diff options
| author | Zhineng Li <im@zhineng.li> | 2026-07-12 17:11:17 +0800 |
|---|---|---|
| committer | Zhineng Li <im@zhineng.li> | 2026-07-12 17:11:17 +0800 |
| commit | 1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634 (patch) | |
| tree | 5f0857666365b7e40cdaa3733ebe1f3ba9e13c67 /data/en_us/ims/2019-08-15 | |
| parent | 7347bac4ab7e136157fc94777e6cf87ef9e08599 (diff) | |
| download | afterglow-metadata-full-1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634.tar.gz afterglow-metadata-full-1c7f908ce09f98fdcbf79ed2a8ae21be60eaa634.zip | |
update APIs 20260712
Diffstat (limited to 'data/en_us/ims/2019-08-15')
| -rw-r--r-- | data/en_us/ims/2019-08-15/api-docs.php | 16804 |
1 files changed, 4717 insertions, 12087 deletions
diff --git a/data/en_us/ims/2019-08-15/api-docs.php b/data/en_us/ims/2019-08-15/api-docs.php index 43ed24e..9242620 100644 --- a/data/en_us/ims/2019-08-15/api-docs.php +++ b/data/en_us/ims/2019-08-15/api-docs.php @@ -1,136 +1,75 @@ <?php return [ 'version' => '1.0', - 'info' => [ - 'style' => 'RPC', - 'product' => 'Ims', - 'version' => '2019-08-15', - ], + 'info' => ['style' => 'RPC', 'product' => 'Ims', 'version' => '2019-08-15'], 'directories' => [ [ 'children' => [ [ - 'children' => [ - 'GetAccountSummary', - ], + 'children' => ['CreateUser', 'GetUser', 'UpdateUser', 'DeleteUser', 'ListUsers', 'ListUserBasicInfos', 'GetAccountSummary'], + 'type' => 'directory', + 'title' => 'Users', + ], + [ + 'children' => ['CreateLoginProfile', 'GetLoginProfile', 'UpdateLoginProfile', 'DeleteLoginProfile', 'ChangePassword'], + 'type' => 'directory', + 'title' => 'Logon information', + ], + [ + 'children' => ['CreateAccessKey', 'DeleteAccessKey', 'UpdateAccessKey', 'GetAccessKeyLastUsed', 'ListAccessKeys'], + 'type' => 'directory', + 'title' => 'Access keys', + ], + [ + 'children' => ['GetVerificationInfo', 'CreateVirtualMFADevice', 'ListVirtualMFADevices', 'DeleteVirtualMFADevice', 'DisableVirtualMFA', 'BindMFADevice', 'UnbindMFADevice', 'GetAccountMFAInfo', 'GetUserMFAInfo', 'SetVerificationInfo', 'UnbindVerification'], + 'type' => 'directory', + 'title' => 'Multi-factor authentication', + ], + [ + 'children' => ['TagResources', 'UntagResources', 'ListTagResources'], + 'type' => 'directory', + 'title' => 'Tags', + ], + [ + 'children' => ['UpdatePasskey', 'ListPasskeys', 'DeletePasskey'], + 'type' => 'directory', + 'title' => 'Passkeys', + ], + [ + 'children' => ['ListUsersInRecycleBin', 'GetUserInRecycleBin', 'DeleteUserInRecycleBin', 'RestoreUserFromRecycleBin', 'ListAccessKeysInRecycleBin', 'GetAccessKeyInfoInRecycleBin', 'DeleteAccessKeyInRecycleBin', 'RestoreAccessKeyFromRecycleBin'], 'type' => 'directory', - 'title' => 'RAM user', + 'title' => 'Recycle bin', ], ], 'type' => 'directory', 'title' => 'User management', ], [ - 'children' => [ - 'SetUserSsoSettings', - 'GetUserSsoSettings', - 'CreateSAMLProvider', - 'UpdateSAMLProvider', - 'GetSAMLProvider', - 'CreateOIDCProvider', - ], + 'children' => ['CreateGroup', 'GetGroup', 'UpdateGroup', 'DeleteGroup', 'ListGroups', 'AddUserToGroup', 'RemoveUserFromGroup', 'ListUsersForGroup', 'ListGroupsForUser'], + 'type' => 'directory', + 'title' => 'User group management', + ], + [ + 'children' => ['SetUserSsoSettings', 'GetUserSsoSettings', 'CreateSAMLProvider', 'DeleteSAMLProvider', 'UpdateSAMLProvider', 'GetSAMLProvider', 'ListSAMLProviders', 'CreateOIDCProvider', 'GetOIDCProvider', 'UpdateOIDCProvider', 'ListOIDCProviders', 'DeleteOIDCProvider', 'AddClientIdToOIDCProvider', 'RemoveClientIdFromOIDCProvider', 'AddFingerprintToOIDCProvider', 'RemoveFingerprintFromOIDCProvider'], 'type' => 'directory', 'title' => 'SSO management', ], [ - 'children' => [ - 'CreateApplication', - 'GetApplication', - 'UpdateApplication', - 'ListApplications', - ], + 'children' => ['CreateApplication', 'GetApplication', 'UpdateApplication', 'DeleteApplication', 'ListApplications', 'ListPredefinedScopes', 'CreateAppSecret', 'GetAppSecret', 'ListAppSecretIds', 'DeleteAppSecret', 'ProvisionApplication', 'DeprovisionApplication', 'ListApplicationProvisionInfos', 'GetApplicationProvisionInfo', 'ProvisionExternalApplication', 'DeprovisionExternalApplication', 'ListExternalApplications', 'GetExternalApplication'], 'type' => 'directory', 'title' => 'OAuth management', ], [ - 'children' => [ - 'AddClientIdToOIDCProvider', - 'AddFingerprintToOIDCProvider', - 'AddUserToGroup', - 'BindMFADevice', - 'ChangePassword', - 'CreateAccessKey', - 'CreateAppSecret', - 'CreateGroup', - 'CreateLoginProfile', - 'CreateUser', - 'CreateVirtualMFADevice', - 'DeleteAccessKey', - 'DeleteAccessKeyInRecycleBin', - 'DeleteAppSecret', - 'DeleteApplication', - 'DeleteGroup', - 'DeleteLoginProfile', - 'DeleteOIDCProvider', - 'DeletePasskey', - 'DeleteSAMLProvider', - 'DeleteUser', - 'DeleteUserInRecycleBin', - 'DeleteVirtualMFADevice', - 'DeprovisionApplication', - 'DeprovisionExternalApplication', - 'DisableVirtualMFA', - 'GenerateCredentialReport', - 'GenerateGovernanceReport', - 'GetAccessKeyInfoInRecycleBin', - 'GetAccessKeyLastUsed', - 'GetAccountMFAInfo', - 'GetAccountSecurityPracticeReport', - 'GetAppSecret', - 'GetApplicationProvisionInfo', - 'GetCredentialReport', - 'GetDefaultDomain', - 'GetExternalApplication', - 'GetGovernanceItemReport', - 'GetGovernanceReportStatus', - 'GetGroup', - 'GetLoginProfile', - 'GetOIDCProvider', - 'GetPasswordPolicy', - 'GetSecurityPreference', - 'GetUser', - 'GetUserInRecycleBin', - 'GetUserMFAInfo', - 'GetVerificationInfo', - 'ListAccessKeys', - 'ListAccessKeysInRecycleBin', - 'ListAppSecretIds', - 'ListApplicationProvisionInfos', - 'ListExternalApplications', - 'ListGroups', - 'ListGroupsForUser', - 'ListOIDCProviders', - 'ListPasskeys', - 'ListPredefinedScopes', - 'ListRecentGovernanceMetrics', - 'ListSAMLProviders', - 'ListTagResources', - 'ListUserBasicInfos', - 'ListUsers', - 'ListUsersForGroup', - 'ListUsersInRecycleBin', - 'ListVirtualMFADevices', - 'ProvisionApplication', - 'ProvisionExternalApplication', - 'RemoveClientIdFromOIDCProvider', - 'RemoveFingerprintFromOIDCProvider', - 'RemoveUserFromGroup', - 'RestoreAccessKeyFromRecycleBin', - 'RestoreUserFromRecycleBin', - 'SetDefaultDomain', - 'SetPasswordPolicy', - 'SetSecurityPreference', - 'SetVerificationInfo', - 'TagResources', - 'UnbindMFADevice', - 'UnbindVerification', - 'UntagResources', - 'UpdateAccessKey', - 'UpdateGroup', - 'UpdateLoginProfile', - 'UpdateOIDCProvider', - 'UpdatePasskey', - 'UpdateUser', - ], + 'children' => ['SetPasswordPolicy', 'GetPasswordPolicy', 'SetSecurityPreference', 'GetSecurityPreference', 'SetDefaultDomain', 'GetDefaultDomain', 'GetCredentialReport', 'GetAccountSecurityPracticeReport', 'GenerateCredentialReport'], + 'type' => 'directory', + 'title' => 'Security settings', + ], + [ + 'children' => ['GenerateGovernanceReport', 'GetGovernanceReportStatus', 'GetGovernanceItemReport', 'ListRecentGovernanceMetrics'], + 'type' => 'directory', + 'title' => 'Identity and access governance', + ], + [ + 'children' => ['CreateServiceCredential', 'DeleteServiceCredential', 'GetAccessKeyPolicy', 'GetServiceCredential', 'ListServiceCredentials', 'SetAccessKeyPolicy', 'UpdateServiceCredential'], 'title' => 'Others', 'type' => 'directory', ], @@ -140,14 +79,9 @@ ], 'apis' => [ 'AddClientIdToOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Calls AddClientIdToOIDCProvider to add a specified client ID to an OIDC IdP.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -155,144 +89,70 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'create', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'ClientId', 'in' => 'query', - 'schema' => [ - 'description' => 'The client ID that you want to add.'."\n" - ."\n" - .'The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods, (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.``'."\n" - ."\n" - .'The client ID can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => '598469743454717****', - 'title' => '', - ], + 'schema' => ['description' => 'The specified client ID.'."\n" + ."\n" + .'Format: letters, digits, and the special characters `.-_:/` are allowed. The value cannot start with the special characters `.-_:/`.'."\n" + ."\n" + .'Length: up to 128 characters.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => '598469743454717****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B49B8FA7-87FC-5308-AE75-5EC9E36C360A', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B49B8FA7-87FC-5308-AE75-5EC9E36C360A', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '498469743454717****,598469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The issuer URL.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The verification fingerprints of the HTTPS CA certificate. Multiple fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The client IDs. Multiple client IDs are separated by commas (,).', 'type' => 'string', 'example' => '498469743454717****,598469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The time when the OIDC IdP was created. The value is a UNIX timestamp.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The time when the OIDC IdP was modified. The value is a UNIX timestamp.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP is allowed to issue an ID token. If the value of the iat field in the ID token is greater than the current time by more than this value, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B49B8FA7-87FC-5308-AE75-5EC9E36C360A\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****,598469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","errorExample":""},{"type":"xml","example":"<AddClientIdToOIDCProviderResponse>\\n <RequestId>B49B8FA7-87FC-5308-AE75-5EC9E36C360A</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>498469743454717****,598469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</AddClientIdToOIDCProviderResponse>","errorExample":""}]', - 'title' => 'AddClientIdToOIDCProvider', - 'summary' => 'Adds a client ID to an OpenID Connect (OIDC) identity provider (IdP).', + 'title' => 'Add a specified client ID to an OIDC idP', + 'description' => '### Usage notes'."\n" + .'This topic provides an example on how to add client ID `598469743454717****` to the OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddClientIdToOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -300,32 +160,19 @@ 'action' => 'ram:AddClientIdToOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B49B8FA7-87FC-5308-AE75-5EC9E36C360A\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****,598469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","type":"json"}]', ], 'AddFingerprintToOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -333,143 +180,68 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'create', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'Fingerprint', 'in' => 'query', - 'schema' => [ - 'description' => 'The fingerprint of the HTTPS CA certificate.'."\n" - ."\n" - .'The fingerprint can contain letters and digits.'."\n" - ."\n" - .'The fingerprint can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], + 'schema' => ['description' => 'The fingerprint of the HTTPS CA certificate.'."\n" + ."\n" + .'The fingerprint can contain letters and digits.'."\n" + ."\n" + .'The fingerprint can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4B809BBC-0E78-544A-A91A-648926412E3E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4B809BBC-0E78-544A-A91A-648926412E3E', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The name of the OIDC IdP.'."\n", + 'description' => 'The name of the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/OIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '502ef2deeb3c5b13ea4c3d5193629309e231****,902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '498469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/OIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '502ef2deeb3c5b13ea4c3d5193629309e231****,902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).', 'type' => 'string', 'example' => '498469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4B809BBC-0E78-544A-A91A-648926412E3E\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/OIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"502ef2deeb3c5b13ea4c3d5193629309e231****,902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","errorExample":""},{"type":"xml","example":"<AddFingerprintToOIDCProviderResponse>\\n <RequestId>4B809BBC-0E78-544A-A91A-648926412E3E</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/OIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>502ef2deeb3c5b13ea4c3d5193629309e231****,902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>498469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</AddFingerprintToOIDCProviderResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'AddFingerprintToOIDCProvider', 'summary' => 'Adds a fingerprint to an OpenID Connect (OIDC) identity provider (IdP).', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to add the fingerprint `902ef2deeb3c5b13ea4c3d5193629309e231****` to the OIDC IdP named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to add the fingerprint `902ef2deeb3c5b13ea4c3d5193629309e231****` to the OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddFingerprintToOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -477,32 +249,20 @@ 'action' => 'ram:AddFingerprintToOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4B809BBC-0E78-544A-A91A-648926412E3E\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/OIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"502ef2deeb3c5b13ea4c3d5193629309e231****,902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","type":"json"}]', ], 'AddUserToGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Adds a Resource Access Management (RAM) user to a RAM user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -514,34 +274,18 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Test-Team', 'title' => ''], ], ], 'responses' => [ @@ -549,28 +293,25 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<AddUserToGroupResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</AddUserToGroupResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'AddUserToGroup', - 'summary' => 'Adds a Resource Access Management (RAM) user to a RAM user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddUserToGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -579,32 +320,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'BindMFADevice' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -617,9 +343,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7428', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '无法通过测试平台自动生成MFA Code', ], @@ -627,56 +351,28 @@ [ 'name' => 'SerialNumber', 'in' => 'query', - 'schema' => [ - 'description' => 'The serial number of the MFA device.'."\n" - ."\n" - .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to obtain the serial number of the MFA device.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'acs:ram::177242285274****:mfa/device001', - 'title' => '', - ], + 'schema' => ['description' => 'The serial number of the MFA device.'."\n" + ."\n" + .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to obtain the serial number of the MFA device.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'acs:ram::177242285274****:mfa/device001', 'title' => ''], ], [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'AuthenticationCode1', 'in' => 'query', - 'schema' => [ - 'description' => 'The first verification code.'."\n" - ."\n" - .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to create an MFA device and generate a key (value of `Base32StringSeed`). Then, use the key on the Alibaba Cloud app to manually add an MFA device, and obtain the two consecutive verification codes.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => '123456', - 'title' => '', - ], + 'schema' => ['description' => 'The first verification code.'."\n" + ."\n" + .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to create an MFA device and generate a key (value of `Base32StringSeed`). Then, use the key on the Alibaba Cloud app to manually add an MFA device, and obtain the two consecutive verification codes.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => '123456', 'title' => ''], ], [ 'name' => 'AuthenticationCode2', 'in' => 'query', - 'schema' => [ - 'description' => 'The second verification code.'."\n" - ."\n" - .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to create an MFA device and generate a key (value of `Base32StringSeed`). Then, use the key on the Alibaba Cloud app to manually add an MFA device, and obtain the two consecutive verification codes.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => false, - 'example' => '654321', - 'title' => '', - ], + 'schema' => ['description' => 'The second verification code.'."\n" + ."\n" + .'> You can call the [CreateVirtualMFADevice](~~186179~~) operation to create an MFA device and generate a key (value of `Base32StringSeed`). Then, use the key on the Alibaba Cloud app to manually add an MFA device, and obtain the two consecutive verification codes.', 'type' => 'string', 'required' => false, 'docRequired' => false, 'example' => '654321', 'title' => ''], ], ], 'responses' => [ @@ -684,28 +380,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","errorExample":""},{"type":"xml","example":"<BindMFADeviceResponse>\\r\\n <RequestId>B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC</RequestId>\\r\\n</BindMFADeviceResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'BindMFADevice', 'summary' => 'Binds a multi-factor authentication (MFA) device to a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'BindMFADevice'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -714,26 +408,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","type":"json"}]', ], 'ChangePassword' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Changes the password that is used to log on to the console for a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -746,9 +431,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7429', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], 'autoTest' => false, 'notSupportAutoTestReason' => '该API只支持子用户调用，企业级能力验证时无法通过测试平台使用子用户的凭证调用API', ], @@ -756,58 +439,41 @@ [ 'name' => 'OldPassword', 'in' => 'query', - 'schema' => [ - 'description' => 'The old password that is used to log on to the console.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'mypassword', - 'title' => '', - ], + 'schema' => ['description' => 'The old password that is used to log on to the console.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'mypassword', 'title' => ''], ], [ 'name' => 'NewPassword', 'in' => 'query', - 'schema' => [ - 'description' => 'The new password that is used to log on to the console.'."\n" - ."\n" - .'The password must meet the complexity requirements. For more information, see [GetPasswordPolicy](~~186691~~).'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'newpassword', - 'title' => '', - ], + 'schema' => ['description' => 'The new password that is used to log on to the console.'."\n" + ."\n" + .'The password must meet the complexity requirements. For more information, see [GetPasswordPolicy](~~186691~~).', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'newpassword', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<ChangePasswordResponse>\\r\\n\\t<RequestId>04F0F334-1335-436C-A1D7-6C044FE73368</RequestId>\\r\\n</ChangePasswordResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ChangePassword', - 'summary' => 'Changes the password that is used to log on to the console for a Resource Access Management (RAM) user.', - 'description' => '> This operation is available only for RAM users. Before you call this operation, make sure that `AllowUserToChangePassword` in [SetSecurityPreference](~~43765~~) is set to `True`. The value True indicates that RAM users can manage their passwords.'."\n", + 'description' => '> This operation is available only for RAM users. Before you call this operation, make sure that `AllowUserToChangePassword` in [SetSecurityPreference](~~43765~~) is set to `True`. The value True indicates that RAM users can manage their passwords.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ChangePassword'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -816,26 +482,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\"\\n}","type":"json"}]', ], 'CreateAccessKey' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Creates an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -847,86 +504,57 @@ 'operationType' => 'create', 'riskType' => 'high', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram6Y0S22', - ], + 'abilityTreeNodes' => ['FEATUREram6Y0S22'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'If this parameter is empty, an AccessKey pair is created for the current user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'If this parameter is empty, an AccessKey pair is created for the current user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '19DDD9F7-AFCC-4D72-8CBA-CCE5A142E7AB', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '19DDD9F7-AFCC-4D72-8CBA-CCE5A142E7AB', 'title' => ''], 'AccessKey' => [ - 'description' => 'The information about the AccessKey pair.'."\n", + 'description' => 'The information about the AccessKey pair.', 'type' => 'object', 'properties' => [ - 'Status' => [ - 'description' => 'The status of the AccessKey pair. Valid values:'."\n" - ."\n" - .'* Active'."\n" - .'* Inactive'."\n", - 'type' => 'string', - 'example' => 'Active', - 'title' => '', - ], - 'AccessKeySecret' => [ - 'description' => 'The AccessKey secret.'."\n", - 'type' => 'string', - 'example' => 'yourAccessKeySecret', - 'title' => '', - ], - 'AccessKeyId' => [ - 'description' => 'The AccessKey ID.'."\n", - 'type' => 'string', - 'example' => 'yourAccessKeyID', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the AccessKey pair was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-15T08:08:54Z', - 'title' => '', - ], + 'Status' => ['description' => 'The status of the AccessKey pair. Valid values:'."\n" + ."\n" + .'- Active'."\n" + ."\n" + .'- Inactive', 'type' => 'string', 'example' => 'Active', 'title' => ''], + 'AccessKeySecret' => ['description' => 'The AccessKey secret.', 'type' => 'string', 'example' => 'yourAccessKeySecret', 'title' => ''], + 'AccessKeyId' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'example' => 'yourAccessKeyID', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the AccessKey pair was created.', 'type' => 'string', 'example' => '2020-10-15T08:08:54Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"19DDD9F7-AFCC-4D72-8CBA-CCE5A142E7AB\\",\\n \\"AccessKey\\": {\\n \\"Status\\": \\"Active\\",\\n \\"AccessKeySecret\\": \\"yourAccessKeySecret\\",\\n \\"AccessKeyId\\": \\"yourAccessKeyID\\",\\n \\"CreateDate\\": \\"2020-10-15T08:08:54Z\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<CreateAccessKeyResponse>\\r\\n\\t<RequestId>19DDD9F7-AFCC-4D72-8CBA-CCE5A142E7AB</RequestId>\\r\\n\\t<AccessKey>\\r\\n\\t\\t<Status>Active</Status>\\r\\n\\t\\t<AccessKeyId>LTAI4G3HaMmeHpay2gcq****</AccessKeyId>\\r\\n\\t\\t<AccessKeySecret>Y3MSLE6OgizS4qrz5LVFDoyZEL****</AccessKeySecret>\\r\\n\\t\\t<CreateDate>2020-10-15T08:08:54Z</CreateDate>\\r\\n\\t</AccessKey>\\r\\n</CreateAccessKeyResponse>\\r\\n\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'CreateAccessKey', - 'summary' => 'Creates an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateAccessKey'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -935,26 +563,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"19DDD9F7-AFCC-4D72-8CBA-CCE5A142E7AB\\",\\n \\"AccessKey\\": {\\n \\"Status\\": \\"Active\\",\\n \\"AccessKeySecret\\": \\"yourAccessKeySecret\\",\\n \\"AccessKeyId\\": \\"yourAccessKeyID\\",\\n \\"CreateDate\\": \\"2020-10-15T08:08:54Z\\"\\n }\\n}","type":"json"}]', ], 'CreateAppSecret' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Creates an application secret for an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -966,22 +585,13 @@ 'operationType' => 'create', 'riskType' => 'high', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramQ794FD', - ], + 'abilityTreeNodes' => ['FEATUREramQ794FD'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], ], 'responses' => [ @@ -989,59 +599,37 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'EE46FC3C-3BDE-4771-B531-27B7B6EB533D', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'EE46FC3C-3BDE-4771-B531-27B7B6EB533D', 'title' => ''], 'AppSecret' => [ - 'description' => 'The details of the application secret.'."\n", + 'description' => 'The details of the application secret.', 'type' => 'object', 'properties' => [ - 'AppSecretValue' => [ - 'description' => 'The content of the application secret. This value can be used as the client secret for open authorization (OAuth).'."\n", - 'type' => 'string', - 'example' => 'ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****', - 'title' => '', - ], - 'AppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '472457090344041****', - 'title' => '', - ], - 'AppSecretId' => [ - 'description' => 'The ID of the application secret.'."\n", - 'type' => 'string', - 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-26T02:52:31Z', - 'title' => '', - ], + 'AppSecretValue' => ['description' => 'The content of the application secret. This value can be used as the client secret for open authorization (OAuth).', 'type' => 'string', 'example' => 'ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****', 'title' => ''], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'AppSecretId' => ['description' => 'The ID of the application secret.', 'type' => 'string', 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-26T02:52:31Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"EE46FC3C-3BDE-4771-B531-27B7B6EB533D\\",\\n \\"AppSecret\\": {\\n \\"AppSecretValue\\": \\"ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****\\",\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T02:52:31Z\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<CreateAppSecretResponse>\\r\\n\\t<RequestId>EE46FC3C-3BDE-4771-B531-27B7B6EB533D</RequestId>\\r\\n\\t<AppSecret>\\r\\n\\t\\t<AppId>472457090344041****</AppId>\\r\\n\\t\\t<AppSecretValue>ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****</AppSecretValue>\\r\\n\\t\\t<AppSecretId>2efd5004-005c-4f05-83c6-5b1dd176****</AppSecretId>\\r\\n\\t\\t<CreateDate>2020-10-26T02:52:31Z</CreateDate>\\r\\n\\t</AppSecret>\\r\\n</CreateAppSecretResponse>\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'CreateAppSecret', - 'summary' => 'Creates an application secret for an application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateAppSecret'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -1050,27 +638,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EE46FC3C-3BDE-4771-B531-27B7B6EB533D\\",\\n \\"AppSecret\\": {\\n \\"AppSecretValue\\": \\"ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****\\",\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T02:52:31Z\\"\\n }\\n}","type":"json"}]', ], 'CreateApplication' => [ - 'summary' => 'Creates an application.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -1082,189 +659,116 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramV0FSPT', - ], + 'abilityTreeNodes' => ['FEATUREramV0FSPT'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The display name of the application.'."\n" - ."\n" - .'The name can be up to 24 characters in length.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => 'myapp', - ], + 'schema' => ['description' => 'The display name of the application.'."\n" + ."\n" + .'It can be up to 24 characters in length.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'myapp', 'title' => ''], ], [ 'name' => 'AppType', 'in' => 'query', - 'schema' => [ - 'description' => 'The type of the application. Valid values:'."\n" - ."\n" - .'- WebApp: a web application that is based on browser interaction.'."\n" - ."\n" - .'- NativeApp: a native application that runs on an operating system, such as a desktop or mobile operating system.'."\n" - ."\n" - .'- ServerApp: an application that directly accesses Alibaba Cloud services without user logon. Currently, only applications that use the System for Cross-domain Identity Management (SCIM) protocol for user synchronization are supported.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => 'WebApp', - ], + 'schema' => ['description' => 'The type of the application. Valid values:'."\n" + ."\n" + .'- WebApp: a web application that is based on browser interaction.'."\n" + ."\n" + .'- NativeApp: a native application that runs on an operating system, such as a desktop or mobile operating system.'."\n" + ."\n" + .'- ServerApp: an application that directly accesses Alibaba Cloud services without user logon. Currently, only applications that use the System for Cross-domain Identity Management (SCIM) protocol for user synchronization are supported.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'WebApp', 'title' => ''], ], [ 'name' => 'RedirectUris', 'in' => 'query', - 'schema' => [ - 'description' => 'The webhook address.'."\n" - ."\n" - .'To enter multiple webhook addresses, separate them with semicolons (;).', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'https://www.example.com', - ], + 'schema' => ['description' => 'The redirect URL of the application.'."\n" + ."\n" + .'To specify multiple URLs, separate them with semicolons (;).', 'type' => 'string', 'required' => false, 'example' => 'https://www.example.com', 'title' => ''], ], [ 'name' => 'SecretRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether an application key is required. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false'."\n" - ."\n" - .'> * For WebApp and ServerApp applications, this parameter is forcibly set to \\`true\\` and cannot be changed.'."\n" - ."\n" - .'- For NativeApp applications, you can set this parameter to \\`true\\` or \\`false\\`. If you do not set this parameter, the default value is \\`false\\`. Because these applications often run in untrusted environments where application keys cannot be effectively protected, do not set this parameter to \\`true\\` unless necessary. For more information, see [Log on to Alibaba Cloud from a native application](~~93697~~).', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'true', - ], + 'schema' => ['description' => 'Specifies whether a secret is required. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'> * For applications of the WebApp and ServerApp types, this parameter is required and is always set to true.'."\n" + ."\n" + .'- For applications of the NativeApp type, you can set this parameter to true or false. If not specified, the default value is false. Since native applications are public clients and cannot reliably protect secrets, we recommend keeping this false unless a secret is strictly required. For more information, see [Access Alibaba Cloud APIs from a native application](~~93697~~).', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'AccessTokenValidity', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of the access token.'."\n" - ."\n" - .'Valid values: 900 to 10800. Unit: seconds.'."\n" - ."\n" - .'Default value: 3600.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'title' => '', - 'example' => '3600', - ], + 'schema' => ['description' => 'The validity period of the access token.'."\n" + ."\n" + .'Valid values: 900 to 10800. Unit: seconds.'."\n" + ."\n" + .'Default value: 3600.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3600', 'title' => ''], ], [ 'name' => 'RefreshTokenValidity', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of the refresh token.'."\n" - ."\n" - .'Valid values: 7200 to 31536000. Unit: seconds.'."\n" - ."\n" - .'Default value:'."\n" - ."\n" - .'- For NativeApp and ServerApp applications, the default value is 2,592,000 seconds (30 days) if you leave this parameter empty.'."\n" - ."\n" - .'- For WebApp applications, the default value is 7,776,000 seconds (90 days) if you leave this parameter empty.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'title' => '', - 'example' => '2592000', - ], + 'schema' => ['description' => 'The validity period of the refresh token.'."\n" + ."\n" + .'Valid values: 7200 to 31536000. Unit: seconds.'."\n" + ."\n" + .'Default value:'."\n" + ."\n" + .'- If not specified, the default value is 2,592,000 seconds (30 days) for NativeApp and ServerApp applications.'."\n" + ."\n" + .'- If not specified, the default value is 7,776,000 seconds (90 days) for WebApp applications.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '2592000', 'title' => ''], ], [ 'name' => 'PredefinedScopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The scopes of the application.'."\n" - ."\n" - .'For information about the valid values and descriptions of scopes, see [OAuth scopes](~~93693~~). You can also call the [ListPredefinedScopes](~~187206~~) operation to obtain the scopes that are supported by different application types.'."\n" - ."\n" - .'To enter multiple scopes, separate them with semicolons (;).', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'aliuid;profile', - ], + 'schema' => ['description' => 'The scope of application permissions.'."\n" + ."\n" + .'For more information about the application permission scope, see [OAuth overview](~~93693~~). You can also call the [ListPredefinedScopes](~~187206~~) operation to obtain the scopes that are supported by different application types.'."\n" + ."\n" + .'To specify multiple permissions, separate them with semicolons (;).', 'type' => 'string', 'required' => false, 'example' => 'aliuid;profile', 'title' => ''], ], [ 'name' => 'RequiredScopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The required scopes.'."\n" - ."\n" - .'You can specify one or more scopes in `RequiredScopes` as required. When a user grants permissions to the application, the required scopes are selected by default and cannot be deselected.'."\n" - ."\n" - .'To enter multiple scopes, separate them with semicolons (;).'."\n" - ."\n" - .'> If a scope that you specify in `RequiredScopes` is not within the range of `PredefinedScopes`, the required setting for that scope does not take effect.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'aliuid', - ], + 'schema' => ['description' => 'The required permission.'."\n" + ."\n" + .'You can specify one or more permissions for the `RequiredScopes` parameter. When a user grants permissions to the application, the scopes specified in this parameter are pre-selected and cannot be deselected.'."\n" + ."\n" + .'To enter multiple scopes, separate them with semicolons (;).'."\n" + ."\n" + .'> Any scope specified here must also be included in `PredefinedScopes`. Otherwise, the scope will not be set as required.', 'type' => 'string', 'required' => false, 'example' => 'aliuid', 'title' => ''], ], [ 'name' => 'IsMultiTenant', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether the application can be installed by other Alibaba Cloud accounts. Valid values:'."\n" - ."\n" - .'- true: For NativeApp and ServerApp applications, the default value is \\`true\\` if you leave this parameter empty.'."\n" - ."\n" - .'- false: For WebApp applications, the default value is \\`false\\` if you leave this parameter empty.', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'false', - ], + 'schema' => ['description' => 'Specifies whether the application can be installed by other Alibaba Cloud accounts. Valid values:'."\n" + ."\n" + .'- true: If not specified, the default value is true for NativeApp and ServerApp applications.'."\n" + ."\n" + .'- false: If not specified, the default value is false for WebApp applications.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'AppName', 'in' => 'query', - 'schema' => [ - 'description' => 'The application name.'."\n" - ."\n" - .'The name can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).', - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'title' => '', - 'example' => 'myapp', - ], + 'schema' => ['description' => 'The application name.'."\n" + ."\n" + .'It can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'myapp', 'title' => ''], ], [ 'name' => 'ProtocolVersion', 'in' => 'query', - 'schema' => [ - 'type' => 'string', - 'description' => 'The OAuth protocol version of the application. Valid values:'."\n" - ."\n" - .'- `2.0`: OAuth 2.0.'."\n" - ."\n" - .'- `2.1`: OAuth 2.1.'."\n" - ."\n" - .'Default value: `2.0`.', - 'required' => false, - 'title' => '', - 'example' => '2.0', - ], + 'schema' => ['description' => 'The OAuth protocol version of the application. Valid values:'."\n" + ."\n" + .'- `2.0`: OAuth 2.0'."\n" + ."\n" + .'- `2.1`: OAuth 2.1'."\n" + ."\n" + .'Default value: `2.0`.', 'type' => 'string', 'required' => false, 'example' => '2.0', 'title' => ''], ], ], 'responses' => [ @@ -1272,80 +776,36 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', 'title' => ''], 'Application' => [ 'description' => 'The application information.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.', - 'type' => 'string', - 'title' => '', - 'example' => 'myapp', - ], - 'AccessTokenValidity' => [ - 'description' => 'The validity period of the access token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '3600', - ], - 'SecretRequired' => [ - 'description' => 'Indicates whether an application key is required.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account to which the application belongs.', - 'type' => 'string', - 'title' => '', - 'example' => '177242285274****', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was created.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-23T08:06:57Z', - ], - 'AppName' => [ - 'description' => 'The application name.', - 'type' => 'string', - 'title' => '', - 'example' => 'myapp', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], + 'AccessTokenValidity' => ['description' => 'The validity period of the access token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '3600', 'title' => ''], + 'SecretRequired' => ['description' => 'Indicates whether a secret is required.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account to which the application belongs.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was created.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], + 'AppName' => ['description' => 'The application name.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], 'RedirectUris' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'RedirectUri' => [ - 'description' => 'The webhook address.', + 'description' => 'The redirect URL.', 'type' => 'array', - 'items' => [ - 'description' => 'The webhook address.', - 'type' => 'string', - 'title' => '', - 'example' => 'https://www.example.com', - ], + 'items' => ['description' => 'The redirect URL.', 'type' => 'string', 'example' => 'https://www.example.com', 'title' => ''], 'title' => '', + 'example' => '', ], ], - 'description' => '', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the application was last updated.', - 'type' => 'string', + 'description' => 'The redirect URLs.', 'title' => '', - 'example' => '2020-10-23T08:06:57Z', + 'example' => '', ], + 'UpdateDate' => ['description' => 'The time when the application information was last updated.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the application scopes.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -1353,113 +813,71 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the application scopes.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'array', 'items' => [ - 'description' => 'The information about the application scopes.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', - ], - 'Required' => [ - 'description' => 'Indicates whether the scope is required by default when the application is installed. Valid values:'."\n" - ."\n" - .'- true: The scope is required.'."\n" - ."\n" - .'- false: The scope is not required.'."\n" - ."\n" - .'The `openid` scope is required by default.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'Name' => [ - 'description' => 'The name of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'openid', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', 'title' => ''], + 'Required' => ['description' => 'Indicates whether the permission is automatically selected by default when you install the application. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'`openid` is required by default.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'title' => '', + 'example' => '', ], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The information about the permissions that are granted on the application.', 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AppId' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'title' => '', - 'example' => '472457090344041****', - ], - 'RefreshTokenValidity' => [ - 'description' => 'The validity period of the refresh token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '7776000', - ], - 'IsMultiTenant' => [ - 'description' => 'Indicates whether the application can be installed by other Alibaba Cloud accounts.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AppType' => [ - 'description' => 'The application type.', - 'type' => 'string', - 'title' => '', - 'example' => 'WebApp', - ], - 'ProtocolVersion' => [ - 'type' => 'string', - 'description' => 'The OAuth protocol version of the application. Valid values:'."\n" - ."\n" - .'- `2.0`: OAuth 2.0.'."\n" - ."\n" - .'- `2.1`: OAuth 2.1.', - 'title' => '', - 'example' => '2.0', - ], + 'AppId' => ['description' => 'The application ID.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'RefreshTokenValidity' => ['description' => 'The validity period of the refresh token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '7776000', 'title' => ''], + 'IsMultiTenant' => ['description' => 'Indicates whether the application can be installed by using other Alibaba Cloud accounts.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AppType' => ['description' => 'The application type.', 'type' => 'string', 'example' => 'WebApp', 'title' => ''], + 'ProtocolVersion' => ['description' => 'The OAuth protocol version of the application. Valid values:'."\n" + ."\n" + .'- `2.0`: OAuth 2.0'."\n" + ."\n" + .'- `2.1`: OAuth 2.1', 'type' => 'string', 'example' => '2.0', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The response parameters.', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"myapp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Required\\": true,\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', 'title' => 'CreateApplication', + 'summary' => 'Creates an application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateApplication', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateApplication'], ], ], 'ramActions' => [ @@ -1470,26 +888,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"myapp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Required\\": true,\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', ], 'CreateGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Creates a Resource Access Management (RAM) user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -1501,50 +910,29 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramY5X059', - ], + 'abilityTreeNodes' => ['FEATUREramY5X059'], ], 'parameters' => [ [ 'name' => 'DisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The display name of the RAM user group.'."\n" - ."\n" - .'The name can be up to 24 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The display name of the RAM user group.'."\n" + ."\n" + .'The name can be up to 24 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'Dev-Team', 'title' => ''], ], [ 'name' => 'Comments', 'in' => 'query', - 'schema' => [ - 'description' => 'The description.'."\n" - ."\n" - .'The description can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The description.'."\n" + ."\n" + .'The description can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => '开发团队', 'title' => ''], ], [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group. You must specify this parameter.'."\n" - ."\n" - .'The name can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group. You must specify this parameter.'."\n" + ."\n" + .'The name can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Dev-Team', 'title' => ''], ], ], 'responses' => [ @@ -1553,70 +941,38 @@ 'type' => 'object', 'properties' => [ 'Group' => [ - 'description' => 'The information about the RAM user group.'."\n", + 'description' => 'The information about the RAM user group.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'GroupId' => [ - 'description' => 'The ID of the RAM user group.'."\n", - 'type' => 'string', - 'example' => '740317625433843****', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T16:15:17Z', - 'title' => '', - ], - 'GroupName' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T16:15:17Z', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user group.', 'type' => 'string', 'example' => 'Dev-Team', 'title' => ''], + 'GroupId' => ['description' => 'The ID of the RAM user group.', 'type' => 'string', 'example' => '740317625433843****', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time.', 'type' => 'string', 'example' => '2020-10-19T16:15:17Z', 'title' => ''], + 'GroupName' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'example' => 'Dev-Team', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => '开发团队', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-19T16:15:17Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '3C38192B-7BF8-45DA-8F0A-E670EA51426C', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '3C38192B-7BF8-45DA-8F0A-E670EA51426C', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Dev-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-19T16:15:17Z\\",\\n \\"GroupName\\": \\"Dev-Team\\",\\n \\"Comments\\": \\"Dev-Team\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"3C38192B-7BF8-45DA-8F0A-E670EA51426C\\"\\n}","errorExample":""},{"type":"xml","example":"","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'CreateGroup', - 'summary' => 'Creates a Resource Access Management (RAM) user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -1625,27 +981,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Dev-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-19T16:15:17Z\\",\\n \\"GroupName\\": \\"Dev-Team\\",\\n \\"Comments\\": \\"开发团队\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"3C38192B-7BF8-45DA-8F0A-E670EA51426C\\"\\n}","type":"json"}]', ], 'CreateLoginProfile' => [ 'summary' => 'Creates a logon configuration for a Resource Access Management (RAM) user.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -1657,81 +1003,47 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'Password', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon password for the RAM user.'."\n" - ."\n" - .'The password must meet the password strength requirements.', - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'mypassword', - 'title' => '', - ], + 'schema' => ['description' => 'The logon password for the RAM user.'."\n" + ."\n" + .'The password must meet the password policy.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'mypassword', 'title' => ''], ], [ 'name' => 'PasswordResetRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether the RAM user must reset the password at the next logon. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether the RAM user must reset the password at the next logon. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'MFABindRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether the RAM user must enable multi-factor authentication (MFA). Valid values:'."\n" - ."\n" - .'- true: MFA is required. The RAM user must bind an MFA device at the next logon.'."\n" - ."\n" - .'- false (default): MFA is not required.', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether the RAM user must enable multi-factor authentication (MFA). Valid values:'."\n" + ."\n" + .'- true: MFA is required. The RAM user must bind an MFA device at the next logon.'."\n" + ."\n" + .'- false (default): MFA is not required.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'Status', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to enable password-based logon for the console. Valid values:'."\n" - ."\n" - .'- Active (default): Enables logon.'."\n" - ."\n" - .'- Inactive: Disables logon.', - 'type' => 'string', - 'required' => false, - 'example' => 'Active', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether to enable password-based logon to the console. Valid values:'."\n" + ."\n" + .'- Active (default): Enable'."\n" + ."\n" + .'- Inactive: Disable', 'type' => 'string', 'required' => false, 'example' => 'Active', 'title' => ''], ], ], 'responses' => [ @@ -1739,60 +1051,25 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '29CB303C-1F05-43A6-A6BC-EBC5A797F8DB', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '29CB303C-1F05-43A6-A6BC-EBC5A797F8DB', 'title' => ''], 'LoginProfile' => [ - 'description' => 'The logon information for the console.', + 'description' => 'The console logon settings of the RAM user.', 'type' => 'object', 'properties' => [ - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'Status' => [ - 'description' => 'Indicates whether password-based logon for the console is enabled or disabled.', - 'type' => 'string', - 'example' => 'Active', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the logon configuration was last updated.', - 'type' => 'string', - 'example' => '2020-10-14T03:47:51Z', - 'title' => '', - ], - 'PasswordResetRequired' => [ - 'description' => 'Indicates whether the RAM user must reset the password at the next logon.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MFABindRequired' => [ - 'description' => 'Indicates whether the RAM user is required to enable MFA.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'PasswordStatus' => [ - 'description' => 'The status of the initial password. This password is set when a logon configuration is created or when console logon is re-enabled.'."\n" - ."\n" - .'Valid values'."\n" - ."\n" - .'- "NotInitial": The password is not an initial password.'."\n" - ."\n" - .'- "InitialValid": The initial password is valid.'."\n" - ."\n" - .'- "InitialExpired": The initial password has expired.', - 'type' => 'string', - 'example' => 'NotInitial', - 'title' => '', - ], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'Status' => ['description' => 'Indicates whether password-based logon for the console is enabled or disabled.', 'type' => 'string', 'example' => 'Active', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the logon configuration was last updated.', 'type' => 'string', 'example' => '2020-10-14T03:47:51Z', 'title' => ''], + 'PasswordResetRequired' => ['description' => 'Indicates whether the RAM user must reset the password at the next logon.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MFABindRequired' => ['description' => 'Indicates whether the RAM user is required to enable MFA.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'PasswordStatus' => ['description' => 'The status of the initial password. This password is set when a logon configuration is created or when console logon is re-enabled.'."\n" + ."\n" + .'Valid values'."\n" + ."\n" + .'- "NotInitial": The password is not an initial password.'."\n" + ."\n" + .'- "InitialValid": The initial password is valid.'."\n" + ."\n" + .'- "InitialExpired": The initial password has expired.', 'type' => 'string', 'example' => 'NotInitial', 'title' => ''], ], 'title' => '', 'example' => '', @@ -1804,9 +1081,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"29CB303C-1F05-43A6-A6BC-EBC5A797F8DB\\",\\n \\"LoginProfile\\": {\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Status\\": \\"Active\\",\\n \\"UpdateDate\\": \\"2020-10-14T03:47:51Z\\",\\n \\"PasswordResetRequired\\": false,\\n \\"MFABindRequired\\": false,\\n \\"PasswordStatus\\": \\"NotInitial\\"\\n }\\n}","type":"json"}]', 'title' => 'CreateLoginProfile', 'requestParamsDescription' => ' ', @@ -1815,12 +1090,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateLoginProfile', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateLoginProfile'], ], ], 'ramActions' => [ @@ -1831,26 +1101,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], ], 'CreateOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Creates an OpenID Connect (OIDC) identity provider (IdP) to configure a trust relationship between Alibaba Cloud and an external IdP. This topic provides an example on how to create an IdP named TestOIDCProvider to configure a trust relationship between the external IdP Okta and Alibaba Cloud.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -1858,217 +1118,117 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'create', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n" - ."\n" - .'The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are `periods, (.), hyphens (-), and underscores (_)`.``'."\n" - ."\n" - .'The name can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.'."\n" + ."\n" + .'The name can contain letters, digits, and special characters and cannot start or end with the special characters. The special characters are `periods, (.), hyphens (-), and underscores (_)`.\\`\\`'."\n" + ."\n" + .'The name can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'IssuerUrl', 'in' => 'query', - 'schema' => [ - 'description' => 'The URL of the issuer, which is provided by the external IdP. The URL of the issuer must be unique within an Alibaba Cloud account.'."\n" - ."\n" - .'The URL of the issuer must start with `https` and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (`?`) or logon information that is identified by at signs (`@`). The URL cannot be a fragment URL that contains number signs (`#`).'."\n" - ."\n" - .'The URL can be up to 255 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], + 'schema' => ['description' => 'The URL of the issuer, which is provided by the external IdP. The URL of the issuer must be unique within an Alibaba Cloud account.'."\n" + ."\n" + .'The URL of the issuer must start with `https` and be in the valid URL format. The URL cannot contain query parameters that follow a question mark (`?`) or logon information that is identified by at signs (`@`). The URL cannot be a fragment URL that contains number signs (`#`).'."\n" + ."\n" + .'The URL can be up to 255 characters in length.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'https://xxxxxx.example.com', 'title' => ''], ], [ 'name' => 'Description', 'in' => 'query', - 'schema' => [ - 'description' => 'The description of the OIDC IdP.'."\n" - ."\n" - .'The description can be up to 256 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'This is an OIDC Provider.', - 'title' => '', - ], + 'schema' => ['description' => 'The description of the OIDC IdP.'."\n" + ."\n" + .'The description can be up to 256 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'This is an OIDC Provider.', 'title' => ''], ], [ 'name' => 'ClientIds', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the client, which is provided by the external IdP. If you want to specify multiple client IDs, separate the client IDs with commas (,).'."\n" - ."\n" - .'The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.``'."\n" - ."\n" - .'The client ID can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '498469743454717****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the client, which is provided by the external IdP. If you want to specify multiple client IDs, separate the client IDs with commas (,).'."\n" + ."\n" + .'The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.\\`\\`'."\n" + ."\n" + .'The client ID can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => '498469743454717****', 'title' => ''], ], [ 'name' => 'Fingerprints', 'in' => 'query', - 'schema' => [ - 'description' => 'The fingerprint of the HTTPS CA certificate, which is provided by the external IdP. If you want to specify multiple fingerprints, separate the fingerprints with commas (,).'."\n" - ."\n" - .'The fingerprint can contain letters and digits.'."\n" - ."\n" - .'The fingerprint can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], + 'schema' => ['description' => 'The fingerprint of the HTTPS CA certificate, which is provided by the external IdP. If you want to specify multiple fingerprints, separate the fingerprints with commas (,).'."\n" + ."\n" + .'The fingerprint can contain letters and digits.'."\n" + ."\n" + .'The fingerprint can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], ], [ 'name' => 'IssuanceLimitTime', 'in' => 'query', - 'schema' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'required' => false, - 'example' => '6', - 'title' => '', - ], + 'schema' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '6', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '64B11B41-636D-51E3-A39B-C8703CD2218C', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '64B11B41-636D-51E3-A39B-C8703CD2218C', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is an OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate.'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client.'."\n", - 'type' => 'string', - 'example' => '498469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '6', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is an OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate.', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client.', 'type' => 'string', 'example' => '498469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '6', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"64B11B41-636D-51E3-A39B-C8703CD2218C\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Description\\": \\"This is an OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636613763000\\",\\n \\"IssuanceLimitTime\\": 6\\n }\\n}","errorExample":""},{"type":"xml","example":"<CreateOIDCProviderResponse>\\n <RequestId>64B11B41-636D-51E3-A39B-C8703CD2218C</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-11T06:56:03Z</UpdateDate>\\n <Description>This is an OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>498469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636613763000</GmtModified>\\n </OIDCProvider>\\n</CreateOIDCProviderResponse>","errorExample":""}]', 'title' => 'CreateOIDCProvider', - 'summary' => 'Creates an OpenID Connect (OIDC) identity provider (IdP) to configure a trust relationship between Alibaba Cloud and an external IdP. This topic provides an example on how to create an IdP named TestOIDCProvider to configure a trust relationship between the external IdP Okta and Alibaba Cloud.', 'description' => '### [](#)Prerequisites'."\n" ."\n" .'Before you call this operation, make sure that the information such as the URL of the issuer, the fingerprints of HTTPS certificate authority (CA) certificates, and the client IDs are obtained from an external IdP, such as Google Workspace or Okta.'."\n" ."\n" .'### [](#)Limits'."\n" ."\n" - .'* You can create a maximum of 100 OIDC IdPs in an Alibaba Cloud account.'."\n" - .'* You can add a maximum of 50 client IDs to an OIDC IdP.'."\n" - .'* You can add a maximum of five fingerprints to an OIDC IdP.'."\n" + .'- You can create a maximum of 100 OIDC IdPs in an Alibaba Cloud account.'."\n" + ."\n" + .'- You can add a maximum of 50 client IDs to an OIDC IdP.'."\n" + ."\n" + .'- You can add a maximum of five fingerprints to an OIDC IdP.'."\n" ."\n" .'### [](#)Operation description'."\n" ."\n" - .'This topic provides an example on how to create an IdP named `TestOIDCProvider` to configure a trust relationship between the external IdP and Alibaba Cloud.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to create an IdP named `TestOIDCProvider` to configure a trust relationship between the external IdP and Alibaba Cloud.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -2076,33 +1236,20 @@ 'action' => 'ram:CreateOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"64B11B41-636D-51E3-A39B-C8703CD2218C\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Description\\": \\"This is an OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636613763000\\",\\n \\"IssuanceLimitTime\\": 6\\n }\\n}","type":"json"}]', ], 'CreateSAMLProvider' => [ 'summary' => 'Creates an identity provider (IdP) for role-based single sign-on (SSO).', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2114,65 +1261,37 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram7YYMOK', - ], + 'abilityTreeNodes' => ['FEATUREram7YYMOK'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'SAMLProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The IdP name.'."\n" - ."\n" - .'It can be up to 128 characters in length, and can contain letters, digits, `periods (.), hyphens (-), and underscores (_)`. The name cannot start or end with `periods (.), hyphens (-), or underscores (_)`.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test-provider', - 'title' => '', - ], + 'schema' => ['description' => 'The IdP name.'."\n" + ."\n" + .'It can be up to 128 characters in length, and can contain letters, digits, `periods (.), hyphens (-), and underscores (_)`. The name cannot start or end with `periods (.), hyphens (-), or underscores (_)`.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test-provider', 'title' => ''], ], [ 'name' => 'Description', 'in' => 'query', - 'schema' => [ - 'description' => 'The IdP escription.', - 'type' => 'string', - 'required' => false, - 'example' => 'This is a provider.', - 'title' => '', - ], + 'schema' => ['description' => 'The IdP escription.', 'type' => 'string', 'required' => false, 'example' => 'This is a provider.', 'title' => ''], ], [ 'name' => 'EncodedSAMLMetadataDocument', 'in' => 'query', - 'schema' => [ - 'description' => 'The metadata file, which is Base64-encoded.'."\n" - ."\n" - .'The file is provided by an IdP that supports Security Assertion Markup Language (SAML) 2.0.', - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'PD94bWwgdmVy****', - 'title' => '', - ], + 'schema' => ['description' => 'The metadata file, which is Base64-encoded.'."\n" + ."\n" + .'The file is provided by an IdP that supports Security Assertion Markup Language (SAML) 2.0.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'PD94bWwgdmVy****', 'title' => ''], ], [ 'name' => 'AuthnSignAlgo', 'in' => 'query', - 'schema' => [ - 'description' => 'The supported signature algorithm. Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1 (default)', - 'type' => 'string', - 'required' => false, - 'example' => 'rsa-sha1', - 'title' => '', - ], + 'schema' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1 (default)', 'type' => 'string', 'required' => false, 'example' => 'rsa-sha1', 'title' => ''], ], ], 'responses' => [ @@ -2181,56 +1300,21 @@ 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'E5EDDFD2-3654-4F9F-9780-4AE7D81823EF', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'E5EDDFD2-3654-4F9F-9780-4AE7D81823EF', 'title' => ''], 'SAMLProvider' => [ 'description' => 'The information about the IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the information was last updated. It is displayed in UTC.', - 'type' => 'string', - 'example' => '2020-10-22T02:51:20Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The IdP description.', - 'type' => 'string', - 'example' => 'This is a provider.', - 'title' => '', - ], - 'SAMLProviderName' => [ - 'description' => 'The IdP name.', - 'type' => 'string', - 'example' => 'test-provider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the information was created. It is displayed in UTC.', - 'type' => 'string', - 'example' => '2020-10-22T02:37:05Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the IdP.', - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', - 'title' => '', - ], - 'AuthnSignAlgo' => [ - 'description' => 'The supported signature algorithm. Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1 (default)', - 'type' => 'string', - 'example' => 'rsa-sha1', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the information was last updated. It is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-22T02:51:20Z', 'title' => ''], + 'Description' => ['description' => 'The IdP description.', 'type' => 'string', 'example' => 'This is a provider.', 'title' => ''], + 'SAMLProviderName' => ['description' => 'The IdP name.', 'type' => 'string', 'example' => 'test-provider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the information was created. It is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-22T02:37:05Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', 'title' => ''], + 'AuthnSignAlgo' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1 (default)', 'type' => 'string', 'example' => 'rsa-sha1', 'title' => ''], ], 'title' => '', 'example' => '', @@ -2241,9 +1325,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], @@ -2256,12 +1338,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateSAMLProvider', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateSAMLProvider'], ], ], 'ramActions' => [ @@ -2272,26 +1349,117 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], - 'CreateUser' => [ - 'methods' => [ - 'post', - 'get', + 'CreateServiceCredential' => [ + 'summary' => 'Creates a service credential for a Resource Access Management (RAM) user in a specified cloud service.', + 'path' => '', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], ], - 'schemes' => [ - 'http', - 'https', + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'create', 'riskType' => 'high', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'allowEmptyValue' => false, + 'schema' => ['title' => '', 'description' => 'The logon name of the RAM user.'."\n" + .'If this parameter is left empty, a service credential is created for the current user by default.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com'], + ], + [ + 'name' => 'ServiceName', + 'in' => 'query', + 'allowEmptyValue' => false, + 'schema' => ['title' => '', 'description' => 'The Alibaba Cloud service name.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'xxx.aliyuncs.com'], + ], + [ + 'name' => 'ServiceCredentialName', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The service credential name.'."\n" + .'The name must be 1 to 128 characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (_).', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'yourServiceCredentialName'], + ], + [ + 'name' => 'CredentialAgeDays', + 'in' => 'query', + 'allowEmptyValue' => false, + 'schema' => ['title' => '', 'description' => 'The expiration time of the service credential, in days.'."\n" + .'Valid values: 1 to 36600.'."\n" + .'If this parameter is not specified, the service credential is permanently valid.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '30'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => '', + 'description' => '', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '81313F5E-3C85-478F-BCC9-E1B70E4556DB'], + 'ServiceCredential' => [ + 'title' => '', + 'description' => 'The service credential information.', + 'type' => 'object', + 'properties' => [ + 'ServiceName' => ['title' => '', 'description' => 'The Alibaba Cloud service name.', 'type' => 'string', 'example' => 'xxx.aliyuncs.com'], + 'UserPrincipalName' => ['title' => '', 'description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com'], + 'ServiceCredentialName' => ['title' => '', 'description' => 'The service credential name.', 'type' => 'string', 'example' => 'yourServiceCredentialName'], + 'ServiceCredentialId' => ['title' => '', 'description' => 'The service credential ID.', 'type' => 'string', 'example' => 'SC*************'], + 'CreateTime' => ['title' => '', 'description' => 'The time when the service credential was created.', 'type' => 'string', 'example' => '2026-01-01T10:05:24Z'], + 'ExpirationTime' => ['title' => '', 'description' => 'The expiration time of the service credential.'."\n" + .'This field is not returned for permanently valid service credentials.', 'type' => 'string', 'example' => '2026-02-01T10:05:24Z'], + 'Status' => [ + 'title' => '', + 'description' => 'The status of the service credential.', + 'type' => 'string', + 'enum' => ['Active', 'Inactive', 'Expired'], + 'example' => 'Active', + ], + 'ServiceCredentialSecret' => ['title' => '', 'description' => 'The secret of the service credential.', 'type' => 'string', 'example' => 'yourServiceCredentialSecret'], + ], + 'example' => '', + ], + ], + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Create a service credential', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], + 'ramActions' => [ + [ + 'operationType' => 'create', + 'ramAction' => [ + 'action' => 'ram:CreateServiceCredential', + 'authLevel' => 'resource', + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], + ], + ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"81313F5E-3C85-478F-BCC9-E1B70E4556DB\\",\\n \\"ServiceCredential\\": {\\n \\"ServiceName\\": \\"xxx.aliyuncs.com\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"ServiceCredentialName\\": \\"yourServiceCredentialName\\",\\n \\"ServiceCredentialId\\": \\"SC*************\\",\\n \\"CreateTime\\": \\"2026-01-01T10:05:24Z\\",\\n \\"ExpirationTime\\": \\"2026-02-01T10:05:24Z\\",\\n \\"Status\\": \\"Active\\",\\n \\"ServiceCredentialSecret\\": \\"yourServiceCredentialSecret\\"\\n }\\n}","type":"json"}]', + 'translator' => 'machine', + ], + 'CreateUser' => [ + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2303,9 +1471,7 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramJI77QT', - ], + 'abilityTreeNodes' => ['FEATUREramJI77QT'], ], 'parameters' => [ [ @@ -2316,69 +1482,44 @@ ."\n" .'The name is in the format of `<username>@<AccountAlias>.onaliyun.com`. `<username>` indicates the name of the RAM user. `<AccountAlias>.onaliyun.com` indicates the default domain name. For more information about how to query the default domain name, see [GetDefaultDomain](~~186720~~).'."\n" ."\n" - .'The value of `UserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.'."\n", + .'The value of `UserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.', + 'enumValueTitles' => [], 'type' => 'string', 'required' => true, 'docRequired' => true, - 'enumValueTitles' => [], - 'example' => 'test@example.onaliyun.com', + 'example' => 'Test@example.onaliyun.com', 'title' => '', ], ], [ 'name' => 'DisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The display name of the RAM user.'."