IAM Identity Center 控制台和 API 授权
现有的 IAM Identity Center 控制台 API 支持双重授权,因此当较新的 API 可用时,您仍可以继续使用现有的 API 操作。如果您现有的 IAM Identity Center 实例是在 2023 年 11 月 15 日和 2020 年 10 月 15 日之前创建的,您可以使用下表确定现在哪些 API 操作可以映射到这些日期之后发布的较新 API 操作。
2023 年 11 月之后的 API 操作
只要没有明确拒绝任何操作,2023 年 11 月 15 日之前创建的 IAM Identity Center 实例就会同时支持新旧 API 操作。2023 年 11 月 15 日之后创建的实例使用较新的 API 操作在 IAM Identity Center 控制台中进行授权。
| 2023 年 11 月 15 日之前使用的控制台操作名称 | 2023 年 11 月 15 日之后使用的 API 操作 |
|---|---|
| AssociateProfile | CreateApplicationAssignment |
| CreateManagedApplicationInstance | CreateApplicationInstance | CreateApplication |
| CreateManagedApplicationInstance | PutApplicationAuthenticationMethod |
| DeleteApplicationInstance | DeleteManagedApplicationInstance | DeleteApplication |
| DeleteSSO | DeleteInstance |
| DisassociateProfile | DeleteApplicationAssignment |
| GetApplicationTemplate | DescribeApplicationProvider |
| GetManagedApplicationInstance | DescribeApplication |
| GetSharedSsoConfiguration | DescribeInstance |
| ListApplicationInstances | ListApplications |
| ListApplicationTemplates | ListApplicationProviders |
| ListDirectoryAssociations | DescribeInstance |
| ListProfileAssociations | ListApplicationAssignments |
| UpdateApplicationInstanceDisplayData | UpdateApplicationInstanceStatus | UpdateManagedApplicationInstanceStatus | UpdateApplication |
2020 年 10 月之后的 API 操作
只要没有明确拒绝任何操作,2020 年 10 月 15 日之前创建的 IAM Identity Center 实例就会同时支持新旧 API 操作。2020 年 10 月 15 日之后创建的实例使用较新的 API 操作在 IAM Identity Center 控制台中进行授权。
| Operation name | API actions used before October 15, 2020 | API actions used after October 15, 2020 |
|---|---|---|
| AssociateProfile | AssociateProfile | CreateAccountAssignment |
| AttachManagedPolicy | PutPermissionsPolicy | AttachManagedPolicyToPermissionSet |
| CreatePermissionSet | CreatePermissionSet | CreatePermissionSet |
| DeleteApplicationInstanceForAWsAccount | DeleteApplicationInstance | DeleteTrust | DeleteAccountAssignment |
| DeleteApplicationProfileForAwsAccount | DeleteProfile | DeleteAccountAssignment |
| DeletePermissionsPolicy | DeletePermissionsPolicy | DeleteInlinePolicyFromPermissionSet |
| DeletePermissionSet | DeletePermissionSet | DeletePermissionSet |
| DescribePermissionsPolicies | DescribePermissionsPolicies | ListManagedPoliciesInPermissionSet |
| DetachManagedPolicy | DeletePermissionsPolicy | DetachManagedPolicyFromPermissionSet |
| DisassociateProfile | DisassociateProfile | DeleteAccountAssignment |
| GetApplicationInstanceForAWSAccount | GetApplicationInstance | ListAccountAssignments |
| GetAWSAccountProfileStatus | GetProfile | ListPermissionSetsProvisionedToAccount |
| GetPermissionSet | GetPermissionSet | DescribePermissionSet |
| GetPermissionsPolicy | GetPermissionsPolicy | GetInlinePolicyForPermissionSet |
| ListAccountsWithProvisionedPermissionSet | ListApplicationInstances | GetApplicationInstance | ListAccountsForProvisionedPermissionSet |
| ListAWSAccountProfiles | ListProfiles | GetProfile | ListPermissionSetsProvisionedToAccount |
| ListPermissionSets | ListPermissionSets | ListPermissionSets |
| ListProfileAssociations | ListProfileAssociations | ListAccountAssignments |
| ProvisionApplicationInstanceForAWSAccount | GetApplicationInstance | CreateApplicationInstance | CreateAccountAssignment |
| ProvisionApplicationProfileForAWSAccountInstance | GetProfile | CreateProfile | UpdateProfile | CreateAccountAssignment |
| ProvisionSAMLProvider | GetTrust | CreateTrust | UpdateTrust | CreateAccountAssignment |
| PutPermissionsPolicy | PutPermissionsPolicy | PutInlinePolicyToPermissionSet |
| UpdatePermissionSet | UpdatePermissionSet | UpdatePermissionSet |