Class: Aws::IAM::User
- Inherits:
-
Object
- Object
- Aws::IAM::User
- Extended by:
- Deprecations
- Defined in:
- lib/aws-sdk-iam/user.rb
Defined Under Namespace
Classes: Collection
Read-Only Attributes collapse
-
#arn ⇒ String
The Amazon Resource Name (ARN) that identifies the user.
-
#create_date ⇒ Time
The date and time, in [ISO 8601 date-time format], when the user was created.
- #name ⇒ String (also: #user_name)
-
#password_last_used ⇒ Time
The date and time, in [ISO 8601 date-time format], when the user’s password was last used to sign in to an AWS website.
-
#path ⇒ String
The path to the user.
-
#permissions_boundary ⇒ Types::AttachedPermissionsBoundary
The ARN of the policy used to set the permissions boundary for the user.
-
#user_id ⇒ String
The stable and unique string identifying the user.
Actions collapse
- #add_group(options = {}) ⇒ EmptyStructure
- #attach_policy(options = {}) ⇒ EmptyStructure
- #create(options = {}) ⇒ User
- #create_access_key_pair(options = {}) ⇒ AccessKeyPair
- #create_login_profile(options = {}) ⇒ LoginProfile
- #create_policy(options = {}) ⇒ UserPolicy
- #delete(options = {}) ⇒ EmptyStructure
- #detach_policy(options = {}) ⇒ EmptyStructure
- #enable_mfa(options = {}) ⇒ MfaDevice
- #remove_group(options = {}) ⇒ EmptyStructure
- #update(options = {}) ⇒ User
Associations collapse
- #access_key(id) ⇒ AccessKey
- #access_keys(options = {}) ⇒ AccessKey::Collection
- #attached_policies(options = {}) ⇒ Policy::Collection
- #groups(options = {}) ⇒ Group::Collection
- #identifiers ⇒ Object deprecated private Deprecated.
- #login_profile ⇒ LoginProfile
- #mfa_device(serial_number) ⇒ MfaDevice
- #mfa_devices(options = {}) ⇒ MfaDevice::Collection
- #policies(options = {}) ⇒ UserPolicy::Collection
- #policy(name) ⇒ UserPolicy
- #signing_certificate(id) ⇒ SigningCertificate
- #signing_certificates(options = {}) ⇒ SigningCertificate::Collection
Instance Method Summary collapse
- #client ⇒ Client
-
#data ⇒ Types::User
Returns the data for this User.
-
#data_loaded? ⇒ Boolean
Returns ‘true` if this resource is loaded.
-
#exists?(options = {}) ⇒ Boolean
Returns ‘true` if the User exists.
-
#initialize(*args) ⇒ User
constructor
A new instance of User.
- #load ⇒ self (also: #reload)
-
#wait_until(options = {}, &block) ⇒ Resource
deprecated
Deprecated.
Use [Aws::IAM::Client] #wait_until instead
- #wait_until_exists(options = {}) ⇒ User
Constructor Details
#initialize(name, options = {}) ⇒ User #initialize(options = {}) ⇒ User
Returns a new instance of User.
19 20 21 22 23 24 |
# File 'lib/aws-sdk-iam/user.rb', line 19 def initialize(*args) = Hash === args.last ? args.pop.dup : {} @name = extract_name(args, ) @data = .delete(:data) @client = .delete(:client) || Client.new() end |
Instance Method Details
#access_key(id) ⇒ AccessKey
636 637 638 639 640 641 642 |
# File 'lib/aws-sdk-iam/user.rb', line 636 def access_key(id) AccessKey.new( user_name: @name, id: id, client: @client ) end |
#access_keys(options = {}) ⇒ AccessKey::Collection
649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 |
# File 'lib/aws-sdk-iam/user.rb', line 649 def access_keys( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_access_keys() resp.each_page do |page| batch = [] page.data..each do |a| batch << AccessKey.new( user_name: @name, id: a.access_key_id, data: a, client: @client ) end y.yield(batch) end end AccessKey::Collection.new(batches) end |
#add_group(options = {}) ⇒ EmptyStructure
304 305 306 307 308 |
# File 'lib/aws-sdk-iam/user.rb', line 304 def add_group( = {}) = .merge(user_name: @name) resp = @client.add_user_to_group() resp.data end |
#arn ⇒ String
The Amazon Resource Name (ARN) that identifies the user. For more information about ARNs and how to use ARNs in policies, see [IAM Identifiers] in the *Using IAM* guide.