\n" - ."\n" - .'The name must be 1 to 24 characters in length.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test', - 'title' => '', - ], + 'schema' => ['description' => 'The display name of the RAM user.'."\n" + ."\n" + .'The name must be 1 to 24 characters in length.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test', 'title' => ''], ], [ 'name' => 'MobilePhone', 'in' => 'query', - 'schema' => [ - 'description' => 'The mobile number of the RAM user.'."\n" - ."\n" - .'Format: Country code-Mobile phone number.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '86-1868888****', - 'title' => '', - ], + 'schema' => ['description' => 'The mobile number of the RAM user.'."\n" + ."\n" + .'Format: Country code-Mobile phone number.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'required' => false, 'example' => '86-1868888****', 'title' => ''], ], [ 'name' => 'Email', 'in' => 'query', - 'schema' => [ - 'description' => 'The email address of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'alice@example.com', - 'title' => '', - ], + 'schema' => ['description' => 'The email address of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'required' => false, 'example' => 'alice@example.com', 'title' => ''], ], [ 'name' => 'Comments', 'in' => 'query', - 'schema' => [ - 'description' => 'The description.'."\n" - ."\n" - .'The description must be 1 to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], + 'schema' => ['description' => 'The description.'."\n" + ."\n" + .'The description must be 1 to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'This is a cloud computing engineer.', 'title' => ''], ], [ 'name' => 'Tag', @@ -2386,172 +1527,106 @@ 'style' => 'repeatList', 'schema' => [ 'title' => '', - 'description' => 'The tags. You can specify up to 20 tags.'."\n", + 'description' => 'The tags. You can specify up to 20 tags.', 'type' => 'array', 'items' => [ - 'description' => 'The tag.'."\n", + 'description' => 'The tag.', 'type' => 'object', 'properties' => [ - 'Key' => [ - 'title' => '', - 'description' => 'The key of the tag.'."\n" - ."\n" - .'The tag key cannot be an empty string. The tag key can be up to 128 characters in length and cannot start with `acs:` or `aliyun`. The tag key cannot contain `http://` or `https://`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'operator', - ], - 'Value' => [ - 'title' => '', - 'description' => 'The value of the tag.'."\n" - ."\n" - .'The tag value can be an empty string. The tag value can be up to 128 characters in length. The tag value cannot start with `acs:` or contain `http://` or `https://`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'alice', - ], + 'Key' => ['description' => 'The key of the tag.'."\n" + ."\n" + .'The tag key cannot be an empty string. The tag key can be up to 128 characters in length and cannot start with `acs:` or `aliyun`. The tag key cannot contain `http://` or `https://`.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'operator'], + 'Value' => ['description' => 'The value of the tag.'."\n" + ."\n" + .'The tag value can be an empty string. The tag value can be up to 128 characters in length. The tag value cannot start with `acs:` or contain `http://` or `https://`.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'alice'], ], 'required' => false, 'title' => '', + 'example' => '', ], 'required' => false, 'maxItems' => 21, + 'example' => '', ], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM user.'."\n", + 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'Email' => [ - 'description' => 'The email address of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => 'alice@example.com', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the information about the RAM user was updated.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'MobilePhone' => [ - 'description' => 'The mobile phone number of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => '86-1868888****', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], - 'LastLoginDate' => [ - 'description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the RAM user was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'ProvisionType' => [ - 'description' => 'The source of the RAM user. Valid values:'."\n" - ."\n" - .'* Manual: The RAM user is manually created in the RAM console.'."\n" - .'* SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" - .'* CloudSSO: The RAM user is mapped from a CloudSSO user.'."\n", - 'type' => 'string', - 'example' => 'Manual', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'Email' => ['description' => 'The email address of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => 'alice@example.com', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the information about the RAM user was updated.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'MobilePhone' => ['description' => 'The mobile phone number of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => '86-1868888****', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => 'This is a cloud computing engineer.', 'title' => ''], + 'LastLoginDate' => ['description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the RAM user was created.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'ProvisionType' => ['description' => 'The source of the RAM user. Valid values:'."\n" + ."\n" + .'- Manual: The RAM user is manually created in the RAM console.'."\n" + ."\n" + .'- SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" + ."\n" + .'- CloudSSO: The RAM user is mapped from a CloudSSO user.', 'type' => 'string', 'example' => 'Manual', 'title' => ''], 'Tags' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'Tag' => [ - 'description' => 'The tag value.'."\n", - 'title' => '', + 'description' => 'The tag value.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'TagKey' => [ - 'description' => 'The tag key.'."\n", - 'type' => 'string', - 'example' => 'operator', - 'title' => '', - ], - 'TagValue' => [ - 'description' => 'The tag value.'."\n", - 'type' => 'string', - 'example' => 'alice', - 'title' => '', - ], + 'TagKey' => ['description' => 'The tag key.', 'type' => 'string', 'example' => 'operator', 'title' => ''], + 'TagValue' => ['description' => 'The tag value.', 'type' => 'string', 'example' => 'alice', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '2BB8C44A-2862-4922-AD43-03924749173B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '2BB8C44A-2862-4922-AD43-03924749173B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"test\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"Manual\\",\\n \\"Tags\\": {\\n \\"Tag\\": [\\n {\\n \\"TagKey\\": \\"operator\\",\\n \\"TagValue\\": \\"alice\\"\\n }\\n ]\\n }\\n },\\n \\"RequestId\\": \\"2BB8C44A-2862-4922-AD43-03924749173B\\"\\n}","errorExample":""},{"type":"xml","example":"<CreateUserResponse>\\n <User>\\n <DisplayName>test</DisplayName>\\n <UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\n <Email>alice@example.com</Email>\\n <UpdateDate>2020-10-12T09:12:00Z</UpdateDate>\\n <MobilePhone>86-1868888****</MobilePhone>\\n <UserId>20732900249392****</UserId>\\n <Comments>This is a cloud computing engineer.</Comments>\\n <LastLoginDate>2020-10-12T09:12:00Z</LastLoginDate>\\n <CreateDate>2020-10-12T09:12:00Z</CreateDate>\\n <ProvisionType>Manual</ProvisionType>\\n <Tags>\\n <TagKey>operator</TagKey>\\n <TagValue>alice</TagValue>\\n </Tags>\\n </User>\\n <RequestId>2BB8C44A-2862-4922-AD43-03924749173B</RequestId>\\n</CreateUserResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'CreateUser', 'summary' => 'Creates a RAM user.', - 'description' => 'This topic provides an example on how to create a RAM user named `test`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateUser'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -2560,26 +1635,19 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"test\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"Manual\\",\\n \\"Tags\\": {\\n \\"Tag\\": [\\n {\\n \\"TagKey\\": \\"operator\\",\\n \\"TagValue\\": \\"alice\\"\\n }\\n ]\\n }\\n },\\n \\"RequestId\\": \\"2BB8C44A-2862-4922-AD43-03924749173B\\"\\n}","type":"json"}]', + 'description' => 'This topic provides an example on how to create a RAM user named `test`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', ], 'CreateVirtualMFADevice' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Creates a virtual multi-factor authentication (MFA) device.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2591,24 +1659,15 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], ], 'parameters' => [ [ 'name' => 'VirtualMFADeviceName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the MFA device.'."\n" - ."\n" - .'The name must be 1 to 64 characters in length and can contain letters, digits, and hyphens (-).'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'device001', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the MFA device.'."\n" + ."\n" + .'The name must be 1 to 64 characters in length and can contain letters, digits, and hyphens (-).', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'device001', 'title' => ''], ], ], 'responses' => [ @@ -2617,52 +1676,35 @@ 'type' => 'object', 'properties' => [ 'VirtualMFADevice' => [ - 'description' => 'The information about the MFA device.'."\n", + 'description' => 'The information about the MFA device.', 'type' => 'object', 'properties' => [ - 'SerialNumber' => [ - 'description' => 'The serial number of the MFA device.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:mfa/device001', - 'title' => '', - ], - 'QRCodePNG' => [ - 'description' => 'The Base64-encoded QR code of the key.'."\n", - 'type' => 'string', - 'example' => 'YXNkZmFzZDlmeW5hc2Q5OGZoODd4bXJmcThhaGU5aSBmYXNkZiBzYWRmIGFGIDRxd2VjIGEgdHEz****', - 'title' => '', - ], - 'Base32StringSeed' => [ - 'description' => 'The key of the MFA device.'."\n", - 'type' => 'string', - 'example' => 'LD3CJ23Z2VGEX6R7ZTQCOA4XL2KODS5PKH7442NLKYX2PVHSHYB7UT3TS5HA****', - 'title' => '', - ], + 'SerialNumber' => ['description' => 'The serial number of the MFA device.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:mfa/device001', 'title' => ''], + 'QRCodePNG' => ['description' => 'The Base64-encoded QR code of the key.', 'type' => 'string', 'example' => 'YXNkZmFzZDlmeW5hc2Q5OGZoODd4bXJmcThhaGU5aSBmYXNkZiBzYWRmIGFGIDRxd2VjIGEgdHEz****', 'title' => ''], + 'Base32StringSeed' => ['description' => 'The key of the MFA device.', 'type' => 'string', 'example' => 'LD3CJ23Z2VGEX6R7ZTQCOA4XL2KODS5PKH7442NLKYX2PVHSHYB7UT3TS5HA****', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'C609CC97-10FE-43EB-BE32-BDC219D8F1E4', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'C609CC97-10FE-43EB-BE32-BDC219D8F1E4', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"VirtualMFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::177242285274****:mfa/device001\\",\\n \\"QRCodePNG\\": \\"YXNkZmFzZDlmeW5hc2Q5OGZoODd4bXJmcThhaGU5aSBmYXNkZiBzYWRmIGFGIDRxd2VjIGEgdHEz****\\",\\n \\"Base32StringSeed\\": \\"LD3CJ23Z2VGEX6R7ZTQCOA4XL2KODS5PKH7442NLKYX2PVHSHYB7UT3TS5HA****\\"\\n },\\n \\"RequestId\\": \\"C609CC97-10FE-43EB-BE32-BDC219D8F1E4\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<CreateVirtualMFADeviceResponse>\\r\\n\\t<VirtualMFADevice>\\r\\n\\t\\t<SerialNumber>acs:ram::177242285274****:mfa/device001</SerialNumber>\\r\\n\\t\\t<QRCodePNG>YXNkZmFzZDlmeW5hc2Q5OGZoODd4bXJmcThhaGU5aSBmYXNkZiBzYWRmIGFGIDRxd2VjIGEgdHEz****</QRCodePNG>\\r\\n\\t\\t<Base32StringSeed>LD3CJ23Z2VGEX6R7ZTQCOA4XL2KODS5PKH7442NLKYX2PVHSHYB7UT3TS5HA****</Base32StringSeed>\\r\\n\\t</VirtualMFADevice>\\r\\n\\t<RequestId>C609CC97-10FE-43EB-BE32-BDC219D8F1E4</RequestId>\\r\\n</CreateVirtualMFADeviceResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'CreateVirtualMFADevice', - 'summary' => 'Creates a virtual multi-factor authentication (MFA) device.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateVirtualMFADevice'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -2671,26 +1713,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"VirtualMFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::177242285274****:mfa/device001\\",\\n \\"QRCodePNG\\": \\"YXNkZmFzZDlmeW5hc2Q5OGZoODd4bXJmcThhaGU5aSBmYXNkZiBzYWRmIGFGIDRxd2VjIGEgdHEz****\\",\\n \\"Base32StringSeed\\": \\"LD3CJ23Z2VGEX6R7ZTQCOA4XL2KODS5PKH7442NLKYX2PVHSHYB7UT3TS5HA****\\"\\n },\\n \\"RequestId\\": \\"C609CC97-10FE-43EB-BE32-BDC219D8F1E4\\"\\n}","type":"json"}]', ], 'DeleteAccessKey' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2702,64 +1735,46 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramI3FYOF', - ], + 'abilityTreeNodes' => ['FEATUREramI3FYOF'], ], 'parameters' => [ [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the AccessKey pair that you want to delete.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the AccessKey pair that you want to delete.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], ], [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'If this parameter is empty, the AccessKey pair of the current user is deleted.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'If this parameter is empty, the AccessKey pair of the current user is deleted.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteAccessKeyResponse>\\r\\n <RequestId>B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC</RequestId>\\r\\n</DeleteAccessKeyResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteAccessKey', - 'summary' => 'Deletes an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAccessKey'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -2768,26 +1783,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","type":"json"}]', ], 'DeleteAccessKeyInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes a specific AccessKey pair that belongs to a Resource Access Management (RAM) user from the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2799,61 +1805,45 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramI3FYOF', - ], + 'abilityTreeNodes' => ['FEATUREramI3FYOF'], ], 'parameters' => [ [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n" - ."\n" - .'> - If you use an Alibaba Cloud account to call the operation, you must specify the parameter.'."\n" - .'> - If you use a RAM user to call the operation, you can leave the parameter empty. In this case, the ID of the RAM user is used by default.', - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.'."\n" + ."\n" + .'> - If you use an Alibaba Cloud account to call the operation, you must specify the parameter.'."\n" + .'>'."\n" + .'> - If you use a RAM user to call the operation, you can leave the parameter empty. In this case, the ID of the RAM user is used by default.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteAccessKeyInRecycleBinResponse>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</DeleteAccessKeyInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteAccessKeyInRecycleBin', - 'summary' => 'Deletes a specific AccessKey pair that belongs to a Resource Access Management (RAM) user from the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAccessKeyInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -2862,26 +1852,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'DeleteAppSecret' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes the application secret of an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2893,34 +1874,18 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramQ794FD', - ], + 'abilityTreeNodes' => ['FEATUREramQ794FD'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], [ 'name' => 'AppSecretId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application secret.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application secret.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', 'title' => ''], ], ], 'responses' => [ @@ -2928,28 +1893,25 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteAppSecretResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteAppSecretResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteAppSecret', - 'summary' => 'Deletes the application secret of an application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAppSecret'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -2958,26 +1920,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'DeleteApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -2989,22 +1941,13 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3BGJ0P', - ], + 'abilityTreeNodes' => ['FEATUREram3BGJ0P'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], ], 'responses' => [ @@ -3012,28 +1955,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteApplicationResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteApplicationResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteApplication', 'summary' => 'Deletes an application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3042,26 +1983,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'DeleteGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes a Resource Access Management (RAM) user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3073,22 +2005,13 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramM3CIN3', - ], + 'abilityTreeNodes' => ['FEATUREramM3CIN3'], ], 'parameters' => [ [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Dev-Team', 'title' => ''], ], ], 'responses' => [ @@ -3096,29 +2019,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteGroupResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteGroupResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteGroup', - 'summary' => 'Deletes a Resource Access Management (RAM) user group.', - 'description' => 'Before you delete a RAM user group, make sure that no policies are attached to the group and no RAM users are included in the group.'."\n", + 'description' => 'Before you delete a RAM user group, make sure that no policies are attached to the group and no RAM users are included in the group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3127,26 +2047,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'DeleteLoginProfile' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3158,22 +2068,13 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -3181,28 +2082,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteLoginProfileResponse>\\r\\n <RequestId>B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC</RequestId>\\r\\n</DeleteLoginProfileResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteLoginProfile', 'summary' => 'Disables logon to the console for a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteLoginProfile'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3211,26 +2110,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","type":"json"}]', ], 'DeleteOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes an OpenID Connect (OIDC) identity provider (IdP).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3238,58 +2128,43 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<DeleteOIDCProviderResponse>\\r\\n\\t<RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteOIDCProviderResponse>\\t","errorExample":""}]', 'title' => 'DeleteOIDCProvider', - 'summary' => 'Deletes an OpenID Connect (OIDC) identity provider (IdP).', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to remove the OIDC IdP named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to remove the OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3297,31 +2172,19 @@ 'action' => 'ram:DeleteOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'DeletePasskey' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['https'], 'security' => [ [ 'AK' => [], @@ -3334,9 +2197,7 @@ 'riskType' => 'high', 'chargeType' => 'free', 'abilityTreeCode' => '254326', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '因为创建passkey需要通过控制台页面，没有openAPI，因此无法创建用来删除的passkey', ], @@ -3344,50 +2205,34 @@ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'PasskeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the passkey.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the passkey.', 'type' => 'string', 'required' => false, 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '8A1673AA-5DB3-5AFB-8758-AF9EC2889259', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => '8A1673AA-5DB3-5AFB-8758-AF9EC2889259'], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"8A1673AA-5DB3-5AFB-8758-AF9EC2889259\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeletePasskey', 'summary' => 'Deletes a passkey for a Resource Access Management (RAM) user.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], 'ramActions' => [ [ 'operationType' => 'none', @@ -3396,26 +2241,17 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"8A1673AA-5DB3-5AFB-8758-AF9EC2889259\\"\\n}","type":"json"}]', ], 'DeleteSAMLProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Deletes an identity provider (IdP) for role-based single sign-on (SSO).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3427,23 +2263,14 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram7YYMOK', - ], + 'abilityTreeNodes' => ['FEATUREram7YYMOK'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'SAMLProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the IdP that you want to delete.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test-provider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the IdP that you want to delete.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test-provider', 'title' => ''], ], ], 'responses' => [ @@ -3451,32 +2278,29 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteSAMLProviderResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteSAMLProviderResponse>","errorExample":""}]', 'title' => 'DeleteSAMLProvider', - 'summary' => 'Deletes an identity provider (IdP) for role-based single sign-on (SSO).', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteSAMLProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3485,26 +2309,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], - 'DeleteUser' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'DeleteServiceCredential' => [ + 'summary' => 'Deletes the service credential of a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], 'security' => [ [ 'AK' => [], @@ -3512,37 +2327,81 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'high', 'chargeType' => 'free'], 'parameters' => [ [ + 'name' => 'ServiceCredentialId', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The service credential ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'SC****************'], + ], + [ 'name' => 'UserPrincipalName', 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user. If this parameter is not specified, the service credential of the identity that invokes this operation is deleted.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com'], + ], + ], + 'responses' => [ + 200 => [ 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', 'title' => '', + 'description' => '', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '492E130C-76D3-55D5-BE5C-C023E431369A'], + ], + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Delete a service credential', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], + 'ramActions' => [ + [ + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'ram:DeleteServiceCredential', + 'authLevel' => 'resource', + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], ], ], + ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"492E130C-76D3-55D5-BE5C-C023E431369A\\"\\n}","type":"json"}]', + ], + 'DeleteUser' => [ + 'summary' => 'Deletes a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], + ], [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], ], 'responses' => [ @@ -3550,28 +2409,25 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteUserResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</DeleteUserResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteUser', - 'summary' => 'Deletes a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteUser'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3580,26 +2436,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'DeleteUserInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3607,49 +2453,37 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteUserInRecycleBinResponse>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</DeleteUserInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteUserInRecycleBin', 'summary' => 'Deletes a specific Resource Access Management (RAM) user from the recycle bin.', - 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).'."\n", + 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteUserInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3658,26 +2492,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'DeleteVirtualMFADevice' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3689,22 +2513,13 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], ], 'parameters' => [ [ 'name' => 'SerialNumber', 'in' => 'query', - 'schema' => [ - 'description' => 'The serial number of the MFA device.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'acs:ram::123456789012****:mfa/device002', - 'title' => '', - ], + 'schema' => ['description' => 'The serial number of the MFA device.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'acs:ram::123456789012****:mfa/device002', 'title' => ''], ], ], 'responses' => [ @@ -3712,28 +2527,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\"\\n}","errorExample":""},{"type":"xml","example":"<DeleteVirtualMFADeviceResponse>\\r\\n <RequestId>04F0F334-1335-436C-A1D7-6C044FE73368</RequestId>\\r\\n</DeleteVirtualMFADeviceResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeleteVirtualMFADevice', 'summary' => 'Deletes a multi-factor authentication (MFA) device.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteVirtualMFADevice'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -3742,26 +2555,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\"\\n}","type":"json"}]', ], 'DeprovisionApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3773,22 +2576,13 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3BGJ0P', - ], + 'abilityTreeNodes' => ['FEATUREram3BGJ0P'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '452392483381546****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '407342493648015****', 'title' => ''], ], ], 'responses' => [ @@ -3796,28 +2590,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1AE0B', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeprovisionApplication', 'summary' => 'Uninstalls an external application or an internal application of the ServerApp type.', 'description' => 'If you want to call this operation to uninstall an internal application, the type of the internal application must be **ServerApp**. Otherwise, an error occurs when you call this operation.'."\n" ."\n" - .'> For **internal applications**, only internal applications of the ServerApp type need to be **installed or provisioned**. Therefore, only internal applications of the ServerApp type **can be uninstalled**. Internal applications of the WebApp and NativeApp types **do not need to and cannot be uninstalled**.'."\n", + .'> For **internal applications**, only internal applications of the ServerApp type need to be **installed or provisioned**. Therefore, only internal applications of the ServerApp type **can be uninstalled**. Internal applications of the WebApp and NativeApp types **do not need to and cannot be uninstalled**.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeprovisionApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -3826,26 +2618,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1AE0B\\"\\n}","type":"json"}]', ], 'DeprovisionExternalApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3858,22 +2640,13 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7447', - 'abilityTreeNodes' => [ - 'FEATUREramCEEHYN', - ], + 'abilityTreeNodes' => ['FEATUREramCEEHYN'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '417273362044613****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '417273362044613****', 'title' => ''], ], ], 'responses' => [ @@ -3881,25 +2654,23 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1C2-3AB045D1AE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1C2-3AB045D1AE0B', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1C2-3AB045D1AE0B\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DeprovisionExternalApplication', 'summary' => 'Deletes an installed external application.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeprovisionExternalApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -3908,26 +2679,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1C2-3AB045D1AE0B\\"\\n}","type":"json"}]', ], 'DisableVirtualMFA' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -3940,9 +2701,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7448', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '无法通过测试平台自动生成MFA Code，所以无法构建绑定了MFA的用户用于测试', ], @@ -3950,14 +2709,7 @@ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -3965,28 +2717,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","errorExample":""},{"type":"xml","example":"<DisableVirtualMFAResponse>\\r\\n <RequestId>B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC</RequestId>\\r\\n</DisableVirtualMFAResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'DisableVirtualMFA', 'summary' => 'Unbinds and deletes a multi-factor authentication (MFA) device from a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DisableVirtualMFA'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -3995,26 +2745,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","type":"json"}]', ], 'GenerateCredentialReport' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Generates the user credential report of an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4026,9 +2767,7 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramYDDQL2', - ], + 'abilityTreeNodes' => ['FEATUREramYDDQL2'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], @@ -4037,45 +2776,36 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'BBCCA90A-A1F0-4B16-B355-692247197805', - 'title' => '', - ], - 'State' => [ - 'description' => 'The generation status of the user credential report. Valid values:'."\n" - ."\n" - .'* STARTED: The system starts to generate the user credential report.'."\n" - .'* INPROGRESS: The user credential report is being generated.'."\n" - .'* COMPLETED: The user credential report is generated.'."\n", - 'type' => 'string', - 'example' => 'STARTED', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'BBCCA90A-A1F0-4B16-B355-692247197805', 'title' => ''], + 'State' => ['description' => 'The generation status of the user credential report. Valid values:'."\n" + ."\n" + .'- STARTED: The system starts to generate the user credential report.'."\n" + ."\n" + .'- INPROGRESS: The user credential report is being generated.'."\n" + ."\n" + .'- COMPLETED: The user credential report is generated.', 'type' => 'string', 'example' => 'STARTED', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'asynchronous', - 'callback' => 'Ims::2019-08-15::GetCredentialReport', - 'callbackInterval' => 10000, - 'maxCallbackTimes' => 5, - ], + 'staticInfo' => ['returnType' => 'asynchronous', 'callback' => 'Ims::2019-08-15::GetCredentialReport', 'callbackInterval' => 10000, 'maxCallbackTimes' => 5], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"BBCCA90A-A1F0-4B16-B355-692247197805\\",\\n \\"State\\": \\"STARTED\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<GenerateCredentialReportResponse>\\r\\n\\t<RequestId>BBCCA90A-A1F0-4B16-B355-692247197805</RequestId>\\r\\n\\t<State>STARTED</State>\\r\\n</GenerateCredentialReportResponse>\\r\\n\\t\\r\\n","errorExample":""}]', 'title' => 'GenerateCredentialReport', - 'summary' => 'Generates the user credential report of an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '100', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GenerateCredentialReport'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -4084,26 +2814,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BBCCA90A-A1F0-4B16-B355-692247197805\\",\\n \\"State\\": \\"STARTED\\"\\n}","type":"json"}]', ], 'GenerateGovernanceReport' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Generates a check report for Cloud Governance.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4115,9 +2836,7 @@ 'operationType' => 'create', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramOHWKAN', - ], + 'abilityTreeNodes' => ['FEATUREramOHWKAN'], ], 'parameters' => [], 'responses' => [ @@ -4125,38 +2844,29 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '492E130C-76D3-55D5-BE5C-C023E431369A', - 'title' => '', - ], - 'State' => [ - 'description' => 'The report generation status. Valid values:'."\n" - ."\n" - .'* Started: The system starts to generate a governance report.'."\n" - .'* Progressing: The system is generating a governance report.'."\n" - .'* Completed: A governance report is generated.', - 'type' => 'string', - 'example' => 'Started', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '492E130C-76D3-55D5-BE5C-C023E431369A', 'title' => ''], + 'State' => ['description' => 'The report generation status. Valid values:'."\n" + ."\n" + .'- Started: The system starts to generate a governance report.'."\n" + ."\n" + .'- Progressing: The system is generating a governance report.'."\n" + ."\n" + .'- Completed: A governance report is generated.', 'type' => 'string', 'example' => 'Started', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'asynchronous', - 'callback' => 'Ims::2019-08-15::GetGovernanceReportStatus', - 'callbackInterval' => 10000, - 'maxCallbackTimes' => 5, - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"492E130C-76D3-55D5-BE5C-C023E431369A\\",\\n \\"State\\": \\"Started\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'asynchronous', 'callback' => 'Ims::2019-08-15::GetGovernanceReportStatus', 'callbackInterval' => 10000, 'maxCallbackTimes' => 5], 'title' => 'GenerateGovernanceReport', - 'summary' => 'Generates a check report for Cloud Governance.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '100', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GenerateGovernanceReport'], + ], + ], 'ramActions' => [ [ 'operationType' => 'create', @@ -4165,26 +2875,17 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"492E130C-76D3-55D5-BE5C-C023E431369A\\",\\n \\"State\\": \\"Started\\"\\n}","type":"json"}]', ], 'GetAccessKeyInfoInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries information about a specific AccessKey pair of a Resource Access Management (RAM) user in the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4192,101 +2893,54 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the Resource Access Management (RAM) user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the Resource Access Management (RAM) user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], 'AccessKey' => [ - 'description' => 'The information about the AccessKey pair.'."\n", + 'description' => 'The information about the AccessKey pair.', 'type' => 'object', 'properties' => [ - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'UserRecycled' => [ - 'description' => 'Indicates whether the RAM user to which the AccessKey pair belongs is in the recycle bin. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'AccessKeyId' => [ - 'description' => 'The AccessKey ID.'."\n", - 'type' => 'string', - 'example' => 'LTAI*******************', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the AccessKey pair was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'RecycleDate' => [ - 'description' => 'The time when the AccessKey pair was deleted and moved to the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T10:12:00Z', - 'title' => '', - ], - 'DeleteDate' => [ - 'description' => 'The time when the AccessKey pair will be permanently deleted from the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-11-12T10:12:00Z', - 'title' => '', - ], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'UserRecycled' => ['description' => 'Indicates whether the RAM user to which the AccessKey pair belongs is in the recycle bin. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AccessKeyId' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'example' => 'LTAI*******************', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the AccessKey pair was created.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'RecycleDate' => ['description' => 'The time when the AccessKey pair was deleted and moved to the recycle bin.', 'type' => 'string', 'example' => '2020-10-12T10:12:00Z', 'title' => ''], + 'DeleteDate' => ['description' => 'The time when the AccessKey pair will be permanently deleted from the recycle bin.', 'type' => 'string', 'example' => '2020-11-12T10:12:00Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\",\\n \\"AccessKey\\": {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"UserRecycled\\": true,\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T10:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T10:12:00Z\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"<GetAccessKeyInfoInRecycleBinResponse>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n <AccessKey>\\n <UserId>20732900249392****</UserId>\\n <UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\n <UserRecycled>true</UserRecycled>\\n <AccessKeyId>LTAI4GFTgcR8m8cZQDTH****</AccessKeyId>\\n <CreateDate>2020-10-12T09:12:00Z</CreateDate>\\n <RecycleDate>2020-10-12T10:12:00Z</RecycleDate>\\n <DeleteDate>2020-11-12T10:12:00Z</DeleteDate>\\n </AccessKey>\\n</GetAccessKeyInfoInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetAccessKeyInfoInRecycleBin', - 'summary' => 'Queries information about a specific AccessKey pair of a Resource Access Management (RAM) user in the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccessKeyInfoInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -4295,26 +2949,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\",\\n \\"AccessKey\\": {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"UserRecycled\\": true,\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T10:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T10:12:00Z\\"\\n }\\n}","type":"json"}]', ], 'GetAccessKeyLastUsed' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4322,85 +2966,57 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'If you do not specify this parameter, the AccessKey pair of the current user is queried.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'If you do not specify this parameter, the AccessKey pair of the current user is queried.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the AccessKey pair that you want to query.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the AccessKey pair that you want to query.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ 200 => [ 'headers' => [], 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'AccessKeyLastUsed' => [ - 'description' => 'The details of the time when the AccessKey pair was used for the last time.'."\n", + 'description' => 'The details of the time when the AccessKey pair was used for the last time.', 'type' => 'object', 'properties' => [ - 'LastUsedDate' => [ - 'description' => 'The time when the AccessKey pair was used for the last time.'."\n", - 'type' => 'string', - 'example' => '2020-10-16T01:37:37Z', - 'title' => '', - ], - 'ServiceName' => [ - 'description' => 'The Alibaba Cloud service that was last accessed by using the AccessKey pair.'."\n", - 'type' => 'string', - 'example' => 'Ram', - 'title' => '', - ], + 'LastUsedDate' => ['description' => 'The time when the AccessKey pair was used for the last time.', 'type' => 'string', 'example' => '2020-10-16T01:37:37Z', 'title' => ''], + 'ServiceName' => ['description' => 'The Alibaba Cloud service that was last accessed by using the AccessKey pair.', 'type' => 'string', 'example' => 'Ram', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B29C79F6-354B-4297-A994-1338CC22A2EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B29C79F6-354B-4297-A994-1338CC22A2EC', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"AccessKeyLastUsed\\": {\\n \\"LastUsedDate\\": \\"2020-10-16T01:37:37Z\\",\\n \\"ServiceName\\": \\"Ram\\"\\n },\\n \\"RequestId\\": \\"B29C79F6-354B-4297-A994-1338CC22A2EC\\"\\n}","errorExample":""},{"type":"xml","example":"<GetAccessKeyLastUsedResponse>\\n <AccessKeyLastUsed>\\n <LastUsedDate>2020-10-16T01:37:37Z</LastUsedDate>\\n <ServiceName>Ram</ServiceName>\\n </AccessKeyLastUsed>\\n <RequestId>B29C79F6-354B-4297-A994-1338CC22A2EC</RequestId>\\n</GetAccessKeyLastUsedResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetAccessKeyLastUsed', 'summary' => 'Queries the time when an AccessKey pair was used for the last time.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '350', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccessKeyLastUsed'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -4409,26 +3025,79 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AccessKeyLastUsed\\": {\\n \\"LastUsedDate\\": \\"2020-10-16T01:37:37Z\\",\\n \\"ServiceName\\": \\"Ram\\"\\n },\\n \\"RequestId\\": \\"B29C79F6-354B-4297-A994-1338CC22A2EC\\"\\n}","type":"json"}]', ], - 'GetAccountMFAInfo' => [ - 'methods' => [ - 'post', - 'get', + 'GetAccessKeyPolicy' => [ + 'summary' => 'Queries the network access restriction policy of an access key for an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'schema' => ['description' => 'The logon name of the RAM user. '."\n" + ."\n" + .'If this parameter is left empty, the network access restriction policy of the specified access key for the current user is returned by default.', 'type' => 'string', 'required' => false, 'docRequired' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], + ], + [ + 'name' => 'UserAccessKeyId', + 'in' => 'query', + 'schema' => ['description' => 'The access key ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], + ], ], - 'schemes' => [ - 'http', - 'https', + 'responses' => [ + 200 => [ + 'schema' => [ + 'type' => 'object', + 'properties' => [ + 'AccessKeyPolicy' => ['description' => 'The network access restriction policy. The value is a JSON string. For more information, see the AccessKeyPolicy structure description in the SetAccessKeyPolicy documentation.', 'type' => 'string', 'example' => '{"Status":"Inactive","Statements":[{"Value":"AllowAllVPC","Type":"VPCWhiteList","IPList":["::/0","0.0.0.0/0"]}]}', 'title' => ''], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4B450CA1-36E8-4AA2-8461-86B42BF4CC4E', 'title' => ''], + 'AccessKeyId' => ['description' => 'The access key ID.', 'type' => 'string', 'example' => 'LTAI*******************', 'title' => ''], + ], + 'description' => '', + 'title' => '', + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Query the network access restriction policy of a specified access key', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], + 'ramActions' => [ + [ + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'ram:GetAccessKeyPolicy', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], + ], + ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AccessKeyPolicy\\": \\"{\\\\\\"Status\\\\\\":\\\\\\"Inactive\\\\\\",\\\\\\"Statements\\\\\\":[{\\\\\\"Value\\\\\\":\\\\\\"AllowAllVPC\\\\\\",\\\\\\"Type\\\\\\":\\\\\\"VPCWhiteList\\\\\\",\\\\\\"IPList\\\\\\":[\\\\\\"::/0\\\\\\",\\\\\\"0.0.0.0/0\\\\\\"]}]}\\",\\n \\"RequestId\\": \\"4B450CA1-36E8-4AA2-8461-86B42BF4CC4E\\",\\n \\"AccessKeyId\\": \\"LTAI*******************\\"\\n}","type":"json"}]', + ], + 'GetAccountMFAInfo' => [ + 'summary' => 'Queries information about the multi-factor authentication (MFA) devices of an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4436,49 +3105,37 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4BE83135-0B08-467C-B3A2-27B312FD0F57', - 'title' => '', - ], - 'IsMFAEnable' => [ - 'description' => 'Indicates whether MFA devices are enabled. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4BE83135-0B08-467C-B3A2-27B312FD0F57', 'title' => ''], + 'IsMFAEnable' => ['description' => 'Indicates whether MFA devices are enabled. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4BE83135-0B08-467C-B3A2-27B312FD0F57\\",\\n \\"IsMFAEnable\\": false\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<GetAccountMFAInfoResponse>\\r\\n\\t<RequestId>4BE83135-0B08-467C-B3A2-27B312FD0F57</RequestId>\\r\\n\\t<IsMFAEnable>false</IsMFAEnable>\\r\\n</GetAccountMFAInfoResponse>\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetAccountMFAInfo', - 'summary' => 'Queries information about the multi-factor authentication (MFA) devices of an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountMFAInfo'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -4487,26 +3144,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4BE83135-0B08-467C-B3A2-27B312FD0F57\\",\\n \\"IsMFAEnable\\": false\\n}","type":"json"}]', ], 'GetAccountSecurityPracticeReport' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the security report of an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4514,128 +3162,68 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'ABA822EE-85C2-4418-9577-A1831FC8466D', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'ABA822EE-85C2-4418-9577-A1831FC8466D', 'title' => ''], 'AccountSecurityPracticeInfo' => [ - 'description' => 'The information about the security report for the Alibaba Cloud account.'."\n", + 'description' => 'The information about the security report for the Alibaba Cloud account.', 'type' => 'object', 'properties' => [ 'AccountSecurityPracticeUserInfo' => [ - 'description' => 'The information about the security report for the Alibaba Cloud account.'."\n", + 'description' => 'The information about the security report for the Alibaba Cloud account.', 'type' => 'object', 'properties' => [ - 'UnusedAkNum' => [ - 'description' => 'The number of AccessKey pairs that are not used for the Alibaba Cloud account.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'SubUserWithUnusedAccessKey' => [ - 'description' => 'The number of Resource Access Management (RAM) users that have unused AccessKey pairs.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'RootWithAccessKey' => [ - 'description' => 'The number of AccessKey pairs for the Alibaba Cloud account.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '1', - 'title' => '', - ], - 'SubUser' => [ - 'description' => 'The number of RAM users within the Alibaba Cloud account.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '9', - 'title' => '', - ], - 'BindMfa' => [ - 'description' => 'Indicates whether multi-factor authentication (MFA) is enabled. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'OldAkNum' => [ - 'description' => 'The number of old AccessKey pairs for the Alibaba Cloud account.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'SubUserPwdLevel' => [ - 'description' => 'The complexity level of the password for the RAM user. Valid values:'."\n" - ."\n" - .'* low'."\n" - .'* mid'."\n" - .'* high'."\n", - 'type' => 'string', - 'example' => 'low', - 'title' => '', - ], - 'SubUserWithOldAccessKey' => [ - 'description' => 'The number of RAM users that use the old AccessKey pairs.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'SubUserBindMfa' => [ - 'description' => 'The number of RAM users that have MFA devices bound.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], + 'UnusedAkNum' => ['description' => 'The number of AccessKey pairs that are not used for the Alibaba Cloud account.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'SubUserWithUnusedAccessKey' => ['description' => 'The number of Resource Access Management (RAM) users that have unused AccessKey pairs.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'RootWithAccessKey' => ['description' => 'The number of AccessKey pairs for the Alibaba Cloud account.', 'type' => 'integer', 'format' => 'int32', 'example' => '1', 'title' => ''], + 'SubUser' => ['description' => 'The number of RAM users within the Alibaba Cloud account.', 'type' => 'integer', 'format' => 'int32', 'example' => '9', 'title' => ''], + 'BindMfa' => ['description' => 'Indicates whether multi-factor authentication (MFA) is enabled. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'OldAkNum' => ['description' => 'The number of old AccessKey pairs for the Alibaba Cloud account.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'SubUserPwdLevel' => ['description' => 'The complexity level of the password for the RAM user. Valid values:'."\n" + ."\n" + .'- low'."\n" + ."\n" + .'- mid'."\n" + ."\n" + .'- high', 'type' => 'string', 'example' => 'low', 'title' => ''], + 'SubUserWithOldAccessKey' => ['description' => 'The number of RAM users that use the old AccessKey pairs.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'SubUserBindMfa' => ['description' => 'The number of RAM users that have MFA devices bound.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'Score' => [ - 'description' => 'The security score of the Alibaba Cloud account.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'example' => '63', - 'title' => '', - ], + 'Score' => ['description' => 'The security score of the Alibaba Cloud account.', 'type' => 'integer', 'format' => 'int32', 'example' => '63', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"ABA822EE-85C2-4418-9577-A1831FC8466D\\",\\n \\"AccountSecurityPracticeInfo\\": {\\n \\"AccountSecurityPracticeUserInfo\\": {\\n \\"UnusedAkNum\\": 0,\\n \\"SubUserWithUnusedAccessKey\\": 0,\\n \\"RootWithAccessKey\\": 1,\\n \\"SubUser\\": 9,\\n \\"BindMfa\\": false,\\n \\"OldAkNum\\": 0,\\n \\"SubUserPwdLevel\\": \\"low\\",\\n \\"SubUserWithOldAccessKey\\": 0,\\n \\"SubUserBindMfa\\": 0\\n },\\n \\"Score\\": 63\\n }\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<GetAccountSecurityPracticeReportResponse>\\r\\n\\t<RequestId>ABA822EE-85C2-4418-9577-A1831FC8466D</RequestId>\\r\\n\\t<AccountSecurityPracticeInfo>\\r\\n\\t\\t<Score>63</Score>\\r\\n\\t\\t<AccountSecurityPracticeUserInfo>\\r\\n\\t\\t\\t<SubUser>9</SubUser>\\r\\n\\t\\t\\t<SubUserBindMfa>0</SubUserBindMfa>\\r\\n\\t\\t\\t<SubUserWithUnusedAccessKey>0</SubUserWithUnusedAccessKey>\\r\\n\\t\\t\\t<RootWithAccessKey>1</RootWithAccessKey>\\r\\n\\t\\t\\t<SubUserWithOldAccessKey>0</SubUserWithOldAccessKey>\\r\\n\\t\\t\\t<SubUserPwdLevel>low</SubUserPwdLevel>\\r\\n\\t\\t\\t<UnusedAkNum>0</UnusedAkNum>\\r\\n\\t\\t\\t<OldAkNum>0</OldAkNum>\\r\\n\\t\\t\\t<BindMfa>false</BindMfa>\\r\\n\\t\\t</AccountSecurityPracticeUserInfo>\\r\\n\\t</AccountSecurityPracticeInfo>\\r\\n</GetAccountSecurityPracticeReportResponse>\\r\\n\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetAccountSecurityPracticeReport', - 'summary' => 'Queries the security report of an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountSecurityPracticeReport'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -4644,27 +3232,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"ABA822EE-85C2-4418-9577-A1831FC8466D\\",\\n \\"AccountSecurityPracticeInfo\\": {\\n \\"AccountSecurityPracticeUserInfo\\": {\\n \\"UnusedAkNum\\": 0,\\n \\"SubUserWithUnusedAccessKey\\": 0,\\n \\"RootWithAccessKey\\": 1,\\n \\"SubUser\\": 9,\\n \\"BindMfa\\": false,\\n \\"OldAkNum\\": 0,\\n \\"SubUserPwdLevel\\": \\"low\\",\\n \\"SubUserWithOldAccessKey\\": 0,\\n \\"SubUserBindMfa\\": 0\\n },\\n \\"Score\\": 63\\n }\\n}","type":"json"}]', ], 'GetAccountSummary' => [ - 'summary' => 'Retrieves a summary of an Alibaba Cloud account.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Retrieves the overview for an Alibaba Cloud account (root account).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4676,9 +3254,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramPNEJCS', - ], + 'abilityTreeNodes' => ['FEATUREramPNEJCS'], ], 'parameters' => [], 'responses' => [ @@ -4686,197 +3262,50 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '81313F5E-3C85-478F-BCC9-E1B70E4556DB', - ], + 'RequestId' => ['description' => 'The ID of the request.', 'type' => 'string', 'example' => '81313F5E-3C85-478F-BCC9-E1B70E4556DB', 'title' => ''], 'SummaryMap' => [ - 'description' => 'The summary information of the Alibaba Cloud account.', + 'description' => 'An overview of the Alibaba Cloud account.', 'type' => 'object', 'properties' => [ - 'MFADevices' => [ - 'description' => 'The number of virtual multi-factor authentication (MFA) devices.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '13', - ], - 'AccessKeysPerUserQuota' => [ - 'description' => 'The maximum number of AccessKey pairs that a RAM user can have.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '2', - ], - 'AttachedPoliciesPerGroupQuota' => [ - 'description' => 'The maximum number of custom policies that can be attached to a user group.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '5', - ], - 'AttachedSystemPoliciesPerRoleQuota' => [ - 'description' => 'The maximum number of system policies that can be attached to a RAM role.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '20', - ], - 'AttachedPoliciesPerRoleQuota' => [ - 'description' => 'The maximum number of custom policies that can be attached to a RAM role.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '5', - ], - 'GroupsPerUserQuota' => [ - 'description' => 'The maximum number of user groups that a RAM user can join.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '5', - ], - 'Roles' => [ - 'description' => 'The number of RAM roles.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '19', - ], - 'PolicySizeQuota' => [ - 'description' => 'The maximum length of a policy document.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '2048', - ], - 'AttachedSystemPoliciesPerGroupQuota' => [ - 'description' => 'The maximum number of system policies that can be attached to a user group.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '20', - ], - 'AttachedSystemPoliciesPerUserQuota' => [ - 'description' => 'The maximum number of system policies that can be attached to a RAM user.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '20', - ], - 'AttachedPoliciesPerUserQuota' => [ - 'description' => 'The maximum number of custom policies that can be attached to a RAM user.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '10', - ], - 'GroupsQuota' => [ - 'description' => 'The maximum number of user groups that can be created.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '50', - ], - 'Groups' => [ - 'description' => 'The number of user groups.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '7', - ], - 'PoliciesQuota' => [ - 'description' => 'The maximum number of custom policies that can be created.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '1500', - ], - 'VirtualMFADevicesQuota' => [ - 'description' => 'The maximum number of virtual MFA devices that can be created.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '1000', - ], - 'VersionsPerPolicyQuota' => [ - 'description' => 'The maximum number of policy versions.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '5', - ], - 'RolesQuota' => [ - 'description' => 'The maximum number of RAM roles that can be created.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '1000', - ], - 'UsersQuota' => [ - 'description' => 'The maximum number of RAM users that can be created.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '1000', - ], - 'Policies' => [ - 'description' => 'The number of custom policies.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '13', - ], - 'Users' => [ - 'description' => 'The number of RAM users.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '9', - ], - 'MFADevicesInUse' => [ - 'description' => 'The number of virtual MFA devices that are in use.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '2', - ], - 'IPItemsPerAKPolicyQuota' => [ - 'description' => 'The maximum number of IP addresses that can be set in an account-level or AccessKey-level network access control policy.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '50', - ], - 'ConditionsPerAKPolicyQuota' => [ - 'description' => 'The maximum number of conditions that can be set in an account-level or AccessKey-level network access control policy.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '8', - ], - 'AccountAccessKeysPerAccountQuota' => [ - 'type' => 'integer', - 'format' => 'int32', - 'description' => 'The maximum number of AccessKeys for an Alibaba Cloud account.', - 'title' => '', - 'example' => '2', - ], + 'MFADevices' => ['description' => 'The number of virtual MFA devices.', 'type' => 'integer', 'format' => 'int32', 'example' => '13', 'title' => ''], + 'AccessKeysPerUserQuota' => ['description' => 'The maximum number of access keys that a RAM user can have.', 'type' => 'integer', 'format' => 'int32', 'example' => '2', 'title' => ''], + 'AttachedPoliciesPerGroupQuota' => ['description' => 'The maximum number of custom policies that can be attached to a user group.', 'type' => 'integer', 'format' => 'int32', 'example' => '5', 'title' => ''], + 'AttachedSystemPoliciesPerRoleQuota' => ['description' => 'The maximum number of system policies that can be attached to a RAM role.', 'type' => 'integer', 'format' => 'int32', 'example' => '20', 'title' => ''], + 'AttachedPoliciesPerRoleQuota' => ['description' => 'The maximum number of custom policies that can be attached to a RAM role.', 'type' => 'integer', 'format' => 'int32', 'example' => '5', 'title' => ''], + 'GroupsPerUserQuota' => ['description' => 'The maximum number of user groups to which a RAM user can be added.', 'type' => 'integer', 'format' => 'int32', 'example' => '5', 'title' => ''], + 'Roles' => ['description' => 'The number of RAM roles.', 'type' => 'integer', 'format' => 'int32', 'example' => '19', 'title' => ''], + 'PolicySizeQuota' => ['description' => 'The maximum character length of a policy document.', 'type' => 'integer', 'format' => 'int32', 'example' => '2048', 'title' => ''], + 'AttachedSystemPoliciesPerGroupQuota' => ['description' => 'The maximum number of system policies that can be attached to a user group.', 'type' => 'integer', 'format' => 'int32', 'example' => '20', 'title' => ''], + 'AttachedSystemPoliciesPerUserQuota' => ['description' => 'The maximum number of system policies that can be attached to a RAM user.', 'type' => 'integer', 'format' => 'int32', 'example' => '20', 'title' => ''], + 'AttachedPoliciesPerUserQuota' => ['description' => 'The maximum number of custom policies that can be attached to a RAM user.', 'type' => 'integer', 'format' => 'int32', 'example' => '10', 'title' => ''], + 'GroupsQuota' => ['description' => 'The maximum number of user groups that can be created.', 'type' => 'integer', 'format' => 'int32', 'example' => '50', 'title' => ''], + 'Groups' => ['description' => 'The number of user groups.', 'type' => 'integer', 'format' => 'int32', 'example' => '7', 'title' => ''], + 'PoliciesQuota' => ['description' => 'The maximum number of custom policies that can be created.', 'type' => 'integer', 'format' => 'int32', 'example' => '1500', 'title' => ''], + 'VirtualMFADevicesQuota' => ['description' => 'The maximum number of virtual MFA devices that can be created.', 'type' => 'integer', 'format' => 'int32', 'example' => '1000', 'title' => ''], + 'VersionsPerPolicyQuota' => ['description' => 'The maximum number of versions that can be created for a policy.', 'type' => 'integer', 'format' => 'int32', 'example' => '5', 'title' => ''], + 'RolesQuota' => ['description' => 'The maximum number of RAM roles that can be created.', 'type' => 'integer', 'format' => 'int32', 'example' => '1000', 'title' => ''], + 'UsersQuota' => ['description' => 'The maximum number of RAM users that can be created.', 'type' => 'integer', 'format' => 'int32', 'example' => '1000', 'title' => ''], + 'Policies' => ['description' => 'The number of custom policies.', 'type' => 'integer', 'format' => 'int32', 'example' => '13', 'title' => ''], + 'Users' => ['description' => 'The number of RAM users.', 'type' => 'integer', 'format' => 'int32', 'example' => '9', 'title' => ''], + 'MFADevicesInUse' => ['description' => 'The number of virtual MFA devices in use.', 'type' => 'integer', 'format' => 'int32', 'example' => '2', 'title' => ''], + 'IPItemsPerAKPolicyQuota' => ['description' => 'The maximum number of IP addresses or CIDR blocks allowed in a network access control policy for an account or an access key.', 'type' => 'integer', 'format' => 'int32', 'example' => '50', 'title' => ''], + 'ConditionsPerAKPolicyQuota' => ['description' => 'The maximum number of conditions allowed in a network access control policy for an account or an access key.', 'type' => 'integer', 'format' => 'int32', 'example' => '8', 'title' => ''], + 'AccountAccessKeysPerAccountQuota' => ['description' => 'The maximum number of access keys that an Alibaba Cloud account can have.', 'type' => 'integer', 'format' => 'int32', 'example' => '2', 'title' => ''], + 'AuthorizedClientPerUserQuota' => ['type' => 'integer', 'format' => 'int32', 'description' => '', 'title' => '', 'example' => ''], + 'ServiceCredentialsPerUserPerServiceQuota' => ['description' => 'The maximum number of service-specific credentials that a RAM user can create for each service.', 'type' => 'integer', 'format' => 'int32', 'example' => '2', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"81313F5E-3C85-478F-BCC9-E1B70E4556DB\\",\\n \\"SummaryMap\\": {\\n \\"MFADevices\\": 13,\\n \\"AccessKeysPerUserQuota\\": 2,\\n \\"AttachedPoliciesPerGroupQuota\\": 5,\\n \\"AttachedSystemPoliciesPerRoleQuota\\": 20,\\n \\"AttachedPoliciesPerRoleQuota\\": 5,\\n \\"GroupsPerUserQuota\\": 5,\\n \\"Roles\\": 19,\\n \\"PolicySizeQuota\\": 2048,\\n \\"AttachedSystemPoliciesPerGroupQuota\\": 20,\\n \\"AttachedSystemPoliciesPerUserQuota\\": 20,\\n \\"AttachedPoliciesPerUserQuota\\": 10,\\n \\"GroupsQuota\\": 50,\\n \\"Groups\\": 7,\\n \\"PoliciesQuota\\": 1500,\\n \\"VirtualMFADevicesQuota\\": 1000,\\n \\"VersionsPerPolicyQuota\\": 5,\\n \\"RolesQuota\\": 1000,\\n \\"UsersQuota\\": 1000,\\n \\"Policies\\": 13,\\n \\"Users\\": 9,\\n \\"MFADevicesInUse\\": 2,\\n \\"IPItemsPerAKPolicyQuota\\": 50,\\n \\"ConditionsPerAKPolicyQuota\\": 8,\\n \\"AccountAccessKeysPerAccountQuota\\": 2\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"81313F5E-3C85-478F-BCC9-E1B70E4556DB\\",\\n \\"SummaryMap\\": {\\n \\"MFADevices\\": 13,\\n \\"AccessKeysPerUserQuota\\": 2,\\n \\"AttachedPoliciesPerGroupQuota\\": 5,\\n \\"AttachedSystemPoliciesPerRoleQuota\\": 20,\\n \\"AttachedPoliciesPerRoleQuota\\": 5,\\n \\"GroupsPerUserQuota\\": 5,\\n \\"Roles\\": 19,\\n \\"PolicySizeQuota\\": 2048,\\n \\"AttachedSystemPoliciesPerGroupQuota\\": 20,\\n \\"AttachedSystemPoliciesPerUserQuota\\": 20,\\n \\"AttachedPoliciesPerUserQuota\\": 10,\\n \\"GroupsQuota\\": 50,\\n \\"Groups\\": 7,\\n \\"PoliciesQuota\\": 1500,\\n \\"VirtualMFADevicesQuota\\": 1000,\\n \\"VersionsPerPolicyQuota\\": 5,\\n \\"RolesQuota\\": 1000,\\n \\"UsersQuota\\": 1000,\\n \\"Policies\\": 13,\\n \\"Users\\": 9,\\n \\"MFADevicesInUse\\": 2,\\n \\"IPItemsPerAKPolicyQuota\\": 50,\\n \\"ConditionsPerAKPolicyQuota\\": 8,\\n \\"AccountAccessKeysPerAccountQuota\\": 2,\\n \\"AuthorizedClientPerUserQuota\\": 0,\\n \\"ServiceCredentialsPerUserPerServiceQuota\\": 2\\n }\\n}","type":"json"}]', 'title' => 'GetAccountSummary', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -4884,12 +3313,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccountSummary', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountSummary'], ], ], 'ramActions' => [ @@ -4900,26 +3324,15 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'GetAppSecret' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -4931,34 +3344,18 @@ 'operationType' => 'get', 'riskType' => 'high', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramQ794FD', - ], + 'abilityTreeNodes' => ['FEATUREramQ794FD'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], [ 'name' => 'AppSecretId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application secret.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application secret.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', 'title' => ''], ], ], 'responses' => [ @@ -4966,59 +3363,38 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'EE46FC3C-3BDE-4771-B531-27B7B6EB533D', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'EE46FC3C-3BDE-4771-B531-27B7B6EB533D', 'title' => ''], 'AppSecret' => [ - 'description' => 'The details of the application secret.'."\n", + 'description' => 'The details of the application secret.', 'type' => 'object', 'properties' => [ - 'AppSecretValue' => [ - 'description' => 'The content of the application secret.'."\n", - 'type' => 'string', - 'example' => 'ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****', - 'title' => '', - ], - 'AppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '472457090344041****', - 'title' => '', - ], - 'AppSecretId' => [ - 'description' => 'The ID of the application secret.'."\n", - 'type' => 'string', - 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-26T02:52:31Z', - 'title' => '', - ], + 'AppSecretValue' => ['description' => 'The content of the application secret.', 'type' => 'string', 'example' => 'ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****', 'title' => ''], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'AppSecretId' => ['description' => 'The ID of the application secret.', 'type' => 'string', 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-26T02:52:31Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"EE46FC3C-3BDE-4771-B531-27B7B6EB533D\\",\\n \\"AppSecret\\": {\\n \\"AppSecretValue\\": \\"ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****\\",\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T02:52:31Z\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"<GetAppSecretResponse>\\r\\n <RequestId>EE46FC3C-3BDE-4771-B531-27B7B6EB533D</RequestId>\\r\\n <AppSecret>\\r\\n <AppId>472457090344041****</AppId>\\r\\n <AppSecretValue>ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****</AppSecretValue>\\r\\n <AppSecretId>2efd5004-005c-4f05-83c6-5b1dd176****</AppSecretId>\\r\\n <CreateDate>2020-10-26T02:52:31Z</CreateDate>\\r\\n </AppSecret>\\r\\n</GetAppSecretResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetAppSecret', 'summary' => 'Queries the details of an application secret.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAppSecret'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -5027,27 +3403,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EE46FC3C-3BDE-4771-B531-27B7B6EB533D\\",\\n \\"AppSecret\\": {\\n \\"AppSecretValue\\": \\"ai78ZmmxnlUG1jXlBZRDFKos9DIjY4m17Q7dCpMwn1rqXsTGb1X1XmrmveMp****\\",\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T02:52:31Z\\"\\n }\\n}","type":"json"}]', ], 'GetApplication' => [ - 'summary' => 'Queries the configuration information of a specified application.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the configuration information of an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5059,104 +3425,51 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram2SMFX0', - ], + 'abilityTreeNodes' => ['FEATUREram2SMFX0'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => '472457090344041****', - ], + 'schema' => ['description' => 'The application ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The returned data.', + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', 'title' => ''], 'Application' => [ 'description' => 'The information about the application.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.', - 'type' => 'string', - 'title' => '', - 'example' => 'myapp', - ], - 'AccessTokenValidity' => [ - 'description' => 'The validity period of the access token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '3600', - ], - 'SecretRequired' => [ - 'description' => 'Indicates whether an application key is required.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account to which the application belongs.', - 'type' => 'string', - 'title' => '', - 'example' => '177242285274****', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was created.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-23T08:06:57Z', - ], - 'AppName' => [ - 'description' => 'The application name.', - 'type' => 'string', - 'title' => '', - 'example' => 'myapp', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], + 'AccessTokenValidity' => ['description' => 'The validity period of the access token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '3600', 'title' => ''], + 'SecretRequired' => ['description' => 'Indicates whether a secret is required.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account to which the application belongs.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was created.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], + 'AppName' => ['description' => 'The application name.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], 'RedirectUris' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'RedirectUri' => [ - 'description' => 'The webhook address.', + 'description' => 'The redirect URL.', 'type' => 'array', - 'items' => [ - 'description' => 'The webhook address.', - 'type' => 'string', - 'title' => '', - 'example' => 'https://www.example.com', - ], + 'items' => ['description' => 'The redirect URL.', 'type' => 'string', 'example' => 'https://www.example.com', 'title' => ''], 'title' => '', + 'example' => '', ], ], - 'description' => '', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the application was last updated.', - 'type' => 'string', + 'description' => 'The redirect URLs.', 'title' => '', - 'example' => '2020-10-23T08:06:57Z', + 'example' => '', ], + 'UpdateDate' => ['description' => 'The time when the application was last updated.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -5164,115 +3477,72 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'array', 'items' => [ - 'description' => 'The permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', - ], - 'Name' => [ - 'description' => 'The name of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'openid', - ], - 'Required' => [ - 'description' => 'Indicates whether this permission scope is required by default when the application is installed. Valid values:'."\n" - ."\n" - .'- true: The permission scope is required.'."\n" - ."\n" - .'- false: The permission scope is not required.'."\n" - ."\n" - .'The `openid` scope is required by default.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], + 'Required' => ['description' => 'Indicates whether the permission is automatically selected by default when you install the application. