openapi-directory

Version:

Building & bundling https://github.com/APIs-guru/openapi-directory for easy use from JS

github.com/httptoolkit/openapi-directory-js

1 lines • 1.27 MB

JSON

{"openapi":"3.0.0","info":{"version":"2010-05-08","x-release":"v4","title":"AWS Identity and Access Management","description":"<fullname>Identity and Access Management</fullname> Identity and Access Management (IAM) is a web service for securely controlling access to Amazon Web Services services. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which Amazon Web Services resources users and applications can access. For more information about IAM, see <a href=\"http://aws.amazon.com/iam/\">Identity and Access Management (IAM)</a> and the <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/\">Identity and Access Management User Guide</a>.","x-logo":{"url":"https://twitter.com/awscloud/profile_image?size=original","backgroundColor":"#FFFFFF"},"termsOfService":"https://aws.amazon.com/service-terms/","contact":{"name":"Mike Ralphson","email":"mike.ralphson@gmail.com","url":"https://github.com/mermade/aws2openapi","x-twitter":"PermittedSoc"},"license":{"name":"Apache 2.0 License","url":"http://www.apache.org/licenses/"},"x-providerName":"amazonaws.com","x-serviceName":"iam","x-origin":[{"contentType":"application/json","url":"https://raw.githubusercontent.com/aws/aws-sdk-js/master/apis/iam-2010-05-08.normal.json","converter":{"url":"https://github.com/mermade/aws2openapi","version":"1.0.0"},"x-apisguru-driver":"external"}],"x-apiClientRegistration":{"url":"https://portal.aws.amazon.com/gp/aws/developer/registration/index.html?nc2=h_ct"},"x-apisguru-categories":["cloud"],"x-preferred":true},"externalDocs":{"description":"Amazon Web Services documentation","url":"https://docs.aws.amazon.com/iam/"},"servers":[{"url":"https://iam.amazonaws.com","variables":{},"description":"The general IAM multi-region endpoint"},{"url":"http://iam.us-gov.amazonaws.com","variables":{},"description":"The general IAM endpoint for AWS GovCloud (US) and AWS GovCloud (US-East)"},{"url":"https://iam.us-gov.amazonaws.com","variables":{},"description":"The general IAM endpoint for AWS GovCloud (US) and AWS GovCloud (US-East)"},{"url":"http://iam.cn-north-1.amazonaws.com.cn","variables":{},"description":"The general IAM endpoint for China (Beijing) and China (Ningxia)"},{"url":"https://iam.cn-north-1.amazonaws.com.cn","variables":{},"description":"The general IAM endpoint for China (Beijing) and China (Ningxia)"}],"x-hasEquivalentPaths":true,"paths":{"/#Action=AddClientIDToOpenIDConnectProvider":{"get":{"x-aws-operation-name":"AddClientIDToOpenIDConnectProvider","operationId":"GET_AddClientIDToOpenIDConnectProvider","description":"Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource. This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.","responses":{"200":{"description":"Success"},"480":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"481":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"OpenIDConnectProviderArn","in":"query","required":true,"description":"The Amazon Resource Name (ARN) of the IAM OpenID Connect (OIDC) provider resource to add the client ID to. You can get a list of OIDC provider ARNs by using the <a>ListOpenIDConnectProviders</a> operation.","schema":{"type":"string","description":"The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference. ","minLength":20,"maxLength":2048}},{"name":"ClientID","in":"query","required":true,"description":"The client ID (also known as audience) to add to the IAM OpenID Connect provider resource.","schema":{"type":"string","minLength":1,"maxLength":255}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddClientIDToOpenIDConnectProvider"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AddClientIDToOpenIDConnectProvider","operationId":"POST_AddClientIDToOpenIDConnectProvider","description":"Adds a new client ID (also known as audience) to the list of client IDs already registered for the specified IAM OpenID Connect (OIDC) provider resource. This operation is idempotent; it does not fail or return an error if you add an existing client ID to the provider.","responses":{"200":{"description":"Success"},"480":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"481":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AddClientIDToOpenIDConnectProviderRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddClientIDToOpenIDConnectProvider"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=AddRoleToInstanceProfile":{"get":{"x-aws-operation-name":"AddRoleToInstanceProfile","operationId":"GET_AddRoleToInstanceProfile","description":"Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of Amazon Web Services because of <a href=\"https://en.wikipedia.org/wiki/Eventual_consistency\">eventual consistency</a>. To force the change, you must <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIamInstanceProfile.html\">disassociate the instance profile</a> and then <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AssociateIamInstanceProfile.html\">associate the instance profile</a>, or you can stop your instance and then restart it. <note> The caller of this operation must be granted the <code>PassRole</code> permission on the IAM role by a permissions policy. </note> For more information about roles, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html\">IAM roles</a> in the IAM User Guide. For more information about instance profiles, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html\">Using instance profiles</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"EntityAlreadyExistsException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityAlreadyExistsException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"UnmodifiableEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/UnmodifiableEntityException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"InstanceProfileName","in":"query","required":true,"description":"The name of the instance profile to update. