From 024efe4fdb9ec0615054455cce305e247ffd41a7 Mon Sep 17 00:00:00 2001
From: Shashank Saxena Allows an Allows The time at which the last message in a channel was sent. The time at which the last persistent message in a channel was sent. Summary of the details of a Returns the specified CloudTrail service-linked channel. Amazon Web Services services create service-linked channels to view CloudTrail events. Returns information about a specific channel. Amazon Web Services services create service-linked channels to get information about CloudTrail events on your behalf. For more information about service-linked channels, see Viewing service-linked channels for CloudTrail by using the CLI.. Returns information for the specified import. Returns information about a specific import. Returns all CloudTrail channels. Lists the channels in the current account, and their source names. Amazon Web Services services create service-linked channels get information about CloudTrail events on your behalf. For more information about service-linked channels, see Viewing service-linked channels for CloudTrail by using the CLI. Starts an import of logged trail events from a source S3 bucket to a destination event data store. When you start a new import, the When you retry an import, the Starts an import of logged trail events from a source S3 bucket to a destination event data store. By default, CloudTrail only imports events contained in the S3 bucket's When you start a new import, the When you retry an import, the Starts a CloudTrail Lake query. The required Starts a CloudTrail Lake query. The required The Amazon Resource Name (ARN) of the channel. The Amazon Resource Name (ARN) of a channel. The name of the CloudTrail channel. For service-linked channels, the name is Contains information about a returned CloudTrail channel. Contains information about a returned CloudTrail channel. The specified channel ARN is not valid or does not map to a channel in your account. This exception is thrown when the specified value of Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by \"alias/\", a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier. CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide. Examples: alias/MyAliasName arn:aws:kms:us-east-2:123456789012:alias/MyAliasName arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012 12345678-1234-1234-1234-123456789012 Specifies the KMS key ID to use to encrypt the logs delivered by CloudTrail. The value can be an alias name prefixed by CloudTrail also supports KMS multi-Region keys. For more information about multi-Region keys, see Using multi-Region keys in the Key Management Service Developer Guide. Examples: Specifies the KMS key ID that encrypts the logs delivered by CloudTrail. The value is a fully specified ARN to a KMS key in the following format. Specifies the KMS key ID that encrypts the events delivered by CloudTrail. The value is a fully specified ARN to a KMS key in the following format. The resource type in which you want to log data events. You can specify the following basic event selector resource types: The following resource types are also availble through advanced event selectors. Basic event selector resource types are valid in advanced event selectors, but advanced event selector resource types are not valid in basic event selectors. For more information, see AdvancedFieldSelector$Field. The resource type in which you want to log data events. You can specify the following basic event selector resource types: The following resource types are also available through advanced event selectors. Basic event selector resource types are valid in advanced event selectors, but advanced event selector resource types are not valid in basic event selectors. For more information, see AdvancedFieldSelector$Field. Returns the objects or data listed below if successful. Otherwise, returns an error. The error message returned if a query failed. The URI for the S3 bucket where CloudTrail delivered query results, if applicable. The delivery status. The type of service. For service-linked channels, the value is The type of destination for events arriving from a channel. For service-linked channels, the value is The location of the service. For service-linked channels, this is the name of the Amazon Web Services service. For service-linked channels, the value is the name of the Amazon Web Services service. Contains information about the service where CloudTrail delivers events. Contains information about the service where CloudTrail delivers events. The Amazon Resource Name (ARN) of the CloudTrail service-linked channel. The ARN or The ARN of the CloudTrail service-linked channel. The ARN of an channel returned by a The name of the CloudTrail service-linked channel. For service-linked channels, the value is The name of the CloudTrail channel. For service-linked channels, the value is The trail or event data store for the CloudTrail service-linked channel. The event source for the CloudTrail channel. Provides information about the advanced event selectors configured for the service-linked channel, and whether the service-linked channel applies to all regions or one region. Provides information about the advanced event selectors configured for the channel, and whether the channel applies to all regions or a single region. The Amazon Web Services service that created the CloudTrail service-linked channel. The Amazon Web Services service that created the service-linked channel. The destination event data store. The ARN of the destination event data store. Provides statistics for the import. Provides statistics for the import. CloudTrail does not update import statistics in real-time. Returned values for parameters such as The number of files that completed import. The number of log files that completed import. The number of trail events imported. The number of trail events imported into the event data store. The number of failed entries. Provides statistics for the specified Provides statistics for the specified The destination event data store. The ARN of the destination event data store. This exception is thrown when the policy on the S3 bucket or KMS key is not sufficient. This exception is thrown when the policy on the S3 bucket or KMS key does not have sufficient permissions for the operation. This exception is thrown when the event data store category is not valid for the import. This exception is thrown when event categories of specified event data stores are not valid. A token you can use to get the next page of results. The token to use to get the next page of results after a previous API call. This token must be passed in with the same parameters that were specified in the original call. For example, if the original call specified an AttributeKey of 'Username' with a value of 'root', the call with NextToken should include those same parameters. The list of CloudTrail channels. The list of channels in the account. A token used to get the next page of results. The token to use to get the next page of results after a previous API call. The destination event data store. The ARN of the destination event data store. Specifies whether the service-linked channel applies to one region or all regions. Specifies whether the channel applies to a single region or to all regions. The advanced event selectors configured for the service-linked channel. The advanced event selectors that are configured for the channel. Contains configuration information about the service-linked channel. Contains configuration information about the channel. The destination event data store. Use this parameter for a new import. The ARN of the destination event data store. Use this parameter for a new import. Use with Use with Use with Use with The destination event data store. The ARN of the destination event data store. The source S3 bucket. The source S3 bucket for the import. The SQL code of your query. The URI for the S3 bucket where CloudTrail delivers the query results. The source S3 bucket. The source S3 bucket for the import. The destination event data store. The ARN of the destination event data store. Deletes the specified organization Config rule and all of its evaluation results from all member accounts in that organization. Only a master account and a delegated administrator account can delete an organization Config rule. When calling this API with a delegated administrator, you must ensure Organizations Config sets the state of a rule to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a rule while it is in this state. Deletes the specified organization Config rule and all of its evaluation results from all member accounts in that organization. Only a management account and a delegated administrator account can delete an organization Config rule. When calling this API with a delegated administrator, you must ensure Organizations Config sets the state of a rule to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a rule while it is in this state. Deletes the specified organization conformance pack and all of the Config rules and remediation actions from all member accounts in that organization. Only a master account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Organizations Config sets the state of a conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state. Deletes the specified organization conformance pack and all of the Config rules and remediation actions from all member accounts in that organization. Only a management account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Organizations Config sets the state of a conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state. Returns a list of conformance pack compliance scores. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand the level of compliance in your conformance packs. Conformance packs with no evaluation results will have a compliance score of Returns a list of conformance pack compliance scores. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs. You can use it to identify, investigate, and understand the level of compliance in your conformance packs. Conformance packs with no evaluation results will have a compliance score of Creates or updates a conformance pack. A conformance pack is a collection of Config rules that can be easily deployed in an account and a region and across Amazon Web Services Organization. For information on how many conformance packs you can have per account, see Service Limits in the Config Developer Guide. This API creates a service-linked role You must specify one and only one of the Creates or updates a conformance pack. A conformance pack is a collection of Config rules that can be easily deployed in an account and a region and across an organization. For information on how many conformance packs you can have per account, see Service Limits in the Config Developer Guide. This API creates a service-linked role You must specify only one of the follow parameters: Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your desired configurations. For information on how many organization Config rules you can have per account, see Service Limits in the Config Developer Guide. Only a master account and a delegated administrator can create or update an organization Config rule. When calling this API with a delegated administrator, you must ensure Organizations This API enables organization service access through the To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization There are two types of rules: Config Custom Rules and Config Managed Rules. You can use Custom rules are rules that you can create using either Guard or Lambda functions. Guard (Guard GitHub Repository) is a policy-as-code language that allows you to write policies that are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the master account or a delegated administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function. When you use Managed rules are predefined, customizable rules created by Config. For a list of managed rules, see List of Config Managed Rules. If you are adding an Config managed rule, you must specify the rule's identifier for the Prerequisite: Ensure you call Make sure to specify one of either Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your desired configurations. For information on how many organization Config rules you can have per account, see Service Limits in the Config Developer Guide. Only a management account and a delegated administrator can create or update an organization Config rule. When calling this API with a delegated administrator, you must ensure Organizations This API enables organization service access through the To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization There are two types of rules: Config Custom Rules and Config Managed Rules. You can use Custom rules are rules that you can create using either Guard or Lambda functions. Guard (Guard GitHub Repository) is a policy-as-code language that allows you to write policies that are enforced by Config Custom Policy rules. Lambda uses custom code that you upload to evaluate a custom rule. If you are adding a new Custom Lambda rule, you first need to create an Lambda function in the management account or a delegated administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function. When you use Managed rules are predefined, customizable rules created by Config. For a list of managed rules, see List of Config Managed Rules. If you are adding an Config managed rule, you must specify the rule's identifier for the Prerequisite: Ensure you call Make sure to specify one of either Deploys conformance packs across member accounts in an Amazon Web Services Organization. For information on how many organization conformance packs and how many Config rules you can have per account, see Service Limits in the Config Developer Guide. Only a master account and a delegated administrator can call this API. When calling this API with a delegated administrator, you must ensure Organizations This API enables organization service access for Prerequisite: Ensure you call You must specify either the Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state. Deploys conformance packs across member accounts in an Amazon Web Services Organization. For information on how many organization conformance packs and how many Config rules you can have per account, see Service Limits in the Config Developer Guide. Only a management account and a delegated administrator can call this API. When calling this API with a delegated administrator, you must ensure Organizations This API enables organization service access for Prerequisite: Ensure you call You must specify either the Config sets the state of a conformance pack to CREATE_IN_PROGRESS and UPDATE_IN_PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state. The time that the conformance pack compliance score was last updated. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs, and can be used to identify, investigate, and understand the level of compliance in your conformance packs. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs. You can use it to identify, investigate, and understand the level of compliance in your conformance packs. You have specified a template that is not valid or supported. You have specified a template that is invalid or supported. Indicates one of the following errors: For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action. For PutConfigRule, the Lambda function cannot be invoked. Check the function ARN, and check the function's permissions. For PutOrganizationConfigRule, organization Config rule cannot be created because you do not have permissions to call IAM For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have permissions: To call IAM To read Amazon S3 bucket or call SSM:GetDocument. Indicates one of the following errors: For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action. For PutConfigRule, the Lambda function cannot be invoked. Check the function ARN, and check the function's permissions. For PutOrganizationConfigRule, organization Config rule cannot be created because you do not have permissions to call IAM For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions: You do not have permission to call IAM You do not have permission to read Amazon S3 bucket or call SSM:GetDocument. The specified delivery channel name is not valid. The specified delivery channel name is invalid. The specified Amazon S3 key prefix is not valid. The specified Amazon S3 key prefix is invalid. The specified Amazon KMS Key ARN is not valid. The specified Amazon KMS Key ARN is invalid. The specified time range is not valid. The earlier time is not chronologically before the later time. The specified time range is invalid. The earlier time is not chronologically before the later time. Determines the order in which conformance pack compliance scores are sorted. Either in ascending or descending order. Conformance packs with a compliance score of Determines the order in which conformance pack compliance scores are sorted. Either in ascending or descending order. By default, conformance pack compliance scores are sorted in alphabetical order by name of the conformance pack. Conformance pack compliance scores are sorted in reverse alphabetical order if you enter You can sort conformance pack compliance scores by the numerical value of the compliance score by entering Sorts your conformance pack compliance scores in either ascending or descending order, depending on By default, conformance pack compliance scores are sorted in ascending order by compliance score and alphabetically by name of the conformance pack if there is more than one conformance pack with the same compliance score. Sorts your conformance pack compliance scores in either ascending or descending order, depending on By default, conformance pack compliance scores are sorted in alphabetical order by name of the conformance pack. Enter You have reached the limit (100,000) of active custom resource types in your account. Delete unused resources using You have reached the limit of active custom resource types in your account. There is a limit of 100,000. Delete unused resources using DeleteResourceConfig You have reached the limit (6) of the number of conformance packs in an account (6 conformance pack with 25 Config rules per pack). You have reached the limit of the number of conformance packs you can create in an account. For more information, see Service Limits in the Config Developer Guide. You have reached the limit of the number of organization Config rules you can create. You have reached the limit of the number of organization Config rules you can create. For more information, see see Service Limits in the Config Developer Guide. You have reached the limit (6) of the number of organization conformance packs in an account (6 conformance pack with 25 Config rules per pack per account). You have reached the limit of the number of organization conformance packs you can create in an account. For more information, see Service Limits in the Config Developer Guide. Indicates deployment status for Config rule in the member account. When master account calls Config sets the state of the rule to: Indicates deployment status for Config rule in the member account. When management account calls Config sets the state of the rule to: The Config rule in the request is not valid. Verify that the rule is an Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again. The Config rule in the request is invalid. Verify that the rule is an Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again. The Config rule in the request is not valid. Verify that the rule is an organization Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again. The Config rule in the request is invalid. Verify that the rule is an organization Config Custom Policy rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again. For No permission to call The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization. The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization. You are not a registered delegated administrator for Config with permissions to call For all For No permission to call The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization. The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization. You are not a registered delegated administrator for Config with permissions to call For all Indicates deployment status of an organization Config rule. When master account calls PutOrganizationConfigRule action for the first time, Config rule status is created in all the member accounts. When master account calls PutOrganizationConfigRule action for the second time, Config rule status is updated in all the member accounts. Additionally, Config rule status is updated when one or more member accounts join or leave an organization. Config rule status is deleted when the master account deletes OrganizationConfigRule in all the member accounts and disables service access for Config sets the state of the rule to: Indicates deployment status of an organization Config rule. When management account calls PutOrganizationConfigRule action for the first time, Config rule status is created in all the member accounts. When management account calls PutOrganizationConfigRule action for the second time, Config rule status is updated in all the member accounts. Additionally, Config rule status is updated when one or more member accounts join or leave an organization. Config rule status is deleted when the management account deletes OrganizationConfigRule in all the member accounts and disables service access for Config sets the state of the rule to: Indicates deployment status for conformance pack in a member account. When master account calls Config sets the state of the conformance pack to: Indicates deployment status for conformance pack in a member account. When management account calls Config sets the state of the conformance pack to: Indicates deployment status of an organization conformance pack. When master account calls PutOrganizationConformancePack for the first time, conformance pack status is created in all the member accounts. When master account calls PutOrganizationConformancePack for the second time, conformance pack status is updated in all the member accounts. Additionally, conformance pack status is updated when one or more member accounts join or leave an organization. Conformance pack status is deleted when the master account deletes OrganizationConformancePack in all the member accounts and disables service access for Config sets the state of the conformance pack to: Indicates deployment status of an organization conformance pack. When management account calls PutOrganizationConformancePack for the first time, conformance pack status is created in all the member accounts. When management account calls PutOrganizationConformancePack for the second time, conformance pack status is updated in all the member accounts. Additionally, conformance pack status is updated when one or more member accounts join or leave an organization. Conformance pack status is deleted when the management account deletes OrganizationConformancePack in all the member accounts and disables service access for Config sets the state of the conformance pack to: You have specified a template that is not valid or supported. You have specified a template that is invalid or supported. Indicates deployment status for conformance pack in a member account. When master account calls Config sets the state of the conformance pack to: Indicates deployment status for conformance pack in a member account. When management account calls Config sets the state of the conformance pack to: Status filter object to filter results based on specific member account ID or status type for an organization conformance pack. The location of the file containing the template body ( You must have access to read Amazon S3 bucket. The location of the file containing the template body ( You must have access to read Amazon S3 bucket. A string containing the full conformance pack template body. The structure containing the template body has a minimum length of 1 byte and a maximum length of 51,200 bytes. You can only use a YAML template with two resource types: Config rule ( A string containing the full conformance pack template body. The structure containing the template body has a minimum length of 1 byte and a maximum length of 51,200 bytes. You can use a YAML template with two resource types: Config rule ( Indicates deployment status for Config rule in the member account. When master account calls Config sets the state of the rule to: Indicates deployment status for Config rule in the member account. When management account calls Config sets the state of the rule to: Status filter object to filter results based on specific member account ID or status type for an organization Config rule. The name or Amazon Resource Name (ARN) of the SSM document to use to create a conformance pack. If you use the Document Name, Config checks only your account and region for the SSM document. If you want to use an SSM document from another region or account, you must provide the ARN. The name or Amazon Resource Name (ARN) of the SSM document to use to create a conformance pack. If you use the document name, Config checks only your account and Amazon Web Services Region for the SSM document. If you want to use an SSM document from another Region or account, you must provide the ARN. The version of the SSM document to use to create a conformance pack. By default, Config uses the latest version. This field is optional. This API allows you to create a conformance pack template with an Amazon Web Services Systems Manager document (SSM document). To deploy a conformance pack using an SSM document, you first create an SSM document with conformance pack content, and then provide the The This API allows you to create a conformance pack template with an Amazon Web Services Systems Manager document (SSM document). To deploy a conformance pack using an SSM document, first create an SSM document with conformance pack content, and then provide the The You have reached the limit of the number of tags you can use. You have more than 50 tags. You have reached the limit of the number of tags you can use. For more information, see Service Limits in the Config Developer Guide. The requested action is not valid. For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries. For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation. The requested action is invalid. For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries. For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation. Associates a flow with a phone number claimed to your Amazon Connect instance. Associates a flow with a phone number claimed to your Amazon Connect instance. If the number is claimed to a traffic distribution group, and you are calling this API using an instance in the Amazon Web Services Region where the traffic distribution group was created, you can use either a full phone number ARN or UUID value for the Claims an available phone number to your Amazon Connect instance. Claims an available phone number to your Amazon Connect instance or traffic distribution group. You can call this API only in the same Amazon Web Services Region where the Amazon Connect instance or traffic distribution group was created. You can call the DescribePhoneNumber API to verify the status of a previous ClaimPhoneNumber operation. This API is in preview release for Amazon Connect and is subject to change. Creates a new queue for the specified Amazon Connect instance. This API is in preview release for Amazon Connect and is subject to change. Creates a new queue for the specified Amazon Connect instance. If the number being used in the input is claimed to a traffic distribution group, and you are calling this API using an instance in the Amazon Web Services Region where the traffic distribution group was created, you can use either a full phone number ARN or UUID value for the Creates a new task template in the specified Amazon Connect instance. Creates a traffic distribution group given an Amazon Connect instance that has been replicated. For more information about creating traffic distribution groups, see Set