AWS Identity and Access Management (IAM) is a web service that you can use to manage users and user permissions under your AWS account. This guide provides descriptions of the IAM API. For general information about IAM, see AWS Identity and Access Management (IAM). For the user guide for IAM, see Using IAM.
|  Note: | 
|---|
| AWS provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .NET, iOS, Android, etc.). The SDKs provide a convenient way to create programmatic access to IAM and AWS. For example, the SDKs take care of tasks such as cryptographically signing requests (see below), managing errors, and retrying requests automatically. For information about the AWS SDKs, including how to download and install them, see the Tools for Amazon Web Services page. | 
Using the IAM Query API, you make direct calls to the IAM web service. IAM supports GET and POST requests for all actions. That is, the API does not require you to use GET for some actions and POST for others. However, GET requests are subject to the limitation size of a URL. Therefore, for operations that require larger sizes, use a POST request.
Signing Requests
Requests must be signed using an access key ID and a secret access key. We strongly recommend that you do not use your AWS account access key ID and secret access key for everyday work with IAM. You can use the access key ID and secret access key for an IAM user or you can use the AWS Security Token Service to generate temporary security credentials and use those to sign requests.
To sign requests, we recommend that you use Signature Version 4. If you have an existing application that uses Signature Version 2, you do not have to update it to use Signature Version 4. However, some operations now require Signature Version 4. The documentation for operations that require version 4 indicate this requirement.
Recording API requests
IAM supports AWS CloudTrail, which is a service that records AWS calls for your AWS account and delivers log files to an Amazon S3 bucket. By using information collected by CloudTrail, you can determine what requests were successfully made to IAM, who made the request, when it was made, and so on. To learn more about CloudTrail, including how to turn it on and find your log files, see the AWS CloudTrail User Guide.
Additional Resources
For more information, see the following:
- AWS Security Credentials. This topic provides general information about the types of credentials used for accessing AWS.
- IAM Best Practices. This topic presents a list of suggestions for using the IAM service to help secure your AWS resources.
- AWS Security Token Service. This guide describes how to create and use temporary security credentials.
- Signing AWS API Requests. This set of topics walk you through the process of signing a request using an access key ID and secret access key.
 Declaration Syntax
 Declaration Syntax| C# | 
public interface AmazonIdentityManagementService : IDisposable
 Members
 Members| All Members | Methods | ||||
| Icon | Member | Description | ||
|---|---|---|---|---|
|  | AddRoleToInstanceProfile(AddRoleToInstanceProfileRequest) | 
            Adds the specified role to the specified instance profile. For more information about
            roles,            go to Working
            with                Roles. For more information about instance profiles, go to About
            Instance                Profiles.
             | ||
|  | AddUserToGroup(AddUserToGroupRequest) | 
            Adds the specified user to the specified group.
             | ||
|  | BeginAddRoleToInstanceProfile(AddRoleToInstanceProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the AddRoleToInstanceProfile operation.
             | ||
|  | BeginAddUserToGroup(AddUserToGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the AddUserToGroup operation.
             | ||
|  | BeginChangePassword(ChangePasswordRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ChangePassword operation.
             | ||
|  | BeginCreateAccessKey(CreateAccessKeyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateAccessKey operation.
             | ||
|  | BeginCreateAccountAlias(CreateAccountAliasRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateAccountAlias operation.
             | ||
|  | BeginCreateGroup(CreateGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateGroup operation.
             | ||
|  | BeginCreateInstanceProfile(CreateInstanceProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateInstanceProfile operation.
             | ||
|  | BeginCreateLoginProfile(CreateLoginProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateLoginProfile operation.
             | ||
|  | BeginCreateRole(CreateRoleRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateRole operation.
             | ||
|  | BeginCreateSAMLProvider(CreateSAMLProviderRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateSAMLProvider operation.
             | ||
|  | BeginCreateUser(CreateUserRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateUser operation.
             | ||
|  | BeginCreateVirtualMFADevice(CreateVirtualMFADeviceRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the CreateVirtualMFADevice operation.
             | ||
|  | BeginDeactivateMFADevice(DeactivateMFADeviceRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeactivateMFADevice operation.
             | ||
|  | BeginDeleteAccessKey(DeleteAccessKeyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteAccessKey operation.
             | ||
|  | BeginDeleteAccountAlias(DeleteAccountAliasRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteAccountAlias operation.
             | ||
|  | BeginDeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteAccountPasswordPolicy operation.
             | ||
|  | BeginDeleteGroup(DeleteGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteGroup operation.
             | ||
|  | BeginDeleteGroupPolicy(DeleteGroupPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteGroupPolicy operation.
             | ||
|  | BeginDeleteInstanceProfile(DeleteInstanceProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteInstanceProfile operation.
             | ||
|  | BeginDeleteLoginProfile(DeleteLoginProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteLoginProfile operation.
             | ||
|  | BeginDeleteRole(DeleteRoleRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteRole operation.
             | ||
|  | BeginDeleteRolePolicy(DeleteRolePolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteRolePolicy operation.
             | ||
|  | BeginDeleteSAMLProvider(DeleteSAMLProviderRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteSAMLProvider operation.
             | ||
|  | BeginDeleteServerCertificate(DeleteServerCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteServerCertificate operation.
             | ||
|  | BeginDeleteSigningCertificate(DeleteSigningCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteSigningCertificate operation.
             | ||
|  | BeginDeleteUser(DeleteUserRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteUser operation.
             | ||
|  | BeginDeleteUserPolicy(DeleteUserPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteUserPolicy operation.
             | ||
|  | BeginDeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the DeleteVirtualMFADevice operation.
             | ||
|  | BeginEnableMFADevice(EnableMFADeviceRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the EnableMFADevice operation.
             | ||
