Current section
Files
Jump to
Current section
Files
src/aws_rolesanywhere.erl
%% WARNING: DO NOT EDIT, AUTO-GENERATED CODE!
%% See https://github.com/aws-beam/aws-codegen for more details.
%% @doc AWS Identity and Access Management Roles Anywhere provides a secure
%% way for your workloads such as servers, containers, and applications
%% running outside of AWS to obtain Temporary AWS credentials.
%%
%% Your workloads can use the same IAM policies and roles that you have
%% configured with native AWS applications to access AWS resources. Using IAM
%% Roles Anywhere will eliminate the need to manage long term credentials for
%% workloads running outside of AWS.
%%
%% To use IAM Roles Anywhere customer workloads will need to use X.509
%% certificates issued by their Certificate Authority (CA) . The Certificate
%% Authority (CA) needs to be registered with IAM Roles Anywhere as a trust
%% anchor to establish trust between customer PKI and IAM Roles Anywhere.
%% Customers who do not manage their own PKI system can use AWS Certificate
%% Manager Private Certificate Authority (ACM PCA) to create a Certificate
%% Authority and use that to establish trust with IAM Roles Anywhere
%%
%% This guide describes the IAM rolesanywhere operations that you can call
%% programmatically. For general information about IAM Roles Anywhere see
%% [https://docs.aws.amazon.com/]
-module(aws_rolesanywhere).
-export([create_profile/2,
create_profile/3,
create_trust_anchor/2,
create_trust_anchor/3,
delete_crl/3,
delete_crl/4,
delete_profile/3,
delete_profile/4,
delete_trust_anchor/3,
delete_trust_anchor/4,
disable_crl/3,
disable_crl/4,
disable_profile/3,
disable_profile/4,
disable_trust_anchor/3,
disable_trust_anchor/4,
enable_crl/3,
enable_crl/4,
enable_profile/3,
enable_profile/4,
enable_trust_anchor/3,
enable_trust_anchor/4,
get_crl/2,
get_crl/4,
get_crl/5,
get_profile/2,
get_profile/4,
get_profile/5,
get_subject/2,
get_subject/4,
get_subject/5,
get_trust_anchor/2,
get_trust_anchor/4,
get_trust_anchor/5,
import_crl/2,
import_crl/3,
list_crls/1,
list_crls/3,
list_crls/4,
list_profiles/1,
list_profiles/3,
list_profiles/4,
list_subjects/1,
list_subjects/3,
list_subjects/4,
list_tags_for_resource/2,
list_tags_for_resource/4,
list_tags_for_resource/5,
list_trust_anchors/1,
list_trust_anchors/3,
list_trust_anchors/4,
tag_resource/2,
tag_resource/3,
untag_resource/2,
untag_resource/3,
update_crl/3,
update_crl/4,
update_profile/3,
update_profile/4,
update_trust_anchor/3,
update_trust_anchor/4]).
-include_lib("hackney/include/hackney_lib.hrl").
%%====================================================================
%% API
%%====================================================================
%% @doc Creates a profile.
%%
%% A profile is configuration resource to list the roles that RolesAnywhere
%% service is trusted to assume. In addition, by applying a profile you can
%% intersect permissions with IAM managed policies.
%%
%% Required permissions: `rolesanywhere:CreateProfile'.
create_profile(Client, Input) ->
create_profile(Client, Input, []).
create_profile(Client, Input0, Options0) ->
Method = post,
Path = ["/profiles"],
SuccessStatusCode = 201,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Creates a trust anchor.
%%
%% You establish trust between IAM Roles Anywhere and your certificate
%% authority (CA) by configuring a trust anchor. A Trust Anchor is defined
%% either as a reference to a AWS Certificate Manager Private Certificate
%% Authority (ACM PCA), or by uploading a Certificate Authority (CA)
%% certificate. Your AWS workloads can authenticate with the trust anchor
%% using certificates issued by the trusted Certificate Authority (CA) in
%% exchange for temporary AWS credentials.
%%
%% Required permissions: `rolesanywhere:CreateTrustAnchor'.
create_trust_anchor(Client, Input) ->
create_trust_anchor(Client, Input, []).
create_trust_anchor(Client, Input0, Options0) ->
Method = post,
Path = ["/trustanchors"],
SuccessStatusCode = 201,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Deletes a certificate revocation list (CRL).
