paws.security.identity (version 0.5.0)

directoryservice: AWS Directory Service

Description

Directory Service

Directory Service is a web service that makes it easy for you to setup and run directories in the Amazon Web Services cloud, or connect your Amazon Web Services resources with an existing self-managed Microsoft Active Directory. This guide provides detailed information about Directory Service operations, data types, parameters, and errors. For information about Directory Services features, see Directory Service and the Directory Service Administration Guide.

Amazon Web Services provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .Net, iOS, Android, etc.). The SDKs provide a convenient way to create programmatic access to Directory Service and other Amazon Web Services services. For more information about the Amazon Web Services SDKs, including how to download and install them, see Tools for Amazon Web Services.

Usage

directoryservice(
  config = list(),
  credentials = list(),
  endpoint = NULL,
  region = NULL
)

Value

A client for the service. You can call the service's operations using syntax like svc$operation(...), where svc is the name you've assigned to the client. The available operations are listed in the Operations section.

Arguments

config

Optional configuration of credentials, endpoint, and/or region.

  • credentials:

    • creds:

      • access_key_id: AWS access key ID

      • secret_access_key: AWS secret access key

      • session_token: AWS temporary session token

    • profile: The name of a profile to use. If not given, then the default profile is used.

    • anonymous: Set anonymous credentials.

  • endpoint: The complete URL to use for the constructed client.

  • region: The AWS Region used in instantiating the client.

  • close_connection: Immediately close all HTTP connections.

  • timeout: The time in seconds till a timeout exception is thrown when attempting to make a connection. The default is 60 seconds.

  • s3_force_path_style: Set this to true to force the request to use path-style addressing, i.e. http://s3.amazonaws.com/BUCKET/KEY.

  • sts_regional_endpoint: Set sts regional endpoint resolver to regional or legacy https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html

credentials

Optional credentials shorthand for the config parameter

  • creds:

    • access_key_id: AWS access key ID

    • secret_access_key: AWS secret access key

    • session_token: AWS temporary session token

  • profile: The name of a profile to use. If not given, then the default profile is used.

  • anonymous: Set anonymous credentials.

endpoint

Optional shorthand for complete URL to use for the constructed client.

region

Optional shorthand for AWS Region used in instantiating the client.

Service syntax

svc <- directoryservice(
  config = list(
    credentials = list(
      creds = list(
        access_key_id = "string",
        secret_access_key = "string",
        session_token = "string"
      ),
      profile = "string",
      anonymous = "logical"
    ),
    endpoint = "string",
    region = "string",
    close_connection = "logical",
    timeout = "numeric",
    s3_force_path_style = "logical",
    sts_regional_endpoint = "string"
  ),
  credentials = list(
    creds = list(
      access_key_id = "string",
      secret_access_key = "string",
      session_token = "string"
    ),
    profile = "string",
    anonymous = "logical"
  ),
  endpoint = "string",
  region = "string"
)