up traffic distribution groups in the Amazon Connect Administrator Guide. Deletes the task template. Deletes a traffic distribution group. This API can be called only in the Region where the traffic distribution group is created. For more information about deleting traffic distribution groups, see Delete traffic distribution groups in the Amazon Connect Administrator Guide. Gets details and status of a phone number that’s claimed to your Amazon Connect instance Gets details and status of a phone number that’s claimed to your Amazon Connect instance or traffic distribution group. If the number is claimed to a traffic distribution group, and you are calling in the Amazon Web Services Region where the traffic distribution group was created, you can use either a phone number ARN or UUID value for the This API is in preview release for Amazon Connect and is subject to change. Gets basic information about the security profle. Gets details and status of a traffic distribution group. Removes the flow association from a phone number claimed to your Amazon Connect instance, if a flow association exists. Removes the flow association from a phone number claimed to your Amazon Connect instance. If the number is claimed to a traffic distribution group, and you are calling this API using an instance in the Amazon Web Services Region where the traffic distribution group was created, you can use either a full phone number ARN or UUID value for the Gets details about a specific task template in the specified Amazon Connect instance. Retrieves the current traffic distribution for a given traffic distribution group. Provides information about the phone numbers for the specified Amazon Connect instance. For more information about phone numbers, see Set Up Phone Numbers for Your Contact Center in the Amazon Connect Administrator Guide. Provides information about the phone numbers for the specified Amazon Connect instance. For more information about phone numbers, see Set Up Phone Numbers for Your Contact Center in the Amazon Connect Administrator Guide. The phone number Lists phone numbers claimed to your Amazon Connect instance. For more information about phone numbers, see Set Up Phone Numbers for Your Contact Center in the Amazon Connect Administrator Guide. Lists phone numbers claimed to your Amazon Connect instance or traffic distribution group. If the provided For more information about phone numbers, see Set Up Phone Numbers for Your Contact Center in the Amazon Connect Administrator Guide. Lists task templates for the specified Amazon Connect instance. Lists traffic distribution groups. Releases a phone number previously claimed to an Amazon Connect instance. Releases a phone number previously claimed to an Amazon Connect instance or traffic distribution group. You can call this API only in the Amazon Web Services Region where the number was claimed. To release phone numbers from a traffic distribution group, use the After releasing a phone number, the phone number enters into a cooldown period of 30 days. It cannot be searched for or claimed again until the period has ended. If you accidentally release a phone number, contact Amazon Web Services Support. Replicates an Amazon Connect instance in the specified Amazon Web Services Region. For more information about replicating an Amazon Connect instance, see Create a replica of your existing Amazon Connect instance in the Amazon Connect Administrator Guide. Searches for available phone numbers that you can claim to your Amazon Connect instance. Searches for available phone numbers that you can claim to your Amazon Connect instance or traffic distribution group. If the provided Searches users in an Amazon Connect instance, with optional filtering. Searches users in an Amazon Connect instance, with optional filtering. Updates your claimed phone number from its current Amazon Connect instance to another Amazon Connect instance in the same Region. Updates your claimed phone number from its current Amazon Connect instance or traffic distribution group to another Amazon Connect instance or traffic distribution group in the same Amazon Web Services Region. You can call DescribePhoneNumber API to verify the status of a previous UpdatePhoneNumber operation. This API is in preview release for Amazon Connect and is subject to change. Updates the outbound caller ID name, number, and outbound whisper flow for a specified queue. This API is in preview release for Amazon Connect and is subject to change. Updates the outbound caller ID name, number, and outbound whisper flow for a specified queue. If the number being used in the input is claimed to a traffic distribution group, and you are calling this API using an instance in the Amazon Web Services Region where the traffic distribution group was created, you can use either a full phone number ARN or UUID value for the Updates details about a specific task template in the specified Amazon Connect instance. This operation does not support partial updates. Instead it does a full update of template content. Updates the traffic distribution for a given traffic distribution group. For more information about updating a traffic distribution group see Update telephony traffic distribution across Amazon Web Services Regions in the Amazon Connect Administrator Guide. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. The status of the phone number. The status of the phone number. You will not be billed for the phone number during the 1-day period if number claiming fails. Information about a phone number that has been claimed to your Amazon Connect instance. Information about a phone number that has been claimed to your Amazon Connect instance or traffic distribution group. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The name for the traffic distribution group. A description for the traffic distribution group. The identifier of the Amazon Connect instance that has been replicated. You can find the A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. The Amazon Resource Name (ARN) of the traffic distribution group. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If a create request is received more than once with same client token, subsequent requests return the previous response without creating a vocabulary again. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. If a create request is received more than once with same client token, subsequent requests return the previous response without creating a vocabulary again. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. Information about a phone number that's been claimed to your Amazon Connect instance. Information about a phone number that's been claimed to your Amazon Connect instance or traffic distribution group. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. Information about the traffic distribution group. The Region in which the Amazon Lex bot has been created. The Amazon Web Services Region in which the Amazon Lex bot has been created. The Amazon Web Services Region where the traffic is distributed. The percentage of the traffic that is distributed, in increments of 10. Information about a traffic distribution. The identifier of the traffic distribution group. The distribution of traffic between the instance and its replicas. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. The Amazon Resource Name (ARN) of the traffic distribution group. The Amazon Connect instance. The Region that the Amazon Lex bot was created in. The Amazon Web Services Region where the Amazon Lex bot was created. Configuration information of an Amazon Lex bot. The names and Regions of the Amazon Lex or Amazon Lex V2 bots associated with the specified instance. The names and Amazon Web Services Regions of the Amazon Lex or Amazon Lex V2 bots associated with the specified instance. The names and Regions of the Amazon Lex bots associated with the specified instance. The names and Amazon Web Services Regions of the Amazon Lex bots associated with the specified instance. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. Information about phone numbers that have been claimed to your Amazon Connect instance. Information about phone numbers that have been claimed to your Amazon Connect instance or traffic distribution group. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. If The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. If Information about phone numbers that have been claimed to your Amazon Connect instances. Information about phone numbers that have been claimed to your Amazon Connect instances or traffic distribution groups. The maximum number of results to return per page. The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results. The identifier of the Amazon Connect instance. You can find the instanceId in the ARN of the instance. If there are additional results, this is the token for the next set of results. A list of traffic distribution groups. The status message. The status of the phone number. The status of the phone number. The identifier of the agent who accepted the contact. The unique identifier for the queue. The type of the reference. The type of the reference. Well-formed data on a contact, used by agents to complete a contact request. You can have up to 4,096 UTF-8 bytes across all references for a contact. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The identifier of the Amazon Connect instance. You can find the instanceId in the ARN of the instance. The Amazon Web Services Region where to replicate the Amazon Connect instance. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The alias for the replicated instance. The The identifier of the replicated instance. You can find the The Amazon Resource Name (ARN) of the replicated instance. The resource is not ready. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. A list of available phone numbers that you can claim for your Amazon Connect instance. A list of available phone numbers that you can claim to your Amazon Connect instance or traffic distribution group. The search criteria to be used to return security profiles. The search criteria to be used to return security profiles. The currently supported value for A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. The token is valid for 7 days after creation. If a contact is already started, the contact ID is returned. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The token is valid for 7 days after creation. If a contact is already started, the contact ID is returned. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The type of comparison to be made when evaluating the string condition. A leaf node condition which can be used to specify a string condition, for example, A leaf node condition which can be used to specify a string condition. The currently supported value for Information about traffic distributions. The distribution of traffic between the instance and its replicas. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. The Amazon Resource Name (ARN) of the traffic distribution group. The name of the traffic distribution group. The description of the traffic distribution group. The Amazon Resource Name (ARN). The status of the traffic distribution group. The tags used to organize, track, or control access for this resource. For example, { \"tags\": {\"key1\":\"value1\", \"key2\":\"value2\"} }. Information about a traffic distribution group. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. The Amazon Resource Name (ARN) of the traffic distribution group. The name of the traffic distribution group. The Amazon Resource Name (ARN) of the traffic distribution group. The status of the traffic distribution group. Information about traffic distribution groups. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The Amazon Resource Name (ARN) for Amazon Connect instances that phone numbers are claimed to. The Amazon Resource Name (ARN) for Amazon Connect instances or traffic distribution groups that phone numbers are claimed to. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs. The identifier of the traffic distribution group. This can be the ID or the ARN if the API is being called in the Region where the traffic distribution group was created. The ARN must be provided if the call is from the replicated Region. The distribution of traffic between the instance and its replica(s). The tags. Contains information about a user account for a Amazon Connect instance. Contains information about a user account for an Amazon Connect instance. Information about the user for the data that is returned. It contains resourceId and ARN of the user. Information about the user for the data that is returned. It contains the A map of maximum slots by channel. The key is a channel name. The value is an integer: the maximum number of slots. This is calculated from MediaConcurrency of the RoutingProfile assigned to the agent. A map of maximum slots by channel. The key is a channel name. The value is an integer: the maximum number of slots. This is calculated from MediaConcurrency of the The user's secondary email address. If you provide a secondary email, the user receives email notifications -- other than password reset notifications -- to this email address instead of to their primary email address. The user's secondary email address. If you provide a secondary email, the user receives email notifications - other than password reset notifications - to this email address instead of to their primary email address. Pattern: The After Call Work (ACW) timeout setting, in seconds. The After Call Work (ACW) timeout setting, in seconds. When returned by a Returns a list of insights in your Amazon Web Services account. You can specify which insights are returned by their start time, one or more statuses ( Use the Returns a list of insights in your Amazon Web Services account. You can specify which insights are returned by their start time, one or more statuses ( Use the Information about your account's integration with Amazon CodeGuru Profiler. This returns whether DevOps Guru is configured to consume recommendations generated from Amazon CodeGuru Profiler. Information about the health of the Amazon Web Services resources in your account that are specified by an Amazon Web Services CloudFormation stack, including the number of open proactive, open reactive insights, and the Mean Time to Recover (MTTR) of closed insights. Number of resources that DevOps Guru is monitoring in your account that are specified by an Amazon Web Services CloudFormation stack. Information about the health of Amazon Web Services resources in your account that are specified by an Amazon Web Services CloudFormation stack. The number of Amazon DevOps Guru resource analysis hours billed to the current Amazon Web Services account in the last hour. Number of resources that DevOps Guru is monitoring in your Amazon Web Services account. The permission status of a resource. The time at which DevOps Guru last updated this resource. Information about the resource that is being monitored, including the name of the resource, the type of resource, and whether or not permission is given to DevOps Guru to access that resource. Represents the health of an Amazon Web Services service. This is a Number of resources that DevOps Guru is monitoring in an analyzed Amazon Web Services service. Represents the health of an Amazon Web Services service. Information about the health of the Amazon Web Services resources in your account that are specified by an Amazon Web Services tag, including the number of open proactive, open reactive insights, and the Mean Time to Recover (MTTR) of closed insights. Number of resources that DevOps Guru is monitoring in your account that are specified by an Amazon Web Services tag. Information about the health of Amazon Web Services resources in your account that are specified by an Amazon Web Services tag key. The URL subdomain of the endpoint. For example, if the URL for Endpoint is abcde.veo.endpoints.event.amazonaws.com, then the EndpointId is When using Java, you must include The URL subdomain of the endpoint. For example, if the URL for Endpoint is abcde.veo.endpoints.event.amazonaws.com, then the EndpointId is When using Java, you must include Associate a virtual private cloud (VPC) subnet endpoint with your custom routing accelerator. The listener port range must be large enough to support the number of IP addresses that can be specified in your subnet. The number of ports required is: subnet size times the number of ports per destination EC2 instances. For example, a subnet defined as /24 requires a listener port range of at least 255 ports. Note: You must have enough remaining listener ports available to map to the subnet ports, or the call will fail with a LimitExceededException. By default, all destinations in a subnet in a custom routing accelerator cannot receive traffic. To enable all destinations to receive traffic, or to specify individual port mappings that can receive traffic, see the AllowCustomRoutingTraffic operation. Add endpoints to an endpoint group. The There are two advantages to using It's faster, because Global Accelerator only has to resolve the new endpoints that you're adding. It's more convenient, because you don't need to specify all of the current endpoints that are already in the endpoint group in addition to the new endpoints that you want to add. Remove endpoints from a custom routing accelerator. Remove endpoints from an endpoint group. The It's more convenient, because you only need to specify the endpoints that you want to remove. With the It's faster, because Global Accelerator doesn't need to resolve any endpoints. With the The Domain Name System (DNS) name that Global Accelerator creates that points to an accelerator's static IPv4 addresses. The naming convention for the DNS name for an accelerator is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .awsglobalaccelerator.com. For example: a1234567890abcdef.awsglobalaccelerator.com. If you have a dual-stack accelerator, you also have a second DNS name, DualStackDnsName, that points to both the A record and the AAAA record for all four static addresses for the accelerator (two IPv4 addresses and two IPv6 addresses). For more information about the default DNS name, see Support for DNS Addressing in Global Accelerator in the Global Accelerator Developer Guide. The Domain Name System (DNS) name that Global Accelerator creates that points to an accelerator's static IPv4 addresses. The naming convention for the DNS name for an accelerator is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .awsglobalaccelerator.com. For example: a1234567890abcdef.awsglobalaccelerator.com. If you have a dual-stack accelerator, you also have a second DNS name, For more information about the default DNS name, see Support for DNS addressing in Global Accelerator in the Global Accelerator Developer Guide. The Domain Name System (DNS) name that Global Accelerator creates that points to a dual-stack accelerator's four static IP addresses: two IPv4 addresses and two IPv6 addresses. The naming convention for the dual-stack DNS name is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .dualstack.awsglobalaccelerator.com. For example: a1234567890abcdef.dualstack.awsglobalaccelerator.com. Note: Global Accelerator also assigns a default DNS name, DnsName, to your accelerator that points just to the static IPv4 addresses. For more information, see Support for DNS Addressing in Global Accelerator in the Global Accelerator Developer Guide. The Domain Name System (DNS) name that Global Accelerator creates that points to a dual-stack accelerator's four static IP addresses: two IPv4 addresses and two IPv6 addresses. The naming convention for the dual-stack DNS name is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .dualstack.awsglobalaccelerator.com. For example: a1234567890abcdef.dualstack.awsglobalaccelerator.com. Note: Global Accelerator also assigns a default DNS name, For more information, see Support for DNS addressing in Global Accelerator in the Global Accelerator Developer Guide. The list of endpoint objects. The Amazon Resource Name (ARN) of the endpoint group. The list of endpoint objects. The Amazon Resource Name (ARN) of the endpoint group. The Domain Name System (DNS) name that Global Accelerator creates that points to an accelerator's static IPv4 addresses. The naming convention for the DNS name is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .awsglobalaccelerator.com. For example: a1234567890abcdef.awsglobalaccelerator.com. If you have a dual-stack accelerator, you also have a second DNS name, DualStackDnsName, that points to both the A record and the AAAA record for all four static addresses for the accelerator (two IPv4 addresses and two IPv6 addresses). For more information about the default DNS name, see Support for DNS Addressing in Global Accelerator in the Global Accelerator Developer Guide. The Domain Name System (DNS) name that Global Accelerator creates that points to an accelerator's static IPv4 addresses. The naming convention for the DNS name is the following: A lowercase letter a, followed by a 16-bit random hex string, followed by .awsglobalaccelerator.com. For example: a1234567890abcdef.awsglobalaccelerator.com. If you have a dual-stack accelerator, you also have a second DNS name, For more information about the default DNS name, see Support for DNS addressing in Global Accelerator in the Global Accelerator Developer Guide. An ID for the endpoint. If the endpoint is a Network Load Balancer or Application Load Balancer, this is the Amazon Resource Name (ARN) of the resource. If the endpoint is an Elastic IP address, this is the Elastic IP address allocation ID. For Amazon EC2 instances, this is the EC2 instance ID. An Application Load Balancer can be either internal or internet-facing. Indicates whether client IP address preservation is enabled for an endpoint. The value is true or false. If the value is set to true, the client's IP address is preserved in the A complex type for an endpoint. Specifies information about the endpoint to remove from the endpoint group. The identifiers of the endpoints that you want to remove. The Amazon Resource Name (ARN) of the endpoint group. There's already a transaction in progress. Another transaction can't be processed. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. Creates a new accessor for use with Managed Blockchain Ethereum nodes. An accessor object is a container that has the information required for token based access to your Ethereum nodes. Creates a proposal for a change to the network that other members of the network can vote on, for example, a proposal to add a new member to the network. Any member can create a proposal. Applies only to Hyperledger Fabric. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. Deletes an accessor that your Amazon Web Services account owns. An accessor object is a container that has the information required for token based access to your Ethereum nodes including, the Deletes a member. Deleting a member removes the member and all associated resources from the network. Applies only to Hyperledger Fabric. Deletes a member. Deleting a member removes the member and all associated resources from the network. Applies only to Hyperledger Fabric. Deletes a node that your AWS account owns. All data on the node is lost and cannot be recovered. Applies to Hyperledger Fabric and Ethereum. Deletes a node that your Amazon Web Services account owns. All data on the node is lost and cannot be recovered. Applies to Hyperledger Fabric and Ethereum. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. Returns detailed information about an accessor. An accessor object is a container that has the information required for token based access to your Ethereum nodes. Returns detailed information about a proposal. Applies only to Hyperledger Fabric. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. Returns a list of the accessors and their properties. Accessor objects are containers that have the information required for token based access to your Ethereum nodes. Returns a list of all invitations for the current AWS account. Applies only to Hyperledger Fabric. Returns a list of all invitations for the current Amazon Web Services account. Applies only to Hyperledger Fabric. Returns information about the networks in which the current AWS account participates. Applies to Hyperledger Fabric and Ethereum. Returns information about the networks in which the current Amazon Web Services account participates. Applies to Hyperledger Fabric and Ethereum. Rejects an invitation to join a network. This action can be called by a principal in an AWS account that has received an invitation to create a member and join a network. Applies only to Hyperledger Fabric. Rejects an invitation to join a network. This action can be called by a principal in an Amazon Web Services account that has received an invitation to create a member and join a network. Applies only to Hyperledger Fabric. Casts a vote for a specified Applies only to Hyperledger Fabric. Casts a vote for a specified Applies only to Hyperledger Fabric. You do not have sufficient access to perform this action. You don't have sufficient access to perform this action. The unique identifier of the accessor. The type of the accessor. Currently accessor type is restricted to The billing token is a property of the accessor. Use this token to make Ethereum API calls to your Ethereum node. The billing token is used to track your accessor object for billing Ethereum API requests made to your Ethereum nodes. The current status of the accessor. The creation date and time of the accessor. The Amazon Resource Name (ARN) of the accessor. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. The properties of the Accessor. The unique identifier of the accessor. The type of the accessor. Currently accessor type is restricted to The current status of the accessor. The creation date and time of the accessor. The Amazon Resource Name (ARN) of the accessor. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The token based access feature is in preview release for Ethereum on Amazon Managed Blockchain and is subject to change. We recommend that you use this feature only with test scenarios, and not in production environments. A summary of accessor properties. The duration from the time that a proposal is created until it expires. If members cast neither the required number of The duration from the time that a proposal is created until it expires. If members cast neither the required number of This is a unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than once. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an Amazon Web Services SDK or the Amazon Web Services CLI. The type of accessor. Currently accessor type is restricted to The unique identifier of the accessor. The billing token is a property of the Accessor. Use this token to make Ethereum API calls to your Ethereum node. The billing token is used to track your accessor object for billing Ethereum API requests made to your Ethereum nodes. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an AWS SDK or the AWS CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an Amazon Web Services SDK or the CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an AWS SDK or the AWS CLI. This is a unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than once. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an Amazon Web Services SDK or the Amazon Web Services CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an AWS SDK or the AWS CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an Amazon Web Services SDK or the CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an AWS SDK or the AWS CLI. A unique, case-sensitive identifier that you provide to ensure the idempotency of the operation. An idempotent operation completes no more than one time. This identifier is required only if you make a service request directly using an HTTP client. It is generated automatically if you use an Amazon Web Services SDK or the CLI. The unique identifier of the member that is creating the proposal. This identifier is especially useful for identifying the member making the proposal when multiple members exist in a single AWS account. The unique identifier of the member that is creating the proposal. This identifier is especially useful for identifying the member making the proposal when multiple members exist in a single Amazon Web Services account. The unique identifier of the accessor. The unique identifier of the accessor. The properties of the accessor. The status of the invitation: The status of the invitation: The Amazon Resource Name (ARN) of the invitation. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the invitation. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. An invitation to an AWS account to create a member and join the network. Applies only to Hyperledger Fabric. An invitation to an Amazon Web Services account to create a member and join the network. Applies only to Hyperledger Fabric. The AWS account ID to invite. The Amazon Web Services account ID to invite. An action to invite a specific AWS account to create a member and join the network. The Applies only to Hyperledger Fabric. An action to invite a specific Amazon Web Services account to create a member and join the network. The Applies only to Hyperledger Fabric. The maximum number of accessors to list. The pagination token that indicates the next set of results to retrieve. An array of AccessorSummary objects that contain configuration properties for each accessor. The pagination token that indicates the next set of results to retrieve. An optional Boolean value. If provided, the request is limited either to members that the current AWS account owns ( An optional Boolean value. If provided, the request is limited either to members that the current Amazon Web Services account owns ( The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The status of a member. The effect of disabling or deleting a key, or revoking a grant is not immediate. The member resource might take some time to find that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. The status of a member. The effect of disabling or deleting a key or of revoking a grant isn't immediate. It might take some time for the member resource to discover that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. The Amazon Resource Name (ARN) of the member. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the member. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The Amazon Resource Name (ARN) of the customer managed key in AWS Key Management Service (AWS KMS) that the member uses for encryption at rest. If the value of this parameter is The Amazon Resource Name (ARN) of the customer managed key in Key Management Service (KMS) that the member uses for encryption at rest. If the value of this parameter is For more information, see Encryption at Rest in the Amazon Managed Blockchain Hyperledger Fabric Developer Guide. Member configuration properties. Applies only to Hyperledger Fabric. The Amazon Resource Name (ARN) of the customer managed key in AWS Key Management Service (AWS KMS) to use for encryption at rest in the member. This parameter is inherited by any nodes that this member creates. Use one of the following options to specify this parameter: Undefined or empty string - The member uses an AWS owned KMS key for encryption by default. A valid symmetric customer managed KMS key - The member uses the specified key for encryption. Amazon Managed Blockchain doesn't support asymmetric keys. For more information, see Using symmetric and asymmetric keys in the AWS Key Management Service Developer Guide. The following is an example of a KMS key ARN: The Amazon Resource Name (ARN) of the customer managed key in Key Management Service (KMS) to use for encryption at rest in the member. This parameter is inherited by any nodes that this member creates. For more information, see Encryption at Rest in the Amazon Managed Blockchain Hyperledger Fabric Developer Guide. Use one of the following options to specify this parameter: Undefined or empty string - By default, use an KMS key that is owned and managed by Amazon Web Services on your behalf. A valid symmetric customer managed KMS key - Use the specified KMS key in your account that you create, own, and manage. Amazon Managed Blockchain doesn't support asymmetric keys. For more information, see Using symmetric and asymmetric keys in the Key Management Service Developer Guide. The following is an example of a KMS key ARN: Configuration properties of the member. Applies only to Hyperledger Fabric. The status of the member. The effect of disabling or deleting a key, or revoking a grant is not immediate. The member resource might take some time to find that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. The status of the member. The effect of disabling or deleting a key or of revoking a grant isn't immediate. It might take some time for the member resource to discover that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. An indicator of whether the member is owned by your AWS account or a different AWS account. An indicator of whether the member is owned by your Amazon Web Services account or a different Amazon Web Services account. The Amazon Resource Name (ARN) of the member. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the member. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. A summary of configuration properties for a member. Applies only to Hyperledger Fabric. The Amazon Resource Name (ARN) of the network. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the network. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. Network configuration properties. The Amazon Resource Name (ARN) of the network. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the network. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. A summary of network configuration properties. The status of the node. The effect of disabling or deleting a key, or revoking a grant is not immediate. The node resource might take some time to find that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. The status of the node. The effect of disabling or deleting a key or of revoking a grant isn't immediate. It might take some time for the node resource to discover that the key is inaccessible. When a resource is in this state, we recommend deleting and recreating the resource. The Amazon Resource Name (ARN) of the node. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the node. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The Amazon Resource Name (ARN) of the customer managed key in AWS Key Management Service (AWS KMS) that the node uses for encryption at rest. If the value of this parameter is Applies only to Hyperledger Fabric. The Amazon Resource Name (ARN) of the customer managed key in Key Management Service (KMS) that the node uses for encryption at rest. If the value of this parameter is For more information, see Encryption at Rest in the Amazon Managed Blockchain Hyperledger Fabric Developer Guide. Applies only to Hyperledger Fabric. Configuration properties of a node. The endpoint on which the Ethereum node listens to run Ethereum JSON-RPC methods over HTTP connections from a client. Use this endpoint in client code for smart contracts when using an HTTP connection. Connections to this endpoint are authenticated using Signature Version 4. The endpoint on which the Ethereum node listens to run Ethereum API methods over HTTP connections from a client. Use this endpoint in client code for smart contracts when using an HTTP connection. Connections to this endpoint are authenticated using Signature Version 4. The Amazon Resource Name (ARN) of the node. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the node. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. A summary of configuration properties for a node. The status of the proposal. Values are as follows: The status of the proposal. Values are as follows: The date and time that the proposal expires. This is the The date and time that the proposal expires. This is the The Amazon Resource Name (ARN) of the proposal. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the proposal. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. Properties of a proposal on a Managed Blockchain network. Applies only to Hyperledger Fabric. The actions to perform for an The actions to perform for an The status of the proposal. Values are as follows: The status of the proposal. Values are as follows: The date and time that the proposal expires. This is the The date and time that the proposal expires. This is the The Amazon Resource Name (ARN) of the proposal. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the proposal. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. Properties of a proposal. Applies only to Hyperledger Fabric. A requested resource does not exist. It may have been deleted or referenced inaccurately. A requested resource doesn't exist. It may have been deleted or referenced inaccurately. A requested resource does not exist. It may have been deleted or referenced inaccurately. A requested resource doesn't exist. It may have been deleted or referenced incorrectly. The requested resource exists but is not in a status that can complete the operation. The requested resource exists but isn't in a status that can complete the operation. The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The request or operation could not be performed because a service is throttling requests. The most common source of throttling errors is launching EC2 instances such that your service limit for EC2 instances is exceeded. Request a limit increase or delete unused resources if possible. The request or operation couldn't be performed because a service is throttling requests. The most common source of throttling errors is creating resources that exceed your service limit for this resource type. Request a limit increase or delete unused resources if possible. The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the AWS General Reference. The Amazon Resource Name (ARN) of the resource. For more information about ARNs and their format, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference. The voting rules for the network to decide if a proposal is accepted Applies only to Hyperledger Fabric. Amazon Managed Blockchain is a fully managed service for creating and managing blockchain networks using open-source frameworks. Blockchain allows you to build applications where multiple parties can securely and transparently run transactions and share data without the need for a trusted, central authority. Managed Blockchain supports the Hyperledger Fabric and Ethereum open-source frameworks. Because of fundamental differences between the frameworks, some API actions or data types may only apply in the context of one framework and not the other. For example, actions related to Hyperledger Fabric network members such as The description for each action indicates the framework or frameworks to which it applies. Data types and properties that apply only in the context of a particular framework are similarly indicated. Amazon Managed Blockchain is a fully managed service for creating and managing blockchain networks using open-source frameworks. Blockchain allows you to build applications where multiple parties can securely and transparently run transactions and share data without the need for a trusted, central authority. Managed Blockchain supports the Hyperledger Fabric and Ethereum open-source frameworks. Because of fundamental differences between the frameworks, some API actions or data types may only apply in the context of one framework and not the other. For example, actions related to Hyperledger Fabric network members such as The description for each action indicates the framework or frameworks to which it applies. Data types and properties that apply only in the context of a particular framework are similarly indicated. The status of the action. The status of the application. The current resiliency score for the application. The status of the application. Defines an application summary. The type of resiliency policy to be created, including the recovery time objective (RTO) and recovery point objective (RPO) in seconds. If you do not want to specify regional targets for a regional policy, you must set the values of The type of resiliency policy to be created, including the recovery time objective (RTO) and recovery point objective (RPO) in seconds. Specifies the extended metrics that you want a CloudWatch RUM app monitor to send to a destination. Valid destinations include CloudWatch and Evidently. By default, RUM app monitors send some metrics to CloudWatch. These default metrics are listed in CloudWatch metrics that you can collect with CloudWatch RUM. If you also send extended metrics, you can send metrics to Evidently as well as CloudWatch, and you can also optionally send the metrics with additional dimensions. The valid dimension names for the additional dimensions are The maximum number of metric definitions that you can specify in one Removes the specified metrics from being sent to an extended metrics destination. If some metric definition IDs specified in a The maximum number of metric definitions that you can specify in one Retrieves the list of metrics and dimensions that a RUM app monitor is sending to a single destination. Deletes an existing app monitor. This immediately stops the collection of data. Deletes a destination for CloudWatch RUM extended metrics, so that the specified app monitor stops sending extended metrics to that destination. Returns a list of the Amazon CloudWatch RUM app monitors in the account. Returns a list of destinations that you have created to receive RUM extended metrics, for the specified app monitor. For more information about extended metrics, see AddRumMetrics. Sends telemetry events about your application performance and user behavior to CloudWatch RUM. The code snippet that RUM generates for you to add to your application includes Each Creates or updates a destination to receive extended metrics from CloudWatch RUM. You can send extended metrics to CloudWatch or to a CloudWatch Evidently experiment. For more information about extended metrics, see AddRumMetrics. Updates the configuration of an existing app monitor. When you use this operation, only the parts of the app monitor configuration that you specify in this operation are changed. For any parameters that you omit, the existing values are kept. You can't use this operation to change the tags of an existing app monitor. To change the tags of an existing app monitor, use TagResource. To create a new app monitor, use CreateAppMonitor. After you update an app monitor, sign in to the CloudWatch RUM console to get the updated JavaScript code snippet to add to your web application. For more information, see How do I find a code snippet that I've already generated? Modifies one existing metric definition for CloudWatch RUM extended metrics. For more information about extended metrics, see BatchCreateRumMetricsDefinitions. A list of pages in the CloudWatch RUM console that are to be displayed with a \"favorite\" icon. A list of pages in your application that are to be displayed with a \"favorite\" icon in the CloudWatch RUM console. Specifies the percentage of user sessions to use for RUM data collection. Choosing a higher percentage gives you more data but also incurs more costs. The number you specify is the percentage of user sessions that will be used. If you omit this parameter, the default of 10 is used. Specifies the portion of user sessions to use for RUM data collection. Choosing a higher portion gives you more data but also incurs more costs. The range for this value is 0 to 1 inclusive. Setting this to 1 means that 100% of user sessions are sampled, and setting it to 0.1 means that 10% of user sessions are sampled. If you omit this parameter, the default of 0.1 is used, and 10% of sessions will be sampled. The error code. The error message for this metric definition. The metric definition that caused this error. A structure that defines one error caused by a BatchCreateRumMetricsDefinitions operation. The name of the CloudWatch RUM app monitor that is to send the metrics. The destination to send the metrics to. Valid values are This parameter is required if This parameter specifies the ARN of the Evidently experiment that is to receive the metrics. You must have already defined this experiment as a valid destination. For more information, see PutRumMetricsDestination. An array of structures which define the metrics that you want to send. An array of error objects, if the operation caused any errors. An array of structures that define the extended metrics. The error code. The error message for this metric definition. The ID of the metric definition that caused this error. A structure that defines one error caused by a BatchCreateRumMetricsDefinitions operation. The name of the CloudWatch RUM app monitor that is sending these metrics. Defines the destination where you want to stop sending the specified metrics. Valid values are This parameter is required if This parameter specifies the ARN of the Evidently experiment that was receiving the metrics that are being deleted. An array of structures which define the metrics that you want to stop sending. An array of error objects, if the operation caused any errors. The IDs of the metric definitions that were deleted. The name of the CloudWatch RUM app monitor that is sending the metrics. The type of destination that you want to view metrics for. Valid values are This parameter is required if This parameter specifies the ARN of the Evidently experiment that corresponds to the destination. The maximum number of results to return in one operation. The default is 50. The maximum that you can specify is 100. To retrieve the remaining results, make another call with the returned Use the token returned by the previous operation to request the next page of results. An array of structures that display information about the metrics that are sent by the specified app monitor to the specified destination. A token that you can use in a subsequent operation to retrieve the next set of results. The name of the app monitor that is sending metrics to the destination that you want to delete. The type of destination to delete. Valid values are This parameter is required if The maximum number of results to return in one operation. The maximum number of results to return in one operation. The default is 50. The maximum that you can specify is 100. The name of the app monitor associated with the destinations that you want to retrieve. The maximum number of results to return in one operation. The default is 50. The maximum that you can specify is 100. To retrieve the remaining results, make another call with the returned Use the token returned by the previous operation to request the next page of results. The list of CloudWatch RUM extended metrics destinations associated with the app monitor that you specified. A token that you can use in a subsequent operation to retrieve the next set of results. This field is a map of field paths to dimension names. It defines the dimensions to associate with this metric in CloudWatch The value of this field is used only if the metric destination is The pattern that defines the metric. RUM checks events that happen in a user's session against the pattern, and events that match the pattern are sent to the metric destination. If the metrics destination is The ID of this metric definition. The name of the metric that is defined in this structure. Use this field only if you are sending this metric to CloudWatch. It defines the CloudWatch metric unit that this metric is measured in. The field within the event object that the metric value is sourced from. A structure that displays the definition of one extended metric that RUM sends to CloudWatch or CloudWatch Evidently. For more information, see Additional metrics that you can send to CloudWatch and CloudWatch Evidently. Use this field only if you are sending the metric to CloudWatch. This field is a map of field paths to dimension names. It defines the dimensions to associate with this metric in CloudWatch. Valid values for the entries in this field are the following: The pattern that defines the metric, specified as a JSON object. RUM checks events that happen in a user's session against the pattern, and events that match the pattern are sent to the metric destination. When you define extended metrics, the metric definition is not valid if Example event patterns: If the metrics destination' is The name for the metric that is defined in this structure. Valid values are the following: The CloudWatch metric unit to use for this metric. If you omit this field, the metric is recorded with no unit. The field within the event object that the metric value is sourced from. If you omit this field, a hardcoded value of 1 is pushed as the metric value. This is useful if you just want to count the number of events that the filter catches. If this metric is sent to CloudWatch Evidently, this field will be passed to Evidently raw and Evidently will handle data extraction from the event. Use this structure to define one extended metric that RUM will send to CloudWatch or CloudWatch Evidently. For more information, see Additional metrics that you can send to CloudWatch and CloudWatch Evidently. Only certain combinations of values for If If If If If If If If If If If Specifies whether the destination is If the destination is This field appears only when the destination is A structure that displays information about one destination that CloudWatch RUM sends extended metrics to. The name of the CloudWatch RUM app monitor that will send the metrics. Defines the destination to send the metrics to. Valid values are Use this parameter only if This parameter is required if This parameter specifies the ARN of an IAM role that RUM will assume to write to the Evidently experiment that you are sending metrics to. This role must have permission to write to that experiment. The name of the CloudWatch RUM app monitor that sends these metrics. The destination to send the metrics to. Valid values are This parameter is required if This parameter specifies the ARN of the Evidently experiment that is to receive the metrics. You must have already defined this experiment as a valid destination. For more information, see PutRumMetricsDestination. A structure that contains the new definition that you want to use for this metric. The ID of the metric definition to update. With Amazon CloudWatch RUM, you can perform real-user monitoring to collect client-side data about your web application performance from actual user sessions in real time. The data collected includes page load times, client-side errors, and user behavior. When you view this data, you can see it all aggregated together and also see breakdowns by the browsers and devices that your customers use. Creates a new S3 bucket. To create a bucket, you must register with Amazon S3 and have a valid Amazon Web Services Access Key ID to authenticate requests. Anonymous requests are never allowed to create buckets. By creating the bucket, you become the bucket owner. Not every string is an acceptable bucket name. For information about bucket naming restrictions, see Bucket naming rules. If you want to create an Amazon S3 on Outposts bucket, see Create Bucket. By default, the bucket is created in the US East (N. Virginia) Region. You can optionally specify a Region in the request body. You might choose a Region to optimize latency, minimize costs, or address regulatory requirements. For example, if you reside in Europe, you will probably find it advantageous to create buckets in the Europe (Ireland) Region. For more information, see Accessing a bucket. If you send your create bucket request to the Access control lists (ACLs) When creating a bucket using this operation, you can optionally configure the bucket ACL to specify the accounts or groups that should be granted specific permissions on the bucket. If your CreateBucket request sets bucket owner enforced for S3 Object Ownership and specifies a bucket ACL that provides access to an external Amazon Web Services account, your request fails with a There are two ways to grant the appropriate permissions using the request headers. Specify a canned ACL using the Specify access permissions explicitly using the You specify each grantee as a type=value pair, where the type is one of the following: Using email addresses to specify a grantee is only supported in the following Amazon Web Services Regions: US East (N. Virginia) US West (N. California) US West (Oregon) Asia Pacific (Singapore) Asia Pacific (Sydney) Asia Pacific (Tokyo) Europe (Ireland) South America (São Paulo) For a list of all the Amazon S3 supported Regions and endpoints, see Regions and Endpoints in the Amazon Web Services General Reference. For example, the following You can use either a canned ACL or specify access permissions explicitly. You cannot do both. Permissions In addition to ACLs - If your Object Lock - If S3 Object Ownership - If your CreateBucket request includes the the The following operations are related to The bucket name to which the upload was taking place. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form Name of the bucket to which the multipart upload was initiated. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the destination bucket. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket to create. The name of the bucket to which to initiate the upload When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket from which an analytics configuration is deleted. Specifies the bucket whose The name of the bucket containing the server-side encryption configuration to delete. The name of the Amazon S3 bucket whose configuration you want to modify or retrieve. The name of the bucket containing the inventory configuration to delete. The bucket name of the lifecycle to delete. The name of the bucket containing the metrics configuration to delete. The Amazon S3 bucket whose The bucket name. The bucket name. Specifies the bucket being deleted. The bucket that has the tag set to be removed. The bucket name for which you want to remove the website configuration. The bucket name of the bucket containing the object. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name containing the objects from which to remove the tags. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name containing the objects to delete. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The Amazon S3 bucket whose The name of the bucket for which the accelerate configuration is retrieved. Specifies the S3 bucket whose ACL is being requested. The name of the bucket from which an analytics configuration is retrieved. The bucket name for which to get the cors configuration. The name of the bucket from which the server-side encryption configuration is retrieved. The name of the Amazon S3 bucket whose configuration you want to modify or retrieve. The name of the bucket containing the inventory configuration to retrieve. The name of the bucket for which to get the lifecycle information. The name of the bucket for which to get the lifecycle information. The name of the bucket for which to get the location. The bucket name for which to get the logging information. The name of the bucket containing the metrics configuration to retrieve. The name of the bucket for which to get the notification configuration. The name of the Amazon S3 bucket whose The bucket name for which to get the bucket policy. The name of the Amazon S3 bucket whose policy status you want to retrieve. The bucket name for which to get the replication information. The name of the bucket for which to get the payment request configuration The name of the bucket for which to get the tagging information. The name of the bucket for which to get the versioning information. The bucket name for which to get the website configuration. The bucket name that contains the object for which to get the ACL information. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The name of the bucket that contains the object. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name containing the object whose legal hold status you want to retrieve. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket whose Object Lock configuration you want to retrieve. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket name containing the object. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using an Object Lambda access point the hostname takes the form AccessPointName-AccountId.s3-object-lambda.Region.amazonaws.com. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name containing the object whose retention settings you want to retrieve. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket name containing the object for which to get the tagging information. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket containing the object for which to get the torrent files. The name of the Amazon S3 bucket whose The bucket name. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket containing the object. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket from which analytics configurations are retrieved. The name of the Amazon S3 bucket whose configuration you want to modify or retrieve. The name of the bucket containing the inventory configurations to retrieve. The name of the bucket containing the metrics configurations to retrieve. The name of the bucket to which the multipart upload was initiated. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name that contains the objects. The name of the bucket containing the objects. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form Bucket name to list. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket to which the parts are being uploaded. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket for which the accelerate configuration is set. The bucket to which to apply the ACL. The name of the bucket to which an analytics configuration is stored. Specifies the bucket impacted by the Specifies default encryption for a bucket using server-side encryption with Amazon S3-managed keys (SSE-S3) or customer managed keys (SSE-KMS). For information about the Amazon S3 default encryption feature, see Amazon S3 Default Bucket Encryption in the Amazon S3 User Guide. The name of the Amazon S3 bucket whose configuration you want to modify or retrieve. The name of the bucket where the inventory configuration will be stored. The name of the bucket for which to set the configuration. The name of the bucket for which to set the logging parameters. The name of the bucket for which the metrics configuration is set. The name of the bucket. The name of the bucket. The name of the Amazon S3 bucket whose The name of the bucket. The name of the bucket The bucket name. The bucket name. The bucket name. The bucket name. The bucket name that contains the object to which you want to attach the ACL. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket name containing the object that you want to place a legal hold on. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket whose Object Lock configuration you want to create or replace. The bucket name to which the PUT action was initiated. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The bucket name that contains the object you want to apply this Object Retention configuration to. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. The bucket name containing the object. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the Amazon S3 bucket whose The bucket name containing the object to restore. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The S3 bucket. The bucket name. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form The name of the bucket to which the multipart upload was initiated. When using this action with an access point, you must direct requests to the access point hostname. The access point hostname takes the form AccessPointName-AccountId.s3-accesspoint.Region.amazonaws.com. When using this action with an access point through the Amazon Web Services SDKs, you provide the access point ARN in place of the bucket name. For more information about access point ARNs, see Using access points in the Amazon S3 User Guide. When using this action with Amazon S3 on Outposts, you must direct requests to the S3 on Outposts hostname. The S3 on Outposts hostname takes the form Creates an access point and associates it with the specified bucket. For more information, see Managing Data Access with Amazon S3 Access Points in the Amazon S3 User Guide. S3 on Outposts only supports VPC-style access points. For more information, see Accessing Amazon S3 on Outposts using virtual private cloud (VPC) only access points in the Amazon S3 User Guide. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Creates an Object Lambda Access Point. For more information, see Transforming objects with Object Lambda Access Points in the Amazon S3 User Guide. The following actions are related to You can use S3 Batch Operations to perform large-scale batch actions on Amazon S3 objects. Batch Operations can run a single action on lists of Amazon S3 objects that you specify. For more information, see S3 Batch Operations in the Amazon S3 User Guide. This action creates a S3 Batch Operations job. Related actions include: Deletes the specified access point. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Deletes the specified Object Lambda Access Point. The following actions are related to Deletes the access point policy for the specified access point. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Removes the resource policy for an Object Lambda Access Point. The following actions are related to This action deletes an Amazon S3 on Outposts bucket. To delete an S3 bucket, see DeleteBucket in the Amazon S3 API Reference. Deletes the Amazon S3 on Outposts bucket. All objects (including all object versions and delete markers) in the bucket must be deleted before the bucket itself can be deleted. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of Related Resources This action deletes an Amazon S3 on Outposts bucket's lifecycle configuration. To delete an S3 bucket's lifecycle configuration, see DeleteBucketLifecycle in the Amazon S3 API Reference. Deletes the lifecycle configuration from the specified Outposts bucket. Amazon S3 on Outposts removes all the lifecycle configuration rules in the lifecycle subresource associated with the bucket. Your objects never expire, and Amazon S3 on Outposts no longer automatically deletes any objects on the basis of rules contained in the deleted lifecycle configuration. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide. To use this action, you must have permission to perform the All Amazon S3 on Outposts REST API requests for this action require an additional parameter of For more information about object expiration, see Elements to Describe Lifecycle Actions. Related actions include: This action deletes an Amazon S3 on Outposts bucket policy. To delete an S3 bucket policy, see DeleteBucketPolicy in the Amazon S3 API Reference. This implementation of the DELETE action uses the policy subresource to delete the policy of a specified Amazon S3 on Outposts bucket. If you are using an identity other than the root user of the Amazon Web Services account that owns the bucket, the calling identity must have the If you don't have As a security precaution, the root user of the Amazon Web Services account that owns a bucket can always use this action, even if the policy explicitly denies the root user the ability to perform this action. For more information about bucket policies, see Using Bucket Policies and User Policies. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to This action deletes an Amazon S3 on Outposts bucket's tags. To delete an S3 bucket tags, see DeleteBucketTagging in the Amazon S3 API Reference. Deletes the tags from the Outposts bucket. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide. To use this action, you must have permission to perform the All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Removes the entire tag set from the specified S3 Batch Operations job. To use this operation, you must have permission to perform the Related actions include: Removes the Related actions include: Deletes the Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Deletes the Amazon S3 Storage Lens configuration tags. For more information about S3 Storage Lens, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Retrieves the configuration parameters and status for a Batch Operations job. For more information, see S3 Batch Operations in the Amazon S3 User Guide. Related actions include: Returns configuration information about the specified access point. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Returns configuration for an Object Lambda Access Point. The following actions are related to Returns configuration information about the specified Object Lambda Access Point The following actions are related to Returns the access point policy associated with the specified access point. The following actions are related to Returns the resource policy for an Object Lambda Access Point. The following actions are related to Indicates whether the specified access point currently has a policy that allows public access. For more information about public access through access points, see Managing Data Access with Amazon S3 access points in the Amazon S3 User Guide. Returns the status of the resource policy associated with an Object Lambda Access Point. Gets an Amazon S3 on Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. If you are using an identity other than the root user of the Amazon Web Services account that owns the Outposts bucket, the calling identity must have the If you don't have The following actions are related to All Amazon S3 on Outposts REST API requests for this action require an additional parameter of This action gets an Amazon S3 on Outposts bucket's lifecycle configuration. To get an S3 bucket's lifecycle configuration, see GetBucketLifecycleConfiguration in the Amazon S3 API Reference. Returns the lifecycle configuration information set on the Outposts bucket. For more information, see Using Amazon S3 on Outposts and for information about lifecycle configuration, see Object Lifecycle Management in Amazon S3 User Guide. To use this action, you must have permission to perform the All Amazon S3 on Outposts REST API requests for this action require an additional parameter of Error code: Description: The lifecycle configuration does not exist. HTTP Status Code: 404 Not Found SOAP Fault Code Prefix: Client The following actions are related to This action gets a bucket policy for an Amazon S3 on Outposts bucket. To get a policy for an S3 bucket, see GetBucketPolicy in the Amazon S3 API Reference. Returns the policy of a specified Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. If you are using an identity other than the root user of the Amazon Web Services account that owns the bucket, the calling identity must have the Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket. If you don't have As a security precaution, the root user of the Amazon Web Services account that owns a bucket can always use this action, even if the policy explicitly denies the root user the ability to perform this action. For more information about bucket policies, see Using Bucket Policies and User Policies. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to This action gets an Amazon S3 on Outposts bucket's tags. To get an S3 bucket tags, see GetBucketTagging in the Amazon S3 API Reference. Returns the tag set associated with the Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. To use this action, you must have permission to perform the Error code: Description: There is no tag set associated with the bucket. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Returns the tags on an S3 Batch Operations job. To use this operation, you must have permission to perform the Related actions include: Retrieves the Related actions include: Gets the Amazon S3 Storage Lens configuration. For more information, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Gets the tags of Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Returns a list of the access points currently associated with the specified bucket. You can retrieve up to 1000 access points per call. If the specified bucket has more than 1,000 access points (or the number specified in All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Returns some or all (up to 1,000) access points associated with the Object Lambda Access Point per call. If there are more access points than what can be returned in one call, the response will include a continuation token that you can use to list the additional access points. The following actions are related to Lists current S3 Batch Operations jobs and jobs that have ended within the last 30 days for the Amazon Web Services account making the request. For more information, see S3 Batch Operations in the Amazon S3 User Guide. Related actions include: Returns a list of all Outposts buckets in an Outpost that are owned by the authenticated sender of the request. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and Gets a list of Amazon S3 Storage Lens configurations. For more information about S3 Storage Lens, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Replaces configuration for an Object Lambda Access Point. The following actions are related to Associates an access policy with the specified access point. Each access point can have only one policy, so a request made to this API replaces any existing policy associated with the specified access point. All Amazon S3 on Outposts REST API requests for this action require an additional parameter of The following actions are related to Creates or replaces resource policy for an Object Lambda Access Point. For an example policy, see Creating Object Lambda Access Points in the Amazon S3 User Guide. The following actions are related to Sets the supplied tag-set on an S3 Batch Operations job. A tag is a key-value pair. You can associate S3 Batch Operations tags with any job by sending a PUT request against the tagging subresource that is associated with the job. To modify the existing tag set, you can either replace the existing tag set entirely, or make changes within the existing tag set by retrieving the existing tag set using GetJobTagging, modify that tag set, and use this action to replace the tag set with the one you modified. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide. If you send this request with an empty tag set, Amazon S3 deletes the existing tag set on the Batch Operations job. If you use this method, you are charged for a Tier 1 Request (PUT). For more information, see Amazon S3 pricing. For deleting existing tags for your Batch Operations job, a DeleteJobTagging request is preferred because it achieves the same result without incurring charges. A few things to consider about using tags: Amazon S3 limits the maximum number of tags to 50 tags per job. You can associate up to 50 tags with a job as long as they have unique tag keys. A tag key can be up to 128 Unicode characters in length, and tag values can be up to 256 Unicode characters in length. The key and values are case sensitive. For tagging-related restrictions related to characters and encodings, see User-Defined Tag Restrictions in the Billing and Cost Management User Guide. To use this action, you must have permission to perform the Related actions include: Creates or modifies the Related actions include: Puts an Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Put or replace tags on an existing Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Assessing your storage activity and usage with Amazon S3 Storage Lens in the Amazon S3 User Guide. To use this action, you must have permission to perform the Updates an existing S3 Batch Operations job's priority. For more information, see S3 Batch Operations in the Amazon S3 User Guide. Related actions include: Updates the status for the specified job. Use this action to confirm that you want to run a job or to cancel an existing job. For more information, see S3 Batch Operations in the Amazon S3 User Guide. Related actions include: The Amazon Web Services account ID for owner of the specified Object Lambda Access Point. The Amazon Web Services account ID for the owner of the bucket for which you want to create an access point. The name of the bucket that you want to associate this access point with. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The name of the bucket that you want to associate this access point with. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The name of the bucket. The ID of the Outposts where the bucket is being created. This ID is required by Amazon S3 on Outposts buckets. The Amazon Web Services account ID that creates the job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The owner of the Multi-Region Access Point also must own the underlying buckets. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified access point. The name of the access point whose policy you want to delete. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the access point accessed in the format The account ID for the account that owns the specified access point. The name of the access point you want to delete. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the access point accessed in the format The account ID of the lifecycle configuration to delete. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The account ID of the Outposts bucket. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The account ID that owns the Outposts bucket. Specifies the bucket being deleted. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID of the Outposts bucket tag set to be removed. The bucket ARN that has the tag set to be removed. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The account ID for the Amazon Web Services account whose The account ID of the requester. The account ID of the requester. The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified access point. The name of the access point whose policy you want to retrieve. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the access point accessed in the format The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified access point. The name of the access point whose policy status you want to retrieve. The account ID for the account that owns the specified access point. The name of the access point whose configuration information you want to retrieve. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the access point accessed in the format The Amazon Web Services account ID of the Outposts bucket. The Amazon Resource Name (ARN) of the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID of the Outposts bucket. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID of the Outposts bucket. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID of the Outposts bucket. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The account ID for the Amazon Web Services account whose The account ID of the requester. The account ID of the requester. The account ID for the account that owns the specified Object Lambda Access Point. The Amazon Web Services account ID for owner of the bucket whose access points you want to list. The name of the bucket whose associated access points you want to list. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The Amazon Web Services account ID of the Outposts bucket. The ID of the Outposts resource. This ID is required by Amazon S3 on Outposts buckets. The account ID of the requester. The account ID for the account that owns the specified Object Lambda Access Point. The account ID for the account that owns the specified Object Lambda Access Point. The Amazon Web Services account ID for owner of the bucket associated with the specified access point. The name of the access point that you want to associate with the specified policy. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the access point accessed in the format The Amazon Web Services account ID of the Outposts bucket. The name of the bucket for which to set the configuration. The Amazon Web Services account ID of the Outposts bucket. Specifies the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID of the Outposts bucket. The Amazon Resource Name (ARN) of the bucket. For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well. For using this parameter with S3 on Outposts with the Amazon Web Services SDK and CLI, you must specify the ARN of the bucket accessed in the format The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID for the owner of the Multi-Region Access Point. The account ID for the Amazon Web Services account whose The account ID of the requester. The account ID of the requester. The Amazon Web Services account ID associated with the S3 Batch Operations job. The Amazon Web Services account ID associated with the S3 Batch Operations job. Amazon Web Services S3 Control provides access to Amazon S3 control plane actions. Amazon Web Services S3 Control provides access to Amazon S3 control plane actions. Creates or updates an individual alias for each Amazon Web Services account ID. The alias appears in the Amazon Web Services Support App page of the Amazon Web Services Support Center. The alias also appears in Slack messages from the Amazon Web Services Support App. Registers a Slack workspace for your Amazon Web Services account. To call this API, your account must be part of an organization in Organizations. If you're the management account and you want to register Slack workspaces for your organization, you must complete the following tasks: Sign in to the Amazon Web Services Support Center and authorize the Slack workspaces where you want your organization to have access to. See Authorize a Slack workspace in the Amazon Web Services Support User Guide. Call the After the management account authorizes the Slack workspace, member accounts can call this API to authorize the same Slack workspace for their individual accounts. Member accounts don't need to authorize the Slack workspace manually through the Amazon Web Services Support Center. To use the Amazon Web Services Support App, each account must then complete the following tasks: Create an Identity and Access Management (IAM) role with the required permission. For more information, see Managing access to the Amazon Web Services Support App. Configure a Slack channel to use the Amazon Web Services Support App for support cases for that account. For more information, see Configuring a Slack channel. Your request has a conflict. For example, you might receive this error if you try the following: Add, update, or delete a Slack channel configuration before you add a Slack workspace to your Amazon Web Services account. Add a Slack channel configuration that already exists in your Amazon Web Services account. Delete a Slack channel configuration for a live chat channel. Delete a Slack workspace from your Amazon Web Services account that has an active live chat channel. Your request has a conflict. For example, you might receive this error if you try the following: Add, update, or delete a Slack channel configuration before you add a Slack workspace to your Amazon Web Services account. Add a Slack channel configuration that already exists in your Amazon Web Services account. Delete a Slack channel configuration for a live chat channel. Delete a Slack workspace from your Amazon Web Services account that has an active live chat channel. Call the Call the The case severity for a support case that you want to receive notifications. The case severity for a support case that you want to receive notifications. If you specify If you specify If you don't specify these parameters in your request, they default to The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The team ID in Slack. This ID uniquely identifies a Slack workspace, such as Whether the Amazon Web Services account is a management or member account that's part of an organization in Organizations. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The name of the Slack workspace. The specified resource is missing or doesn't exist, such as an account alias or Slack channel configuration. The specified resource is missing or doesn't exist, such as an account alias, Slack channel configuration, or Slack workspace configuration. The name of the Slack channel that you configured with the Amazon Web Services Support App. The name of the Slack channel that you configured with the Amazon Web Services Support App for your Amazon Web Services account. The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The configuration for a Slack channel that you added to an Amazon Web Services account. The configuration for a Slack channel that you added for your Amazon Web Services account. Whether to allow member accounts to authorize Slack workspaces. Member accounts must be part of an organization in Organizations. The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The name of the Slack workspace. The configuration for a Slack workspace that you added to an Amazon Web Services account. The case severity for a support case that you want to receive notifications. The case severity for a support case that you want to receive notifications. If you specify If you specify If you don't specify these parameters in your request, the Amazon Web Services Support App uses the current values by default. The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as The team ID in Slack. This ID uniquely identifies a Slack workspace. The team ID in Slack. This ID uniquely identifies a Slack workspace, such as You can use the Amazon Web Services Support App in Slack API to manage your support cases in Slack for your Amazon Web Services account. After you configure your Slack workspace and channel with the Amazon Web Services Support App, you can perform the following tasks directly in your Slack channel: Create, search, update, and resolve your support cases Request service quota increases for your account Invite Amazon Web Services Support agents to your channel so that you can chat directly about your support cases For more information about how to perform these actions in Slack, see the following documentation in the Amazon Web Services Support User Guide: You can also use the Amazon Web Services Management Console instead of the Amazon Web Services Support App API to manage your Slack configurations. For more information, see Authorize a Slack workspace to enable the Amazon Web Services Support App.AppInstanceUser
to search the channels that they belong to. The AppInstanceUser
can search by membership or external ID. An AppInstanceAdmin
can search across all channels within the AppInstance
.ChimeBearer
to search channels by channel members. AppInstanceUsers can search across the channels that they belong to. AppInstanceAdmins can search across all channels.Channel
.Destinations
and ImportSource
parameters are required. Before starting a new import, disable any access control lists (ACLs) attached to the source S3 bucket. For more information about disabling ACLs, see Controlling ownership of objects and disabling ACLs for your bucket. ImportID
parameter is required. CloudTrail
prefix and the prefixes inside the CloudTrail
prefix, and does not check prefixes for other Amazon Web Services services. If you want to import CloudTrail events contained in another prefix, you must include the prefix in the S3LocationUri
. For more considerations about importing trail events, see Considerations. Destinations
and ImportSource
parameters are required. Before starting a new import, disable any access control lists (ACLs) attached to the source S3 bucket. For more information about disabling ACLs, see Controlling ownership of objects and disabling ACLs for your bucket. ImportID
parameter is required. QueryStatement
parameter provides your SQL query, enclosed in single quotation marks.QueryStatement
parameter provides your SQL query, enclosed in single quotation marks. Use the optional DeliveryS3Uri
parameter to deliver the query results to an S3 bucket.aws-service-channel/service-name/custom-suffix
where service-name
represents the name of the Amazon Web Services service that created the channel and custom-suffix
represents the suffix created by the Amazon Web Services service. ChannelARN
is not valid.