|  | BeginGetAccountPasswordPolicy(GetAccountPasswordPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetAccountPasswordPolicy operation.
             | ||
|  | BeginGetAccountSummary(GetAccountSummaryRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetAccountSummary operation.
             | ||
|  | BeginGetGroup(GetGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetGroup operation.
             | ||
|  | BeginGetGroupPolicy(GetGroupPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetGroupPolicy operation.
             | ||
|  | BeginGetInstanceProfile(GetInstanceProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetInstanceProfile operation.
             | ||
|  | BeginGetLoginProfile(GetLoginProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetLoginProfile operation.
             | ||
|  | BeginGetRole(GetRoleRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetRole operation.
             | ||
|  | BeginGetRolePolicy(GetRolePolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetRolePolicy operation.
             | ||
|  | BeginGetSAMLProvider(GetSAMLProviderRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetSAMLProvider operation.
             | ||
|  | BeginGetServerCertificate(GetServerCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetServerCertificate operation.
             | ||
|  | BeginGetUser(GetUserRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetUser operation.
             | ||
|  | BeginGetUserPolicy(GetUserPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the GetUserPolicy operation.
             | ||
|  | BeginListAccessKeys(ListAccessKeysRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListAccessKeys operation.
             | ||
|  | BeginListAccountAliases(ListAccountAliasesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListAccountAliases operation.
             | ||
|  | BeginListGroupPolicies(ListGroupPoliciesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListGroupPolicies operation.
             | ||
|  | BeginListGroups(ListGroupsRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListGroups operation.
             | ||
|  | BeginListGroupsForUser(ListGroupsForUserRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListGroupsForUser operation.
             | ||
|  | BeginListInstanceProfiles(ListInstanceProfilesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListInstanceProfiles operation.
             | ||
|  | BeginListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListInstanceProfilesForRole operation.
             | ||
|  | BeginListMFADevices(ListMFADevicesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListMFADevices operation.
             | ||
|  | BeginListRolePolicies(ListRolePoliciesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListRolePolicies operation.
             | ||
|  | BeginListRoles(ListRolesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListRoles operation.
             | ||
|  | BeginListSAMLProviders(ListSAMLProvidersRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListSAMLProviders operation.
             | ||
|  | BeginListServerCertificates(ListServerCertificatesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListServerCertificates operation.
             | ||
|  | BeginListSigningCertificates(ListSigningCertificatesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListSigningCertificates operation.
             | ||
|  | BeginListUserPolicies(ListUserPoliciesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListUserPolicies operation.
             | ||
|  | BeginListUsers(ListUsersRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListUsers operation.
             | ||
|  | BeginListVirtualMFADevices(ListVirtualMFADevicesRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ListVirtualMFADevices operation.
             | ||
|  | BeginPutGroupPolicy(PutGroupPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the PutGroupPolicy operation.
             | ||
|  | BeginPutRolePolicy(PutRolePolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the PutRolePolicy operation.
             | ||
|  | BeginPutUserPolicy(PutUserPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the PutUserPolicy operation.
             | ||
|  | BeginRemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the RemoveRoleFromInstanceProfile operation.
             | ||
|  | BeginRemoveUserFromGroup(RemoveUserFromGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the RemoveUserFromGroup operation.
             | ||
|  | BeginResyncMFADevice(ResyncMFADeviceRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the ResyncMFADevice operation.
             | ||
|  | BeginUpdateAccessKey(UpdateAccessKeyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateAccessKey operation.
             | ||
|  | BeginUpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateAccountPasswordPolicy operation.
             | ||
|  | BeginUpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateAssumeRolePolicy operation.
             | ||
|  | BeginUpdateGroup(UpdateGroupRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateGroup operation.
             | ||
|  | BeginUpdateLoginProfile(UpdateLoginProfileRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateLoginProfile operation.
             | ||
|  | BeginUpdateSAMLProvider(UpdateSAMLProviderRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateSAMLProvider operation.
             | ||
|  | BeginUpdateServerCertificate(UpdateServerCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateServerCertificate operation.
             | ||
|  | BeginUpdateSigningCertificate(UpdateSigningCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateSigningCertificate operation.
             | ||
|  | BeginUpdateUser(UpdateUserRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UpdateUser operation.
             | ||
|  | BeginUploadServerCertificate(UploadServerCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UploadServerCertificate operation.
             | ||
|  | BeginUploadSigningCertificate(UploadSigningCertificateRequest, AsyncCallback, Object) | 
            Initiates the asynchronous execution of the UploadSigningCertificate operation.
             | ||
|  | ChangePassword(ChangePasswordRequest) | 
            Changes the password of the IAM user calling   CopyC# ChangePassword | ||
|  | CreateAccessKey()()()() | 
            Creates a new AWS secret access key and corresponding AWS access key ID for the specified            user.
            The default status for new keys is   CopyC# Active If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. | ||
|  | CreateAccessKey(CreateAccessKeyRequest) | 
            Creates a new AWS secret access key and corresponding AWS access key ID for the specified            user.
            The default status for new keys is   CopyC# Active If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. For information about limits on the number of keys you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management.To ensure the security of your AWS account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. | ||
|  | CreateAccountAlias(CreateAccountAliasRequest) | 
            This action creates an alias for your AWS account. For information about using an
            AWS account            alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
            and Access                Management.
             | ||
|  | CreateGroup(CreateGroupRequest) | 
            Creates a new group.
            