%%
%% Required permissions: `rolesanywhere:DeleteCrl'.
delete_crl(Client, CrlId, Input) ->
delete_crl(Client, CrlId, Input, []).
delete_crl(Client, CrlId, Input0, Options0) ->
Method = delete,
Path = ["/crl/", aws_util:encode_uri(CrlId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Deletes a profile.
%%
%% Required permissions: `rolesanywhere:DeleteProfile'.
delete_profile(Client, ProfileId, Input) ->
delete_profile(Client, ProfileId, Input, []).
delete_profile(Client, ProfileId, Input0, Options0) ->
Method = delete,
Path = ["/profile/", aws_util:encode_uri(ProfileId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Deletes a trust anchor.
%%
%% Required permissions: `rolesanywhere:DeleteTrustAnchor'.
delete_trust_anchor(Client, TrustAnchorId, Input) ->
delete_trust_anchor(Client, TrustAnchorId, Input, []).
delete_trust_anchor(Client, TrustAnchorId, Input0, Options0) ->
Method = delete,
Path = ["/trustanchor/", aws_util:encode_uri(TrustAnchorId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Disables a certificate revocation list (CRL).
%%
%% Required permissions: `rolesanywhere:DisableCrl'.
disable_crl(Client, CrlId, Input) ->
disable_crl(Client, CrlId, Input, []).
disable_crl(Client, CrlId, Input0, Options0) ->
Method = post,
Path = ["/crl/", aws_util:encode_uri(CrlId), "/disable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Disables a profile.
%%
%% When disabled, CreateSession requests with this profile fail.
%%
%% Required permissions: `rolesanywhere:DisableProfile'.
disable_profile(Client, ProfileId, Input) ->
disable_profile(Client, ProfileId, Input, []).
disable_profile(Client, ProfileId, Input0, Options0) ->
Method = post,
Path = ["/profile/", aws_util:encode_uri(ProfileId), "/disable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Disables a trust anchor.
%%
%% When disabled, CreateSession requests specifying this trust anchor are
%% unauthorized.
%%
%% Required permissions: `rolesanywhere:DisableTrustAnchor'.
disable_trust_anchor(Client, TrustAnchorId, Input) ->
disable_trust_anchor(Client, TrustAnchorId, Input, []).
disable_trust_anchor(Client, TrustAnchorId, Input0, Options0) ->
Method = post,
Path = ["/trustanchor/", aws_util:encode_uri(TrustAnchorId), "/disable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Enables a certificate revocation list (CRL).
%%
%% When enabled, certificates stored in the CRL are unauthorized to receive
%% session credentials.
%%
%% Required permissions: `rolesanywhere:EnableCrl'.
enable_crl(Client, CrlId, Input) ->
enable_crl(Client, CrlId, Input, []).
enable_crl(Client, CrlId, Input0, Options0) ->
Method = post,
Path = ["/crl/", aws_util:encode_uri(CrlId), "/enable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Enables the roles in a profile to receive session credentials in
%% CreateSession.
%%
%% Required permissions: `rolesanywhere:EnableProfile'.
enable_profile(Client, ProfileId, Input) ->
enable_profile(Client, ProfileId, Input, []).
enable_profile(Client, ProfileId, Input0, Options0) ->
Method = post,
Path = ["/profile/", aws_util:encode_uri(ProfileId), "/enable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Enables a trust anchor.
%%
%% When enabled, certificates in the trust anchor chain are authorized for
%% trust validation.
%%
%% Required permissions: `rolesanywhere:EnableTrustAnchor'.
enable_trust_anchor(Client, TrustAnchorId, Input) ->
enable_trust_anchor(Client, TrustAnchorId, Input, []).
enable_trust_anchor(Client, TrustAnchorId, Input0, Options0) ->
Method = post,
Path = ["/trustanchor/", aws_util:encode_uri(TrustAnchorId), "/enable"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Gets a certificate revocation list (CRL).
%%
%% Required permissions: `rolesanywhere:GetCrl'.
get_crl(Client, CrlId)
when is_map(Client) ->
get_crl(Client, CrlId, #{}, #{}).
get_crl(Client, CrlId, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
get_crl(Client, CrlId, QueryMap, HeadersMap, []).
get_crl(Client, CrlId, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/crl/", aws_util:encode_uri(CrlId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query_ = [],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Gets a profile.
%%
%% Required permissions: `rolesanywhere:GetProfile'.
get_profile(Client, ProfileId)
when is_map(Client) ->
get_profile(Client, ProfileId, #{}, #{}).
get_profile(Client, ProfileId, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
get_profile(Client, ProfileId, QueryMap, HeadersMap, []).
get_profile(Client, ProfileId, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/profile/", aws_util:encode_uri(ProfileId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query_ = [],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Gets a Subject.