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"RoleName","in":"query","required":true,"description":"The name of the role to add. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":64}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddRoleToInstanceProfile"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AddRoleToInstanceProfile","operationId":"POST_AddRoleToInstanceProfile","description":"Adds the specified IAM role to the specified instance profile. An instance profile can contain only one role, and this quota cannot be increased. You can remove the existing role and then add a different role to an instance profile. You must then wait for the change to appear across all of Amazon Web Services because of <a href=\"https://en.wikipedia.org/wiki/Eventual_consistency\">eventual consistency</a>. To force the change, you must <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DisassociateIamInstanceProfile.html\">disassociate the instance profile</a> and then <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_AssociateIamInstanceProfile.html\">associate the instance profile</a>, or you can stop your instance and then restart it. <note> The caller of this operation must be granted the <code>PassRole</code> permission on the IAM role by a permissions policy. </note> For more information about roles, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html\">IAM roles</a> in the IAM User Guide. For more information about instance profiles, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html\">Using instance profiles</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"EntityAlreadyExistsException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityAlreadyExistsException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"UnmodifiableEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/UnmodifiableEntityException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AddRoleToInstanceProfileRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddRoleToInstanceProfile"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=AddUserToGroup":{"get":{"x-aws-operation-name":"AddUserToGroup","operationId":"GET_AddUserToGroup","description":"Adds the specified user to the specified group.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"GroupName","in":"query","required":true,"description":"The name of the group to update. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"UserName","in":"query","required":true,"description":"The name of the user to add. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddUserToGroup"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AddUserToGroup","operationId":"POST_AddUserToGroup","description":"Adds the specified user to the specified group.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AddUserToGroupRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AddUserToGroup"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=AttachGroupPolicy":{"get":{"x-aws-operation-name":"AttachGroupPolicy","operationId":"GET_AttachGroupPolicy","description":"Attaches the specified managed policy to the specified IAM group. You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutGroupPolicy.html\"> <code>PutGroupPolicy</code> </a>. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"GroupName","in":"query","required":true,"description":"The name (friendly name, not ARN) of the group to attach the policy to. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"PolicyArn","in":"query","required":true,"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference.","schema":{"type":"string","description":"The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference. ","minLength":20,"maxLength":2048}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachGroupPolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AttachGroupPolicy","operationId":"POST_AttachGroupPolicy","description":"Attaches the specified managed policy to the specified IAM group. You use this operation to attach a managed policy to a group. To embed an inline policy in a group, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutGroupPolicy.html\"> <code>PutGroupPolicy</code> </a>. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AttachGroupPolicyRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachGroupPolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=AttachRolePolicy":{"get":{"x-aws-operation-name":"AttachRolePolicy","operationId":"GET_AttachRolePolicy","description":"Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy. <note> You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html\"> <code>CreateRole</code> </a>. You can update a role's trust policy using <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAssumeRolePolicy.html\"> <code>UpdateAssumerolePolicy</code> </a>. </note> Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutRolePolicy.html\"> <code>PutRolePolicy</code> </a>. