AWS API Changes

2023/05/30 - Amazon MemoryDB - 4 updated api methods

Changes Amazon MemoryDB for Redis now supports AWS Identity and Access Management authentication access to Redis clusters starting with redis-engine version 7.0

CreateUser (updated)

Link ¶
Changes (request, response)
Request

{'AuthenticationMode': {'Type': {'iam'}}}

Response

{'User': {'Authentication': {'Type': {'iam'}}}}

Creates a MemoryDB user. For more information, see Authenticating users with Access Contol Lists (ACLs).

See also: AWS API Documentation

Request Syntax

client.create_user(
    UserName='string',
    AuthenticationMode={
        'Type': 'password'|'iam',
        'Passwords': [
            'string',
        ]
    },
    AccessString='string',
    Tags=[
        {
            'Key': 'string',
            'Value': 'string'
        },
    ]
)

type UserName:

string

param UserName:

[REQUIRED]

The name of the user. This value must be unique as it also serves as the user identifier.

type AuthenticationMode:

dict

param AuthenticationMode:

[REQUIRED]

Denotes the user's authentication properties, such as whether it requires a password to authenticate.

Type (string) --

Indicates whether the user requires a password to authenticate. All newly-created users require a password.
Passwords (list) --

The password(s) used for authentication
- (string) --

type AccessString:

string

param AccessString:

[REQUIRED]

Access permissions string used for this user.

type Tags:

list

param Tags:

A list of tags to be added to this resource. A tag is a key-value pair. A tag key must be accompanied by a tag value, although null is accepted.

(dict) --

A tag that can be added to an MemoryDB resource. Tags are composed of a Key/Value pair. You can use tags to categorize and track all your MemoryDB resources. When you add or remove tags on clusters, those actions will be replicated to all nodes in the cluster. A tag with a null Value is permitted. For more information, see Tagging your MemoryDB resources
- Key (string) --
  
  The key for the tag. May not be null.
- Value (string) --
  
  The tag's value. May be null.

rtype:

dict

returns:

Response Syntax

{
    'User': {
        'Name': 'string',
        'Status': 'string',
        'AccessString': 'string',
        'ACLNames': [
            'string',
        ],
        'MinimumEngineVersion': 'string',
        'Authentication': {
            'Type': 'password'|'no-password'|'iam',
            'PasswordCount': 123
        },
        'ARN': 'string'
    }
}

Response Structure

(dict) --
- User (dict) --
  
  The newly-created user.
  - Name (string) --
    
    The name of the user
  - Status (string) --
    
    Indicates the user status. Can be "active", "modifying" or "deleting".
  - AccessString (string) --
    
    Access permissions string used for this user.
  - ACLNames (list) --
    
    The names of the Access Control Lists to which the user belongs
    - (string) --
  - MinimumEngineVersion (string) --
    
    The minimum engine version supported for the user
  - Authentication (dict) --
    
    Denotes whether the user requires a password to authenticate.
    - Type (string) --
      
      Indicates whether the user requires a password to authenticate.
    - PasswordCount (integer) --
      
      The number of passwords belonging to the user. The maximum is two.
  - ARN (string) --
    
    The Amazon Resource Name (ARN) of the user.

DeleteUser (updated)

Link ¶
Changes (response)

{'User': {'Authentication': {'Type': {'iam'}}}}

Deletes a user. The user will be removed from all ACLs and in turn removed from all clusters.

See also: AWS API Documentation

Request Syntax

client.delete_user(
    UserName='string'
)

type UserName:

string

param UserName:

[REQUIRED]

The name of the user to delete

rtype:

dict

returns:

Response Syntax

{
    'User': {
        'Name': 'string',
        'Status': 'string',
        'AccessString': 'string',
        'ACLNames': [
            'string',
        ],
        'MinimumEngineVersion': 'string',
        'Authentication': {
            'Type': 'password'|'no-password'|'iam',
            'PasswordCount': 123
        },
        'ARN': 'string'
    }
}

Response Structure

(dict) --
- User (dict) --
  
  The user object that has been deleted.
  - Name (string) --
    
    The name of the user
  - Status (string) --
    
    Indicates the user status. Can be "active", "modifying" or "deleting".
  - AccessString (string) --
    
    Access permissions string used for this user.
  - ACLNames (list) --
    
    The names of the Access Control Lists to which the user belongs
    - (string) --
  - MinimumEngineVersion (string) --
    
    The minimum engine version supported for the user
  - Authentication (dict) --
    
    Denotes whether the user requires a password to authenticate.
    - Type (string) --
      
      Indicates whether the user requires a password to authenticate.
    - PasswordCount (integer) --
      
      The number of passwords belonging to the user. The maximum is two.
  - ARN (string) --
    
    The Amazon Resource Name (ARN) of the user.

DescribeUsers (updated)

Link ¶
Changes (response)

{'Users': {'Authentication': {'Type': {'iam'}}}}

Returns a list of users.