%%
%% A Subject associates a certificate identity with authentication attempts
%% by CreateSession. The Subject resources stores audit information such as
%% status of the last authentication attempt, the certificate data used in
%% the attempt, and the last time the associated identity attempted
%% authentication.
%%
%% Required permissions: `rolesanywhere:GetSubject'.
get_subject(Client, SubjectId)
when is_map(Client) ->
get_subject(Client, SubjectId, #{}, #{}).
get_subject(Client, SubjectId, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
get_subject(Client, SubjectId, QueryMap, HeadersMap, []).
get_subject(Client, SubjectId, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/subject/", aws_util:encode_uri(SubjectId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query_ = [],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Gets a trust anchor.
%%
%% Required permissions: `rolesanywhere:GetTrustAnchor'.
get_trust_anchor(Client, TrustAnchorId)
when is_map(Client) ->
get_trust_anchor(Client, TrustAnchorId, #{}, #{}).
get_trust_anchor(Client, TrustAnchorId, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
get_trust_anchor(Client, TrustAnchorId, QueryMap, HeadersMap, []).
get_trust_anchor(Client, TrustAnchorId, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/trustanchor/", aws_util:encode_uri(TrustAnchorId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query_ = [],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Imports the certificate revocation list (CRL).
%%
%% CRl is a list of certificates that have been revoked by the issuing
%% certificate Authority (CA). IAM Roles Anywhere validates against the crl
%% list before issuing credentials.
%%
%% Required permissions: `rolesanywhere:ImportCrl'.
import_crl(Client, Input) ->
import_crl(Client, Input, []).
import_crl(Client, Input0, Options0) ->
Method = post,
Path = ["/crls"],
SuccessStatusCode = 201,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Lists all Crls in the authenticated account and Amazon Web Services
%% Region.
%%
%% Required permissions: `rolesanywhere:ListCrls'.
list_crls(Client)
when is_map(Client) ->
list_crls(Client, #{}, #{}).
list_crls(Client, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
list_crls(Client, QueryMap, HeadersMap, []).
list_crls(Client, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/crls"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query0_ =
[
{<<"nextToken">>, maps:get(<<"nextToken">>, QueryMap, undefined)},
{<<"pageSize">>, maps:get(<<"pageSize">>, QueryMap, undefined)}
],
Query_ = [H || {_, V} = H <- Query0_, V =/= undefined],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Lists all profiles in the authenticated account and Amazon Web
%% Services Region.
%%
%% Required permissions: `rolesanywhere:ListProfiles'.
list_profiles(Client)
when is_map(Client) ->
list_profiles(Client, #{}, #{}).
list_profiles(Client, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
list_profiles(Client, QueryMap, HeadersMap, []).
list_profiles(Client, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/profiles"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query0_ =
[
{<<"nextToken">>, maps:get(<<"nextToken">>, QueryMap, undefined)},
{<<"pageSize">>, maps:get(<<"pageSize">>, QueryMap, undefined)}
],
Query_ = [H || {_, V} = H <- Query0_, V =/= undefined],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Lists the subjects in the authenticated account and Amazon Web
%% Services Region.
%%
%% Required permissions: `rolesanywhere:ListSubjects'.
list_subjects(Client)
when is_map(Client) ->
list_subjects(Client, #{}, #{}).
list_subjects(Client, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
list_subjects(Client, QueryMap, HeadersMap, []).
list_subjects(Client, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/subjects"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query0_ =
[
{<<"nextToken">>, maps:get(<<"nextToken">>, QueryMap, undefined)},
{<<"pageSize">>, maps:get(<<"pageSize">>, QueryMap, undefined)}
],
Query_ = [H || {_, V} = H <- Query0_, V =/= undefined],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Lists the tags attached to the resource.
%%
%% Required permissions: `rolesanywhere:ListTagsForResource'.
list_tags_for_resource(Client, ResourceArn)
when is_map(Client) ->
list_tags_for_resource(Client, ResourceArn, #{}, #{}).
list_tags_for_resource(Client, ResourceArn, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
list_tags_for_resource(Client, ResourceArn, QueryMap, HeadersMap, []).
list_tags_for_resource(Client, ResourceArn, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/ListTagsForResource"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query0_ =
[
{<<"resourceArn">>, ResourceArn}
],
Query_ = [H || {_, V} = H <- Query0_, V =/= undefined],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Lists the trust anchors in the authenticated account and Amazon Web
%% Services Region.