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"UnmodifiableEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/UnmodifiableEntityException"}}}},"484":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"485":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"RoleName","in":"query","required":true,"description":"The name (friendly name, not ARN) of the role to attach the policy to. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":64}},{"name":"PolicyArn","in":"query","required":true,"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference.","schema":{"type":"string","description":"The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference. ","minLength":20,"maxLength":2048}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachRolePolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AttachRolePolicy","operationId":"POST_AttachRolePolicy","description":"Attaches the specified managed policy to the specified IAM role. When you attach a managed policy to a role, the managed policy becomes part of the role's permission (access) policy. <note> You cannot use a managed policy as the role's trust policy. The role's trust policy is created at the same time as the role, using <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_CreateRole.html\"> <code>CreateRole</code> </a>. You can update a role's trust policy using <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_UpdateAssumeRolePolicy.html\"> <code>UpdateAssumerolePolicy</code> </a>. </note> Use this operation to attach a managed policy to a role. To embed an inline policy in a role, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutRolePolicy.html\"> <code>PutRolePolicy</code> </a>. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"UnmodifiableEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/UnmodifiableEntityException"}}}},"484":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"485":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AttachRolePolicyRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachRolePolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=AttachUserPolicy":{"get":{"x-aws-operation-name":"AttachUserPolicy","operationId":"GET_AttachUserPolicy","description":"Attaches the specified managed policy to the specified user. You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutUserPolicy.html\"> <code>PutUserPolicy</code> </a>. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"UserName","in":"query","required":true,"description":"The name (friendly name, not ARN) of the IAM user to attach the policy to. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":64}},{"name":"PolicyArn","in":"query","required":true,"description":"The Amazon Resource Name (ARN) of the IAM policy you want to attach. For more information about ARNs, see <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference.","schema":{"type":"string","description":"The Amazon Resource Name (ARN). ARNs are unique identifiers for Amazon Web Services resources. For more information about ARNs, go to <a href=\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\">Amazon Resource Names (ARNs)</a> in the Amazon Web Services General Reference. ","minLength":20,"maxLength":2048}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachUserPolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"AttachUserPolicy","operationId":"POST_AttachUserPolicy","description":"Attaches the specified managed policy to the specified user. You use this operation to attach a managed policy to a user. To embed an inline policy in a user, use <a href=\"https://docs.aws.amazon.com/IAM/latest/APIReference/API_PutUserPolicy.html\"> <code>PutUserPolicy</code> </a>. As a best practice, you can validate your IAM policies. To learn more, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_policy-validator.html\">Validating IAM policies</a> in the IAM User Guide. For more information about policies, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/policies-managed-vs-inline.html\">Managed policies and inline policies</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"InvalidInputException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidInputException"}}}},"483":{"description":"PolicyNotAttachableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PolicyNotAttachableException"}}}},"484":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/AttachUserPolicyRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["AttachUserPolicy"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=ChangePassword":{"get":{"x-aws-operation-name":"ChangePassword","operationId":"GET_ChangePassword","description":"Changes the password of the IAM user who is calling this operation. This operation can be performed using the CLI, the Amazon Web Services API, or the My Security Credentials page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is not affected by this operation. Use <a>UpdateLoginProfile</a> to use the CLI, the Amazon Web Services API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html\">Managing passwords</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"InvalidUserTypeException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidUserTypeException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"EntityTemporarilyUnmodifiableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityTemporarilyUnmodifiableException"}}}},"484":{"description":"PasswordPolicyViolationException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PasswordPolicyViolationException"}}}},"485":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"OldPassword","in":"query","required":true,"description":"The