IAMRolesAnywhere / Client / update_profile
update_profile#
- IAMRolesAnywhere.Client.update_profile(**kwargs)#
Updates the profile. A profile is configuration resource to list the roles that RolesAnywhere service is trusted to assume. In addition, by applying a profile you can scope-down permissions with IAM managed policies.
Required permissions:
rolesanywhere:UpdateProfile
.See also: AWS API Documentation
Request Syntax
response = client.update_profile( durationSeconds=123, managedPolicyArns=[ 'string', ], name='string', profileId='string', roleArns=[ 'string', ], sessionPolicy='string' )
- Parameters:
durationSeconds (integer) – The number of seconds the vended session credentials are valid for.
managedPolicyArns (list) –
A list of managed policy ARNs that apply to the vended session credentials.
(string) –
name (string) – The name of the profile.
profileId (string) –
[REQUIRED]
The unique identifier of the profile.
roleArns (list) –
A list of IAM roles that this profile can assume in a CreateSession operation.
(string) –
sessionPolicy (string) – A session policy that applies to the trust boundary of the vended session credentials.
- Return type:
dict
- Returns:
Response Syntax
{ 'profile': { 'createdAt': datetime(2015, 1, 1), 'createdBy': 'string', 'durationSeconds': 123, 'enabled': True|False, 'managedPolicyArns': [ 'string', ], 'name': 'string', 'profileArn': 'string', 'profileId': 'string', 'requireInstanceProperties': True|False, 'roleArns': [ 'string', ], 'sessionPolicy': 'string', 'updatedAt': datetime(2015, 1, 1) } }
Response Structure
(dict) –
profile (dict) –
The state of the profile after a read or write operation.
createdAt (datetime) –
The ISO-8601 timestamp when the profile was created.
createdBy (string) –
The Amazon Web Services account that created the profile.
durationSeconds (integer) –
The number of seconds the vended session credentials are valid for.
enabled (boolean) –
Indicates whether the profile is enabled.
managedPolicyArns (list) –
A list of managed policy ARNs that apply to the vended session credentials.
(string) –
name (string) –
The name of the profile.
profileArn (string) –
The ARN of the profile.
profileId (string) –
The unique identifier of the profile.
requireInstanceProperties (boolean) –
Specifies whether instance properties are required in CreateSession requests with this profile.
roleArns (list) –
A list of IAM roles that this profile can assume in a CreateSession operation.
(string) –
sessionPolicy (string) –
A session policy that applies to the trust boundary of the vended session credentials.
updatedAt (datetime) –
The ISO-8601 timestamp when the profile was last updated.
Exceptions
IAMRolesAnywhere.Client.exceptions.ValidationException
IAMRolesAnywhere.Client.exceptions.ResourceNotFoundException
IAMRolesAnywhere.Client.exceptions.AccessDeniedException