...
- removeIAMPolicyFromIAMGroup
- String id - UUID of the IAM group. Required
- List<String> policies- comma separated list of policy ids that are going to be revoked from the IAM group
- attachIAMPolicyToAccount
- String id - UUID of the IAM policy. Required
- List<String> accounts - comma separated list of account id that the policy will attach to
- removeIAMPolicyFromAccount
- String id - UUID of the IAM group. Required
- List<String> accounts- comma separated list of account ids
- addIAMPermissionToIAMPolicy
- String id - UUID of the IAM policy. Required
createIAMPermission- String action - name of the API allowed/denied. Required
- String permission - "Allow"/ "Deny"entityType
- String scope- ("Account" / "Domain" / "Resource")
- String scope id - UUID of the ScopeString resourceType
- removeIAMPermissionFromIAMPolicy
addIAMPermissionToIAMPolicy- String id - UUID of the IAM policy. Required
- List<String> permissionIds - comma separated list of permission ids that are going to be added to the IAM policy
removeIAMPermissionFromIAMPolicy- String action - name of the API allowed/denied. Required
- String entityType
- String scope- ("Account" / "Domain" / "Resource")
- String scope
- String id - UUID of the IAM policy. RequiredList<String> permission Ids - comma separated list of permission ids that are going to be removed from the IAM policyScope
In Phase1, these new IAM APIs are only limited to root admin.
...