"
+ "documentation":"alias/
, a fully specified ARN to an alias, a fully specified ARN to a key, or a globally unique identifier.
"
},
"IsOrganizationTrail":{
"shape":"Boolean",
@@ -1158,7 +1162,7 @@
},
"KmsKeyId":{
"shape":"String",
- "documentation":"alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:alias/MyAliasName
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
12345678-1234-1234-1234-123456789012
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
arn:aws:kms:us-east-2:123456789012:key/12345678-1234-1234-1234-123456789012
AWS::S3::Object
AWS::Lambda::Function
AWS::DynamoDB::Table
"
+ "documentation":"AWS::S3Outposts::Object
AWS::ManagedBlockchain::Node
AWS::S3ObjectLambda::AccessPoint
AWS::EC2::Snapshot
AWS::S3::AccessPoint
AWS::DynamoDB::Stream
AWS::Glue::Table
AWS::S3::Object
AWS::Lambda::Function
AWS::DynamoDB::Table
"
},
"Values":{
"shape":"DataResourceValues",
@@ -1222,6 +1226,25 @@
},
"documentation":"AWS::S3Outposts::Object
AWS::ManagedBlockchain::Node
AWS::S3ObjectLambda::AccessPoint
AWS::EC2::Snapshot
AWS::S3::AccessPoint
AWS::DynamoDB::Stream
AWS::Glue::Table
AWS_SERVICE
. AWS_SERVICE
.UUID
of a channel.GetChannel
request.aws-service-channel/service-name/custom-suffix
where service-name
represents the name of the Amazon Web Services service that created the channel and custom-suffix
represents the suffix generated by the Amazon Web Services service. aws-service-channel/service-name/custom-suffix
where service-name
represents the name of the Amazon Web Services service that created the channel and custom-suffix
represents the suffix generated by the Amazon Web Services service. EventsCompleted
may be lower than the actual value, because CloudTrail updates statistics incrementally over the course of the import. ImportID
. ImportID
. CloudTrail does not update import statistics in real-time. Returned values for parameters such as EventsCompleted
may be lower than the actual value, because CloudTrail updates statistics incrementally over the course of the import. EndEventTime
to bound a StartImport
request, and limit imported trail events to only those events logged within a specified time period. EndEventTime
to bound a StartImport
request, and limit imported trail events to only those events logged within a specified time period. When you specify a time range, CloudTrail checks the prefix and log file names to verify the names contain a date between the specified StartEventTime
and EndEventTime
before attempting to import events. StartEventTime
to bound a StartImport
request, and limit imported trail events to only those events logged within a specified time period. StartEventTime
to bound a StartImport
request, and limit imported trail events to only those events logged within a specified time period. When you specify a time range, CloudTrail checks the prefix and log file names to verify the names contain a date between the specified StartEventTime
and EndEventTime
before attempting to import events. ListDelegatedAdministrator
permissions are added.ListDelegatedAdministrator
permissions are added.ListDelegatedAdministrator
permissions are added.ListDelegatedAdministrator
permissions are added.INSUFFICIENT_DATA
.INSUFFICIENT_DATA
.AWSServiceRoleForConfigConforms
in your account. The service-linked role is created only when the role does not exist in your account. TemplateS3Uri
, TemplateBody
or TemplateSSMDocumentDetails
parameters.AWSServiceRoleForConfigConforms
in your account. The service-linked role is created only when the role does not exist in your account. TemplateS3Uri
, TemplateBody
or TemplateSSMDocumentDetails
.ListDelegatedAdministrator
permissions are added. An organization can have up to 3 delegated administrators.EnableAWSServiceAccess
action and creates a service-linked role AWSServiceRoleForConfigMultiAccountSetup
in the master or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. Config verifies the existence of role with GetRole
action.register-delegated-administrator
for config-multiaccountsetup.amazonaws.com
. PutOrganizationConfigRule
to create both Config custom rules and Config managed rules.PutOrganizationConfigRule
to add a Custom Lambda rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function.RuleIdentifier
key.EnableAllFeatures
API to enable all features in an organization.OrganizationCustomPolicyRuleMetadata
for Custom Policy rules, OrganizationCustomRuleMetadata
for Custom Lambda rules, or OrganizationManagedRuleMetadata
for managed rules.ListDelegatedAdministrator
permissions are added. An organization can have up to 3 delegated administrators.EnableAWSServiceAccess
action and creates a service-linked role AWSServiceRoleForConfigMultiAccountSetup
in the management or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. Config verifies the existence of role with GetRole
action.register-delegated-administrator
for config-multiaccountsetup.amazonaws.com
. PutOrganizationConfigRule
to create both Config custom rules and Config managed rules.PutOrganizationConfigRule
to add a Custom Lambda rule to Config, you must specify the Amazon Resource Name (ARN) that Lambda assigns to the function.RuleIdentifier
key.EnableAllFeatures
API to enable all features in an organization.OrganizationCustomPolicyRuleMetadata
for Custom Policy rules, OrganizationCustomRuleMetadata
for Custom Lambda rules, or OrganizationManagedRuleMetadata
for managed rules.ListDelegatedAdministrator
permissions are added. An organization can have up to 3 delegated administrators.config-multiaccountsetup.amazonaws.com
through the EnableAWSServiceAccess
action and creates a service-linked role AWSServiceRoleForConfigMultiAccountSetup
in the master or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegate-admin
for config-multiaccountsetup.amazonaws.com
.EnableAllFeatures
API to enable all features in an organization.TemplateS3Uri
or the TemplateBody
parameter, but not both. If you provide both Config uses the TemplateS3Uri
parameter and ignores the TemplateBody
parameter.ListDelegatedAdministrator
permissions are added. An organization can have up to 3 delegated administrators.config-multiaccountsetup.amazonaws.com
through the EnableAWSServiceAccess
action and creates a service-linked role AWSServiceRoleForConfigMultiAccountSetup
in the management or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. To use this API with delegated administrator, register a delegated administrator by calling Amazon Web Services Organization register-delegate-admin
for config-multiaccountsetup.amazonaws.com
.EnableAllFeatures
API to enable all features in an organization.TemplateS3Uri
or the TemplateBody
parameter, but not both. If you provide both Config uses the TemplateS3Uri
parameter and ignores the TemplateBody
parameter.
",
+ "documentation":"GetRole
action or create a service-linked role.
GetRole
action or create a service-linked role.
",
"exception":true
},
"Integer":{"type":"integer"},
@@ -4802,7 +4802,7 @@
"type":"structure",
"members":{
},
- "documentation":"GetRole
action or create a service-linked role.
GetRole
action or create a service-linked role.INSUFFICIENT_DATA
will be first when sorting by ascending order and last when sorting by descending order.DESCENDING
.SCORE
in the SortBy
action. When compliance scores are sorted by SCORE
, conformance packs with a compliance score of INSUFFICIENT_DATA
will be last when sorting by ascending order and first when sorting by descending order.SortOrder
.SortOrder
.SCORE
, to sort conformance pack compliance scores by the numerical value of the compliance score.DeleteResourceConfig
..
PutOrganizationConfigRule
action for the first time, Config rule status is created in the member account. When master account calls PutOrganizationConfigRule
action for the second time, Config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when Config rule has been created in the member account. CREATE_IN_PROGRESS
when Config rule is being created in the member account.CREATE_FAILED
when Config rule creation has failed in the member account.DELETE_FAILED
when Config rule deletion has failed in the member account.DELETE_IN_PROGRESS
when Config rule is being deleted in the member account.DELETE_SUCCESSFUL
when Config rule has been deleted in the member account. UPDATE_SUCCESSFUL
when Config rule has been updated in the member account.UPDATE_IN_PROGRESS
when Config rule is being updated in the member account.UPDATE_FAILED
when Config rule deletion has failed in the member account.PutOrganizationConfigRule
action for the first time, Config rule status is created in the member account. When management account calls PutOrganizationConfigRule
action for the second time, Config rule status is updated in the member account. Config rule status is deleted when the management account deletes OrganizationConfigRule
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
},
"ErrorCode":{
"shape":"String",
@@ -5254,7 +5254,7 @@
"type":"structure",
"members":{
},
- "documentation":"CREATE_SUCCESSFUL
when Config rule has been created in the member account. CREATE_IN_PROGRESS
when Config rule is being created in the member account.CREATE_FAILED
when Config rule creation has failed in the member account.DELETE_FAILED
when Config rule deletion has failed in the member account.DELETE_IN_PROGRESS
when Config rule is being deleted in the member account.DELETE_SUCCESSFUL
when Config rule has been deleted in the member account. UPDATE_SUCCESSFUL
when Config rule has been updated in the member account.UPDATE_IN_PROGRESS
when Config rule is being updated in the member account.UPDATE_FAILED
when Config rule deletion has failed in the member account.PutConfigurationAggregator
API, you can see this exception for the following reasons:
EnableAWSServiceAccess
APIListDelegatedAdministrators
API. Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.OrganizationConfigRule
and OrganizationConformancePack
APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization master account.PutConfigurationAggregator
API, you can see this exception for the following reasons:
EnableAWSServiceAccess
APIListDelegatedAdministrators
API. Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.OrganizationConfigRule
and OrganizationConformancePack
APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when an organization Config rule has been successfully created in all the member accounts. CREATE_IN_PROGRESS
when an organization Config rule creation is in progress.CREATE_FAILED
when an organization Config rule creation failed in one or more member accounts within that organization.DELETE_FAILED
when an organization Config rule deletion failed in one or more member accounts within that organization.DELETE_IN_PROGRESS
when an organization Config rule deletion is in progress.DELETE_SUCCESSFUL
when an organization Config rule has been successfully deleted from all the member accounts.UPDATE_SUCCESSFUL
when an organization Config rule has been successfully updated in all the member accounts.UPDATE_IN_PROGRESS
when an organization Config rule update is in progress.UPDATE_FAILED
when an organization Config rule update failed in one or more member accounts within that organization.config-multiaccountsetup.amazonaws.com
.
"
},
"ErrorCode":{
"shape":"String",
@@ -5533,7 +5533,7 @@
},
"Status":{
"shape":"OrganizationResourceDetailedStatus",
- "documentation":"CREATE_SUCCESSFUL
when an organization Config rule has been successfully created in all the member accounts. CREATE_IN_PROGRESS
when an organization Config rule creation is in progress.CREATE_FAILED
when an organization Config rule creation failed in one or more member accounts within that organization.DELETE_FAILED
when an organization Config rule deletion failed in one or more member accounts within that organization.DELETE_IN_PROGRESS
when an organization Config rule deletion is in progress.DELETE_SUCCESSFUL
when an organization Config rule has been successfully deleted from all the member accounts.UPDATE_SUCCESSFUL
when an organization Config rule has been successfully updated in all the member accounts.UPDATE_IN_PROGRESS
when an organization Config rule update is in progress.UPDATE_FAILED
when an organization Config rule update failed in one or more member accounts within that organization.PutOrganizationConformancePack
action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack
action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when conformance pack has been created in the member account. CREATE_IN_PROGRESS
when conformance pack is being created in the member account.CREATE_FAILED
when conformance pack creation has failed in the member account.DELETE_FAILED
when conformance pack deletion has failed in the member account.DELETE_IN_PROGRESS
when conformance pack is being deleted in the member account.DELETE_SUCCESSFUL
when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL
when conformance pack has been updated in the member account.UPDATE_IN_PROGRESS
when conformance pack is being updated in the member account.UPDATE_FAILED
when conformance pack deletion has failed in the member account.PutOrganizationConformancePack
action for the first time, conformance pack status is created in the member account. When management account calls PutOrganizationConformancePack
action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the management account deletes OrganizationConformancePack
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
},
"ErrorCode":{
"shape":"String",
@@ -5579,7 +5579,7 @@
},
"Status":{
"shape":"OrganizationResourceStatus",
- "documentation":"CREATE_SUCCESSFUL
when conformance pack has been created in the member account. CREATE_IN_PROGRESS
when conformance pack is being created in the member account.CREATE_FAILED
when conformance pack creation has failed in the member account.DELETE_FAILED
when conformance pack deletion has failed in the member account.DELETE_IN_PROGRESS
when conformance pack is being deleted in the member account.DELETE_SUCCESSFUL
when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL
when conformance pack has been updated in the member account.UPDATE_IN_PROGRESS
when conformance pack is being updated in the member account.UPDATE_FAILED
when conformance pack deletion has failed in the member account.config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when an organization conformance pack has been successfully created in all the member accounts. CREATE_IN_PROGRESS
when an organization conformance pack creation is in progress.CREATE_FAILED
when an organization conformance pack creation failed in one or more member accounts within that organization.DELETE_FAILED
when an organization conformance pack deletion failed in one or more member accounts within that organization.DELETE_IN_PROGRESS
when an organization conformance pack deletion is in progress.DELETE_SUCCESSFUL
when an organization conformance pack has been successfully deleted from all the member accounts.UPDATE_SUCCESSFUL
when an organization conformance pack has been successfully updated in all the member accounts.UPDATE_IN_PROGRESS
when an organization conformance pack update is in progress.UPDATE_FAILED
when an organization conformance pack update failed in one or more member accounts within that organization.config-multiaccountsetup.amazonaws.com
.
"
},
"ErrorCode":{
"shape":"String",
@@ -5604,7 +5604,7 @@
"type":"structure",
"members":{
},
- "documentation":"CREATE_SUCCESSFUL
when an organization conformance pack has been successfully created in all the member accounts. CREATE_IN_PROGRESS
when an organization conformance pack creation is in progress.CREATE_FAILED
when an organization conformance pack creation failed in one or more member accounts within that organization.DELETE_FAILED
when an organization conformance pack deletion failed in one or more member accounts within that organization.DELETE_IN_PROGRESS
when an organization conformance pack deletion is in progress.DELETE_SUCCESSFUL
when an organization conformance pack has been successfully deleted from all the member accounts.UPDATE_SUCCESSFUL
when an organization conformance pack has been successfully updated in all the member accounts.UPDATE_IN_PROGRESS
when an organization conformance pack update is in progress.UPDATE_FAILED
when an organization conformance pack update failed in one or more member accounts within that organization.PutOrganizationConformancePack
action for the first time, conformance pack status is created in the member account. When master account calls PutOrganizationConformancePack
action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the master account deletes OrganizationConformancePack
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when conformance pack has been created in the member account. CREATE_IN_PROGRESS
when conformance pack is being created in the member account.CREATE_FAILED
when conformance pack creation has failed in the member account.DELETE_FAILED
when conformance pack deletion has failed in the member account.DELETE_IN_PROGRESS
when conformance pack is being deleted in the member account.DELETE_SUCCESSFUL
when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL
when conformance pack has been updated in the member account.UPDATE_IN_PROGRESS
when conformance pack is being updated in the member account.UPDATE_FAILED
when conformance pack deletion has failed in the member account.PutOrganizationConformancePack
action for the first time, conformance pack status is created in the member account. When management account calls PutOrganizationConformancePack
action for the second time, conformance pack status is updated in the member account. Conformance pack status is deleted when the management account deletes OrganizationConformancePack
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
}
},
"documentation":"CREATE_SUCCESSFUL
when conformance pack has been created in the member account. CREATE_IN_PROGRESS
when conformance pack is being created in the member account.CREATE_FAILED
when conformance pack creation has failed in the member account.DELETE_FAILED
when conformance pack deletion has failed in the member account.DELETE_IN_PROGRESS
when conformance pack is being deleted in the member account.DELETE_SUCCESSFUL
when conformance pack has been deleted in the member account. UPDATE_SUCCESSFUL
when conformance pack has been updated in the member account.UPDATE_IN_PROGRESS
when conformance pack is being updated in the member account.UPDATE_FAILED
when conformance pack deletion has failed in the member account.s3://bucketname/prefix
). The uri must point to a conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket in the same region as the conformance pack. s3://bucketname/prefix
). The uri must point to a conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket in the same Region as the conformance pack. AWS::Config::ConfigRule
) and remediation action (AWS::Config::RemediationConfiguration
).AWS::Config::ConfigRule
) and remediation action (AWS::Config::RemediationConfiguration
).PutOrganizationConfigRule
action for the first time, Config rule status is created in the member account. When master account calls PutOrganizationConfigRule
action for the second time, Config rule status is updated in the member account. Config rule status is deleted when the master account deletes OrganizationConfigRule
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
+ "documentation":"CREATE_SUCCESSFUL
when Config rule has been created in the member account.CREATE_IN_PROGRESS
when Config rule is being created in the member account.CREATE_FAILED
when Config rule creation has failed in the member account.DELETE_FAILED
when Config rule deletion has failed in the member account.DELETE_IN_PROGRESS
when Config rule is being deleted in the member account.DELETE_SUCCESSFUL
when Config rule has been deleted in the member account.UPDATE_SUCCESSFUL
when Config rule has been updated in the member account.UPDATE_IN_PROGRESS
when Config rule is being updated in the member account.UPDATE_FAILED
when Config rule deletion has failed in the member account.PutOrganizationConfigRule
action for the first time, Config rule status is created in the member account. When management account calls PutOrganizationConfigRule
action for the second time, Config rule status is updated in the member account. Config rule status is deleted when the management account deletes OrganizationConfigRule
and disables service access for config-multiaccountsetup.amazonaws.com
.