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'`openid` is required by default.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', + 'example' => '', ], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The information about the permissions that are granted on the application.', 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AppId' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'title' => '', - 'example' => '472457090344041****', - ], - 'RefreshTokenValidity' => [ - 'description' => 'The validity period of the refresh token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '7776000', - ], - 'IsMultiTenant' => [ - 'description' => 'Indicates whether the application can be installed by other Alibaba Cloud accounts.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AppType' => [ - 'description' => 'The application type. Valid values:'."\n" - ."\n" - .'- WebApp: a web application that is based on browser interaction.'."\n" - ."\n" - .'- NativeApp: a native application that runs on an operating system, such as a desktop or mobile operating system.'."\n" - ."\n" - .'- ServerApp: an application that can directly access Alibaba Cloud services without user logon. Currently, only applications that use the System for Cross-domain Identity Management (SCIM) for user synchronization are supported.', - 'type' => 'string', - 'title' => '', - 'example' => 'WebApp', - ], - 'ProtocolVersion' => [ - 'type' => 'string', - 'description' => 'The OAuth protocol version of the application. Valid values:'."\n" - ."\n" - .'- `2.0`: OAuth 2.0.'."\n" - ."\n" - .'- `2.1`: OAuth 2.1.', - 'title' => '', - 'example' => '2.0', - ], + 'AppId' => ['description' => 'The application ID.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'RefreshTokenValidity' => ['description' => 'The validity period of the refresh token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '7776000', 'title' => ''], + 'IsMultiTenant' => ['description' => 'Indicates whether the application can be installed by using other Alibaba Cloud accounts.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AppType' => ['description' => 'The application type. Valid values:'."\n" + ."\n" + .'- WebApp: a web application that is based on browser interaction.'."\n" + ."\n" + .'- NativeApp: a native application that runs on an operating system, such as a desktop or mobile operating system.'."\n" + ."\n" + .'- ServerApp: an application that directly accesses Alibaba Cloud services without user logon. Currently, only applications that use the System for Cross-domain Identity Management (SCIM) protocol for user synchronization are supported.', 'type' => 'string', 'example' => 'WebApp', 'title' => ''], + 'ProtocolVersion' => ['description' => 'The OAuth protocol version of the application. Valid values:'."\n" + ."\n" + .'- `2.0`: OAuth 2.0'."\n" + ."\n" + .'- `2.1`: OAuth 2.1', 'type' => 'string', 'example' => '2.0', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"myapp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Name\\": \\"openid\\",\\n \\"Required\\": true\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetApplication', - 'description' => 'This topic provides an example of how to query the configuration information of the application `472457090344041****`.', + 'description' => 'This topic provides an example on how to query the configurations of an application named `472457090344041****`.', 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetApplication', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetApplication'], ], ], 'ramActions' => [ @@ -5283,26 +3553,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"myapp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Name\\": \\"openid\\",\\n \\"Required\\": true\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', ], 'GetApplicationProvisionInfo' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5314,22 +3574,13 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCEEHYN', - ], + 'abilityTreeNodes' => ['FEATUREramCEEHYN'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '452392483381546****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '452392483381546****', 'title' => ''], ], ], 'responses' => [ @@ -5337,42 +3588,17 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '936E1D9C-157D-45BD-8A3B-81C0716EB078', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '936E1D9C-157D-45BD-8A3B-81C0716EB078', 'title' => ''], 'ApplicationProvisionInfo' => [ - 'description' => 'The installation information about the application.'."\n", + 'description' => 'The installation information about the application.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteeAliyun', - 'title' => '', - ], - 'AppName' => [ - 'description' => 'The name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteePrd', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], - 'AppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '452392483381546****', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'GiteeAliyun', 'title' => ''], + 'AppName' => ['description' => 'The name of the application.', 'type' => 'string', 'example' => 'GiteePrd', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '452392483381546****', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the scopes of permissions that are granted to the application.'."\n", + 'description' => 'The information about the scopes of permissions that are granted to the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -5380,65 +3606,55 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the scopes of permissions that are granted to the application.'."\n", - 'title' => '', + 'description' => 'The information about the scopes of permissions that are granted to the application.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission scope.'."\n", - 'type' => 'string', - 'example' => 'Obtains the OpenID of the user. This is the default scope and cannot be deleted.', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission scope.'."\n", - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission scope.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission scope.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account.'."\n", - 'type' => 'string', - 'example' => '177242285274****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was installed. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"936E1D9C-157D-45BD-8A3B-81C0716EB078\\",\\n \\"ApplicationProvisionInfo\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"AppName\\": \\"GiteePrd\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"AppId\\": \\"452392483381546****\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtains the OpenID of the user. This is the default scope and cannot be deleted.\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"1603693518000\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetApplicationProvisionInfo', 'summary' => 'Queries installation information about a specified installed application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetApplicationProvisionInfo'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -5447,26 +3663,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"936E1D9C-157D-45BD-8A3B-81C0716EB078\\",\\n \\"ApplicationProvisionInfo\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"AppName\\": \\"GiteePrd\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"AppId\\": \\"452392483381546****\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"用于获取用户的OpenID（默认权限范围，不可移除）\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"1603693518000\\"\\n }\\n}","type":"json"}]', ], 'GetCredentialReport' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the user credential reports of an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5478,34 +3685,20 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramYDDQL2', - ], + 'abilityTreeNodes' => ['FEATUREramYDDQL2'], ], 'parameters' => [ [ 'name' => 'NextToken', 'in' => 'query', - 'schema' => [ - 'description' => 'The token that is used to initiate the next request if the response of the current request is truncated. You can use the token to initiate another request and obtain the remaining records.``'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The token that is used to initiate the next request if the response of the current request is truncated. You can use the token to initiate another request and obtain the remaining records.\\`\\`', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" - ."\n" - .'Valid values: 1 to 3501. Default value: 3501.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '1000', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" + ."\n" + .'Valid values: 1 to 3501. Default value: 3501.', 'type' => 'string', 'required' => false, 'example' => '1000', 'title' => ''], ], ], 'responses' => [ @@ -5513,57 +3706,35 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'GeneratedTime' => [ - 'description' => 'The time when the user credential report was generated.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T15:06:52Z', - 'title' => '', - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '7A01826E-7601-44B0-B4DF-2B0C509836DE', - 'title' => '', - ], - 'Content' => [ - 'description' => 'The content of the user credential report.'."\n" - ."\n" - .'The report is Base64-encoded. After you decode the report, the credential report is in the CSV format.'."\n", - 'type' => 'string', - 'example' => 'OVZWK4RMOVZW****', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'string', - 'example' => 'true', - 'title' => '', - ], - 'NextToken' => [ - 'description' => 'The parameter that is used to obtain the truncated part. This parameter takes effect only when `IsTruncated` is set to true.'."\n", - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'GeneratedTime' => ['description' => 'The time when the user credential report was generated.', 'type' => 'string', 'example' => '2020-10-19T15:06:52Z', 'title' => ''], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '7A01826E-7601-44B0-B4DF-2B0C509836DE', 'title' => ''], + 'Content' => ['description' => 'The content of the user credential report.'."\n" + ."\n" + .'The report is Base64-encoded. After you decode the report, the credential report is in the CSV format.', 'type' => 'string', 'example' => 'OVZWK4RMOVZW****', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'string', 'example' => 'true', 'title' => ''], + 'NextToken' => ['description' => 'The parameter that is used to obtain the truncated part. This parameter takes effect only when `IsTruncated` is set to true.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"GeneratedTime\\": \\"2020-10-19T15:06:52Z\\",\\n \\"RequestId\\": \\"7A01826E-7601-44B0-B4DF-2B0C509836DE\\",\\n \\"Content\\": \\"OVZWK4RMOVZW****\\",\\n \\"IsTruncated\\": \\"true\\",\\n \\"NextToken\\": \\"EXAMPLE\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<GetCredentialReportResponse>\\r\\n\\t<GeneratedTime>2020-10-19T15:06:52Z</GeneratedTime>\\r\\n\\t<RequestId>7A01826E-7601-44B0-B4DF-2B0C509836DE</RequestId>\\r\\n\\t<Content>OVZWK4RMOVZW****</Content>\\r\\n</GetCredentialReportResponse>\\r\\n\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetCredentialReport', - 'summary' => 'Queries the user credential reports of an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetCredentialReport'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -5572,26 +3743,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"GeneratedTime\\": \\"2020-10-19T15:06:52Z\\",\\n \\"RequestId\\": \\"7A01826E-7601-44B0-B4DF-2B0C509836DE\\",\\n \\"Content\\": \\"OVZWK4RMOVZW****\\",\\n \\"IsTruncated\\": \\"true\\",\\n \\"NextToken\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'GetDefaultDomain' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5603,9 +3764,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramM70W9U', - ], + 'abilityTreeNodes' => ['FEATUREramM70W9U'], ], 'parameters' => [], 'responses' => [ @@ -5613,34 +3772,27 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'DefaultDomainName' => [ - 'description' => 'The default domain name.'."\n", - 'type' => 'string', - 'example' => 'examplecompany.onaliyun.com', - 'title' => '', - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '66815255-7CCE-4759-AC37-9755794C3626', - 'title' => '', - ], + 'DefaultDomainName' => ['description' => 'The default domain name.', 'type' => 'string', 'example' => 'examplecompany.onaliyun.com', 'title' => ''], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '66815255-7CCE-4759-AC37-9755794C3626', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"DefaultDomainName\\": \\"examplecompany.onaliyun.com\\",\\n \\"RequestId\\": \\"66815255-7CCE-4759-AC37-9755794C3626\\"\\n}","errorExample":""},{"type":"xml","example":"<GetDefaultDomainResponse>\\r\\n <DefaultDomainName>examplecompany.onaliyun.com</DefaultDomainName>\\r\\n <RequestId>66815255-7CCE-4759-AC37-9755794C3626</RequestId>\\r\\n</GetDefaultDomainResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetDefaultDomain', 'summary' => 'Queries the default domain name of an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetDefaultDomain'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -5649,26 +3801,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"DefaultDomainName\\": \\"examplecompany.onaliyun.com\\",\\n \\"RequestId\\": \\"66815255-7CCE-4759-AC37-9755794C3626\\"\\n}","type":"json"}]', ], 'GetExternalApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries information about an installed external application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5680,22 +3823,13 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram2SMFX0', - ], + 'abilityTreeNodes' => ['FEATUREram2SMFX0'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], ], 'responses' => [ @@ -5703,30 +3837,15 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'E4C4D1BD-2558-5BD1-8C36-A5D7FB174A55', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'E4C4D1BD-2558-5BD1-8C36-A5D7FB174A55', 'title' => ''], 'ExternalApplication' => [ - 'description' => 'The information about the external application.'."\n", + 'description' => 'The information about the external application.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteeAliyun', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time of the application. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1737534146000', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'GiteeAliyun', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time of the application. The value is a timestamp.', 'type' => 'string', 'example' => '1737534146000', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the permissions that are granted on the application.'."\n", + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -5734,74 +3853,53 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the permissions that are granted on the application.'."\n", - 'title' => '', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission.'."\n", - 'type' => 'string', - 'example' => 'Obtains the OpenID of the user. This is the default scope and cannot be deleted.', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission.'."\n", - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）'."\n", 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AppPrincipalName' => [ - 'description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.'."\n", - 'type' => 'string', - 'example' => 'GiteePrd@app.153082740420****.onaliyun.com', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was installed. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1737534146000', - 'title' => '', - ], - 'TenantId' => [ - 'description' => 'The ID of the Alibaba Cloud account for which the application is installed.'."\n", - 'type' => 'string', - 'example' => '173082740420****', - 'title' => '', - ], - 'ForeignAppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '407426893752729****', - 'title' => '', - ], + 'AppPrincipalName' => ['description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.', 'type' => 'string', 'example' => 'GiteePrd@app.153082740420****.onaliyun.com', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1737534146000', 'title' => ''], + 'TenantId' => ['description' => 'The ID of the Alibaba Cloud account for which the application is installed.', 'type' => 'string', 'example' => '173082740420****', 'title' => ''], + 'ForeignAppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '407426893752729****', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E4C4D1BD-2558-5BD1-8C36-A5D7FB174A55\\",\\n \\"ExternalApplication\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"UpdateDate\\": \\"1737534146000\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtains the OpenID of the user. This is the default scope and cannot be deleted.\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppPrincipalName\\": \\"GiteePrd@app.153082740420****.onaliyun.com\\",\\n \\"CreateDate\\": \\"1737534146000\\",\\n \\"TenantId\\": \\"173082740420****\\",\\n \\"ForeignAppId\\": \\"407426893752729****\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetExternalApplication', - 'summary' => 'Queries information about an installed external application.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetExternalApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -5810,26 +3908,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E4C4D1BD-2558-5BD1-8C36-A5D7FB174A55\\",\\n \\"ExternalApplication\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"UpdateDate\\": \\"1737534146000\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"用于获取用户的OpenID（默认权限范围，不可移除）\\\\n\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppPrincipalName\\": \\"GiteePrd@app.153082740420****.onaliyun.com\\",\\n \\"CreateDate\\": \\"1737534146000\\",\\n \\"TenantId\\": \\"173082740420****\\",\\n \\"ForeignAppId\\": \\"407426893752729****\\"\\n }\\n}","type":"json"}]', ], 'GetGovernanceItemReport' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -5837,47 +3925,24 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'GovernanceItemType', 'in' => 'query', - 'schema' => [ - 'description' => 'The check item. For more information, see [Identity and access governance check items](https://help.aliyun.com/zh/ram/user-guide/overview-of-cloud-governance-for-ram?spm=a2c4g.11174283.0.0.88b3de53tfL5XG#section-q06-p9p-8vl).', - 'type' => 'string', - 'required' => false, - 'example' => 'SSOLoginEnabled', - 'title' => '', - ], + 'schema' => ['description' => 'The check item. For more information, see [Identity and access governance check items](https://help.aliyun.com/zh/ram/user-guide/overview-of-cloud-governance-for-ram?spm=a2c4g.11174283.0.0.88b3de53tfL5XG#section-q06-p9p-8vl).', 'type' => 'string', 'required' => false, 'example' => 'SSOLoginEnabled', 'title' => ''], ], [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'If the response is truncated, use the `Marker` to retrieve the subsequent content.', - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'If the response is truncated, use the `Marker` to retrieve the subsequent content.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries to return. If the response is truncated because the number of entries exceeds the value of `MaxItems`, the value of the `IsTruncated` parameter is true.'."\n" - ."\n" - .'Valid values: 1 to 1000. Default value: 1000.', - 'type' => 'string', - 'required' => false, - 'example' => '1000', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries to return. If the response is truncated because the number of entries exceeds the value of `MaxItems`, the value of the `IsTruncated` parameter is true.'."\n" + ."\n" + .'Valid values: 1 to 1000. Default value: 1000.', 'type' => 'string', 'required' => false, 'example' => '1000', 'title' => ''], ], ], 'responses' => [ @@ -5885,36 +3950,16 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'F2CE9688-AA85-5F23-8C22-0EC23473405F', - 'title' => '', - ], - 'GenerateTime' => [ - 'description' => 'The time when the report for the check item was generated.', - 'type' => 'string', - 'example' => '2020-10-19T15:06:52Z', - 'title' => '', - ], - 'MetricType' => [ - 'description' => 'The data type of the metric value. Valid values:'."\n" - ."\n" - .'- Number: the numeric type.'."\n" - ."\n" - .'- String: the string type.'."\n" - ."\n" - .'- Boolean: the Boolean type.', - 'type' => 'string', - 'example' => 'Number', - 'title' => '', - ], - 'MetricValue' => [ - 'description' => 'The metric value.', - 'type' => 'any', - 'example' => '100', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'F2CE9688-AA85-5F23-8C22-0EC23473405F', 'title' => ''], + 'GenerateTime' => ['description' => 'The time when the report for the check item was generated.', 'type' => 'string', 'example' => '2020-10-19T15:06:52Z', 'title' => ''], + 'MetricType' => ['description' => 'The data type of the metric value. Valid values:'."\n" + ."\n" + .'- Number: the numeric type.'."\n" + ."\n" + .'- String: the string type.'."\n" + ."\n" + .'- Boolean: the Boolean type.', 'type' => 'string', 'example' => 'Number', 'title' => ''], + 'MetricValue' => ['description' => 'The metric value.', 'type' => 'any', 'example' => '100', 'title' => ''], 'ColumnsSchema' => [ 'type' => 'object', 'itemNode' => true, @@ -5925,24 +3970,14 @@ 'description' => 'The schema of a single detail column.', 'type' => 'object', 'properties' => [ - 'ColumnName' => [ - 'description' => 'The column name.', - 'type' => 'string', - 'example' => 'UserPrincipalName', - 'title' => '', - ], - 'ColumnType' => [ - 'description' => 'The column type. Valid values:'."\n" - ."\n" - .'- Number: the numeric type.'."\n" - ."\n" - .'- String: the string type.'."\n" - ."\n" - .'- Boolean: the Boolean type.', - 'type' => 'string', - 'example' => 'String', - 'title' => '', - ], + 'ColumnName' => ['description' => 'The column name.', 'type' => 'string', 'example' => 'UserPrincipalName', 'title' => ''], + 'ColumnType' => ['description' => 'The column type. Valid values:'."\n" + ."\n" + .'- Number: the numeric type.'."\n" + ."\n" + .'- String: the string type.'."\n" + ."\n" + .'- Boolean: the Boolean type.', 'type' => 'string', 'example' => 'String', 'title' => ''], ], 'title' => '', 'example' => '', @@ -5969,12 +4004,7 @@ 'ColumnValue' => [ 'description' => 'A row of detailed values.', 'type' => 'array', - 'items' => [ - 'description' => 'The data object in this row.', - 'type' => 'any', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'items' => ['description' => 'The data object in this row.', 'type' => 'any', 'example' => 'test@example.onaliyun.com', 'title' => ''], 'title' => '', 'example' => '', ], @@ -5992,22 +4022,12 @@ 'title' => '', 'example' => '', ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'This parameter is returned only when `IsTruncated` is set to true. Use this parameter to retrieve the truncated content.', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'This parameter is returned only when `IsTruncated` is set to true. Use this parameter to retrieve the truncated content.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'description' => '', 'title' => '', @@ -6015,20 +4035,13 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query the detection report of a specified identity permission administration check item ', 'summary' => 'Queries the details of a specific check item in an identity and access governance report.', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetGovernanceItemReport', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGovernanceItemReport'], ], ], 'ramActions' => [ @@ -6039,12 +4052,7 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -6052,14 +4060,9 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"F2CE9688-AA85-5F23-8C22-0EC23473405F\\",\\n \\"GenerateTime\\": \\"2020-10-19T15:06:52Z\\",\\n \\"MetricType\\": \\"Number\\",\\n \\"MetricValue\\": \\"100\\",\\n \\"ColumnsSchema\\": {\\n \\"ColumnSchema\\": [\\n {\\n \\"ColumnName\\": \\"UserPrincipalName\\",\\n \\"ColumnType\\": \\"String\\"\\n }\\n ]\\n },\\n \\"ColumnsValue\\": {\\n \\"ColumnRow\\": [\\n {\\n \\"ColumnValue\\": [\\n \\"test@example.onaliyun.com\\"\\n ]\\n }\\n ]\\n },\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'GetGovernanceReportStatus' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Retrieves the current generation status of an identity and access governance report.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6071,9 +4074,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramOHWKAN', - ], + 'abilityTreeNodes' => ['FEATUREramOHWKAN'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], @@ -6082,24 +4083,14 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'F2CE9688-AA85-5F23-8C22-0EC23473405A', - 'title' => '', - ], - 'WholeReportStatus' => [ - 'description' => 'The generation status of the report. Valid values:'."\n" - ."\n" - .'- Started: The report generation has started.'."\n" - ."\n" - .'- Progressing: The report is being generated.'."\n" - ."\n" - .'- Completed: The report has been generated.', - 'type' => 'string', - 'example' => 'Progressing', - 'title' => '', - ], + 'RequestId' => ['description' => 'The ID of the request.', 'type' => 'string', 'example' => 'F2CE9688-AA85-5F23-8C22-0EC23473405A', 'title' => ''], + 'WholeReportStatus' => ['description' => 'The overall generation status of the report. Valid values:'."\n" + ."\n" + .'- Started: The report generation has started.'."\n" + ."\n" + .'- Progressing: The report is being generated.'."\n" + ."\n" + .'- Completed: The report has been generated.', 'type' => 'string', 'example' => 'Progressing', 'title' => ''], 'GovernanceItemsStatus' => [ 'type' => 'object', 'itemNode' => true, @@ -6109,30 +4100,20 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'GovernanceItem' => [ - 'description' => 'The name of the governance item.', - 'type' => 'string', - 'example' => 'AccountRecentUsingAccessKey', - 'title' => '', - ], - 'Status' => [ - 'description' => 'The generation status of the governance item report. Valid values:'."\n" - ."\n" - .'- Started: The report generation has started.'."\n" - ."\n" - .'- Progressing: The report is being generated.'."\n" - ."\n" - .'- Completed: The report has been generated.', - 'type' => 'string', - 'example' => 'Progressing', - 'title' => '', - ], + 'GovernanceItem' => ['description' => 'The name of the governance item.', 'type' => 'string', 'example' => 'AccountRecentUsingAccessKey', 'title' => ''], + 'Status' => ['description' => 'The generation status of the governance item. Valid values:'."\n" + ."\n" + .'- Started: Generation for this governance item has started.'."\n" + ."\n" + .'- Progressing: This governance item is being processed.'."\n" + ."\n" + .'- Completed: Processing for this governance item is complete.', 'type' => 'string', 'example' => 'Progressing', 'title' => ''], ], 'description' => '', 'title' => '', 'example' => '', ], - 'description' => 'An array that contains the generation status of each governance item in the report.', + 'description' => 'An array of objects, each representing the generation status of a specific governance item.', 'title' => '', 'example' => '', ], @@ -6148,20 +4129,12 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'Query the generation status of the identity permission governance detection report', - 'summary' => 'Queries the status of an identity and access governance report.', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetGovernanceReportStatus', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGovernanceReportStatus'], ], ], 'ramActions' => [ @@ -6172,12 +4145,7 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -6185,14 +4153,9 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"F2CE9688-AA85-5F23-8C22-0EC23473405A\\",\\n \\"WholeReportStatus\\": \\"Progressing\\",\\n \\"GovernanceItemsStatus\\": {\\n \\"GovernanceItemStatus\\": [\\n {\\n \\"GovernanceItem\\": \\"AccountRecentUsingAccessKey\\",\\n \\"Status\\": \\"Progressing\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'GetGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the information about a Resource Access Management (RAM) user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6204,22 +4167,13 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Dev-Team', 'title' => ''], ], ], 'responses' => [ @@ -6228,70 +4182,38 @@ 'type' => 'object', 'properties' => [ 'Group' => [ - 'description' => 'The information about the RAM user group.'."\n", + 'description' => 'The information about the RAM user group.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'GroupId' => [ - 'description' => 'The ID of the RAM user group.'."\n", - 'type' => 'string', - 'example' => '740317625433843****', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T16:15:17Z', - 'title' => '', - ], - 'GroupName' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T16:15:17Z', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user group.', 'type' => 'string', 'example' => 'Dev-Team', 'title' => ''], + 'GroupId' => ['description' => 'The ID of the RAM user group.', 'type' => 'string', 'example' => '740317625433843****', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time.', 'type' => 'string', 'example' => '2020-10-19T16:15:17Z', 'title' => ''], + 'GroupName' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'example' => 'Dev-Team', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => '开发团队', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-19T16:15:17Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '86ECEC3C-7262-4C3C-94B4-A98F7CC1F060', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '86ECEC3C-7262-4C3C-94B4-A98F7CC1F060', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Dev-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-19T16:15:17Z\\",\\n \\"GroupName\\": \\"Dev-Team\\",\\n \\"Comments\\": \\"Dev-Team\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"86ECEC3C-7262-4C3C-94B4-A98F7CC1F060\\"\\n}","errorExample":""},{"type":"xml","example":"","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetGroup', - 'summary' => 'Queries the information about a Resource Access Management (RAM) user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -6300,27 +4222,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Dev-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-19T16:15:17Z\\",\\n \\"GroupName\\": \\"Dev-Team\\",\\n \\"Comments\\": \\"开发团队\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"86ECEC3C-7262-4C3C-94B4-A98F7CC1F060\\"\\n}","type":"json"}]', ], 'GetLoginProfile' => [ - 'summary' => 'Retrieves the logon information for a specified Resource Access Management (RAM) user.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the console logon settings for a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6333,108 +4245,54 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7462', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response that is returned.', + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The ID of the request.', - 'type' => 'string', - 'example' => 'E517F18B-632C-48FC-93F1-CDCBCC6F8444', - 'title' => '', - ], + 'RequestId' => ['description' => 'The ID of the request.', 'type' => 'string', 'example' => 'E517F18B-632C-48FC-93F1-CDCBCC6F8444', 'title' => ''], 'LoginProfile' => [ - 'description' => 'The logon information for the console.', + 'description' => 'The console logon settings for the RAM user.', 'type' => 'object', 'properties' => [ - 'Status' => [ - 'description' => 'The status of console logon. Valid values:'."\n" - ."\n" - .'- Active: Console logon is enabled.'."\n" - ."\n" - .'- Inactive: Console logon is disabled.', - 'type' => 'string', - 'example' => 'Active', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the logon profile was last updated. The time is in Coordinated Universal Time (UTC).', - 'type' => 'string', - 'example' => '2020-10-14T06:56:45Z', - 'title' => '', - ], - 'LastLoginTime' => [ - 'description' => 'The time when the RAM user last logged on to the console. The time is in UTC.', - 'type' => 'string', - 'example' => '2020-10-14T07:25:25Z', - 'title' => '', - ], - 'PasswordResetRequired' => [ - 'description' => 'Indicates whether the RAM user must reset the password at the next logon. Valid values:'."\n" - ."\n" - .'- false: The RAM user is not required to reset the password.'."\n" - ."\n" - .'- true: The RAM user is required to reset the password.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MFABindRequired' => [ - 'description' => 'Indicates whether multi-factor authentication (MFA) is required for the user. Valid values:'."\n" - ."\n" - .'- false: MFA is not required.'."\n" - ."\n" - .'- true: MFA is required.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'AutoDisableLoginStatus' => [ - 'description' => 'Indicates whether console logon is automatically disabled if the user is inactive. This feature is enabled by default and cannot be disabled.', - 'type' => 'string', - 'example' => 'true', - 'title' => '', - ], - 'PasswordStatus' => [ - 'description' => 'The status of the initial password. An initial password is the password that is configured when you create a logon profile or re-enable console logon.'."\n" - ."\n" - .'Valid values'."\n" - ."\n" - .'- "NotInitial": The password is not an initial password.'."\n" - ."\n" - .'- "InitialValid": The initial password is valid.'."\n" - ."\n" - .'- "InitialExpired": The initial password has expired.', - 'type' => 'string', - 'example' => 'NotInitial', - 'title' => '', - ], + 'Status' => ['description' => 'The status of console logon. Valid values:'."\n" + ."\n" + .'- Active: Console logon is enabled.'."\n" + ."\n" + .'- Inactive: Console logon is disabled.', 'type' => 'string', 'example' => 'Active', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the logon settings were last updated. The time is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-14T06:56:45Z', 'title' => ''], + 'LastLoginTime' => ['description' => 'The time when the RAM user last logged on to the console. The time is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-14T07:25:25Z', 'title' => ''], + 'PasswordResetRequired' => ['description' => 'Indicates whether the RAM user must reset the password at the next logon. Valid values:'."\n" + ."\n" + .'- false.'."\n" + ."\n" + .'- true', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MFABindRequired' => ['description' => 'Indicates whether multi-factor authentication (MFA) is required for the user. Valid values:'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'- true', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'AutoDisableLoginStatus' => ['description' => 'Indicates whether console logon is automatically disabled if the user is inactive. This feature is enabled by default and cannot be disabled.', 'type' => 'string', 'example' => 'true', 'title' => ''], + 'PasswordStatus' => ['description' => 'The status of the initial password. An initial password is the password that is configured when you create a logon profile or re-enable console logon.'."\n" + ."\n" + .'Valid values'."\n" + ."\n" + .'- "NotInitial": The password is not an initial password.'."\n" + ."\n" + .'- "InitialValid": The initial password is valid.'."\n" + ."\n" + .'- "InitialExpired": The initial password has expired.', 'type' => 'string', 'example' => 'NotInitial', 'title' => ''], ], 'title' => '', 'example' => '', @@ -6445,9 +4303,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E517F18B-632C-48FC-93F1-CDCBCC6F8444\\",\\n \\"LoginProfile\\": {\\n \\"Status\\": \\"Active\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"UpdateDate\\": \\"2020-10-14T06:56:45Z\\",\\n \\"LastLoginTime\\": \\"2020-10-14T07:25:25Z\\",\\n \\"PasswordResetRequired\\": false,\\n \\"MFABindRequired\\": false,\\n \\"AutoDisableLoginStatus\\": \\"true\\",\\n \\"PasswordStatus\\": \\"NotInitial\\"\\n }\\n}","type":"json"}]', 'title' => 'GetLoginProfile', 'requestParamsDescription' => ' ', @@ -6456,12 +4312,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetLoginProfile', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetLoginProfile'], ], ], 'ramActions' => [ @@ -6472,26 +4323,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], ], 'GetOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the information about an OIDC IdP.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6499,127 +4340,58 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'E5E1A300-279D-5FBD-A8CF-F4EDC20C4896', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'E5E1A300-279D-5FBD-A8CF-F4EDC20C4896', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '498469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).', 'type' => 'string', 'example' => '498469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"E5E1A300-279D-5FBD-A8CF-F4EDC20C4896\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","errorExample":""},{"type":"xml","example":"<GetOIDCProviderResponse>\\n <RequestId>E5E1A300-279D-5FBD-A8CF-F4EDC20C4896</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>498469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</GetOIDCProviderResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetOIDCProvider', - 'summary' => 'Queries the information about an OIDC IdP.', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to query the information about an OpenID Connect (OIDC) identity provider (IdP) named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to query the information about an OpenID Connect (OIDC) identity provider (IdP) named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -6627,33 +4399,20 @@ 'action' => 'ram:GetOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E5E1A300-279D-5FBD-A8CF-F4EDC20C4896\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","type":"json"}]', ], 'GetPasswordPolicy' => [ - 'summary' => 'Retrieves the password strength policy for Resource Access Management (RAM) users.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the password policy for Resource Access Management (RAM) users.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6665,9 +4424,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [], 'responses' => [ @@ -6675,109 +4432,43 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'BDAA8408-E67C-428B-BFF0-1B2AC05C9610', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'BDAA8408-E67C-428B-BFF0-1B2AC05C9610', 'title' => ''], 'PasswordPolicy' => [ - 'description' => 'The password strength policy.', + 'description' => 'Details of the password policy.', 'type' => 'object', 'properties' => [ - 'RequireNumbers' => [ - 'description' => 'Specifies whether the password must contain numbers.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'RequireLowercaseCharacters' => [ - 'description' => 'Specifies whether the password must contain lowercase letters.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'PasswordReusePrevention' => [ - 'description' => 'The number of previous passwords that cannot be reused.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'RequireSymbols' => [ - 'description' => 'Specifies whether the password must contain symbols.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'PasswordNotContainUserName' => [ - 'description' => 'Specifies whether the password is prohibited from containing the username.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MinimumPasswordDifferentCharacter' => [ - 'description' => 'The minimum number of different characters in the password.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'MaxPasswordAge' => [ - 'description' => 'The password validity period.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'HardExpire' => [ - 'description' => 'Specifies whether users are prohibited from logging on after their passwords expire.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MinimumPasswordLength' => [ - 'description' => 'The minimum password length.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '8', - 'title' => '', - ], - 'RequireUppercaseCharacters' => [ - 'description' => 'Specifies whether the password must contain uppercase letters.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MaxLoginAttemps' => [ - 'description' => 'The maximum number of failed logon attempts before a user is locked out.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'InitialPasswordAge' => [ - 'description' => 'The validity period of the initial password.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '14', - ], + 'RequireNumbers' => ['description' => 'Indicates whether the password must contain numbers.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'RequireLowercaseCharacters' => ['description' => 'Indicates whether the password must contain lowercase letters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'PasswordReusePrevention' => ['description' => 'The password reuse prevention policy.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'RequireSymbols' => ['description' => 'Indicates whether the password must contain special characters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'PasswordNotContainUserName' => ['description' => 'Indicates whether the password must not contain the user name.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MinimumPasswordDifferentCharacter' => ['description' => 'The minimum number of different characters in the password.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'MaxPasswordAge' => ['description' => 'The password validity period.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'HardExpire' => ['description' => 'Indicates whether logon is blocked after the password expires.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MinimumPasswordLength' => ['description' => 'The minimum password length.', 'type' => 'integer', 'format' => 'int32', 'example' => '8', 'title' => ''], + 'RequireUppercaseCharacters' => ['description' => 'Indicates whether the password must contain uppercase letters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MaxLoginAttemps' => ['description' => 'Maximum number of failed password attempts.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'InitialPasswordAge' => ['description' => 'The validity period of the initial password.', 'type' => 'integer', 'format' => 'int32', 'title' => '', 'example' => '14'], + 'InterceptRiskPasswordOnApi' => ['description' => 'Indicates whether threat passwords are blocked when set using APIs.'."\n" + ."\n" + .'Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', ], ], - 'description' => '', + 'description' => 'The response parameters.', 'title' => '', 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BDAA8408-E67C-428B-BFF0-1B2AC05C9610\\",\\n \\"PasswordPolicy\\": {\\n \\"RequireNumbers\\": false,\\n \\"RequireLowercaseCharacters\\": false,\\n \\"PasswordReusePrevention\\": 0,\\n \\"RequireSymbols\\": false,\\n \\"PasswordNotContainUserName\\": false,\\n \\"MinimumPasswordDifferentCharacter\\": 0,\\n \\"MaxPasswordAge\\": 0,\\n \\"HardExpire\\": false,\\n \\"MinimumPasswordLength\\": 8,\\n \\"RequireUppercaseCharacters\\": false,\\n \\"MaxLoginAttemps\\": 0,\\n \\"InitialPasswordAge\\": 14\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BDAA8408-E67C-428B-BFF0-1B2AC05C9610\\",\\n \\"PasswordPolicy\\": {\\n \\"RequireNumbers\\": false,\\n \\"RequireLowercaseCharacters\\": false,\\n \\"PasswordReusePrevention\\": 0,\\n \\"RequireSymbols\\": false,\\n \\"PasswordNotContainUserName\\": false,\\n \\"MinimumPasswordDifferentCharacter\\": 0,\\n \\"MaxPasswordAge\\": 0,\\n \\"HardExpire\\": false,\\n \\"MinimumPasswordLength\\": 8,\\n \\"RequireUppercaseCharacters\\": false,\\n \\"MaxLoginAttemps\\": 0,\\n \\"InitialPasswordAge\\": 14,\\n \\"InterceptRiskPasswordOnApi\\": false\\n }\\n}","type":"json"}]', 'title' => 'GetPasswordPolicy', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -6785,12 +4476,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetPasswordPolicy', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetPasswordPolicy'], ], ], 'ramActions' => [ @@ -6801,27 +4487,15 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'GetSAMLProvider' => [ - 'summary' => 'Retrieves information about a specified SAML provider for role-based SSO.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6833,22 +4507,13 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram7YYMOK', - ], + 'abilityTreeNodes' => ['FEATUREram7YYMOK'], ], 'parameters' => [ [ 'name' => 'SAMLProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the SAML provider.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => 'test-provider', - ], + 'schema' => ['description' => 'The name of the IdP whose information you want to query.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test-provider', 'title' => ''], ], ], 'responses' => [ @@ -6856,88 +4521,43 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => 'BAADB995-0C7A-476D-B293-7E94568EEDFB', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'BAADB995-0C7A-476D-B293-7E94568EEDFB', 'title' => ''], 'SAMLProvider' => [ - 'description' => 'The information about the SAML provider.', + 'description' => 'The information about the IdP.', 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description.', - 'type' => 'string', - 'title' => '', - 'example' => 'This is a provider.', - ], - 'UpdateDate' => [ - 'description' => 'The time when the SAML provider was last updated.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-22T02:51:20Z', - ], - 'SAMLProviderName' => [ - 'description' => 'The name of the SAML provider.', - 'type' => 'string', - 'title' => '', - 'example' => 'test-provider', - ], - 'CreateDate' => [ - 'description' => 'The time when the SAML provider was created.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-22T02:37:05Z', - ], - 'EncodedSAMLMetadataDocument' => [ - 'description' => 'The Base64-encoded metadata file.', - 'type' => 'string', - 'title' => '', - 'example' => 'PD94bWwgdmVy****', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the SAML provider.', - 'type' => 'string', - 'title' => '', - 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', - ], - 'AuthnSignAlgo' => [ - 'type' => 'string', - 'description' => 'The signature algorithm supported by the Alibaba Cloud service provider (SP). Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1', - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'Description' => ['description' => 'The IdP description.', 'type' => 'string', 'example' => 'This is a provider.', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the information was last updated. It is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-22T02:51:20Z', 'title' => ''], + 'SAMLProviderName' => ['description' => 'The IdP name.', 'type' => 'string', 'example' => 'test-provider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the information was created. It is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-22T02:37:05Z', 'title' => ''], + 'EncodedSAMLMetadataDocument' => ['description' => 'The metadata file, which is Base64-encoded.', 'type' => 'string', 'example' => 'PD94bWwgdmVy****', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', 'title' => ''], + 'AuthnSignAlgo' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1', 'type' => 'string', 'example' => 'rsa-sha1', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The response parameters.', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BAADB995-0C7A-476D-B293-7E94568EEDFB\\",\\n \\"SAMLProvider\\": {\\n \\"Description\\": \\"This is a provider.\\",\\n \\"UpdateDate\\": \\"2020-10-22T02:51:20Z\\",\\n \\"SAMLProviderName\\": \\"test-provider\\",\\n \\"CreateDate\\": \\"2020-10-22T02:37:05Z\\",\\n \\"EncodedSAMLMetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:saml-provider/test-provider\\",\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetSAMLProvider', + 'summary' => 'Queries the information about an identity provider (IdP) for role-based single sign-on (SSO).', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetSAMLProvider', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetSAMLProvider'], ], ], 'ramActions' => [ @@ -6948,26 +4568,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BAADB995-0C7A-476D-B293-7E94568EEDFB\\",\\n \\"SAMLProvider\\": {\\n \\"Description\\": \\"This is a provider.\\",\\n \\"UpdateDate\\": \\"2020-10-22T02:51:20Z\\",\\n \\"SAMLProviderName\\": \\"test-provider\\",\\n \\"CreateDate\\": \\"2020-10-22T02:37:05Z\\",\\n \\"EncodedSAMLMetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:saml-provider/test-provider\\",\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n }\\n}","type":"json"}]', ], 'GetSecurityPreference' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Use `GetSecurityPreference` to query the global security preferences of a RAM user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -6980,110 +4591,71 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7466', - 'abilityTreeNodes' => [ - 'FEATUREramPNEJCS', - ], + 'abilityTreeNodes' => ['FEATUREramPNEJCS'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.', + 'description' => 'The returned data.', 'type' => 'object', 'properties' => [ 'SecurityPreference' => [ - 'description' => 'The information about security preferences.', + 'description' => 'The security preferences.', 'type' => 'object', 'properties' => [ 'AccessKeyPreference' => [ - 'description' => 'The AccessKey preference.', + 'description' => 'The AccessKey preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManageAccessKeys' => [ - 'description' => 'Indicates whether RAM users can manage their own AccessKey pairs. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'AllowUserToManageAccessKeys' => ['description' => 'Specifies whether RAM users can manage their own AccessKey pairs. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'AllowUserToManageServiceCredentials' => ['description' => 'Specifies whether RAM users can manage their own API keys. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', ], 'LoginProfilePreference' => [ - 'description' => 'The logon preferences.', + 'description' => 'The login preferences.', 'type' => 'object', 'properties' => [ - 'EnableSaveMFATicket' => [ - 'description' => 'Indicates whether to save the multi-factor authentication (MFA) status for seven days after a RAM user logs on using MFA. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'LoginSessionDuration' => [ - 'description' => 'The duration of a logon session for a RAM user. Unit: hours.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '6', - 'title' => '', - ], - 'LoginNetworkMasks' => [ - 'description' => 'The the IP addresses or CIDR blocks from which RAM users are allowed to sign in to the Alibaba Cloud console.', - 'type' => 'string', - 'example' => '10.0.0.0/8', - 'title' => '', - ], - 'AllowUserToChangePassword' => [ - 'description' => 'Indicates whether RAM users can manage their own passwords. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'OperationForRiskLogin' => [ - 'description' => 'Indicates whether to use MFA for secondary authentication during an abnormal logon. Valid values:'."\n" - ."\n" - .'- autonomous (default): The secondary authentication can be skipped. The attachment of an MFA device is not required.'."\n" - ."\n" - .'- enforceVerify: The secondary authentication is required.', - 'type' => 'string', - 'deprecated' => true, - 'example' => 'autonomous', - 'title' => '', - ], - 'MFAOperationForLogin' => [ - 'description' => 'Indicates whether MFA is required for logon. This parameter replaces `EnforceMFAForLogin`. The `EnforceMFAForLogin` parameter is still valid, but using this new parameter is recommended. Valid values:'."\n" - ."\n" - .'- mandatory: MFA is required for all RAM users. This value corresponds to `true` for the `EnforceMFAForLogin` parameter.'."\n" - ."\n" - .'- independent (default): The MFA configuration of each RAM user is used. This value corresponds to `false` for the `EnforceMFAForLogin` parameter.'."\n" - ."\n" - .'- adaptive: MFA is required only for abnormal logons.', - 'type' => 'string', - 'example' => 'adaptive', - 'title' => '', - ], - 'AllowUserToLoginWithPasskey' => [ - 'description' => 'Indicates whether RAM users can log on using passkeys. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'EnableSaveMFATicket' => ['description' => 'Specifies whether to save the multi-factor authentication (MFA) status for 7 days after a RAM user passes MFA. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'LoginSessionDuration' => ['description' => 'The login session duration for RAM users, in hours.', 'type' => 'integer', 'format' => 'int32', 'example' => '6', 'title' => ''], + 'LoginNetworkMasks' => ['description' => 'The login network mask.', 'type' => 'string', 'example' => '10.0.0.0/8', 'title' => ''], + 'AllowUserToChangePassword' => ['description' => 'Specifies whether RAM users can manage their own passwords. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'OperationForRiskLogin' => ['description' => 'Specifies whether to require multi-factor authentication (MFA) for secondary authentication during a risky logon. Valid values:'."\n" + ."\n" + .'- autonomous (default): Secondary authentication is optional, and MFA device binding is not enforced.'."\n" + ."\n" + .'- enforceVerify: Secondary authentication is enforced.', 'type' => 'string', 'deprecated' => true, 'example' => 'autonomous', 'title' => ''], + 'MFAOperationForLogin' => ['description' => 'Specifies whether MFA is required for logon. This parameter replaces `EnforceMFAForLogin`. Although `EnforceMFAForLogin` is still supported, using this new parameter is recommended. Valid values:'."\n" + ."\n" + .'- mandatory: MFA is required for all RAM users. This value corresponds to `true` for the `EnforceMFAForLogin` parameter.'."\n" + ."\n" + .'- independent (default): The MFA setting for each RAM user is applied independently. This value corresponds to `false` for the `EnforceMFAForLogin` parameter.'."\n" + ."\n" + .'- adaptive: MFA is required only for risky logons.', 'type' => 'string', 'example' => 'adaptive', 'title' => ''], + 'AllowUserToLoginWithPasskey' => ['description' => 'Specifies whether RAM users can log in with passkeys. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', 'example' => '', @@ -7092,16 +4664,11 @@ 'description' => 'The MFA preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManageMFADevices' => [ - 'description' => 'Indicates whether RAM users can manage their own MFA devices. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'AllowUserToManageMFADevices' => ['description' => 'Specifies whether RAM users can manage their own MFA devices. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', @@ -7113,16 +4680,11 @@ 'VerificationTypes' => [ 'description' => 'The MFA methods.', 'type' => 'array', - 'items' => [ - 'description' => 'The MFA method. Valid values:'."\n" - ."\n" - .'- sms: SMS verification'."\n" - ."\n" - .'- email: Email verification', - 'type' => 'string', - 'example' => '["sms","email"]', - 'title' => '', - ], + 'items' => ['description' => 'The MFA method. Valid values:'."\n" + ."\n" + .'- sms: SMS verification.'."\n" + ."\n" + .'- email: Email verification.', 'type' => 'string', 'example' => '["sms","email"]', 'title' => ''], 'title' => '', 'example' => '', ], @@ -7134,46 +4696,21 @@ 'description' => 'The personal information preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManagePersonalDingTalk' => [ - 'description' => 'Indicates whether RAM users can attach or detach their personal DingTalk accounts. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'AllowUserToManagePersonalDingTalk' => ['description' => 'Specifies whether RAM users can bind or unbind their personal DingTalk accounts. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', 'example' => '', ], 'MaxIdleDays' => [ - 'description' => 'The configuration of the maximum idle period.', + 'description' => 'The settings for the maximum idle period, in days.', 'type' => 'object', 'properties' => [ - 'MaxIdleDaysForUsers' => [ - 'description' => 'The maximum idle period for RAM users. If a RAM user with console logon enabled remains inactive for this period, their console logon is automatically disabled the next day. This does not apply to single sign-on (SSO) logons.'."\n" - ."\n" - .'Default value: 730.'."\n" - ."\n" - .'Unit: days.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '730', - 'title' => '', - ], - 'MaxIdleDaysForAccessKeys' => [ - 'description' => 'The maximum idle period for the AccessKey pair of a RAM user. If an AccessKey pair remains unused for this period, it is automatically disabled the next day.'."\n" - ."\n" - .'Default value: 730.'."\n" - ."\n" - .'Unit: days.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '730', - 'title' => '', - ], + 'MaxIdleDaysForUsers' => ['description' => 'The maximum idle period (in days) for RAM users. If a RAM user with console login enabled remains inactive (does not log in, excluding SSO logins) for this period, their console login access is automatically disabled on the following day. The default value is 730.', 'type' => 'integer', 'format' => 'int32', 'example' => '730', 'title' => ''], + 'MaxIdleDaysForAccessKeys' => ['description' => 'The maximum idle period, in days, for a RAM user\'s AccessKey. If an AccessKey remains unused for this period, it is automatically disabled on the following day. The default value is 730.', 'type' => 'integer', 'format' => 'int32', 'example' => '730', 'title' => ''], ], 'title' => '', 'example' => '', @@ -7182,34 +4719,22 @@ 'title' => '', 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '30C9068D-FBAA-4998-9986-8A562FED0BC3', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '30C9068D-FBAA-4998-9986-8A562FED0BC3', 'title' => ''], ], 'title' => '', 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"SecurityPreference\\": {\\n \\"AccessKeyPreference\\": {\\n \\"AllowUserToManageAccessKeys\\": false,\\n \\"AllowUserToManageServiceCredentials\\": false\\n },\\n \\"LoginProfilePreference\\": {\\n \\"EnableSaveMFATicket\\": false,\\n \\"LoginSessionDuration\\": 6,\\n \\"LoginNetworkMasks\\": \\"10.0.0.0/8\\",\\n \\"AllowUserToChangePassword\\": true,\\n \\"OperationForRiskLogin\\": \\"autonomous\\",\\n \\"MFAOperationForLogin\\": \\"adaptive\\",\\n \\"AllowUserToLoginWithPasskey\\": true\\n },\\n \\"MFAPreference\\": {\\n \\"AllowUserToManageMFADevices\\": false\\n },\\n \\"VerificationPreference\\": {\\n \\"VerificationTypes\\": [\\n \\"[\\\\\\"sms\\\\\\",\\\\\\"email\\\\\\"]\\"\\n ]\\n },\\n \\"PersonalInfoPreference\\": {\\n \\"AllowUserToManagePersonalDingTalk\\": true\\n },\\n \\"MaxIdleDays\\": {\\n \\"MaxIdleDaysForUsers\\": 730,\\n \\"MaxIdleDaysForAccessKeys\\": 730\\n }\\n },\\n \\"RequestId\\": \\"30C9068D-FBAA-4998-9986-8A562FED0BC3\\"\\n}","type":"json"}]', 'title' => 'GetSecurityPreference', - 'summary' => 'Queries the global security preferences for Resource Access Management (RAM) users.', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetSecurityPreference', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetSecurityPreference'], ], ], 'ramActions' => [ @@ -7220,27 +4745,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"SecurityPreference\\": {\\n \\"AccessKeyPreference\\": {\\n \\"AllowUserToManageAccessKeys\\": false\\n },\\n \\"LoginProfilePreference\\": {\\n \\"EnableSaveMFATicket\\": false,\\n \\"LoginSessionDuration\\": 6,\\n \\"LoginNetworkMasks\\": \\"10.0.0.0/8\\",\\n \\"AllowUserToChangePassword\\": true,\\n \\"OperationForRiskLogin\\": \\"autonomous\\",\\n \\"MFAOperationForLogin\\": \\"adaptive\\",\\n \\"AllowUserToLoginWithPasskey\\": true\\n },\\n \\"MFAPreference\\": {\\n \\"AllowUserToManageMFADevices\\": false\\n },\\n \\"VerificationPreference\\": {\\n \\"VerificationTypes\\": [\\n \\"[\\\\\\"sms\\\\\\",\\\\\\"email\\\\\\"]\\"\\n ]\\n },\\n \\"PersonalInfoPreference\\": {\\n \\"AllowUserToManagePersonalDingTalk\\": true\\n },\\n \\"MaxIdleDays\\": {\\n \\"MaxIdleDaysForUsers\\": 730,\\n \\"MaxIdleDaysForAccessKeys\\": 730\\n }\\n },\\n \\"RequestId\\": \\"30C9068D-FBAA-4998-9986-8A562FED0BC3\\"\\n}","type":"json"}]', ], - 'GetUser' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'GetServiceCredential' => [ + 'summary' => 'Retrieves a specific service credential of a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], 'security' => [ [ 'AK' => [], @@ -7248,54 +4762,113 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'high', 'chargeType' => 'free'], 'parameters' => [ [ + 'name' => 'ServiceCredentialId', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The service credential ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'SC****************'], + ], + [ 'name' => 'UserPrincipalName', 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user.'."\n" + .'If not specified, the service credential of the identity that invokes the current operation is retrieved.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com'], + ], + ], + 'responses' => [ + 200 => [ 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'The name is in the format of `<username>@<AccountAlias>.onaliyun.com`. `<username>` indicates the name of the RAM user. `<AccountAlias>.onaliyun.com` indicates the default domain name.'."\n" - ."\n" - .'The value of `UserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', 'title' => '', + 'description' => '', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '66815255-7CCE-4759-AC37-9755794C3626'], + 'ServiceCredential' => [ + 'title' => '', + 'description' => 'The service credential information.', + 'type' => 'object', + 'properties' => [ + 'ServiceCredentialId' => ['title' => '', 'description' => 'The service credential ID.', 'type' => 'string', 'example' => 'SC***************'], + 'ServiceName' => ['title' => '', 'description' => 'The Alibaba Cloud service name.', 'type' => 'string', 'example' => 'xxx.aliyuncs.com'], + 'UserPrincipalName' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com'], + 'ServiceCredentialName' => ['title' => '', 'description' => 'The service credential name.', 'type' => 'string', 'example' => 'test'], + 'CreateTime' => ['title' => '', 'description' => 'The time when the service credential was created.', 'type' => 'string', 'example' => '2026-03-15T09:20:58Z'], + 'ExpirationTime' => ['title' => '', 'description' => 'The expiration time. This field is not returned for permanent service credentials.', 'type' => 'string', 'example' => '2026-04-15T09:20:58Z'], + 'Status' => [ + 'title' => '', + 'description' => 'The status of the service credential.', + 'type' => 'string', + 'enum' => ['Active', 'Inactive', 'Expired'], + 'example' => 'Active', + ], + ], + 'example' => '', + ], + ], + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Retrieve a single service credential', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], + 'ramActions' => [ + [ + 'operationType' => 'get', + 'ramAction' => [ + 'action' => 'ram:GetServiceCredential', + 'authLevel' => 'resource', + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], ], ], + ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"66815255-7CCE-4759-AC37-9755794C3626\\",\\n \\"ServiceCredential\\": {\\n \\"ServiceCredentialId\\": \\"SC***************\\",\\n \\"ServiceName\\": \\"xxx.aliyuncs.com\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"ServiceCredentialName\\": \\"test\\",\\n \\"CreateTime\\": \\"2026-03-15T09:20:58Z\\",\\n \\"ExpirationTime\\": \\"2026-04-15T09:20:58Z\\",\\n \\"Status\\": \\"Active\\"\\n }\\n}","type":"json"}]', + ], + 'GetUser' => [ + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'The name is in the format of `<username>@<AccountAlias>.onaliyun.com`. `<username>` indicates the name of the RAM user. `<AccountAlias>.onaliyun.com` indicates the default domain name.'."\n" + ."\n" + .'The value of `UserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], + ], [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName`, `UserId`, and `UserAccessKeyId`.', 'type' => 'string', 'required' => false, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ @@ -7305,136 +4878,77 @@ 'type' => 'object', 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM user.'."\n", + 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'Email' => [ - 'description' => 'The email address of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => 'alice@example.com', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the information about the RAM user was updated.'."\n", - 'type' => 'string', - 'example' => '2020-10-13T07:39:22Z', - 'title' => '', - ], - 'MobilePhone' => [ - 'description' => 'The mobile phone number of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => '86-1868888****', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], - 'LastLoginDate' => [ - 'description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the RAM user was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'ProvisionType' => [ - 'description' => 'The source of the RAM user. Valid value:'."\n" - ."\n" - .'* Manual: The RAM user is manually created in the RAM console.'."\n" - .'* SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" - .'* CloudSSO: The RAM user is mapped from a CloudSSO user.'."\n", - 'type' => 'string', - 'example' => 'CloudSSO', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'Email' => ['description' => 'The email address of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => 'alice@example.com', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the information about the RAM user was updated.', 'type' => 'string', 'example' => '2020-10-13T07:39:22Z', 'title' => ''], + 'MobilePhone' => ['description' => 'The mobile phone number of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => '86-1868888****', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => 'This is a cloud computing engineer.', 'title' => ''], + 'LastLoginDate' => ['description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the RAM user was created.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'ProvisionType' => ['description' => 'The source of the RAM user. Valid value:'."\n" + ."\n" + .'- Manual: The RAM user is manually created in the RAM console.'."\n" + ."\n" + .'- SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" + ."\n" + .'- CloudSSO: The RAM user is mapped from a CloudSSO user.', 'type' => 'string', 'example' => 'CloudSSO', 'title' => ''], 'Tags' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'Tag' => [ - 'description' => 'The tags.'."\n", - 'title' => '', + 'description' => 'The tags.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'TagKey' => [ - 'description' => 'The tag key.'."\n", - 'type' => 'string', - 'example' => 'operator', - 'title' => '', - ], - 'TagValue' => [ - 'description' => 'The tag value.'."\n", - 'type' => 'string', - 'example' => 'alice', - 'title' => '', - ], + 'TagKey' => ['description' => 'The tag key.', 'type' => 'string', 'example' => 'operator', 'title' => ''], + 'TagValue' => ['description' => 'The tag value.', 'type' => 'string', 'example' => 'alice', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'UserName' => [ - 'description' => 'The username of the RAM user, which is the prefix of the logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test', + 'description' => '', 'title' => '', + 'example' => '', ], + 'UserName' => ['description' => 'The username of the RAM user, which is the prefix of the logon name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"test\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-13T07:39:22Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"CloudSSO\\",\\n \\"Tags\\": {\\n \\"Tag\\": [\\n {\\n \\"TagKey\\": \\"operator\\",\\n \\"TagValue\\": \\"alice\\"\\n }\\n ]\\n },\\n \\"UserName\\": \\"test\\"\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<GetUserResponse>\\n <User>\\n <DisplayName>test</DisplayName>\\n <UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\n <Email>alice@example.com</Email>\\n <UpdateDate>2020-10-13T07:39:22Z</UpdateDate>\\n <MobilePhone>86-1868888****</MobilePhone>\\n <UserId>20732900249392****</UserId>\\n <Comments>This is a cloud computing engineer.</Comments>\\n <LastLoginDate>2020-10-12T09:12:00Z</LastLoginDate>\\n <CreateDate>2020-10-12T09:12:00Z</CreateDate>\\n <ProvisionType>CloudSSO</ProvisionType>\\n <Tags>\\n <TagKey>operator</TagKey>\\n <TagValue>alice</TagValue>\\n </Tags>\\n </User>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</GetUserResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetUser', 'summary' => 'Queries the information about a RAM user.', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUser'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -7443,26 +4957,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"test\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-13T07:39:22Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"CloudSSO\\",\\n \\"Tags\\": {\\n \\"Tag\\": [\\n {\\n \\"TagKey\\": \\"operator\\",\\n \\"TagValue\\": \\"alice\\"\\n }\\n ]\\n },\\n \\"UserName\\": \\"test\\"\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'GetUserInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries information about a specific Resource Access Management (RAM) user in the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -7470,106 +4975,58 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'get', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserId` and `UserAccessKeyId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserId` and `UserAccessKeyId`.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserId` and `UserAccessKeyId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserId` and `UserAccessKeyId`.', 'type' => 'string', 'required' => false, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM user.'."\n", + 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the RAM user was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-11T09:12:00Z', - 'title' => '', - ], - 'RecycleDate' => [ - 'description' => 'The time when the RAM user was deleted and moved to the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'DeleteDate' => [ - 'description' => 'The time when the RAM user will be permanently deleted from the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-11-12T09:12:00Z', - 'title' => '', - ], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the RAM user was created.', 'type' => 'string', 'example' => '2020-10-11T09:12:00Z', 'title' => ''], + 'RecycleDate' => ['description' => 'The time when the RAM user was deleted and moved to the recycle bin.