How do I run the authorization commands from the shell?
Table of Contents
This file documents declared operations at the shell, one section per command. Every command is a subcommand of authorization, and every section exports its own script into projects/ores.shell/scripts/library/. Loading a script runs that one command, so a failure names the command it came from.
1. Commands
1.1. assign-role
Sends assign_role_request and prints assign_role_response, so the shape is the protocol's and the meaning is the service's. It reads account_id, role_id, in that order. The caller must have established a session first.
The command is shaped like this:
authorization assign-role <account_id> <role_id>
It is addressed at iam.v1.roles.assign.
authorization assign-role __none__ __none__
1.2. assign-role-by-name
Sends assign_role_by_name_request and prints assign_role_by_name_response, so the shape is the protocol's and the meaning is the service's. It reads principal, role_name, in that order. The caller must have established a session first.
The command is shaped like this:
authorization assign-role-by-name <principal> <role_name>
It is addressed at iam.v1.roles.assign-by-name.
authorization assign-role-by-name __none__ __none__
1.3. revoke-role
Sends revoke_role_request and prints revoke_role_response, so the shape is the protocol's and the meaning is the service's. It reads account_id, role_id, in that order. The caller must have established a session first.
The command is shaped like this:
authorization revoke-role <account_id> <role_id>
It is addressed at iam.v1.roles.revoke.
authorization revoke-role __none__ __none__
1.4. revoke-role-by-name
Sends revoke_role_by_name_request and prints revoke_role_by_name_response, so the shape is the protocol's and the meaning is the service's. It reads principal, role_name, in that order. The caller must have established a session first.
The command is shaped like this:
authorization revoke-role-by-name <principal> <role_name>
It is addressed at iam.v1.roles.revoke-by-name.
authorization revoke-role-by-name __none__ __none__
1.5. get-account-roles
Sends get_account_roles_request and prints get_account_roles_response, so the shape is the protocol's and the meaning is the service's. It reads account_id, in that order. The caller must have established a session first.
The command is shaped like this:
authorization get-account-roles <account_id>
It is addressed at iam.v1.roles.by-account.
authorization get-account-roles __none__
1.6. get-account-permissions
Sends get_account_permissions_request and prints get_account_permissions_response, so the shape is the protocol's and the meaning is the service's. It reads account_id, in that order. The caller must have established a session first.
The command is shaped like this:
authorization get-account-permissions <account_id>
It is addressed at iam.v1.roles.permissions-by-account.
authorization get-account-permissions __none__
1.7. get-role-permissions
Sends get_role_permissions_request and prints get_role_permissions_response, so the shape is the protocol's and the meaning is the service's. It reads role_id, in that order. The caller must have established a session first.
The command is shaped like this:
authorization get-role-permissions <role_id>
It is addressed at iam.v1.roles.permissions.
authorization get-role-permissions __none__
1.8. suggest-role-commands
Sends suggest_role_commands_request and prints suggest_role_commands_response, so the shape is the protocol's and the meaning is the service's. It reads username, tenant_id, hostname, in that order. The caller must have established a session first.
The command is shaped like this:
authorization suggest-role-commands <username> <tenant_id> <hostname>
It is addressed at iam.v1.roles.suggest-commands.
authorization suggest-role-commands __none__ __none__ __none__