[1]: docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html
65 66 67 |
# File 'lib/aws-sdk-iam/user.rb', line 65 def arn data[:arn] end |
#attach_policy(options = {}) ⇒ EmptyStructure
326 327 328 329 330 |
# File 'lib/aws-sdk-iam/user.rb', line 326 def attach_policy( = {}) = .merge(user_name: @name) resp = @client.attach_user_policy() resp.data end |
#attached_policies(options = {}) ⇒ Policy::Collection
691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 |
# File 'lib/aws-sdk-iam/user.rb', line 691 def attached_policies( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_attached_user_policies() resp.each_page do |page| batch = [] page.data.attached_policies.each do |a| batch << Policy.new( arn: a.policy_arn, client: @client ) end y.yield(batch) end end Policy::Collection.new(batches) end |
#create(options = {}) ⇒ User
361 362 363 364 365 366 367 368 369 |
# File 'lib/aws-sdk-iam/user.rb', line 361 def create( = {}) = .merge(user_name: @name) resp = @client.create_user() User.new( name: [:user_name], data: resp.data.user, client: @client ) end |
#create_access_key_pair(options = {}) ⇒ AccessKeyPair
376 377 378 379 380 381 382 383 384 385 386 |
# File 'lib/aws-sdk-iam/user.rb', line 376 def create_access_key_pair( = {}) = .merge(user_name: @name) resp = @client.create_access_key() AccessKeyPair.new( user_name: @name, id: resp.data.access_key.access_key_id, secret: resp.data.access_key.secret_access_key, data: resp.data.access_key, client: @client ) end |
#create_date ⇒ Time
The date and time, in [ISO 8601 date-time format], when the user was created.
76 77 78 |
# File 'lib/aws-sdk-iam/user.rb', line 76 def create_date data[:create_date] end |
#create_login_profile(options = {}) ⇒ LoginProfile
414 415 416 417 418 419 420 421 422 |
# File 'lib/aws-sdk-iam/user.rb', line 414 def create_login_profile( = {}) = .merge(user_name: @name) resp = @client.create_login_profile() LoginProfile.new( user_name: resp.data.login_profile.user_name, data: resp.data.login_profile, client: @client ) end |
#create_policy(options = {}) ⇒ UserPolicy
461 462 463 464 465 466 467 468 469 |
# File 'lib/aws-sdk-iam/user.rb', line 461 def create_policy( = {}) = .merge(user_name: @name) resp = @client.put_user_policy() UserPolicy.new( user_name: @name, name: [:policy_name], client: @client ) end |
#data ⇒ Types::User
Returns the data for this Aws::IAM::User. Calls Client#get_user if #data_loaded? is ‘false`.
146 147 148 149 |
# File 'lib/aws-sdk-iam/user.rb', line 146 def data load unless @data @data end |
#data_loaded? ⇒ Boolean
154 155 156 |
# File 'lib/aws-sdk-iam/user.rb', line 154 def data_loaded? !!@data end |
#delete(options = {}) ⇒ EmptyStructure
476 477 478 479 480 |
# File 'lib/aws-sdk-iam/user.rb', line 476 def delete( = {}) = .merge(user_name: @name) resp = @client.delete_user() resp.data end |
#detach_policy(options = {}) ⇒ EmptyStructure
498 499 500 501 502 |
# File 'lib/aws-sdk-iam/user.rb', line 498 def detach_policy( = {}) = .merge(user_name: @name) resp = @client.detach_user_policy() resp.data end |
#enable_mfa(options = {}) ⇒ MfaDevice
555 556 557 558 559 560 561 562 563 |
# File 'lib/aws-sdk-iam/user.rb', line 555 def enable_mfa( = {}) = .merge(user_name: @name) resp = @client.enable_mfa_device() MfaDevice.new( user_name: @name, serial_number: [:serial_number], client: @client ) end |
#exists?(options = {}) ⇒ Boolean
Returns ‘true` if the User exists.