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'DeleteDate' => ['description' => 'The time when the RAM user will be permanently deleted from the recycle bin.', 'type' => 'string', 'example' => '2020-11-12T09:12:00Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"User\\": {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"CreateDate\\": \\"2020-10-11T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T09:12:00Z\\"\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<GetUserInRecycleBinResponse>\\n <User>\\n <UserId>20732900249392****</UserId>\\n <UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\n <DisplayName>test</DisplayName>\\n <CreateDate>2020-10-11T09:12:00Z</CreateDate>\\n <RecycleDate>2020-10-12T09:12:00Z</RecycleDate>\\n <DeleteDate>2020-11-12T09:12:00Z</DeleteDate>\\n </User>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</GetUserInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetUserInRecycleBin', - 'summary' => 'Queries information about a specific Resource Access Management (RAM) user in the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -7578,26 +5035,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"User\\": {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"CreateDate\\": \\"2020-10-11T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T09:12:00Z\\"\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'GetUserMFAInfo' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries information about the multi-factor authentication (MFA) device that is bound to a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -7609,24 +5057,17 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user. This parameter is differently set in the following scenarios:'."\n" - ."\n" - .'* If you use a RAM user to call this operation, this parameter can be left empty. If you do not specify this parameter, information about the MFA device that is bound to the RAM user is queried.'."\n" - .'* If you use an Alibaba Cloud account to call this operation, you must set this parameter to the logon name of the RAM user that you want to query.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user. This parameter is differently set in the following scenarios:'."\n" + ."\n" + .'- If you use a RAM user to call this operation, this parameter can be left empty. If you do not specify this parameter, information about the MFA device that is bound to the RAM user is queried.'."\n" + ."\n" + .'- If you use an Alibaba Cloud account to call this operation, you must set this parameter to the logon name of the RAM user that you want to query.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -7635,58 +5076,43 @@ 'type' => 'object', 'properties' => [ 'MFADevice' => [ - 'description' => 'The information about the MFA device.'."\n", + 'description' => 'The information about the MFA device.', 'type' => 'object', 'properties' => [ - 'SerialNumber' => [ - 'description' => 'The serial number of the MFA device.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:mfa/device001', - 'title' => '', - ], - 'Type' => [ - 'description' => 'The type of the MFA device. Valid values:'."\n" - ."\n" - .'* VMFA: virtual MFA device.'."\n" - .'* U2F: Universal 2nd Factor (U2F) security key.'."\n", - 'type' => 'string', - 'example' => 'VMFA', - 'title' => '', - ], + 'SerialNumber' => ['description' => 'The serial number of the MFA device.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:mfa/device001', 'title' => ''], + 'Type' => ['description' => 'The type of the MFA device. Valid values:'."\n" + ."\n" + .'- VMFA: virtual MFA device.'."\n" + ."\n" + .'- U2F: Universal 2nd Factor (U2F) security key.', 'type' => 'string', 'example' => 'VMFA', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'FCF7322A-20A9-4F68-8B7F-F86958839BC0', - 'title' => '', - ], - 'IsMFAEnable' => [ - 'description' => 'Indicates whether the MFA device is enabled. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'FCF7322A-20A9-4F68-8B7F-F86958839BC0', 'title' => ''], + 'IsMFAEnable' => ['description' => 'Indicates whether the MFA device is enabled. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"MFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::177242285274****:mfa/device001\\",\\n \\"Type\\": \\"VMFA\\"\\n },\\n \\"RequestId\\": \\"FCF7322A-20A9-4F68-8B7F-F86958839BC0\\",\\n \\"IsMFAEnable\\": true\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<GetUserMFAInfoResponse>\\r\\n\\t<MFADevice>\\r\\n\\t\\t<SerialNumber>acs:ram::177242285274****:mfa/device001</SerialNumber>\\r\\n <Type>VMFA</Type>\\r\\n\\t</MFADevice>\\r\\n\\t<RequestId>FCF7322A-20A9-4F68-8B7F-F86958839BC0</RequestId>\\r\\n\\t<IsMFAEnable>true</IsMFAEnable>\\r\\n</GetUserMFAInfoResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetUserMFAInfo', - 'summary' => 'Queries information about the multi-factor authentication (MFA) device that is bound to a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '700', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserMFAInfo'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -7695,27 +5121,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"MFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::177242285274****:mfa/device001\\",\\n \\"Type\\": \\"VMFA\\"\\n },\\n \\"RequestId\\": \\"FCF7322A-20A9-4F68-8B7F-F86958839BC0\\",\\n \\"IsMFAEnable\\": true\\n}","type":"json"}]', ], 'GetUserSsoSettings' => [ - 'summary' => 'Queries the identity provider settings for user-based SSO.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the configurations of user-based single sign-on (SSO).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -7727,9 +5143,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramY87YVY', - ], + 'abilityTreeNodes' => ['FEATUREramY87YVY'], ], 'parameters' => [], 'responses' => [ @@ -7738,68 +5152,37 @@ 'type' => 'object', 'properties' => [ 'UserSsoSettings' => [ - 'description' => 'The user-based SSO settings.', + 'description' => 'The configurations of user-based SSO.', 'type' => 'object', 'properties' => [ - 'AuxiliaryDomain' => [ - 'description' => 'The auxiliary domain name.', - 'type' => 'string', - 'title' => '', - 'example' => 'example.com', - ], - 'MetadataDocument' => [ - 'description' => 'The metadata file. The value is Base64-encoded.', - 'type' => 'string', - 'title' => '', - 'example' => 'PD94bWwgdmVy****', - ], - 'SsoEnabled' => [ - 'description' => 'Indicates whether user-based SSO is enabled.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'false', - ], - 'SsoLoginWithDomain' => [ - 'description' => 'Specifies whether the `<saml:NameID>` element in a SAML response must contain a domain name when a user logs on using SAML SSO. The username for SSO logon matching is specified on the identity provider (IdP) side.'."\n" - ."\n" - .'- If this parameter is set to `true`, the value of the `<saml:NameID>` element **must** be in the `username@domain` format. The `domain` can be the default domain name or a domain alias, if a domain alias is configured.'."\n" - ."\n" - .'- If this parameter is set to `false`, the value of the `<saml:NameID>` element \\*\\*must\\*\\* contain only the \\`username\\` and \\*\\*must not\\*\\* contain the \\`domain\\` part.'."\n" - ."\n" - .'The default value is `true`.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AuthnSignAlgo' => [ - 'type' => 'string', - 'description' => 'The signature algorithm supported by the Alibaba Cloud service provider (SP). Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1', - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'AuxiliaryDomain' => ['description' => 'The auxiliary domain name.', 'type' => 'string', 'example' => 'example.com', 'title' => ''], + 'MetadataDocument' => ['description' => 'The metadata file, which is Base64-encoded.', 'type' => 'string', 'example' => 'PD94bWwgdmVy****', 'title' => ''], + 'SsoEnabled' => ['description' => 'Indicates whether user-based SSO is enabled.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'SsoLoginWithDomain' => ['description' => 'Indicates whether the Security Assertion Markup Language (SAML) SSO requires a domain name in the `<saml:NameID>` element of the SAML response. If yes, the username specified by the identity provider (IdP) for SSO must have a domain name as the suffix.'."\n" + ."\n" + .'- If the value of the parameter is `true`, the `<saml:NameID>` element **must** be in the `username@domain` format. You can set `domain` to the default domain name or the configured domain alias.'."\n" + ."\n" + .'- If the value of the parameter is `false`, the `<saml:NameID>` element **must** be in the `username` format and **cannot** contain the `domain` suffix.'."\n" + ."\n" + .'The default value is `true`.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AuthnSignAlgo' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1', 'type' => 'string', 'example' => 'rsa-sha1', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '69FC3E5E-D3D9-434B-90CA-BBA8E0551A47', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '69FC3E5E-D3D9-434B-90CA-BBA8E0551A47', 'title' => ''], ], - 'description' => '', + 'description' => 'The response parameters.', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"UserSsoSettings\\": {\\n \\"AuxiliaryDomain\\": \\"example.com\\",\\n \\"MetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"SsoEnabled\\": false,\\n \\"SsoLoginWithDomain\\": true,\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n },\\n \\"RequestId\\": \\"69FC3E5E-D3D9-434B-90CA-BBA8E0551A47\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetUserSsoSettings', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -7807,12 +5190,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetUserSsoSettings', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserSsoSettings'], ], ], 'ramActions' => [ @@ -7823,26 +5201,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"UserSsoSettings\\": {\\n \\"AuxiliaryDomain\\": \\"example.com\\",\\n \\"MetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"SsoEnabled\\": false,\\n \\"SsoLoginWithDomain\\": true,\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n },\\n \\"RequestId\\": \\"69FC3E5E-D3D9-434B-90CA-BBA8E0551A47\\"\\n}","type":"json"}]', ], 'GetVerificationInfo' => [ - 'methods' => [ - 'get', - 'post', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['get', 'post'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -7854,98 +5222,66 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9'], 'SecurityPhoneDevice' => [ - 'description' => 'The information about the mobile phone.'."\n", + 'description' => 'The information about the mobile phone.', 'type' => 'object', 'properties' => [ - 'AreaCode' => [ - 'description' => 'The international dialing code.'."\n", - 'type' => 'string', - 'example' => '86', - 'title' => '', - ], - 'PhoneNumber' => [ - 'description' => 'The mobile phone number.'."\n", - 'type' => 'string', - 'example' => '13900001234', - 'title' => '', - ], - 'Status' => [ - 'description' => 'The status of the mobile phone. Valid values:'."\n" - ."\n" - .'* active: The mobile phone is activated.'."\n" - .'* pending: The mobile phone is pending for activation.'."\n", - 'type' => 'string', - 'example' => 'active', - 'title' => '', - ], + 'AreaCode' => ['description' => 'The international dialing code.', 'type' => 'string', 'example' => '86', 'title' => ''], + 'PhoneNumber' => ['description' => 'The mobile phone number.', 'type' => 'string', 'example' => '13900001234', 'title' => ''], + 'Status' => ['description' => 'The status of the mobile phone. Valid values:'."\n" + ."\n" + .'- active: The mobile phone is activated.'."\n" + ."\n" + .'- pending: The mobile phone is pending for activation.', 'type' => 'string', 'example' => 'active', 'title' => ''], ], 'title' => '', + 'example' => '', ], 'SecurityEmailDevice' => [ - 'description' => 'The information about the email.'."\n", + 'description' => 'The information about the email.', 'type' => 'object', 'properties' => [ - 'Email' => [ - 'description' => 'The email address.'."\n", - 'type' => 'string', - 'example' => 'username@example.com', - 'title' => '', - ], - 'Status' => [ - 'description' => 'The status of the email. Valid values:'."\n" - ."\n" - .'* active: The email is activated.'."\n" - .'* pending: The email is pending for activation.'."\n", - 'type' => 'string', - 'example' => 'active', - 'title' => '', - ], + 'Email' => ['description' => 'The email address.', 'type' => 'string', 'example' => 'username@example.com', 'title' => ''], + 'Status' => ['description' => 'The status of the email. Valid values:'."\n" + ."\n" + .'- active: The email is activated.'."\n" + ."\n" + .'- pending: The email is pending for activation.', 'type' => 'string', 'example' => 'active', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\",\\n \\"SecurityPhoneDevice\\": {\\n \\"AreaCode\\": \\"86\\",\\n \\"PhoneNumber\\": \\"13900001234\\",\\n \\"Status\\": \\"active\\"\\n },\\n \\"SecurityEmailDevice\\": {\\n \\"Email\\": \\"username@example.com\\",\\n \\"Status\\": \\"active\\"\\n }\\n}","errorExample":""},{"type":"xml","example":"<GetVerificationInfoResponse>\\n <RequestId>B182C041-8C64-5F2F-A07B-FC67FAF89CF9</RequestId>\\n <SecurityPhoneDevice>\\n <AreaCode>86</AreaCode>\\n <PhoneNumber>13900001234</PhoneNumber>\\n <Status>active</Status>\\n </SecurityPhoneDevice>\\n <SecurityEmailDevice>\\n <Email>username@example.com</Email>\\n <Status>active</Status>\\n </SecurityEmailDevice>\\n</GetVerificationInfoResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'GetVerificationInfo', 'summary' => 'Queries the status of the mobile phone or email that is bound to a Resource Access Management (RAM) user.', - 'translator' => 'machine', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetVerificationInfo'], + ], + ], 'ramActions' => [ [ 'operationType' => 'get', @@ -7954,26 +5290,17 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\",\\n \\"SecurityPhoneDevice\\": {\\n \\"AreaCode\\": \\"86\\",\\n \\"PhoneNumber\\": \\"13900001234\\",\\n \\"Status\\": \\"active\\"\\n },\\n \\"SecurityEmailDevice\\": {\\n \\"Email\\": \\"username@example.com\\",\\n \\"Status\\": \\"active\\"\\n }\\n}","type":"json"}]', ], 'ListAccessKeys' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the AccessKey pairs of an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -7981,30 +5308,20 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'If this parameter is empty, the AccessKey pairs of the current user are queried.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'If this parameter is empty, the AccessKey pairs of the current user are queried.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'AccessKeys' => [ @@ -8012,67 +5329,50 @@ 'itemNode' => true, 'properties' => [ 'AccessKey' => [ - 'description' => 'The AccessKey pairs.'."\n", - 'title' => '', + 'description' => 'The AccessKey pairs.', 'type' => 'array', 'items' => [ - 'description' => 'The AccessKey pair.'."\n", + 'description' => 'The AccessKey pair.', 'type' => 'object', 'properties' => [ - 'Status' => [ - 'description' => 'The status of the AccessKey pair. Valid values:'."\n" - ."\n" - .'* Active'."\n" - .'* Inactive'."\n", - 'type' => 'string', - 'example' => 'Active', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the AccessKey pair was updated.'."\n", - 'type' => 'string', - 'example' => '2020-10-13T12:33:18Z', - 'title' => '', - ], - 'AccessKeyId' => [ - 'description' => 'The AccessKey ID.'."\n", - 'type' => 'string', - 'example' => 'LTAI*******************', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the AccessKey pair was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-13T12:33:18Z', - 'title' => '', - ], + 'Status' => ['description' => 'The status of the AccessKey pair. Valid values:'."\n" + ."\n" + .'- Active'."\n" + ."\n" + .'- Inactive', 'type' => 'string', 'example' => 'Active', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the AccessKey pair was updated.', 'type' => 'string', 'example' => '2020-10-13T12:33:18Z', 'title' => ''], + 'AccessKeyId' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'example' => 'LTAI*******************', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the AccessKey pair was created.', 'type' => 'string', 'example' => '2020-10-13T12:33:18Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4B450CA1-36E8-4AA2-8461-86B42BF4CC4E', + 'description' => '', 'title' => '', + 'example' => '', ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4B450CA1-36E8-4AA2-8461-86B42BF4CC4E', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"AccessKeys\\": {\\n \\"AccessKey\\": [\\n {\\n \\"Status\\": \\"Active\\",\\n \\"UpdateDate\\": \\"2020-10-13T12:33:18Z\\",\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-13T12:33:18Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"4B450CA1-36E8-4AA2-8461-86B42BF4CC4E\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<ListAccessKeysResponse>\\r\\n\\t<RequestId>4B450CA1-36E8-4AA2-8461-86B42BF4CC4E</RequestId>\\r\\n\\t<AccessKeys>\\r\\n\\t\\t<AccessKey>\\r\\n\\t\\t\\t<AccessKeyId>0wNEpMMlzy7s****</AccessKeyId>\\r\\n\\t\\t\\t<Status>Active</Status>\\r\\n\\t\\t\\t<CreateDate>2020-10-13T12:33:18Z</CreateDate>\\r\\n\\t\\t\\t<UpdateDate>2020-10-13T12:33:18Z</UpdateDate>\\r\\n\\t\\t</AccessKey>\\r\\n\\t\\t<AccessKey>\\r\\n\\t\\t\\t<AccessKeyId>WnIWUruvfaDT****</AccessKeyId>\\r\\n\\t\\t\\t<Status>Inactive</Status>\\r\\n\\t\\t\\t<CreateDate>2020-10-14T12:33:18Z</CreateDate>\\r\\n\\t\\t\\t<UpdateDate>2020-10-14T21:12:21Z</UpdateDate>\\r\\n\\t\\t</AccessKey>\\r\\n\\t</AccessKeys>\\r\\n</ListAccessKeysResponse>\\r\\n\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListAccessKeys', - 'summary' => 'Queries the AccessKey pairs of an Alibaba Cloud account or a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '900', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAccessKeys'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -8081,26 +5381,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AccessKeys\\": {\\n \\"AccessKey\\": [\\n {\\n \\"Status\\": \\"Active\\",\\n \\"UpdateDate\\": \\"2020-10-13T12:33:18Z\\",\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-13T12:33:18Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"4B450CA1-36E8-4AA2-8461-86B42BF4CC4E\\"\\n}","type":"json"}]', ], 'ListAccessKeysInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the AccessKey pairs of a specific Resource Access Management (RAM) user in the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -8108,28 +5399,18 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the Resource Access Management (RAM) user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the Resource Access Management (RAM) user.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'AccessKeys' => [ @@ -8137,61 +5418,43 @@ 'itemNode' => true, 'properties' => [ 'AccessKey' => [ - 'description' => 'The information about the AccessKey pairs.'."\n", - 'title' => '', + 'description' => 'The information about the AccessKey pairs.', 'type' => 'array', 'items' => [ - 'description' => 'The information about the AccessKey pair.'."\n", + 'description' => 'The information about the AccessKey pair.', 'type' => 'object', 'properties' => [ - 'AccessKeyId' => [ - 'description' => 'The AccessKey ID.'."\n", - 'type' => 'string', - 'example' => 'LTAI*******************', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the AccessKey pair was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-11T09:12:00Z', - 'title' => '', - ], - 'RecycleDate' => [ - 'description' => 'The time when the AccessKey pair was deleted and moved to the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'DeleteDate' => [ - 'description' => 'The time when the AccessKey pair will be permanently deleted from the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-11-12T09:12:00Z', - 'title' => '', - ], + 'AccessKeyId' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'example' => 'LTAI*******************', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the AccessKey pair was created.', 'type' => 'string', 'example' => '2020-10-11T09:12:00Z', 'title' => ''], + 'RecycleDate' => ['description' => 'The time when the AccessKey pair was deleted and moved to the recycle bin.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'DeleteDate' => ['description' => 'The time when the AccessKey pair will be permanently deleted from the recycle bin.', 'type' => 'string', 'example' => '2020-11-12T09:12:00Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', + 'description' => '', 'title' => '', + 'example' => '', ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"AccessKeys\\": {\\n \\"AccessKey\\": [\\n {\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-11T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T09:12:00Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<ListAccessKeysInRecycleBinResponse>\\n <AccessKeys>\\n <AccessKeyId>LTAI4GFTgcR8m8cZQDTH****</AccessKeyId>\\n <CreateDate>2020-10-11T09:12:00Z</CreateDate>\\n <RecycleDate>2020-10-12T09:12:00Z</RecycleDate>\\n <DeleteDate>2020-11-12T09:12:00Z</DeleteDate>\\n </AccessKeys>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</ListAccessKeysInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListAccessKeysInRecycleBin', - 'summary' => 'Queries the AccessKey pairs of a specific Resource Access Management (RAM) user in the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAccessKeysInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -8200,26 +5463,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AccessKeys\\": {\\n \\"AccessKey\\": [\\n {\\n \\"AccessKeyId\\": \\"LTAI*******************\\",\\n \\"CreateDate\\": \\"2020-10-11T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-12T09:12:00Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'ListAppSecretIds' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the secret IDs of an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -8231,22 +5485,13 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramQ794FD', - ], + 'abilityTreeNodes' => ['FEATUREramQ794FD'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '472457090344041****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], ], 'responses' => [ @@ -8259,59 +5504,46 @@ 'itemNode' => true, 'properties' => [ 'AppSecret' => [ - 'description' => 'The details of the application secret.'."\n", - 'title' => '', + 'description' => 'The details of the application secret.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'AppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '472457090344041****', - 'title' => '', - ], - 'AppSecretId' => [ - 'description' => 'The ID of the application secret.'."\n", - 'type' => 'string', - 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-26T03:18:39Z', - 'title' => '', - ], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'AppSecretId' => ['description' => 'The ID of the application secret.', 'type' => 'string', 'example' => '2efd5004-005c-4f05-83c6-5b1dd176****', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-26T03:18:39Z', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '5F2FD500-7173-47D6-BD2F-EB60879B4F16', + 'description' => '', 'title' => '', + 'example' => '', ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '5F2FD500-7173-47D6-BD2F-EB60879B4F16', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"AppSecrets\\": {\\n \\"AppSecret\\": [\\n {\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T03:18:39Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"5F2FD500-7173-47D6-BD2F-EB60879B4F16\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<ListAppSecretIdsResponse>\\r\\n\\t<AppSecrets>\\r\\n\\t\\t<AppSecret>\\r\\n\\t\\t\\t<AppId>472457090344041****</AppId>\\r\\n\\t\\t\\t<AppSecretId>2efd5004-005c-4f05-83c6-5b1dd176****</AppSecretId>\\r\\n\\t\\t\\t<CreateDate>2020-10-26T02:52:31Z</CreateDate>\\r\\n\\t\\t</AppSecret>\\r\\n\\t\\t<AppSecret>\\r\\n\\t\\t\\t<AppId>472457090344041****</AppId>\\r\\n\\t\\t\\t<AppSecretId>7be32a14-d4c5-4f19-84e7-c37c1515****</AppSecretId>\\r\\n\\t\\t\\t<CreateDate>2020-10-26T03:18:39Z</CreateDate>\\r\\n\\t\\t</AppSecret>\\r\\n\\t</AppSecrets>\\r\\n\\t<RequestId>5F2FD500-7173-47D6-BD2F-EB60879B4F16</RequestId>\\r\\n</ListAppSecretIdsResponse>\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListAppSecretIds', - 'summary' => 'Queries the secret IDs of an application.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAppSecretIds'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -8320,26 +5552,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AppSecrets\\": {\\n \\"AppSecret\\": [\\n {\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"AppSecretId\\": \\"2efd5004-005c-4f05-83c6-5b1dd176****\\",\\n \\"CreateDate\\": \\"2020-10-26T03:18:39Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"5F2FD500-7173-47D6-BD2F-EB60879B4F16\\"\\n}","type":"json"}]', ], 'ListApplicationProvisionInfos' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries installation information about all installed applications.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -8351,27 +5574,18 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCEEHYN', - ], + 'abilityTreeNodes' => ['FEATUREramCEEHYN'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'SourceType', 'in' => 'query', - 'schema' => [ - 'description' => 'The source of the applications. Valid values:'."\n" - ."\n" - .'- inner: The applications are from the current account.'."\n" - ."\n" - .'- external: The applications are from other accounts.', - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'external', - 'title' => '', - ], + 'schema' => ['description' => 'The source of the applications. Valid values:'."\n" + ."\n" + .'- inner: The applications are from the current account.'."\n" + ."\n" + .'- external: The applications are from other accounts.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'external', 'title' => ''], ], ], 'responses' => [ @@ -8389,30 +5603,10 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.', - 'type' => 'string', - 'example' => 'GiteeAliyun', - 'title' => '', - ], - 'AppName' => [ - 'description' => 'The name of the application.', - 'type' => 'string', - 'example' => 'GiteePrd', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time. The value is a timestamp.', - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], - 'AppId' => [ - 'description' => 'The ID of the application.', - 'type' => 'string', - 'example' => '452392483381546****', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'GiteeAliyun', 'title' => ''], + 'AppName' => ['description' => 'The name of the application.', 'type' => 'string', 'example' => 'GiteePrd', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '452392483381546****', 'title' => ''], 'DelegatedScope' => [ 'description' => 'The information about the permissions that are granted to the application.', 'type' => 'object', @@ -8427,18 +5621,8 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission.', - 'type' => 'string', - 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission.', - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', @@ -8456,18 +5640,8 @@ 'title' => '', 'example' => '', ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account.', - 'type' => 'string', - 'example' => '177242285274****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was installed. The value is a timestamp.', - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], ], 'description' => '', 'title' => '', @@ -8481,12 +5655,7 @@ 'title' => '', 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'E403EBFD-C997-489D-BFC7-37C05E66D67C', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'E403EBFD-C997-489D-BFC7-37C05E66D67C', 'title' => ''], ], 'description' => '', 'title' => '', @@ -8494,23 +5663,15 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListApplicationProvisionInfos', - 'summary' => 'Queries installation information about all installed applications.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListApplicationProvisionInfos', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListApplicationProvisionInfos'], ], ], 'ramActions' => [ @@ -8521,12 +5682,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -8534,14 +5690,8 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"ApplicationProvisionInfos\\": {\\n \\"ApplicationProvisionInfo\\": [\\n {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"AppName\\": \\"GiteePrd\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"AppId\\": \\"452392483381546****\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"用于获取用户的OpenID（默认权限范围，不可移除）\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"1603693518000\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"E403EBFD-C997-489D-BFC7-37C05E66D67C\\"\\n}","type":"json"}]', ], 'ListApplications' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -8553,9 +5703,7 @@ 'operationType' => 'get', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram2SMFX0', - ], + 'abilityTreeNodes' => ['FEATUREram2SMFX0'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], @@ -8565,12 +5713,7 @@ 'description' => 'The response that is returned.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'CE458B58-8C40-46F7-A9D4-CB85136B0C06', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'CE458B58-8C40-46F7-A9D4-CB85136B0C06', 'title' => ''], 'Applications' => [ 'type' => 'object', 'itemNode' => true, @@ -8582,43 +5725,12 @@ 'description' => 'The application information.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.', - 'type' => 'string', - 'example' => 'myapp', - 'title' => '', - ], - 'AccessTokenValidity' => [ - 'description' => 'The validity period of the access token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '3600', - 'title' => '', - ], - 'SecretRequired' => [ - 'description' => 'Indicates whether an application secret is required.', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account to which the application belongs.', - 'type' => 'string', - 'example' => '177242285274****', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was created.', - 'type' => 'string', - 'example' => '2020-10-23T09:33:22Z', - 'title' => '', - ], - 'AppName' => [ - 'description' => 'The name of the application.', - 'type' => 'string', - 'example' => 'myapp', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], + 'AccessTokenValidity' => ['description' => 'The validity period of the access token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '3600', 'title' => ''], + 'SecretRequired' => ['description' => 'Indicates whether an application secret is required.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account to which the application belongs.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was created.', 'type' => 'string', 'example' => '2020-10-23T09:33:22Z', 'title' => ''], + 'AppName' => ['description' => 'The name of the application.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], 'RedirectUris' => [ 'type' => 'object', 'itemNode' => true, @@ -8626,12 +5738,7 @@ 'RedirectUri' => [ 'description' => 'The redirect URI.', 'type' => 'array', - 'items' => [ - 'description' => 'The redirect URI.', - 'type' => 'string', - 'example' => 'https://www.example.com', - 'title' => '', - ], + 'items' => ['description' => 'The redirect URI.', 'type' => 'string', 'example' => 'https://www.example.com', 'title' => ''], 'title' => '', 'example' => '', ], @@ -8640,12 +5747,7 @@ 'title' => '', 'example' => '', ], - 'UpdateDate' => [ - 'description' => 'The time when the application was last updated.', - 'type' => 'string', - 'example' => '2020-10-23T09:33:22Z', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the application was last updated.', 'type' => 'string', 'example' => '2020-10-23T09:33:22Z', 'title' => ''], 'DelegatedScope' => [ 'description' => 'The permission scopes of the application.', 'type' => 'object', @@ -8661,30 +5763,15 @@ 'description' => 'The permission scopes of the application.', 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the scope.', - 'type' => 'string', - 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the scope.', - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], - 'Required' => [ - 'description' => 'Indicates whether this permission scope is required by default when the application is installed. Valid values:'."\n" - ."\n" - .'- true: The permission scope is required.'."\n" - ."\n" - .'- false: The permission scope is not required.'."\n" - ."\n" - .'The `openid` scope is required by default.', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the scope.', 'type' => 'string', 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', 'title' => ''], + 'Name' => ['description' => 'The name of the scope.', 'type' => 'string', 'example' => 'openid', 'title' => ''], + 'Required' => ['description' => 'Indicates whether this permission scope is required by default when the application is installed. Valid values:'."\n" + ."\n" + .'- true: The permission scope is required.'."\n" + ."\n" + .'- false: The permission scope is not required.'."\n" + ."\n" + .'The `openid` scope is required by default.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', 'example' => '', @@ -8701,47 +5788,21 @@ 'title' => '', 'example' => '', ], - 'AppId' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'example' => '441442900344560****', - 'title' => '', - ], - 'RefreshTokenValidity' => [ - 'description' => 'The validity period of the refresh token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '7776000', - 'title' => '', - ], - 'IsMultiTenant' => [ - 'description' => 'Indicates whether the application can be installed by other accounts.', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'AppType' => [ - 'description' => 'The application type. Valid values:'."\n" - ."\n" - .'- WebApp: a web application that runs in a browser.'."\n" - ."\n" - .'- NativeApp: a native application that runs on a desktop or mobile operating system.'."\n" - ."\n" - .'- ServerApp: an application that can directly access Alibaba Cloud services without logon credentials. This type of application is available only for user synchronization based on the System for Cross-domain Identity Management (SCIM) protocol.', - 'type' => 'string', - 'example' => 'WebApp', - 'title' => '', - ], - 'ProtocolVersion' => [ - 'description' => 'The OAuth protocol version of the application. Valid values:'."\n" - ."\n" - .'- `2.0`: OAuth 2.0'."\n" - ."\n" - .'- `2.1`: OAuth 2.1', - 'type' => 'string', - 'example' => '2.0', - 'title' => '', - ], + 'AppId' => ['description' => 'The application ID.', 'type' => 'string', 'example' => '441442900344560****', 'title' => ''], + 'RefreshTokenValidity' => ['description' => 'The validity period of the refresh token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '7776000', 'title' => ''], + 'IsMultiTenant' => ['description' => 'Indicates whether the application can be installed by other accounts.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AppType' => ['description' => 'The application type. Valid values:'."\n" + ."\n" + .'- WebApp: a web application that runs in a browser.'."\n" + ."\n" + .'- NativeApp: a native application that runs on a desktop or mobile operating system.'."\n" + ."\n" + .'- ServerApp: an application that can directly access Alibaba Cloud services without logon credentials. This type of application is available only for user synchronization based on the System for Cross-domain Identity Management (SCIM) protocol.', 'type' => 'string', 'example' => 'WebApp', 'title' => ''], + 'ProtocolVersion' => ['description' => 'The OAuth protocol version of the application. Valid values:'."\n" + ."\n" + .'- `2.0`: OAuth 2.0'."\n" + ."\n" + .'- `2.1`: OAuth 2.1', 'type' => 'string', 'example' => '2.0', 'title' => ''], ], 'title' => '', 'example' => '', @@ -8760,9 +5821,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListApplications', 'summary' => 'Lists the applications that you have created.', 'description' => 'This topic provides an example of how to query the applications in your Alibaba Cloud account. The response shows that only one application, named `myapp`, exists in the account.', @@ -8772,12 +5831,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListApplications', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListApplications'], ], ], 'ramActions' => [ @@ -8788,12 +5842,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -8801,14 +5850,8 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"CE458B58-8C40-46F7-A9D4-CB85136B0C06\\",\\n \\"Applications\\": {\\n \\"Application\\": [\\n {\\n \\"DisplayName\\": \\"myapp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T09:33:22Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T09:33:22Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Name\\": \\"openid\\",\\n \\"Required\\": true\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"441442900344560****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListExternalApplications' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -8820,9 +5863,7 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram2SMFX0', - ], + 'abilityTreeNodes' => ['FEATUREram2SMFX0'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], @@ -8831,30 +5872,15 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '936E1D9C-157D-45BD-8A3B-81C0716EB077', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'A pagination token. It can be used in the next request to retrieve a new page of results.'."\n" - ."\n" - .'> This parameter is returned only when `IsTruncated` is `true`.', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '936E1D9C-157D-45BD-8A3B-81C0716EB077', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'A pagination token. It can be used in the next request to retrieve a new page of results.'."\n" + ."\n" + .'> This parameter is returned only when `IsTruncated` is `true`.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], 'ExternalApplications' => [ 'type' => 'object', 'itemNode' => true, @@ -8865,18 +5891,8 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the external application.', - 'type' => 'string', - 'example' => 'GiteeAliyun', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time of the external application. The value is a timestamp.', - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the external application.', 'type' => 'string', 'example' => 'GiteeAliyun', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time of the external application. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], 'DelegatedScope' => [ 'description' => 'The information about the permissions that are granted to the external application.', 'type' => 'object', @@ -8891,18 +5907,8 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission.', - 'type' => 'string', - 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission.', - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', @@ -8920,30 +5926,10 @@ 'title' => '', 'example' => '', ], - 'AppPrincipalName' => [ - 'description' => 'The name of the external application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.', - 'type' => 'string', - 'example' => 'GiteePrd@app.153082740420****.onaliyun.com', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the external application was installed. The value is a timestamp.', - 'type' => 'string', - 'example' => '1603693318000', - 'title' => '', - ], - 'TenantId' => [ - 'description' => 'The ID of the Alibaba Cloud account for which the external application was installed.', - 'type' => 'string', - 'example' => '173082740420****', - 'title' => '', - ], - 'ForeignAppId' => [ - 'description' => 'The ID of the external application.', - 'type' => 'string', - 'example' => '407426893752729****', - 'title' => '', - ], + 'AppPrincipalName' => ['description' => 'The name of the external application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.', 'type' => 'string', 'example' => 'GiteePrd@app.153082740420****.onaliyun.com', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the external application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1603693318000', 'title' => ''], + 'TenantId' => ['description' => 'The ID of the Alibaba Cloud account for which the external application was installed.', 'type' => 'string', 'example' => '173082740420****', 'title' => ''], + 'ForeignAppId' => ['description' => 'The ID of the external application.', 'type' => 'string', 'example' => '407426893752729****', 'title' => ''], ], 'description' => '', 'title' => '', @@ -8964,20 +5950,13 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListExternalApplications', 'summary' => 'Queries information about all installed external applications.', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListExternalApplications', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListExternalApplications'], ], ], 'ramActions' => [ @@ -8988,12 +5967,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -9002,14 +5976,8 @@ ], 'ListGroups' => [ 'summary' => 'Queries Resource Access Management (RAM) user groups.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9021,36 +5989,21 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" - ."\n" - .'Valid values: 1 to 100. Default value: 100.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" + ."\n" + .'Valid values: 1 to 100. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], ], 'responses' => [ @@ -9058,12 +6011,7 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '065527AA-2F2E-AD7C-7484-F2626CFE4934', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '065527AA-2F2E-AD7C-7484-F2626CFE4934', 'title' => ''], 'Groups' => [ 'type' => 'object', 'itemNode' => true, @@ -9075,42 +6023,12 @@ 'description' => 'The information about the RAM user group.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user group.', - 'type' => 'string', - 'example' => 'Dev-Team', - 'title' => '', - ], - 'GroupId' => [ - 'description' => 'The ID of the RAM user group.', - 'type' => 'string', - 'example' => '740317625433843****', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time.', - 'type' => 'string', - 'example' => '2020-10-19T12:33:18Z', - 'title' => '', - ], - 'GroupName' => [ - 'description' => 'The name of the RAM user group.', - 'type' => 'string', - 'example' => 'dev-team', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.', - 'type' => 'string', - 'example' => '开发团队', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.', - 'type' => 'string', - 'example' => '2020-10-19T12:33:18Z', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user group.', 'type' => 'string', 'example' => 'Dev-Team', 'title' => ''], + 'GroupId' => ['description' => 'The ID of the RAM user group.', 'type' => 'string', 'example' => '740317625433843****', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time.', 'type' => 'string', 'example' => '2020-10-19T12:33:18Z', 'title' => ''], + 'GroupName' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'example' => 'dev-team', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => '开发团队', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-19T12:33:18Z', 'title' => ''], ], 'title' => '', 'example' => '', @@ -9123,22 +6041,12 @@ 'title' => '', 'example' => '', ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'description' => '', 'title' => '', @@ -9146,9 +6054,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListGroups', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -9156,12 +6062,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListGroups', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListGroups'], ], ], 'ramActions' => [ @@ -9172,12 +6073,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/*'], ], ], ], @@ -9185,14 +6081,9 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"065527AA-2F2E-AD7C-7484-F2626CFE4934\\",\\n \\"Groups\\": {\\n \\"Group\\": [\\n {\\n \\"DisplayName\\": \\"Dev-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-19T12:33:18Z\\",\\n \\"GroupName\\": \\"dev-team\\",\\n \\"Comments\\": \\"开发团队\\",\\n \\"CreateDate\\": \\"2020-10-19T12:33:18Z\\"\\n }\\n ]\\n },\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'ListGroupsForUser' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the Resource Access Management (RAM) user groups to which a RAM user belongs.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9204,22 +6095,13 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -9227,76 +6109,53 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '7158A935-FB5E-49A7-8E52-FDA5B2B67247', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '7158A935-FB5E-49A7-8E52-FDA5B2B67247', 'title' => ''], 'Groups' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'Group' => [ - 'description' => 'The information about the RAM user groups.'."\n", - 'title' => '', + 'description' => 'The information about the RAM user groups.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'GroupName' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'GroupId' => [ - 'description' => 'The ID of the RAM user group.'."\n", - 'type' => 'string', - 'example' => '740317625433843****', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'JoinDate' => [ - 'description' => 'The time when the RAM user was added.'."\n", - 'type' => 'string', - 'example' => '2020-10-20T06:57:00Z', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user group.', 'type' => 'string', 'example' => 'Test-Team', 'title' => ''], + 'GroupName' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'example' => 'Test-Team', 'title' => ''], + 'GroupId' => ['description' => 'The ID of the RAM user group.', 'type' => 'string', 'example' => '740317625433843****', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => '测试团队', 'title' => ''], + 'JoinDate' => ['description' => 'The time when the RAM user was added.', 'type' => 'string', 'example' => '2020-10-20T06:57:00Z', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"7158A935-FB5E-49A7-8E52-FDA5B2B67247\\",\\n \\"Groups\\": {\\n \\"Group\\": [\\n {\\n \\"DisplayName\\": \\"Test-Team\\",\\n \\"GroupName\\": \\"Test-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"Comments\\": \\"Test-Team\\",\\n \\"JoinDate\\": \\"2020-10-20T06:57:00Z\\"\\n }\\n ]\\n }\\n}","errorExample":""},{"type":"xml","example":"","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListGroupsForUser', - 'summary' => 'Queries the Resource Access Management (RAM) user groups to which a RAM user belongs.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListGroupsForUser'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -9305,26 +6164,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"7158A935-FB5E-49A7-8E52-FDA5B2B67247\\",\\n \\"Groups\\": {\\n \\"Group\\": [\\n {\\n \\"DisplayName\\": \\"Test-Team\\",\\n \\"GroupName\\": \\"Test-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"Comments\\": \\"测试团队\\",\\n \\"JoinDate\\": \\"2020-10-20T06:57:00Z\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListOIDCProviders' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries OIDC IdPs.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9332,166 +6182,86 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" - ."\n" - .'Valid values: 1 to 100. Default value: 100.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" + ."\n" + .'Valid values: 1 to 100. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'D2148337-B86A-57F0-8B31-EB7BE0125226', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'D2148337-B86A-57F0-8B31-EB7BE0125226', 'title' => ''], 'OIDCProviders' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", - 'title' => '', + 'description' => 'The information about the OIDC IdP.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client, If you want to specify multiple client IDs, separate the client IDs with commas (,).'."\n", - 'type' => 'string', - 'example' => '498469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client, If you want to specify multiple client IDs, separate the client IDs with commas (,).', 'type' => 'string', 'example' => '498469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.``'."\n", - 'type' => 'string', - 'example' => 'EXAMPLE', + 'description' => '', 'title' => '', + 'example' => '', ], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'Marker' => ['description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.\\`\\`', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"D2148337-B86A-57F0-8B31-EB7BE0125226\\",\\n \\"OIDCProviders\\": {\\n \\"OIDCProvider\\": [\\n {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n ]\\n },\\n \\"IsTruncated\\": false,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","errorExample":""},{"type":"xml","example":"<ListOIDCProvidersResponse>\\n <RequestId>D2148337-B86A-57F0-8B31-EB7BE0125226</RequestId>\\n <OIDCProviders>\\n <OIDCProvider>\\n <GmtCreate>1636613763000</GmtCreate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <GmtModified>1636706309000</GmtModified>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <ClientIds>498469743454717****</ClientIds>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n </OIDCProvider>\\n </OIDCProviders>\\n <IsTruncated>false</IsTruncated>\\n</ListOIDCProvidersResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListOIDCProviders', - 'summary' => 'Queries OIDC IdPs.', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to query all OpenID Connect (OIDC) identity providers (IdPs) within your Alibaba Cloud account. The response shows that your Alibaba Cloud account has only one OIDC IdP named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to query all OpenID Connect (OIDC) identity providers (IdPs) within your Alibaba Cloud account. The response shows that your Alibaba Cloud account has only one OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListOIDCProviders'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -9500,25 +6270,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"D2148337-B86A-57F0-8B31-EB7BE0125226\\",\\n \\"OIDCProviders\\": {\\n \\"OIDCProvider\\": [\\n {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n ]\\n },\\n \\"IsTruncated\\": false,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'ListPasskeys' => [ - 'methods' => [ - 'get', - 'post', - ], - 'schemes' => [ - 'https', - ], + 'summary' => 'Queries the information about the passkeys that are bound to a Resource Access Management (RAM) user.', + 'methods' => ['get', 'post'], + 'schemes' => ['https'], 'security' => [ [ 'AK' => [], @@ -9531,9 +6293,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '254320', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '因为创建passkey需要通过控制台页面，没有openAPI，因此无法创建用来更新的passkey', ], @@ -9541,75 +6301,46 @@ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => '04F0F334-1335-436C-A1D7-6C044FE73368'], 'Passkeys' => [ - 'description' => 'The information about the passkeys.'."\n", + 'description' => 'The information about the passkeys.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'PasskeyName' => [ - 'description' => 'The name of the passkey.'."\n", - 'type' => 'string', - 'example' => 'device1', - 'title' => '', - ], - 'PasskeyId' => [ - 'description' => 'The ID of the passkey.'."\n", - 'type' => 'string', - 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the passkey was created. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1737450279', - 'title' => '', - ], - 'LastUseDate' => [ - 'description' => 'The time when the passkey was last used. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1737450390', - 'title' => '', - ], + 'PasskeyName' => ['description' => 'The name of the passkey.', 'type' => 'string', 'example' => 'device1', 'title' => ''], + 'PasskeyId' => ['description' => 'The ID of the passkey.', 'type' => 'string', 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the passkey was created. The value is a timestamp.', 'type' => 'string', 'example' => '1737450279', 'title' => ''], + 'LastUseDate' => ['description' => 'The time when the passkey was last used. The value is a timestamp.', 'type' => 'string', 'example' => '1737450390', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], 'title' => '', + 'example' => '', ], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\",\\n \\"Passkeys\\": [\\n {\\n \\"PasskeyName\\": \\"device1\\",\\n \\"PasskeyId\\": \\"PASSKEY-CuZjEHhWcr7GIQOMGvkS\\",\\n \\"CreateDate\\": \\"1737450279\\",\\n \\"LastUseDate\\": \\"1737450390\\"\\n }\\n ]\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListPasskeys', - 'summary' => 'Queries the information about the passkeys that are bound to a Resource Access Management (RAM) user.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], 'ramActions' => [ [ 'operationType' => 'none', @@ -9618,27 +6349,16 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"04F0F334-1335-436C-A1D7-6C044FE73368\\",\\n \\"Passkeys\\": [\\n {\\n \\"PasskeyName\\": \\"device1\\",\\n \\"PasskeyId\\": \\"PASSKEY-CuZjEHhWcr7GIQOMGvkS\\",\\n \\"CreateDate\\": \\"1737450279\\",\\n \\"LastUseDate\\": \\"1737450390\\"\\n }\\n ]\\n}","type":"json"}]', ], 'ListPredefinedScopes' => [ - 'summary' => 'Queries predefined application permissions.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9646,31 +6366,20 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'AppType', 'in' => 'query', - 'schema' => [ - 'description' => 'The type of the application. Valid values:'."\n" - ."\n" - .'- WebApp'."\n" - ."\n" - .'- NativeApp'."\n" - ."\n" - .'- ServerApp'."\n" - ."\n" - .'If this parameter is empty, the permissions on all types of applications are queried.', - 'type' => 'string', - 'required' => false, - 'example' => 'WebApp', - 'title' => '', - ], + 'schema' => ['description' => 'The type of the application. Valid values:'."\n" + ."\n" + .'- WebApp'."\n" + ."\n" + .'- NativeApp'."\n" + ."\n" + .'- ServerApp'."\n" + ."\n" + .'If this parameter is empty, the permissions on all types of applications are queried.', 'type' => 'string', 'required' => false, 'example' => 'WebApp', 'title' => ''], ], ], 'responses' => [ @@ -9688,18 +6397,8 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission scope.', - 'type' => 'string', - 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission scope.', - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission scope.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission scope.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', @@ -9713,12 +6412,7 @@ 'title' => '', 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '955C096D-EC99-480B-AF37-3921109107D0', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '955C096D-EC99-480B-AF37-3921109107D0', 'title' => ''], ], 'description' => '', 'title' => '', @@ -9726,22 +6420,16 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListPredefinedScopes', + 'summary' => 'Queries predefined application permissions.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListPredefinedScopes', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListPredefinedScopes'], ], ], 'ramActions' => [], @@ -9749,14 +6437,8 @@ ], 'ListRecentGovernanceMetrics' => [ 'summary' => 'Queries all metric values in the most recent governance check.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9768,9 +6450,7 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramOHWKAN', - ], + 'abilityTreeNodes' => ['FEATUREramOHWKAN'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [], @@ -9779,18 +6459,8 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '49846A91-C1C5-5C2B-BC64-8B0B7BADB4C0', - 'title' => '', - ], - 'GenerateTime' => [ - 'description' => 'The time when the report was generated.', - 'type' => 'string', - 'example' => '2025-02-10T02:11:23Z', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '49846A91-C1C5-5C2B-BC64-8B0B7BADB4C0', 'title' => ''], + 'GenerateTime' => ['description' => 'The time when the report was generated.', 'type' => 'string', 'example' => '2025-02-10T02:11:23Z', 'title' => ''], 'GovernanceMetrics' => [ 'type' => 'object', 'itemNode' => true, @@ -9801,30 +6471,15 @@ 'items' => [ 'type' => 'object', 'properties' => [ - 'GovernanceItem' => [ - 'description' => 'The name of the governance item.', - 'type' => 'string', - 'example' => 'RecentAccountLoginTimes', - 'title' => '', - ], - 'MetricType' => [ - 'description' => 'The type of the metric value. Valid values:'."\n" - ."\n" - .'- Number'."\n" - ."\n" - .'- String'."\n" - ."\n" - .'- Boolean', - 'type' => 'string', - 'example' => 'Number', - 'title' => '', - ], - 'MetricValue' => [ - 'description' => 'The metric value. The type of the metric value is determined by `MetricType`.', - 'type' => 'any', - 'example' => '5', - 'title' => '', - ], + 'GovernanceItem' => ['description' => 'The name of the governance item.', 'type' => 'string', 'example' => 'RecentAccountLoginTimes', 'title' => ''], + 'MetricType' => ['description' => 'The type of the metric value. Valid values:'."\n" + ."\n" + .'- Number'."\n" + ."\n" + .'- String'."\n" + ."\n" + .'- Boolean', 'type' => 'string', 'example' => 'Number', 'title' => ''], + 'MetricValue' => ['description' => 'The metric value. The type of the metric value is determined by `MetricType`.', 'type' => 'any', 'example' => '5', 'title' => ''], ], 'description' => '', 'title' => '', @@ -9845,19 +6500,13 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"49846A91-C1C5-5C2B-BC64-8B0B7BADB4C0\\",\\n \\"GenerateTime\\": \\"2025-02-10T02:11:23Z\\",\\n \\"GovernanceMetrics\\": {\\n \\"GovernanceMetric\\": [\\n {\\n \\"GovernanceItem\\": \\"RecentAccountLoginTimes\\",\\n \\"MetricType\\": \\"Number\\",\\n \\"MetricValue\\": \\"5\\"\\n }\\n ]\\n }\\n}","type":"json"}]', 'title' => 'ListRecentGovernanceMetrics', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListRecentGovernanceMetrics', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListRecentGovernanceMetrics'], ], ], 'ramActions' => [ @@ -9868,27 +6517,15 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"49846A91-C1C5-5C2B-BC64-8B0B7BADB4C0\\",\\n \\"GenerateTime\\": \\"2025-02-10T02:11:23Z\\",\\n \\"GovernanceMetrics\\": {\\n \\"GovernanceMetric\\": [\\n {\\n \\"GovernanceItem\\": \\"RecentAccountLoginTimes\\",\\n \\"MetricType\\": \\"Number\\",\\n \\"MetricValue\\": \\"5\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListSAMLProviders' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -9900,35 +6537,20 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram7YYMOK', - ], + 'abilityTreeNodes' => ['FEATUREram7YYMOK'], ], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" - ."\n" - .'Valid values: 1 to 100. Default value: 100.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" + ."\n" + .'Valid values: 1 to 100. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], ], 'responses' => [ @@ -9936,91 +6558,60 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '2D8B70D3-E194-41C9-93C5-F6A10D716D24', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '2D8B70D3-E194-41C9-93C5-F6A10D716D24', 'title' => ''], 'SAMLProviders' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'SAMLProvider' => [ - 'description' => 'The information about IdPs.'."\n", - 'title' => '', + 'description' => 'The information about IdPs.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The update time.'."\n", - 'type' => 'string', - 'example' => '2020-10-22T06:26:15Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'This is a provider.', - 'title' => '', - ], - 'SAMLProviderName' => [ - 'description' => 'The name of the IdP.'."\n", - 'type' => 'string', - 'example' => 'test-provider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-22T06:26:15Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The update time.', 'type' => 'string', 'example' => '2020-10-22T06:26:15Z', 'title' => ''], + 'Description' => ['description' => 'The description.', 'type' => 'string', 'example' => 'This is a provider.', 'title' => ''], + 'SAMLProviderName' => ['description' => 'The name of the IdP.', 'type' => 'string', 'example' => 'test-provider', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-22T06:26:15Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.``'."\n", - 'type' => 'string', - 'example' => 'EXAMPLE', + 'description' => '', 'title' => '', + 'example' => '', ], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.\\`\\`', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"2D8B70D3-E194-41C9-93C5-F6A10D716D24\\",\\n \\"SAMLProviders\\": {\\n \\"SAMLProvider\\": [\\n {\\n \\"UpdateDate\\": \\"2020-10-22T06:26:15Z\\",\\n \\"Description\\": \\"This is a provider.\\",\\n \\"SAMLProviderName\\": \\"test-provider\\",\\n \\"CreateDate\\": \\"2020-10-22T06:26:15Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:saml-provider/test-provider\\"\\n }\\n ]\\n },\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<ListSAMLProvidersResponse>\\r\\n\\t<RequestId>2D8B70D3-E194-41C9-93C5-F6A10D716D24</RequestId>\\r\\n\\t<SAMLProviders>\\r\\n\\t\\t<SAMLProvider>\\r\\n\\t\\t\\t<UpdateDate>2020-10-22T06:26:15Z</UpdateDate>\\r\\n\\t\\t\\t<SAMLProviderName>test-provider</SAMLProviderName>\\r\\n\\t\\t\\t<Description>This is a provider.</Description>\\r\\n\\t\\t\\t<Arn>acs:ram::177242285274****:saml-provider/test-provider</Arn>\\r\\n\\t\\t\\t<CreateDate>2020-10-22T06:26:15Z</CreateDate>\\r\\n\\t\\t</SAMLProvider>\\r\\n\\t</SAMLProviders>\\r\\n\\t<IsTruncated>true</IsTruncated>\\r\\n\\t<Marker>EXAMPLE</Marker>\\r\\n</ListSAMLProvidersResponse>\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListSAMLProviders', 'summary' => 'Queries information about identity providers (IdPs) for role-based single sign-on (SSO).', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListSAMLProviders'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -10029,26 +6620,134 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"2D8B70D3-E194-41C9-93C5-F6A10D716D24\\",\\n \\"SAMLProviders\\": {\\n \\"SAMLProvider\\": [\\n {\\n \\"UpdateDate\\": \\"2020-10-22T06:26:15Z\\",\\n \\"Description\\": \\"This is a provider.\\",\\n \\"SAMLProviderName\\": \\"test-provider\\",\\n \\"CreateDate\\": \\"2020-10-22T06:26:15Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:saml-provider/test-provider\\"\\n }\\n ]\\n },\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], - 'ListTagResources' => [ - 'methods' => [ - 'post', - 'get', + 'ListServiceCredentials' => [ + 'summary' => 'Retrieves the list of service credentials for a Resource Access Management (RAM) user or all RAM users under an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], ], - 'schemes' => [ - 'http', - 'https', + 'operationType' => 'read', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'list', 'riskType' => 'high', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'AllUsers', + 'in' => 'query', + 'schema' => [ + 'title' => '', + 'description' => 'Specifies whether to query service credentials for all Resource Access Management (RAM) users under the Alibaba Cloud account.'."\n" + ."\n" + .'If this parameter is set to true, you cannot specify UserPrincipalName at the same time.', + 'enumValueTitles' => ['true' => 'true', 'false' => 'false'], + 'type' => 'boolean', + 'docRequired' => false, + 'required' => false, + 'example' => 'true', + ], + ], + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user.'."\n" + ."\n" + .'Queries the service credentials of the specified RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com'], + ], + [ + 'name' => 'ServiceName', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The service name of the Alibaba Cloud service.', 'type' => 'string', 'required' => false, 'example' => 'xxx.aliyuncs.com'], + ], + [ + 'name' => 'MaxResults', + 'in' => 'query', + 'allowEmptyValue' => false, + 'schema' => ['title' => '', 'description' => 'The maximum number of entries per page. Valid values: 1 to 100. Default value: 10.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '20'], + ], + [ + 'name' => 'NextToken', + 'in' => 'query', + 'allowEmptyValue' => false, + 'schema' => ['title' => '', 'description' => 'The token that is used to retrieve the next page of results. You do not need to specify this parameter for the first API call.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE*******'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => '', + 'description' => '', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => 'D80A0F97-6F12-5CD1-A70A-77A03BF4CFC5'], + 'ServiceCredentials' => [ + 'title' => '', + 'description' => 'The list of service credentials.', + 'type' => 'array', + 'items' => [ + 'title' => '', + 'description' => 'The service credential information.', + 'type' => 'object', + 'properties' => [ + 'ServiceCredentialId' => ['title' => '', 'description' => 'The ID of the service credential.', 'type' => 'string', 'example' => 'SC*************'], + 'ServiceCredentialName' => ['title' => '', 'description' => 'The name of the service credential.', 'type' => 'string', 'example' => 'test'], + 'ServiceName' => ['title' => '', 'description' => 'The service name of the Alibaba Cloud service.', 'type' => 'string', 'example' => 'xxx.aliyuncs.com'], + 'UserPrincipalName' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com'], + 'CreateTime' => ['title' => '', 'description' => 'The time when the service credential was created.', 'type' => 'string', 'example' => '2026-05-07T05:49:57Z'], + 'ExpirationTime' => ['title' => '', 'description' => 'The expiration time. This field is not returned for service credentials that are permanently valid.', 'type' => 'string', 'example' => '2026-06-07T05:49:57Z'], + 'Status' => [ + 'title' => '', + 'description' => 'The status of the service credential.', + 'type' => 'string', + 'enum' => ['Active', 'Inactive', 'Expired'], + 'example' => 'Active', + ], + ], + 'example' => '', + ], + 'example' => '', + ], + 'IsTruncated' => ['title' => '', 'description' => 'Indicates whether there is a next page of results.', 'type' => 'boolean', 'example' => 'true'], + 'NextToken' => ['title' => '', 'description' => 'The token that is used to retrieve the next page of results.', 'type' => 'string', 'example' => 'EXAMPLE*******'], + 'MaxResults' => ['title' => '', 'description' => 'The maximum number of entries per page.', 'type' => 'integer', 'format' => 'int32', 'example' => '20'], + ], + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Retrieve service credential list', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], ], + 'ramActions' => [ + [ + 'operationType' => 'list', + 'ramAction' => [ + 'action' => 'ram:ListServiceCredentials', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], + ], + ], + ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"D80A0F97-6F12-5CD1-A70A-77A03BF4CFC5\\",\\n \\"ServiceCredentials\\": [\\n {\\n \\"ServiceCredentialId\\": \\"SC*************\\",\\n \\"ServiceCredentialName\\": \\"test\\",\\n \\"ServiceName\\": \\"xxx.aliyuncs.com\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"CreateTime\\": \\"2026-05-07T05:49:57Z\\",\\n \\"ExpirationTime\\": \\"2026-06-07T05:49:57Z\\",\\n \\"Status\\": \\"Active\\"\\n }\\n ],\\n \\"IsTruncated\\": true,\\n \\"NextToken\\": \\"EXAMPLE*******\\",\\n \\"MaxResults\\": 20\\n}","type":"json"}]', + ], + 'ListTagResources' => [ + 'summary' => 'Queries the tags that are added resources.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -10059,9 +6758,7 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramVRK65Q', - ], + 'abilityTreeNodes' => ['FEATUREramVRK65Q'], ], 'parameters' => [ [ @@ -10074,59 +6771,34 @@ ."\n" .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource name is the name of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'array', - 'items' => [ - 'description' => 'The name of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource name is the name of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'items' => ['description' => 'The name of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource name is the name of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], 'required' => false, 'maxItems' => 51, + 'example' => '', ], ], [ 'name' => 'NextToken', 'in' => 'query', - 'schema' => [ - 'title' => '', - 'description' => 'The token that is used to initiate the next request if the response of the current request is truncated. You can use the token to initiate another request and obtain the remaining records.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'caeba0bbb2be03f84eb48b699f0a4883', - ], + 'schema' => ['description' => 'The token that is used to initiate the next request if the response of the current request is truncated. You can use the token to initiate another request and obtain the remaining records.', 'type' => 'string', 'required' => false, 'title' => '', 'example' => 'caeba0bbb2be03f84eb48b699f0a4883'], ], [ 'name' => 'PageSize', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page. If a response is truncated because it reaches the value of PageSize, the value of IsTruncated will be true. Valid values: 1 to 100. Default value: 100.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '2', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page. If a response is truncated because it reaches the value of PageSize, the value of IsTruncated will be true. Valid values: 1 to 100. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '2', 'title' => ''], ], [ 'name' => 'ResourceType', 'in' => 'query', - 'schema' => [ - 'title' => '', - 'description' => 'The type of the resource. Valid value:'."\n" - ."\n" - .'* user: a RAM user'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'user', - ], + 'schema' => ['description' => 'The type of the resource. Valid value:'."\n" + ."\n" + .'- user: a RAM user', 'type' => 'string', 'required' => false, 'docRequired' => true, 'title' => '', 'example' => 'user'], ], [ 'name' => 'ResourceId', @@ -10138,21 +6810,16 @@ ."\n" .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource ID is the ID of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'array', - 'items' => [ - 'description' => 'The ID of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource ID is the ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'items' => ['description' => 'The ID of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If ResourceType is set to user, the resource ID is the ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], 'required' => false, 'maxItems' => 51, + 'example' => '', ], ], [ @@ -10163,129 +6830,94 @@ 'title' => '', 'description' => 'The tag value.'."\n" ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.'."