                    
             For information about the number of groups you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | ||
|  | CreateInstanceProfile(CreateInstanceProfileRequest) | 
            Creates a new instance profile. For information about instance profiles, go to About
            Instance                Profiles.
            
                    
             For information about the number of instance profiles you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | ||
|  | CreateLoginProfile(CreateLoginProfileRequest) | 
            Creates a password for the specified user, giving the user the ability to access AWS
            services            through the AWS Management Console. For more information about managing
            passwords, see Managing Passwords in Using IAM.
             | ||
|  | CreateRole(CreateRoleRequest) | 
            Creates a new role for your AWS account. For more information about roles, go to Working
            with Roles.            For information about limitations on role names and the number of
            roles you can create, go to                Limitations on IAM Entities in Using AWS Identity and Access                Management.
            
                    
             The example policy grants permission to an EC2 instance to assume the role. The policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | ||
|  | CreateSAMLProvider(CreateSAMLProviderRequest) | 
            Creates an IAM entity to describe an identity provider (IdP) that supports SAML 2.0.
            
                    
             The SAML provider that you create with this operation can be used as a principal in a role's trust policy to establish a trust relationship between AWS and a SAML identity provider. You can create an IAM role that supports Web-based single sign-on (SSO) to the AWS Management Console or one that supports API access to AWS. When you create the SAML provider, you upload an a SAML metadata document that you get from your IdP and that includes the issuer's name, expiration information, and keys that can be used to validate the SAML authentication response (assertions) that are received from the IdP. You must generate the metadata document using the identity management software that is used as your organization's IdP. 
 For more information, see Giving Console Access Using SAML and Creating Temporary Security Credentials for SAML Federation in the Using Temporary Credentials guide. | ||
|  | CreateUser(CreateUserRequest) | 
            Creates a new user for your AWS account.
            
                    
             For information about limitations on the number of users you can create, see Limitations on IAM Entities in Using AWS Identity and Access Management. | ||
|  | CreateVirtualMFADevice(CreateVirtualMFADeviceRequest) | 
            Creates a new virtual MFA device for the AWS account. After creating the virtual MFA,
            use EnableMFADevice to attach the MFA device to an IAM user. For more
            information about            creating and working with virtual MFA devices, go to Using a Virtual MFA Device in Using AWS Identity and Access
            Management.
            
                    
             For information about limits on the number of MFA devices you can create, see Limitations on Entities in Using AWS Identity and Access Management.The seed information contained in the QR code and the Base32 string should be treated like any other secret access information, such as your AWS access keys or your passwords. After you provision your virtual device, you should ensure that the information is destroyed following secure procedures. | ||
|  | DeactivateMFADevice(DeactivateMFADeviceRequest) | 
            Deactivates the specified MFA device and removes it from association with the user
            name for            which it was originally enabled.
             | ||
|  | DeleteAccessKey(DeleteAccessKeyRequest) | 
            Deletes the access key associated with the specified user.
            
                    
             If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. | ||
|  | DeleteAccountAlias(DeleteAccountAliasRequest) | 
            Deletes the specified AWS account alias. For information about using an AWS account
            alias,            see Using an                Alias for Your AWS Account ID in Using AWS Identity
            and Access Management.
             | ||
|  | DeleteAccountPasswordPolicy()()()() | 
            Deletes the password policy for the AWS account.
             | ||
|  | DeleteAccountPasswordPolicy(DeleteAccountPasswordPolicyRequest) | 
            Deletes the password policy for the AWS account.
             | ||
|  | DeleteGroup(DeleteGroupRequest) | 
            Deletes the specified group. The group must not contain any users or have any attached            policies.
             | ||
|  | DeleteGroupPolicy(DeleteGroupPolicyRequest) | 
            Deletes the specified policy that is associated with the specified group.
             | ||
|  | DeleteInstanceProfile(DeleteInstanceProfileRequest) | 
            Deletes the specified instance profile. The instance profile must not have an associated            role.
            
