accountaccess/aws.sdk.kotlin.services.accountaccess

Package-level declarations

Types

interface AccountAccessClient : SdkClient

Account access manager enables you to manage applications and entitlements that grant IAM Identity Center principals access to IAM roles across accounts.

Properties

SdkVersion

const val SdkVersion: String

ServiceApiVersion

const val ServiceApiVersion: String

ServiceId

const val ServiceId: String

Inherited functions

createApplication

inline suspend fun AccountAccessClient.createApplication(crossinline block: CreateApplicationRequest.Builder.() -> Unit): CreateApplicationResponse

Creates an account access manager instance and its Amazon Web Services account access application in the associated IAM Identity Center instance. This operation is idempotent; calling it multiple times with the same parameters returns the existing application.

createEntitlement

inline suspend fun AccountAccessClient.createEntitlement(crossinline block: CreateEntitlementRequest.Builder.() -> Unit): CreateEntitlementResponse

Creates an entitlement (assignment) in account access manager. An entitlement (assignment) grants a principal (IAM Identity Center user or group) permission to assume a specified IAM role in an Amazon Web Services account. This operation is idempotent.

deleteApplication

inline suspend fun AccountAccessClient.deleteApplication(crossinline block: DeleteApplicationRequest.Builder.() -> Unit): DeleteApplicationResponse

Deletes an account access manager application. This operation is idempotent; deleting an application that has already been deleted does not return an error.

deleteEntitlement

inline suspend fun AccountAccessClient.deleteEntitlement(crossinline block: DeleteEntitlementRequest.Builder.() -> Unit): DeleteEntitlementResponse

Deletes an entitlement from an account access manager application. This operation is idempotent; deleting an entitlement that has already been deleted does not return an error.

getApplication

inline suspend fun AccountAccessClient.getApplication(crossinline block: GetApplicationRequest.Builder.() -> Unit): GetApplicationResponse

Retrieves details about an account access manager application, including its status, identity source, and tags.

getEntitlement

inline suspend fun AccountAccessClient.getEntitlement(crossinline block: GetEntitlementRequest.Builder.() -> Unit): GetEntitlementResponse

Retrieves details about a specific entitlement for an account access manager application, including the principal, IAM role, and target account.

listApplications

inline suspend fun AccountAccessClient.listApplications(crossinline block: ListApplicationsRequest.Builder.() -> Unit): ListApplicationsResponse

Lists the account access manager applications in your account. Use pagination to ensure that the operation returns quickly and successfully.

listEntitlements

inline suspend fun AccountAccessClient.listEntitlements(crossinline block: ListEntitlementsRequest.Builder.() -> Unit): ListEntitlementsResponse

Lists the entitlements for a specified account access manager application. You can filter results by principal, IAM role, or account. Use pagination to ensure that the operation returns quickly and successfully.

listTagsForResource

inline suspend fun AccountAccessClient.listTagsForResource(crossinline block: ListTagsForResourceRequest.Builder.() -> Unit): ListTagsForResourceResponse

Lists the tags associated with an account access manager resource.

tagResource

inline suspend fun AccountAccessClient.tagResource(crossinline block: TagResourceRequest.Builder.() -> Unit): TagResourceResponse

Adds tags to an account access manager resource.

untagResource

inline suspend fun AccountAccessClient.untagResource(crossinline block: UntagResourceRequest.Builder.() -> Unit): UntagResourceResponse

Removes tags from an account access manager resource.

withConfig

fun AccountAccessClient.withConfig(block: AccountAccessClient.Config.Builder.() -> Unit): AccountAccessClient

Create a copy of the client with one or more configuration values overridden. This method allows the caller to perform scoped config overrides for one or more client operations.