API calls; Inactive means it is not.
      type: string
    - contextPath: AWS.IAM.Users.AccessKeys.CreateDate
      description: The date when the access key was created.
      type: date
    - contextPath: AWS.IAM.Users.AccessKeys.UserName
      description: The name of the IAM user that the key is associated with.
      type: string
  - arguments:
    - auto: PREDEFINED
      default: false
      defaultValue: All
      description: The scope to use for filtering the results. To list only AWS managed policies, set Scope to AWS. To list only the customer managed policies in your AWS account, set Scope to Local.
      isArray: false
      name: scope
      predefined:
      - All
      - AWS
      - Local
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      defaultValue: 'False'
      description: A flag to filter the results to only the attached policies.  When OnlyAttached is true , the returned list contains only the policies that are attached to an IAM user, group, or role. When OnlyAttached is false , or when the parameter is not included, all policies are returned.
      isArray: false
      name: onlyAttached
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists all the managed policies that are available in your AWS account, including your own customer-defined managed policies and all AWS managed policies.
    execution: false
    name: aws-iam-list-policies
    outputs:
    - contextPath: AWS.IAM.Policies.PolicyName
      description: The friendly name (not ARN) identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policies.PolicyId
      description: The stable and unique string identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policies.Arn
      description: The Amazon Resource Name (ARN).
      type: string
    - contextPath: AWS.IAM.Policies.Path
      description: The path to the policy.
      type: string
    - contextPath: AWS.IAM.Policies.DefaultVersionId
      description: The identifier for the version of the policy that is set as the default version.
      type: string
    - contextPath: AWS.IAM.Policies.IsAttachable
      description: Specifies whether the policy can be attached to an IAM user, group, or role.
      type: string
    - contextPath: AWS.IAM.Policies.CreateDate
      description: when the policy was created.
      type: date
    - contextPath: AWS.IAM.Policies.UpdateDate
      description: when the policy was last updated.
      type: date
    - contextPath: AWS.IAM.Policies.AttachmentCount
      description: The number of entities (users, groups, and roles) that the policy is attached to.
      type: number
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists all IAM roles
    execution: false
    name: aws-iam-list-roles
    outputs:
    - contextPath: AWS.IAM.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.CreateDate
      description: The date and time when the role was created.
      type: date
    - contextPath: AWS.IAM.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role. Anyone who uses the AWS CLI or API to assume the role can specify the duration using the optional DurationSeconds API parameter or duration-seconds CLI parameter.
      type: number
  - arguments:
    - auto: PREDEFINED
      default: false
      description: The Type of IAM Entity
      isArray: false
      name: type
      predefined:
      - User
      - Group
      - Role
      required: true
      secret: false
    - default: false
      description: The name (friendly name, not ARN) of the IAM Entity to attach the policy to.
      isArray: false
      name: entityName
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy you want to attach.
      isArray: false
      name: policyArn
      required: false
      secret: false
    deprecated: false
    description: Attaches the specified managed policy to the specified IAM Entity.
    execution: false
    name: aws-iam-attach-policy
  - arguments:
    - auto: PREDEFINED
      default: false
      description: IAM Entity Type
      isArray: false
      name: type
      predefined:
      - User
      - Group
      - Role
      required: true
      secret: false
    - default: false
      description: The name (friendly name, not ARN) of the IAM Entity to detach the policy from.
      isArray: false
      name: entityName
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy you want to detach.
      isArray: false
      name: policyArn
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Removes the specified managed policy from the specified IAM Entity.
    execution: false
    name: aws-iam-detach-policy
  - arguments:
    - default: false
      description: The name of the user whose password you want to delete.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console.
    execution: false
    name: aws-iam-delete-login-profile
  - arguments:
    - default: false
      description: The name of the IAM group to delete.
      isArray: false
      name: groupName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified IAM group. The group must not contain any users or have any attached policies.
    execution: false
    name: aws-iam-delete-group
  - arguments:
    - default: false
      description: The name of the user to remove.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The name of the group to update.