\n", + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'Key' => [ - 'title' => '', - 'description' => 'The key of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'operator', - ], - 'Value' => [ - 'title' => '', - 'description' => 'The value of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'alice', - ], + 'Key' => ['description' => 'The key of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'operator'], + 'Value' => ['description' => 'The value of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'alice'], ], 'required' => false, 'title' => '', + 'example' => '', ], 'required' => false, 'maxItems' => 21, + 'example' => '', ], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'NextToken' => [ - 'title' => '', - 'description' => 'The marker. This parameter is returned only if the value of IsTruncated is true. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.'."\n", - 'type' => 'string', - 'example' => 'caeba0bbb2be03f84eb48b699f0a****', - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4BE83135-0B08-467C-B3A2-27B312FD0F57', - 'title' => '', - ], + 'NextToken' => ['description' => 'The marker. This parameter is returned only if the value of IsTruncated is true. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.', 'type' => 'string', 'title' => '', 'example' => 'caeba0bbb2be03f84eb48b699f0a****'], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4BE83135-0B08-467C-B3A2-27B312FD0F57', 'title' => ''], 'TagResources' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'TagResource' => [ 'title' => '', - 'description' => 'The tag key.'."\n", + 'description' => 'The tag key.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'ResourceType' => [ - 'title' => '', - 'description' => 'The type of the resource. Valid values:'."\n" - ."\n" - .'* user: a RAM user'."\n", - 'type' => 'string', - 'example' => 'user', - ], - 'TagValue' => [ - 'title' => '', - 'description' => 'The tag value.'."\n", - 'type' => 'string', - 'example' => 'alice', - ], - 'ResourceId' => [ - 'title' => '', - 'description' => 'The ID of the resource.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - ], - 'TagKey' => [ - 'title' => '', - 'description' => 'The tag key.'."\n", - 'type' => 'string', - 'example' => 'operator', - ], + 'ResourceType' => ['description' => 'The type of the resource. Valid values:'."\n" + ."\n" + .'- user: a RAM user', 'type' => 'string', 'title' => '', 'example' => 'user'], + 'TagValue' => ['description' => 'The tag value.', 'type' => 'string', 'title' => '', 'example' => 'alice'], + 'ResourceId' => ['description' => 'The ID of the resource.', 'type' => 'string', 'title' => '', 'example' => '20732900249392****'], + 'TagKey' => ['description' => 'The tag key.', 'type' => 'string', 'title' => '', 'example' => 'operator'], ], 'title' => '', + 'example' => '', ], + 'example' => '', ], ], - ], - 'IsTruncated' => [ + 'description' => '', 'title' => '', - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', + 'example' => '', ], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'title' => '', 'example' => 'true'], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"NextToken\\": \\"caeba0bbb2be03f84eb48b699f0a****\\",\\n \\"RequestId\\": \\"4BE83135-0B08-467C-B3A2-27B312FD0F57\\",\\n \\"TagResources\\": {\\n \\"TagResource\\": [\\n {\\n \\"ResourceType\\": \\"user\\",\\n \\"TagValue\\": \\"alice\\",\\n \\"ResourceId\\": \\"20732900249392****\\",\\n \\"TagKey\\": \\"operator\\"\\n }\\n ]\\n },\\n \\"IsTruncated\\": true\\n}","errorExample":""},{"type":"xml","example":"<ListTagResourcesResponse>\\n <NextToken>caeba0bbb2be03f84eb48b699f0a4883</NextToken>\\n <RequestId>4BE83135-0B08-467C-B3A2-27B312FD0F57</RequestId>\\n <TagResources>\\n <ResourceType>user</ResourceType>\\n <ResourceId>20732900249392****</ResourceId>\\n <TagKey>operator</TagKey>\\n <TagValue>alice</TagValue>\\n </TagResources>\\n <TagResources>\\n <ResourceType>user</ResourceType>\\n <ResourceId>20732900249392****</ResourceId>\\n <TagKey>owner</TagKey>\\n <TagValue>bob</TagValue>\\n </TagResources>\\n <IsTruncated>true</IsTruncated>\\n</ListTagResourcesResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListTagResources', - 'summary' => 'Queries the tags that are added resources.', 'description' => '###'."\n" ."\n" .'You must specify at least one of the following parameters or parameter pairs in a request to determine a query object:'."\n" ."\n" - .'* `ResourceId.N`'."\n" - .'* `Tag.N.Key`'."\n" - .'* `Tag.N.Key` and `Tag.N.Value`'."\n", + .'- `ResourceId.N`'."\n" + ."\n" + .'- `Tag.N.Key`'."\n" + ."\n" + .'- `Tag.N.Key` and `Tag.N.Value`', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListTagResources'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -10294,26 +6926,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"NextToken\\": \\"caeba0bbb2be03f84eb48b699f0a****\\",\\n \\"RequestId\\": \\"4BE83135-0B08-467C-B3A2-27B312FD0F57\\",\\n \\"TagResources\\": {\\n \\"TagResource\\": [\\n {\\n \\"ResourceType\\": \\"user\\",\\n \\"TagValue\\": \\"alice\\",\\n \\"ResourceId\\": \\"20732900249392****\\",\\n \\"TagKey\\": \\"operator\\"\\n }\\n ]\\n },\\n \\"IsTruncated\\": true\\n}","type":"json"}]', ], 'ListUserBasicInfos' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -10321,37 +6943,19 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" - ."\n" - .'Valid values: 1 to 1000. Default value: 100.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be `true`.'."\n" + ."\n" + .'Valid values: 1 to 1000. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], [ 'name' => 'Tag', @@ -10365,24 +6969,12 @@ 'description' => 'The tag.', 'type' => 'object', 'properties' => [ - 'Key' => [ - 'description' => 'The key of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.', - 'type' => 'string', - 'title' => '', - 'required' => false, - 'example' => 'operator', - ], - 'Value' => [ - 'description' => 'The value of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.', - 'type' => 'string', - 'title' => '', - 'required' => false, - 'example' => 'alice', - ], + 'Key' => ['description' => 'The key of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'operator'], + 'Value' => ['description' => 'The value of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'alice'], ], 'required' => false, 'title' => '', @@ -10396,13 +6988,7 @@ [ 'name' => 'Status', 'in' => 'query', - 'schema' => [ - 'description' => 'The status of the RAM users that you want to query. Valid values: active, freeze, and active,freeze. If you set the value to active,freeze, RAM users in both active and freeze states are queried. If you leave the parameter empty, the value active is used by default. If the Tag parameter is specified, you cannot specify the Status parameter. In this case, RAM users in both states are queried.', - 'type' => 'string', - 'required' => false, - 'example' => 'active', - 'title' => '', - ], + 'schema' => ['description' => 'The status of the RAM users that you want to query. Valid values: active, freeze, and active,freeze. If you set the value to active,freeze, RAM users in both active and freeze states are queried. If you leave the parameter empty, the value active is used by default. If the Tag parameter is specified, you cannot specify the Status parameter. In this case, RAM users in both states are queried.', 'type' => 'string', 'required' => false, 'example' => 'active', 'title' => ''], ], ], 'responses' => [ @@ -10411,22 +6997,12 @@ 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'EF2B25FD-CADE-445B-BE4D-E082E0FF1A0F', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'EF2B25FD-CADE-445B-BE4D-E082E0FF1A0F', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], 'UserBasicInfos' => [ 'type' => 'object', 'itemNode' => true, @@ -10438,30 +7014,10 @@ 'description' => 'The basic information about the RAM user.', 'type' => 'object', 'properties' => [ - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.', - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.', - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'Status' => [ - 'description' => 'The status of the RAM user.', - 'type' => 'string', - 'example' => 'active', - 'title' => '', - ], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'Status' => ['description' => 'The status of the RAM user.', 'type' => 'string', 'example' => 'active', 'title' => ''], ], 'title' => '', 'example' => '', @@ -10474,21 +7030,14 @@ 'title' => '', 'example' => '', ], - 'Marker' => [ - 'description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.\\`\\`', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'Marker' => ['description' => 'The `marker`. This parameter is returned only if the value of `IsTruncated` is `true`. If the parameter is returned, you can call this operation again and set this parameter to obtain the truncated part.\\`\\`', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'title' => '', 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListUserBasicInfos', 'summary' => 'Queries the basic information about all Resource Access Management (RAM) users.', 'description' => 'You can call the following API operations to query information about all RAM users:'."\n" @@ -10502,12 +7051,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUserBasicInfos', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUserBasicInfos'], ], ], 'ramActions' => [ @@ -10518,12 +7062,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], @@ -10531,14 +7070,8 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EF2B25FD-CADE-445B-BE4D-E082E0FF1A0F\\",\\n \\"IsTruncated\\": true,\\n \\"UserBasicInfos\\": {\\n \\"UserBasicInfo\\": [\\n {\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Status\\": \\"active\\"\\n }\\n ]\\n },\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'ListUsers' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -10546,37 +7079,19 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" - ."\n" - .'Valid values: 1 to 1000. Default value: 1000.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '1000', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" + ."\n" + .'Valid values: 1 to 1000. Default value: 1000.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '1000', 'title' => ''], ], [ 'name' => 'Tag', @@ -10592,24 +7107,12 @@ .'Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be a up to128 characters in length and cannot contain `http://` or `https://`. The tag value cannot start with `acs:`.', 'type' => 'object', 'properties' => [ - 'Key' => [ - 'description' => 'The key of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.', - 'type' => 'string', - 'title' => '', - 'required' => false, - 'example' => 'operator', - ], - 'Value' => [ - 'description' => 'The value of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.', - 'type' => 'string', - 'title' => '', - 'required' => false, - 'example' => 'alice', - ], + 'Key' => ['description' => 'The key of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'operator'], + 'Value' => ['description' => 'The value of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'alice'], ], 'required' => false, 'title' => '', @@ -10623,13 +7126,7 @@ [ 'name' => 'Status', 'in' => 'query', - 'schema' => [ - 'description' => 'The status of the RAM users that you want to query. Valid values: active, freeze, and active,freeze. If you leave the parameter empty, the value active is used by default. If you specify a value for the Tag parameter, users in both states are queried.', - 'type' => 'string', - 'required' => false, - 'example' => 'active', - 'title' => '', - ], + 'schema' => ['description' => 'The status of the RAM users that you want to query. Valid values: active, freeze, and active,freeze. If you leave the parameter empty, the value active is used by default. If you specify a value for the Tag parameter, users in both states are queried.', 'type' => 'string', 'required' => false, 'example' => 'active', 'title' => ''], ], ], 'responses' => [ @@ -10638,28 +7135,13 @@ 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '4B450CA1-36E8-4AA2-8461-86B42BF4CC4E', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The parameter that is used to obtain the truncated part. It takes effect only when `IsTruncated` is set to `true`.', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4B450CA1-36E8-4AA2-8461-86B42BF4CC4E', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The parameter that is used to obtain the truncated part. It takes effect only when `IsTruncated` is set to `true`.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], 'Users' => [ 'type' => 'object', 'itemNode' => true, @@ -10671,82 +7153,27 @@ 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.', - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'Email' => [ - 'description' => 'The email address of the RAM user.'."\n" - ."\n" - .'> This parameter applies only to the Alibaba Cloud China site (aliyun.com).', - 'type' => 'string', - 'example' => 'alice@example.com', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The point in time when the information about the RAM user was last modified. The time is displayed in UTC.', - 'type' => 'string', - 'example' => '2023-08-21T06:12:47Z', - 'title' => '', - ], - 'MobilePhone' => [ - 'description' => 'The mobile phone number of the RAM user.'."\n" - ."\n" - .'> This parameter applies only to the Alibaba Cloud China site (aliyun.com).', - 'type' => 'string', - 'example' => '86-1868888****', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.', - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.', - 'type' => 'string', - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], - 'LastLoginDate' => [ - 'description' => 'The timestamp when the RAM user last logged on to the console.', - 'type' => 'string', - 'example' => '1692598367586', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The point in time when the RAM user was created. The time is displayed in UTC.', - 'type' => 'string', - 'example' => '2020-08-25T09:23:57Z', - 'title' => '', - ], - 'ProvisionType' => [ - 'description' => 'The source of the RAM user. Valid values:'."\n" - ."\n" - .'- Manual: The RAM user is manually created in the RAM console.'."\n" - ."\n" - .'- SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" - ."\n" - .'- CloudSSO: The RAM user is mapped from a CloudSSO user.', - 'type' => 'string', - 'example' => 'Manual', - 'title' => '', - ], - 'Status' => [ - 'description' => 'The status of the RAM user.', - 'type' => 'string', - 'example' => 'active', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'Email' => ['description' => 'The email address of the RAM user.'."\n" + ."\n" + .'> This parameter applies only to the Alibaba Cloud China site (aliyun.com).', 'type' => 'string', 'example' => 'alice@example.com', 'title' => ''], + 'UpdateDate' => ['description' => 'The point in time when the information about the RAM user was last modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2023-08-21T06:12:47Z', 'title' => ''], + 'MobilePhone' => ['description' => 'The mobile phone number of the RAM user.'."\n" + ."\n" + .'> This parameter applies only to the Alibaba Cloud China site (aliyun.com).', 'type' => 'string', 'example' => '86-1868888****', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => 'This is a cloud computing engineer.', 'title' => ''], + 'LastLoginDate' => ['description' => 'The timestamp when the RAM user last logged on to the console.', 'type' => 'string', 'example' => '1692598367586', 'title' => ''], + 'CreateDate' => ['description' => 'The point in time when the RAM user was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2020-08-25T09:23:57Z', 'title' => ''], + 'ProvisionType' => ['description' => 'The source of the RAM user. Valid values:'."\n" + ."\n" + .'- Manual: The RAM user is manually created in the RAM console.'."\n" + ."\n" + .'- SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" + ."\n" + .'- CloudSSO: The RAM user is mapped from a CloudSSO user.', 'type' => 'string', 'example' => 'Manual', 'title' => ''], + 'Status' => ['description' => 'The status of the RAM user.', 'type' => 'string', 'example' => 'active', 'title' => ''], 'Tags' => [ 'type' => 'object', 'itemNode' => true, @@ -10758,18 +7185,8 @@ 'description' => '', 'type' => 'object', 'properties' => [ - 'TagKey' => [ - 'description' => 'The key of the tag.', - 'type' => 'string', - 'example' => 'oparator', - 'title' => '', - ], - 'TagValue' => [ - 'description' => 'The value of the tag', - 'type' => 'string', - 'example' => 'alice', - 'title' => '', - ], + 'TagKey' => ['description' => 'The key of the tag.', 'type' => 'string', 'example' => 'oparator', 'title' => ''], + 'TagValue' => ['description' => 'The value of the tag', 'type' => 'string', 'example' => 'alice', 'title' => ''], ], 'title' => '', 'example' => '', @@ -10800,9 +7217,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListUsers', 'summary' => 'Queries information about all Resource Access Management (RAM) users.', 'description' => '### [](#)'."\n" @@ -10818,12 +7233,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUsers', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsers'], ], ], 'ramActions' => [ @@ -10834,12 +7244,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], @@ -10847,14 +7252,9 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4B450CA1-36E8-4AA2-8461-86B42BF4CC4E\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\",\\n \\"Users\\": {\\n \\"User\\": [\\n {\\n \\"DisplayName\\": \\"test\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2023-08-21T06:12:47Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"1692598367586\\",\\n \\"CreateDate\\": \\"2020-08-25T09:23:57Z\\",\\n \\"ProvisionType\\": \\"Manual\\",\\n \\"Status\\": \\"active\\",\\n \\"Tags\\": {\\n \\"Tag\\": [\\n {\\n \\"TagKey\\": \\"oparator\\",\\n \\"TagValue\\": \\"alice\\"\\n }\\n ]\\n }\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListUsersForGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries Resource Access Management (RAM) users in a RAM user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -10866,139 +7266,90 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Test-Team', 'title' => ''], ], [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The pagination token that is used in the next request to retrieve a new page of results. You do not need to specify this parameter for the first request.``'."\n" - ."\n" - .'When you call the operation for the first time, if the total number of returned entries exceeds the value of `MaxItems`, the entries are truncated. The system returns entries based on the value of `MaxItems` and does not return the excess entries. In this case, the value of the response parameter `IsTruncated` is `true`, and `Marker` is returned. In the next call, you can use the value of `Marker` and maintain the settings of the other request parameters to query the excess entries. You can repeat the call until the value of `IsTruncated` becomes `false`. This way, all entries are returned.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The pagination token that is used in the next request to retrieve a new page of results. You do not need to specify this parameter for the first request.\\`\\`'."\n" + ."\n" + .'When you call the operation for the first time, if the total number of returned entries exceeds the value of `MaxItems`, the entries are truncated. The system returns entries based on the value of `MaxItems` and does not return the excess entries. In this case, the value of the response parameter `IsTruncated` is `true`, and `Marker` is returned. In the next call, you can use the value of `Marker` and maintain the settings of the other request parameters to query the excess entries. You can repeat the call until the value of `IsTruncated` becomes `false`. This way, all entries are returned.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page.'."\n" - ."\n" - .'Valid values: 1 to 100.'."\n" - ."\n" - .'Default value: 100.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page.'."\n" + ."\n" + .'Valid values: 1 to 100.'."\n" + ."\n" + .'Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '789FF581-B3C8-43A8-9115-54304B46D05C', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The pagination token that is used in the next request to retrieve a new page of results.'."\n" - ."\n" - .'> This parameter is returned only when `IsTruncated` is `true`.'."\n", - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '789FF581-B3C8-43A8-9115-54304B46D05C', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The pagination token that is used in the next request to retrieve a new page of results.'."\n" + ."\n" + .'> This parameter is returned only when `IsTruncated` is `true`.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], 'Users' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM users.'."\n", - 'title' => '', + 'description' => 'The information about the RAM users.', 'type' => 'array', 'items' => [ 'description' => '', 'type' => 'object', 'properties' => [ - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'JoinDate' => [ - 'description' => 'The time when the RAM user was added to the RAM user group. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2020-10-20T06:57:00Z', - 'title' => '', - ], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'JoinDate' => ['description' => 'The time when the RAM user was added to the RAM user group. The time is displayed in UTC.', 'type' => 'string', 'example' => '2020-10-20T06:57:00Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"789FF581-B3C8-43A8-9115-54304B46D05C\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\",\\n \\"Users\\": {\\n \\"User\\": [\\n {\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"JoinDate\\": \\"2020-10-20T06:57:00Z\\"\\n }\\n ]\\n }\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<ListUsersForGroupResponse>\\r\\n\\t<RequestId>789FF581-B3C8-43A8-9115-54304B46D05C</RequestId>\\r\\n <IsTruncated>true</IsTruncated>\\r\\n <Marker>EXAMPLE</Marker>\\r\\n\\t<Users>\\r\\n\\t\\t<User>\\r\\n\\t\\t\\t<UserId>20732900249392****</UserId>\\r\\n\\t\\t\\t<DisplayName>test</DisplayName>\\r\\n\\t\\t\\t<UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\r\\n\\t\\t\\t<JoinDate>2020-10-20T06:57:00Z</JoinDate>\\r\\n\\t\\t</User>\\r\\n\\t\\t<User>\\r\\n\\t\\t\\t<UserId>21096280076542****</UserId>\\r\\n\\t\\t\\t<DisplayName>alice</DisplayName>\\r\\n\\t\\t\\t<UserPrincipalName>alice@example.onaliyun.com</UserPrincipalName>\\r\\n\\t\\t\\t<JoinDate>2020-10-20T07:12:42Z</JoinDate>\\r\\n\\t\\t</User>\\r\\n\\t</Users>\\r\\n</ListUsersForGroupResponse>\\r\\n\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListUsersForGroup', - 'summary' => 'Queries Resource Access Management (RAM) users in a RAM user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsersForGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -11007,26 +7358,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"789FF581-B3C8-43A8-9115-54304B46D05C\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\",\\n \\"Users\\": {\\n \\"User\\": [\\n {\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"JoinDate\\": \\"2020-10-20T06:57:00Z\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListUsersInRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Queries the basic information about all Resource Access Management (RAM) users in the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11034,144 +7376,84 @@ ], 'operationType' => 'read', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'list', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The `marker`. If part of a previous response is truncated, you can use this parameter to obtain the truncated part.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" - ."\n" - .'Valid values: 1 to 100. Default value: 100.'."\n", - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries to return. If a response is truncated because it reaches the value of `MaxItems`, the value of `IsTruncated` will be true.'."\n" + ."\n" + .'Valid values: 1 to 100. Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], [ 'name' => 'Filter', 'in' => 'query', - 'schema' => [ - 'description' => 'The filter condition that is used to query information about a specified RAM user in the recycle bin.'."\n" - ."\n" - .'You must specify this parameter in the `UserPrincipalName eq <username>@<AccountAlias>.onaliyun.com` format.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'UserPrincipalName eq test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The filter condition that is used to query information about a specified RAM user in the recycle bin.'."\n" + ."\n" + .'You must specify this parameter in the `UserPrincipalName eq <username>@<AccountAlias>.onaliyun.com` format.', 'type' => 'string', 'required' => false, 'example' => 'UserPrincipalName eq test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '3687BD52-49FD-585B-AB14-CD05B7C76963', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'* true'."\n" - .'* false'."\n", - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The parameter that is used to obtain the truncated part. It takes effect only when `IsTruncated` is set to `true`.'."\n", - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '3687BD52-49FD-585B-AB14-CD05B7C76963', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The parameter that is used to obtain the truncated part. It takes effect only when `IsTruncated` is set to `true`.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], 'Users' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM users.'."\n", - 'title' => '', + 'description' => 'The information about the RAM users.', 'type' => 'array', 'items' => [ - 'description' => 'The information about the RAM user.'."\n", + 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the RAM user was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'RecycleDate' => [ - 'description' => 'The time when the RAM user was deleted and moved to the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-10-15T09:12:00Z', - 'title' => '', - ], - 'DeleteDate' => [ - 'description' => 'The time when the RAM user will be permanently deleted from the recycle bin.'."\n", - 'type' => 'string', - 'example' => '2020-11-15T09:12:00Z', - 'title' => '', - ], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test@example.onaliyun.com', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the RAM user was created.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'RecycleDate' => ['description' => 'The time when the RAM user was deleted and moved to the recycle bin.', 'type' => 'string', 'example' => '2020-10-15T09:12:00Z', 'title' => ''], + 'DeleteDate' => ['description' => 'The time when the RAM user will be permanently deleted from the recycle bin.', 'type' => 'string', 'example' => '2020-11-15T09:12:00Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"3687BD52-49FD-585B-AB14-CD05B7C76963\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\",\\n \\"Users\\": {\\n \\"User\\": [\\n {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test@example.onaliyun.com\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-15T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-15T09:12:00Z\\"\\n }\\n ]\\n }\\n}","errorExample":""},{"type":"xml","example":"<ListUsersInRecycleBinResponse>\\n <RequestId>3687BD52-49FD-585B-AB14-CD05B7C76963</RequestId>\\n <IsTruncated>true</IsTruncated>\\n <Marker>EXAMPLE</Marker>\\n <Users>\\n <UserId>20732900249392****</UserId>\\n <UserPrincipalName>test@example.onaliyun.com</UserPrincipalName>\\n <DisplayName>test@example.onaliyun.com</DisplayName>\\n <CreateDate>2020-10-12T09:12:00Z</CreateDate>\\n <RecycleDate>2020-10-15T09:12:00Z</RecycleDate>\\n <DeleteDate>2020-11-15T09:12:00Z</DeleteDate>\\n </Users>\\n</ListUsersInRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListUsersInRecycleBin', - 'summary' => 'Queries the basic information about all Resource Access Management (RAM) users in the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsersInRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'list', @@ -11180,26 +7462,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3687BD52-49FD-585B-AB14-CD05B7C76963\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\",\\n \\"Users\\": {\\n \\"User\\": [\\n {\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"UserPrincipalName\\": \\"test@example.onaliyun.com\\",\\n \\"DisplayName\\": \\"test@example.onaliyun.com\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"RecycleDate\\": \\"2020-10-15T09:12:00Z\\",\\n \\"DeleteDate\\": \\"2020-11-15T09:12:00Z\\"\\n }\\n ]\\n }\\n}","type":"json"}]', ], 'ListVirtualMFADevices' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11211,40 +7483,25 @@ 'operationType' => 'list', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'Marker', 'in' => 'query', - 'schema' => [ - 'description' => 'The pagination token that is used in the next request to retrieve a new page of results. You do not need to specify this parameter for the first request.\\`\\`'."\n" - ."\n" - .'When you call the operation for the first time, if the total number of returned entries exceeds the value of `MaxItems`, the entries are truncated. The system returns entries based on the value of `MaxItems` and does not return the excess entries. In this case, the value of the response parameter `IsTruncated` is `true`, and `Marker` is returned. In the next call, you can use the value of `Marker` and maintain the settings of the other request parameters to query the excess entries. You can repeat the call until the value of the `IsTruncated` parameter becomes `false`. This way, all entries are returned.', - 'type' => 'string', - 'required' => false, - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'schema' => ['description' => 'The pagination token that is used in the next request to retrieve a new page of results. You do not need to specify this parameter for the first request.\\`\\`'."\n" + ."\n" + .'When you call the operation for the first time, if the total number of returned entries exceeds the value of `MaxItems`, the entries are truncated. The system returns entries based on the value of `MaxItems` and does not return the excess entries. In this case, the value of the response parameter `IsTruncated` is `true`, and `Marker` is returned. In the next call, you can use the value of `Marker` and maintain the settings of the other request parameters to query the excess entries. You can repeat the call until the value of the `IsTruncated` parameter becomes `false`. This way, all entries are returned.', 'type' => 'string', 'required' => false, 'example' => 'EXAMPLE', 'title' => ''], ], [ 'name' => 'MaxItems', 'in' => 'query', - 'schema' => [ - 'description' => 'The number of entries per page.'."\n" - ."\n" - .'Valid values: 1 to 100.'."\n" - ."\n" - .'Default value: 100.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '100', - 'title' => '', - ], + 'schema' => ['description' => 'The number of entries per page.'."\n" + ."\n" + .'Valid values: 1 to 100.'."\n" + ."\n" + .'Default value: 100.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '100', 'title' => ''], ], ], 'responses' => [ @@ -11264,44 +7521,19 @@ 'description' => '', 'type' => 'object', 'properties' => [ - 'SerialNumber' => [ - 'description' => 'The serial number of the MFA device.', - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:mfa/test', - 'title' => '', - ], + 'SerialNumber' => ['description' => 'The serial number of the MFA device.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:mfa/test', 'title' => ''], 'User' => [ 'description' => 'The information of the RAM user that has an MFA device bound.', 'type' => 'object', 'properties' => [ - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@177242285274****.onaliyun.com', - 'title' => '', - ], - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.', - 'type' => 'string', - 'example' => 'test', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.', - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@177242285274****.onaliyun.com', 'title' => ''], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'test', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], ], 'title' => '', 'example' => '', ], - 'ActivateDate' => [ - 'description' => 'The time when the MFA device was activated.', - 'type' => 'string', - 'example' => '2020-10-16T06:02:09Z', - 'title' => '', - ], + 'ActivateDate' => ['description' => 'The time when the MFA device was activated.', 'type' => 'string', 'example' => '2020-10-16T06:02:09Z', 'title' => ''], ], 'title' => '', 'example' => '', @@ -11314,39 +7546,22 @@ 'title' => '', 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '32272612-DF82-485E-8BA9-AFA4E0C3D0BA', - 'title' => '', - ], - 'IsTruncated' => [ - 'description' => 'Indicates whether the response is truncated. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'Marker' => [ - 'description' => 'The pagination token that is used in the next request to retrieve a new page of results.'."\n" - ."\n" - .'> This parameter is returned only when `IsTruncated` is `true`.', - 'type' => 'string', - 'example' => 'EXAMPLE', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '32272612-DF82-485E-8BA9-AFA4E0C3D0BA', 'title' => ''], + 'IsTruncated' => ['description' => 'Indicates whether the response is truncated. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'Marker' => ['description' => 'The pagination token that is used in the next request to retrieve a new page of results.'."\n" + ."\n" + .'> This parameter is returned only when `IsTruncated` is `true`.', 'type' => 'string', 'example' => 'EXAMPLE', 'title' => ''], ], 'title' => '', 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ListVirtualMFADevices', 'summary' => 'Queries multi-factor authentication (MFA) devices.', 'requestParamsDescription' => ' ', @@ -11355,12 +7570,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListVirtualMFADevices', - ], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListVirtualMFADevices'], ], ], 'ramActions' => [ @@ -11371,12 +7581,7 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/*'], ], ], ], @@ -11384,14 +7589,9 @@ 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"VirtualMFADevices\\": {\\n \\"VirtualMFADevice\\": [\\n {\\n \\"SerialNumber\\": \\"acs:ram::177242285274****:mfa/test\\",\\n \\"User\\": {\\n \\"UserPrincipalName\\": \\"test@177242285274****.onaliyun.com\\",\\n \\"DisplayName\\": \\"test\\",\\n \\"UserId\\": \\"20732900249392****\\"\\n },\\n \\"ActivateDate\\": \\"2020-10-16T06:02:09Z\\"\\n }\\n ]\\n },\\n \\"RequestId\\": \\"32272612-DF82-485E-8BA9-AFA4E0C3D0BA\\",\\n \\"IsTruncated\\": true,\\n \\"Marker\\": \\"EXAMPLE\\"\\n}","type":"json"}]', ], 'ProvisionApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Installs an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11403,35 +7603,20 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramCEEHYN', - ], + 'abilityTreeNodes' => ['FEATUREramCEEHYN'], ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '407426893752729****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '407426893752729****', 'title' => ''], ], [ 'name' => 'Scopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The permissions that are granted to the application. Separate multiple permissions with a semicolon (;).'."\n" - ."\n" - .'> For more information about the supported permissions, see [Overview](~~93693~~).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'openid;aliuid', - 'title' => '', - ], + 'schema' => ['description' => 'The permissions that are granted to the application. Separate multiple permissions with a semicolon (;).'."\n" + ."\n" + .'> For more information about the supported permissions, see [Overview](~~93693~~).', 'type' => 'string', 'required' => false, 'example' => 'openid;aliuid', 'title' => ''], ], ], 'responses' => [ @@ -11439,42 +7624,17 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'C8AE06ED-9593-5BF9-8D4A-68D5DDCC90AB', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'C8AE06ED-9593-5BF9-8D4A-68D5DDCC90AB', 'title' => ''], 'ApplicationProvisionInfo' => [ - 'description' => 'The installation information of the application.'."\n", + 'description' => 'The installation information of the application.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteeAliyun', - 'title' => '', - ], - 'AppName' => [ - 'description' => 'The name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteePrd', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], - 'AppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '452392483381546****', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'GiteeAliyun', 'title' => ''], + 'AppName' => ['description' => 'The name of the application.', 'type' => 'string', 'example' => 'GiteePrd', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], + 'AppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '452392483381546****', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the permissions that are granted to the application.'."\n", + 'description' => 'The information about the permissions that are granted to the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -11482,74 +7642,53 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the permissions that are granted to the application.'."\n", - 'title' => '', + 'description' => 'The information about the permissions that are granted to the application.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission.'."\n", - 'type' => 'string', - 'example' => 'Obtains the OpenID of the user. This is the default scope and cannot be deleted.', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission.'."\n", - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account.'."\n", - 'type' => 'string', - 'example' => '177242285274****', - 'title' => '', - ], - 'AppPrincipalName' => [ - 'description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.'."\n", - 'type' => 'string', - 'example' => 'GiteePrd@app.177242285274****.onaliyun.com', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was installed. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], - 'TenantId' => [ - 'description' => 'The ID of the Alibaba Cloud account for which the application was installed.'."\n", - 'type' => 'string', - 'example' => '177242285274****', - 'title' => '', - ], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'AppPrincipalName' => ['description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.', 'type' => 'string', 'example' => 'GiteePrd@app.177242285274****.onaliyun.com', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], + 'TenantId' => ['description' => 'The ID of the Alibaba Cloud account for which the application was installed.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"C8AE06ED-9593-5BF9-8D4A-68D5DDCC90AB\\",\\n \\"ApplicationProvisionInfo\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"AppName\\": \\"GiteePrd\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"AppId\\": \\"452392483381546****\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtains the OpenID of the user. This is the default scope and cannot be deleted.\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"AppPrincipalName\\": \\"GiteePrd@app.177242285274****.onaliyun.com\\",\\n \\"CreateDate\\": \\"1603693518000\\",\\n \\"TenantId\\": \\"177242285274****\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ProvisionApplication', - 'summary' => 'Installs an application.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ProvisionApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -11558,26 +7697,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"C8AE06ED-9593-5BF9-8D4A-68D5DDCC90AB\\",\\n \\"ApplicationProvisionInfo\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\",\\n \\"AppName\\": \\"GiteePrd\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"AppId\\": \\"452392483381546****\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"用于获取用户的OpenID（默认权限范围，不可移除）\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"AppPrincipalName\\": \\"GiteePrd@app.177242285274****.onaliyun.com\\",\\n \\"CreateDate\\": \\"1603693518000\\",\\n \\"TenantId\\": \\"177242285274****\\"\\n }\\n}","type":"json"}]', ], 'ProvisionExternalApplication' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Installs an external application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11590,36 +7720,21 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7484', - 'abilityTreeNodes' => [ - 'FEATUREramCEEHYN', - ], + 'abilityTreeNodes' => ['FEATUREramCEEHYN'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => '403550611646604****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the application.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '403550611646604****', 'title' => ''], ], [ 'name' => 'Scopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The permissions that are granted to the application. Separate multiple permissions with a semicolon (;).'."\n" - ."\n" - .'> For more information about the supported permissions, see [Overview](~~93693~~).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'openid;aliuid', - 'title' => '', - ], + 'schema' => ['description' => 'The permissions that are granted to the application. Separate multiple permissions with a semicolon (;).'."\n" + ."\n" + .'> For more information about the supported permissions, see [Overview](~~93693~~).', 'type' => 'string', 'required' => false, 'example' => 'openid;aliuid', 'title' => ''], ], ], 'responses' => [ @@ -11627,30 +7742,15 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '55535873-9A6B-5C87-853F-C7CD258826F2', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '55535873-9A6B-5C87-853F-C7CD258826F2', 'title' => ''], 'ExternalApplication' => [ - 'description' => 'The information about the external application.'."\n", + 'description' => 'The information about the external application.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.'."\n", - 'type' => 'string', - 'example' => 'GiteeAliyun'."\n", - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'GiteeAliyun'."\n", 'title' => ''], + 'UpdateDate' => ['description' => 'The update time. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the scopes of permissions that are granted to the application.'."\n", + 'description' => 'The information about the scopes of permissions that are granted to the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -11658,74 +7758,53 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the scopes of permissions that are granted to the application.'."\n", - 'title' => '', + 'description' => 'The information about the scopes of permissions that are granted to the application.', 'type' => 'array', 'items' => [ 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the permission scope.'."\n", - 'type' => 'string', - 'example' => 'Obtains the OpenID of the user. This is the default scope and cannot be deleted.', - 'title' => '', - ], - 'Name' => [ - 'description' => 'The name of the permission scope.'."\n", - 'type' => 'string', - 'example' => 'openid', - 'title' => '', - ], + 'Description' => ['description' => 'The description of the permission scope.', 'type' => 'string', 'example' => '用于获取用户的OpenID（默认权限范围，不可移除）', 'title' => ''], + 'Name' => ['description' => 'The name of the permission scope.', 'type' => 'string', 'example' => 'openid', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], + 'title' => '', + 'example' => '', ], ], + 'description' => '', + 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AppPrincipalName' => [ - 'description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.'."\n", - 'type' => 'string', - 'example' => 'GiteePrd@app.177242285274****.onaliyun.com'."\n", - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was installed. The value is a timestamp.'."\n", - 'type' => 'string', - 'example' => '1603693518000', - 'title' => '', - ], - 'TenantId' => [ - 'description' => 'The ID of the Alibaba Cloud account to which the external application belongs.'."\n", - 'type' => 'string', - 'example' => '157242285274****', - 'title' => '', - ], - 'ForeignAppId' => [ - 'description' => 'The ID of the application.'."\n", - 'type' => 'string', - 'example' => '403550611646604****', - 'title' => '', - ], + 'AppPrincipalName' => ['description' => 'The name of the application principal. The value is in the `<app_name>@app.<account_id>.onaliyun.com` format.', 'type' => 'string', 'example' => 'GiteePrd@app.177242285274****.onaliyun.com'."\n", 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was installed. The value is a timestamp.', 'type' => 'string', 'example' => '1603693518000', 'title' => ''], + 'TenantId' => ['description' => 'The ID of the Alibaba Cloud account to which the external application belongs.', 'type' => 'string', 'example' => '157242285274****', 'title' => ''], + 'ForeignAppId' => ['description' => 'The ID of the application.', 'type' => 'string', 'example' => '403550611646604****', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"55535873-9A6B-5C87-853F-C7CD258826F2\\",\\n \\"ExternalApplication\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\\\n\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtains the OpenID of the user. This is the default scope and cannot be deleted.\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppPrincipalName\\": \\"GiteePrd@app.177242285274****.onaliyun.com\\\\n\\",\\n \\"CreateDate\\": \\"1603693518000\\",\\n \\"TenantId\\": \\"157242285274****\\",\\n \\"ForeignAppId\\": \\"403550611646604****\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'ProvisionExternalApplication', - 'summary' => 'Installs an external application.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ProvisionExternalApplication'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -11734,26 +7813,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"55535873-9A6B-5C87-853F-C7CD258826F2\\",\\n \\"ExternalApplication\\": {\\n \\"DisplayName\\": \\"GiteeAliyun\\\\n\\",\\n \\"UpdateDate\\": \\"1603693518000\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"用于获取用户的OpenID（默认权限范围，不可移除）\\",\\n \\"Name\\": \\"openid\\"\\n }\\n ]\\n }\\n },\\n \\"AppPrincipalName\\": \\"GiteePrd@app.177242285274****.onaliyun.com\\\\n\\",\\n \\"CreateDate\\": \\"1603693518000\\",\\n \\"TenantId\\": \\"157242285274****\\",\\n \\"ForeignAppId\\": \\"403550611646604****\\"\\n }\\n}","type":"json"}]', ], 'RemoveClientIdFromOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Removes a client ID from an OpenID Connect (OIDC) identity provider (IdP).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11761,148 +7831,71 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'ClientId', 'in' => 'query', - 'schema' => [ - 'description' => 'The client ID that you want to remove.'."\n" - ."\n" - .'The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods, (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.``'."\n" - ."\n" - .'The client ID can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => '498469743454717****', - 'title' => '', - ], + 'schema' => ['description' => 'The client ID that you want to remove.'."\n" + ."\n" + .'The client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods, (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.\\`\\`'."\n" + ."\n" + .'The client ID can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => '498469743454717****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'EC9A8F3B-AFA5-5C8F-999D-F97BC7CF1FC5', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'EC9A8F3B-AFA5-5C8F-999D-F97BC7CF1FC5', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '598469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).', 'type' => 'string', 'example' => '598469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"EC9A8F3B-AFA5-5C8F-999D-F97BC7CF1FC5\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"598469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","errorExample":""},{"type":"xml","example":"<RemoveClientIdFromOIDCProviderResponse>\\n <RequestId>EC9A8F3B-AFA5-5C8F-999D-F97BC7CF1FC5</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>598469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</RemoveClientIdFromOIDCProviderResponse>","errorExample":""}]', 'title' => 'RemoveClientIdFromOIDCProvider', - 'summary' => 'Removes a client ID from an OpenID Connect (OIDC) identity provider (IdP).', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to remove the client ID `498469743454717****` from the OIDC IdP named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to remove the client ID `498469743454717****` from the OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveClientIdFromOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -11910,32 +7903,20 @@ 'action' => 'ram:RemoveClientIdFromOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"EC9A8F3B-AFA5-5C8F-999D-F97BC7CF1FC5\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"598469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","type":"json"}]', ], 'RemoveFingerprintFromOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Removes a fingerprint from an OpenID Connect (OIDC) identity provider (IdP).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -11943,139 +7924,63 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'Fingerprint', 'in' => 'query', - 'schema' => [ - 'description' => 'The fingerprint that you want to remove.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => '6938fd4d98bab03faadb97b34396831e3780****', - 'title' => '', - ], + 'schema' => ['description' => 'The fingerprint that you want to remove.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => '6938fd4d98bab03faadb97b34396831e3780****', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'C90CE971-4C7F-5D93-BD3E-2D0E79D03C01', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'C90CE971-4C7F-5D93-BD3E-2D0E79D03C01', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '5938fd4d98bab03faadb97b34396831e3780****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '0oa4u6l8x5WoaVbd****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '12', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '5938fd4d98bab03faadb97b34396831e3780****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).', 'type' => 'string', 'example' => '0oa4u6l8x5WoaVbd****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '12', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"C90CE971-4C7F-5D93-BD3E-2D0E79D03C01\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"5938fd4d98bab03faadb97b34396831e3780****\\",\\n \\"ClientIds\\": \\"0oa4u6l8x5WoaVbd****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","errorExample":""},{"type":"xml","example":"<RemoveFingerprintFromOIDCProviderResponse>\\n <RequestId>C90CE971-4C7F-5D93-BD3E-2D0E79D03C01</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>5938fd4d98bab03faadb97b34396831e3780****</Fingerprints>\\n <ClientIds>0oa4u6l8x5WoaVbd****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</RemoveFingerprintFromOIDCProviderResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'RemoveFingerprintFromOIDCProvider', - 'summary' => 'Removes a fingerprint from an OpenID Connect (OIDC) identity provider (IdP).', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to remove the fingerprint `6938fd4d98bab03faadb97b34396831e3780****` from the OIDC IdP named `TestOIDCProvider`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to remove the fingerprint `6938fd4d98bab03faadb97b34396831e3780****` from the OIDC IdP named `TestOIDCProvider`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveFingerprintFromOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -12083,32 +7988,20 @@ 'action' => 'ram:RemoveFingerprintFromOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"C90CE971-4C7F-5D93-BD3E-2D0E79D03C01\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"5938fd4d98bab03faadb97b34396831e3780****\\",\\n \\"ClientIds\\": \\"0oa4u6l8x5WoaVbd****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 12\\n }\\n}","type":"json"}]', ], 'RemoveUserFromGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Removes a Resource Access Management (RAM) user from a RAM user group.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12120,34 +8013,18 @@ 'operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'alice@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'alice@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Test-Team', 'title' => ''], ], ], 'responses' => [ @@ -12155,28 +8032,25 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","errorExample":""},{"type":"xml","example":"<RemoveUserFromGroupResponse>\\r\\n <RequestId>85836703-8D4F-485F-9726-4D1C730F957E</RequestId>\\r\\n</RemoveUserFromGroupResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'RemoveUserFromGroup', - 'summary' => 'Removes a Resource Access Management (RAM) user from a RAM user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveUserFromGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -12185,32 +8059,18 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'RestoreAccessKeyFromRecycleBin' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Restores a specific AccessKey pair that belongs to a Resource Access Management (RAM) user from the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12218,60 +8078,40 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'delete', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the Resource Access Management (RAM) user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the Resource Access Management (RAM) user.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => "\n" - .'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'LTAI*******************', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<RestoreAccessKeyFromRecycleBinResponse>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</RestoreAccessKeyFromRecycleBinResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'RestoreAccessKeyFromRecycleBin', - 'summary' => 'Restores a specific AccessKey pair that belongs to a Resource Access Management (RAM) user from the recycle bin.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RestoreAccessKeyFromRecycleBin'], + ], + ], 'ramActions' => [ [ 'operationType' => 'delete', @@ -12280,26 +8120,73 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', ], 'RestoreUserFromRecycleBin' => [ - 'methods' => [ - 'post', - 'get', + 'summary' => 'Restores a specific Resource Access Management (RAM) user from the recycle bin.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], + 'security' => [ + [ + 'AK' => [], + ], + ], + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'delete', 'riskType' => 'none', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'UserId', + 'in' => 'query', + 'schema' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], + ], ], - 'schemes' => [ - 'http', - 'https', + 'responses' => [ + 200 => [ + 'schema' => [ + 'description' => 'The response parameters.', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', 'title' => ''], + ], + 'title' => '', + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'RestoreUserFromRecycleBin', + 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RestoreUserFromRecycleBin'], + ], + ], + 'ramActions' => [ + [ + 'operationType' => 'delete', + 'ramAction' => [ + 'action' => 'ram:RestoreUserFromRecycleBin', + 'authLevel' => 'resource', + 'actionConditions' => [], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], + ], + ], + ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","type":"json"}]', + ], + 'SetAccessKeyPolicy' => [ + 'summary' => 'Settings the network access restriction policy for an AccessKey pair of an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12308,76 +8195,250 @@ 'operationType' => 'write', 'deprecated' => false, 'systemTags' => [ - 'operationType' => 'delete', + 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', + 'abilityTreeCode' => '7486', + 'abilityTreeNodes' => ['FEATUREram9EHJZG'], + 'autoTest' => false, + 'notSupportAutoTestReason' => '只允许控制台来源调用，非控制台来源无法调用成功', ], 'parameters' => [ [ - 'name' => 'UserId', + 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user. '."\n" + ."\n" + .'If this parameter is left empty, the network access restriction policy is set for the specified AccessKey pair of the current user by default.', 'type' => 'string', 'required' => false, 'docRequired' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], + ], + [ + 'name' => 'UserAccessKeyId', + 'in' => 'query', + 'schema' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], + ], + [ + 'name' => 'AccessKeyPolicy', + 'in' => 'query', + 'schema' => ['description' => 'The network access restriction policy.'."\n" + ."\n" + .'A JSON-formatted string. For more information, see the AccessKeyPolicy structure description.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '{"Status":"Inactive","Statements":[{"Value":"AllowAllVPC","Type":"VPCWhiteList","IPList":["::/0","0.0.0.0/0"]}]}', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B', - 'title' => '', - ], + 'AccessKeyPolicy' => ['description' => 'The network access restriction policy.'."\n" + ."\n" + .'A JSON-formatted string. For more information, see the AccessKeyPolicy structure description.', 'type' => 'string', 'example' => '{"Status":"Inactive","Statements":[{"Value":"AllowAllVPC","Type":"VPCWhiteList","IPList":["::/0","0.0.0.0/0"]}]}', 'title' => ''], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '30C9068D-FBAA-4998-9986-8A562FED0BC3', 'title' => ''], + 'AccessKeyId' => ['description' => 'The AccessKey ID.', 'type' => 'string', 'example' => 'LTAI*******************', 'title' => ''], ], + 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B\\"\\n}","errorExample":""},{"type":"xml","example":"<RestoreUserFromRecycleBinResponse>\\n <RequestId>4507D1CD-526A-4E2B-A1E2-3AB045D1EE0B</RequestId>\\n</RestoreUserFromRecycleBinResponse>","errorExample":""}]', - 'title' => 'RestoreUserFromRecycleBin', - 'summary' => 'Restores a specific Resource Access Management (RAM) user from the recycle bin.', - 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).'."\n", + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Set the network access restriction policy for a specified accessKey pair', + 'requestParamsDescription' => '## AccessKeyPolicy structure description'."\n" + .'The AccessKeyPolicy parameter is a JSON-formatted string. The complete structure is as follows:'."\n" + ."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Active",'."\n" + .' "Statements": ['."\n" + .' {'."\n" + .' "Type": "ClassicWhiteList",'."\n" + .' "IPList": ["203.0.113.1", "2001:db8:85a3::8a2e:370:7334", "198.51.100.0/24"]'."\n" + .' },'."\n" + .' {'."\n" + .' "Type": "VPCWhiteList",'."\n" + .' "Value": "vpc-bp1234567890abcdef",'."\n" + .' "IPList": ["172.16.0.0/16"]'."\n" + .' }'."\n" + .' ]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Top-level fields'."\n" + .'| Field | Type | Required | Description |'."\n" + .'| --- | --- | --- | --- |'."\n" + .'| Version | Integer | No | The policy version number. Currently fixed to `1`. |'."\n" + .'| Status | String | Yes | The policy status. Valid values: `Active` (enabled), `Inactive` (disabled). |'."\n" + .'| Statements | Array | Yes | The list of network whitelist rules. This parameter can be an empty array `[]` but cannot be `null`. |'."\n" + ."\n\n" + .'### Statement object'."\n" + .'Each Statement represents a network whitelist rule. Two types are supported:'."\n" + ."\n" + .'| Field | Type | Description |'."\n" + .'| --- | --- | --- |'."\n" + .'| Type | String | The rule type. Valid values: `ClassicWhiteList` (classic network whitelist), `VPCWhiteList` (VPC network whitelist). |'."\n" + .'| Value | String | The VPC identifier. This field is used only for the `VPCWhiteList` type. |'."\n" + .'| IPList | Array<String> | The IP address whitelist. IPv4 addresses, IPv6 addresses, and CIDR blocks are supported. |'."\n" + ."\n\n" + .'### Rule type details.'."\n" + .'#### 1. Classic network whitelist (ClassicWhiteList)'."\n" + .'Restricts the AccessKey pair to initiate API calls only from specified public IP addresses.'."\n" + ."\n" + .'+ **Type**: Fixed to `ClassicWhiteList`.'."\n" + .'+ **Value**: Do not specify this field. Leave it empty.'."\n" + .'+ **IPList**: Required. The list of allowed IP addresses. IPv4 and IPv6 addresses are supported. CIDR notation is supported (such as `203.0.113.5/30`).'."\n" + ."\n" + .'**Default behavior**: If no `ClassicWhiteList` rule is configured in Statements, **all classic network access is denied**.'."\n" + ."\n" + .'**Constraint**: If IPList contains the IPv4 allow-all address `0.0.0.0/0`, it must also contain the IPv6 allow-all address `::/0`, and vice versa. Allowing only a single protocol stack is not permitted.'."\n" + ."\n" + .'**Example**:'."\n" + ."\n" + .'```json'."\n" + .'{'."\n" + .' "Type": "ClassicWhiteList",'."\n" + .' "IPList": ["203.0.113.5/30", "198.51.100.0/24"]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'#### 2. VPC network whitelist (VPCWhiteList)'."\n" + .'Restricts the AccessKey pair to initiate API calls only from a specified VPC. You can further restrict access to specified IP addresses within the VPC.'."\n" + ."\n" + .'+ **Type**: Fixed to `VPCWhiteList`.'."\n" + .'+ **Value**: Required. Valid values:'."\n" + .' - A specific VPC instance ID that starts with `vpc-` (such as `vpc-bp1234567890abcdef`).'."\n" + .' - `AllowAllVPC`: Allows all VPCs.'."\n" + .'+ **IPList**: Required. The IP address whitelist within the VPC. CIDR notation is supported (such as `10.0.0.0/24`).'."\n" + ."\n" + .'**Default behavior**: If no `VPCWhiteList` rule is configured in Statements, **all VPC network access is denied**.'."\n" + ."\n" + .'**Constraints**:'."\n" + ."\n" + .'+ If Value is set to `AllowAllVPC`, IPList must contain both `0.0.0.0/0` and `::/0` (allow-all), and only these two entries are allowed.'."\n" + .'+ If Value is set to a specific VPC ID, IPList cannot contain `0.0.0.0/0` or `::/0`.'."\n" + ."\n" + .'**Example — Specified VPC**:'."\n" + ."\n" + .'```json'."\n" + .'{'."\n" + .' "Type": "VPCWhiteList",'."\n" + .' "Value": "vpc-bp1234567890abcdef",'."\n" + .' "IPList": ["172.16.0.0/16"]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'**Example — Allow all VPCs**:'."\n" + ."\n" + .'```json'."\n" + .'{'."\n" + .' "Type": "VPCWhiteList",'."\n" + .' "Value": "AllowAllVPC",'."\n" + .' "IPList": ["0.0.0.0/0", "::/0"]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Quantity limits'."\n" + .'| Limit | Upper limit |'."\n" + .'| --- | --- |'."\n" + .'| Total length of AccessKeyPolicy | The JSON string cannot exceed 160,000 characters. |'."\n" + .'| Number of Statements entries | Up to 8 entries. |'."\n" + .'| Number of IPList entries per Statement | Up to 50 entries. |'."\n" + ."\n\n" + .'## Complete request examples.'."\n" + .'### Example 1: Allow only specific public IP addresses'."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Active",'."\n" + .' "Statements": ['."\n" + .' {'."\n" + .' "Type": "ClassicWhiteList",'."\n" + .' "IPList": ["203.0.113.5/30", "198.51.100.0/24"]'."\n" + .' }'."\n" + .' ]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Example 2: Allow only calls from a specified VPC'."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Active",'."\n" + .' "Statements": ['."\n" + .' {'."\n" + .' "Type": "VPCWhiteList",'."\n" + .' "Value": "vpc-bp1234567890abcdef",'."\n" + .' "IPList": ["172.16.0.0/16"]'."\n" + .' }'."\n" + .' ]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Example 3: Configure both classic network and VPC network whitelists'."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Active",'."\n" + .' "Statements": ['."\n" + .' {'."\n" + .' "Type": "VPCWhiteList",'."\n" + .' "Value": "vpc-bp1234567890abcdef",'."\n" + .' "IPList": ["172.16.0.0/16"]'."\n" + .' },'."\n" + .' {'."\n" + .' "Type": "ClassicWhiteList",'."\n" + .' "IPList": ["203.0.113.0/30"]'."\n" + .' }'."\n" + .' ]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Example 4: Disable the policy (retain rules without enforcing them)'."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Inactive",'."\n" + .' "Statements": ['."\n" + .' {'."\n" + .' "Type": "ClassicWhiteList",'."\n" + .' "IPList": ["203.0.113.5/30"]'."\n" + .' }'."\n" + .' ]'."\n" + .'}'."\n" + .'```'."\n" + ."\n" + .'### Example 5: Clear all whitelist rules'."\n" + .'```json'."\n" + .'{'."\n" + .' "Version": 1,'."\n" + .' "Status": "Inactive",'."\n" + .' "Statements": []'."\n" + .'}'."\n" + .'```', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], 'ramActions' => [ [ - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:RestoreUserFromRecycleBin', + 'action' => 'ram:SetAccessKeyPolicy', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#AccountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"AccessKeyPolicy\\": \\"{\\\\\\"Status\\\\\\":\\\\\\"Inactive\\\\\\",\\\\\\"Statements\\\\\\":[{\\\\\\"Value\\\\\\":\\\\\\"AllowAllVPC\\\\\\",\\\\\\"Type\\\\\\":\\\\\\"VPCWhiteList\\\\\\",\\\\\\"IPList\\\\\\":[\\\\\\"::/0\\\\\\",\\\\\\"0.0.0.0/0\\\\\\"]}]}\\",\\n \\"RequestId\\": \\"30C9068D-FBAA-4998-9986-8A562FED0BC3\\",\\n \\"AccessKeyId\\": \\"LTAI*******************\\"\\n}","type":"json"}]', + 'translator' => 'machine', ], 'SetDefaultDomain' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Configures the default domain name for an Alibaba Cloud account.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12389,29 +8450,20 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramM70W9U', - ], + 'abilityTreeNodes' => ['FEATUREramM70W9U'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'DefaultDomainName', 'in' => 'query', - 'schema' => [ - 'description' => 'The default domain name.'."\n" - ."\n" - .'The default domain name is in the format of `<AccountAlias>.onaliyun.com`. `<AccountAlias>` indicates the account alias. By default, the value of AccountAlias is the ID of the Alibaba Cloud account. The default domain name must end with `.onaliyun.com`.'."\n" - ."\n" - .'The default domain name can contain up to 64 characters in length. The default domain name can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).'."\n" - ."\n" - .'> The default domain name cannot start or end with a hyphen (-) and cannot contain two consecutive hyphens (-).'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'examplecompany.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The default domain name.'."\n" + ."\n" + .'The default domain name is in the format of `<AccountAlias>.onaliyun.com`. `<AccountAlias>` indicates the account alias. By default, the value of AccountAlias is the ID of the Alibaba Cloud account. The default domain name must end with `.onaliyun.com`.'."\n" + ."\n" + .'The default domain name can contain up to 64 characters in length. The default domain name can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).'."\n" + ."\n" + .'> The default domain name cannot start or end with a hyphen (-) and cannot contain two consecutive hyphens (-).', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'examplecompany.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -12419,38 +8471,30 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'DefaultDomainName' => [ - 'description' => 'The default domain name.'."\n", - 'type' => 'string', - 'example' => 'examplecompany.onaliyun.com', - 'title' => '', - ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '66815255-7CCE-4759-AC37-9755794C3626', - 'title' => '', - ], + 'DefaultDomainName' => ['description' => 'The default domain name.', 'type' => 'string', 'example' => 'examplecompany.onaliyun.com', 'title' => ''], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '66815255-7CCE-4759-AC37-9755794C3626', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"DefaultDomainName\\": \\"examplecompany.onaliyun.com\\",\\n \\"RequestId\\": \\"66815255-7CCE-4759-AC37-9755794C3626\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<SetDefaultDomainResponse>\\r\\n\\t<DefaultDomainName>examplecompany.onaliyun.com</DefaultDomainName>\\r\\n\\t<RequestId>66815255-7CCE-4759-AC37-9755794C3626</RequestId>\\r\\n</SetDefaultDomainResponse>\\t\\r\\n","errorExample":""}]', 'title' => 'SetDefaultDomain', - 'summary' => 'Configures the default domain name for an Alibaba Cloud account.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetDefaultDomain'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -12459,27 +8503,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"DefaultDomainName\\": \\"examplecompany.onaliyun.com\\",\\n \\"RequestId\\": \\"66815255-7CCE-4759-AC37-9755794C3626\\"\\n}","type":"json"}]', ], 'SetPasswordPolicy' => [ - 'summary' => 'Sets the password strength policy for Resource Access Management (RAM) users.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Set the password policy for Resource Access Management (RAM) users.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12491,197 +8525,130 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram47VF3L', - ], + 'abilityTreeNodes' => ['FEATUREram47VF3L'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'MinimumPasswordLength', 'in' => 'query', - 'schema' => [ - 'description' => 'The minimum number of characters in a password.'."\n" - ."\n" - .'Valid values: 8 to 32. Default value: 8.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '8', - 'title' => '', - ], + 'schema' => ['description' => 'Minimum password length.'."\n" + ."\n" + .'Valid values: 8 to 32.'."\n" + ."\n" + .'Default value: 8.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '8', 'title' => ''], ], [ 'name' => 'RequireLowercaseCharacters', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether a password must contain lowercase letters. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether passwords must contain lowercase letters.'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'RequireUppercaseCharacters', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether a password must contain uppercase letters. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether passwords must contain uppercase letters.'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'RequireNumbers', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether a password must contain digits. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether passwords must contain numbers.'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'RequireSymbols', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether a password must contain special characters. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether passwords must contain special characters.'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'HardExpire', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to disable logon for a RAM user after their password expires. Valid values:'."