See also: AWS API Documentation

Request Syntax

client.describe_users(
    UserName='string',
    Filters=[
        {
            'Name': 'string',
            'Values': [
                'string',
            ]
        },
    ],
    MaxResults=123,
    NextToken='string'
)

type UserName:

string

param UserName:

The name of the user

type Filters:

list

param Filters:

Filter to determine the list of users to return.

(dict) --

Used to streamline results of a search based on the property being filtered.
- Name (string) -- [REQUIRED]
  
  The property being filtered. For example, UserName.
- Values (list) -- [REQUIRED]
  
  The property values to filter on. For example, "user-123".
  - (string) --

type MaxResults:

integer

param MaxResults:

The maximum number of records to include in the response. If more records exist than the specified MaxResults value, a token is included in the response so that the remaining results can be retrieved.

type NextToken:

string

param NextToken:

An optional argument to pass in case the total number of records exceeds the value of MaxResults. If nextToken is returned, there are more results available. The value of nextToken is a unique pagination token for each page. Make the call again using the returned token to retrieve the next page. Keep all other arguments unchanged.

rtype:

dict

returns:

Response Syntax

{
    'Users': [
        {
            'Name': 'string',
            'Status': 'string',
            'AccessString': 'string',
            'ACLNames': [
                'string',
            ],
            'MinimumEngineVersion': 'string',
            'Authentication': {
                'Type': 'password'|'no-password'|'iam',
                'PasswordCount': 123
            },
            'ARN': 'string'
        },
    ],
    'NextToken': 'string'
}

Response Structure

(dict) --
- Users (list) --
  
  A list of users.
  - (dict) --
    
    You create users and assign them specific permissions by using an access string. You assign the users to Access Control Lists aligned with a specific role (administrators, human resources) that are then deployed to one or more MemoryDB clusters.
    - Name (string) --
      
      The name of the user
    - Status (string) --
      
      Indicates the user status. Can be "active", "modifying" or "deleting".
    - AccessString (string) --
      
      Access permissions string used for this user.
    - ACLNames (list) --
      
      The names of the Access Control Lists to which the user belongs
      - (string) --
    - MinimumEngineVersion (string) --
      
      The minimum engine version supported for the user
    - Authentication (dict) --
      
      Denotes whether the user requires a password to authenticate.
      - Type (string) --
        
        Indicates whether the user requires a password to authenticate.
      - PasswordCount (integer) --
        
        The number of passwords belonging to the user. The maximum is two.
    - ARN (string) --
      
      The Amazon Resource Name (ARN) of the user.
- NextToken (string) --
  
  An optional argument to pass in case the total number of records exceeds the value of MaxResults. If nextToken is returned, there are more results available. The value of nextToken is a unique pagination token for each page. Make the call again using the returned token to retrieve the next page. Keep all other arguments unchanged.

UpdateUser (updated)

Link ¶
Changes (request, response)
Request

{'AuthenticationMode': {'Type': {'iam'}}}

Response

{'User': {'Authentication': {'Type': {'iam'}}}}

Changes user password(s) and/or access string.

See also: AWS API Documentation

Request Syntax

client.update_user(
    UserName='string',
    AuthenticationMode={
        'Type': 'password'|'iam',
        'Passwords': [
            'string',
        ]
    },
    AccessString='string'
)

type UserName:

string

param UserName:

[REQUIRED]

The name of the user

type AuthenticationMode:

dict

param AuthenticationMode:

Denotes the user's authentication properties, such as whether it requires a password to authenticate.

Type (string) --

Indicates whether the user requires a password to authenticate. All newly-created users require a password.
Passwords (list) --

The password(s) used for authentication
- (string) --

type AccessString:

string

param AccessString:

Access permissions string used for this user.

rtype:

dict

returns:

Response Syntax

{
    'User': {
        'Name': 'string',
        'Status': 'string',
        'AccessString': 'string',
        'ACLNames': [
            'string',
        ],
        'MinimumEngineVersion': 'string',
        'Authentication': {
            'Type': 'password'|'no-password'|'iam',
            'PasswordCount': 123
        },
        'ARN': 'string'
    }
}

Response Structure

(dict) --
- User (dict) --
  
  The updated user
  - Name (string) --
    
    The name of the user
  - Status (string) --
    
    Indicates the user status. Can be "active", "modifying" or "deleting".
  - AccessString (string) --
    
    Access permissions string used for this user.
  - ACLNames (list) --
    
    The names of the Access Control Lists to which the user belongs
    - (string) --
  - MinimumEngineVersion (string) --
    
    The minimum engine version supported for the user
  - Authentication (dict) --
    
    Denotes whether the user requires a password to authenticate.
    - Type (string) --
      
      Indicates whether the user requires a password to authenticate.
    - PasswordCount (integer) --
      
      The number of passwords belonging to the user. The maximum is two.
  - ARN (string) --
    
    The Amazon Resource Name (ARN) of the user.