161 162 163 164 165 166 167 168 169 170 |
# File 'lib/aws-sdk-iam/user.rb', line 161 def exists?( = {}) begin wait_until_exists(.merge(max_attempts: 1)) true rescue Aws::Waiters::Errors::UnexpectedError => e raise e.error rescue Aws::Waiters::Errors::WaiterFailed false end end |
#groups(options = {}) ⇒ Group::Collection
714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 |
# File 'lib/aws-sdk-iam/user.rb', line 714 def groups( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_groups_for_user() resp.each_page do |page| batch = [] page.data.groups.each do |g| batch << Group.new( name: g.group_name, data: g, client: @client ) end y.yield(batch) end end Group::Collection.new(batches) end |
#identifiers ⇒ Object
This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.
847 848 849 |
# File 'lib/aws-sdk-iam/user.rb', line 847 def identifiers { name: @name } end |
#load ⇒ self Also known as: reload
Loads, or reloads #data for the current Aws::IAM::User. Returns ‘self` making it possible to chain methods.
user.reload.data
136 137 138 139 140 |
# File 'lib/aws-sdk-iam/user.rb', line 136 def load resp = @client.get_user(user_name: @name) @data = resp.user self end |
#login_profile ⇒ LoginProfile
734 735 736 737 738 739 |
# File 'lib/aws-sdk-iam/user.rb', line 734 def login_profile LoginProfile.new( user_name: @name, client: @client ) end |
#mfa_device(serial_number) ⇒ MfaDevice
743 744 745 746 747 748 749 |
# File 'lib/aws-sdk-iam/user.rb', line 743 def mfa_device(serial_number) MfaDevice.new( user_name: @name, serial_number: serial_number, client: @client ) end |
#mfa_devices(options = {}) ⇒ MfaDevice::Collection
756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 |
# File 'lib/aws-sdk-iam/user.rb', line 756 def mfa_devices( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_mfa_devices() resp.each_page do |page| batch = [] page.data.mfa_devices.each do |m| batch << MfaDevice.new( user_name: @name, serial_number: m.serial_number, data: m, client: @client ) end y.yield(batch) end end MfaDevice::Collection.new(batches) end |
#name ⇒ String Also known as: user_name
29 30 31 |
# File 'lib/aws-sdk-iam/user.rb', line 29 def name @name end |
#password_last_used ⇒ Time
The date and time, in [ISO 8601 date-time format], when the user’s password was last used to sign in to an AWS website. For a list of AWS websites that capture a user’s last sign-in time, see the [Credential Reports] topic in the *Using IAM* guide. If a password is used more than once in a five-minute span, only the first use is returned in this field. If the field is null (no value) then it indicates that they never signed in with a password. This can be because:
-
The user never had a password.
-
A password exists but has not been used since IAM started tracking this information on October 20th, 2014.
A null does not mean that the user never had a password. Also, if the user does not currently have a password, but had one in the past, then this field contains the date and time the most recent password was used.
This value is returned only in the GetUser and ListUsers operations.
[1]: www.iso.org/iso/iso8601 [2]: docs.aws.amazon.com/IAM/latest/UserGuide/credential-reports.html
105 106 107 |
# File 'lib/aws-sdk-iam/user.rb', line 105 def password_last_used data[:password_last_used] end |
#path ⇒ String
The path to the user. For more information about paths, see [IAM Identifiers] in the *Using IAM* guide.
[1]: docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html
41 42 43 |
# File 'lib/aws-sdk-iam/user.rb', line 41 def path data[:path] end |
#permissions_boundary ⇒ Types::AttachedPermissionsBoundary
The ARN of the policy used to set the permissions boundary for the user.
For more information about permissions boundaries, see [Permissions Boundaries for IAM Identities ][1] in the *IAM User Guide*.