                    Make sure you do not have any Amazon EC2 instances running with the instance
            profile            you are about to delete. Deleting a role or instance profile that is associated
            with a running            instance will break any applications running on the instance. For more information about instance profiles, go to About Instance Profiles. | ||
|  | DeleteLoginProfile(DeleteLoginProfileRequest) | 
            Deletes the password for the specified user, which terminates the user's ability to
            access            AWS services through the AWS Management Console.
            
                    Deleting a user's password does not prevent a user from accessing IAM
            through the            command line interface or the API. To prevent all user access you must
            also either make the            access key inactive or delete it. For more information about
            making keys inactive or deleting            them, see UpdateAccessKey and DeleteAccessKey.
             | ||
|  | DeleteRole(DeleteRoleRequest) | 
            Deletes the specified role. The role must not have any policies attached. For more            information
            about roles, go to Working
            with            Roles.
            
                    Make sure you do not have any Amazon EC2 instances running with the role
            you are            about to delete. Deleting a role or instance profile that is associated
            with a running            instance will break any applications running on the instance. | ||
|  | DeleteRolePolicy(DeleteRolePolicyRequest) | 
            Deletes the specified policy associated with the specified role.
             | ||
|  | DeleteSAMLProvider(DeleteSAMLProviderRequest) | 
            Deletes a SAML provider.
            
                    
             Deleting the provider does not update any roles that reference the SAML provider as a principal in their trust policies. Any attempt to assume a role that references a SAML provider that has been deleted will fail. 
 | ||
|  | DeleteServerCertificate(DeleteServerCertificateRequest) | 
            Deletes the specified server certificate.
            
                    If you are using a server certificate with Elastic Load Balancing, deleting
            the            certificate could have implications for your application. If Elastic Load Balancing
            doesn't            detect the deletion of bound certificates, it may continue to use the certificates.
            This could            cause Elastic Load Balancing to stop accepting traffic. We recommend
            that you remove the            reference to the certificate from Elastic Load Balancing before
            using this command to delete            the certificate. For more information, go to DeleteLoadBalancerListeners in the Elastic Load Balancing API                Reference. | ||
|  | DeleteSigningCertificate(DeleteSigningCertificateRequest) | 
            Deletes the specified signing certificate associated with the specified user.
            
                    
             If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. Because this action works for access keys under the AWS account, you can use this API to manage root credentials even if the AWS account has no associated users. | ||
|  | DeleteUser(DeleteUserRequest) | 
            Deletes the specified user. The user must not belong to any groups, have any keys
            or signing            certificates, or have any attached policies.
             | ||
|  | DeleteUserPolicy(DeleteUserPolicyRequest) | 
            Deletes the specified policy associated with the specified user.
             | ||
|  | DeleteVirtualMFADevice(DeleteVirtualMFADeviceRequest) | 
            Deletes a virtual MFA device.
            