      isArray: false
      name: groupName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Removes the specified user from the specified group.
    execution: false
    name: aws-iam-remove-user-from-group
  - arguments:
    - default: false
      description: The name of the IAM user to create a password for. The user must already exist.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The new password for the user.
      isArray: false
      name: password
      required: true
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether the user is required to set a new password on next sign-in.
      isArray: false
      name: passwordResetRequired
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a password for the specified user, giving the user the ability to access AWS services through the AWS Management Console.
    execution: false
    name: aws-iam-create-login-profile
  - arguments:
    - default: false
      description: he name of the user whose access key pair you want to delete.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: The access key ID for the access key ID and secret access key you want to delete.
      isArray: false
      name: AccessKeyId
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the access key pair associated with the specified IAM user.
    execution: false
    name: aws-iam-delete-access-key
  - arguments:
    - default: false
      description: The name of the instance profile to create.
      isArray: false
      name: instanceProfileName
      required: true
      secret: false
    - default: false
      description: The path to the instance profile.
      isArray: false
      name: path
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new instance profile.
    execution: false
    name: aws-iam-create-instance-profile
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
  - arguments:
    - default: false
      description: The name of the instance profile to delete.
      isArray: false
      name: instanceProfileName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified instance profile. The instance profile must not have an associated role.
    execution: false
    name: aws-iam-delete-instance-profile
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists all the instance profiles tin your AWS account.
    execution: false
    name: aws-iam-list-instance-profiles
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the instance profile to update.
      isArray: false
      name: instanceProfileName
      required: true
      secret: false
    - default: false
      description: The name of the role to add.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this limit cannot be increased. You can remove the existing role and then add a different role to an instance profile.
    execution: false
    name: aws-iam-add-role-to-instance-profile
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the instance profile to update.
      isArray: false
      name: instanceProfileName
      required: true
      secret: false
    - default: false
      description: The name of the role to remove.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Removes the specified IAM role from the specified EC2 instance profile.
    execution: false
    name: aws-iam-remove-role-from-instance-profile
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the role to list instance profiles for.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Lists the instance profiles that have the specified associated IAM role.
    execution: false
    name: aws-iam-list-instance-profiles-for-role
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the instance profile to get information about.
      isArray: false
      name: instanceProfileName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Retrieves information about the specified instance profile.
    execution: false
    name: aws-iam-get-instance-profile
    outputs:
    - contextPath: AWS.IAM.InstanceProfiles.Path
      description: The path to the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileName
      description: The name identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.InstanceProfileId
      description: The stable and unique string identifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Arn
      description: The Amazon Resource Name (ARN) specifying the instance profile.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.CreateDate
      description: The date when the instance profile was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.InstanceProfiles.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.InstanceProfiles.Roles. MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the IAM role to get information about.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Retrieves information about the specified role.
    execution: false
    name: aws-iam-get-role
    outputs:
    - contextPath: AWS.IAM.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.Roles.AssumeRolePolicyDocument
      description: The policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The name of the role to delete.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified role. The role must not have any policies attached.
    execution: false
    name: aws-iam-delete-role
  - arguments:
    - default: false
      description: The name of the role to create.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The trust relationship policy document that grants an entity permission to assume the role.
      isArray: false
      name: assumeRolePolicyDocument
      required: true
      secret: false
    - default: false
      description: The path to the role.
      isArray: false
      name: path
      required: false
      secret: false
    - default: false
      description: A description of the role.
      isArray: false
      name: description
      required: false
      secret: false
    - default: false
      description: The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
      isArray: false
      name: maxSessionDuration
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new role for your AWS account.
    execution: false
    name: aws-iam-create-role
    outputs:
    - contextPath: AWS.IAM.Roles.RoleName
      description: The friendly name that identifies the role.
      type: string
    - contextPath: AWS.IAM.Roles.RoleId
      description: The stable and unique string identifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.Arn
      description: The Amazon Resource Name (ARN) specifying the role.
      type: string
    - contextPath: AWS.IAM.Roles.CreateDate
      description: The date and time, when the role was created.