%%
%% Required permissions: `rolesanywhere:ListTrustAnchors'.
list_trust_anchors(Client)
when is_map(Client) ->
list_trust_anchors(Client, #{}, #{}).
list_trust_anchors(Client, QueryMap, HeadersMap)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap) ->
list_trust_anchors(Client, QueryMap, HeadersMap, []).
list_trust_anchors(Client, QueryMap, HeadersMap, Options0)
when is_map(Client), is_map(QueryMap), is_map(HeadersMap), is_list(Options0) ->
Path = ["/trustanchors"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false}
| Options0],
Headers = [],
Query0_ =
[
{<<"nextToken">>, maps:get(<<"nextToken">>, QueryMap, undefined)},
{<<"pageSize">>, maps:get(<<"pageSize">>, QueryMap, undefined)}
],
Query_ = [H || {_, V} = H <- Query0_, V =/= undefined],
request(Client, get, Path, Query_, Headers, undefined, Options, SuccessStatusCode).
%% @doc Attaches tags to a resource.
%%
%% Required permissions: `rolesanywhere:TagResource'.
tag_resource(Client, Input) ->
tag_resource(Client, Input, []).
tag_resource(Client, Input0, Options0) ->
Method = post,
Path = ["/TagResource"],
SuccessStatusCode = 201,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Removes tags from the resource.
%%
%% Required permissions: `rolesanywhere:UntagResource'.
untag_resource(Client, Input) ->
untag_resource(Client, Input, []).
untag_resource(Client, Input0, Options0) ->
Method = post,
Path = ["/UntagResource"],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Updates the certificate revocation list (CRL).
%%
%% CRl is a list of certificates that have been revoked by the issuing
%% certificate Authority (CA). IAM Roles Anywhere validates against the crl
%% list before issuing credentials.
%%
%% Required permissions: `rolesanywhere:UpdateCrl'.
update_crl(Client, CrlId, Input) ->
update_crl(Client, CrlId, Input, []).
update_crl(Client, CrlId, Input0, Options0) ->
Method = patch,
Path = ["/crl/", aws_util:encode_uri(CrlId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Updates the profile.
%%
%% A profile is configuration resource to list the roles that RolesAnywhere
%% service is trusted to assume. In addition, by applying a profile you can
%% scope-down permissions with IAM managed policies.
%%
%% Required permissions: `rolesanywhere:UpdateProfile'.
update_profile(Client, ProfileId, Input) ->
update_profile(Client, ProfileId, Input, []).
update_profile(Client, ProfileId, Input0, Options0) ->
Method = patch,
Path = ["/profile/", aws_util:encode_uri(ProfileId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%% @doc Updates the trust anchor.You establish trust between IAM Roles
%% Anywhere and your certificate authority (CA) by configuring a trust
%% anchor.
%%
%% A Trust Anchor is defined either as a reference to a AWS Certificate
%% Manager Private Certificate Authority (ACM PCA), or by uploading a
%% Certificate Authority (CA) certificate. Your AWS workloads can
%% authenticate with the trust anchor using certificates issued by the
%% trusted Certificate Authority (CA) in exchange for temporary AWS
%% credentials.
%%
%% Required permissions: `rolesanywhere:UpdateTrustAnchor'.
update_trust_anchor(Client, TrustAnchorId, Input) ->
update_trust_anchor(Client, TrustAnchorId, Input, []).
update_trust_anchor(Client, TrustAnchorId, Input0, Options0) ->
Method = patch,
Path = ["/trustanchor/", aws_util:encode_uri(TrustAnchorId), ""],
SuccessStatusCode = 200,
Options = [{send_body_as_binary, false},
{receive_body_as_binary, false},
{append_sha256_content_hash, false}
| Options0],
Headers = [],
Input1 = Input0,
CustomHeaders = [],
Input2 = Input1,
Query_ = [],
Input = Input2,
request(Client, Method, Path, Query_, CustomHeaders ++ Headers, Input, Options, SuccessStatusCode).