                     
 | ||
|  | Dispose()()()() | Performs application-defined tasks associated with freeing, releasing, or resetting unmanaged resources.(Inherited from IDisposable.) | ||
|  | EnableMFADevice(EnableMFADeviceRequest) | 
            Enables the specified MFA device and associates it with the specified user name. When            enabled,
            the MFA device is required for every subsequent login by the user name associated            with
            the device.
             | ||
|  | EndAddRoleToInstanceProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  AddRoleToInstanceProfile operation.
             | ||
|  | EndAddUserToGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  AddUserToGroup operation.
             | ||
|  | EndChangePassword(IAsyncResult) | 
            Finishes the asynchronous execution of the  ChangePassword operation.
             | ||
|  | EndCreateAccessKey(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateAccessKey operation.
             | ||
|  | EndCreateAccountAlias(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateAccountAlias operation.
             | ||
|  | EndCreateGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateGroup operation.
             | ||
|  | EndCreateInstanceProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateInstanceProfile operation.
             | ||
|  | EndCreateLoginProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateLoginProfile operation.
             | ||
|  | EndCreateRole(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateRole operation.
             | ||
|  | EndCreateSAMLProvider(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateSAMLProvider operation.
             | ||
|  | EndCreateUser(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateUser operation.
             | ||
|  | EndCreateVirtualMFADevice(IAsyncResult) | 
            Finishes the asynchronous execution of the  CreateVirtualMFADevice operation.
             | ||
|  | EndDeactivateMFADevice(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeactivateMFADevice operation.
             | ||
|  | EndDeleteAccessKey(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteAccessKey operation.
             | ||
|  | EndDeleteAccountAlias(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteAccountAlias operation.
             | ||
|  | EndDeleteAccountPasswordPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteAccountPasswordPolicy operation.
             | ||
|  | EndDeleteGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteGroup operation.
             | ||
|  | EndDeleteGroupPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteGroupPolicy operation.
             | ||
|  | EndDeleteInstanceProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteInstanceProfile operation.
             | ||
|  | EndDeleteLoginProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteLoginProfile operation.
             | ||
|  | EndDeleteRole(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteRole operation.
             | ||
|  | EndDeleteRolePolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteRolePolicy operation.
             | ||
|  | EndDeleteSAMLProvider(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteSAMLProvider operation.
             | ||
|  | EndDeleteServerCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteServerCertificate operation.
             | ||
|  | EndDeleteSigningCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteSigningCertificate operation.
             | ||
|  | EndDeleteUser(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteUser operation.
             | ||
|  | EndDeleteUserPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteUserPolicy operation.
             | ||
|  | EndDeleteVirtualMFADevice(IAsyncResult) | 
            Finishes the asynchronous execution of the  DeleteVirtualMFADevice operation.
             | ||
|  | EndEnableMFADevice(IAsyncResult) | 
            Finishes the asynchronous execution of the  EnableMFADevice operation.
             | ||
|  | EndGetAccountPasswordPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetAccountPasswordPolicy operation.
             | ||
|  | EndGetAccountSummary(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetAccountSummary operation.
             | ||
|  | EndGetGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetGroup operation.
             | ||
|  | EndGetGroupPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetGroupPolicy operation.
             | ||
|  | EndGetInstanceProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetInstanceProfile operation.
             | ||
|  | EndGetLoginProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetLoginProfile operation.
             | ||
|  | EndGetRole(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetRole operation.
             | ||
|  | EndGetRolePolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetRolePolicy operation.
             | ||
|  | EndGetSAMLProvider(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetSAMLProvider operation.
             | ||
|  | EndGetServerCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetServerCertificate operation.
             | ||
|  | EndGetUser(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetUser operation.
             | ||
|  | EndGetUserPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  GetUserPolicy operation.
             | ||
|  | EndListAccessKeys(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListAccessKeys operation.
             | ||
|  | EndListAccountAliases(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListAccountAliases operation.
             | ||
|  | EndListGroupPolicies(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListGroupPolicies operation.
             | ||
|  | EndListGroups(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListGroups operation.
             | ||
|  | EndListGroupsForUser(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListGroupsForUser operation.
             | ||
|  | EndListInstanceProfiles(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListInstanceProfiles operation.
             | ||
|  | EndListInstanceProfilesForRole(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListInstanceProfilesForRole operation.
             | ||
|  | EndListMFADevices(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListMFADevices operation.
             | ||
|  | EndListRolePolicies(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListRolePolicies operation.
             | ||
|  | EndListRoles(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListRoles operation.
             | ||
|  | EndListSAMLProviders(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListSAMLProviders operation.
             | ||
|  | EndListServerCertificates(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListServerCertificates operation.
             | ||
|  | EndListSigningCertificates(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListSigningCertificates operation.
             | ||
|  | EndListUserPolicies(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListUserPolicies operation.
             | ||
|  | EndListUsers(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListUsers operation.
             | ||
|  | EndListVirtualMFADevices(IAsyncResult) | 
            Finishes the asynchronous execution of the  ListVirtualMFADevices operation.
             | ||
|  | EndPutGroupPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  PutGroupPolicy operation.
             | ||
|  | EndPutRolePolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  PutRolePolicy operation.
             | ||
|  | EndPutUserPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  PutUserPolicy operation.
             | ||
|  | EndRemoveRoleFromInstanceProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  RemoveRoleFromInstanceProfile operation.
             | ||
|  | EndRemoveUserFromGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  RemoveUserFromGroup operation.
             | ||
|  | EndResyncMFADevice(IAsyncResult) | 
            Finishes the asynchronous execution of the  ResyncMFADevice operation.
             | ||
|  | EndUpdateAccessKey(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateAccessKey operation.
             | ||
|  | EndUpdateAccountPasswordPolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateAccountPasswordPolicy operation.
             | ||
|  | EndUpdateAssumeRolePolicy(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateAssumeRolePolicy operation.
             | ||
|  | EndUpdateGroup(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateGroup operation.
             | ||
|  | EndUpdateLoginProfile(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateLoginProfile operation.
             | ||
|  | EndUpdateSAMLProvider(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateSAMLProvider operation.
             | ||
|  | EndUpdateServerCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateServerCertificate operation.
             | ||
|  | EndUpdateSigningCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateSigningCertificate operation.
             | ||
|  | EndUpdateUser(IAsyncResult) | 
            Finishes the asynchronous execution of the  UpdateUser operation.
             | ||
|  | EndUploadServerCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  UploadServerCertificate operation.
             | ||
|  | EndUploadSigningCertificate(IAsyncResult) | 
            Finishes the asynchronous execution of the  UploadSigningCertificate operation.
             | ||
|  | GetAccountPasswordPolicy()()()() | 
            Retrieves the password policy for the AWS account. For more information about using
            a            password policy, go to Managing
            an                IAM Password Policy.
             | ||
|  | GetAccountPasswordPolicy(GetAccountPasswordPolicyRequest) | 
            Retrieves the password policy for the AWS account. For more information about using
            a            password policy, go to Managing
            an                IAM Password Policy.
             | ||
|  | GetAccountSummary()()()() | 
            Retrieves account level information about account entity usage and IAM quotas.
            