"
}
},
"documentation":"CREATE_SUCCESSFUL
when Config rule has been created in the member account.CREATE_IN_PROGRESS
when Config rule is being created in the member account.CREATE_FAILED
when Config rule creation has failed in the member account.DELETE_FAILED
when Config rule deletion has failed in the member account.DELETE_IN_PROGRESS
when Config rule is being deleted in the member account.DELETE_SUCCESSFUL
when Config rule has been deleted in the member account.UPDATE_SUCCESSFUL
when Config rule has been updated in the member account.UPDATE_IN_PROGRESS
when Config rule is being updated in the member account.UPDATE_FAILED
when Config rule deletion has failed in the member account.DocumentName
(and optionally DocumentVersion
) in the PutConformancePack API.TemplateSSMDocumentDetails
object contains the name of the SSM document and the version of the SSM document.DocumentName
in the PutConformancePack API. You can also provide the DocumentVersion
.TemplateSSMDocumentDetails
object contains the name of the SSM document and the version of the SSM document.PhoneNumberId
URI request parameter. However, if the number is claimed to a traffic distribution group and you are calling this API using an instance in the alternate Amazon Web Services Region associated with the traffic distribution group, you must provide a full phone number ARN. If a UUID is provided in this scenario, you will receive a ResourceNotFoundException
.OutboundCallerIdNumberId
value of the OutboundCallerConfig request body parameter. However, if the number is claimed to a traffic distribution group and you are calling this API using an instance in the alternate Amazon Web Services Region associated with the traffic distribution group, you must provide a full phone number ARN. If a UUID is provided in this scenario, you will receive a ResourceNotFoundException
.PhoneNumberId
URI request parameter. However, if the number is claimed to a traffic distribution group and you are calling this API in the alternate Amazon Web Services Region associated with the traffic distribution group, you must provide a full phone number ARN. If a UUID is provided in this scenario, you will receive a ResourceNotFoundException
.PhoneNumberId
URI request parameter. However, if the number is claimed to a traffic distribution group and you are calling this API using an instance in the alternate Amazon Web Services Region associated with the traffic distribution group, you must provide a full phone number ARN. If a UUID is provided in this scenario, you will receive a ResourceNotFoundException
.Arn
value that is returned from each of the items in the PhoneNumberSummaryList cannot be used to tag phone number resources. It will fail with a ResourceNotFoundException
. Instead, use the ListPhoneNumbersV2 API. It returns the new phone number ARN that can be used to tag phone number resources.TargetArn
is a traffic distribution group, you can call this API in both Amazon Web Services Regions associated with traffic distribution group.ReleasePhoneNumber
API, not the Amazon Connect console.TargetArn
is a traffic distribution group, you can call this API in both Amazon Web Services Regions associated with the traffic distribution group.AfterContactWorkTimeLimit
is returned in milliseconds. OutboundCallerIdNumberId
value of the OutboundCallerConfig request body parameter. However, if the number is claimed to a traffic distribution group and you are calling this API using an instance in the alternate Amazon Web Services Region associated with the traffic distribution group, you must provide a full phone number ARN. If a UUID is provided in this scenario, you will receive a ResourceNotFoundException
.
CLAIMED
means the previous ClaimedPhoneNumber or UpdatePhoneNumber operation succeeded.IN_PROGRESS
means a ClaimedPhoneNumber or UpdatePhoneNumber operation is still in progress and has not yet completed. You can call DescribePhoneNumber at a later time to verify if the previous operation has completed.FAILED
indicates that the previous ClaimedPhoneNumber or UpdatePhoneNumber operation has failed. It will include a message indicating the failure reason. A common reason for a failure may be that the TargetArn
value you are claiming or updating a phone number to has reached its limit of total claimed numbers. If you received a FAILED
status from a ClaimPhoneNumber
API call, you have one day to retry claiming the phone number before the number is released back to the inventory for other customers to claim.instanceId
in the ARN of the instance.TargetArn
input is not provided, this API lists numbers claimed to all the Amazon Connect instances belonging to your account.TargetArn
input is not provided, this API lists numbers claimed to all the Amazon Connect instances belonging to your account in the same Amazon Web Services Region as the request.
"
},
"PhoneNumberSummary":{
"type":"structure",
@@ -8928,7 +9254,7 @@
"members":{
"Id":{
"shape":"QueueId",
- "documentation":"CLAIMED
means the previous ClaimedPhoneNumber or UpdatePhoneNumber operation succeeded.IN_PROGRESS
means a ClaimedPhoneNumber or UpdatePhoneNumber operation is still in progress and has not yet completed. You can call DescribePhoneNumber at a later time to verify if the previous operation has completed.FAILED
indicates that the previous ClaimedPhoneNumber or UpdatePhoneNumber operation has failed. It will include a message indicating the failure reason. A common reason for a failure may be that the TargetArn
value you are claiming or updating a phone number to has reached its limit of total claimed numbers. If you received a FAILED
status from a ClaimPhoneNumber
API call, you have one day to retry claiming the phone number before the number is released back to the inventory for other customers to claim.DATE
must be of type Epoch timestamp. ReplicaAlias
must be unique.instanceId
in the ARN of the instance. The replicated instance has the same identifier as the instance it was replicated from.FieldName
: name
username = 'abc'
. FieldName
: name
"
+ },
+ "Tags":{
+ "shape":"TagMap",
+ "documentation":"CREATION_IN_PROGRESS
means the previous CreateTrafficDistributionGroup operation is still in progress and has not yet completed.ACTIVE
means the previous CreateTrafficDistributionGroup operation has succeeded.CREATION_FAILED
indicates that the previous CreateTrafficDistributionGroup operation has failed.PENDING_DELETION
means the previous DeleteTrafficDistributionGroup operation is still in progress and has not yet completed.DELETION_FAILED
means the previous DeleteTrafficDistributionGroup operation has failed.UPDATE_IN_PROGRESS
means the previous UpdateTrafficDistributionGroup operation is still in progress and has not yet completed.
"
+ }
+ },
+ "documentation":"CREATION_IN_PROGRESS
means the previous CreateTrafficDistributionGroup operation is still in progress and has not yet completed.ACTIVE
means the previous CreateTrafficDistributionGroup operation has succeeded.CREATION_FAILED
indicates that the previous CreateTrafficDistributionGroup operation has failed.PENDING_DELETION
means the previous DeleteTrafficDistributionGroup operation is still in progress and has not yet completed.DELETION_FAILED
means the previous DeleteTrafficDistributionGroup operation has failed.UPDATE_IN_PROGRESS
means the previous UpdateTrafficDistributionGroup operation is still in progress and has not yet completed.resourceId
and ARN of the user. RoutingProfile
assigned to the agent. (?=^.{0,265}$)[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,63}
SearchUsers
call, AfterContactWorkTimeLimit
is returned in milliseconds. ONGOING
, CLOSED
, and CLOSED
), one or more severities (LOW
, MEDIUM
, and HIGH
), and type (REACTIVE
or PROACTIVE
). Filters
parameter to specify status and severity search parameters. Use the Type
parameter to specify REACTIVE
or PROACTIVE
in your search. ONGOING
or CLOSED
), one or more severities (LOW
, MEDIUM
, and HIGH
), and type (REACTIVE
or PROACTIVE
). Filters
parameter to specify status and severity search parameters. Use the Type
parameter to specify REACTIVE
or PROACTIVE
in your search. ServiceInsightHealth
that contains the number of open proactive and reactive insights for this service.abcde.veo
.auth-crt
on the class path.abcde.veo
.auth-crt
on the class path.AddEndpoints
API operation is the recommended option for adding endpoints. The alternative options are to add endpoints when you create an endpoint group (with the CreateEndpointGroup API) or when you update an endpoint group (with the UpdateEndpointGroup API). AddEndpoints
to add endpoints:
"
+ },
"AdvertiseByoipCidr":{
"name":"AdvertiseByoipCidr",
"http":{
@@ -600,6 +618,22 @@
],
"documentation":"RemoveEndpoints
API operation is the recommended option for removing endpoints. The alternative is to remove endpoints by updating an endpoint group by using the UpdateEndpointGroup API operation. There are two advantages to using AddEndpoints
to remove endpoints instead:
"
+ },
"TagResource":{
"name":"TagResource",
"http":{
@@ -788,7 +822,7 @@
},
"DnsName":{
"shape":"GenericString",
- "documentation":"UpdateEndpointGroup
API operation, you must specify all of the endpoints in the endpoint group except the ones that you want to remove from the group.UpdateEndpointGroup
API operation, Global Accelerator must resolve all of the endpoints that remain in the group.DualStackDnsName
, that points to both the A record and the AAAA record for all four static addresses for the accelerator: two IPv4 addresses and two IPv6 addresses.DnsName
, to your accelerator that points just to the static IPv4 addresses. DualStackDnsName
, that points to both the A record and the AAAA record for all four static addresses for the accelerator: two IPv4 addresses and two IPv6 addresses.X-Forwarded-For
request header as traffic travels to applications on the endpoint fronted by the accelerator.BILLING_TOKEN
. After an accessor is deleted, the status of the accessor changes from AVAILABLE
to PENDING_DELETION
. An accessor in the PENDING_DELETION
state can’t be used for new WebSocket requests or HTTP requests. However, WebSocket connections that are initiated while the accessor was in the AVAILABLE
state remain open until they expire (up to 2 hours).DeleteMember
can only be called for a specified MemberId
if the principal performing the action is associated with the AWS account that owns the member. In all other cases, the DeleteMember
action is carried out as the result of an approved proposal to remove a member. If MemberId
is the last member in a network specified by the last AWS account, the network is deleted also.DeleteMember
can only be called for a specified MemberId
if the principal performing the action is associated with the Amazon Web Services account that owns the member. In all other cases, the DeleteMember
action is carried out as the result of an approved proposal to remove a member. If MemberId
is the last member in a network specified by the last Amazon Web Services account, the network is deleted also.ProposalId
on behalf of a member. The member to vote as, specified by VoterMemberId
, must be in the same AWS account as the principal that calls the action.ProposalId
on behalf of a member. The member to vote as, specified by VoterMemberId
, must be in the same Amazon Web Services account as the principal that calls the action.BILLING_TOKEN
.BILLING_TOKEN
.YES
votes to approve the proposal nor the number of NO
votes required to reject it before the duration expires, the proposal is EXPIRED
and ProposalActions
are not carried out.YES
votes to approve the proposal nor the number of NO
votes required to reject it before the duration expires, the proposal is EXPIRED
and ProposalActions
aren't carried out.BILLING_TOKEN
.
"
+ "documentation":"PENDING
- The invitee has not created a member to join the network, and the invitation has not yet expired.ACCEPTING
- The invitee has begun creating a member, and creation has not yet completed.ACCEPTED
- The invitee created a member and joined the network using the InvitationID
.REJECTED
- The invitee rejected the invitation.EXPIRED
- The invitee neither created a member nor rejected the invitation before the ExpirationDate
.
"
},
"NetworkSummary":{"shape":"NetworkSummary"},
"Arn":{
"shape":"ArnString",
- "documentation":"PENDING
- The invitee hasn't created a member to join the network, and the invitation hasn't yet expired.ACCEPTING
- The invitee has begun creating a member, and creation hasn't yet completed.ACCEPTED
- The invitee created a member and joined the network using the InvitationID
.REJECTED
- The invitee rejected the invitation.EXPIRED
- The invitee neither created a member nor rejected the invitation before the ExpirationDate
.InviteAction
is carried out when a Proposal
is APPROVED
.InviteAction
is carried out when a Proposal
is APPROVED
.true
) or that other AWS accounts own (false
). If omitted, all members are listed.true
) or that other Amazon Web Services accountsn own (false
). If omitted, all members are listed.
"
+ "documentation":"CREATING
- The AWS account is in the process of creating a member.AVAILABLE
- The member has been created and can participate in the network.CREATE_FAILED
- The AWS account attempted to create a member and creation failed.UPDATING
- The member is in the process of being updated.DELETING
- The member and all associated resources are in the process of being deleted. Either the AWS account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.DELETED
- The member can no longer participate on the network and all associated resources are deleted. Either the AWS account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.INACCESSIBLE_ENCRYPTION_KEY
- The member is impaired and might not function as expected because it cannot access the specified customer managed key in AWS KMS for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.
"
},
"CreationDate":{
"shape":"Timestamp",
@@ -1291,11 +1541,11 @@
},
"Arn":{
"shape":"ArnString",
- "documentation":"CREATING
- The Amazon Web Services account is in the process of creating a member.AVAILABLE
- The member has been created and can participate in the network.CREATE_FAILED
- The Amazon Web Services account attempted to create a member and creation failed.UPDATING
- The member is in the process of being updated.DELETING
- The member and all associated resources are in the process of being deleted. Either the Amazon Web Services account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.DELETED
- The member can no longer participate on the network and all associated resources are deleted. Either the Amazon Web Services account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.INACCESSIBLE_ENCRYPTION_KEY
- The member is impaired and might not function as expected because it cannot access the specified customer managed key in KMS for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.\"AWS Owned KMS Key\"
, the member uses an AWS owned KMS key for encryption. This parameter is inherited by the nodes that this member owns.\"AWS Owned KMS Key\"
, the member uses an Amazon Web Services owned KMS key for encryption. This parameter is inherited by the nodes that this member owns.
"
+ "documentation":"arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
"
}
},
"documentation":"arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
"
+ "documentation":"CREATING
- The AWS account is in the process of creating a member.AVAILABLE
- The member has been created and can participate in the network.CREATE_FAILED
- The AWS account attempted to create a member and creation failed.UPDATING
- The member is in the process of being updated.DELETING
- The member and all associated resources are in the process of being deleted. Either the AWS account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.DELETED
- The member can no longer participate on the network and all associated resources are deleted. Either the AWS account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.INACCESSIBLE_ENCRYPTION_KEY
- The member is impaired and might not function as expected because it cannot access the specified customer managed key in AWS Key Management Service (AWS KMS) for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.
"
},
"CreationDate":{
"shape":"Timestamp",
@@ -1449,11 +1699,11 @@
},
"IsOwned":{
"shape":"IsOwned",
- "documentation":"CREATING
- The Amazon Web Services account is in the process of creating a member.AVAILABLE
- The member has been created and can participate in the network.CREATE_FAILED
- The Amazon Web Services account attempted to create a member and creation failed.UPDATING
- The member is in the process of being updated.DELETING
- The member and all associated resources are in the process of being deleted. Either the Amazon Web Services account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.DELETED
- The member can no longer participate on the network and all associated resources are deleted. Either the Amazon Web Services account that owns the member deleted it, or the member is being deleted as the result of an APPROVED
PROPOSAL
to remove the member.INACCESSIBLE_ENCRYPTION_KEY
- The member is impaired and might not function as expected because it cannot access the specified customer managed key in Key Management Service (KMS) for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.
"
+ "documentation":"CREATING
- The AWS account is in the process of creating a node.AVAILABLE
- The node has been created and can participate in the network.UNHEALTHY
- The node is impaired and might not function as expected. Amazon Managed Blockchain automatically finds nodes in this state and tries to recover them. If a node is recoverable, it returns to AVAILABLE
. Otherwise, it moves to FAILED
status.CREATE_FAILED
- The AWS account attempted to create a node and creation failed.UPDATING
- The node is in the process of being updated.DELETING
- The node is in the process of being deleted.DELETED
- The node can no longer participate on the network.FAILED
- The node is no longer functional, cannot be recovered, and must be deleted.INACCESSIBLE_ENCRYPTION_KEY
- The node is impaired and might not function as expected because it cannot access the specified customer managed key in AWS KMS for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.
"
},
"CreationDate":{
"shape":"Timestamp",
@@ -1694,11 +1944,11 @@
},
"Arn":{
"shape":"ArnString",
- "documentation":"CREATING
- The Amazon Web Services account is in the process of creating a node.AVAILABLE
- The node has been created and can participate in the network.UNHEALTHY
- The node is impaired and might not function as expected. Amazon Managed Blockchain automatically finds nodes in this state and tries to recover them. If a node is recoverable, it returns to AVAILABLE
. Otherwise, it moves to FAILED
status.CREATE_FAILED
- The Amazon Web Services account attempted to create a node and creation failed.UPDATING
- The node is in the process of being updated.DELETING
- The node is in the process of being deleted.DELETED
- The node can no longer participate on the network.FAILED
- The node is no longer functional, cannot be recovered, and must be deleted.INACCESSIBLE_ENCRYPTION_KEY
- The node is impaired and might not function as expected because it cannot access the specified customer managed key in KMS for encryption at rest. Either the KMS key was disabled or deleted, or the grants on the key were revoked.\"AWS Owned KMS Key\"
, the node uses an AWS owned KMS key for encryption. The node inherits this parameter from the member that it belongs to.\"AWS Owned KMS Key\"
, the node uses an Amazon Web Services owned KMS key for encryption. The node inherits this parameter from the member that it belongs to.
"
+ "documentation":"IN_PROGRESS
- The proposal is active and open for member voting.APPROVED
- The proposal was approved with sufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified proposal actions are carried out.REJECTED
- The proposal was rejected with insufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified ProposalActions
are not carried out.EXPIRED
- Members did not cast the number of votes required to determine the proposal outcome before the proposal expired. The specified ProposalActions
are not carried out.ACTION_FAILED
- One or more of the specified ProposalActions
in a proposal that was approved could not be completed because of an error. The ACTION_FAILED
status occurs even if only one ProposalAction fails and other actions are successful.
"
},
"CreationDate":{
"shape":"Timestamp",
@@ -1902,7 +2152,7 @@
},
"ExpirationDate":{
"shape":"Timestamp",
- "documentation":"IN_PROGRESS
- The proposal is active and open for member voting.APPROVED
- The proposal was approved with sufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified proposal actions are carried out.REJECTED
- The proposal was rejected with insufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified ProposalActions
aren't carried out.EXPIRED
- Members didn't cast the number of votes required to determine the proposal outcome before the proposal expired. The specified ProposalActions
aren't carried out.ACTION_FAILED
- One or more of the specified ProposalActions
in a proposal that was approved couldn't be completed because of an error. The ACTION_FAILED
status occurs even if only one ProposalAction fails and other actions are successful.CreationDate
plus the ProposalDurationInHours
that is specified in the ProposalThresholdPolicy
. After this date and time, if members have not cast enough votes to determine the outcome according to the voting policy, the proposal is EXPIRED
and Actions
are not carried out. CreationDate
plus the ProposalDurationInHours
that is specified in the ProposalThresholdPolicy
. After this date and time, if members haven't cast enough votes to determine the outcome according to the voting policy, the proposal is EXPIRED
and Actions
aren't carried out. APPROVED
proposal to invite an AWS account to create a member and join the network. APPROVED
proposal to invite an Amazon Web Services account to create a member and join the network.
"
+ "documentation":"IN_PROGRESS
- The proposal is active and open for member voting.APPROVED
- The proposal was approved with sufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified proposal actions are carried out.REJECTED
- The proposal was rejected with insufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified ProposalActions
are not carried out.EXPIRED
- Members did not cast the number of votes required to determine the proposal outcome before the proposal expired. The specified ProposalActions
are not carried out.ACTION_FAILED
- One or more of the specified ProposalActions
in a proposal that was approved could not be completed because of an error.