      type: date
    - contextPath: AWS.IAM.Roles.Path
      description: The path to the role.
      type: string
    - contextPath: AWS.IAM.Roles.AssumeRolePolicyDocument
      description: he policy that grants an entity permission to assume the role.
      type: string
    - contextPath: AWS.IAM.Roles.Description
      description: A description of the role that you provide.
      type: string
    - contextPath: AWS.IAM.Roles.MaxSessionDuration
      description: The maximum session duration (in seconds) for the specified role.
      type: number
  - arguments:
    - default: false
      description: The friendly name of the policy.
      isArray: false
      name: policyName
      required: true
      secret: false
    - default: false
      description: The JSON policy document that you want to use as the content for the new policy.
      isArray: false
      name: policyDocument
      required: true
      secret: false
    - default: false
      description: The path for the policy.
      isArray: false
      name: path
      required: false
      secret: false
    - default: false
      description: A friendly description of the policy.
      isArray: false
      name: description
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new managed policy for your AWS account.  This operation creates a policy version with a version identifier of v1 and sets v1 as the policy's default version.
    execution: true
    name: aws-iam-create-policy
    outputs:
    - contextPath: AWS.IAM.Policies.PolicyName
      description: The friendly name (not ARN) identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policies.PolicyId
      description: The stable and unique string identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policies.Arn
      description: The Amazon Resource Name (ARN). ARNs are unique identifiers for AWS resources.
      type: string
    - contextPath: AWS.IAM.Policies.Path
      description: The path to the policy.
      type: string
    - contextPath: AWS.IAM.Policies.DefaultVersionId
      description: The identifier for the version of the policy that is set as the default version.
      type: string
    - contextPath: AWS.IAM.Policies.AttachmentCount
      description: The number of entities (users, groups, and roles) that the policy is attached to.
      type: number
    - contextPath: AWS.IAM.Policies.PermissionsBoundaryUsageCount
      description: The number of entities (users and roles) for which the policy is used to set the permissions boundary.
      type: number
    - contextPath: AWS.IAM.Policies.IsAttachable
      description: Specifies whether the policy can be attached to an IAM user, group, or role.
      type: boolean
    - contextPath: AWS.IAM.Policies.Description
      description: A friendly description of the policy.
      type: string
    - contextPath: AWS.IAM.Policies.CreateDate
      description: The date and time, in ISO 8601 date-time format , when the policy was created.
      type: date
    - contextPath: AWS.IAM.Policies.UpdateDate
      description: The date and time, in ISO 8601 date-time format , when the policy was last updated.
      type: date
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy you want to delete.
      isArray: false
      name: policyArn
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified managed policy.  Before you can delete a managed policy, you must first detach the policy from all users, groups, and roles that it is attached to. In addition you must delete all the policy's versions.
    execution: true
    name: aws-iam-delete-policy
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy to which you want to add a new version.
      isArray: false
      name: policyArn
      required: true
      secret: false
    - default: false
      description: The JSON policy document that you want to use as the content for this new version of the policy.
      isArray: false
      name: policyDocument
      required: true
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether to set this version as the policy's default version.
      isArray: false
      name: setAsDefault
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates a new version of the specified managed policy. To update a managed policy, you create a new policy version. A managed policy can have up to five versions. If the policy has five versions, you must delete an existing version using DeletePolicyVersion before you create a new version.  Optionally, you can set the new version as the policy's default version. The default version is the version that is in effect for the IAM users, groups, and roles to which the policy is attached.
    execution: true
    name: aws-iam-create-policy-version
    outputs:
    - contextPath: AWS.IAM.Policies.Versions.Document
      description: The policy document.
      type: string
    - contextPath: AWS.IAM.Policies.Versions.VersionId
      description: The identifier for the policy version.
      type: string
    - contextPath: AWS.IAM.Policies.Versions.IsDefaultVersion
      description: The identifier for the policy version.
