workmail function

Amazon WorkMail

Amazon WorkMail

WorkMail is a secure, managed business email and calendaring service with support for existing desktop and mobile email clients. You can access your email, contacts, and calendars using Microsoft Outlook, your browser, or other native iOS and Android email applications. You can integrate WorkMail with your existing corporate directory and control both the keys that encrypt your data and the location in which your data is stored.

The WorkMail API is designed for the following scenarios:

  • Listing and describing organizations
  • Managing users
  • Managing groups
  • Managing resources

All WorkMail API operations are Amazon-authenticated and certificate-signed. They not only require the use of the AWS SDK, but also allow for the exclusive use of AWS Identity and Access Management users and roles to help facilitate access, trust, and permission policies. By creating a role and allowing an IAM user to access the WorkMail site, the IAM user gains full administrative visibility into the entire WorkMail organization (or as set in the IAM policy). This includes, but is not limited to, the ability to create, update, and delete users, groups, and resources. This allows developers to perform the scenarios listed above, as well as give users the ability to grant access on a selective basis using the IAM model.

workmail(config = list(), credentials = list(), endpoint = NULL, region = NULL)

Arguments

  • config: Optional configuration of credentials, endpoint, and/or region.

    • credentials :

      • creds :

        • access_key_id : AWS access key ID
        • secret_access_key : AWS secret access key
        • session_token : AWS temporary session token
      • profile : The name of a profile to use. If not given, then the default profile is used.

      • anonymous : Set anonymous credentials.

    • endpoint : The complete URL to use for the constructed client.

    • region : The AWS Region used in instantiating the client.

    • close_connection : Immediately close all HTTP connections.

    • timeout : The time in seconds till a timeout exception is thrown when attempting to make a connection. The default is 60 seconds.

    • s3_force_path_style : Set this to true to force the request to use path-style addressing, i.e. http://s3.amazonaws.com/BUCKET/KEY.

    • sts_regional_endpoint : Set sts regional endpoint resolver to regional or legacy https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html

  • credentials: Optional credentials shorthand for the config parameter

    • creds :

      • access_key_id : AWS access key ID
      • secret_access_key : AWS secret access key
      • session_token : AWS temporary session token
    • profile : The name of a profile to use. If not given, then the default profile is used.

    • anonymous : Set anonymous credentials.

  • endpoint: Optional shorthand for complete URL to use for the constructed client.

  • region: Optional shorthand for AWS Region used in instantiating the client.

Returns

A client for the service. You can call the service's operations using syntax like svc$operation(...), where svc is the name you've assigned to the client. The available operations are listed in the Operations section.

Service syntax

svc <- workmail(
  config = list(
    credentials = list(
 creds = list(
   access_key_id = "string",
   secret_access_key = "string",
   session_token = "string"
 ),
 profile = "string",
 anonymous = "logical"
    ),
    endpoint = "string",
    region = "string",
    close_connection = "logical",
    timeout = "numeric",
    s3_force_path_style = "logical",
    sts_regional_endpoint = "string"
  ),
  credentials = list(
    creds = list(
 access_key_id = "string",
 secret_access_key = "string",
 session_token = "string"
    ),
    profile = "string",
    anonymous = "logical"
  ),
  endpoint = "string",
  region = "string"
)