"
},
"CreationDate":{
"shape":"Timestamp",
@@ -1992,11 +2242,11 @@
},
"ExpirationDate":{
"shape":"Timestamp",
- "documentation":"IN_PROGRESS
- The proposal is active and open for member voting.APPROVED
- The proposal was approved with sufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified proposal actions are carried out.REJECTED
- The proposal was rejected with insufficient YES
votes among members according to the VotingPolicy
specified for the Network
. The specified ProposalActions
aren't carried out.EXPIRED
- Members didn't cast the number of votes required to determine the proposal outcome before the proposal expired. The specified ProposalActions
aren't carried out.ACTION_FAILED
- One or more of the specified ProposalActions
in a proposal that was approved couldn't be completed because of an error.CreationDate
plus the ProposalDurationInHours
that is specified in the ProposalThresholdPolicy
. After this date and time, if members have not cast enough votes to determine the outcome according to the voting policy, the proposal is EXPIRED
and Actions
are not carried out. CreationDate
plus the ProposalDurationInHours
that is specified in the ProposalThresholdPolicy
. After this date and time, if members haven't cast enough votes to determine the outcome according to the voting policy, the proposal is EXPIRED
and Actions
aren't carried out. CreateMember
and DeleteMember
do not apply to Ethereum.CreateMember
and DeleteMember
don't apply to Ethereum.rpoInSecs
and rtoInSecs
to -1
.BrowserName
, CountryCode
, DeviceType
, FileType
, OSName
, and PageId
. For more information, see Extended metrics that you can send to CloudWatch and CloudWatch Evidently.BatchCreateRumMetricDefinitions
operation is 200.
",
+ "idempotent":true
+ },
+ "BatchDeleteRumMetricDefinitions":{
+ "name":"BatchDeleteRumMetricDefinitions",
+ "http":{
+ "method":"DELETE",
+ "requestUri":"/rummetrics/{AppMonitorName}/metrics",
+ "responseCode":200
+ },
+ "input":{"shape":"BatchDeleteRumMetricDefinitionsRequest"},
+ "output":{"shape":"BatchDeleteRumMetricDefinitionsResponse"},
+ "errors":[
+ {"shape":"ConflictException"},
+ {"shape":"ResourceNotFoundException"},
+ {"shape":"InternalServerException"},
+ {"shape":"ValidationException"},
+ {"shape":"ThrottlingException"},
+ {"shape":"AccessDeniedException"}
+ ],
+ "documentation":" <p>The maximum number of metric definitions that one destination can contain is 2000.</p> <p>Extended metrics sent are charged as CloudWatch custom metrics. Each combination of additional dimension name and dimension value counts as a custom metric. For more information, see <a href="https://aws.amazon.com/cloudwatch/pricing/">Amazon CloudWatch Pricing</a>.</p> <p>You must have already created a destination for the metrics before you send them. For more information, see <a href="https://docs.aws.amazon.com/cloudwatchrum/latest/APIReference/API_PutRumMetricsDestination.html">PutRumMetricsDestination</a>.</p> <p>If some metric definitions specified in a <code>BatchCreateRumMetricDefinitions</code> operations are not valid, those metric definitions fail and return errors, but all valid metric definitions in the same operation still succeed.</p>
BatchDeleteRumMetricDefinitions
operations are not valid, those metric definitions fail and return errors, but all valid metric definition IDs in the same operation are still deleted.BatchDeleteRumMetricDefinitions
operation is 200.PutRumEvents
operations to send this data to RUM.PutRumEvents
operation can send a batch of events from one user session.CloudWatch
and Evidently
. If you specify Evidently
, you must also specify the ARN of the CloudWatchEvidently experiment that will receive the metrics and an IAM role that has permission to write to the experiment.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter.CloudWatch
and Evidently
. If you specify Evidently
, you must also specify the ARN of the CloudWatchEvidently experiment that is to be the destination and an IAM role that has permission to write to the experiment.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter. CloudWatch
and Evidently
.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter.NextToken
value. CloudWatch
and Evidently
.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter. This parameter specifies the ARN of the Evidently experiment that corresponds to the destination to delete.NextToken
value. CloudWatch
. If the metric destination is Evidently
, the value of DimensionKeys
is ignored.CloudWatch
and the event also matches a value in DimensionKeys
, then the metric is published with the specified dimensions.
\"metadata.pageId\": \"PageId\"
\"metadata.browserName\": \"BrowserName\"
\"metadata.deviceType\": \"DeviceType\"
\"metadata.osName\": \"OSName\"
\"metadata.countryCode\": \"CountryCode\"
\"event_details.fileType\": \"FileType\"
"
+ },
+ "EventPattern":{
+ "shape":"EventPattern",
+ "documentation":" <p> All dimensions listed in this field must also be included in <code>EventPattern</code>.</p>
EventPattern
is omitted.
'{ \"event_type\": [\"com.amazon.rum.js_error_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Safari\" ], } }'
'{ \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Firefox\" ] }, \"event_details\": { \"duration\": [{ \"numeric\": [ \"<\", 2000 ] }] } }'
'{ \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"metadata\": { \"browserName\": [ \"Chrome\", \"Safari\" ], \"countryCode\": [ \"US\" ] }, \"event_details\": { \"duration\": [{ \"numeric\": [ \">=\", 2000, \"<\", 8000 ] }] } }'
CloudWatch
and the event also matches a value in DimensionKeys
, then the metric is published with the specified dimensions.
"
+ },
+ "UnitLabel":{
+ "shape":"UnitLabel",
+ "documentation":"PerformanceNavigationDuration
PerformanceResourceDuration
NavigationSatisfiedTransaction
NavigationToleratedTransaction
NavigationFrustratedTransaction
WebVitalsCumulativeLayoutShift
WebVitalsFirstInputDelay
WebVitalsLargestContentfulPaint
JsErrorCount
HttpErrorCount
SessionCount
Name
, ValueKey
, and EventPattern
are valid. In addition to what is displayed in the list below, the EventPattern
can also include information used by the DimensionKeys
field.
"
+ },
+ "MetricDefinitions":{
+ "type":"list",
+ "member":{"shape":"MetricDefinition"}
+ },
+ "MetricDefinitionsRequest":{
+ "type":"list",
+ "member":{"shape":"MetricDefinitionRequest"}
+ },
+ "MetricDestination":{
+ "type":"string",
+ "enum":[
+ "CloudWatch",
+ "Evidently"
+ ]
+ },
+ "MetricDestinationSummary":{
+ "type":"structure",
+ "members":{
+ "Destination":{
+ "shape":"MetricDestination",
+ "documentation":"Name
is PerformanceNavigationDuration
, then ValueKey
must be event_details.duration
and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.performance_navigation_event\"]}
Name
is PerformanceResourceDuration
, then ValueKey
must be event_details.duration
and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.performance_resource_event\"]}
Name
is NavigationSatisfiedTransaction
, then ValueKey
must be null and the EventPattern
must include { \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"event_details\": { \"duration\": [{ \"numeric\": [\">\",2000] }] } }
Name
is NavigationToleratedTransaction
, then ValueKey
must be null and the EventPattern
must include { \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"event_details\": { \"duration\": [{ \"numeric\": [\">=\",2000,\"<\"8000] }] } }
Name
is NavigationFrustratedTransaction
, then ValueKey
must be null and the EventPattern
must include { \"event_type\": [\"com.amazon.rum.performance_navigation_event\"], \"event_details\": { \"duration\": [{ \"numeric\": [\">=\",8000] }] } }
Name
is WebVitalsCumulativeLayoutShift
, then ValueKey
must be event_details.value
and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.cumulative_layout_shift_event\"]}
Name
is WebVitalsFirstInputDelay
, then ValueKey
must be event_details.value
and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.first_input_delay_event\"]}
Name
is WebVitalsLargestContentfulPaint
, then ValueKey
must be event_details.value
and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.largest_contentful_paint_event\"]}
Name
is JsErrorCount
, then ValueKey
must be null and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.js_error_event\"]}
Name
is HttpErrorCount
, then ValueKey
must be null and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.http_event\"]}
Name
is SessionCount
, then ValueKey
must be null and the EventPattern
must include {\"event_type\":[\"com.amazon.rum.session_start_event\"]}
CloudWatch
or Evidently
.Evidently
, this specifies the ARN of the Evidently experiment that receives the metrics.Evidently
. It specifies the ARN of the IAM role that is used to write to the Evidently experiment that receives the metrics.CloudWatch
and Evidently
. If you specify Evidently
, you must also specify the ARN of the CloudWatchEvidently experiment that is to be the destination and an IAM role that has permission to write to the experiment.Destination
is Evidently
. This parameter specifies the ARN of the Evidently experiment that will receive the extended metrics.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter.CloudWatch
and Evidently
. If you specify Evidently
, you must also specify the ARN of the CloudWatchEvidently experiment that will receive the metrics and an IAM role that has permission to write to the experiment.Destination
is Evidently
. If Destination
is CloudWatch
, do not use this parameter.
"
diff --git a/awscli/botocore/data/s3/2006-03-01/endpoint-rule-set-1.json b/awscli/botocore/data/s3/2006-03-01/endpoint-rule-set-1.json
index 802efee44e84..394ecc157257 100644
--- a/awscli/botocore/data/s3/2006-03-01/endpoint-rule-set-1.json
+++ b/awscli/botocore/data/s3/2006-03-01/endpoint-rule-set-1.json
@@ -322,8 +322,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -372,8 +372,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -440,8 +440,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -506,8 +506,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -560,8 +560,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -614,8 +614,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -696,8 +696,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -714,8 +714,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -784,8 +784,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -834,8 +834,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -884,8 +884,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -962,8 +962,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -980,8 +980,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1046,8 +1046,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1376,8 +1376,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1444,8 +1444,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1530,8 +1530,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1614,8 +1614,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1682,8 +1682,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1750,8 +1750,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1836,8 +1836,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1920,8 +1920,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -1988,8 +1988,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2056,8 +2056,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2142,8 +2142,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2226,8 +2226,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2294,8 +2294,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2362,8 +2362,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2448,8 +2448,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2532,8 +2532,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2619,8 +2619,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2706,8 +2706,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2793,8 +2793,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2880,8 +2880,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -2995,8 +2995,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3013,8 +3013,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3130,8 +3130,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3148,8 +3148,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3251,8 +3251,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3352,8 +3352,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3420,8 +3420,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3488,8 +3488,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3584,8 +3584,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3602,8 +3602,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3686,8 +3686,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3754,8 +3754,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3822,8 +3822,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3918,8 +3918,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -3936,8 +3936,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -4020,8 +4020,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -4175,8 +4175,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -4715,8 +4715,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -4743,8 +4743,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -4761,8 +4761,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -5355,8 +5355,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -5392,8 +5392,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -5429,8 +5429,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -5483,8 +5483,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -5520,8 +5520,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -5777,10 +5777,10 @@
"authSchemes": [
{
"name": "sigv4a",
- "disableDoubleEncoding": true,
"signingRegionSet": [
"*"
],
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6224,8 +6224,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-outposts"
}
]
@@ -6242,8 +6242,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{bucketArn#region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-outposts"
}
]
@@ -6550,8 +6550,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6600,8 +6600,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6668,8 +6668,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6734,8 +6734,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6788,8 +6788,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6842,8 +6842,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6924,8 +6924,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -6942,8 +6942,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7012,8 +7012,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7062,8 +7062,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7112,8 +7112,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7190,8 +7190,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7208,8 +7208,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7274,8 +7274,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7475,8 +7475,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -7503,8 +7503,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -7521,8 +7521,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3-object-lambda"
}
]
@@ -7698,8 +7698,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7761,8 +7761,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7842,8 +7842,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7921,8 +7921,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -7980,8 +7980,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8039,8 +8039,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8116,8 +8116,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8191,8 +8191,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8254,8 +8254,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8317,8 +8317,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8398,8 +8398,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8477,8 +8477,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8536,8 +8536,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8595,8 +8595,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8672,8 +8672,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8747,8 +8747,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8810,8 +8810,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8873,8 +8873,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -8954,8 +8954,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9033,8 +9033,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9092,8 +9092,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9151,8 +9151,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9228,8 +9228,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9303,8 +9303,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9366,8 +9366,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9429,8 +9429,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9520,8 +9520,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9538,8 +9538,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9617,8 +9617,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9676,8 +9676,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9735,8 +9735,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "us-east-1",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9822,8 +9822,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9840,8 +9840,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9915,8 +9915,8 @@
"authSchemes": [
{
"name": "sigv4",
- "disableDoubleEncoding": true,
"signingRegion": "{Region}",
+ "disableDoubleEncoding": true,
"signingName": "s3"
}
]
@@ -9959,4 +9959,4 @@
]
}
]
-}
+}
\ No newline at end of file
diff --git a/awscli/botocore/data/s3/2006-03-01/endpoint-tests-1.json b/awscli/botocore/data/s3/2006-03-01/endpoint-tests-1.json
deleted file mode 100644
index ee172712e960..000000000000
--- a/awscli/botocore/data/s3/2006-03-01/endpoint-tests-1.json
+++ /dev/null
@@ -1,6258 +0,0 @@
-{
- "testCases": [
- {
- "documentation": "region is not a valid DNS-suffix",
- "expect": {
- "error": "Invalid region: region was not a valid DNS name."
- },
- "params": {
- "Region": "a b",
- "UseFIPS": false,
- "UseDualStack": false,
- "Accelerate": false
- }
- },
- {
- "documentation": "Invalid access point ARN: Not S3",
- "expect": {
- "error": "Invalid ARN: The ARN was not for the S3 service, found: not-s3"
- },
- "operationInputs": [
- {
- "builtInParams": {
- "AWS::Region": "us-east-1"
- },
- "operationName": "GetObject",
- "operationParams": {
- "Bucket": "arn:aws:not-s3:us-west-2:123456789012:accesspoint:myendpoint",
- "Key": "key"
- }
- }
- ],
- "params": {
- "Region": "us-east-1",
- "UseFIPS": false,
- "UseDualStack": false,
- "Accelerate": false,
- "Bucket": "arn:aws:not-s3:us-west-2:123456789012:accesspoint:myendpoint"
- }
- },
- {
- "documentation": "Invalid access point ARN: invalid resource",
- "expect": {
- "error": "Invalid ARN: The ARN may only contain a single resource component after `accesspoint`."
- },
- "operationInputs": [
- {
- "builtInParams": {
- "AWS::Region": "us-east-1"
- },
- "operationName": "GetObject",
- "operationParams": {
- "Bucket": "arn:aws:s3:us-west-2:123456789012:accesspoint:myendpoint:more-data",
- "Key": "key"
- }
- }
- ],
- "params": {
- "Region": "us-east-1",
- "UseFIPS": false,
- "UseDualStack": false,
- "Accelerate": false,
- "Bucket": "arn:aws:s3:us-west-2:123456789012:accesspoint:myendpoint:more-data"
- }
- },
- {
- "documentation": "Invalid access point ARN: invalid no ap name",
- "expect": {
- "error": "Invalid ARN: Expected a resource of the format `accesspoint: <p>You can use the collected data to quickly identify and debug client-side performance issues. CloudWatch RUM helps you visualize anomalies in your application performance and find relevant debugging data such as error messages, stack traces, and user sessions. You can also use RUM to understand the range of end-user impact including the number of users, geolocations, and browsers used.</p>
s3.amazonaws.com
endpoint, the request goes to the us-east-1 Region. Accordingly, the signature calculations in Signature Version 4 must use us-east-1 as the Region, even if the location constraint in the request specifies another Region where the bucket is to be created. If you create a bucket in a Region other than US East (N. Virginia), your application must be able to handle 307 redirect. For more information, see Virtual hosting of buckets.400
error and returns the InvalidBucketAclWithObjectOwnership
error code. For more information, see Controlling object ownership in the Amazon S3 User Guide.
x-amz-acl
request header. Amazon S3 supports a set of predefined ACLs, known as canned ACLs. Each canned ACL has a predefined set of grantees and permissions. For more information, see Canned ACL.x-amz-grant-read
, x-amz-grant-write
, x-amz-grant-read-acp
, x-amz-grant-write-acp
, and x-amz-grant-full-control
headers. These headers map to the set of permissions Amazon S3 supports in an ACL. For more information, see Access control list (ACL) overview.
id
– if the value specified is the canonical user ID of an Amazon Web Services accounturi
– if you are granting permissions to a predefined groupemailAddress
– if the value specified is the email address of an Amazon Web Services account
x-amz-grant-read
header grants the Amazon Web Services accounts identified by account IDs permissions to read object data and its metadata:x-amz-grant-read: id=\"11112222333\", id=\"444455556666\"
s3:CreateBucket
, the following permissions are required when your CreateBucket includes specific headers:
CreateBucket
request specifies ACL permissions and the ACL is public-read, public-read-write, authenticated-read, or if you specify access permissions explicitly through any other ACL, both s3:CreateBucket
and s3:PutBucketAcl
permissions are needed. If the ACL the CreateBucket
request is private or doesn't specify any ACLs, only s3:CreateBucket
permission is needed. ObjectLockEnabledForBucket
is set to true in your CreateBucket
request, s3:PutBucketObjectLockConfiguration
and s3:PutBucketVersioning
permissions are required.x-amz-object-ownership
header, s3:PutBucketOwnershipControls
permission is required.CreateBucket
: AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.cors
configuration is being deleted.OwnershipControls
you want to delete. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.PublicAccessBlock
configuration you want to delete. OwnershipControls
you want to retrieve. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.PublicAccessBlock
configuration you want to retrieve. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.cors
configuration.OwnershipControls
you want to set. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.PublicAccessBlock
configuration you want to set. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. AccessPointName-AccountId.outpostID.s3-outposts.Region.amazonaws.com
. When using this action with S3 on Outposts through the Amazon Web Services SDKs, you provide the Outposts bucket ARN in place of the bucket name. For more information about S3 on Outposts ARNs, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.CreateAccessPoint
:CreateAccessPointForObjectLambda
:x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.DeleteAccessPoint
:DeleteAccessPointForObjectLambda
:x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.DeleteAccessPointPolicy
:DeleteAccessPointPolicyForObjectLambda
:x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.s3-outposts:DeleteLifecycleConfiguration
action. By default, the bucket owner has this permission and the Outposts bucket owner can grant this permission to others.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.s3-outposts:DeleteBucketPolicy
permissions on the specified Outposts bucket and belong to the bucket owner's account to use this action. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide.DeleteBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error. x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.DeleteBucketPolicy
:PutBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others. x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.DeleteBucketTagging
:s3:DeleteJobTagging
action. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide.PublicAccessBlock
configuration for an Amazon Web Services account. For more information, see Using Amazon S3 block public access.s3:DeleteStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.s3:DeleteStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.GetAccessPoint
:GetAccessPointConfigurationForObjectLambda
:GetAccessPointForObjectLambda
:GetAccessPointPolicy
:GetAccessPointPolicyForObjectLambda
:s3-outposts:GetBucket
permissions on the specified Outposts bucket and belong to the Outposts bucket owner's account in order to use this action. Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket. s3-outposts:GetBucket
permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied
error.GetBucket
for Amazon S3 on Outposts:x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.s3-outposts:GetLifecycleConfiguration
action. The Outposts bucket owner has this permission, by default. The bucket owner can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.GetBucketLifecycleConfiguration
has the following special error:
NoSuchLifecycleConfiguration
GetBucketLifecycleConfiguration
:GetBucketPolicy
permissions on the specified bucket and belong to the bucket owner's account in order to use this action.s3-outposts:GetBucketPolicy
permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied
error.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.GetBucketPolicy
:GetBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others.GetBucketTagging
has the following special error:
NoSuchTagSetError
x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.GetBucketTagging
:s3:GetJobTagging
action. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide.PublicAccessBlock
configuration for an Amazon Web Services account. For more information, see Using Amazon S3 block public access.s3:GetStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.s3:GetStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.maxResults
, whichever is less), the response will include a continuation token that you can use to list the additional access points.x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.ListAccessPoints
:ListAccessPointsForObjectLambda
:x-amz-outpost-id
in your request, see the Examples section.s3:ListStorageLensConfigurations
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.PutAccessPointConfigurationForObjectLambda
:x-amz-outpost-id
to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived by using the access point ARN, see the Examples section.PutAccessPointPolicy
:PutAccessPointPolicyForObjectLambda
:
s3:PutJobTagging
action.PublicAccessBlock
configuration for an Amazon Web Services account. For this operation, users must have the s3:PutAccountPublicAccessBlock
permission. For more information, see Using Amazon S3 block public access.s3:PutStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.s3:PutStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon S3 User Guide.arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. PublicAccessBlock
configuration you want to remove.arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. PublicAccessBlock
configuration you want to retrieve.arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded. PublicAccessBlock
configuration you want to set.