\n" - ."\n" - .'- true: A RAM user cannot log on to the console after their password expires. The RAM user can log on to the console only after an Alibaba Cloud account or a RAM user that has administrative permissions resets the password for the RAM user.'."\n" - ."\n" - .'- false (default): A RAM user can change their password after it expires and then log on to the console.', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether logon is blocked after a password expires.'."\n" + ."\n" + .'- true: After a password expires, the RAM user cannot log on to the console. An Alibaba Cloud account owner or a RAM administrator must reset the password before the RAM user can log on.'."\n" + ."\n" + .'- false (default): After a password expires, the RAM user can change the password and then log on.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'MaxLoginAttemps', 'in' => 'query', - 'schema' => [ - 'description' => 'The maximum number of password retries. If a RAM user enters an incorrect password the specified number of times, the RAM user is locked for one hour.'."\n" - ."\n" - .'Valid values: 0 to 32.'."\n" - ."\n" - .'The default value 0 indicates that the password retry limit is disabled.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '0', - 'title' => '', - ], + 'schema' => ['description' => 'Maximum number of failed password attempts. After the specified number of consecutive incorrect password attempts, the account is locked for one hour.'."\n" + ."\n" + .'Valid values: 0 to 32.'."\n" + ."\n" + .'Default value: 0, which disables this constraint.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0', 'title' => ''], ], [ 'name' => 'PasswordReusePrevention', 'in' => 'query', - 'schema' => [ - 'description' => 'The policy for password history check.'."\n" - ."\n" - .'A new password cannot be the same as the last N passwords. N can be a value from 0 to 24.'."\n" - ."\n" - .'The default value 0 indicates that the password history check is disabled.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '0', - 'title' => '', - ], + 'schema' => ['description' => 'Prevents reuse of previous passwords.'."\n" + ."\n" + .'Valid values: 0 to 24. This value specifies how many previous passwords are blocked from reuse.'."\n" + ."\n" + .'Default value: 0, which disables this constraint.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0', 'title' => ''], ], [ 'name' => 'MaxPasswordAge', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of a password.'."\n" - ."\n" - .'Valid values: 0 to 1095. Unit: days.'."\n" - ."\n" - .'The default value 0 indicates that the password never expires.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '0', - 'title' => '', - ], + 'schema' => ['description' => 'Password validity period.'."\n" + ."\n" + .'Valid values: 0 to 1095. Unit: days.'."\n" + ."\n" + .'Default value: 0, which means passwords never expire.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0', 'title' => ''], ], [ 'name' => 'MinimumPasswordDifferentCharacter', 'in' => 'query', - 'schema' => [ - 'description' => 'The minimum number of unique characters in a password.'."\n" - ."\n" - .'Valid values: 0 to 8.'."\n" - ."\n" - .'The default value 0 indicates that the number of unique characters in a password is not limited.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '0', - 'title' => '', - ], + 'schema' => ['description' => 'Minimum number of unique characters in a password.'."\n" + ."\n" + .'Valid values: 0 to 8.'."\n" + ."\n" + .'Default value: 0, which imposes no restriction.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '0', 'title' => ''], ], [ 'name' => 'PasswordNotContainUserName', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether a password can contain the username. Valid values:'."\n" - ."\n" - .'- true: A password cannot contain the username.'."\n" - ."\n" - .'- false (default): A password can contain the username.', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether passwords must not contain the user name.'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'InitialPasswordAge', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of an initial password. An initial password is the password that is set when you create a RAM user or reset the console logon password for a RAM user.'."\n" - ."\n" - .'Valid values: 0 to 90. Unit: days.'."\n" - ."\n" - .'Default value: 14.'."\n" - ."\n" - .'A value of 0 indicates that the validity period of the initial password is not limited.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'required' => false, - 'example' => '14', - ], + 'schema' => ['description' => 'Validity period for initial passwords. Initial passwords apply to newly created RAM users or users whose console logon settings are re-enabled.'."\n" + ."\n" + .'Valid values: 0 to 90. Unit: days.'."\n" + ."\n" + .'Default value: 14.'."\n" + ."\n" + .'A value of 0 disables this constraint.', 'type' => 'integer', 'format' => 'int32', 'title' => '', 'required' => false, 'example' => '14'], + ], + [ + 'name' => 'InterceptRiskPasswordOnApi', + 'in' => 'query', + 'schema' => ['description' => 'Specifies whether threat passwords are blocked when set using APIs.'."\n" + ."\n" + .'Default value: false'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], ], 'responses' => [ @@ -12690,94 +8657,24 @@ 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The ID of the request.', - 'type' => 'string', - 'example' => '3FB5551F-B2ED-40D4-8392-1E4AC2384EFD', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '3FB5551F-B2ED-40D4-8392-1E4AC2384EFD', 'title' => ''], 'PasswordPolicy' => [ - 'description' => 'The information of the password strength policy.', + 'description' => 'Details of the password policy.', 'type' => 'object', 'properties' => [ - 'RequireNumbers' => [ - 'description' => 'Specifies whether a password must contain digits.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'RequireLowercaseCharacters' => [ - 'description' => 'Specifies whether a password must contain lowercase letters.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'PasswordReusePrevention' => [ - 'description' => 'The policy for password history check.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'RequireSymbols' => [ - 'description' => 'Specifies whether a password must contain special characters.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'PasswordNotContainUserName' => [ - 'description' => 'Specifies whether a password can contain the username.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MinimumPasswordDifferentCharacter' => [ - 'description' => 'The minimum number of unique characters in a password.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'MaxPasswordAge' => [ - 'description' => 'The validity period of a password.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'HardExpire' => [ - 'description' => 'Specifies whether to disable logon for a RAM user after their password expires.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MinimumPasswordLength' => [ - 'description' => 'The minimum number of characters in a password.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '8', - 'title' => '', - ], - 'RequireUppercaseCharacters' => [ - 'description' => 'Specifies whether a password must contain uppercase letters.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MaxLoginAttemps' => [ - 'description' => 'The maximum number of password retries.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '0', - 'title' => '', - ], - 'InitialPasswordAge' => [ - 'description' => 'The validity period of an initial password.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '14', - ], + 'RequireNumbers' => ['description' => 'Indicates whether passwords must contain numbers.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'RequireLowercaseCharacters' => ['description' => 'Indicates whether passwords must contain lowercase letters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'PasswordReusePrevention' => ['description' => 'Prevents reuse of previous passwords.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'RequireSymbols' => ['description' => 'Indicates whether passwords must contain special characters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'PasswordNotContainUserName' => ['description' => 'Indicates whether passwords must not contain the user name.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MinimumPasswordDifferentCharacter' => ['description' => 'Minimum number of unique characters in a password.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'MaxPasswordAge' => ['description' => 'The password validity period.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'HardExpire' => ['description' => 'Indicates whether logon is blocked after a password expires.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MinimumPasswordLength' => ['description' => 'Minimum password length.', 'type' => 'integer', 'format' => 'int32', 'example' => '8', 'title' => ''], + 'RequireUppercaseCharacters' => ['description' => 'Indicates whether passwords must contain uppercase letters.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MaxLoginAttemps' => ['description' => 'Maximum number of failed password attempts.', 'type' => 'integer', 'format' => 'int32', 'example' => '0', 'title' => ''], + 'InitialPasswordAge' => ['description' => 'The validity period for initial passwords.', 'type' => 'integer', 'format' => 'int32', 'title' => '', 'example' => '14'], + 'InterceptRiskPasswordOnApi' => ['description' => 'Indicates whether threat passwords are blocked when set using APIs.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', @@ -12788,14 +8685,12 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3FB5551F-B2ED-40D4-8392-1E4AC2384EFD\\",\\n \\"PasswordPolicy\\": {\\n \\"RequireNumbers\\": false,\\n \\"RequireLowercaseCharacters\\": false,\\n \\"PasswordReusePrevention\\": 0,\\n \\"RequireSymbols\\": false,\\n \\"PasswordNotContainUserName\\": false,\\n \\"MinimumPasswordDifferentCharacter\\": 0,\\n \\"MaxPasswordAge\\": 0,\\n \\"HardExpire\\": false,\\n \\"MinimumPasswordLength\\": 8,\\n \\"RequireUppercaseCharacters\\": false,\\n \\"MaxLoginAttemps\\": 0,\\n \\"InitialPasswordAge\\": 14\\n }\\n}","type":"json"}]', + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3FB5551F-B2ED-40D4-8392-1E4AC2384EFD\\",\\n \\"PasswordPolicy\\": {\\n \\"RequireNumbers\\": false,\\n \\"RequireLowercaseCharacters\\": false,\\n \\"PasswordReusePrevention\\": 0,\\n \\"RequireSymbols\\": false,\\n \\"PasswordNotContainUserName\\": false,\\n \\"MinimumPasswordDifferentCharacter\\": 0,\\n \\"MaxPasswordAge\\": 0,\\n \\"HardExpire\\": false,\\n \\"MinimumPasswordLength\\": 8,\\n \\"RequireUppercaseCharacters\\": false,\\n \\"MaxLoginAttemps\\": 0,\\n \\"InitialPasswordAge\\": 14,\\n \\"InterceptRiskPasswordOnApi\\": false\\n }\\n}","type":"json"}]', 'title' => 'SetPasswordPolicy', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -12803,12 +8698,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetPasswordPolicy', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetPasswordPolicy'], ], ], 'ramActions' => [ @@ -12819,27 +8709,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'SetSecurityPreference' => [ - 'summary' => 'Configures the global security preferences for a Resource Access Management (RAM) user.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Configure the global security preferences for a RAM user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -12852,108 +8731,67 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7490', - 'abilityTreeNodes' => [ - 'FEATUREramPNEJCS', - ], + 'abilityTreeNodes' => ['FEATUREramPNEJCS'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'EnableSaveMFATicket', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to save the multi-factor authentication (MFA) status for seven days after a RAM user logs on using MFA. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether a RAM user who logs on with multi-factor authentication (MFA) can skip MFA for the next seven days. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false (default): Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'AllowUserToChangePassword', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether RAM users can manage their own passwords. Valid values:'."\n" - ."\n" - .'- true (default)'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'required' => false, - 'example' => 'true', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether RAM users can change their own passwords. Valid values:'."\n" + ."\n" + .'- true (default): Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'AllowUserToManageAccessKeys', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether RAM users can manage their own AccessKey pairs. Valid values:'."\n" - ."\n" - .'- true:'."\n" - ."\n" - .'- false (default)', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether RAM users can manage their own AccessKeys. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false (default): Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'AllowUserToManageMFADevices', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether RAM users can manage their own MFA devices. Valid values:'."\n" - ."\n" - .'- true (default)'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'required' => false, - 'example' => 'true', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether RAM users can manage their own MFA devices. Valid values:'."\n" + ."\n" + .'- true (default): Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'LoginSessionDuration', 'in' => 'query', - 'schema' => [ - 'description' => 'The duration of a logon session for a RAM user.'."\n" - ."\n" - .'Valid values: 1 to 24. Unit: hours.'."\n" - ."\n" - .'Default value: 6.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '6', - 'title' => '', - ], + 'schema' => ['description' => 'The session duration of a RAM user who logs on to the console. Unit: hours.'."\n" + ."\n" + .'Valid values: 1 to 24.'."\n" + ."\n" + .'Default value: 6.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '6', 'title' => ''], ], [ 'name' => 'LoginNetworkMasks', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies the IP addresses or CIDR blocks from which RAM users are allowed to sign in to the Alibaba Cloud console.'."\n" - ."\n" - .'- This restriction applies to both password-based and single sign-on (SSO) logons.'."\n" - ."\n" - .'- It does not affect API calls made with an AccessKey pair.'."\n" - ."\n" - .'- If a mask is not configured, logons are allowed from any IP address.'."\n" - ."\n" - .'Separate multiple entries with a semicolon (`;`). For example: 192.168.0.0/16;10.0.0.0/8.'."\n" - ."\n" - .'The mask is limited to a maximum of 40 entries and a total length of 512 characters.', - 'type' => 'string', - 'required' => false, - 'example' => '10.0.0.0/8', - 'title' => '', - ], + 'schema' => ['description' => 'The IP address mask that is used to log on to the console. This mask applies to password-based logons and single sign-on (SSO) logons, but does not affect API calls that are initiated by using an AccessKey pair.'."\n" + ."\n" + .'- If you specify a mask, RAM users can log on to the console only from the specified IP addresses.'."\n" + ."\n" + .'- If you do not specify a mask, RAM users can log on to the console from all IP addresses.'."\n" + ."\n" + .'If you need to specify multiple masks, separate them with semicolons (`;`). Example: `192.168.0.0/16;10.0.0.0/8`.'."\n" + ."\n" + .'You can specify up to 40 masks. The total length cannot exceed 512 characters.', 'type' => 'string', 'required' => false, 'example' => '10.0.0.0/8', 'title' => ''], ], [ 'name' => 'VerificationTypes', @@ -12962,17 +8800,11 @@ 'schema' => [ 'description' => 'The MFA methods.', 'type' => 'array', - 'items' => [ - 'description' => 'The MFA method. Valid values:'."\n" - ."\n" - .'- sms: SMS verification.'."\n" - ."\n" - .'- email: Email verification.', - 'type' => 'string', - 'required' => false, - 'example' => '["sms", "email"]', - 'title' => '', - ], + 'items' => ['description' => 'The MFA method. Valid values:'."\n" + ."\n" + .'- `sms`: text message'."\n" + ."\n" + .'- `email`: email', 'type' => 'string', 'required' => false, 'example' => '["sms", "email"]', 'title' => ''], 'required' => false, 'title' => '', 'example' => '', @@ -12981,107 +8813,77 @@ [ 'name' => 'AllowUserToManagePersonalDingTalk', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether RAM users can attach or detach their personal DingTalk accounts. Valid values:'."\n" - ."\n" - .'- true (default)'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'required' => false, - 'example' => 'true', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether RAM users can link or unlink their personal DingTalk accounts. Valid values:'."\n" + ."\n" + .'- true (default): Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'OperationForRiskLogin', 'in' => 'query', - 'schema' => [ - 'description' => 'This parameter is deprecated.', - 'type' => 'string', - 'deprecated' => true, - 'required' => false, - 'example' => 'autonomous', - 'title' => '', - ], + 'schema' => ['description' => 'This parameter is deprecated.', 'type' => 'string', 'deprecated' => true, 'required' => false, 'example' => 'autonomous', 'title' => ''], ], [ 'name' => 'MFAOperationForLogin', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether MFA is required for logon. This parameter replaces `EnforceMFAForLogin`. The `EnforceMFAForLogin` parameter is still valid, but using this new parameter is recommended. Valid values:'."\n" - ."\n" - .'- mandatory: Enforces MFA for all RAM users. This value corresponds to `true` for the `EnforceMFAForLogin` parameter.'."\n" - ."\n" - .'- independent (default): The MFA requirement depends on the configuration of each RAM user. This value corresponds to `false` for the `EnforceMFAForLogin` parameter.'."\n" - ."\n" - .'- adaptive: Enforces MFA only for abnormal logons.', - 'type' => 'string', - 'required' => false, - 'example' => 'adaptive', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies the MFA policy for user logon. This parameter replaces `EnforceMFAForLogin`. We recommend that you use this parameter. `EnforceMFAForLogin` is still valid. Valid values:'."\n" + ."\n" + .'- `mandatory`: enforces MFA for all RAM users. This is equivalent to setting `EnforceMFAForLogin` to `true`.'."\n" + ."\n" + .'- `independent` (default): The MFA settings for each RAM user are not affected. This is equivalent to setting `EnforceMFAForLogin` to `false`.'."\n" + ."\n" + .'- `adaptive`: enforces MFA only for unusual logons.', 'type' => 'string', 'required' => false, 'example' => 'adaptive', 'title' => ''], ], [ 'name' => 'MaxIdleDaysForAccessKeys', 'in' => 'query', - 'schema' => [ - 'description' => 'The maximum number of days that a RAM user\'s AccessKey pair can be idle. If an AccessKey pair is not used within the specified period, it is automatically disabled the next day. Valid values:'."\n" - ."\n" - .'- 90'."\n" - ."\n" - .'- 180'."\n" - ."\n" - .'- 365'."\n" - ."\n" - .'- 730 (default)', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '365', - 'title' => '', - ], + 'schema' => ['description' => 'The maximum idle period of the AccessKey pairs of RAM users. An AccessKey pair that is not used for the specified period of time is automatically disabled on the next day. You can set the value to one of the following numbers:'."\n" + ."\n" + .'- 90'."\n" + ."\n" + .'- 180'."\n" + ."\n" + .'- 365'."\n" + ."\n" + .'- 730 (default)', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '365', 'title' => ''], ], [ 'name' => 'MaxIdleDaysForUsers', 'in' => 'query', - 'schema' => [ - 'description' => 'The maximum number of days that a RAM user can be idle. If a RAM user with console logon enabled does not log on within this period, their console logon is automatically disabled the next day. This setting does not apply to single sign-on (SSO) logons. Valid values:'."\n" - ."\n" - .'- 90'."\n" - ."\n" - .'- 180'."\n" - ."\n" - .'- 365'."\n" - ."\n" - .'- 730 (default)', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'example' => '365', - 'title' => '', - ], + 'schema' => ['description' => 'The maximum idle period of RAM users. If a RAM user who can log on to the console does not log on to the console for the specified period of time (SSO logons are not included), the console logon feature of the RAM user is disabled on the next day. You can set the value to one of the following numbers:'."\n" + ."\n" + .'- 90'."\n" + ."\n" + .'- 180'."\n" + ."\n" + .'- 365'."\n" + ."\n" + .'- 730 (default)', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '365', 'title' => ''], ], [ 'name' => 'AllowUserToLoginWithPasskey', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether RAM users can log on using passkeys. Valid values:'."\n" - ."\n" - .'- true (default)'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'required' => false, - 'example' => 'true', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether RAM users can use passkeys to log on to the console. Valid values:'."\n" + ."\n" + .'- true (default): Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], + ], + [ + 'name' => 'AllowUserToManageServiceCredentials', + 'in' => 'query', + 'schema' => ['description' => 'Specifies whether RAM users can manage their own API keys. Valid values:'."\n" + ."\n" + .'- true: Allowed.'."\n" + ."\n" + .'- false: Not allowed.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.', + 'description' => 'The data returned.', 'type' => 'object', 'properties' => [ 'SecurityPreference' => [ @@ -13089,109 +8891,39 @@ 'type' => 'object', 'properties' => [ 'AccessKeyPreference' => [ - 'description' => 'The AccessKey pair preferences.', + 'description' => 'The AccessKey preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManageAccessKeys' => [ - 'description' => 'Indicates whether RAM users can manage their own AccessKey pairs. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'AllowUserToManageAccessKeys' => ['description' => 'Specifies whether RAM users can manage their own AccessKeys.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'AllowUserToManageServiceCredentials' => ['description' => 'Specifies whether RAM users can manage their own API keys. Valid values:'."\n" + ."\n" + .'- true: RAM users can manage their own API keys.'."\n" + ."\n" + .'- false: RAM users cannot manage their own API keys.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', ], 'LoginProfilePreference' => [ - 'description' => 'The logon preferences.', + 'description' => 'The login preferences.', 'type' => 'object', 'properties' => [ - 'EnableSaveMFATicket' => [ - 'description' => 'Indicates whether the MFA status is saved for seven days after a RAM user logs on using MFA.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'LoginSessionDuration' => [ - 'description' => 'The duration of a logon session for a RAM user.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '6', - 'title' => '', - ], - 'LoginNetworkMasks' => [ - 'description' => 'The IP addresses or CIDR blocks from which RAM users are allowed to sign in to the Alibaba Cloud console.', - 'type' => 'string', - 'example' => '10.0.0.0/8', - 'title' => '', - ], - 'AllowUserToChangePassword' => [ - 'description' => 'Indicates whether RAM users can manage their own passwords.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], - 'OperationForRiskLogin' => [ - 'description' => 'This parameter is deprecated.', - 'type' => 'string', - 'deprecated' => true, - 'example' => 'autonomous', - 'title' => '', - ], - 'MFAOperationForLogin' => [ - 'description' => 'Indicates whether MFA is required for logon. This parameter replaces `EnforceMFAForLogin`. The `EnforceMFAForLogin` parameter is still valid, but using this new parameter is recommended.', - 'type' => 'string', - 'example' => 'adaptive', - 'title' => '', - ], - 'AllowUserToLoginWithPasskey' => [ - 'description' => 'Indicates whether RAM users can log on directly using passkeys.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'EnableSaveMFATicket' => ['description' => 'Specifies whether to save the verification status for seven days after a RAM user completes multi-factor authentication (MFA) during sign-in.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'LoginSessionDuration' => ['description' => 'The duration of the login session for a RAM user, in hours.', 'type' => 'integer', 'format' => 'int32', 'example' => '6', 'title' => ''], + 'LoginNetworkMasks' => ['description' => 'The login network mask.', 'type' => 'string', 'example' => '10.0.0.0/8', 'title' => ''], + 'AllowUserToChangePassword' => ['description' => 'Specifies whether RAM users can manage their own passwords.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'OperationForRiskLogin' => ['description' => 'This parameter is deprecated.', 'type' => 'string', 'deprecated' => true, 'example' => 'autonomous', 'title' => ''], + 'MFAOperationForLogin' => ['description' => 'The MFA policy for user sign-in. This parameter is the recommended replacement for `EnforceMFAForLogin`, which is still supported.', 'type' => 'string', 'example' => 'adaptive', 'title' => ''], + 'AllowUserToLoginWithPasskey' => ['description' => 'Specifies whether RAM users can sign in with a passkey.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', ], 'MFAPreference' => [ - 'description' => 'The MFA preferences.', + 'description' => 'The MFA (multi-factor authentication) preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManageMFADevices' => [ - 'description' => 'Indicates whether RAM users can manage their own MFA devices.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], + 'AllowUserToManageMFADevices' => ['description' => 'Specifies whether RAM users can manage their own MFA devices.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], ], 'title' => '', 'example' => '', @@ -13201,14 +8933,9 @@ 'type' => 'object', 'properties' => [ 'VerificationTypes' => [ - 'description' => 'The MFA methods.', + 'description' => 'The allowed MFA methods.', 'type' => 'array', - 'items' => [ - 'description' => 'The MFA method.', - 'type' => 'string', - 'example' => '["sms", "email"]', - 'title' => '', - ], + 'items' => ['description' => 'The MFA method.', 'type' => 'string', 'example' => '["sms", "email"]', 'title' => ''], 'title' => '', 'example' => '', ], @@ -13220,48 +8947,21 @@ 'description' => 'The personal information preferences.', 'type' => 'object', 'properties' => [ - 'AllowUserToManagePersonalDingTalk' => [ - 'description' => 'Indicates whether RAM users can attach or detach their personal DingTalk accounts.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'example' => 'true', - 'title' => '', - ], + 'AllowUserToManagePersonalDingTalk' => ['description' => 'Specifies whether RAM users can attach or detach their personal DingTalk accounts.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', 'example' => '', ], 'MaxIdleDays' => [ - 'description' => 'The configuration of the maximum idle period in days.', + 'description' => 'Settings for the maximum idle period in days.', 'type' => 'object', 'properties' => [ - 'MaxIdleDaysForUsers' => [ - 'description' => 'The maximum idle period for RAM users. If a RAM user with console logon enabled remains inactive for this period, their console logon is automatically disabled the next day. This does not apply to single sign-on (SSO) logons.'."\n" - ."\n" - .'Default value: 730.'."\n" - ."\n" - .'Unit: days.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '730', - 'title' => '', - ], - 'MaxIdleDaysForAccessKeys' => [ - 'description' => 'The maximum idle period for the AccessKey pair of a RAM user. If an AccessKey pair remains unused for this period, it is automatically disabled the next day.'."\n" - ."\n" - .'Default value: 730.'."\n" - ."\n" - .'Unit: days.', - 'type' => 'integer', - 'format' => 'int32', - 'example' => '730', - 'title' => '', - ], + 'MaxIdleDaysForUsers' => ['description' => 'The maximum idle period, in days, for a RAM user. If a RAM user with console sign-in enabled does not sign in within this period, the system automatically disables their console sign-in the next day. This setting does not apply to single sign-on (SSO).'."\n" + ."\n" + .'Default value: 730.', 'type' => 'integer', 'format' => 'int32', 'example' => '730', 'title' => ''], + 'MaxIdleDaysForAccessKeys' => ['description' => 'The maximum idle period, in days, for an AccessKey of a RAM user. If an AccessKey is not used within the specified period, the system automatically disables it the next day.'."\n" + ."\n" + .'Default value: 730.', 'type' => 'integer', 'format' => 'int32', 'example' => '730', 'title' => ''], ], 'title' => '', 'example' => '', @@ -13270,34 +8970,22 @@ 'title' => '', 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => '17494710-B4BA-4185-BBBB-C1A6ABDE1639', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '17494710-B4BA-4185-BBBB-C1A6ABDE1639', 'title' => ''], ], 'title' => '', 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"SecurityPreference\\": {\\n \\"AccessKeyPreference\\": {\\n \\"AllowUserToManageAccessKeys\\": false\\n },\\n \\"LoginProfilePreference\\": {\\n \\"EnableSaveMFATicket\\": false,\\n \\"LoginSessionDuration\\": 6,\\n \\"LoginNetworkMasks\\": \\"10.0.0.0/8\\",\\n \\"AllowUserToChangePassword\\": true,\\n \\"OperationForRiskLogin\\": \\"autonomous\\",\\n \\"MFAOperationForLogin\\": \\"adaptive\\",\\n \\"AllowUserToLoginWithPasskey\\": false\\n },\\n \\"MFAPreference\\": {\\n \\"AllowUserToManageMFADevices\\": false\\n },\\n \\"VerificationPreference\\": {\\n \\"VerificationTypes\\": [\\n \\"[\\\\\\"sms\\\\\\", \\\\\\"email\\\\\\"]\\"\\n ]\\n },\\n \\"PersonalInfoPreference\\": {\\n \\"AllowUserToManagePersonalDingTalk\\": true\\n },\\n \\"MaxIdleDays\\": {\\n \\"MaxIdleDaysForUsers\\": 730,\\n \\"MaxIdleDaysForAccessKeys\\": 730\\n }\\n },\\n \\"RequestId\\": \\"17494710-B4BA-4185-BBBB-C1A6ABDE1639\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"SecurityPreference\\": {\\n \\"AccessKeyPreference\\": {\\n \\"AllowUserToManageAccessKeys\\": false,\\n \\"AllowUserToManageServiceCredentials\\": false\\n },\\n \\"LoginProfilePreference\\": {\\n \\"EnableSaveMFATicket\\": false,\\n \\"LoginSessionDuration\\": 6,\\n \\"LoginNetworkMasks\\": \\"10.0.0.0/8\\",\\n \\"AllowUserToChangePassword\\": true,\\n \\"OperationForRiskLogin\\": \\"autonomous\\",\\n \\"MFAOperationForLogin\\": \\"adaptive\\",\\n \\"AllowUserToLoginWithPasskey\\": false\\n },\\n \\"MFAPreference\\": {\\n \\"AllowUserToManageMFADevices\\": false\\n },\\n \\"VerificationPreference\\": {\\n \\"VerificationTypes\\": [\\n \\"[\\\\\\"sms\\\\\\", \\\\\\"email\\\\\\"]\\"\\n ]\\n },\\n \\"PersonalInfoPreference\\": {\\n \\"AllowUserToManagePersonalDingTalk\\": true\\n },\\n \\"MaxIdleDays\\": {\\n \\"MaxIdleDaysForUsers\\": 730,\\n \\"MaxIdleDaysForAccessKeys\\": 730\\n }\\n },\\n \\"RequestId\\": \\"17494710-B4BA-4185-BBBB-C1A6ABDE1639\\"\\n}","type":"json"}]', 'title' => 'SetSecurityPreference', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetSecurityPreference', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetSecurityPreference'], ], ], 'ramActions' => [ @@ -13307,32 +8995,19 @@ 'action' => 'ram:SetSecurityPreference', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:MFAOperationForLogin', - ], + ['conditionKey' => 'ram:MFAOperationForLogin'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], ], 'SetUserSsoSettings' => [ - 'summary' => 'Sets the identity provider (IdP) settings for user-based single sign-on (SSO).', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Configures information about user-based single sign-on (SSO).', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -13345,82 +9020,50 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7491', - 'abilityTreeNodes' => [ - 'FEATUREramY87YVY', - ], + 'abilityTreeNodes' => ['FEATUREramY87YVY'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'MetadataDocument', 'in' => 'query', - 'schema' => [ - 'description' => 'The metadata file. The file must be Base64-encoded.'."\n" - ."\n" - .'The file is provided by an identity provider (IdP) that supports the Security Assertion Markup Language (SAML) 2.0 protocol.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'PD94bWwgdmVy****', - ], + 'schema' => ['description' => 'The metadata file, which is Base64-encoded.'."\n" + ."\n" + .'The file is provided by an identity provider (IdP) that supports Security Assertion Markup Language (SAML) 2.0.', 'type' => 'string', 'required' => false, 'example' => 'PD94bWwgdmVy****', 'title' => ''], ], [ 'name' => 'SsoEnabled', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to enable user-based SSO for Resource Access Management (RAM) users. Valid values:'."\n" - ."\n" - .'- true: Enables user-based SSO.'."\n" - ."\n" - .'- false (default): Disables user-based SSO.', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'true', - ], + 'schema' => ['description' => 'Specifies whether to enable SSO for the RAM user. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false (default)', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'AuxiliaryDomain', 'in' => 'query', - 'schema' => [ - 'description' => 'The auxiliary domain name.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'example.com', - ], + 'schema' => ['description' => 'The auxiliary domain name.', 'type' => 'string', 'required' => false, 'example' => 'example.com', 'title' => ''], ], [ 'name' => 'SsoLoginWithDomain', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether the `<saml:NameID>` element in a SAML response must contain a domain name when a user logs on using SAML-based SSO. This applies if the username that is specified on the IdP for logon matching contains a domain name suffix.'."\n" - ."\n" - .'- If this parameter is set to `true`, the value of the `<saml:NameID>` element **must** be in the `username@domain` format, which includes a domain name suffix. The `domain` can be the default domain name or a domain alias if one is configured.'."\n" - ."\n" - .'- If this parameter is set to `false`, the value of the `<saml:NameID>` element **must** be the `username` only. The value **must not** contain the `domain` part.'."\n" - ."\n" - .'The default value is `true`.', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'true', - ], + 'schema' => ['description' => 'Specifies whether the SAML SSO requires a domain name in the `<saml:NameID>` element of the SAML response. If yes, the username specified by the IdP for SSO must have a domain name as the suffix.'."\n" + ."\n" + .'- If the value of the parameter is `true`, the `<saml:NameID>` element **must** be in the `username@domain` format. You can set `domain` to the default domain name or the configured domain alias.'."\n" + ."\n" + .'- If the value of the parameter is `false`, the `<saml:NameID>` element **must** be in the `username` format and **cannot** contain the `domain` suffix.'."\n" + ."\n" + .'The default value is `true`.', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'AuthnSignAlgo', 'in' => 'query', - 'schema' => [ - 'type' => 'string', - 'description' => 'The signature algorithm that is supported by the Alibaba Cloud service provider (SP). Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1 (default)', - 'required' => false, - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'schema' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1 (default)', 'type' => 'string', 'required' => false, 'example' => 'rsa-sha1', 'title' => ''], ], ], 'responses' => [ @@ -13429,68 +9072,37 @@ 'type' => 'object', 'properties' => [ 'UserSsoSettings' => [ - 'description' => 'The user-based SSO settings.', + 'description' => 'The configurations of user-based SSO.', 'type' => 'object', 'properties' => [ - 'AuxiliaryDomain' => [ - 'description' => 'The auxiliary domain name.', - 'type' => 'string', - 'title' => '', - 'example' => 'example.com', - ], - 'MetadataDocument' => [ - 'description' => 'The metadata file. The file is Base64-encoded.', - 'type' => 'string', - 'title' => '', - 'example' => 'PD94bWwgdmVy****', - ], - 'SsoEnabled' => [ - 'description' => 'Indicates whether user-based SSO is enabled.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'SsoLoginWithDomain' => [ - 'description' => 'Indicates whether the `<saml:NameID>` element in a SAML response must contain a domain name when a user logs on using SAML-based SSO. This applies if the username that is specified on the IdP for logon matching contains a domain name suffix.'."\n" - ."\n" - .'- If this parameter is set to `true`, the value of the `<saml:NameID>` element **must** be in the `username@domain` format, which includes a domain name suffix. The `domain` can be the default domain name or a domain alias if one is configured.'."\n" - ."\n" - .'- If this parameter is set to `false`, the value of the `<saml:NameID>` element **must** be the `username` only. The value **must not** contain the `domain` part.'."\n" - ."\n" - .'The default value is `true`.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AuthnSignAlgo' => [ - 'type' => 'string', - 'description' => 'The signature algorithm that is supported by the Alibaba Cloud SP. Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1 (default)', - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'AuxiliaryDomain' => ['description' => 'The auxiliary domain name.', 'type' => 'string', 'example' => 'example.com', 'title' => ''], + 'MetadataDocument' => ['description' => 'The metadata file, which is Base64-encoded.', 'type' => 'string', 'example' => 'PD94bWwgdmVy****', 'title' => ''], + 'SsoEnabled' => ['description' => 'Indicates whether user-based SSO is enabled.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'SsoLoginWithDomain' => ['description' => 'Indicates whether the SAML SSO requires a domain name in the `<saml:NameID>` element of the SAML response. If yes, the username specified by the IdP for SSO must have a domain name as the suffix.'."\n" + ."\n" + .'- If the value of the parameter is `true`, the `<saml:NameID>` element **must** be in the `username@domain` format. You can set `domain` to the default domain name or the configured domain alias.'."\n" + ."\n" + .'- If the value of the parameter is `false`, the `<saml:NameID>` element **must** be in the `username` format and **cannot** contain the `domain` suffix.'."\n" + ."\n" + .'The default value is `true`.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AuthnSignAlgo' => ['description' => 'The supported signature algorithm. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1 (default)', 'type' => 'string', 'example' => 'rsa-sha1', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '87F2E3F6-28A0-43F3-A77F-F7760E62F61E', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '87F2E3F6-28A0-43F3-A77F-F7760E62F61E', 'title' => ''], ], - 'description' => '', + 'description' => 'The response parameters.', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"UserSsoSettings\\": {\\n \\"AuxiliaryDomain\\": \\"example.com\\",\\n \\"MetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"SsoEnabled\\": true,\\n \\"SsoLoginWithDomain\\": true,\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n },\\n \\"RequestId\\": \\"87F2E3F6-28A0-43F3-A77F-F7760E62F61E\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'SetUserSsoSettings', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -13498,12 +9110,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetUserSsoSettings', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetUserSsoSettings'], ], ], 'ramActions' => [ @@ -13514,26 +9121,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"UserSsoSettings\\": {\\n \\"AuxiliaryDomain\\": \\"example.com\\",\\n \\"MetadataDocument\\": \\"PD94bWwgdmVy****\\",\\n \\"SsoEnabled\\": true,\\n \\"SsoLoginWithDomain\\": true,\\n \\"AuthnSignAlgo\\": \\"rsa-sha1\\"\\n },\\n \\"RequestId\\": \\"87F2E3F6-28A0-43F3-A77F-F7760E62F61E\\"\\n}","type":"json"}]', ], 'SetVerificationInfo' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Binds a mobile phone or email to a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -13545,87 +9143,59 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram8R8C7X', - ], + 'abilityTreeNodes' => ['FEATUREram8R8C7X'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'VerifyType', 'in' => 'query', - 'schema' => [ - 'description' => 'The multi-factor authentication (MFA) method. Valid values:'."\n" - ."\n" - .'* sms: mobile phone.'."\n" - .'* email: email.', - 'type' => 'string', - 'required' => false, - 'example' => 'sms', - 'title' => '', - ], + 'schema' => ['description' => 'The multi-factor authentication (MFA) method. Valid values:'."\n" + ."\n" + .'- sms: mobile phone.'."\n" + ."\n" + .'- email: email.', 'type' => 'string', 'required' => false, 'example' => 'sms', 'title' => ''], ], [ 'name' => 'MobilePhone', 'in' => 'query', - 'schema' => [ - 'description' => 'The mobile phone number.'."\n" - ."\n" - .'> If you set `VerifyType` to `sms`, you must specify this parameter.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '86-13900001234', - 'title' => '', - ], + 'schema' => ['description' => 'The mobile phone number.'."\n" + ."\n" + .'> If you set `VerifyType` to `sms`, you must specify this parameter.', 'type' => 'string', 'required' => false, 'example' => '86-13900001234', 'title' => ''], ], [ 'name' => 'Email', 'in' => 'query', - 'schema' => [ - 'description' => 'The email address.'."\n" - ."\n" - .'> If you set `VerifyType` to `email`, you must specify this parameter.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'username@example.com', - 'title' => '', - ], + 'schema' => ['description' => 'The email address.'."\n" + ."\n" + .'> If you set `VerifyType` to `email`, you must specify this parameter.', 'type' => 'string', 'required' => false, 'example' => 'username@example.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9'], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\"\\n}","errorExample":""},{"type":"xml","example":"<SetVerificationInfoResponse>\\n <RequestId>B182C041-8C64-5F2F-A07B-FC67FAF89CF9</RequestId>\\n</SetVerificationInfoResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'SetVerificationInfo', - 'summary' => 'Binds a mobile phone or email to a Resource Access Management (RAM) user.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetVerificationInfo'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -13634,26 +9204,16 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\"\\n}","type":"json"}]', ], 'TagResources' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -13665,24 +9225,15 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramVRK65Q', - ], + 'abilityTreeNodes' => ['FEATUREramVRK65Q'], ], 'parameters' => [ [ 'name' => 'ResourceType', 'in' => 'query', - 'schema' => [ - 'title' => '', - 'description' => 'The type of the resource. Valid value:'."\n" - ."\n" - .'* user: a Resource Access Management (RAM) user.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'user', - ], + 'schema' => ['description' => 'The type of the resource. Valid value:'."\n" + ."\n" + .'- user: a Resource Access Management (RAM) user.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'title' => '', 'example' => 'user'], ], [ 'name' => 'ResourceId', @@ -13694,21 +9245,16 @@ ."\n" .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.'."\n", + .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.', 'type' => 'array', - 'items' => [ - 'description' => 'The ID of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'items' => ['description' => 'The ID of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], 'required' => false, 'maxItems' => 51, + 'example' => '', ], ], [ @@ -13721,19 +9267,13 @@ ."\n" .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.'."\n", + .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.', 'type' => 'array', - 'items' => [ - 'description' => 'The name of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'items' => ['description' => 'The name of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `ResourceId` and `ResourcePrincipalName`.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], 'required' => false, 'example' => 'TagResources', 'maxItems' => 51, @@ -13747,67 +9287,55 @@ 'title' => '', 'description' => 'The key of tag N.'."\n" ."\n" - .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with aliyun or acs: and cannot contain `http://` or `https://`.'."\n", + .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with aliyun or acs: and cannot contain `http://` or `https://`.', 'type' => 'array', 'items' => [ 'description' => 'The key of tag N.'."\n" ."\n" - .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with aliyun or acs: and cannot contain `http://` or `https://`.'."\n", + .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with aliyun or acs: and cannot contain `http://` or `https://`.', 'type' => 'object', 'properties' => [ - 'Key' => [ - 'title' => '', - 'description' => 'The key of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with `aliyun` or `acs:` and cannot contain `http://` or `https://`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'operator', - ], - 'Value' => [ - 'title' => '', - 'description' => 'The value of tag N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be up to 128 characters in length and cannot contain `http://` or `https://`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'alice', - ], + 'Key' => ['description' => 'The key of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. You cannot specify empty strings as tag keys. The tag key can be up to 128 characters in length. The tag key cannot start with `aliyun` or `acs:` and cannot contain `http://` or `https://`.', 'type' => 'string', 'required' => false, 'title' => '', 'example' => 'operator'], + 'Value' => ['description' => 'The value of tag N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. The tag value can be an empty string. The tag value can be up to 128 characters in length and cannot contain `http://` or `https://`.', 'type' => 'string', 'title' => '', 'required' => false, 'example' => 'alice'], ], 'required' => false, 'title' => '', + 'example' => '', ], 'required' => false, 'docRequired' => true, 'maxItems' => 21, + 'example' => '', ], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '3687BD52-49FD-585B-AB14-CD05B7C76963', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '3687BD52-49FD-585B-AB14-CD05B7C76963', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"3687BD52-49FD-585B-AB14-CD05B7C76963\\"\\n}","errorExample":""},{"type":"xml","example":"<TagResourcesResponse>\\n <RequestId>3687BD52-49FD-585B-AB14-CD05B7C76963</RequestId>\\n</TagResourcesResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'TagResources', 'summary' => 'Adds tags to resources.', - 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).'."\n", + 'requestParamsDescription' => 'For more information about common request parameters, see [Common parameters](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '20', 'countWindow' => 1, 'regionId' => '*', 'api' => 'TagResources'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -13816,26 +9344,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"3687BD52-49FD-585B-AB14-CD05B7C76963\\"\\n}","type":"json"}]', ], 'UnbindMFADevice' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -13848,9 +9366,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7492', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '无法通过测试平台自动生成MFA Code，所以无法构建绑定了MFA的用户用于测试', ], @@ -13858,14 +9374,7 @@ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], ], 'responses' => [ @@ -13874,40 +9383,34 @@ 'type' => 'object', 'properties' => [ 'MFADevice' => [ - 'description' => 'The information about the MFA device.'."\n", + 'description' => 'The information about the MFA device.', 'type' => 'object', 'properties' => [ - 'SerialNumber' => [ - 'description' => 'The serial number of the MFA device.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::151298381312****:mfa/device001', - 'title' => '', - ], + 'SerialNumber' => ['description' => 'The serial number of the MFA device.', 'type' => 'string', 'example' => 'acs:ram::151298381312****:mfa/device001', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'A26CB3E9-1021-452A-AC57-3134B3BA0E4C', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'A26CB3E9-1021-452A-AC57-3134B3BA0E4C', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"MFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::151298381312****:mfa/device001\\"\\n },\\n \\"RequestId\\": \\"A26CB3E9-1021-452A-AC57-3134B3BA0E4C\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<UnbindMFADeviceResponse>\\r\\n\\t<MFADevice>\\r\\n\\t\\t<SerialNumber>acs:ram::151298381312****:mfa/device001</SerialNumber>\\r\\n\\t</MFADevice>\\r\\n\\t<RequestId>A26CB3E9-1021-452A-AC57-3134B3BA0E4C</RequestId>\\r\\n</UnbindMFADeviceResponse>\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UnbindMFADevice', 'summary' => 'Unbinds a multi-factor authentication (MFA) device from a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UnbindMFADevice'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -13916,26 +9419,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"MFADevice\\": {\\n \\"SerialNumber\\": \\"acs:ram::151298381312****:mfa/device001\\"\\n },\\n \\"RequestId\\": \\"A26CB3E9-1021-452A-AC57-3134B3BA0E4C\\"\\n}","type":"json"}]', ], 'UnbindVerification' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -13947,87 +9440,60 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram8R8C7X', - ], + 'abilityTreeNodes' => ['FEATUREram8R8C7X'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'VerifyType', 'in' => 'query', - 'schema' => [ - 'description' => 'The multi-factor authentication (MFA) method. Valid values:'."\n" - ."\n" - .'* sms: mobile phone.'."\n" - .'* email: email.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'sms', - 'title' => '', - ], + 'schema' => ['description' => 'The multi-factor authentication (MFA) method. Valid values:'."\n" + ."\n" + .'- sms: mobile phone.'."\n" + ."\n" + .'- email: email.', 'type' => 'string', 'required' => false, 'example' => 'sms', 'title' => ''], ], [ 'name' => 'MobilePhone', 'in' => 'query', - 'schema' => [ - 'description' => 'The mobile phone number.'."\n" - ."\n" - .'> If you set `VerifyType` to `sms`, you must specify this parameter.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '86-13900001234', - 'title' => '', - ], + 'schema' => ['description' => 'The mobile phone number.'."\n" + ."\n" + .'> If you set `VerifyType` to `sms`, you must specify this parameter.', 'type' => 'string', 'required' => false, 'example' => '86-13900001234', 'title' => ''], ], [ 'name' => 'Email', 'in' => 'query', - 'schema' => [ - 'description' => 'The email address.'."\n" - ."\n" - .'> If you set `VerifyType` to `email`, you must specify this parameter.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'username@example.com', - 'title' => '', - ], + 'schema' => ['description' => 'The email address.'."\n" + ."\n" + .'> If you set `VerifyType` to `email`, you must specify this parameter.', 'type' => 'string', 'required' => false, 'example' => 'username@example.com', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => 'B182C041-8C64-5F2F-A07B-FC67FAF89CF9'], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\"\\n}","errorExample":""},{"type":"xml","example":"<UnbindVerificationResponse>\\n <RequestId>B182C041-8C64-5F2F-A07B-FC67FAF89CF9</RequestId>\\n</UnbindVerificationResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UnbindVerification', 'summary' => 'Unbinds a mobile phone or email from a Resource Access Management (RAM) user.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UnbindVerification'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -14036,26 +9502,17 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B182C041-8C64-5F2F-A07B-FC67FAF89CF9\\"\\n}","type":"json"}]', ], 'UntagResources' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Removes tags from a resource.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -14067,40 +9524,26 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramVRK65Q', - ], + 'abilityTreeNodes' => ['FEATUREramVRK65Q'], ], 'parameters' => [ [ 'name' => 'ResourceType', 'in' => 'query', - 'schema' => [ - 'title' => '', - 'description' => 'The type of the resource. Valid value:'."\n" - ."\n" - .'* user: a RAM user'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'user', - ], + 'schema' => ['description' => 'The type of the resource. Valid value:'."\n" + ."\n" + .'- user: a RAM user', 'type' => 'string', 'required' => false, 'docRequired' => true, 'title' => '', 'example' => 'user'], ], [ 'name' => 'All', 'in' => 'query', - 'schema' => [ - 'title' => '', - 'description' => 'Specifies whether to remove all tags from the resource. Valid values:'."\n" - ."\n" - .'* true: remove all tags from the resources.'."\n" - .'* false (default): does not remove all tags from the resources.'."\n" - ."\n" - .'> This parameter takes effect only when TagKey.N is not set in the request.'."\n", - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - ], + 'schema' => ['description' => 'Specifies whether to remove all tags from the resource. Valid values:'."\n" + ."\n" + .'- true: remove all tags from the resources.'."\n" + ."\n" + .'- false (default): does not remove all tags from the resources.'."\n" + ."\n" + .'> This parameter takes effect only when TagKey.N is not set in the request.', 'type' => 'boolean', 'required' => false, 'title' => '', 'example' => 'false'], ], [ 'name' => 'ResourcePrincipalName', @@ -14112,22 +9555,17 @@ ."\n" .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'array', - 'items' => [ - 'description' => 'The name of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'items' => ['description' => 'The name of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource name is the name of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], 'required' => false, 'docRequired' => true, 'maxItems' => 51, + 'example' => '', ], ], [ @@ -14140,19 +9578,13 @@ ."\n" .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'array', - 'items' => [ - 'description' => 'The ID of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'items' => ['description' => 'The ID of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 50. If the ResourceType parameter is set to user, the resource ID is the ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: ResourceId and ResourcePrincipalName.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], 'required' => false, 'docRequired' => true, 'example' => 'UntagResources', @@ -14167,19 +9599,14 @@ 'title' => '', 'description' => 'The tag keys of resources.'."\n" ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.'."\n", + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'array', - 'items' => [ - 'description' => 'The tag key of resource N.'."\n" - ."\n" - .'Valid values of N: 1 to 20. N must be consecutive.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'operator', - 'title' => '', - ], + 'items' => ['description' => 'The tag key of resource N.'."\n" + ."\n" + .'Valid values of N: 1 to 20. N must be consecutive.', 'type' => 'string', 'required' => false, 'example' => 'operator', 'title' => ''], 'required' => false, 'maxItems' => 21, + 'example' => '', ], ], ], @@ -14188,26 +9615,23 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '6AC79B74-9A78-58E2-818B-1D38EDC64D67', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '6AC79B74-9A78-58E2-818B-1D38EDC64D67', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"6AC79B74-9A78-58E2-818B-1D38EDC64D67\\"\\n}","errorExample":""},{"type":"xml","example":"<UntagResourcesResponse>\\n <RequestId>6AC79B74-9A78-58E2-818B-1D38EDC64D67</RequestId>\\n</UntagResourcesResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UntagResources', - 'summary' => 'Removes tags from a resource.', - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '20', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UntagResources'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -14216,26 +9640,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6AC79B74-9A78-58E2-818B-1D38EDC64D67\\"\\n}","type":"json"}]', ], 'UpdateAccessKey' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Modifies the status of an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -14247,79 +9662,55 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREramXHGI9T', - ], + 'abilityTreeNodes' => ['FEATUREramXHGI9T'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'If this parameter is empty, the status of the AccessKey pair for the current user is modified.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'If this parameter is empty, the status of the AccessKey pair for the current user is modified.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'UserAccessKeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The AccessKey ID of the AccessKey pair for which you want to modify the status.'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'LTAI*******************', - 'title' => '', - ], + 'schema' => ['description' => 'The AccessKey ID of the AccessKey pair for which you want to modify the status.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'LTAI*******************', 'title' => ''], ], [ 'name' => 'Status', 'in' => 'query', - 'schema' => [ - 'description' => 'The status of the AccessKey pair. Valid values:'."\n" - ."\n" - .'* Active'."\n" - .'* Inactive'."\n", - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'Active', - 'title' => '', - ], + 'schema' => ['description' => 'The status of the AccessKey pair. Valid values:'."\n" + ."\n" + .'- Active'."\n" + ."\n" + .'- Inactive', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'Active', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","errorExample":""},{"type":"xml","example":"<UpdateAccessKeyResponse>\\r\\n <RequestId>B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC</RequestId>\\r\\n</UpdateAccessKeyResponse>","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UpdateAccessKey', - 'summary' => 'Modifies the status of an AccessKey pair for an Alibaba Cloud account or a Resource Access Management (RAM) user.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateAccessKey'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -14328,27 +9719,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"B9AF80E4-1565-42D9-9256-0B8B0D9FD3EC\\"\\n}","type":"json"}]', ], 'UpdateApplication' => [ - 'summary' => 'Updates the configuration of a specified application.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Modifies the configuration information of an application.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -14356,229 +9737,126 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'update', - 'riskType' => 'none', - 'chargeType' => 'free', - ], + 'systemTags' => ['operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free'], 'parameters' => [ [ 'name' => 'AppId', 'in' => 'query', - 'schema' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => '472457090344041****', - ], + 'schema' => ['description' => 'The application ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => '472457090344041****', 'title' => ''], ], [ 'name' => 'NewDisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The new display name.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'NewApp', - ], + 'schema' => ['description' => 'The display name of the application.', 'type' => 'string', 'required' => false, 'example' => 'NewApp', 'title' => ''], ], [ 'name' => 'NewRedirectUris', 'in' => 'query', - 'schema' => [ - 'description' => 'The webhook address.'."\n" - ."\n" - .'If you enter multiple webhook addresses, separate them with semicolons (;).', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'https://www.example.com', - ], + 'schema' => ['description' => 'The redirect URL.'."\n" + ."\n" + .'To specify multiple URLs, separate them with semicolons (;).', 'type' => 'string', 'required' => false, 'example' => 'https://www.example.com', 'title' => ''], ], [ 'name' => 'NewPredefinedScopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The permission scopes of the application.'."\n" - ."\n" - .'For more information about the valid values and descriptions of permission scopes, see [OAuth scopes](~~93693~~). You can also call the [ListPredefinedScopes](~~187206~~) operation to obtain the permission scopes that are supported by different types of applications.'."\n" - ."\n" - .'If you enter multiple permission scopes, separate them with semicolons (;).'."\n" - ."\n" - .'The new permission scopes overwrite the original ones. For example, if the original permission scope is `/acs/ccc` and you set the new permission scope to `/acs/alidns`, the permission scope that takes effect is `/acs/alidns`. If you want to add `/acs/alidns` to the original scope, set the new permission scope to `/acs/ccc;/acs/alidns`.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'openid', - ], + 'schema' => ['description' => 'The scope of application permissions.'."\n" + ."\n" + .'For more information about the application permission scope, see [OAuth overview](~~93693~~). You can also call the [ListPredefinedScopes](~~187206~~) operation to obtain the scopes that are supported by different application types.'."\n" + ."\n" + .'To specify multiple permissions, separate them with semicolons (;).'."\n" + ."\n" + .'The new value of this parameter overwrites the original value, and the permission specified by the new value takes effect. For example, if the original value is `/acs/ccc`, and the new value is `/acs/alidns`, `/acs/alidns` takes effect. If you want to retain the original permission and the `/acs/alidns` permission, set the value to `/acs/ccc;/acs/alidns`.', 'type' => 'string', 'required' => false, 'example' => 'openid', 'title' => ''], ], [ 'name' => 'NewRequiredScopes', 'in' => 'query', - 'schema' => [ - 'description' => 'The required permission scopes of the application.'."\n" - ."\n" - .'You can set one or more scopes specified in `RequiredScopes` as required. After a scope is set as required, it is selected by default and cannot be deselected when a user grants permissions to the application.'."\n" - ."\n" - .'If you also specify `NewPredefinedScopes`, the list of application scopes is reset by `NewPredefinedScopes` first. Then, this parameter is used to configure whether the scopes are required.'."\n" - ."\n" - .'If you enter multiple permission scopes, separate them with semicolons (;).'."\n" - ."\n" - .'The new required scopes overwrite the original ones.'."\n" - ."\n" - .'> If a scope that you specify for `RequiredScopes` is not within the range of `PredefinedScopes`, the required setting for that scope does not take effect.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'profile;aliuid', - ], + 'schema' => ['description' => 'The required permission.'."\n" + ."\n" + .'You can specify one or more permissions for the `RequiredScopes` parameter. When a user grants permissions to the application, the scopes specified in this parameter are pre-selected and cannot be deselected.'."\n" + ."\n" + .'If you also specify the `NewPredefinedScopes` parameter, the `NewPredefinedScopes` parameter specifies the permissions that can be granted on the application, and this parameter specifies the required permissions.'."\n" + ."\n" + .'To enter multiple scopes, separate them with semicolons (;).'."\n" + ."\n" + .'The new value of this parameter overwrites the original value, and the required permission specified by the new value takes effect.'."\n" + ."\n" + .'> Any scope specified here must also be included in `PredefinedScopes`. Otherwise, the scope will not be set as required.', 'type' => 'string', 'required' => false, 'example' => 'profile;aliuid', 'title' => ''], ], [ 'name' => 'NewSecretRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Indicates whether an application key is required. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false'."\n" - ."\n" - .'> * For applications of the WebApp and ServerApp types, this parameter is forcibly set to true and cannot be modified.'."\n" - ."\n" - .'- For applications of the NativeApp type, you can set this parameter to true or false. The default value is false. These applications often run in untrusted environments and cannot effectively protect application keys. Do not set this parameter to true unless necessary. For more information, see [Log on to Alibaba Cloud using a native application](~~93697~~).', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'true', - ], + 'schema' => ['description' => 'Specifies whether a secret is required. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'> * For applications of the WebApp and ServerApp types, this parameter is automatically set to true and cannot be changed.'."\n" + .'>'."\n" + .'> * For applications of the NativeApp type, this parameter can be set to true or false. If you do not set this parameter, false is used. Applications of the NativeApp type run in untrusted environments and the secrets of these applications are not protected.'."\n" + ."\n" + .'We recommend that you do not set this parameter to true unless otherwise specified. For more information, see [Access Alibaba Cloud APIs from a native application](~~93697~~).', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], [ 'name' => 'NewAccessTokenValidity', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of the access token.'."\n" - ."\n" - .'Valid values: 900 to 10800. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'title' => '', - 'example' => '3600', - ], + 'schema' => ['description' => 'The validity period of the access token.'."\n" + ."\n" + .'Valid values: 900 to 10800. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '3600', 'title' => ''], ], [ 'name' => 'NewRefreshTokenValidity', 'in' => 'query', - 'schema' => [ - 'description' => 'The validity period of the refresh token.'."\n" - ."\n" - .'Valid values: 7200 to 31536000. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'required' => false, - 'title' => '', - 'example' => '7776000', - ], + 'schema' => ['description' => 'The validity period of the refresh token.'."\n" + ."\n" + .'Valid values: 7200 to 31536000. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'required' => false, 'example' => '7776000', 'title' => ''], ], [ 'name' => 'NewIsMultiTenant', 'in' => 'query', - 'schema' => [ - 'description' => 'Indicates whether the application can be installed by other Alibaba Cloud accounts. Valid values:'."\n" - ."\n" - .'- true: The application can be installed.'."\n" - ."\n" - .'- false: The application cannot be installed.', - 'type' => 'boolean', - 'required' => false, - 'title' => '', - 'example' => 'true', - ], + 'schema' => ['description' => 'Specifies whether the application can be installed by using other Alibaba Cloud accounts. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'required' => false, 'example' => 'true', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The returned results.', + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '6616F09B-2768-4C11-8866-A8EE4C4A583E', 'title' => ''], 'Application' => [ 'description' => 'The application information.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the application.', - 'type' => 'string', - 'title' => '', - 'example' => 'NewApp', - ], - 'AccessTokenValidity' => [ - 'description' => 'The validity period of the access token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '3600', - ], - 'SecretRequired' => [ - 'description' => 'Indicates whether an application key is required.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AccountId' => [ - 'description' => 'The ID of the Alibaba Cloud account to which the application belongs.', - 'type' => 'string', - 'title' => '', - 'example' => '177242285274****', - ], - 'CreateDate' => [ - 'description' => 'The time when the application was created.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-23T08:06:57Z', - ], - 'AppName' => [ - 'description' => 'The application name.', - 'type' => 'string', - 'title' => '', - 'example' => 'myapp', - ], + 'DisplayName' => ['description' => 'The display name of the application.', 'type' => 'string', 'example' => 'NewApp', 'title' => ''], + 'AccessTokenValidity' => ['description' => 'The validity period of the access token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '3600', 'title' => ''], + 'SecretRequired' => ['description' => 'Indicates whether a secret is required.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AccountId' => ['description' => 'The ID of the Alibaba Cloud account to which the application belongs.', 'type' => 'string', 'example' => '177242285274****', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the application was created.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], + 'AppName' => ['description' => 'The application name.', 'type' => 'string', 'example' => 'myapp', 'title' => ''], 'RedirectUris' => [ 'type' => 'object', 'itemNode' => true, 'properties' => [ 'RedirectUri' => [ - 'description' => 'The webhook address.', + 'description' => 'The redirect URL.', 'type' => 'array', - 'items' => [ - 'description' => 'The webhook address.', - 'type' => 'string', - 'title' => '', - 'example' => 'https://www.example.com', - ], + 'items' => ['description' => 'The redirect URL.', 'type' => 'string', 'example' => 'https://www.example.com', 'title' => ''], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The redirect URLs.', 'title' => '', + 'example' => '', ], - 'UpdateDate' => [ - 'description' => 'The time when the application was updated.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-23T08:06:57Z', - ], + 'UpdateDate' => ['description' => 'The time when the application was updated.', 'type' => 'string', 'example' => '2020-10-23T08:06:57Z', 'title' => ''], 'DelegatedScope' => [ - 'description' => 'The information about the permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ 'PredefinedScopes' => [ @@ -14586,95 +9864,57 @@ 'itemNode' => true, 'properties' => [ 'PredefinedScope' => [ - 'description' => 'The information about the permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'array', 'items' => [ - 'description' => 'The information about the permission scopes of the application.', + 'description' => 'The information about the permissions that are granted on the application.', 'type' => 'object', 'properties' => [ - 'Description' => [ - 'description' => 'The description of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', - ], - 'Name' => [ - 'description' => 'The name of the scope.', - 'type' => 'string', - 'title' => '', - 'example' => 'openid', - ], - 'Required' => [ - 'description' => 'Indicates whether this permission scope is required by default when the application is installed. Valid values:'."