Operations

associate_delegate_to_resourceAdds a member (user or group) to the resource's set of delegates
associate_member_to_groupAdds a member (user or group) to the group's set
assume_impersonation_roleAssumes an impersonation role for the given WorkMail organization
cancel_mailbox_export_jobCancels a mailbox export job
create_aliasAdds an alias to the set of a given member (user or group) of WorkMail
create_availability_configurationCreates an AvailabilityConfiguration for the given WorkMail organization and domain
create_groupCreates a group that can be used in WorkMail by calling the RegisterToWorkMail operation
create_identity_center_applicationCreates the WorkMail application in IAM Identity Center that can be used later in the WorkMail - IdC integration
create_impersonation_roleCreates an impersonation role for the given WorkMail organization
create_mobile_device_access_ruleCreates a new mobile device access rule for the specified WorkMail organization
create_organizationCreates a new WorkMail organization
create_resourceCreates a new WorkMail resource
create_userCreates a user who can be used in WorkMail by calling the RegisterToWorkMail operation
delete_access_control_ruleDeletes an access control rule for the specified WorkMail organization
delete_aliasRemove one or more specified aliases from a set of aliases for a given user
delete_availability_configurationDeletes the AvailabilityConfiguration for the given WorkMail organization and domain
delete_email_monitoring_configurationDeletes the email monitoring configuration for a specified organization
delete_groupDeletes a group from WorkMail
delete_identity_center_applicationDeletes the IAM Identity Center application from WorkMail
delete_identity_provider_configurationDisables the integration between IdC and WorkMail
delete_impersonation_roleDeletes an impersonation role for the given WorkMail organization
delete_mailbox_permissionsDeletes permissions granted to a member (user or group)
delete_mobile_device_access_overrideDeletes the mobile device access override for the given WorkMail organization, user, and device
delete_mobile_device_access_ruleDeletes a mobile device access rule for the specified WorkMail organization
delete_organizationDeletes an WorkMail organization and all underlying AWS resources managed by WorkMail as part of the organization
delete_personal_access_tokenDeletes the Personal Access Token from the provided WorkMail Organization
delete_resourceDeletes the specified resource
delete_retention_policyDeletes the specified retention policy from the specified organization
delete_userDeletes a user from WorkMail and all subsequent systems
deregister_from_work_mailMark a user, group, or resource as no longer used in WorkMail
deregister_mail_domainRemoves a domain from WorkMail, stops email routing to WorkMail, and removes the authorization allowing WorkMail use
describe_email_monitoring_configurationDescribes the current email monitoring configuration for a specified organization
describe_entityReturns basic details about an entity in WorkMail
describe_groupReturns the data available for the group
describe_identity_provider_configurationReturns detailed information on the current IdC setup for the WorkMail organization
describe_inbound_dmarc_settingsLists the settings in a DMARC policy for a specified organization
describe_mailbox_export_jobDescribes the current status of a mailbox export job
describe_organizationProvides more information regarding a given organization based on its identifier
describe_resourceReturns the data available for the resource
describe_userProvides information regarding the user
disassociate_delegate_from_resourceRemoves a member from the resource's set of delegates
disassociate_member_from_groupRemoves a member from a group
get_access_control_effectGets the effects of an organization's access control rules as they apply to a specified IPv4 address, access protocol action, and user ID or impersonation role ID
get_default_retention_policyGets the default retention policy details for the specified organization
get_impersonation_roleGets the impersonation role details for the given WorkMail organization
get_impersonation_role_effectTests whether the given impersonation role can impersonate a target user
get_mailbox_detailsRequests a user's mailbox details for a specified organization and user
get_mail_domainGets details for a mail domain, including domain records required to configure your domain with recommended security
get_mobile_device_access_effectSimulates the effect of the mobile device access rules for the given attributes of a sample access event
get_mobile_device_access_overrideGets the mobile device access override for the given WorkMail organization, user, and device
get_personal_access_token_metadataRequests details of a specific Personal Access Token within the WorkMail organization
list_access_control_rulesLists the access control rules for the specified organization
list_aliasesCreates a paginated call to list the aliases associated with a given entity
list_availability_configurationsList all the AvailabilityConfiguration's for the given WorkMail organization
list_group_membersReturns an overview of the members of a group
list_groupsReturns summaries of the organization's groups
list_groups_for_entityReturns all the groups to which an entity belongs
list_impersonation_rolesLists all the impersonation roles for the given WorkMail organization
list_mailbox_export_jobsLists the mailbox export jobs started for the specified organization within the last seven days
list_mailbox_permissionsLists the mailbox permissions associated with a user, group, or resource mailbox
list_mail_domainsLists the mail domains in a given WorkMail organization
list_mobile_device_access_overridesLists all the mobile device access overrides for any given combination of WorkMail organization, user, or device
list_mobile_device_access_rulesLists the mobile device access rules for the specified WorkMail organization
list_organizationsReturns summaries of the customer's organizations
list_personal_access_tokensReturns a summary of your Personal Access Tokens
list_resource_delegatesLists the delegates associated with a resource
list_resourcesReturns summaries of the organization's resources
list_tags_for_resourceLists the tags applied to an WorkMail organization resource
list_usersReturns summaries of the organization's users
put_access_control_ruleAdds a new access control rule for the specified organization
put_email_monitoring_configurationCreates or updates the email monitoring configuration for a specified organization
put_identity_provider_configurationEnables integration between IAM Identity Center (IdC) and WorkMail to proxy authentication requests for mailbox users
put_inbound_dmarc_settingsEnables or disables a DMARC policy for a given organization
put_mailbox_permissionsSets permissions for a user, group, or resource
put_mobile_device_access_overrideCreates or updates a mobile device access override for the given WorkMail organization, user, and device
put_retention_policyPuts a retention policy to the specified organization
register_mail_domainRegisters a new domain in WorkMail and SES, and configures it for use by WorkMail
register_to_work_mailRegisters an existing and disabled user, group, or resource for WorkMail use by associating a mailbox and calendaring capabilities
reset_passwordAllows the administrator to reset the password for a user
start_mailbox_export_jobStarts a mailbox export job to export MIME-format email messages and calendar items from the specified mailbox to the specified Amazon Simple Storage Service (Amazon S3) bucket
tag_resourceApplies the specified tags to the specified WorkMailorganization resource
test_availability_configurationPerforms a test on an availability provider to ensure that access is allowed
untag_resourceUntags the specified tags from the specified WorkMail organization resource
update_availability_configurationUpdates an existing AvailabilityConfiguration for the given WorkMail organization and domain
update_default_mail_domainUpdates the default mail domain for an organization
update_groupUpdates attributes in a group
update_impersonation_roleUpdates an impersonation role for the given WorkMail organization
update_mailbox_quotaUpdates a user's current mailbox quota for a specified organization and user
update_mobile_device_access_ruleUpdates a mobile device access rule for the specified WorkMail organization
update_primary_email_addressUpdates the primary email for a user, group, or resource
update_resourceUpdates data for the resource
update_userUpdates data for the user

Examples

## Not run: svc <- workmail() svc$associate_delegate_to_resource( Foo = 123 ) ## End(Not run)
  • Maintainer: Dyfan Jones
  • License: Apache License (>= 2.0)
  • Last published: 2025-03-17