      type: string
    - contextPath: AWS.IAM.Policies.Versions.CreateDate
      description: The date and time, in ISO 8601 date-time format , when the policy version was created.
      type: string
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy from which you want to delete a version.
      isArray: false
      name: policyArn
      required: true
      secret: false
    - default: false
      description: The policy version to delete.
      isArray: false
      name: versionId
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified version from the specified managed policy.  You cannot delete the default version from a policy using this API. To delete the default version from a policy, use DeletePolicy . To find out which version of a policy is marked as the default version, use ListPolicyVersions .
    execution: true
    name: aws-iam-delete-policy-version
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy for which you want the versions.
      isArray: false
      name: policyArn
      required: true
      secret: false
    deprecated: false
    description: Lists information about the versions of the specified managed policy, including the version that is currently set as the policy's default version.
    execution: false
    name: aws-iam-list-policy-versions
    outputs:
    - contextPath: AWS.IAM.Policies.Versions.Document
      description: The policy document.
      type: string
    - contextPath: AWS.IAM.Policies.Versions.VersionId
      description: The identifier for the policy version.
      type: string
    - contextPath: AWS.IAM.Policies.Versions.IsDefaultVersion
      description: Specifies whether the policy version is set as the policy's default version.
      type: boolean
    - contextPath: AWS.IAM.Policies.Versions.CreateDate
      description: The date and time, in ISO 8601 date-time format , when the policy version was created.
      type: date
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the managed policy that you want information about.
      isArray: false
      name: policyArn
      required: true
      secret: false
    - default: false
      description: Identifies the policy version to retrieve.
      isArray: false
      name: versionId
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Retrieves information about the specified version of the specified managed policy, including the policy document.
    execution: false
    name: aws-iam-get-policy-version
    outputs:
    - contextPath: AWS.IAM.Policies.Versions.Document
      description: The policy document.
      type: Unknown
    - contextPath: AWS.IAM.Policies.Versions.VersionId
      description: The identifier for the policy version.
      type: Unknown
    - contextPath: AWS.IAM.Policies.Versions.IsDefaultVersion
      description: Specifies whether the policy version is set as the policy's default version.
      type: Unknown
    - contextPath: AWS.IAM.Policies.Versions.CreateDate
      description: The date and time, in ISO 8601 date-time format , when the policy version was created.
      type: Unknown
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the IAM policy whose default version you want to set.
      isArray: false
      name: policyArn
      required: true
      secret: false
    - default: false
      description: The version of the policy to set as the default (operative) version.
      isArray: false
      name: versionId
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Sets the specified version of the specified policy as the policy's default (operative) version.  This operation affects all users, groups, and roles that the policy is attached to.
    execution: true
    name: aws-iam-set-default-policy-version
  - arguments:
    - default: false
      description: The account alias to create.
      isArray: false
      name: accountAlias
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Creates an alias for your AWS account.
    execution: true
    name: aws-iam-create-account-alias
  - arguments:
    - default: false
      description: The name of the account alias to delete.
      isArray: false
      name: accountAlias
      required: true
      secret: false
    - default: false
      description: The Amazon Resource Name (ARN) of the role to assume.
      isArray: false
      name: roleArn
      required: false
      secret: false
    - default: false
      description: An identifier for the assumed role session.
      isArray: false
      name: roleSessionName
      required: false
      secret: false
    - default: false
      description: The duration, in seconds, of the role session. The value can range from 900 seconds (15 minutes) up to the maximum session duration setting for the role.
      isArray: false
      name: roleSessionDuration
      required: false
      secret: false
    deprecated: false
    description: Deletes the specified AWS account alias.
    execution: true
    name: aws-iam-delete-account-alias
  - deprecated: false
    description: Get AWS account's password policy
    execution: false
    name: aws-iam-get-account-password-policy
    outputs:
    - contextPath: AWS.IAM.PasswordPolicy
      description: Account's password policy.
      type: Unknown
  - arguments:
    - default: false
      description: The minimum number of characters allowed in an IAM user password.