IAM user's current password.","schema":{"type":"string","pattern":"[\\u0009\\u000A\\u000D\\u0020-\\u00FF]+","minLength":1,"maxLength":128,"format":"password"}},{"name":"NewPassword","in":"query","required":true,"description":"The new password. The new password must conform to the Amazon Web Services account's password policy, if one exists. The <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a> that is used to validate this parameter is a string of characters. That string can include almost any printable ASCII character from the space (<code>\\u0020</code>) through the end of the ASCII character range (<code>\\u00FF</code>). You can also include the tab (<code>\\u0009</code>), line feed (<code>\\u000A</code>), and carriage return (<code>\\u000D</code>) characters. Any of these characters are valid in a password. However, many tools, such as the Amazon Web Services Management Console, might restrict the ability to type certain characters because they have special meaning within that tool.","schema":{"type":"string","pattern":"[\\u0009\\u000A\\u000D\\u0020-\\u00FF]+","minLength":1,"maxLength":128,"format":"password"}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["ChangePassword"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"ChangePassword","operationId":"POST_ChangePassword","description":"Changes the password of the IAM user who is calling this operation. This operation can be performed using the CLI, the Amazon Web Services API, or the My Security Credentials page in the Amazon Web Services Management Console. The Amazon Web Services account root user password is not affected by this operation. Use <a>UpdateLoginProfile</a> to use the CLI, the Amazon Web Services API, or the Users page in the IAM console to change the password for any IAM user. For more information about modifying passwords, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_ManagingLogins.html\">Managing passwords</a> in the IAM User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"InvalidUserTypeException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/InvalidUserTypeException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"EntityTemporarilyUnmodifiableException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityTemporarilyUnmodifiableException"}}}},"484":{"description":"PasswordPolicyViolationException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/PasswordPolicyViolationException"}}}},"485":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ChangePasswordRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["ChangePassword"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=CreateAccessKey":{"get":{"x-aws-operation-name":"CreateAccessKey","operationId":"GET_CreateAccessKey","description":" Creates a new Amazon Web Services secret access key and corresponding Amazon Web Services access key ID for the specified user. The default status for new keys is <code>Active</code>. If you do not specify a user name, IAM determines the user name implicitly based on the Amazon Web Services access key ID signing the request. This operation works for access keys under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user credentials. This is true even if the Amazon Web Services account has no associated users. For information about quotas on the number of keys you can create, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html\">IAM and STS quotas</a> in the IAM User Guide. <important> To ensure the security of your Amazon Web Services account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. </important>","responses":{"200":{"description":"Success","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/CreateAccessKeyResponse"}}}},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"UserName","in":"query","required":false,"description":"The name of the IAM user that the new key will belong to. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of upper and lowercase alphanumeric characters with no spaces. You can also include any of the following characters: _+=,.@-","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["CreateAccessKey"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"CreateAccessKey","operationId":"POST_CreateAccessKey","description":" Creates a new Amazon Web Services secret access key and corresponding Amazon Web Services access key ID for the specified user. The default status for new keys is <code>Active</code>. If you do not specify a user name, IAM determines the user name implicitly based on the Amazon Web Services access key ID signing the request. This operation works for access keys under the Amazon Web Services account. Consequently, you can use this operation to manage Amazon Web Services account root user credentials. This is true even if the Amazon Web Services account has no associated users. For information about quotas on the number of keys you can create, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html\">IAM and STS quotas</a> in the IAM User Guide. <important> To ensure the security of your Amazon Web Services account, the secret access key is accessible only during key and user creation. You must save the key (for example, in a text file) if you want to be able to access it again. If a secret key is lost, you can delete the access keys for the associated user and then create new