\n" - ."\n" - .'- true: required.'."\n" - ."\n" - .'- false: not required.'."\n" - ."\n" - .'The `openid` scope is required by default.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], + 'Description' => ['description' => 'The description of the permission.', 'type' => 'string', 'example' => 'Obtain the OpenID of the user. This is the default permission that you cannot remove.', 'title' => ''], + 'Name' => ['description' => 'The name of the permission.', 'type' => 'string', 'example' => 'openid', 'title' => ''], + 'Required' => ['description' => 'Indicates whether the permission is automatically selected by default when you install the application. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false'."\n" + ."\n" + .'`openid` is required by default.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], ], 'title' => '', + 'example' => '', ], 'title' => '', + 'example' => '', ], ], - 'description' => '', + 'description' => 'The information about the permissions that are granted on the application.', 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], - 'AppId' => [ - 'description' => 'The application ID.', - 'type' => 'string', - 'title' => '', - 'example' => '472457090344041****', - ], - 'RefreshTokenValidity' => [ - 'description' => 'The validity period of the refresh token. Unit: seconds.', - 'type' => 'integer', - 'format' => 'int32', - 'title' => '', - 'example' => '7776000', - ], - 'IsMultiTenant' => [ - 'description' => 'Indicates whether the application can be installed by other Alibaba Cloud accounts.', - 'type' => 'boolean', - 'title' => '', - 'example' => 'true', - ], - 'AppType' => [ - 'description' => 'The application type.', - 'type' => 'string', - 'title' => '', - 'example' => 'WebApp', - ], - 'ProtocolVersion' => [ - 'type' => 'string', - 'description' => 'The OAuth protocol version of the application. Valid values:'."\n" - ."\n" - .'- `2.0`: OAuth 2.0.'."\n" - ."\n" - .'- `2.1`: OAuth 2.1.', - 'title' => '', - 'example' => '2.0', - ], + 'AppId' => ['description' => 'The application ID.', 'type' => 'string', 'example' => '472457090344041****', 'title' => ''], + 'RefreshTokenValidity' => ['description' => 'The validity period of the refresh token. Unit: seconds.', 'type' => 'integer', 'format' => 'int32', 'example' => '7776000', 'title' => ''], + 'IsMultiTenant' => ['description' => 'Indicates whether the application can be installed by using other Alibaba Cloud accounts.', 'type' => 'boolean', 'example' => 'true', 'title' => ''], + 'AppType' => ['description' => 'The application type.', 'type' => 'string', 'example' => 'WebApp', 'title' => ''], + 'ProtocolVersion' => ['description' => 'The OAuth protocol version of the application. Valid values:'."\n" + ."\n" + .'- `2.0`: OAuth 2.0'."\n" + ."\n" + .'- `2.1`: OAuth 2.1', 'type' => 'string', 'example' => '2.0', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"NewApp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Name\\": \\"openid\\",\\n \\"Required\\": true\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UpdateApplication', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', @@ -14682,12 +9922,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateApplication', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateApplication'], ], ], 'ramActions' => [ @@ -14698,26 +9933,16 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"6616F09B-2768-4C11-8866-A8EE4C4A583E\\",\\n \\"Application\\": {\\n \\"DisplayName\\": \\"NewApp\\",\\n \\"AccessTokenValidity\\": 3600,\\n \\"SecretRequired\\": true,\\n \\"AccountId\\": \\"177242285274****\\",\\n \\"CreateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"AppName\\": \\"myapp\\",\\n \\"RedirectUris\\": {\\n \\"RedirectUri\\": [\\n \\"https://www.example.com\\"\\n ]\\n },\\n \\"UpdateDate\\": \\"2020-10-23T08:06:57Z\\",\\n \\"DelegatedScope\\": {\\n \\"PredefinedScopes\\": {\\n \\"PredefinedScope\\": [\\n {\\n \\"Description\\": \\"Obtain the OpenID of the user. This is the default permission that you cannot remove.\\",\\n \\"Name\\": \\"openid\\",\\n \\"Required\\": true\\n }\\n ]\\n }\\n },\\n \\"AppId\\": \\"472457090344041****\\",\\n \\"RefreshTokenValidity\\": 7776000,\\n \\"IsMultiTenant\\": true,\\n \\"AppType\\": \\"WebApp\\",\\n \\"ProtocolVersion\\": \\"2.0\\"\\n }\\n}","type":"json"}]', ], 'UpdateGroup' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -14729,61 +9954,34 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram3V29VK', - ], + 'abilityTreeNodes' => ['FEATUREram3V29VK'], ], 'parameters' => [ [ 'name' => 'NewComments', 'in' => 'query', - 'schema' => [ - 'description' => 'The new description.'."\n" - ."\n" - .'The description can be up to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The new description.'."\n" + ."\n" + .'The description can be up to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => '测试团队', 'title' => ''], ], [ 'name' => 'NewDisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The new display name of the RAM user group.'."\n" - ."\n" - .'The name can be up to 24 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The new display name of the RAM user group.'."\n" + ."\n" + .'The name can be up to 24 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'Test-Team', 'title' => ''], ], [ 'name' => 'NewGroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The new name of the RAM user group.'."\n" - ."\n" - .'The name can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'Test-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The new name of the RAM user group.'."\n" + ."\n" + .'The name can be up to 64 characters in length and can contain letters, digits, periods (.), underscores (\\_), and hyphens (-).', 'type' => 'string', 'required' => false, 'example' => 'Test-Team', 'title' => ''], ], [ 'name' => 'GroupName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'Dev-Team', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'Dev-Team', 'title' => ''], ], ], 'responses' => [ @@ -14792,70 +9990,39 @@ 'type' => 'object', 'properties' => [ 'Group' => [ - 'description' => 'The information about the RAM user group.'."\n", + 'description' => 'The information about the RAM user group.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'GroupId' => [ - 'description' => 'The ID of the RAM user group.'."\n", - 'type' => 'string', - 'example' => '740317625433843****', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The update time.'."\n", - 'type' => 'string', - 'example' => '2020-10-20T03:44:27Z', - 'title' => '', - ], - 'GroupName' => [ - 'description' => 'The name of the RAM user group.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'Test-Team', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The creation time.'."\n", - 'type' => 'string', - 'example' => '2020-10-19T16:15:17Z', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user group.', 'type' => 'string', 'example' => 'Test-Team', 'title' => ''], + 'GroupId' => ['description' => 'The ID of the RAM user group.', 'type' => 'string', 'example' => '740317625433843****', 'title' => ''], + 'UpdateDate' => ['description' => 'The update time.', 'type' => 'string', 'example' => '2020-10-20T03:44:27Z', 'title' => ''], + 'GroupName' => ['description' => 'The name of the RAM user group.', 'type' => 'string', 'example' => 'Test-Team', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => '测试团队', 'title' => ''], + 'CreateDate' => ['description' => 'The creation time.', 'type' => 'string', 'example' => '2020-10-19T16:15:17Z', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'CDA656E3-3CE9-4A03-A8A3-B42A0C3C3287', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'CDA656E3-3CE9-4A03-A8A3-B42A0C3C3287', 'title' => ''], ], 'description' => '', 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Test-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-20T03:44:27Z\\",\\n \\"GroupName\\": \\"Test-Team\\",\\n \\"Comments\\": \\"Test-Team\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"CDA656E3-3CE9-4A03-A8A3-B42A0C3C3287\\"\\n}","errorExample":""},{"type":"xml","example":"","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UpdateGroup', 'summary' => 'Modifies information about a Resource Access Management (RAM) user group.', 'requestParamsDescription' => ' ', 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateGroup'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -14864,27 +10031,17 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"Group\\": {\\n \\"DisplayName\\": \\"Test-Team\\",\\n \\"GroupId\\": \\"740317625433843****\\",\\n \\"UpdateDate\\": \\"2020-10-20T03:44:27Z\\",\\n \\"GroupName\\": \\"Test-Team\\",\\n \\"Comments\\": \\"测试团队\\",\\n \\"CreateDate\\": \\"2020-10-19T16:15:17Z\\"\\n },\\n \\"RequestId\\": \\"CDA656E3-3CE9-4A03-A8A3-B42A0C3C3287\\"\\n}","type":"json"}]', ], 'UpdateLoginProfile' => [ - 'summary' => 'Modifies the console logon information for a specified Resource Access Management (RAM) user.', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'summary' => 'Modifies the console logon settings for a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -14897,80 +10054,47 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '7497', - 'abilityTreeNodes' => [ - 'FEATUREramFSAEMQ', - ], + 'abilityTreeNodes' => ['FEATUREramFSAEMQ'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'Password', 'in' => 'query', - 'schema' => [ - 'description' => 'The new console logon password for the RAM user.'."\n" - ."\n" - .'The password must meet the password strength requirements.', - 'type' => 'string', - 'required' => false, - 'example' => 'mypassword', - 'title' => '', - ], + 'schema' => ['description' => 'The new console logon password for the RAM user.'."\n" + ."\n" + .'The password must meet the password policy.', 'type' => 'string', 'required' => false, 'example' => 'mypassword', 'title' => ''], ], [ 'name' => 'PasswordResetRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether the RAM user must reset the password at the next logon. Valid values:'."\n" - ."\n" - .'- true'."\n" - ."\n" - .'- false', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether the RAM user must reset the password at the next logon. Valid values:'."\n" + ."\n" + .'- true'."\n" + ."\n" + .'- false', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'MFABindRequired', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to enforce multi-factor authentication (MFA) for the RAM user. Valid values:'."\n" - ."\n" - .'- true: Enforce MFA. The RAM user must attach an MFA device at the next logon.'."\n" - ."\n" - .'- false: Do not enforce MFA.', - 'type' => 'boolean', - 'required' => false, - 'example' => 'false', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether to enforce multi-factor authentication (MFA) for the RAM user. Valid values:'."\n" + ."\n" + .'- true: Enforce MFA. The RAM user must attach an MFA device at the next logon.'."\n" + ."\n" + .'- false: Do not enforce MFA.', 'type' => 'boolean', 'required' => false, 'example' => 'false', 'title' => ''], ], [ 'name' => 'Status', 'in' => 'query', - 'schema' => [ - 'description' => 'Specifies whether to enable or disable password-based logon to the console. Valid values:'."\n" - ."\n" - .'- Active: Enabled.'."\n" - ."\n" - .'- Inactive: Disabled.', - 'type' => 'string', - 'required' => false, - 'example' => 'Active', - 'title' => '', - ], + 'schema' => ['description' => 'Specifies whether to enable password-based logon to the console. Valid values:'."\n" + ."\n" + .'- Active: Enable'."\n" + ."\n" + .'- Inactive: Disable', 'type' => 'string', 'required' => false, 'example' => 'Active', 'title' => ''], ], ], 'responses' => [ @@ -14978,66 +10102,26 @@ 'schema' => [ 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'example' => 'BCDB6A7F-2199-41D9-B577-4FA536A5ADE1', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'BCDB6A7F-2199-41D9-B577-4FA536A5ADE1', 'title' => ''], 'LoginProfile' => [ - 'description' => 'The console logon information.', + 'description' => 'The console logon settings.', 'type' => 'object', 'properties' => [ - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.', - 'type' => 'string', - 'example' => 'test@example11.onaliyun.com', - 'title' => '', - ], - 'Status' => [ - 'description' => 'Specifies whether password logon to the console is enabled or disabled.', - 'type' => 'string', - 'example' => 'Active', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the logon profile was updated.', - 'type' => 'string', - 'example' => '2020-10-14T07:48:41Z', - 'title' => '', - ], - 'PasswordResetRequired' => [ - 'description' => 'Indicates whether the RAM user must reset the password at the next logon.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'MFABindRequired' => [ - 'description' => 'Indicates whether MFA is enforced for the user.', - 'type' => 'boolean', - 'example' => 'false', - 'title' => '', - ], - 'AutoDisableLoginStatus' => [ - 'description' => 'Indicates whether to automatically disable console logon for an inactive account. This feature is enabled by default and cannot be disabled.', - 'type' => 'string', - 'example' => 'true', - 'title' => '', - ], - 'PasswordStatus' => [ - 'description' => 'The status of the initial password. An initial password is the one set when a logon profile is created or console logon is re-enabled.'."\n" - ."\n" - .'Valid values:'."\n" - ."\n" - .'- "NotInitial": Not an initial password.'."\n" - ."\n" - .'- "InitialValid": The initial password is valid.'."\n" - ."\n" - .'- "InitialExpired": The initial password has expired.', - 'type' => 'string', - 'example' => 'NotInitial', - 'title' => '', - ], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'test@example11.onaliyun.com', 'title' => ''], + 'Status' => ['description' => 'Indicates whether password logon to the console is enabled or disabled.', 'type' => 'string', 'example' => 'Active', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the logon profile was updated.', 'type' => 'string', 'example' => '2020-10-14T07:48:41Z', 'title' => ''], + 'PasswordResetRequired' => ['description' => 'Indicates whether the RAM user must reset the password at the next logon.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'MFABindRequired' => ['description' => 'Indicates whether MFA is enforced for the user.', 'type' => 'boolean', 'example' => 'false', 'title' => ''], + 'AutoDisableLoginStatus' => ['description' => 'Indicates whether to automatically disable console logon for an inactive account. This feature is enabled by default and cannot be disabled.', 'type' => 'string', 'example' => 'true', 'title' => ''], + 'PasswordStatus' => ['description' => 'The status of the initial password. An initial password is the one set when a logon profile is created or console logon is re-enabled.'."\n" + ."\n" + .'Valid values:'."\n" + ."\n" + .'- "NotInitial": Not an initial password.'."\n" + ."\n" + .'- "InitialValid": The initial password is valid.'."\n" + ."\n" + .'- "InitialExpired": The initial password has expired.', 'type' => 'string', 'example' => 'NotInitial', 'title' => ''], ], 'title' => '', 'example' => '', @@ -15049,9 +10133,7 @@ ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"BCDB6A7F-2199-41D9-B577-4FA536A5ADE1\\",\\n \\"LoginProfile\\": {\\n \\"UserPrincipalName\\": \\"test@example11.onaliyun.com\\",\\n \\"Status\\": \\"Active\\",\\n \\"UpdateDate\\": \\"2020-10-14T07:48:41Z\\",\\n \\"PasswordResetRequired\\": false,\\n \\"MFABindRequired\\": false,\\n \\"AutoDisableLoginStatus\\": \\"true\\",\\n \\"PasswordStatus\\": \\"NotInitial\\"\\n }\\n}","type":"json"}]', 'title' => 'UpdateLoginProfile', 'requestParamsDescription' => ' ', @@ -15060,12 +10142,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateLoginProfile', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateLoginProfile'], ], ], 'ramActions' => [ @@ -15076,26 +10153,15 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], ], 'UpdateOIDCProvider' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -15103,174 +10169,86 @@ ], 'operationType' => 'write', 'deprecated' => false, - 'systemTags' => [ - 'operationType' => 'update', - 'riskType' => 'none', - 'chargeType' => 'free', - 'tenantRelevance' => 'publicInformation', - ], + 'systemTags' => ['operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', 'tenantRelevance' => 'publicInformation'], 'parameters' => [ [ 'name' => 'OIDCProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'required' => false, - 'docRequired' => true, - 'example' => 'TestOIDCProvider', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'required' => false, 'docRequired' => true, 'example' => 'TestOIDCProvider', 'title' => ''], ], [ 'name' => 'ClientIds', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the client. If you want to specify multiple client IDs, separate the client IDs with commas (,).'."\n" - ."\n" - .'A client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.``'."\n" - ."\n" - .'A client ID can be up to 128 characters in length.'."\n" - ."\n" - .'> If you specify this parameter, all the client IDs of the OIDC IdP are replaced. If you need to only add or remove a client ID, call the AddClientIdToOIDCProvider or RemoveClientIdFromOIDCProvider operation. For more information, see [AddClientIdToOIDCProvider](~~332057~~) or [RemoveClientIdFromOIDCProvider](~~332058~~).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '498469743454717****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the client. If you want to specify multiple client IDs, separate the client IDs with commas (,).'."\n" + ."\n" + .'A client ID can contain letters, digits, and special characters and cannot start with the special characters. The special characters are `periods (.), hyphens (-), underscores (_), colons (:), and forward slashes (/)`.\\`\\`'."\n" + ."\n" + .'A client ID can be up to 128 characters in length.'."\n" + ."\n" + .'> If you specify this parameter, all the client IDs of the OIDC IdP are replaced. If you need to only add or remove a client ID, call the AddClientIdToOIDCProvider or RemoveClientIdFromOIDCProvider operation. For more information, see [AddClientIdToOIDCProvider](~~332057~~) or [RemoveClientIdFromOIDCProvider](~~332058~~).', 'type' => 'string', 'required' => false, 'example' => '498469743454717****', 'title' => ''], ], [ 'name' => 'NewDescription', 'in' => 'query', - 'schema' => [ - 'description' => 'The description of the OIDC IdP.'."\n" - ."\n" - .'The description can be up to 256 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], + 'schema' => ['description' => 'The description of the OIDC IdP.'."\n" + ."\n" + .'The description can be up to 256 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'This is a new OIDC Provider.', 'title' => ''], ], [ 'name' => 'IssuanceLimitTime', 'in' => 'query', - 'schema' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'required' => false, - 'example' => '6', - 'title' => '', - ], + 'schema' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'required' => false, 'example' => '6', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => 'E4C4D1BD-2558-5BD1-8C26-A5D7FB174A55', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => 'E4C4D1BD-2558-5BD1-8C26-A5D7FB174A55', 'title' => ''], 'OIDCProvider' => [ - 'description' => 'The information about the OIDC IdP.'."\n", + 'description' => 'The information about the OIDC IdP.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-12T08:38:29Z', - 'title' => '', - ], - 'Description' => [ - 'description' => 'The description of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'This is a new OIDC Provider.', - 'title' => '', - ], - 'OIDCProviderName' => [ - 'description' => 'The name of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'TestOIDCProvider', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.'."\n", - 'type' => 'string', - 'example' => '2021-11-11T06:56:03Z', - 'title' => '', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.'."\n", - 'type' => 'string', - 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', - 'title' => '', - ], - 'IssuerUrl' => [ - 'description' => 'The URL of the issuer.'."\n", - 'type' => 'string', - 'example' => 'https://dev-xxxxxx.okta.com', - 'title' => '', - ], - 'Fingerprints' => [ - 'description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', - 'title' => '', - ], - 'ClientIds' => [ - 'description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).'."\n", - 'type' => 'string', - 'example' => '498469743454717****', - 'title' => '', - ], - 'GmtCreate' => [ - 'description' => 'The timestamp when the OIDC IdP was created.'."\n", - 'type' => 'string', - 'example' => '1636613763000', - 'title' => '', - ], - 'GmtModified' => [ - 'description' => 'The timestamp when the OIDC IdP was modified.'."\n", - 'type' => 'string', - 'example' => '1636706309000', - 'title' => '', - ], - 'IssuanceLimitTime' => [ - 'description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.'."\n", - 'type' => 'integer', - 'format' => 'int64', - 'example' => '6', - 'title' => '', - ], + 'UpdateDate' => ['description' => 'The time when the OIDC IdP was modified. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-12T08:38:29Z', 'title' => ''], + 'Description' => ['description' => 'The description of the OIDC IdP.', 'type' => 'string', 'example' => 'This is a new OIDC Provider.', 'title' => ''], + 'OIDCProviderName' => ['description' => 'The name of the OIDC IdP.', 'type' => 'string', 'example' => 'TestOIDCProvider', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the OIDC IdP was created. The time is displayed in UTC.', 'type' => 'string', 'example' => '2021-11-11T06:56:03Z', 'title' => ''], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the OIDC IdP.', 'type' => 'string', 'example' => 'acs:ram::177242285274****:oidc-provider/TestOIDCProvider', 'title' => ''], + 'IssuerUrl' => ['description' => 'The URL of the issuer.', 'type' => 'string', 'example' => 'https://xxxxxx.example.com', 'title' => ''], + 'Fingerprints' => ['description' => 'The fingerprint of the HTTPS certificate. If multiple fingerprints are returned, the fingerprints are separated by commas (,).', 'type' => 'string', 'example' => '902ef2deeb3c5b13ea4c3d5193629309e231****', 'title' => ''], + 'ClientIds' => ['description' => 'The ID of the client. If multiple client IDs are returned, the client IDs are separated by commas (,).', 'type' => 'string', 'example' => '498469743454717****', 'title' => ''], + 'GmtCreate' => ['description' => 'The timestamp when the OIDC IdP was created.', 'type' => 'string', 'example' => '1636613763000', 'title' => ''], + 'GmtModified' => ['description' => 'The timestamp when the OIDC IdP was modified.', 'type' => 'string', 'example' => '1636706309000', 'title' => ''], + 'IssuanceLimitTime' => ['description' => 'The earliest time when an external IdP can issue an ID token. If the value of the iat field in the ID token is later than the current time, the request is rejected. Unit: hours. Valid values: 1 to 168.', 'type' => 'integer', 'format' => 'int64', 'example' => '6', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"RequestId\\": \\"E4C4D1BD-2558-5BD1-8C26-A5D7FB174A55\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://dev-xxxxxx.okta.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 6\\n }\\n}","errorExample":""},{"type":"xml","example":"<UpdateOIDCProviderResponse>\\n <RequestId>E4C4D1BD-2558-5BD1-8C26-A5D7FB174A55</RequestId>\\n <OIDCProvider>\\n <UpdateDate>2021-11-12T08:38:29Z</UpdateDate>\\n <Description>This is a new OIDC Provider.</Description>\\n <OIDCProviderName>TestOIDCProvider</OIDCProviderName>\\n <CreateDate>2021-11-11T06:56:03Z</CreateDate>\\n <Arn>acs:ram::177242285274****:oidc-provider/TestOIDCProvider</Arn>\\n <IssuerUrl>https://dev-xxxxxx.okta.com</IssuerUrl>\\n <Fingerprints>902ef2deeb3c5b13ea4c3d5193629309e231****</Fingerprints>\\n <ClientIds>498469743454717****</ClientIds>\\n <GmtCreate>1636613763000</GmtCreate>\\n <GmtModified>1636706309000</GmtModified>\\n </OIDCProvider>\\n</UpdateOIDCProviderResponse>","errorExample":""}]', 'title' => 'UpdateOIDCProvider', 'summary' => 'Modifies the description and client IDs of an OpenID Connect (OIDC) identity provider (IdP).', 'description' => '###'."\n" ."\n" - .'This topic provides an example on how to change the description of the OIDC IdP named `TestOIDCProvider` to `This is a new OIDC Provider.`'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", + .'This topic provides an example on how to change the description of the OIDC IdP named `TestOIDCProvider` to `This is a new OIDC Provider.`', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateOIDCProvider'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -15278,31 +10256,19 @@ 'action' => 'ram:UpdateOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"E4C4D1BD-2558-5BD1-8C26-A5D7FB174A55\\",\\n \\"OIDCProvider\\": {\\n \\"UpdateDate\\": \\"2021-11-12T08:38:29Z\\",\\n \\"Description\\": \\"This is a new OIDC Provider.\\",\\n \\"OIDCProviderName\\": \\"TestOIDCProvider\\",\\n \\"CreateDate\\": \\"2021-11-11T06:56:03Z\\",\\n \\"Arn\\": \\"acs:ram::177242285274****:oidc-provider/TestOIDCProvider\\",\\n \\"IssuerUrl\\": \\"https://xxxxxx.example.com\\",\\n \\"Fingerprints\\": \\"902ef2deeb3c5b13ea4c3d5193629309e231****\\",\\n \\"ClientIds\\": \\"498469743454717****\\",\\n \\"GmtCreate\\": \\"1636613763000\\",\\n \\"GmtModified\\": \\"1636706309000\\",\\n \\"IssuanceLimitTime\\": 6\\n }\\n}","type":"json"}]', ], 'UpdatePasskey' => [ - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['https'], 'security' => [ [ 'AK' => [], @@ -15315,9 +10281,7 @@ 'riskType' => 'none', 'chargeType' => 'free', 'abilityTreeCode' => '254333', - 'abilityTreeNodes' => [ - 'FEATUREramCFN0GB', - ], + 'abilityTreeNodes' => ['FEATUREramCFN0GB'], 'autoTest' => false, 'notSupportAutoTestReason' => '因为创建passkey需要通过控制台页面，没有openAPI，因此无法创建用来更新的passkey', ], @@ -15325,61 +10289,39 @@ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the Resource Access Management (RAM) user.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the Resource Access Management (RAM) user.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'PasskeyId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the passkey.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the passkey.', 'type' => 'string', 'required' => false, 'example' => 'PASSKEY-CuZjEHhWcr7GIQOMGvkS', 'title' => ''], ], [ 'name' => 'PasskeyName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the passkey.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'device1', - 'title' => '', - ], + 'schema' => ['description' => 'The name of the passkey.', 'type' => 'string', 'required' => false, 'example' => 'device1', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ 'title' => 'Schema of Response', - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'title' => 'Id of the request', - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '85836703-8D4F-485F-9726-4D1C730F957E', - ], + 'RequestId' => ['title' => 'Id of the request', 'description' => 'The request ID.', 'type' => 'string', 'example' => '85836703-8D4F-485F-9726-4D1C730F957E'], ], + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UpdatePasskey', 'summary' => 'Updates the name of a passkey.', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], 'ramActions' => [ [ 'operationType' => 'none', @@ -15388,27 +10330,17 @@ 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"85836703-8D4F-485F-9726-4D1C730F957E\\"\\n}","type":"json"}]', ], 'UpdateSAMLProvider' => [ 'summary' => 'Updates the information about a specified identity provider for role-based single sign-on (SSO).', - 'methods' => [ - 'post', - 'get', - ], - 'schemes' => [ - 'http', - 'https', - ], + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -15420,64 +10352,37 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram7YYMOK', - ], + 'abilityTreeNodes' => ['FEATUREram7YYMOK'], 'tenantRelevance' => 'publicInformation', ], 'parameters' => [ [ 'name' => 'SAMLProviderName', 'in' => 'query', - 'schema' => [ - 'description' => 'The name of the identity provider to modify.', - 'type' => 'string', - 'required' => true, - 'docRequired' => true, - 'title' => '', - 'example' => 'test-provider', - ], + 'schema' => ['description' => 'The name of the identity provider to modify.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'title' => '', 'example' => 'test-provider'], ], [ 'name' => 'NewDescription', 'in' => 'query', - 'schema' => [ - 'description' => 'The new description.'."\n" - ."\n" - .'> Specify at least one of the `NewDescription` and `NewEncodedSAMLMetadataDocument` parameters.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'This is a new provider.', - ], + 'schema' => ['description' => 'The new description.'."\n" + ."\n" + .'> Specify at least one of the `NewDescription` and `NewEncodedSAMLMetadataDocument` parameters.', 'type' => 'string', 'required' => false, 'title' => '', 'example' => 'This is a new provider.'], ], [ 'name' => 'NewEncodedSAMLMetadataDocument', 'in' => 'query', - 'schema' => [ - 'description' => 'The new metadata file.'."\n" - ."\n" - .'> Specify at least one of the `NewDescription` and `NewEncodedSAMLMetadataDocument` parameters.', - 'type' => 'string', - 'required' => false, - 'title' => '', - 'example' => 'PD94bWwgdmVy****', - ], + 'schema' => ['description' => 'The new metadata file.'."\n" + ."\n" + .'> Specify at least one of the `NewDescription` and `NewEncodedSAMLMetadataDocument` parameters.', 'type' => 'string', 'required' => false, 'title' => '', 'example' => 'PD94bWwgdmVy****'], ], [ 'name' => 'AuthnSignAlgo', 'in' => 'query', - 'schema' => [ - 'type' => 'string', - 'description' => 'The signature algorithm supported by the Alibaba Cloud service provider (SP). Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1', - 'required' => false, - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'schema' => ['type' => 'string', 'description' => 'The signature algorithm supported by the Alibaba Cloud service provider (SP). Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1', 'required' => false, 'title' => '', 'example' => 'rsa-sha1'], ], ], 'responses' => [ @@ -15486,67 +10391,32 @@ 'description' => 'The returned result.', 'type' => 'object', 'properties' => [ - 'RequestId' => [ - 'description' => 'The request ID.', - 'type' => 'string', - 'title' => '', - 'example' => 'E5EDDFD2-3654-4F9F-9780-4AE7D81823EF', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'title' => '', 'example' => 'E5EDDFD2-3654-4F9F-9780-4AE7D81823EF'], 'SAMLProvider' => [ 'description' => 'The information about the identity provider.', 'type' => 'object', 'properties' => [ - 'UpdateDate' => [ - 'description' => 'The time when the identity provider was last updated. The time is in Coordinated Universal Time (UTC).', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-22T02:51:20Z', - ], - 'Description' => [ - 'description' => 'The description.', - 'type' => 'string', - 'title' => '', - 'example' => 'This is a new provider.', - ], - 'SAMLProviderName' => [ - 'description' => 'The name of the identity provider.', - 'type' => 'string', - 'title' => '', - 'example' => 'test-provider', - ], - 'CreateDate' => [ - 'description' => 'The time when the identity provider was created. The time is in UTC.', - 'type' => 'string', - 'title' => '', - 'example' => '2020-10-22T02:37:05Z', - ], - 'Arn' => [ - 'description' => 'The Alibaba Cloud Resource Name (ARN) of the identity provider.', - 'type' => 'string', - 'title' => '', - 'example' => 'acs:ram::177242285274****:saml-provider/test-provider', - ], - 'AuthnSignAlgo' => [ - 'type' => 'string', - 'description' => 'The signature algorithm supported by the Alibaba Cloud SP. Valid values:'."\n" - ."\n" - .'- rsa-sha256'."\n" - ."\n" - .'- rsa-sha1', - 'title' => '', - 'example' => 'rsa-sha1', - ], + 'UpdateDate' => ['description' => 'The time when the identity provider was last updated. The time is in Coordinated Universal Time (UTC).', 'type' => 'string', 'title' => '', 'example' => '2020-10-22T02:51:20Z'], + 'Description' => ['description' => 'The description.', 'type' => 'string', 'title' => '', 'example' => 'This is a new provider.'], + 'SAMLProviderName' => ['description' => 'The name of the identity provider.', 'type' => 'string', 'title' => '', 'example' => 'test-provider'], + 'CreateDate' => ['description' => 'The time when the identity provider was created. The time is in UTC.', 'type' => 'string', 'title' => '', 'example' => '2020-10-22T02:37:05Z'], + 'Arn' => ['description' => 'The Alibaba Cloud Resource Name (ARN) of the identity provider.', 'type' => 'string', 'title' => '', 'example' => 'acs:ram::177242285274****:saml-provider/test-provider'], + 'AuthnSignAlgo' => ['type' => 'string', 'description' => 'The signature algorithm supported by the Alibaba Cloud SP. Valid values:'."\n" + ."\n" + .'- rsa-sha256'."\n" + ."\n" + .'- rsa-sha1', 'title' => '', 'example' => 'rsa-sha1'], ], 'title' => '', + 'example' => '', ], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], + 'staticInfo' => ['returnType' => 'synchronous'], 'eventInfo' => [ 'enable' => false, 'eventNames' => [], @@ -15560,12 +10430,7 @@ 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateSAMLProvider', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateSAMLProvider'], ], ], 'ramActions' => [ @@ -15576,26 +10441,90 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], ], ], - 'UpdateUser' => [ - 'methods' => [ - 'post', - 'get', + 'UpdateServiceCredential' => [ + 'summary' => 'Modifies the status or name of a service credential for a Resource Access Management (RAM) user.', + 'methods' => ['post', 'get'], + 'schemes' => ['https'], + 'security' => [ + [ + 'AK' => [], + ], ], - 'schemes' => [ - 'http', - 'https', + 'operationType' => 'write', + 'deprecated' => false, + 'systemTags' => ['operationType' => 'update', 'riskType' => 'high', 'chargeType' => 'free'], + 'parameters' => [ + [ + 'name' => 'ServiceCredentialId', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The service credential ID.', 'type' => 'string', 'required' => true, 'docRequired' => true, 'example' => 'SC****************'], + ], + [ + 'name' => 'UserPrincipalName', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The logon name of the Resource Access Management (RAM) user. If this parameter is not specified, the service credential of the identity that you use to invoke this operation is modified.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com'], + ], + [ + 'name' => 'Status', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The status of the service credential. Valid values:'."\n" + .'- Active'."\n" + .'- Inactive'."\n" + ."\n" + .'At least one of Status and ServiceCredentialName must be specified.', 'type' => 'string', 'required' => false, 'example' => 'Active'], + ], + [ + 'name' => 'ServiceCredentialName', + 'in' => 'query', + 'schema' => ['title' => '', 'description' => 'The name of the service credential. The name must be 1 to 128 characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (_). At least one of Status and ServiceCredentialName must be specified.', 'type' => 'string', 'required' => false, 'example' => 'yourServiceCredentialName'], + ], + ], + 'responses' => [ + 200 => [ + 'schema' => [ + 'title' => '', + 'description' => '', + 'type' => 'object', + 'properties' => [ + 'RequestId' => ['title' => '', 'description' => 'The request ID.', 'type' => 'string', 'example' => '53C8FBFD-F2E9-50F2-AD63-B6566B3D4D7B'], + ], + 'example' => '', + ], + ], + ], + 'staticInfo' => ['returnType' => 'synchronous'], + 'title' => 'Modify the status or name of a service credential', + 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [], + ], + 'ramActions' => [ + [ + 'operationType' => 'update', + 'ramAction' => [ + 'action' => 'ram:UpdateServiceCredential', + 'authLevel' => 'resource', + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], + 'resources' => [ + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ], + ], + ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"RequestId\\": \\"53C8FBFD-F2E9-50F2-AD63-B6566B3D4D7B\\"\\n}","type":"json"}]', + ], + 'UpdateUser' => [ + 'summary' => 'Modifies the information about a RAM user.', + 'methods' => ['post', 'get'], + 'schemes' => ['http', 'https'], 'security' => [ [ 'AK' => [], @@ -15607,210 +10536,114 @@ 'operationType' => 'update', 'riskType' => 'none', 'chargeType' => 'free', - 'abilityTreeNodes' => [ - 'FEATUREram8R8C7X', - ], + 'abilityTreeNodes' => ['FEATUREram8R8C7X'], ], 'parameters' => [ [ 'name' => 'UserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The logon name of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'test@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The logon name of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.', 'type' => 'string', 'required' => false, 'example' => 'test@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'UserId', 'in' => 'query', - 'schema' => [ - 'description' => 'The ID of the RAM user.'."\n" - ."\n" - .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '20732900249392****', - 'title' => '', - ], + 'schema' => ['description' => 'The ID of the RAM user.'."\n" + ."\n" + .'> You must specify only one of the following parameters: `UserPrincipalName` and `UserId`.', 'type' => 'string', 'required' => false, 'example' => '20732900249392****', 'title' => ''], ], [ 'name' => 'NewUserPrincipalName', 'in' => 'query', - 'schema' => [ - 'description' => 'The new logon name of the RAM user.'."\n" - ."\n" - .'The name is in the format of `<username>@<AccountAlias>.onaliyun.com`. `<username>` indicates the name of the RAM user. `<AccountAlias>.onaliyun.com` indicates the default domain name.'."\n" - ."\n" - .'The value of `NewUserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'new@example.onaliyun.com', - 'title' => '', - ], + 'schema' => ['description' => 'The new logon name of the RAM user.'."\n" + ."\n" + .'The name is in the format of `<username>@<AccountAlias>.onaliyun.com`. `<username>` indicates the name of the RAM user. `<AccountAlias>.onaliyun.com` indicates the default domain name.'."\n" + ."\n" + .'The value of `NewUserPrincipalName` must be `1 to 128` characters in length and can contain letters, digits, periods (.), hyphens (-), and underscores (\\_). The value of `<username>` must be `1 to 64` characters in length.', 'type' => 'string', 'required' => false, 'example' => 'new@example.onaliyun.com', 'title' => ''], ], [ 'name' => 'NewDisplayName', 'in' => 'query', - 'schema' => [ - 'description' => 'The new display name of the RAM user.'."\n" - ."\n" - .'The name must be 1 to 24 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'new', - 'title' => '', - ], + 'schema' => ['description' => 'The new display name of the RAM user.'."\n" + ."\n" + .'The name must be 1 to 24 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'new', 'title' => ''], ], [ 'name' => 'NewMobilePhone', 'in' => 'query', - 'schema' => [ - 'description' => 'The new mobile phone number of the RAM user.'."\n" - ."\n" - .'Format: \\<Country code>-\\<Mobile phone number>.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => '86-1868888****', - 'title' => '', - ], + 'schema' => ['description' => 'The new mobile phone number of the RAM user.'."\n" + ."\n" + .'Format: \\<Country code>-\\<Mobile phone number>.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'required' => false, 'example' => '86-1868888****', 'title' => ''], ], [ 'name' => 'NewEmail', 'in' => 'query', - 'schema' => [ - 'description' => 'The new email address of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'alice@example.com', - 'title' => '', - ], + 'schema' => ['description' => 'The new email address of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'required' => false, 'example' => 'alice@example.com', 'title' => ''], ], [ 'name' => 'NewComments', 'in' => 'query', - 'schema' => [ - 'description' => 'The new description of the RAM user.'."\n" - ."\n" - .'The description must be 1 to 128 characters in length.'."\n", - 'type' => 'string', - 'required' => false, - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], + 'schema' => ['description' => 'The new description of the RAM user.'."\n" + ."\n" + .'The description must be 1 to 128 characters in length.', 'type' => 'string', 'required' => false, 'example' => 'This is a cloud computing engineer.', 'title' => ''], ], ], 'responses' => [ 200 => [ 'schema' => [ - 'description' => 'The response parameters.'."\n", + 'description' => 'The response parameters.', 'type' => 'object', 'properties' => [ 'User' => [ - 'description' => 'The information about the RAM user.'."\n", + 'description' => 'The information about the RAM user.', 'type' => 'object', 'properties' => [ - 'DisplayName' => [ - 'description' => 'The display name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'new', - 'title' => '', - ], - 'UserPrincipalName' => [ - 'description' => 'The logon name of the RAM user.'."\n", - 'type' => 'string', - 'example' => 'new@example.onaliyun.com', - 'title' => '', - ], - 'Email' => [ - 'description' => 'The email address of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => 'alice@example.com', - 'title' => '', - ], - 'UpdateDate' => [ - 'description' => 'The time when the information about the RAM user was updated.'."\n", - 'type' => 'string', - 'example' => '2020-10-13T09:19:49Z', - 'title' => '', - ], - 'MobilePhone' => [ - 'description' => 'The mobile phone number of the RAM user.'."\n" - ."\n" - .'> This parameter is valid only on the China site (aliyun.com).'."\n", - 'type' => 'string', - 'example' => '86-1868888****', - 'title' => '', - ], - 'UserId' => [ - 'description' => 'The ID of the RAM user.'."\n", - 'type' => 'string', - 'example' => '20732900249392****', - 'title' => '', - ], - 'Comments' => [ - 'description' => 'The description.'."\n", - 'type' => 'string', - 'example' => 'This is a cloud computing engineer.', - 'title' => '', - ], - 'LastLoginDate' => [ - 'description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'CreateDate' => [ - 'description' => 'The time when the RAM user was created.'."\n", - 'type' => 'string', - 'example' => '2020-10-12T09:12:00Z', - 'title' => '', - ], - 'ProvisionType' => [ - 'description' => 'The source of the RAM user. Valid values:'."\n" - ."\n" - .'* Manual: The RAM user is manually created in the RAM console.'."\n" - .'* SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" - .'* CloudSSO: The RAM user is mapped from a CloudSSO user.'."\n", - 'type' => 'string', - 'example' => 'Manual', - 'title' => '', - ], + 'DisplayName' => ['description' => 'The display name of the RAM user.', 'type' => 'string', 'example' => 'new', 'title' => ''], + 'UserPrincipalName' => ['description' => 'The logon name of the RAM user.', 'type' => 'string', 'example' => 'new@example.onaliyun.com', 'title' => ''], + 'Email' => ['description' => 'The email address of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => 'alice@example.com', 'title' => ''], + 'UpdateDate' => ['description' => 'The time when the information about the RAM user was updated.', 'type' => 'string', 'example' => '2020-10-13T09:19:49Z', 'title' => ''], + 'MobilePhone' => ['description' => 'The mobile phone number of the RAM user.'."\n" + ."\n" + .'> This parameter is valid only on the China site (aliyun.com).', 'type' => 'string', 'example' => '86-1868888****', 'title' => ''], + 'UserId' => ['description' => 'The ID of the RAM user.', 'type' => 'string', 'example' => '20732900249392****', 'title' => ''], + 'Comments' => ['description' => 'The description.', 'type' => 'string', 'example' => 'This is a cloud computing engineer.', 'title' => ''], + 'LastLoginDate' => ['description' => 'The last time when the RAM user logged on to the Alibaba Cloud Management Console.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'CreateDate' => ['description' => 'The time when the RAM user was created.', 'type' => 'string', 'example' => '2020-10-12T09:12:00Z', 'title' => ''], + 'ProvisionType' => ['description' => 'The source of the RAM user. Valid values:'."\n" + ."\n" + .'- Manual: The RAM user is manually created in the RAM console.'."\n" + ."\n" + .'- SCIM: The RAM user is mapped by using System for Cross-domain Identity Management (SCIM).'."\n" + ."\n" + .'- CloudSSO: The RAM user is mapped from a CloudSSO user.', 'type' => 'string', 'example' => 'Manual', 'title' => ''], ], 'title' => '', + 'example' => '', ], - 'RequestId' => [ - 'description' => 'The request ID.'."\n", - 'type' => 'string', - 'example' => '1B56DD42-6962-4F89-A19C-079EED1F0FE3', - 'title' => '', - ], + 'RequestId' => ['description' => 'The request ID.', 'type' => 'string', 'example' => '1B56DD42-6962-4F89-A19C-079EED1F0FE3', 'title' => ''], ], 'title' => '', + 'example' => '', ], ], ], - 'staticInfo' => [ - 'returnType' => 'synchronous', - ], - 'responseDemo' => '[{"type":"json","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"new\\",\\n \\"UserPrincipalName\\": \\"new@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-13T09:19:49Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"Manual\\"\\n },\\n \\"RequestId\\": \\"1B56DD42-6962-4F89-A19C-079EED1F0FE3\\"\\n}","errorExample":""},{"type":"xml","example":"<?xml version=\\"1.0\\" encoding=\\"UTF-8\\" ?>\\r\\n<UpdateUserResponse>\\r\\n\\t<User>\\r\\n\\t\\t<UpdateDate>2020-10-13T09:19:49Z</UpdateDate>\\r\\n\\t\\t<Email>alice@example.com</Email>\\r\\n\\t\\t<Comments>This is a cloud computing engineer.</Comments>\\r\\n\\t\\t<UserId>20732900249392****</UserId>\\r\\n\\t\\t<LastLoginDate>2020-10-12T09:12:00Z</LastLoginDate>\\r\\n\\t\\t<DisplayName>new</DisplayName>\\r\\n\\t\\t<UserPrincipalName>new@example.onaliyun.com</UserPrincipalName>\\r\\n\\t\\t<CreateDate>2020-10-12T09:12:00Z</CreateDate>\\r\\n\\t\\t<MobilePhone>86-1868888****</MobilePhone>\\r\\n\\t</User>\\r\\n\\t<RequestId>1B56DD42-6962-4F89-A19C-079EED1F0FE3</RequestId>\\r\\n</UpdateUserResponse>\\t\\r\\n","errorExample":""}]', + 'staticInfo' => ['returnType' => 'synchronous'], 'title' => 'UpdateUser', - 'summary' => 'Modifies the information about a RAM user.', - 'description' => 'This topic provides an example to show how to modify the name of a RAM user from `test@example.onaliyun.com` to `new@example.onaliyun.com`.'."\n", - 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).'."\n", 'responseParamsDescription' => ' ', 'extraInfo' => ' ', 'changeSet' => [], + 'flowControl' => [ + 'flowControlList' => [ + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateUser'], + ], + ], 'ramActions' => [ [ 'operationType' => 'update', @@ -15819,3220 +10652,1294 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], ], + 'responseDemo' => '[{"errorExample":"","example":"{\\n \\"User\\": {\\n \\"DisplayName\\": \\"new\\",\\n \\"UserPrincipalName\\": \\"new@example.onaliyun.com\\",\\n \\"Email\\": \\"alice@example.com\\",\\n \\"UpdateDate\\": \\"2020-10-13T09:19:49Z\\",\\n \\"MobilePhone\\": \\"86-1868888****\\",\\n \\"UserId\\": \\"20732900249392****\\",\\n \\"Comments\\": \\"This is a cloud computing engineer.\\",\\n \\"LastLoginDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"CreateDate\\": \\"2020-10-12T09:12:00Z\\",\\n \\"ProvisionType\\": \\"Manual\\"\\n },\\n \\"RequestId\\": \\"1B56DD42-6962-4F89-A19C-079EED1F0FE3\\"\\n}","type":"json"}]', + 'description' => 'This topic provides an example to show how to modify the name of a RAM user from `test@example.onaliyun.com` to `new@example.onaliyun.com`.', + 'requestParamsDescription' => 'For more information about common request parameters, see [API Reference](~~187377~~).', ], ], 'endpoints' => [ - [ - 'regionId' => 'cn-hangzhou', - 'regionName' => 'China (Hangzhou)', - 'areaId' => 'asiaPacific', - 'areaName' => 'Asia Pacific', - 'public' => 'ims.aliyuncs.com', - 'endpoint' => 'ims.aliyuncs.com', - 'vpc' => 'ims.vpc-proxy.aliyuncs.com', - ], + ['regionId' => 'cn-hangzhou', 'regionName' => 'China (Hangzhou)', 'areaId' => 'asiaPacific', 'areaName' => 'Asia Pacific', 'public' => 'ims.aliyuncs.com', 'endpoint' => 'ims.aliyuncs.com', 'vpc' => 'ims.vpc-proxy.aliyuncs.com'], ], 'errorCodes' => [ - [ - 'code' => 'AuthorizationFail.AkProxy', - 'message' => 'AkProxy is not allowed to invoke this Action.', - 'http_code' => 401, - 'description' => 'This method is not allowed to be called with this AkProxy.', - ], - [ - 'code' => 'CheckAuthenticationCodeFail', - 'message' => 'The authentication code is incorrect.', - 'http_code' => 403, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.Group.User', - 'message' => 'The group CAN NOT contain any member before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.User.AccessKey', - 'message' => 'The user SHOULD NOT have any Access Key before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.User.Group', - 'message' => 'The user SHOULD NOT be in any group before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.User.LoginProfile', - 'message' => 'The user SHOULD NOT have any Login Profile before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.User.MFADevice', - 'message' => 'The user SHOULD NOT have any MFA device before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.User.Policy', - 'message' => 'The user SHOULD NOT have any attached policy before deleting.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'DeleteConflict.VirtualMFADevice.User', - 'message' => 'The virtual mfa device CAN NOT be bound to any user while being deleted.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.Application', - 'message' => 'The application name does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.Domain', - 'message' => 'The domain does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.Group', - 'message' => 'The group does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.SAMLProvider', - 'message' => 'The SAMLProvider does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.User', - 'message' => 'The user does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.User.Group', - 'message' => 'The user has already joined the group.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.User.LoginProfile', - 'message' => 'The user login profile does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.User.MFADevice', - 'message' => 'The user has already bound a MFA device.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.VirtualMFADevice', - 'message' => 'The virtual MFA device does already EXIST.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityAlreadyExists.VirtualMFADevice.User', - 'message' => 'The virtual MFA device does already been bound to a user.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.Application', - 'message' => 'The application does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.ApplicationProvisionInfo', - 'message' => 'The application is not provisioned.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.AppSecret', - 'message' => 'The AppSecret does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.CredentialReport', - 'message' => 'The credential report has not been generated.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.Group', - 'message' => 'The group does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.PredefinedScope', - 'message' => 'The specified PredefinedScope does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.Report', - 'message' => 'The security report does not exist. This happens only to new accounts that created within 24 hours.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.SAMLProvider', - 'message' => 'The SAML provider does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.User', - 'message' => 'The user does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.User.AccessKey', - 'message' => 'The users Access Key does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.User.LoginProfile', - 'message' => 'The users login profile does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.User.MFADevice', - 'message' => 'The user has not bound any MFA device.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'EntityNotExist.VirtualMFADevice', - 'message' => 'The virtual MFA device does not EXIST.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'Expired.CredentialReport', - 'message' => 'The credential report has been expired.', - 'http_code' => 410, - 'description' => '', - ], - [ - 'code' => 'Ims:InvalidParameter.HttpsUrl', - 'message' => 'Invalid oidc issuer endpoint.', - 'http_code' => 400, - 'description' => 'Invalid IssuerUrl.', - ], - [ - 'code' => 'Inactive', - 'message' => 'Account is inactive to IMS Service.', - 'http_code' => 400, - 'description' => 'The account has not activated the IMS service.', - ], - [ - 'code' => 'InternalServerException', - 'message' => 'Internal service error.', - 'http_code' => 500, - 'description' => 'Internal server error.', - ], - [ - 'code' => 'InvalidParameter', - 'message' => 'invalid parameter.', - 'http_code' => 400, - 'description' => 'The parameter is invalid.', - ], - [ - 'code' => 'InvalidParameter.AccessKeyPolicy.Format', - 'message' => 'The format of the parameter - AccessKeyPolicy is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Account', - 'message' => 'This API can be only invoked by RAM user.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AppId.Format', - 'message' => 'The format of the parameter - AppId is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AppName.Format', - 'message' => 'The format of the parameter - AppName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AppName.Length', - 'message' => 'The parameter - AppName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AppType', - 'message' => 'The parameter - AppType is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AuthenticationCode.Format', - 'message' => 'The parameter - AuthenticationCode MUST be 6 digit number.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AuxiliaryDomain', - 'message' => 'The parameter - AuxiliaryDomain is reserved or banned.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AuxiliaryDomain.Format', - 'message' => 'The format of the parameter - AuxiliaryDomain is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.AuxiliaryDomain.Length', - 'message' => 'The parameter - AuxiliaryDomain beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.ClientIds', - 'message' => 'The parameter - ClientIds is invalid.', - 'http_code' => 400, - 'description' => 'The ClientIds parameter is invalid.', - ], - [ - 'code' => 'InvalidParameter.Comments.InvalidChars', - 'message' => 'The parameter - Comments contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Comments.Length', - 'message' => 'The parameter - Comments beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DefaultDomainName', - 'message' => 'The parameter - DefaultDomainName is invalid.', - 'http_code' => 400, - 'description' => 'The DefaultDomainName parameter is invalid.', - ], - [ - 'code' => 'InvalidParameter.DefaultDomainName.Format', - 'message' => 'The format of the parameter - DefaultDomainName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DefaultDomainName.InvalidChars', - 'message' => 'The parameter - DefaultDomainName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DefaultDomainName.Length', - 'message' => 'The parameter - DefaultDomainName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Description.Length', - 'message' => 'The parameter - Description beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DisplayName.Format', - 'message' => 'The format of the parameter - DisplayName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DisplayName.InvalidChars', - 'message' => 'The parameter - DisplayName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.DisplayName.Length', - 'message' => 'The parameter - DisplayName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Email.Format', - 'message' => 'The format of the parameter - Email is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.EncodedSAMLMetadataDocument.Format', - 'message' => 'The format of the parameter - EncodedSAMLMetadataDocument is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.EncodedSAMLMetadataDocument.Length', - 'message' => 'The parameter - EncodedSAMLMetadataDocument beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Group.Conflict', - 'message' => 'One of GroupName GroupPrincipalName must be null', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.GroupName.Format', - 'message' => 'The format of the parameter - GroupName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.GroupName.Length', - 'message' => 'The parameter - GroupName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.HttpsUrl', - 'message' => 'Url is not valid https url.', - 'http_code' => 400, - 'description' => 'IssuerUrl is an invalid HTTPS URL.', - ], - [ - 'code' => 'InvalidParameter.LoginNetworkMasks.Format', - 'message' => 'The format of the parameter - LoginNetworkMasks is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.LoginNetworkMasks.Length', - 'message' => 'The parameter - LoginNetworkMasks beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.LoginNetworkMasks.Size', - 'message' => 'The parameter - LoginNetworkMasks beyond the size limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.LoginSessionDuration', - 'message' => 'The parameter - LoginSessionDuration beyond the value limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Marker', - 'message' => 'The parameter - Marker is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MaxItems', - 'message' => 'MaxItems must greater than 0 and less than 100.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MaxLoginAttemps', - 'message' => 'The parameter - MaxLoginAttemps is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MaxPasswordAge', - 'message' => 'The parameter - MaxPasswordAge is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MetadataDocument.Format', - 'message' => 'The format of the parameter - MetadataDocument is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MetadataDocument.Length', - 'message' => 'The parameter - MetadataDocument beyond the length limit.', - 'http_code' => 400, - 'description' => 'The length of the argument MetadataDocument exceeds the limit.', - ], - [ - 'code' => 'InvalidParameter.MinimumPasswordDifferentCharacter.Range', - 'message' => 'The parameter - MinimumPasswordDifferentCharacter MUST be in the range of 0 and 8.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MinimumPasswordLength.Range', - 'message' => 'The parameter - MinimumPasswordLength MUST be in the range of 8 and 32.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.MobilePhone.Format', - 'message' => 'The format of the parameter - MobilePhone is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewComments.Length', - 'message' => 'The parameter - NewComments beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewDescription.Length', - 'message' => 'The parameter - NewDescription beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewDisplayName.Format', - 'message' => 'The format of the parameter - NewDisplayName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewDisplayName.InvalidChars', - 'message' => 'The parameter - NewDisplayName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewDisplayName.Length', - 'message' => 'The parameter - NewDisplayName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewEmail.Format', - 'message' => 'The format of the parameter - NewEmail is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewEncodedSAMLMetadataDocument.Format', - 'message' => 'The format of the parameter - NewEncodedSAMLMetadataDocument is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewEncodedSAMLMetadataDocument.Length', - 'message' => 'The parameter - NewEncodedSAMLMetadataDocument beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewGroupName.Format', - 'message' => 'The format of the parameter - NewGroupName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewGroupName.Length', - 'message' => 'The parameter - NewGroupName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewMobilePhone.Format', - 'message' => 'The format of the parameter - NewMobilePhone is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewPredefinedScopes', - 'message' => 'The parameter - NewPredefinedScopes should only choose one style./ The parameter - NewPredefinedScopes is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: URL must have authority (host name).', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: Unknown URL protocol.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: URI must not contain fragment.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: URI must not contain user info.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: URI must be non-opaque.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: URI must be absolute.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewRedirectUris', - 'message' => 'Invalid parameter NewRedirectUris: Malformed URI.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewSAMLMetadataDocument.Format', - 'message' => 'The format of the parameter - NewSAMLMetadataDocument is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewSAMLMetadataDocument.Length', - 'message' => 'The parameter - NewSAMLMetadataDocument beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewUserPrincipalName.Format', - 'message' => 'The format of the parameter - NewUserPrincipalName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NewUserPrincipalName.Length', - 'message' => 'The parameter - NewUserPrincipalName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.NextToken', - 'message' => 'The parameter - NextToken is invalid.', - 'http_code' => 400, - 'description' => 'The parameter NextToken is invalid.', - ], - [ - 'code' => 'InvalidParameter.OIDCDiscovery.Unreachable', - 'message' => 'Unreachable OIDC discovery.', - 'http_code' => 400, - 'description' => 'The issuer URL is unreachable.', - ], - [ - 'code' => 'InvalidParameter.OIDCProviderName', - 'message' => 'The parameter - OIDCProviderName is invalid.', - 'http_code' => 400, - 'description' => 'The parameter OIDCProviderName is invalid.', - ], - [ - 'code' => 'InvalidParameter.Password.ReUse', - 'message' => 'Password reuse prevention exceeded.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Password.TooWeak', - 'message' => 'The specified password is not compliant with the password policy.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.PasswordReusePrevention', - 'message' => 'The parameter - PasswordReusePrevention is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.PredefinedScopes', - 'message' => 'The parameter - PredefinedScopes is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: URL must have authority (host name).', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: Unknown URL protocol.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: URI must not contain fragment.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: URI must not contain user info.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: URI must be non-opaque.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: URI must be absolute.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.RedirectUris', - 'message' => 'Invalid parameter RedirectUris: Malformed URI.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.ResourceType', - 'message' => 'The parameter - ResourceType is invalid.', - 'http_code' => 400, - 'description' => 'The parameter ResourceType is invalid.', - ], - [ - 'code' => 'InvalidParameter.RiskPassword.Weak', - 'message' => 'The specified password was detected as a weak password, please set a stronger password.', - 'http_code' => 400, - 'description' => 'The specified password was detected as a weak password, please set a stronger password.', - ], - [ - 'code' => 'InvalidParameter.SAMLMetadataDocument.Format', - 'message' => 'The format of the parameter - SAMLMetadataDocument is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.SAMLMetadataDocument.Length', - 'message' => 'The parameter - SAMLMetadataDocument beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.SAMLProviderName.InvalidChars', - 'message' => 'The parameter - SAMLProviderName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.SAMLProviderName.Length', - 'message' => 'The parameter - SAMLProviderName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Scopes', - 'message' => 'The parameter - Scopes is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.SerialNumber.InvalidChars', - 'message' => 'The parameter - SerialNumber contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.Status', - 'message' => 'The parameter - Status is invalid.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.TagKey.Duplicate', - 'message' => 'The tag is Duplicated.', - 'http_code' => 400, - 'description' => 'Duplicate tag key', - ], - [ - 'code' => 'InvalidParameter.User.Conflict', - 'message' => 'Two of UserId, UserPrincipalName and UserAccessKeyId must be null.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.User.Conflict', - 'message' => 'One of UserId and UserPrincipalName must be null.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.UserAccessKeyId.Format', - 'message' => 'The format of the parameter - UserAccessKeyId is incorrect.', - 'http_code' => 400, - 'description' => 'The parameter UserAccessKeyId is in an illegal format.', - ], - [ - 'code' => 'InvalidParameter.UserPrincipalName.Format', - 'message' => 'The format of the parameter - UserPrincipalName is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.UserPrincipalName.InvalidChars', - 'message' => 'The parameter - UserPrincipalName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.UserPrincipalName.Length', - 'message' => 'The parameter - UserPrincipalName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.VirtualMFADeviceName.InvalidChars', - 'message' => 'The parameter - VirtualMFADeviceName contains invalid chars.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'InvalidParameter.VirtualMFADeviceName.Length', - 'message' => 'The parameter - VirtualMFADeviceName beyond the length limit.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.AppSecret', - 'message' => 'The count of AppSecret beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.ExternalApplication', - 'message' => 'The count of external application beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.Group', - 'message' => 'The count of groups beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.SAMLProvider', - 'message' => 'The count of SAMLProvider beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.SAMLProviderIdp', - 'message' => 'The count of SAMLProviderIdp beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.SAMLProviderIdpKey', - 'message' => 'The count of SAMLProviderIdpKey beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.SecurityVerification', - 'message' => 'The count of SecurityVerification beyond the current limits.', - 'http_code' => 409, - 'description' => 'The number of security verification methods (including mobile phone and email) exceeds the limit.', - ], - [ - 'code' => 'LimitExceeded.User', - 'message' => 'The count of users beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.User.AccessKey', - 'message' => 'The count of the user access keys beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.User.Group', - 'message' => 'The count of groups the target user joined beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.VerificationPerDay', - 'message' => 'The count of active verification per day beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.VerificationPerMinute', - 'message' => 'The count of active verification per minute beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.VerificationPerMoment', - 'message' => 'The count of active verification per moment beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'LimitExceeded.VirtualMFADevice', - 'message' => 'The count of virtual MFA devices beyond the current limits.', - 'http_code' => 409, - 'description' => '', - ], - [ - 'code' => 'MissingAccessKeyPolicy', - 'message' => 'The input parameter AccessKeyPolicy that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingAppId', - 'message' => 'The input parameter AppId that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingAppName', - 'message' => 'The input parameter AppName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingAppSecretId', - 'message' => 'The input parameter AppSecretId that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingAuthenticationCode1', - 'message' => 'The input parameter AuthenticationCode1 that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingAuthenticationCode2', - 'message' => 'The input parameter AuthenticationCode2 that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingDisplayName', - 'message' => 'The input parameter DisplayName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingEncodedSAMLMetadataDocument', - 'message' => 'The input parameter EncodedSAMLMetadataDocument that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingGroupName', - 'message' => 'The input parameter GroupName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingIssuerUrl', - 'message' => 'The input parameter IssuerUrl that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => 'Missing required parameter IssuerUrl.', - ], - [ - 'code' => 'MissingNewPassword', - 'message' => 'The input parameter NewPassword that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingPassword', - 'message' => 'The input parameter Password that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingSAMLProviderName', - 'message' => 'The input parameter SAMLProviderName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingSerialNumber', - 'message' => 'The input parameter SerialNumber that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingStatus', - 'message' => 'The input parameter Status that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingTagOrResourceId', - 'message' => 'The specified tags and resourcesIds are not allow to be both empty.', - 'http_code' => 400, - 'description' => 'Tag and ResourceId parameters cannot be both empty.', - ], - [ - 'code' => 'MissingUserAccessKeyId', - 'message' => 'The input parameter UserAccessKeyId that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingUserPrincipalName', - 'message' => 'The input parameter UserPrincipalName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'MissingVirtualMFADeviceName', - 'message' => 'The input parameter VirtualMFADeviceName that is mandatory for processing this request is not supplied.