%%====================================================================
%% Internal functions
%%====================================================================
-spec request(aws_client:aws_client(), atom(), iolist(), list(),
list(), map() | undefined, list(), pos_integer() | undefined) ->
{ok, {integer(), list()}} |
{ok, Result, {integer(), list(), hackney:client()}} |
{error, Error, {integer(), list(), hackney:client()}} |
{error, term()} when
Result :: map(),
Error :: map().
request(Client, Method, Path, Query, Headers0, Input, Options, SuccessStatusCode) ->
RequestFun = fun() -> do_request(Client, Method, Path, Query, Headers0, Input, Options, SuccessStatusCode) end,
aws_request:request(RequestFun, Options).
do_request(Client, Method, Path, Query, Headers0, Input, Options, SuccessStatusCode) ->
Client1 = Client#{service => <<"rolesanywhere">>},
Host = build_host(<<"rolesanywhere">>, Client1),
URL0 = build_url(Host, Path, Client1),
URL = aws_request:add_query(URL0, Query),
AdditionalHeaders1 = [ {<<"Host">>, Host}
, {<<"Content-Type">>, <<"application/x-amz-json-1.1">>}
],
Payload =
case proplists:get_value(send_body_as_binary, Options) of
true ->
maps:get(<<"Body">>, Input, <<"">>);
false ->
encode_payload(Input)
end,
AdditionalHeaders = case proplists:get_value(append_sha256_content_hash, Options, false) of
true ->
add_checksum_hash_header(AdditionalHeaders1, Payload);
false ->
AdditionalHeaders1
end,
Headers1 = aws_request:add_headers(AdditionalHeaders, Headers0),
MethodBin = aws_request:method_to_binary(Method),
SignedHeaders = aws_request:sign_request(Client1, MethodBin, URL, Headers1, Payload),
Response = hackney:request(Method, URL, SignedHeaders, Payload, Options),
DecodeBody = not proplists:get_value(receive_body_as_binary, Options),
handle_response(Response, SuccessStatusCode, DecodeBody).
add_checksum_hash_header(Headers, Body) ->
[ {<<"X-Amz-CheckSum-SHA256">>, base64:encode(crypto:hash(sha256, Body))}
| Headers
].
handle_response({ok, StatusCode, ResponseHeaders}, SuccessStatusCode, _DecodeBody)
when StatusCode =:= 200;
StatusCode =:= 202;
StatusCode =:= 204;
StatusCode =:= 206;
StatusCode =:= SuccessStatusCode ->
{ok, {StatusCode, ResponseHeaders}};
handle_response({ok, StatusCode, ResponseHeaders}, _, _DecodeBody) ->
{error, {StatusCode, ResponseHeaders}};
handle_response({ok, StatusCode, ResponseHeaders, Client}, SuccessStatusCode, DecodeBody)
when StatusCode =:= 200;
StatusCode =:= 202;
StatusCode =:= 204;
StatusCode =:= 206;
StatusCode =:= SuccessStatusCode ->
case hackney:body(Client) of
{ok, <<>>} when StatusCode =:= 200;
StatusCode =:= SuccessStatusCode ->
{ok, #{}, {StatusCode, ResponseHeaders, Client}};
{ok, Body} ->
Result = case DecodeBody of
true ->
try
jsx:decode(Body)
catch
Error:Reason:Stack ->
erlang:raise(error, {body_decode_failed, Error, Reason, StatusCode, Body}, Stack)
end;
false -> #{<<"Body">> => Body}
end,
{ok, Result, {StatusCode, ResponseHeaders, Client}}
end;
handle_response({ok, StatusCode, ResponseHeaders, Client}, _, _DecodeBody) ->
{ok, Body} = hackney:body(Client),
Error = jsx:decode(Body),
{error, Error, {StatusCode, ResponseHeaders, Client}};
handle_response({error, Reason}, _, _DecodeBody) ->
{error, Reason}.
build_host(_EndpointPrefix, #{region := <<"local">>, endpoint := Endpoint}) ->
Endpoint;
build_host(_EndpointPrefix, #{region := <<"local">>}) ->
<<"localhost">>;
build_host(EndpointPrefix, #{region := Region, endpoint := Endpoint}) ->
aws_util:binary_join([EndpointPrefix, Region, Endpoint], <<".">>).
build_url(Host, Path0, Client) ->
Proto = maps:get(proto, Client),
Path = erlang:iolist_to_binary(Path0),
Port = maps:get(port, Client),
aws_util:binary_join([Proto, <<"://">>, Host, <<":">>, Port, Path], <<"">>).
-spec encode_payload(undefined | map()) -> binary().
encode_payload(undefined) ->
<<>>;
encode_payload(Input) ->
jsx:encode(Input).