      isArray: false
      name: minimumPasswordLength
      predefined:
      - ''
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether IAM user passwords must contain at least one of the non-alphanumeric characters. Can be "True" or "False".
      isArray: false
      name: requireSymbols
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether IAM user passwords must contain at least one numeric character (0 to 9). Can be "True" or "False".
      isArray: false
      name: requireNumbers
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether IAM user passwords must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). Can be "True" or "False".
      isArray: false
      name: requireUppercaseCharacters
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Specifies whether IAM user passwords must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). Can be "True" or "False".
      isArray: false
      name: requireLowercaseCharacters
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Allows all IAM users in your account to use the AWS Management Console to change their own passwords. Can be "True" or "False".
      isArray: false
      name: allowUsersToChangePassword
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    - default: false
      description: The number of days that an IAM user password is valid.
      isArray: false
      name: maxPasswordAge
      predefined:
      - ''
      required: false
      secret: false
    - default: false
      description: Specifies the number of previous passwords that IAM users are prevented from reusing.
      isArray: false
      name: passwordReusePrevention
      predefined:
      - ''
      required: false
      secret: false
    - auto: PREDEFINED
      default: false
      description: Prevents IAM users from setting a new password after their password has expired. Can be "True" or "False".
      isArray: false
      name: hardExpiry
      predefined:
      - 'True'
      - 'False'
      required: false
      secret: false
    deprecated: false
    description: Create/update password policy
    execution: true
    name: aws-iam-update-account-password-policy
  - arguments:
    - default: false
      description: The name of the role to list policies for.
      isArray: false
      name: roleName
      required: true
      secret: false
    deprecated: false
    description: Lists the names of the inline policies that are embedded in the specified IAM role.
    execution: false
    name: aws-iam-list-role-policies
    outputs:
    - contextPath: AWS.IAM.Roles.RoleName.Policies
      description: A list of policy names.
      type: Unknown
  - arguments:
    - default: false
      description: The name of the role associated with the policy.
      isArray: false
      name: roleName
      required: true
      secret: false
    - default: false
      description: The name of the policy document to get.
      isArray: false
      name: policyName
      required: true
      secret: false
    deprecated: false
    description: Retrieves the specified inline policy document that is embedded with the specified IAM role.
    execution: false
    name: aws-iam-get-role-policy
    outputs:
    - contextPath: AWS.IAM.Roles.PolicyDocument
      description: The policy document.
      type: string
  - arguments:
    - default: false
      description: The Amazon Resource Name (ARN) of the managed policy that you want information about.
      isArray: false
      name: policyArn
      required: true
      secret: false
    deprecated: false
    description: Retrieves information about the specified managed policy, including the policy's default version and the total number of IAM users, groups, and roles to which the policy is attached.
    execution: false
    name: aws-iam-get-policy
    outputs:
    - contextPath: AWS.IAM.Policy.PolicyName
      description: The friendly name (not ARN) identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policy.PolicyId
      description: The stable and unique string identifying the policy.
      type: string
    - contextPath: AWS.IAM.Policy.Arn
      description: The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources.
      type: string
    - contextPath: AWS.IAM.Policy.Path
      description: The path to the policy.
      type: string
    - contextPath: AWS.IAM.Policy.Description
      description: A friendly description of the policy.
      type: string
  - arguments:
    - default: false
      description: The name (friendly name, not ARN) of the user to list attached policies for.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: Number of results to display.
      defaultValue: '50'
      isArray: false
      name: limit
      required: false
      secret: false
    - default: false
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
      isArray: false
      name: page
      required: false
      secret: false
    - default: false
      description: Number of results per page to display.
      isArray: false
      name: page_size
      required: false
      secret: false
    - default: false
      description: Starting item of the next page to view. Retrieved from a previous run of the command (InlinePoliciesMarker).
      isArray: false
      name: marker
      required: false
      secret: false
    deprecated: false
    description: Lists the names of the inline policies embedded in the specified IAM user.
    execution: false
    name: aws-iam-list-user-policies
    outputs:
    - contextPath: AWS.IAM.UserPolicies.UserName
      description: The name (friendly name, not ARN) of the user to list attached policies for.