keys. </important>","responses":{"200":{"description":"Success","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/CreateAccessKeyResponse"}}}},"480":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"481":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"482":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/CreateAccessKeyRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["CreateAccessKey"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=CreateAccountAlias":{"get":{"x-aws-operation-name":"CreateAccountAlias","operationId":"GET_CreateAccountAlias","description":"Creates an alias for your Amazon Web Services account. For information about using an Amazon Web Services account alias, see <a href=\"https://docs.aws.amazon.com/signin/latest/userguide/CreateAccountAlias.html\">Creating, deleting, and listing an Amazon Web Services account alias</a> in the Amazon Web Services Sign-In User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"ConcurrentModificationException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ConcurrentModificationException"}}}},"481":{"description":"EntityAlreadyExistsException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityAlreadyExistsException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"AccountAlias","in":"query","required":true,"description":"The account alias to create. This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of lowercase letters, digits, and dashes. You cannot start or finish with a dash, nor can you have two dashes in a row.","schema":{"type":"string","pattern":"^[a-z0-9]([a-z0-9]|-(?!-)){1,61}[a-z0-9]$","minLength":3,"maxLength":63}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["CreateAccountAlias"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]},"parameters":[{"$ref":"#/components/parameters/X-Amz-Content-Sha256"},{"$ref":"#/components/parameters/X-Amz-Date"},{"$ref":"#/components/parameters/X-Amz-Algorithm"},{"$ref":"#/components/parameters/X-Amz-Credential"},{"$ref":"#/components/parameters/X-Amz-Security-Token"},{"$ref":"#/components/parameters/X-Amz-Signature"},{"$ref":"#/components/parameters/X-Amz-SignedHeaders"}],"post":{"x-aws-operation-name":"CreateAccountAlias","operationId":"POST_CreateAccountAlias","description":"Creates an alias for your Amazon Web Services account. For information about using an Amazon Web Services account alias, see <a href=\"https://docs.aws.amazon.com/signin/latest/userguide/CreateAccountAlias.html\">Creating, deleting, and listing an Amazon Web Services account alias</a> in the Amazon Web Services Sign-In User Guide.","responses":{"200":{"description":"Success"},"480":{"description":"ConcurrentModificationException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ConcurrentModificationException"}}}},"481":{"description":"EntityAlreadyExistsException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityAlreadyExistsException"}}}},"482":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"483":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"requestBody":{"content":{"text/xml":{"schema":{"$ref":"#/components/schemas/CreateAccountAliasRequest"}}}},"parameters":[{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["CreateAccountAlias"]}},{"name":"Version","in":"query","required":true,"schema":{"type":"string","enum":["2010-05-08"]}}]}},"/#Action=CreateGroup":{"get":{"x-aws-operation-name":"CreateGroup","operationId":"GET_CreateGroup","description":"Creates a new group. For information about the number of groups you can create, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html\">IAM and STS quotas</a> in the IAM User Guide.","responses":{"200":{"description":"Success","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/CreateGroupResponse"}}}},"480":{"description":"LimitExceededException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/LimitExceededException"}}}},"481":{"description":"EntityAlreadyExistsException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/EntityAlreadyExistsException"}}}},"482":{"description":"NoSuchEntityException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/NoSuchEntityException"}}}},"483":{"description":"ServiceFailureException","content":{"text/xml":{"schema":{"$ref":"#/components/schemas/ServiceFailureException"}}}}},"parameters":[{"name":"Path","in":"query","required":false,"description":" The path to the group. For more information about paths, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html\">IAM identifiers</a> in the IAM User Guide. This parameter is optional. If it is not included, it defaults to a slash (/). This parameter allows (through its <a href=\"http://wikipedia.org/wiki/regex\">regex pattern</a>) a string of characters consisting of either a forward slash (/) by itself or a string that must begin and end with forward slashes. In addition, it can contain any ASCII character from the ! (<code>\\u0021</code>) through the DEL character (<code>\\u007F</code>), including most punctuation characters, digits, and upper and lowercased letters.","schema":{"type":"string","pattern":"(\\u002F)|(\\u002F[\\u0021-\\u007E]+\\u002F)","minLength":1,"maxLength":512}},{"name":"GroupName","in":"query","required":true,"description":"The name of the group to create. Do not include the path in this value. IAM user, group, role, and policy names must be unique within the account. Names are not distinguished by case. For example, you cannot create resources named both \"MyResource\" and \"myresource\".","schema":{"type":"string","pattern":"[\\w+=,.@-]+","minLength":1,"maxLength":128}},{"name":"Action","in":"query","required":true,"schema":{"type":"string","enum":["CreateGroup"]}},{"name":