                    
             For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management. | ||
|  | GetAccountSummary(GetAccountSummaryRequest) | 
            Retrieves account level information about account entity usage and IAM quotas.
            
                    
             For information about limitations on IAM entities, see Limitations on IAM Entities in Using AWS Identity and Access Management. | ||
|  | GetGroup(GetGroupRequest) | 
            Returns a list of users that are in the specified group. You can paginate the results
            using            the   CopyC# MaxItems  CopyC# Marker | ||
|  | GetGroupPolicy(GetGroupPolicyRequest) | 
            Retrieves the specified policy document for the specified group. The returned policy
            is            URL-encoded according to RFC 3986. For more information about RFC 3986, go to
            http://www.faqs.org/rfcs/rfc3986.html.
             | ||
|  | GetInstanceProfile(GetInstanceProfileRequest) | 
            Retrieves information about the specified instance profile, including the instance
            profile's            path, GUID, ARN, and role. For more information about instance profiles,
            go to About
            Instance                Profiles. For more information about ARNs, go to ARNs.
             | ||
|  | GetLoginProfile(GetLoginProfileRequest) | 
            Retrieves the user name and password-creation date for the specified user. If the
            user has            not been assigned a password, the action returns a 404 (  CopyC# NoSuchEntity | ||
|  | GetRole(GetRoleRequest) | 
            Retrieves information about the specified role, including the role's path, GUID, ARN,
            and the            policy granting permission to assume the role. For more information about
            ARNs, go to                ARNs.
            For more information about roles, go to Working
            with            Roles.
            
                    
             The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | ||
|  | GetRolePolicy(GetRolePolicyRequest) | 
            Retrieves the specified policy document for the specified role. For more information
            about            roles, go to Working
            with                Roles.
            
                    
             The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | ||
|  | GetSAMLProvider(GetSAMLProviderRequest) | 
            Returns the SAML provider metadocument that was uploaded when the provider was created
            or            updated.
            
                     
 | ||
|  | GetServerCertificate(GetServerCertificateRequest) | 
            Retrieves information about the specified server certificate.
             | ||
|  | GetUser()()()() | 
            Retrieves information about the specified user, including the user's path, unique
            ID, and            ARN.
            
                    
             If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. | ||
|  | GetUser(GetUserRequest) | 
            Retrieves information about the specified user, including the user's path, unique
            ID, and            ARN.
            
                    
             If you do not specify a user name, IAM determines the user name implicitly based on the AWS access key ID signing the request. | ||
|  | GetUserPolicy(GetUserPolicyRequest) | 
            Retrieves the specified policy document for the specified user. The returned policy
            is            URL-encoded according to RFC 3986. For more information about RFC 3986, go to
            http://www.faqs.org/rfcs/rfc3986.html.
             | ||
|  | ListAccessKeys()()()() | 
            Returns information about the access key IDs associated with the specified user. If
            there are            none, the action returns an empty list.
            
                    
             
            Although each user is limited to a small number of keys, you can still paginate the
            results            using the  
            If the  
 | ||
|  | ListAccessKeys(ListAccessKeysRequest) | 
            Returns information about the access key IDs associated with the specified user. If
            there are            none, the action returns an empty list.
            
                    
             
            Although each user is limited to a small number of keys, you can still paginate the
            results            using the  
            If the  
 | ||
|  | ListAccountAliases()()()() | 
            Lists the account aliases associated with the account. For information about using
            an AWS            account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
            and                Access Management.
            
                    
             
            You can paginate the results using the  | ||
|  | ListAccountAliases(ListAccountAliasesRequest) | 
            Lists the account aliases associated with the account. For information about using
            an AWS            account alias, see Using an Alias for Your AWS Account ID in Using AWS Identity
            and                Access Management.
            
                    
             
            You can paginate the results using the  | ||
|  | ListGroupPolicies(ListGroupPoliciesRequest) | 
            Lists the names of the policies associated with the specified group. If there are
            none, the            action returns an empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListGroups()()()() | 
            Lists the groups that have the specified path prefix.
            