RegisterSlackWorkspaceForOrganization
API to authorize each Slack workspace for the organization.
"
+ },
"UpdateSlackChannelConfiguration":{
"name":"UpdateSlackChannelConfiguration",
"http":{
@@ -175,12 +193,19 @@
},
"exception":true
},
+ "AccountType":{
+ "type":"string",
+ "enum":[
+ "management",
+ "member"
+ ]
+ },
"ConflictException":{
"type":"structure",
"members":{
"message":{"shape":"errorMessage"}
},
- "documentation":"
",
+ "documentation":"
",
"error":{
"httpStatusCode":409,
"senderFault":true
@@ -214,7 +239,7 @@
},
"notifyOnCaseSeverity":{
"shape":"NotificationSeverityLevel",
- "documentation":"RegisterSlackWorkspaceForOrganization
API from an Amazon Web Services account that doesn't belong to an organization.RegisterSlackWorkspaceForOrganization
API from a member account, but the management account hasn't registered that workspace yet for the organization.
"
+ "documentation":" <p>If you specify <code>high</code> or <code>all</code>, you must specify <code>true</code> for at least one of the following parameters:</p> <ul> <li> <p> <code>notifyOnAddCorrespondenceToCase</code> </p> </li> <li> <p> <code>notifyOnCreateOrReopenCase</code> </p> </li> <li> <p> <code>notifyOnResolveCase</code> </p> </li> </ul> <p>If you specify <code>none</code>, the following parameters must be null or <code>false</code>:</p> <ul> <li> <p> <code>notifyOnAddCorrespondenceToCase</code> </p> </li> <li> <p> <code>notifyOnCreateOrReopenCase</code> </p> </li> <li> <p> <code>notifyOnResolveCase</code> </p> </li> </ul> <note> <p>If you don't specify these parameters in your request, they default to <code>false</code>.</p> </note>
high
or all
, you must specify true
for at least one of the following parameters:
notifyOnAddCorrespondenceToCase
notifyOnCreateOrReopenCase
notifyOnResolveCase
none
, the following parameters must be null or false
:
notifyOnAddCorrespondenceToCase
notifyOnCreateOrReopenCase
notifyOnResolveCase
false
.T012ABCDEFG
.T012ABCDEFG
.T012ABCDEFG
.T012ABCDEFG
. Specify the Slack workspace that you want to use for your organization.T012ABCDEFG
.T012ABCDEFG
.T012ABCDEFG
.
"
+ "documentation":" <p>If you specify <code>high</code> or <code>all</code>, at least one of the following parameters must be <code>true</code>:</p> <ul> <li> <p> <code>notifyOnAddCorrespondenceToCase</code> </p> </li> <li> <p> <code>notifyOnCreateOrReopenCase</code> </p> </li> <li> <p> <code>notifyOnResolveCase</code> </p> </li> </ul> <p>If you specify <code>none</code>, any of the following parameters that you specify in your request must be <code>false</code>:</p> <ul> <li> <p> <code>notifyOnAddCorrespondenceToCase</code> </p> </li> <li> <p> <code>notifyOnCreateOrReopenCase</code> </p> </li> <li> <p> <code>notifyOnResolveCase</code> </p> </li> </ul> <note> <p>If you don't specify these parameters in your request, the Amazon Web Services Support App uses the current values by default.</p> </note>
high
or all
, at least one of the following parameters must be true
:
notifyOnAddCorrespondenceToCase
notifyOnCreateOrReopenCase
notifyOnResolveCase
none
, any of the following parameters that you specify in your request must be false
:
notifyOnAddCorrespondenceToCase
notifyOnCreateOrReopenCase
notifyOnResolveCase
T012ABCDEFG
.T012ABCDEFG
.
<note> <ul> <li> <p>You must have a Business or Enterprise Support plan to use the Amazon Web Services Support App API. </p> </li> <li> <p>For more information about the Amazon Web Services Support App endpoints, see the <a href="https://docs.aws.amazon.com/general/latest/gr/awssupport.html#awssupport_app_region">Amazon Web Services Support App in Slack endpoints</a> in the <i>Amazon Web Services General Reference</i>.</p> </li> </ul> </note>
"
+ "documentation":"You can use the Amazon Web Services Support App in Slack API to manage your support cases in Slack for your Amazon Web Services account. After you configure your Slack workspace and channel with the Amazon Web Services Support App, you can perform the following tasks directly in your Slack channel:
Create, search, update, and resolve your support cases
Request service quota increases for your account
Invite Amazon Web Services Support agents to your channel so that you can chat directly about your support cases
For more information about how to perform these actions in Slack, see the following documentation in the Amazon Web Services Support User Guide:
You can also use the Amazon Web Services Management Console instead of the Amazon Web Services Support App API to manage your Slack configurations. For more information, see Authorize a Slack workspace to enable the Amazon Web Services Support App.
You must have a Business or Enterprise Support plan to use the Amazon Web Services Support App API.
For more information about the Amazon Web Services Support App endpoints, see the Amazon Web Services Support App in Slack endpoints in the Amazon Web Services General Reference.
Associates a trust store with a web portal.
", "idempotent":true }, + "AssociateUserAccessLoggingSettings":{ + "name":"AssociateUserAccessLoggingSettings", + "http":{ + "method":"PUT", + "requestUri":"/portals/{portalArn+}/userAccessLoggingSettings", + "responseCode":200 + }, + "input":{"shape":"AssociateUserAccessLoggingSettingsRequest"}, + "output":{"shape":"AssociateUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"}, + {"shape":"ConflictException"} + ], + "documentation":"Associates a user access logging settings resource with a web portal.
", + "idempotent":true + }, "AssociateUserSettings":{ "name":"AssociateUserSettings", "http":{ @@ -189,6 +209,25 @@ ], "documentation":"Creates a trust store that can be associated with a web portal. A trust store contains certificate authority (CA) certificates. Once associated with a web portal, the browser in a streaming session will recognize certificates that have been issued using any of the CAs in the trust store. If your organization has internal websites that use certificates issued by private CAs, you should add the private CA certificate to the trust store.
" }, + "CreateUserAccessLoggingSettings":{ + "name":"CreateUserAccessLoggingSettings", + "http":{ + "method":"POST", + "requestUri":"/userAccessLoggingSettings", + "responseCode":200 + }, + "input":{"shape":"CreateUserAccessLoggingSettingsRequest"}, + "output":{"shape":"CreateUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ServiceQuotaExceededException"}, + {"shape":"ValidationException"}, + {"shape":"ConflictException"} + ], + "documentation":"Creates a user access logging settings resource that can be associated with a web portal.
" + }, "CreateUserSettings":{ "name":"CreateUserSettings", "http":{ @@ -303,6 +342,25 @@ "documentation":"Deletes the trust store.
", "idempotent":true }, + "DeleteUserAccessLoggingSettings":{ + "name":"DeleteUserAccessLoggingSettings", + "http":{ + "method":"DELETE", + "requestUri":"/userAccessLoggingSettings/{userAccessLoggingSettingsArn+}", + "responseCode":200 + }, + "input":{"shape":"DeleteUserAccessLoggingSettingsRequest"}, + "output":{"shape":"DeleteUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"}, + {"shape":"ConflictException"} + ], + "documentation":"Deletes user access logging settings.
", + "idempotent":true + }, "DeleteUserSettings":{ "name":"DeleteUserSettings", "http":{ @@ -379,6 +437,25 @@ "documentation":"Disassociates a trust store from a web portal.
", "idempotent":true }, + "DisassociateUserAccessLoggingSettings":{ + "name":"DisassociateUserAccessLoggingSettings", + "http":{ + "method":"DELETE", + "requestUri":"/portals/{portalArn+}/userAccessLoggingSettings", + "responseCode":200 + }, + "input":{"shape":"DisassociateUserAccessLoggingSettingsRequest"}, + "output":{"shape":"DisassociateUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"} + ], + "documentation":"Disassociates user access logging settings from a web portal.
", + "idempotent":true + }, "DisassociateUserSettings":{ "name":"DisassociateUserSettings", "http":{ @@ -524,6 +601,24 @@ ], "documentation":"Gets the trust store certificate.
" }, + "GetUserAccessLoggingSettings":{ + "name":"GetUserAccessLoggingSettings", + "http":{ + "method":"GET", + "requestUri":"/userAccessLoggingSettings/{userAccessLoggingSettingsArn+}", + "responseCode":200 + }, + "input":{"shape":"GetUserAccessLoggingSettingsRequest"}, + "output":{"shape":"GetUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"} + ], + "documentation":"Gets user access logging settings.
" + }, "GetUserSettings":{ "name":"GetUserSettings", "http":{ @@ -663,6 +758,23 @@ ], "documentation":"Retrieves a list of trust stores.
" }, + "ListUserAccessLoggingSettings":{ + "name":"ListUserAccessLoggingSettings", + "http":{ + "method":"GET", + "requestUri":"/userAccessLoggingSettings", + "responseCode":200 + }, + "input":{"shape":"ListUserAccessLoggingSettingsRequest"}, + "output":{"shape":"ListUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"} + ], + "documentation":"Retrieves a list of user access logging settings.
" + }, "ListUserSettings":{ "name":"ListUserSettings", "http":{ @@ -810,6 +922,24 @@ ], "documentation":"Updates the trust store.
" }, + "UpdateUserAccessLoggingSettings":{ + "name":"UpdateUserAccessLoggingSettings", + "http":{ + "method":"PATCH", + "requestUri":"/userAccessLoggingSettings/{userAccessLoggingSettingsArn+}", + "responseCode":200 + }, + "input":{"shape":"UpdateUserAccessLoggingSettingsRequest"}, + "output":{"shape":"UpdateUserAccessLoggingSettingsResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"} + ], + "documentation":"Updates the user access logging settings.
" + }, "UpdateUserSettings":{ "name":"UpdateUserSettings", "http":{ @@ -966,6 +1096,44 @@ } } }, + "AssociateUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":[ + "portalArn", + "userAccessLoggingSettingsArn" + ], + "members":{ + "portalArn":{ + "shape":"ARN", + "documentation":"The ARN of the web portal.
", + "location":"uri", + "locationName":"portalArn" + }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
", + "location":"querystring", + "locationName":"userAccessLoggingSettingsArn" + } + } + }, + "AssociateUserAccessLoggingSettingsResponse":{ + "type":"structure", + "required":[ + "portalArn", + "userAccessLoggingSettingsArn" + ], + "members":{ + "portalArn":{ + "shape":"ARN", + "documentation":"The ARN of the web portal.
" + }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
" + } + } + }, "AssociateUserSettingsRequest":{ "type":"structure", "required":[ @@ -1346,6 +1514,35 @@ } } }, + "CreateUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":["kinesisStreamArn"], + "members":{ + "clientToken":{ + "shape":"ClientToken", + "documentation":"A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request.
If you do not specify a client token, one is automatically generated by the AWS SDK.
", + "idempotencyToken":true + }, + "kinesisStreamArn":{ + "shape":"KinesisStreamArn", + "documentation":"The ARN of the Kinesis stream.
" + }, + "tags":{ + "shape":"TagList", + "documentation":"The tags to add to the user settings resource. A tag is a key-value pair.
" + } + } + }, + "CreateUserAccessLoggingSettingsResponse":{ + "type":"structure", + "required":["userAccessLoggingSettingsArn"], + "members":{ + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
" + } + } + }, "CreateUserSettingsRequest":{ "type":"structure", "required":[ @@ -1490,6 +1687,23 @@ "members":{ } }, + "DeleteUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":["userAccessLoggingSettingsArn"], + "members":{ + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
", + "location":"uri", + "locationName":"userAccessLoggingSettingsArn" + } + } + }, + "DeleteUserAccessLoggingSettingsResponse":{ + "type":"structure", + "members":{ + } + }, "DeleteUserSettingsRequest":{ "type":"structure", "required":["userSettingsArn"], @@ -1558,6 +1772,23 @@ "members":{ } }, + "DisassociateUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":["portalArn"], + "members":{ + "portalArn":{ + "shape":"ARN", + "documentation":"The ARN of the web portal.
", + "location":"uri", + "locationName":"portalArn" + } + } + }, + "DisassociateUserAccessLoggingSettingsResponse":{ + "type":"structure", + "members":{ + } + }, "DisassociateUserSettingsRequest":{ "type":"structure", "required":["portalArn"], @@ -1767,6 +1998,27 @@ } } }, + "GetUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":["userAccessLoggingSettingsArn"], + "members":{ + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
", + "location":"uri", + "locationName":"userAccessLoggingSettingsArn" + } + } + }, + "GetUserAccessLoggingSettingsResponse":{ + "type":"structure", + "members":{ + "userAccessLoggingSettings":{ + "shape":"UserAccessLoggingSettings", + "documentation":"The user access logging settings.
" + } + } + }, "GetUserSettingsRequest":{ "type":"structure", "required":["userSettingsArn"], @@ -1879,6 +2131,13 @@ "exception":true, "fault":true }, + "KinesisStreamArn":{ + "type":"string", + "documentation":"Kinesis stream ARN to which log events are published.
", + "max":2048, + "min":20, + "pattern":"arn:[\\w+=/,.@-]+:kinesis:[a-zA-Z0-9\\-]*:[a-zA-Z0-9]{1,12}:stream/.+" + }, "ListBrowserSettingsRequest":{ "type":"structure", "members":{ @@ -2098,6 +2357,36 @@ } } }, + "ListUserAccessLoggingSettingsRequest":{ + "type":"structure", + "members":{ + "maxResults":{ + "shape":"MaxResults", + "documentation":"The maximum number of results to be included in the next page.
", + "location":"querystring", + "locationName":"maxResults" + }, + "nextToken":{ + "shape":"PaginationToken", + "documentation":"The pagination token used to retrieve the next page of results for this operation.
", + "location":"querystring", + "locationName":"nextToken" + } + } + }, + "ListUserAccessLoggingSettingsResponse":{ + "type":"structure", + "members":{ + "nextToken":{ + "shape":"PaginationToken", + "documentation":"The pagination token used to retrieve the next page of results for this operation.
" + }, + "userAccessLoggingSettings":{ + "shape":"UserAccessLoggingSettingsList", + "documentation":"The user access logging settings.
" + } + } + }, "ListUserSettingsRequest":{ "type":"structure", "members":{ @@ -2231,9 +2520,13 @@ "shape":"ARN", "documentation":"The ARN of the trust store that is associated with the web portal.
" }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings that is associated with the web portal.
" + }, "userSettingsArn":{ "shape":"ARN", - "documentation":"The ARN of the trust store that is associated with the web portal.
" + "documentation":"The ARN of the user settings that is associated with the web portal.
" } }, "documentation":"The web portal.
" @@ -2299,6 +2592,10 @@ "shape":"ARN", "documentation":"The ARN of the trust that is associated with this web portal.
" }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings that is associated with the web portal.
" + }, "userSettingsArn":{ "shape":"ARN", "documentation":"The ARN of the user settings that is associated with the web portal.
" @@ -2746,6 +3043,37 @@ } } }, + "UpdateUserAccessLoggingSettingsRequest":{ + "type":"structure", + "required":["userAccessLoggingSettingsArn"], + "members":{ + "clientToken":{ + "shape":"ClientToken", + "documentation":"A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token return the result from the original successful request.
If you do not specify a client token, one is automatically generated by the AWS SDK.
", + "idempotencyToken":true + }, + "kinesisStreamArn":{ + "shape":"KinesisStreamArn", + "documentation":"The ARN of the Kinesis stream.
" + }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
", + "location":"uri", + "locationName":"userAccessLoggingSettingsArn" + } + } + }, + "UpdateUserAccessLoggingSettingsResponse":{ + "type":"structure", + "required":["userAccessLoggingSettings"], + "members":{ + "userAccessLoggingSettings":{ + "shape":"UserAccessLoggingSettings", + "documentation":"The user access logging settings.
" + } + } + }, "UpdateUserSettingsRequest":{ "type":"structure", "required":["userSettingsArn"], @@ -2801,6 +3129,43 @@ } } }, + "UserAccessLoggingSettings":{ + "type":"structure", + "required":["userAccessLoggingSettingsArn"], + "members":{ + "associatedPortalArns":{ + "shape":"ArnList", + "documentation":"A list of web portal ARNs that this user access logging settings is associated with.
" + }, + "kinesisStreamArn":{ + "shape":"KinesisStreamArn", + "documentation":"The ARN of the Kinesis stream.
" + }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
" + } + }, + "documentation":"A user access logging settings resource that can be associated with a web portal.
" + }, + "UserAccessLoggingSettingsList":{ + "type":"list", + "member":{"shape":"UserAccessLoggingSettingsSummary"} + }, + "UserAccessLoggingSettingsSummary":{ + "type":"structure", + "members":{ + "kinesisStreamArn":{ + "shape":"KinesisStreamArn", + "documentation":"The ARN of the Kinesis stream.
" + }, + "userAccessLoggingSettingsArn":{ + "shape":"ARN", + "documentation":"The ARN of the user access logging settings.
" + } + }, + "documentation":"The summary of user access logging settings.
" + }, "UserSettings":{ "type":"structure", "required":["userSettingsArn"], From ee696faef866a1a29bd518cf0a2150f0c00400cc Mon Sep 17 00:00:00 2001 From: cli-v2-merge