[1]: docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html
119 120 121 |
# File 'lib/aws-sdk-iam/user.rb', line 119 def data[:permissions_boundary] end |
#policies(options = {}) ⇒ UserPolicy::Collection
781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 |
# File 'lib/aws-sdk-iam/user.rb', line 781 def policies( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_user_policies() resp.each_page do |page| batch = [] page.data.policy_names.each do |p| batch << UserPolicy.new( user_name: @name, name: p, client: @client ) end y.yield(batch) end end UserPolicy::Collection.new(batches) end |
#policy(name) ⇒ UserPolicy
802 803 804 805 806 807 808 |
# File 'lib/aws-sdk-iam/user.rb', line 802 def policy(name) UserPolicy.new( user_name: @name, name: name, client: @client ) end |
#remove_group(options = {}) ⇒ EmptyStructure
583 584 585 586 587 |
# File 'lib/aws-sdk-iam/user.rb', line 583 def remove_group( = {}) = .merge(user_name: @name) resp = @client.remove_user_from_group() resp.data end |
#signing_certificate(id) ⇒ SigningCertificate
812 813 814 815 816 817 818 |
# File 'lib/aws-sdk-iam/user.rb', line 812 def signing_certificate(id) SigningCertificate.new( user_name: @name, id: id, client: @client ) end |
#signing_certificates(options = {}) ⇒ SigningCertificate::Collection
825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 |
# File 'lib/aws-sdk-iam/user.rb', line 825 def signing_certificates( = {}) batches = Enumerator.new do |y| = .merge(user_name: @name) resp = @client.list_signing_certificates() resp.each_page do |page| batch = [] page.data.certificates.each do |c| batch << SigningCertificate.new( user_name: @name, id: c.certificate_id, data: c, client: @client ) end y.yield(batch) end end SigningCertificate::Collection.new(batches) end |
#update(options = {}) ⇒ User
623 624 625 626 627 628 629 630 |
# File 'lib/aws-sdk-iam/user.rb', line 623 def update( = {}) = .merge(user_name: @name) resp = @client.update_user() User.new( name: [:new_user_name], client: @client ) end |
#user_id ⇒ String
The stable and unique string identifying the user. For more information about IDs, see [IAM Identifiers] in the *Using IAM* guide.
[1]: docs.aws.amazon.com/IAM/latest/UserGuide/Using_Identifiers.html
53 54 55 |
# File 'lib/aws-sdk-iam/user.rb', line 53 def user_id data[:user_id] end |
#wait_until(options = {}, &block) ⇒ Resource
Use [Aws::IAM::Client] #wait_until instead
The waiting operation is performed on a copy. The original resource remains unchanged
Waiter polls an API operation until a resource enters a desired state.
## Basic Usage
Waiter will polls until it is successful, it fails by entering a terminal state, or until a maximum number of attempts are made.
# polls in a loop until condition is true
resource.wait_until() {|resource| condition}
## Example
instance.wait_until(max_attempts:10, delay:5) {|instance| instance.state.name == 'running' }
## Configuration
You can configure the maximum number of polling attempts, and the delay (in seconds) between each polling attempt. The waiting condition is set by passing a block to #wait_until:
# poll for ~25 seconds
resource.wait_until(max_attempts:5,delay:5) {|resource|...}
## Callbacks
You can be notified before each polling attempt and before each delay. If you throw ‘:success` or `:failure` from these callbacks, it will terminate the waiter.
started_at = Time.now
# poll for 1 hour, instead of a number of attempts
proc = Proc.new do |attempts, response|
throw :failure if Time.now - started_at > 3600
end
# disable max attempts
instance.wait_until(before_wait:proc, max_attempts:nil) {...}
## Handling Errors
When a waiter is successful, it returns the Resource. When a waiter fails, it raises an error.
begin
resource.wait_until(...)
rescue Aws::Waiters::Errors::WaiterFailed
# resource did not enter the desired state in time
end
attempts attempt in seconds invoked before each attempt invoked before each wait
267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 |
# File 'lib/aws-sdk-iam/user.rb', line 267 def wait_until( = {}, &block) self_copy = self.dup attempts = 0 [:max_attempts] = 10 unless .key?(:max_attempts) [:delay] ||= 10 [:poller] = Proc.new do attempts += 1 if block.call(self_copy) [:success, self_copy] else self_copy.reload unless attempts == [:max_attempts] :retry end end Aws::Waiters::Waiter.new().wait({}) end |
#wait_until_exists(options = {}) ⇒ User
178 179 180 181 182 183 184 185 186 187 |
# File 'lib/aws-sdk-iam/user.rb', line 178 def wait_until_exists( = {}) , params = () waiter = Waiters::UserExists.new() yield_waiter_and_warn(waiter, &Proc.new) if block_given? waiter.wait(params.merge(user_name: @name)) User.new({ name: @name, client: @client }) end |