                    
             
            You can paginate the results using the  | ||
|  | ListGroups(ListGroupsRequest) | 
            Lists the groups that have the specified path prefix.
            
                    
             
            You can paginate the results using the  | ||
|  | ListGroupsForUser(ListGroupsForUserRequest) | 
            Lists the groups the specified user belongs to.
            
                    
             
            You can paginate the results using the  | ||
|  | ListInstanceProfiles()()()() | 
            Lists the instance profiles that have the specified path prefix. If there are none,
            the            action returns an empty list. For more information about instance profiles,
            go to About
            Instance                Profiles.
            
                    
             
            You can paginate the results using the  | ||
|  | ListInstanceProfiles(ListInstanceProfilesRequest) | 
            Lists the instance profiles that have the specified path prefix. If there are none,
            the            action returns an empty list. For more information about instance profiles,
            go to About
            Instance                Profiles.
            
                    
             
            You can paginate the results using the  | ||
|  | ListInstanceProfilesForRole(ListInstanceProfilesForRoleRequest) | 
            Lists the instance profiles that have the specified associated role. If there are
            none, the            action returns an empty list. For more information about instance profiles,
            go to About
            Instance                Profiles.
            
                    
             
            You can paginate the results using the  | ||
|  | ListMFADevices()()()() | 
            Lists the MFA devices. If the request includes the user name, then this action lists
            all the            MFA devices associated with the specified user name. If you do not specify
            a user name, IAM            determines the user name implicitly based on the AWS access key
            ID signing the request.
            
                    
             
            You can paginate the results using the  | ||
|  | ListMFADevices(ListMFADevicesRequest) | 
            Lists the MFA devices. If the request includes the user name, then this action lists
            all the            MFA devices associated with the specified user name. If you do not specify
            a user name, IAM            determines the user name implicitly based on the AWS access key
            ID signing the request.
            
                    
             
            You can paginate the results using the  | ||
|  | ListRolePolicies(ListRolePoliciesRequest) | 
            Lists the names of the policies associated with the specified role. If there are none,
            the            action returns an empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListRoles()()()() | 
            Lists the roles that have the specified path prefix. If there are none, the action
            returns an            empty list. For more information about roles, go to Working
            with            Roles.
            
                    
             
            You can paginate the results using the  The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | ||
|  | ListRoles(ListRolesRequest) | 
            Lists the roles that have the specified path prefix. If there are none, the action
            returns an            empty list. For more information about roles, go to Working
            with            Roles.
            
                    
             
            You can paginate the results using the  The returned policy is URL-encoded according to RFC 3986. For more information about RFC 3986, go to http://www.faqs.org/rfcs/rfc3986.html. | ||
|  | ListSAMLProviders()()()() | 
            Lists the SAML providers in the account.
            
                     
 | ||
|  | ListSAMLProviders(ListSAMLProvidersRequest) | 
            Lists the SAML providers in the account.
            
                     
 | ||
|  | ListServerCertificates()()()() | 
            Lists the server certificates that have the specified path prefix. If none exist,
            the action            returns an empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListServerCertificates(ListServerCertificatesRequest) | 
            Lists the server certificates that have the specified path prefix. If none exist,
            the action            returns an empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListSigningCertificates()()()() | 
            Returns information about the signing certificates associated with the specified user.
            If            there are none, the action returns an empty list.
            
                    
             
            Although each user is limited to a small number of signing certificates, you can still            paginate
            the results using the  
            If the  | ||
|  | ListSigningCertificates(ListSigningCertificatesRequest) | 
            Returns information about the signing certificates associated with the specified user.
            If            there are none, the action returns an empty list.
            
                    
             
            Although each user is limited to a small number of signing certificates, you can still            paginate
            the results using the  
            If the  | ||
|  | ListUserPolicies(ListUserPoliciesRequest) | 
            Lists the names of the policies associated with the specified user. If there are none,
            the            action returns an empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListUsers()()()() | 
            Lists the users that have the specified path prefix. If there are none, the action
            returns an            empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListUsers(ListUsersRequest) | 
            Lists the users that have the specified path prefix. If there are none, the action
            returns an            empty list.
            
                    
             
            You can paginate the results using the  | ||
|  | ListVirtualMFADevices()()()() | 
            Lists the virtual MFA devices under the AWS account by assignment status. If you
            do not            specify an assignment status, the action returns a list of all virtual MFA
            devices. Assignment            status can be   CopyC# Assigned  CopyC# Unassigned  CopyC# Any 
            You can paginate the results using the  | ||
|  | ListVirtualMFADevices(ListVirtualMFADevicesRequest) | 
            Lists the virtual MFA devices under the AWS account by assignment status. If you
            do not            specify an assignment status, the action returns a list of all virtual MFA
            devices. Assignment            status can be   CopyC# Assigned  CopyC# Unassigned  CopyC# Any 
            You can paginate the results using the  | ||
|  | PutGroupPolicy(PutGroupPolicyRequest) | 
            Adds (or updates) a policy document associated with the specified group. For information            about
            policies, refer to Overview of Policies in Using AWS Identity and Access Management.
            