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'NotReady.CredentialReport', - 'message' => 'The credential report is being generated and not ready yet.', - 'http_code' => 404, - 'description' => '', - ], - [ - 'code' => 'NotSupport.AliyunReservedSAMLProvider', - 'message' => 'The SAMLProvider is reserved for Alibaba Cloud services.', - 'http_code' => 400, - 'description' => 'This SAML identity provider name is a reserved name for Alibaba Cloud.', - ], - [ - 'code' => 'OldPassword.Incorrect', - 'message' => 'The parameter OldPassword is incorrect.', - 'http_code' => 400, - 'description' => '', - ], - [ - 'code' => 'OperationConflict.Application.ProvisionApplicationType', - 'message' => 'The application type is not allowd to be provisioned in your account.', - 'http_code' => 409, - 'description' => '', - ], + ['code' => 'AuthorizationFail.AkProxy', 'message' => 'AkProxy is not allowed to invoke this Action.', 'http_code' => 401, 'description' => 'This method is not allowed to be called with this AkProxy.'], + ['code' => 'CheckAuthenticationCodeFail', 'message' => 'The authentication code is incorrect.', 'http_code' => 403, 'description' => ''], + ['code' => 'DeleteConflict.Group.User', 'message' => 'The group CAN NOT contain any member before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.User.AccessKey', 'message' => 'The user SHOULD NOT have any Access Key before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.User.Group', 'message' => 'The user SHOULD NOT be in any group before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.User.LoginProfile', 'message' => 'The user SHOULD NOT have any Login Profile before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.User.MFADevice', 'message' => 'The user SHOULD NOT have any MFA device before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.User.Policy', 'message' => 'The user SHOULD NOT have any attached policy before deleting.', 'http_code' => 409, 'description' => ''], + ['code' => 'DeleteConflict.VirtualMFADevice.User', 'message' => 'The virtual mfa device CAN NOT be bound to any user while being deleted.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.Application', 'message' => 'The application name does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.Domain', 'message' => 'The domain does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.Group', 'message' => 'The group does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.SAMLProvider', 'message' => 'The SAMLProvider does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.User', 'message' => 'The user does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.User.Group', 'message' => 'The user has already joined the group.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.User.LoginProfile', 'message' => 'The user login profile does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.User.MFADevice', 'message' => 'The user has already bound a MFA device.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.VirtualMFADevice', 'message' => 'The virtual MFA device does already EXIST.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityAlreadyExists.VirtualMFADevice.User', 'message' => 'The virtual MFA device does already been bound to a user.', 'http_code' => 409, 'description' => ''], + ['code' => 'EntityNotExist.Application', 'message' => 'The application does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.ApplicationProvisionInfo', 'message' => 'The application is not provisioned.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.AppSecret', 'message' => 'The AppSecret does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.CredentialReport', 'message' => 'The credential report has not been generated.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.Group', 'message' => 'The group does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.PredefinedScope', 'message' => 'The specified PredefinedScope does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.Report', 'message' => 'The security report does not exist. This happens only to new accounts that created within 24 hours.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.SAMLProvider', 'message' => 'The SAML provider does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.User', 'message' => 'The user does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.User.AccessKey', 'message' => 'The users Access Key does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.User.LoginProfile', 'message' => 'The users login profile does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.User.MFADevice', 'message' => 'The user has not bound any MFA device.', 'http_code' => 404, 'description' => ''], + ['code' => 'EntityNotExist.VirtualMFADevice', 'message' => 'The virtual MFA device does not EXIST.', 'http_code' => 404, 'description' => ''], + ['code' => 'Expired.CredentialReport', 'message' => 'The credential report has been expired.', 'http_code' => 410, 'description' => ''], + ['code' => 'Ims:InvalidParameter.HttpsUrl', 'message' => 'Invalid oidc issuer endpoint.', 'http_code' => 400, 'description' => 'Invalid IssuerUrl.'], + ['code' => 'Inactive', 'message' => 'Account is inactive to IMS Service.', 'http_code' => 400, 'description' => 'The account has not activated the IMS service.'], + ['code' => 'InternalServerException', 'message' => 'Internal service error.', 'http_code' => 500, 'description' => 'Internal server error.'], + ['code' => 'InvalidParameter', 'message' => 'invalid parameter.', 'http_code' => 400, 'description' => 'The parameter is invalid.'], + ['code' => 'InvalidParameter.AccessKeyPolicy.Format', 'message' => 'The format of the parameter - AccessKeyPolicy is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Account', 'message' => 'This API can be only invoked by RAM user.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AppId.Format', 'message' => 'The format of the parameter - AppId is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AppName.Format', 'message' => 'The format of the parameter - AppName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AppName.Length', 'message' => 'The parameter - AppName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AppType', 'message' => 'The parameter - AppType is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AuthenticationCode.Format', 'message' => 'The parameter - AuthenticationCode MUST be 6 digit number.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AuxiliaryDomain', 'message' => 'The parameter - AuxiliaryDomain is reserved or banned.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AuxiliaryDomain.Format', 'message' => 'The format of the parameter - AuxiliaryDomain is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.AuxiliaryDomain.Length', 'message' => 'The parameter - AuxiliaryDomain beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.ClientIds', 'message' => 'The parameter - ClientIds is invalid.', 'http_code' => 400, 'description' => 'The ClientIds parameter is invalid.'], + ['code' => 'InvalidParameter.Comments.InvalidChars', 'message' => 'The parameter - Comments contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Comments.Length', 'message' => 'The parameter - Comments beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DefaultDomainName', 'message' => 'The parameter - DefaultDomainName is invalid.', 'http_code' => 400, 'description' => 'The DefaultDomainName parameter is invalid.'], + ['code' => 'InvalidParameter.DefaultDomainName.Format', 'message' => 'The format of the parameter - DefaultDomainName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DefaultDomainName.InvalidChars', 'message' => 'The parameter - DefaultDomainName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DefaultDomainName.Length', 'message' => 'The parameter - DefaultDomainName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Description.Length', 'message' => 'The parameter - Description beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DisplayName.Format', 'message' => 'The format of the parameter - DisplayName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DisplayName.InvalidChars', 'message' => 'The parameter - DisplayName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.DisplayName.Length', 'message' => 'The parameter - DisplayName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Email.Format', 'message' => 'The format of the parameter - Email is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.EncodedSAMLMetadataDocument.Format', 'message' => 'The format of the parameter - EncodedSAMLMetadataDocument is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.EncodedSAMLMetadataDocument.Length', 'message' => 'The parameter - EncodedSAMLMetadataDocument beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Group.Conflict', 'message' => 'One of GroupName GroupPrincipalName must be null', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.GroupName.Format', 'message' => 'The format of the parameter - GroupName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.GroupName.Length', 'message' => 'The parameter - GroupName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.HttpsUrl', 'message' => 'Url is not valid https url.', 'http_code' => 400, 'description' => 'IssuerUrl is an invalid HTTPS URL.'], + ['code' => 'InvalidParameter.LoginNetworkMasks.Format', 'message' => 'The format of the parameter - LoginNetworkMasks is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.LoginNetworkMasks.Length', 'message' => 'The parameter - LoginNetworkMasks beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.LoginNetworkMasks.Size', 'message' => 'The parameter - LoginNetworkMasks beyond the size limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.LoginSessionDuration', 'message' => 'The parameter - LoginSessionDuration beyond the value limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Marker', 'message' => 'The parameter - Marker is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MaxItems', 'message' => 'MaxItems must greater than 0 and less than 100.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MaxLoginAttemps', 'message' => 'The parameter - MaxLoginAttemps is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MaxPasswordAge', 'message' => 'The parameter - MaxPasswordAge is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MetadataDocument.Format', 'message' => 'The format of the parameter - MetadataDocument is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MetadataDocument.Length', 'message' => 'The parameter - MetadataDocument beyond the length limit.', 'http_code' => 400, 'description' => 'The length of the argument MetadataDocument exceeds the limit.'], + ['code' => 'InvalidParameter.MinimumPasswordDifferentCharacter.Range', 'message' => 'The parameter - MinimumPasswordDifferentCharacter MUST be in the range of 0 and 8.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MinimumPasswordLength.Range', 'message' => 'The parameter - MinimumPasswordLength MUST be in the range of 8 and 32.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.MobilePhone.Format', 'message' => 'The format of the parameter - MobilePhone is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewComments.Length', 'message' => 'The parameter - NewComments beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewDescription.Length', 'message' => 'The parameter - NewDescription beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewDisplayName.Format', 'message' => 'The format of the parameter - NewDisplayName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewDisplayName.InvalidChars', 'message' => 'The parameter - NewDisplayName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewDisplayName.Length', 'message' => 'The parameter - NewDisplayName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewEmail.Format', 'message' => 'The format of the parameter - NewEmail is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewEncodedSAMLMetadataDocument.Format', 'message' => 'The format of the parameter - NewEncodedSAMLMetadataDocument is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewEncodedSAMLMetadataDocument.Length', 'message' => 'The parameter - NewEncodedSAMLMetadataDocument beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewGroupName.Format', 'message' => 'The format of the parameter - NewGroupName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewGroupName.Length', 'message' => 'The parameter - NewGroupName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewMobilePhone.Format', 'message' => 'The format of the parameter - NewMobilePhone is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewPredefinedScopes', 'message' => 'The parameter - NewPredefinedScopes should only choose one style./ The parameter - NewPredefinedScopes is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: URL must have authority (host name).', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: Unknown URL protocol.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: URI must not contain fragment.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: URI must not contain user info.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: URI must be non-opaque.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: URI must be absolute.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewRedirectUris', 'message' => 'Invalid parameter NewRedirectUris: Malformed URI.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewSAMLMetadataDocument.Format', 'message' => 'The format of the parameter - NewSAMLMetadataDocument is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewSAMLMetadataDocument.Length', 'message' => 'The parameter - NewSAMLMetadataDocument beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewUserPrincipalName.Format', 'message' => 'The format of the parameter - NewUserPrincipalName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NewUserPrincipalName.Length', 'message' => 'The parameter - NewUserPrincipalName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.NextToken', 'message' => 'The parameter - NextToken is invalid.', 'http_code' => 400, 'description' => 'The parameter NextToken is invalid.'], + ['code' => 'InvalidParameter.OIDCDiscovery.Unreachable', 'message' => 'Unreachable OIDC discovery.', 'http_code' => 400, 'description' => 'The issuer URL is unreachable.'], + ['code' => 'InvalidParameter.OIDCProviderName', 'message' => 'The parameter - OIDCProviderName is invalid.', 'http_code' => 400, 'description' => 'The parameter OIDCProviderName is invalid.'], + ['code' => 'InvalidParameter.Password.ReUse', 'message' => 'Password reuse prevention exceeded.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Password.TooWeak', 'message' => 'The specified password is not compliant with the password policy.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.PasswordReusePrevention', 'message' => 'The parameter - PasswordReusePrevention is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.PredefinedScopes', 'message' => 'The parameter - PredefinedScopes is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: URL must have authority (host name).', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: Unknown URL protocol.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: URI must not contain fragment.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: URI must not contain user info.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: URI must be non-opaque.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: URI must be absolute.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.RedirectUris', 'message' => 'Invalid parameter RedirectUris: Malformed URI.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.ResourceType', 'message' => 'The parameter - ResourceType is invalid.', 'http_code' => 400, 'description' => 'The parameter ResourceType is invalid.'], + ['code' => 'InvalidParameter.RiskPassword.Weak', 'message' => 'The specified password was detected as a weak password, please set a stronger password.', 'http_code' => 400, 'description' => 'The specified password was detected as a weak password, please set a stronger password.'], + ['code' => 'InvalidParameter.SAMLMetadataDocument.Format', 'message' => 'The format of the parameter - SAMLMetadataDocument is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.SAMLMetadataDocument.Length', 'message' => 'The parameter - SAMLMetadataDocument beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.SAMLProviderName.InvalidChars', 'message' => 'The parameter - SAMLProviderName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.SAMLProviderName.Length', 'message' => 'The parameter - SAMLProviderName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Scopes', 'message' => 'The parameter - Scopes is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.SerialNumber.InvalidChars', 'message' => 'The parameter - SerialNumber contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.Status', 'message' => 'The parameter - Status is invalid.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.TagKey.Duplicate', 'message' => 'The tag is Duplicated.', 'http_code' => 400, 'description' => 'Duplicate tag key'], + ['code' => 'InvalidParameter.User.Conflict', 'message' => 'Two of UserId, UserPrincipalName and UserAccessKeyId must be null.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.User.Conflict', 'message' => 'One of UserId and UserPrincipalName must be null.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.UserAccessKeyId.Format', 'message' => 'The format of the parameter - UserAccessKeyId is incorrect.', 'http_code' => 400, 'description' => 'The parameter UserAccessKeyId is in an illegal format.'], + ['code' => 'InvalidParameter.UserPrincipalName.Format', 'message' => 'The format of the parameter - UserPrincipalName is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.UserPrincipalName.InvalidChars', 'message' => 'The parameter - UserPrincipalName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.UserPrincipalName.Length', 'message' => 'The parameter - UserPrincipalName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.VirtualMFADeviceName.InvalidChars', 'message' => 'The parameter - VirtualMFADeviceName contains invalid chars.', 'http_code' => 400, 'description' => ''], + ['code' => 'InvalidParameter.VirtualMFADeviceName.Length', 'message' => 'The parameter - VirtualMFADeviceName beyond the length limit.', 'http_code' => 400, 'description' => ''], + ['code' => 'LimitExceeded.AppSecret', 'message' => 'The count of AppSecret beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.ExternalApplication', 'message' => 'The count of external application beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.Group', 'message' => 'The count of groups beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.SAMLProvider', 'message' => 'The count of SAMLProvider beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.SAMLProviderIdp', 'message' => 'The count of SAMLProviderIdp beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.SAMLProviderIdpKey', 'message' => 'The count of SAMLProviderIdpKey beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.SecurityVerification', 'message' => 'The count of SecurityVerification beyond the current limits.', 'http_code' => 409, 'description' => 'The number of security verification methods (including mobile phone and email) exceeds the limit.'], + ['code' => 'LimitExceeded.User', 'message' => 'The count of users beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.User.AccessKey', 'message' => 'The count of the user access keys beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.User.Group', 'message' => 'The count of groups the target user joined beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.VerificationPerDay', 'message' => 'The count of active verification per day beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.VerificationPerMinute', 'message' => 'The count of active verification per minute beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.VerificationPerMoment', 'message' => 'The count of active verification per moment beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'LimitExceeded.VirtualMFADevice', 'message' => 'The count of virtual MFA devices beyond the current limits.', 'http_code' => 409, 'description' => ''], + ['code' => 'MissingAccessKeyPolicy', 'message' => 'The input parameter AccessKeyPolicy that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingAppId', 'message' => 'The input parameter AppId that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingAppName', 'message' => 'The input parameter AppName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingAppSecretId', 'message' => 'The input parameter AppSecretId that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingAuthenticationCode1', 'message' => 'The input parameter AuthenticationCode1 that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingAuthenticationCode2', 'message' => 'The input parameter AuthenticationCode2 that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingDisplayName', 'message' => 'The input parameter DisplayName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingEncodedSAMLMetadataDocument', 'message' => 'The input parameter EncodedSAMLMetadataDocument that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingGroupName', 'message' => 'The input parameter GroupName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingIssuerUrl', 'message' => 'The input parameter IssuerUrl that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => 'Missing required parameter IssuerUrl.'], + ['code' => 'MissingNewPassword', 'message' => 'The input parameter NewPassword that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingPassword', 'message' => 'The input parameter Password that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingSAMLProviderName', 'message' => 'The input parameter SAMLProviderName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingSerialNumber', 'message' => 'The input parameter SerialNumber that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingStatus', 'message' => 'The input parameter Status that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingTagOrResourceId', 'message' => 'The specified tags and resourcesIds are not allow to be both empty.', 'http_code' => 400, 'description' => 'Tag and ResourceId parameters cannot be both empty.'], + ['code' => 'MissingUserAccessKeyId', 'message' => 'The input parameter UserAccessKeyId that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingUserPrincipalName', 'message' => 'The input parameter UserPrincipalName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'MissingVirtualMFADeviceName', 'message' => 'The input parameter VirtualMFADeviceName that is mandatory for processing this request is not supplied.', 'http_code' => 400, 'description' => ''], + ['code' => 'NotReady.CredentialReport', 'message' => 'The credential report is being generated and not ready yet.', 'http_code' => 404, 'description' => ''], + ['code' => 'NotSupport.AliyunReservedSAMLProvider', 'message' => 'The SAMLProvider is reserved for Alibaba Cloud services.', 'http_code' => 400, 'description' => 'This SAML identity provider name is a reserved name for Alibaba Cloud.'], + ['code' => 'OldPassword.Incorrect', 'message' => 'The parameter OldPassword is incorrect.', 'http_code' => 400, 'description' => ''], + ['code' => 'OperationConflict.Application.ProvisionApplicationType', 'message' => 'The application type is not allowd to be provisioned in your account.', 'http_code' => 409, 'description' => ''], ], 'changeSet' => [], 'flowControl' => [ 'flowControlList' => [ - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'RestoreUserFromRecycleBin', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUsers', - ], - [ - 'threshold' => '700', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetUserMFAInfo', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UnbindMFADevice', - ], - [ - 'threshold' => '20', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UntagResources', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'AddUserToGroup', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListPredefinedScopes', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteAppSecret', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeprovisionExternalApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUsersForGroup', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetVerificationInfo', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateOIDCProvider', - ], - [ - 'threshold' => '100', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GenerateGovernanceReport', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetGovernanceItemReport', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateAccessKey', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetUserInRecycleBin', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'AddFingerprintToOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetUserSsoSettings', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListRecentGovernanceMetrics', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteAccessKeyInRecycleBin', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ChangePassword', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteGroup', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetExternalApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetApplicationProvisionInfo', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListAppSecretIds', - ], - [ - 'threshold' => '-1', - 'countWindow' => 1, - 'regionId' => '*', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateSAMLProvider', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAppSecret', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetDefaultDomain', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateGroup', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateUser', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetVerificationInfo', - ], - [ - 'threshold' => '900', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListAccessKeys', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListExternalApplications', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteUserInRecycleBin', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetSecurityPreference', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUsersInRecycleBin', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteLoginProfile', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetGovernanceReportStatus', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListUserBasicInfos', - ], - [ - 'threshold' => '20', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'TagResources', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetUserSsoSettings', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateUser', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListVirtualMFADevices', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetSAMLProvider', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetDefaultDomain', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListTagResources', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'BindMFADevice', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetLoginProfile', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetSecurityPreference', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateLoginProfile', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ProvisionExternalApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetUser', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteVirtualMFADevice', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'RemoveUserFromGroup', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListApplicationProvisionInfos', - ], - [ - 'threshold' => '350', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccessKeyLastUsed', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DisableVirtualMFA', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetGroup', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'RestoreAccessKeyFromRecycleBin', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateAccessKey', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteApplication', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UnbindVerification', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateAppSecret', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListGroupsForUser', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListAccessKeysInRecycleBin', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccountMFAInfo', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateSAMLProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateVirtualMFADevice', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteUser', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListGroups', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccessKeyInfoInRecycleBin', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'RemoveClientIdFromOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ProvisionApplication', - ], - [ - 'threshold' => '100', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GenerateCredentialReport', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccountSummary', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteSAMLProvider', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetPasswordPolicy', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'RemoveFingerprintFromOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'SetPasswordPolicy', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetCredentialReport', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeleteAccessKey', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetAccountSecurityPracticeReport', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'AddClientIdToOIDCProvider', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'DeprovisionApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListApplications', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListSAMLProviders', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'GetApplication', - ], - [ - 'threshold' => '450', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'ListOIDCProviders', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'CreateLoginProfile', - ], - [ - 'threshold' => '150', - 'countWindow' => 1, - 'regionId' => '*', - 'api' => 'UpdateGroup', - ], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RestoreUserFromRecycleBin'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsers'], + ['threshold' => '700', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserMFAInfo'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UnbindMFADevice'], + ['threshold' => '20', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UntagResources'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddUserToGroup'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListPredefinedScopes'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAppSecret'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeprovisionExternalApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsersForGroup'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetVerificationInfo'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateOIDCProvider'], + ['threshold' => '100', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GenerateGovernanceReport'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGovernanceItemReport'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateAccessKey'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserInRecycleBin'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddFingerprintToOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetUserSsoSettings'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListRecentGovernanceMetrics'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAccessKeyInRecycleBin'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ChangePassword'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteGroup'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetExternalApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetApplicationProvisionInfo'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAppSecretIds'], + ['threshold' => '-1', 'countWindow' => 1, 'regionId' => '*'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateSAMLProvider'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAppSecret'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetDefaultDomain'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateGroup'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateUser'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetVerificationInfo'], + ['threshold' => '900', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAccessKeys'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListExternalApplications'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteUserInRecycleBin'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetSecurityPreference'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUsersInRecycleBin'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteLoginProfile'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGovernanceReportStatus'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListUserBasicInfos'], + ['threshold' => '20', 'countWindow' => 1, 'regionId' => '*', 'api' => 'TagResources'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUserSsoSettings'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateUser'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListVirtualMFADevices'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetSAMLProvider'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetDefaultDomain'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListTagResources'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'BindMFADevice'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetLoginProfile'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetSecurityPreference'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateLoginProfile'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ProvisionExternalApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetUser'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteVirtualMFADevice'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveUserFromGroup'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListApplicationProvisionInfos'], + ['threshold' => '350', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccessKeyLastUsed'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DisableVirtualMFA'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetGroup'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RestoreAccessKeyFromRecycleBin'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateAccessKey'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteApplication'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UnbindVerification'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateAppSecret'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListGroupsForUser'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListAccessKeysInRecycleBin'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountMFAInfo'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateSAMLProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateVirtualMFADevice'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteUser'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListGroups'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccessKeyInfoInRecycleBin'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveClientIdFromOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ProvisionApplication'], + ['threshold' => '100', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GenerateCredentialReport'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountSummary'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteSAMLProvider'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetPasswordPolicy'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'RemoveFingerprintFromOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'SetPasswordPolicy'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetCredentialReport'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeleteAccessKey'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetAccountSecurityPracticeReport'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'AddClientIdToOIDCProvider'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'DeprovisionApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListApplications'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListSAMLProviders'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'GetApplication'], + ['threshold' => '450', 'countWindow' => 1, 'regionId' => '*', 'api' => 'ListOIDCProviders'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'CreateLoginProfile'], + ['threshold' => '150', 'countWindow' => 1, 'regionId' => '*', 'api' => 'UpdateGroup'], ], ], 'ram' => [ 'productCode' => 'IMS', 'productName' => 'Resource Access Management', - 'ramCodes' => [ - 'ram', - 'ims', - ], + 'ramCodes' => ['ram', 'ims'], 'ramLevel' => 'RESOURCE', 'ramConditions' => [ [ 'name' => 'ram:OidcIssuerUrl', - 'schema' => [ - 'type' => 'String', - 'description' => 'The URL of the issuer, which is provided by the external IdP.', - ], + 'schema' => ['type' => 'String', 'description' => 'The URL of the issuer, which is provided by the external IdP.'], + ], + [ + 'name' => 'ram:ServiceCredentialServiceName', + 'schema' => ['type' => 'String', 'description' => 'Service name specified by the service credential'], ], [ 'name' => 'ram:MFAOperationForLogin', 'schema' => [ 'type' => 'String', 'description' => 'Whether MFA authentication is required for login.', - 'enums' => [ - 'mandatory', - 'independent', - 'adaptive', - ], + 'enums' => ['mandatory', 'independent', 'adaptive'], ], ], ], 'ramActions' => [ [ - 'apiName' => 'SetSecurityPreference', + 'apiName' => 'DeleteOIDCProvider', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:SetSecurityPreference', + 'action' => 'ram:DeleteOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:MFAOperationForLogin', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'UnbindMFADevice', + 'apiName' => 'ListExternalApplications', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:UnbindMFADevice', + 'action' => 'ram:ListExternalApplications', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], - ], - ], - ], - [ - 'apiName' => 'AddClientIdToOIDCProvider', - 'description' => '', - 'operationType' => 'create', - 'ramAction' => [ - 'action' => 'ram:AddClientIdToOIDCProvider', - 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'AddFingerprintToOIDCProvider', + 'apiName' => 'GetUserSsoSettings', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:AddFingerprintToOIDCProvider', + 'action' => 'ram:GetUserSsoSettings', 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], + 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'UpdateUserProvisionType', + 'apiName' => 'UpdateUser', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:UpdateUserProvisionType', + 'action' => 'ram:UpdateUser', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#AccountId}:user/{#UserName}', - ], - ], - ], - ], - [ - 'apiName' => 'ListRecentGovernanceMetrics', - 'description' => '', - 'operationType' => 'list', - 'ramAction' => [ - 'action' => 'ram:ListRecentGovernanceMetrics', - 'authLevel' => 'operate', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetSecurityPreference', + 'apiName' => 'GetCredentialReport', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetSecurityPreference', + 'action' => 'ram:GetCredentialReport', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GenerateCredentialReport', + 'apiName' => 'SetUserSsoSettings', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GenerateCredentialReport', + 'action' => 'ram:SetUserSsoSettings', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListAccessKeys', + 'apiName' => 'RestoreAccessKeyFromRecycleBin', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:ListAccessKeys', + 'action' => 'ram:RestoreAccessKeyFromRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteAccessKey', + 'apiName' => 'ProvisionExternalApplication', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeleteAccessKey', + 'action' => 'ram:ProvisionExternalApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'AddUserToGroup', + 'apiName' => 'AddClientIdToOIDCProvider', 'description' => '', 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:AddUserToGroup', + 'action' => 'ram:AddClientIdToOIDCProvider', 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], - ], - ], - [ - 'apiName' => 'DeleteUserInRecycleBin', - 'description' => '', - 'operationType' => 'delete', - 'ramAction' => [ - 'action' => 'ram:DeleteUserInRecycleBin', - 'authLevel' => 'resource', - 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'ListUsersForGroup', + 'apiName' => 'GetSAMLProvider', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListUsersForGroup', + 'action' => 'ram:GetSAMLProvider', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], [ - 'apiName' => 'GetVerificationInfo', + 'apiName' => 'GetGroup', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetVerificationInfo', - 'authLevel' => 'operate', + 'action' => 'ram:GetGroup', + 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], [ - 'apiName' => 'ProvisionExternalApplication', + 'apiName' => 'GetLoginProfile', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ProvisionExternalApplication', + 'action' => 'ram:GetLoginProfile', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'DeleteVirtualMFADevice', + 'apiName' => 'DeleteUser', 'description' => '', 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:DeleteVirtualMFADevice', + 'action' => 'ram:DeleteUser', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'CreateVirtualMFADevice', + 'apiName' => 'CreateSAMLProvider', 'description' => '', 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:CreateVirtualMFADevice', + 'action' => 'ram:CreateSAMLProvider', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'UpdateOIDCProvider', + 'apiName' => 'DeleteServiceCredential', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:UpdateOIDCProvider', + 'action' => 'ram:DeleteServiceCredential', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetApplicationAssignmentType', + 'apiName' => 'DeleteAccessKey', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:GetApplicationAssignmentType', + 'action' => 'ram:DeleteAccessKey', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'ProvisionApplication', + 'apiName' => 'ListGroups', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:ProvisionApplication', + 'action' => 'ram:ListGroups', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/*'], ], ], ], [ - 'apiName' => 'GetUserSsoSettings', + 'apiName' => 'DeletePasskey', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'none', 'ramAction' => [ - 'action' => 'ram:GetUserSsoSettings', - 'authLevel' => 'resource', + 'action' => 'ram:DeletePasskey', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'TagResources', + 'apiName' => 'DisableVirtualMFA', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:TagResources', + 'action' => 'ram:DisableVirtualMFA', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'DeprovisionApplication', + 'apiName' => 'GetPasswordPolicy', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:DeprovisionApplication', + 'action' => 'ram:GetPasswordPolicy', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListGroupsForUser', + 'apiName' => 'SetDefaultDomain', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:ListGroupsForUser', + 'action' => 'ram:SetDefaultDomain', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'SetApplicationAssignmentType', + 'apiName' => 'CreateGroup', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:SetApplicationAssignmentType', + 'action' => 'ram:CreateGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/*'], ], ], ], [ - 'apiName' => 'DeleteOIDCProvider', + 'apiName' => 'ListUserBasicInfos', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:DeleteOIDCProvider', + 'action' => 'ram:ListUserBasicInfos', 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], + 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], [ - 'apiName' => 'UpdateLoginProfile', + 'apiName' => 'UpdatePasskey', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'none', 'ramAction' => [ - 'action' => 'ram:UpdateLoginProfile', - 'authLevel' => 'resource', + 'action' => 'ram:UpdatePasskey', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'RemoveFingerprintFromOIDCProvider', + 'apiName' => 'GetOIDCProvider', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:RemoveFingerprintFromOIDCProvider', + 'action' => 'ram:GetOIDCProvider', 'authLevel' => 'resource', 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'DeleteAppSecret', + 'apiName' => 'ListAccessKeys', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:DeleteAppSecret', + 'action' => 'ram:ListAccessKeys', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetUser', + 'apiName' => 'ChangePassword', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetUser', + 'action' => 'ram:ChangePassword', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'UnbindVerification', + 'apiName' => 'GenerateGovernanceReport', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:UnbindVerification', + 'action' => 'ram:GenerateGovernanceReport', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'RestoreAccessKeyFromRecycleBin', + 'apiName' => 'GetServiceCredential', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:RestoreAccessKeyFromRecycleBin', + 'action' => 'ram:GetServiceCredential', 'authLevel' => 'resource', - 'actionConditions' => [], + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetAccessKeyLastUsed', + 'apiName' => 'ListSAMLProviders', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:GetAccessKeyLastUsed', + 'action' => 'ram:ListSAMLProviders', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'SetAccessKeyPolicy', + 'apiName' => 'ListAppSecretIds', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:SetAccessKeyPolicy', + 'action' => 'ram:ListAppSecretIds', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#AccountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'UpdateSAMLProvider', + 'apiName' => 'ListUsersForGroup', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:UpdateSAMLProvider', + 'action' => 'ram:ListUsersForGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], [ - 'apiName' => 'ListApplicationAssignments', + 'apiName' => 'DeleteAccessKeyInRecycleBin', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:ListApplicationAssignments', + 'action' => 'ram:DeleteAccessKeyInRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteApplicationAssignment', + 'apiName' => 'DeleteGroup', 'description' => '', 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:DeleteApplicationAssignment', + 'action' => 'ram:DeleteGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], [ - 'apiName' => 'SetAccessKeyPolicyForAccount', + 'apiName' => 'UpdateAccessKey', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:SetAccessKeyPolicyForAccount', + 'action' => 'ram:UpdateAccessKey', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'ListUserBasicInfos', + 'apiName' => 'ListTagResources', 'description' => '', 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:ListUserBasicInfos', + 'action' => 'ram:ListTagResources', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetGroup', + 'apiName' => 'UnbindMFADevice', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetGroup', + 'action' => 'ram:UnbindMFADevice', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'CreateAccessKey', + 'apiName' => 'DeleteSAMLProvider', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:CreateAccessKey', + 'action' => 'ram:DeleteSAMLProvider', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], [ - 'apiName' => 'UpdateApplication', + 'apiName' => 'DeleteUserInRecycleBin', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:UpdateApplication', + 'action' => 'ram:DeleteUserInRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'CreateUser', + 'apiName' => 'GetAccessKeyLastUsed', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:CreateUser', + 'action' => 'ram:GetAccessKeyLastUsed', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'UpdateGroup', + 'apiName' => 'SetPasswordPolicy', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:UpdateGroup', + 'action' => 'ram:SetPasswordPolicy', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'CreateApplication', + 'apiName' => 'ListOIDCProviders', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:CreateApplication', + 'action' => 'ram:ListOIDCProviders', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'CreateApplicationAssignment', + 'apiName' => 'DeleteAppSecret', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:CreateApplicationAssignment', + 'action' => 'ram:DeleteAppSecret', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'RemoveClientIdFromOIDCProvider', + 'apiName' => 'CreateVirtualMFADevice', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:RemoveClientIdFromOIDCProvider', + 'action' => 'ram:CreateVirtualMFADevice', 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], + 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/*'], ], ], ], [ - 'apiName' => 'GetAccessKeyPolicy', + 'apiName' => 'GetGovernanceItemReport', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetAccessKeyPolicy', - 'authLevel' => 'resource', + 'action' => 'ram:GetGovernanceItemReport', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetSamlSsoSettings', + 'apiName' => 'GetExternalApplication', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetSamlSsoSettings', + 'action' => 'ram:GetExternalApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'CreateOIDCProvider', - 'description' => '', - 'operationType' => 'create', - 'ramAction' => [ - 'action' => 'ram:CreateOIDCProvider', - 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetOIDCProvider', + 'apiName' => 'RestoreUserFromRecycleBin', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:GetOIDCProvider', + 'action' => 'ram:RestoreUserFromRecycleBin', 'authLevel' => 'resource', - 'actionConditions' => [ - [ - 'conditionKey' => 'ram:OidcIssuerUrl', - 'validationType' => 'always', - ], - ], + 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeprovisionExternalApplication', + 'apiName' => 'SetAccessKeyPolicy', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeprovisionExternalApplication', + 'action' => 'ram:SetAccessKeyPolicy', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#AccountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'CreateSAMLProvider', + 'apiName' => 'CreateServiceCredential', 'description' => '', 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:CreateSAMLProvider', + 'action' => 'ram:CreateServiceCredential', 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], ], - ], - ], - [ - 'apiName' => 'BindVerification', - 'description' => '', - 'operationType' => 'create', - 'ramAction' => [ - 'action' => 'ram:BindVerification', - 'authLevel' => 'operate', - 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'SetSamlSsoSettings', - 'description' => '', - 'operationType' => 'update', - 'ramAction' => [ - 'action' => 'ram:SetSamlSsoSettings', - 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'ListApplications', + 'apiName' => 'GetAccessKeyPolicy', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListApplications', + 'action' => 'ram:GetAccessKeyPolicy', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'SetPasswordPolicy', + 'apiName' => 'RemoveFingerprintFromOIDCProvider', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:SetPasswordPolicy', + 'action' => 'ram:RemoveFingerprintFromOIDCProvider', 'authLevel' => 'resource', - 'actionConditions' => [], + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'ListExternalApplications', + 'apiName' => 'GetVerificationInfo', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListExternalApplications', - 'authLevel' => 'resource', + 'action' => 'ram:GetVerificationInfo', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListAuthorizedDynamicClients', + 'apiName' => 'GetApplicationProvisionInfo', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListAuthorizedDynamicClients', + 'action' => 'ram:GetApplicationProvisionInfo', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetDefaultDomain', + 'apiName' => 'GetAppSecret', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetDefaultDomain', + 'action' => 'ram:GetAppSecret', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'SetVerificationInfo', + 'apiName' => 'UpdateApplication', 'description' => '', 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:SetVerificationInfo', - 'authLevel' => 'operate', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'GetGovernanceItemReport', - 'description' => '', - 'operationType' => 'get', - 'ramAction' => [ - 'action' => 'ram:GetGovernanceItemReport', - 'authLevel' => 'operate', + 'action' => 'ram:UpdateApplication', + 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'GetUserMFAInfo', + 'apiName' => 'DeleteVirtualMFADevice', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:GetUserMFAInfo', + 'action' => 'ram:DeleteVirtualMFADevice', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}'], ], ], ], [ - 'apiName' => 'UpdatePasskey', + 'apiName' => 'ListRecentGovernanceMetrics', 'description' => '', - 'operationType' => 'none', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:UpdatePasskey', + 'action' => 'ram:ListRecentGovernanceMetrics', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'RestoreUserFromRecycleBin', + 'apiName' => 'ListApplicationProvisionInfos', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:RestoreUserFromRecycleBin', + 'action' => 'ram:ListApplicationProvisionInfos', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetAccountSummary', + 'apiName' => 'BindMFADevice', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetAccountSummary', + 'action' => 'ram:BindMFADevice', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetUserInRecycleBin', + 'apiName' => 'CreateLoginProfile', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:GetUserInRecycleBin', + 'action' => 'ram:CreateLoginProfile', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetApplication', + 'apiName' => 'GetUserMFAInfo', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetApplication', + 'action' => 'ram:GetUserMFAInfo', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'SendVerificationLink', + 'apiName' => 'RemoveClientIdFromOIDCProvider', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:SendVerificationLink', - 'authLevel' => 'operate', - 'actionConditions' => [], + 'action' => 'ram:RemoveClientIdFromOIDCProvider', + 'authLevel' => 'resource', + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'GetSAMLProvider', + 'apiName' => 'DeprovisionExternalApplication', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetSAMLProvider', + 'action' => 'ram:DeprovisionExternalApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetExternalApplication', + 'apiName' => 'GetAccountSecurityPracticeReport', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetExternalApplication', + 'action' => 'ram:GetAccountSecurityPracticeReport', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'BindPasskey', + 'apiName' => 'ListPasskeys', 'description' => '', 'operationType' => 'none', 'ramAction' => [ - 'action' => 'ram:BindPasskey', + 'action' => 'ram:ListPasskeys', 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteUser', + 'apiName' => 'ProvisionApplication', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeleteUser', + 'action' => 'ram:ProvisionApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetCredentialReport', + 'apiName' => 'GetGovernanceReportStatus', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetCredentialReport', - 'authLevel' => 'resource', + 'action' => 'ram:GetGovernanceReportStatus', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteSAMLProvider', + 'apiName' => 'DeleteApplication', 'description' => '', 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:DeleteSAMLProvider', + 'action' => 'ram:DeleteApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'GetLoginProfile', + 'apiName' => 'UnbindVerification', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetLoginProfile', - 'authLevel' => 'resource', + 'action' => 'ram:UnbindVerification', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListOIDCProviders', + 'apiName' => 'SetSecurityPreference', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:ListOIDCProviders', + 'action' => 'ram:SetSecurityPreference', 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + 'actionConditions' => [ + ['conditionKey' => 'ram:MFAOperationForLogin'], ], - ], - ], - [ - 'apiName' => 'DeletePasskey', - 'description' => '', - 'operationType' => 'none', - 'ramAction' => [ - 'action' => 'ram:DeletePasskey', - 'authLevel' => 'operate', - 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteApplication', + 'apiName' => 'ListAccessKeysInRecycleBin', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:DeleteApplication', + 'action' => 'ram:ListAccessKeysInRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetApplicationProvisionInfo', + 'apiName' => 'RemoveUserFromGroup', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:GetApplicationProvisionInfo', + 'action' => 'ram:RemoveUserFromGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'ListPasskeys', - 'description' => '', - 'operationType' => 'none', - 'ramAction' => [ - 'action' => 'ram:ListPasskeys', - 'authLevel' => 'operate', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'SetDefaultDomain', + 'apiName' => 'GetAccountSummary', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:SetDefaultDomain', + 'action' => 'ram:GetAccountSummary', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetGovernanceReportStatus', + 'apiName' => 'GetDefaultDomain', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetGovernanceReportStatus', - 'authLevel' => 'operate', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'UpdateAccessKey', - 'description' => '', - 'operationType' => 'update', - 'ramAction' => [ - 'action' => 'ram:UpdateAccessKey', + 'action' => 'ram:GetDefaultDomain', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -19045,324 +11952,178 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListApplicationProvisionInfos', + 'apiName' => 'UpdateLoginProfile', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:ListApplicationProvisionInfos', + 'action' => 'ram:UpdateLoginProfile', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'SetUserSsoSettings', + 'apiName' => 'GetSecurityPreference', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:SetUserSsoSettings', + 'action' => 'ram:GetSecurityPreference', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListAuthorizedClients', + 'apiName' => 'TagResources', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:ListAuthorizedClients', + 'action' => 'ram:TagResources', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'CreateAppSecret', + 'apiName' => 'CreateAccessKey', 'description' => '', 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:CreateAppSecret', + 'action' => 'ram:CreateAccessKey', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'ListSAMLProviders', + 'apiName' => 'ListVirtualMFADevices', 'description' => '', 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:ListSAMLProviders', - 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'DeleteAccessKeyInRecycleBin', - 'description' => '', - 'operationType' => 'delete', - 'ramAction' => [ - 'action' => 'ram:DeleteAccessKeyInRecycleBin', + 'action' => 'ram:ListVirtualMFADevices', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/*'], ], ], ], [ - 'apiName' => 'ListTagResources', + 'apiName' => 'ListUsers', 'description' => '', 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:ListTagResources', - 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], - ], - ], - ], - [ - 'apiName' => 'RemoveUserFromGroup', - 'description' => '', - 'operationType' => 'delete', - 'ramAction' => [ - 'action' => 'ram:RemoveUserFromGroup', - 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], - ], - ], - ], - [ - 'apiName' => 'DeleteGroup', - 'description' => '', - 'operationType' => 'delete', - 'ramAction' => [ - 'action' => 'ram:DeleteGroup', + 'action' => 'ram:ListUsers', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], [ - 'apiName' => 'ListAccessKeysInRecycleBin', + 'apiName' => 'ListServiceCredentials', 'description' => '', 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:ListAccessKeysInRecycleBin', + 'action' => 'ram:ListServiceCredentials', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetAccessKeyInfoInRecycleBin', + 'apiName' => 'GetAccountMFAInfo', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetAccessKeyInfoInRecycleBin', + 'action' => 'ram:GetAccountMFAInfo', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetAccessKeyPolicyForAccount', + 'apiName' => 'ListApplications', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetAccessKeyPolicyForAccount', + 'action' => 'ram:ListApplications', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GenerateGovernanceReport', + 'apiName' => 'DeprovisionApplication', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GenerateGovernanceReport', - 'authLevel' => 'operate', + 'action' => 'ram:DeprovisionApplication', + 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'GetAccountSecurityPracticeReport', + 'apiName' => 'GetUserInRecycleBin', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetAccountSecurityPracticeReport', + 'action' => 'ram:GetUserInRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListUsers', + 'apiName' => 'CreateUser', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:ListUsers', + 'action' => 'ram:CreateUser', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/*'], ], ], ], [ - 'apiName' => 'ListGroups', + 'apiName' => 'CreateOIDCProvider', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:ListGroups', + 'action' => 'ram:CreateOIDCProvider', 'authLevel' => 'resource', - 'actionConditions' => [], - 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/*', - ], + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], ], - ], - ], - [ - 'apiName' => 'ListApplicationAssignmentsForPrincipal', - 'description' => '', - 'operationType' => 'list', - 'ramAction' => [ - 'action' => 'ram:ListApplicationAssignmentsForPrincipal', - 'authLevel' => 'resource', - 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], @@ -19375,357 +12136,226 @@ 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'ListVirtualMFADevices', + 'apiName' => 'GetUser', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListVirtualMFADevices', + 'action' => 'ram:GetUser', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'DisableVirtualMFA', + 'apiName' => 'CreateAppSecret', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:DisableVirtualMFA', + 'action' => 'ram:CreateAppSecret', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'DeleteAuthorizedDynamicClient', + 'apiName' => 'UpdateSAMLProvider', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeleteAuthorizedDynamicClient', + 'action' => 'ram:UpdateSAMLProvider', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], ], ], ], [ - 'apiName' => 'UpdateUser', + 'apiName' => 'ListGroupsForUser', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'list', 'ramAction' => [ - 'action' => 'ram:UpdateUser', + 'action' => 'ram:ListGroupsForUser', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetAccountMFAInfo', + 'apiName' => 'CreateApplication', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:GetAccountMFAInfo', + 'action' => 'ram:CreateApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'DeleteLoginProfile', + 'apiName' => 'UpdateOIDCProvider', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeleteLoginProfile', + 'action' => 'ram:UpdateOIDCProvider', 'authLevel' => 'resource', - 'actionConditions' => [], + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'UpdateDefaultDomain', + 'apiName' => 'AddUserToGroup', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:UpdateDefaultDomain', + 'action' => 'ram:AddUserToGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'CreateLoginProfile', + 'apiName' => 'AddFingerprintToOIDCProvider', 'description' => '', 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:CreateLoginProfile', + 'action' => 'ram:AddFingerprintToOIDCProvider', 'authLevel' => 'resource', - 'actionConditions' => [], + 'actionConditions' => [ + ['conditionKey' => 'ram:OidcIssuerUrl', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], ], ], ], [ - 'apiName' => 'ChangePassword', + 'apiName' => 'GenerateCredentialReport', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'create', 'ramAction' => [ - 'action' => 'ram:ChangePassword', + 'action' => 'ram:GenerateCredentialReport', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'BindMFADevice', + 'apiName' => 'DeleteLoginProfile', 'description' => '', - 'operationType' => 'update', + 'operationType' => 'delete', 'ramAction' => [ - 'action' => 'ram:BindMFADevice', + 'action' => 'ram:DeleteLoginProfile', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'GetPasswordPolicy', + 'apiName' => 'GetApplication', 'description' => '', 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:GetPasswordPolicy', + 'action' => 'ram:GetApplication', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'All Resource', - 'arn' => '*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], ], ], ], [ - 'apiName' => 'DeleteAuthorizedClient', + 'apiName' => 'SetVerificationInfo', 'description' => '', - 'operationType' => 'delete', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:DeleteAuthorizedClient', - 'authLevel' => 'resource', + 'action' => 'ram:SetVerificationInfo', + 'authLevel' => 'operate', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'CreateGroup', + 'apiName' => 'UpdateServiceCredential', 'description' => '', - 'operationType' => 'create', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:CreateGroup', + 'action' => 'ram:UpdateServiceCredential', 'authLevel' => 'resource', - 'actionConditions' => [], + 'actionConditions' => [ + ['conditionKey' => 'ram:ServiceCredentialServiceName', 'validationType' => 'always'], + ], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/*', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], ], ], ], [ - 'apiName' => 'ListAppSecretIds', + 'apiName' => 'GetAccessKeyInfoInRecycleBin', 'description' => '', - 'operationType' => 'list', + 'operationType' => 'get', 'ramAction' => [ - 'action' => 'ram:ListAppSecretIds', + 'action' => 'ram:GetAccessKeyInfoInRecycleBin', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'All Resource', 'arn' => '*'], ], ], ], [ - 'apiName' => 'GetAppSecret', + 'apiName' => 'UpdateGroup', 'description' => '', - 'operationType' => 'get', + 'operationType' => 'update', 'ramAction' => [ - 'action' => 'ram:GetAppSecret', + 'action' => 'ram:UpdateGroup', 'authLevel' => 'resource', 'actionConditions' => [], 'resources' => [ - [ - 'validationType' => 'always', - 'product' => 'IMS', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], + ['validationType' => 'always', 'product' => 'IMS', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], ], ], ], ], 'resourceTypes' => [ - [ - 'validationType' => 'always', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#accountId}:user/{#UserName}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}', - ], - [ - 'validationType' => 'conditional', - 'resourceType' => 'User', - 'arn' => 'acs:ram::{#AccountId}:user/*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'MFADevice', - 'arn' => 'acs:ram::{#accountId}:mfa/*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'Application', - 'arn' => 'acs:ram::{#accountId}:application/{#AppName}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'Role', - 'arn' => 'acs:ram::{#accountId}:role/{#RoleName}', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'AccountInfo', - 'arn' => 'acs:ram::{#accountId}:*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'OIDCProvider', - 'arn' => 'acs:ram::{#accountId}:oidc-provider/*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'SAMLProvider', - 'arn' => 'acs:ram::{#accountId}:saml-provider/*', - ], - [ - 'validationType' => 'always', - 'resourceType' => 'Group', - 'arn' => 'acs:ram::{#accountId}:group/*', - ], + ['validationType' => 'always', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/{#OIDCProviderName}'], + ['validationType' => 'always', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/*'], + ['validationType' => 'always', 'resourceType' => 'User', 'arn' => 'acs:ram::{#accountId}:user/{#UserName}'], + ['validationType' => 'conditional', 'resourceType' => 'User', 'arn' => 'acs:ram::{#AccountId}:user/*'], + ['validationType' => 'always', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/{#SAMLProviderName}'], + ['validationType' => 'always', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/{#GroupName}'], + ['validationType' => 'always', 'resourceType' => 'SAMLProvider', 'arn' => 'acs:ram::{#accountId}:saml-provider/*'], + ['validationType' => 'always', 'resourceType' => 'Group', 'arn' => 'acs:ram::{#accountId}:group/*'], + ['validationType' => 'always', 'resourceType' => 'Application', 'arn' => 'acs:ram::{#accountId}:application/{#AppName}'], + ['validationType' => 'always', 'resourceType' => 'OIDCProvider', 'arn' => 'acs:ram::{#accountId}:oidc-provider/*'], + ['validationType' => 'always', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/*'], + ['validationType' => 'always', 'resourceType' => 'MFADevice', 'arn' => 'acs:ram::{#accountId}:mfa/{#SerialNumber}'], ], ], ]; |