Operations

accept_shared_directoryAccepts a directory sharing request that was sent from the directory owner account
add_ip_routesIf the DNS server for your self-managed domain uses a publicly addressable IP address, you must add a CIDR address block to correctly route traffic to and from your Microsoft AD on Amazon Web Services
add_regionAdds two domain controllers in the specified Region for the specified directory
add_tags_to_resourceAdds or overwrites one or more tags for the specified directory
cancel_schema_extensionCancels an in-progress schema extension to a Microsoft AD directory
connect_directoryCreates an AD Connector to connect to a self-managed directory
create_aliasCreates an alias for a directory and assigns the alias to the directory
create_computerCreates an Active Directory computer object in the specified directory
create_conditional_forwarderCreates a conditional forwarder associated with your Amazon Web Services directory
create_directoryCreates a Simple AD directory
create_log_subscriptionCreates a subscription to forward real-time Directory Service domain controller security logs to the specified Amazon CloudWatch log group in your Amazon Web Services account
create_microsoft_adCreates a Microsoft AD directory in the Amazon Web Services Cloud
create_snapshotCreates a snapshot of a Simple AD or Microsoft AD directory in the Amazon Web Services cloud
create_trustDirectory Service for Microsoft Active Directory allows you to configure trust relationships
delete_conditional_forwarderDeletes a conditional forwarder that has been set up for your Amazon Web Services directory
delete_directoryDeletes an Directory Service directory
delete_log_subscriptionDeletes the specified log subscription
delete_snapshotDeletes a directory snapshot
delete_trustDeletes an existing trust relationship between your Managed Microsoft AD directory and an external domain
deregister_certificateDeletes from the system the certificate that was registered for secure LDAP or client certificate authentication
deregister_event_topicRemoves the specified directory as a publisher to the specified Amazon SNS topic
describe_certificateDisplays information about the certificate registered for secure LDAP or client certificate authentication
describe_client_authentication_settingsRetrieves information about the type of client authentication for the specified directory, if the type is specified
describe_conditional_forwardersObtains information about the conditional forwarders for this account
describe_directoriesObtains information about the directories that belong to this account
describe_domain_controllersProvides information about any domain controllers in your directory
describe_event_topicsObtains information about which Amazon SNS topics receive status messages from the specified directory
describe_ldaps_settingsDescribes the status of LDAP security for the specified directory
describe_regionsProvides information about the Regions that are configured for multi-Region replication
describe_settingsRetrieves information about the configurable settings for the specified directory
describe_shared_directoriesReturns the shared directories in your account
describe_snapshotsObtains information about the directory snapshots that belong to this account
describe_trustsObtains information about the trust relationships for this account
describe_update_directoryDescribes the updates of a directory for a particular update type
disable_client_authenticationDisables alternative client authentication methods for the specified directory
disable_ldapsDeactivates LDAP secure calls for the specified directory
disable_radiusDisables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory
disable_ssoDisables single-sign on for a directory
enable_client_authenticationEnables alternative client authentication methods for the specified directory
enable_ldapsActivates the switch for the specific directory to always use LDAP secure calls
enable_radiusEnables multi-factor authentication (MFA) with the Remote Authentication Dial In User Service (RADIUS) server for an AD Connector or Microsoft AD directory
enable_ssoEnables single sign-on for a directory
get_directory_limitsObtains directory limit information for the current Region
get_snapshot_limitsObtains the manual snapshot limits for a directory
list_certificatesFor the specified directory, lists all the certificates registered for a secure LDAP or client certificate authentication
list_ip_routesLists the address blocks that you have added to a directory
list_log_subscriptionsLists the active log subscriptions for the Amazon Web Services account
list_schema_extensionsLists all schema extensions applied to a Microsoft AD Directory
list_tags_for_resourceLists all tags on a directory
register_certificateRegisters a certificate for a secure LDAP or client certificate authentication
register_event_topicAssociates a directory with an Amazon SNS topic
reject_shared_directoryRejects a directory sharing request that was sent from the directory owner account
remove_ip_routesRemoves IP address blocks from a directory
remove_regionStops all replication and removes the domain controllers from the specified Region
remove_tags_from_resourceRemoves tags from a directory
reset_user_passwordResets the password for any user in your Managed Microsoft AD or Simple AD directory
restore_from_snapshotRestores a directory using an existing directory snapshot
share_directoryShares a specified directory (DirectoryId) in your Amazon Web Services account (directory owner) with another Amazon Web Services account (directory consumer)
start_schema_extensionApplies a schema extension to a Microsoft AD directory
unshare_directoryStops the directory sharing between the directory owner and consumer accounts
update_conditional_forwarderUpdates a conditional forwarder that has been set up for your Amazon Web Services directory
update_directory_setupUpdates the directory for a particular update type
update_number_of_domain_controllersAdds or removes domain controllers to or from the directory
update_radiusUpdates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector or Microsoft AD directory
update_settingsUpdates the configurable settings for the specified directory
update_trustUpdates the trust that has been set up between your Managed Microsoft AD directory and an self-managed Active Directory
verify_trustDirectory Service for Microsoft Active Directory allows you to configure and verify trust relationships

Examples

Run this code
if (FALSE) {
svc <- directoryservice()
svc$accept_shared_directory(
  Foo = 123
)
}

Run the code above in your browser using DataLab