@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AbstractAWSSSO extends Object implements AWSSSO
AWSSSO
. Convenient method forms pass through to the corresponding overload that
takes a request object, which throws an UnsupportedOperationException
.ENDPOINT_PREFIX
Modifier and Type | Method and Description |
---|---|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful request, typically used for debugging issues
where a service isn't acting as expected.
|
GetRoleCredentialsResult |
getRoleCredentials(GetRoleCredentialsRequest request)
Returns the STS short-term credentials for a given role name that is assigned to the user.
|
ListAccountRolesResult |
listAccountRoles(ListAccountRolesRequest request)
Lists all roles that are assigned to the user for a given AWS account.
|
ListAccountsResult |
listAccounts(ListAccountsRequest request)
Lists all AWS accounts assigned to the user.
|
LogoutResult |
logout(LogoutRequest request)
Removes the locally stored SSO tokens from the client-side cache and sends an API call to the IAM Identity Center
service to invalidate the corresponding server-side IAM Identity Center sign in session.
|
void |
shutdown()
Shuts down this client object, releasing any resources that might be held open.
|
public GetRoleCredentialsResult getRoleCredentials(GetRoleCredentialsRequest request)
AWSSSO
Returns the STS short-term credentials for a given role name that is assigned to the user.
getRoleCredentials
in interface AWSSSO
public ListAccountRolesResult listAccountRoles(ListAccountRolesRequest request)
AWSSSO
Lists all roles that are assigned to the user for a given AWS account.
listAccountRoles
in interface AWSSSO
public ListAccountsResult listAccounts(ListAccountsRequest request)
AWSSSO
Lists all AWS accounts assigned to the user. These AWS accounts are assigned by the administrator of the account. For more information, see Assign User Access in the IAM Identity Center User Guide. This operation returns a paginated response.
listAccounts
in interface AWSSSO
public LogoutResult logout(LogoutRequest request)
AWSSSO
Removes the locally stored SSO tokens from the client-side cache and sends an API call to the IAM Identity Center service to invalidate the corresponding server-side IAM Identity Center sign in session.
If a user uses IAM Identity Center to access the AWS CLI, the user’s IAM Identity Center sign in session is used to obtain an IAM session, as specified in the corresponding IAM Identity Center permission set. More specifically, IAM Identity Center assumes an IAM role in the target account on behalf of the user, and the corresponding temporary AWS credentials are returned to the client.
After user logout, any existing IAM role sessions that were created by using IAM Identity Center permission sets continue based on the duration configured in the permission set. For more information, see User authentications in the IAM Identity Center User Guide.
logout
in interface AWSSSO
public void shutdown()
AWSSSO
public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
AWSSSO
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
getCachedResponseMetadata
in interface AWSSSO
request
- The originally executed request.