                    
             For information about limits on the number of policies you can associate with a group, see Limitations on IAM Entities in Using AWS Identity and Access Management. 
 | ||
|  | PutRolePolicy(PutRolePolicyRequest) | 
            Adds (or updates) a policy document associated with the specified role. For information
            about            policies, go to Overview of Policies in Using AWS Identity and Access Management.
            
                    
             For information about limits on the policies you can associate with a role, see Limitations on IAM Entities in Using AWS Identity and Access Management. 
 | ||
|  | PutUserPolicy(PutUserPolicyRequest) | 
            Adds (or updates) a policy document associated with the specified user. For information
            about            policies, refer to Overview of Policies in Using AWS Identity and Access Management.
            
                    
             For information about limits on the number of policies you can associate with a user, see Limitations on IAM Entities in Using AWS Identity and Access Management. 
 | ||
|  | RemoveRoleFromInstanceProfile(RemoveRoleFromInstanceProfileRequest) | 
            Removes the specified role from the specified instance profile.
            
                    Make sure you do not have any Amazon EC2 instances running with the role
            you are            about to remove from the instance profile. Removing a role from an instance
            profile that is            associated with a running instance will break any applications running
            on the            instance. For more information about roles, go to Working with Roles. For more information about instance profiles, go to About Instance Profiles. | ||
|  | RemoveUserFromGroup(RemoveUserFromGroupRequest) | 
            Removes the specified user from the specified group.
             | ||
|  | ResyncMFADevice(ResyncMFADeviceRequest) | 
            Synchronizes the specified MFA device with AWS servers.
             | ||
|  | UpdateAccessKey(UpdateAccessKeyRequest) | 
            Changes the status of the specified access key from Active to Inactive, or vice versa.
            This            action can be used to disable a user's key as part of a key rotation work flow.
            
                    
             
            If the  For information about rotating keys, see Managing Keys and Certificates in Using AWS Identity and Access Management. | ||
|  | UpdateAccountPasswordPolicy()()()() | 
            Updates the password policy settings for the account. For more information about using
            a            password policy, go to Managing
            an                IAM Password Policy.
             | ||
|  | UpdateAccountPasswordPolicy(UpdateAccountPasswordPolicyRequest) | 
            Updates the password policy settings for the account. For more information about using
            a            password policy, go to Managing
            an                IAM Password Policy.
             | ||
|  | UpdateAssumeRolePolicy(UpdateAssumeRolePolicyRequest) | 
            Updates the policy that grants an entity permission to assume a role. For more information
            about roles, go to Working
            with            Roles.
             | ||
|  | UpdateGroup(UpdateGroupRequest) | 
            Updates the name and/or the path of the specified group.
            
                     You should understand the implications of changing a group's path or
            name. For more          information, see Renaming Users and Groups in Using AWS Identity and Access                Management.
             
 | ||
|  | UpdateLoginProfile(UpdateLoginProfileRequest) | 
            Changes the password for the specified user.
             | ||
|  | UpdateSAMLProvider(UpdateSAMLProviderRequest) | 
            Updates the metadata document for an existing SAML provider.
            
                     
 | ||
|  | UpdateServerCertificate(UpdateServerCertificateRequest) | 
            Updates the name and/or the path of the specified server certificate.
            
                     You should understand the implications of changing a server certificate's
            path or            name. For more information, see Managing Server Certificates in Using AWS Identity and Access
            Management.  
 | ||
|  | UpdateSigningCertificate(UpdateSigningCertificateRequest) | 
            Changes the status of the specified signing certificate from active to disabled, or
            vice            versa. This action can be used to disable a user's signing certificate as part
            of a            certificate rotation work flow.
            
                    
             
            If the  For information about rotating certificates, see Managing Keys and Certificates in Using AWS Identity and Access Management. | ||
|  | UpdateUser(UpdateUserRequest) | 
            Updates the name and/or the path of the specified user.
            
                     You should understand the implications of changing a user's path or
            name. For more          information, see Renaming Users and Groups in Using AWS Identity and Access                Management.
             
 | ||
|  | UploadServerCertificate(UploadServerCertificateRequest) | 
            Uploads a server certificate entity for the AWS account. The server certificate entity            includes
            a public key certificate, a private key, and an optional certificate chain, which            should
            all be PEM-encoded.
            
                    
             For information about the number of server certificates you can upload, see Limitations on IAM Entities in Using AWS Identity and Access Management. 
 | ||
|  | UploadSigningCertificate(UploadSigningCertificateRequest) | 
            Uploads an X.509 signing certificate and associates it with the specified user. Some
            AWS            services use X.509 signing certificates to validate requests that are signed
            with a            corresponding private key. When you upload the certificate, its default status
            is                  CopyC# Active 
            If the  
 |