      type: String
    - contextPath: AWS.IAM.UserPolicies.PolicyName
      description: The name of the policy.
      type: String
    - contextPath: AWS.IAM.Users.InlinePoliciesMarker
      description: First element of next page of items.
      type: String
  - arguments:
    - default: false
      description: The name (friendly name, not ARN) of the user to list attached policies for.
      isArray: false
      name: userName
      required: true
      secret: false
    - default: false
      description: Number of results to display.
      defaultValue: '50'
      isArray: false
      name: limit
      required: false
      secret: false
    - default: false
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
      isArray: false
      name: page
      required: false
      secret: false
    - default: false
      description: Number of results per page to display.
      isArray: false
      name: page_size
      required: false
      secret: false
    - default: false
      description: Starting item of the next page to view. Can be retrieved from context (AttachedPoliciesMarker).
      isArray: false
      name: marker
      required: false
      secret: false
    deprecated: false
    description: Lists all managed policies that are attached to the specified IAM user.
    execution: false
    name: aws-iam-list-attached-user-policies
    outputs:
    - contextPath: AWS.IAM.AttachedUserPolicies.UserName
      description: The name (friendly name, not ARN) of the user to list attached policies for.
      type: String
    - contextPath: AWS.IAM.AttachedUserPolicies.PolicyName
      description: The name of the attached policy
      type: String
    - contextPath: AWS.IAM.AttachedUserPolicies.PolicyArn
      description: The Amazon Resource Name (ARN) of the attached policy.
      type: String
    - contextPath: AWS.IAM.Users.AttachedPoliciesMarker
      description: First element of next page of items.
      type: String
  - arguments:
    - default: false
      description: The name (friendly name, not ARN) of the group to list attached policies for.
      isArray: false
      name: groupName
      required: true
      secret: false
    - default: false
      description: Number of results to display.
      defaultValue: '50'
      isArray: false
      name: limit
      required: false
      secret: false
    - default: false
      description: Page number you would like to view. Each page contains page_size values. Must be used along with page_size.
      isArray: false
      name: page
      required: false
      secret: false
    - default: false
      description: Number of results per page to display.
      isArray: false
      name: page_size
      required: false
      secret: false
    - default: false
      description: Starting item of the next page to view. Can be retrieved from context (AttachedPoliciesMarker).
      isArray: false
      name: marker
      required: false
      secret: false
    deprecated: false
    description: Lists all managed policies that are attached to the specified IAM group.
    execution: false
    name: aws-iam-list-attached-group-policies
    outputs:
    - contextPath: AWS.IAM.AttachedGroupPolicies.GroupName
      description: The name (friendly name, not ARN) of the group to list attached policies for.
      type: String
    - contextPath: AWS.IAM.AttachedGroupPolicies.PolicyName
      description: The name of the attached policy
      type: String
    - contextPath: AWS.IAM.AttachedGroupPolicies.PolicyArn
      description: The Amazon Resource Name (ARN) of the attached policy.
      type: String
    - contextPath: AWS.IAM.Groups.AttachedPoliciesMarker
      description: First element of next page of items.
      type: String
  - arguments:
    - default: false
      description: The name (friendly name, not ARN) of the user to list attached policies for.
      isArray: false
      name: userName
      required: true
      secret: false
    deprecated: false
    description: Retrieves the user login profile information for AWS management consle
    execution: false
    name: aws-iam-get-user-login-profile
    outputs:
    - contextPath: AWS.IAM.Users.LoginProfile.CreateDate
      description: The date when the password for the user was created.
      type: Date
    - contextPath: AWS.IAM.Users.LoginProfile.PasswordResetRequired
      description: Specifies whether the user is required to set a new password on next sign-in.
      type: Boolean
  dockerimage: demisto/boto3py3:1.0.0.57048
  feed: false
  isfetch: false
  longRunning: false
  longRunningPort: false
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- AWS - IAM Test Playbook
fromversion: 5.0.0
beta: false