feat(client-ssm): This release adds an optional Duration parameter to…

… StateManager Associations. This allows customers to specify how long an apply-only-on-cron association execution should run. Once the specified Duration is out all the ongoing cancellable commands or automations are cancelled.

clients/client-ssm/src/commands/CreateAssociationBatchCommand.ts

@@ -105,6 +105,7 @@ export interface CreateAssociationBatchCommandOutput extends CreateAssociationBa
  *         },
  *       ],
  *       ScheduleOffset: Number("int"),
+ *       Duration: Number("int"),
  *       TargetMaps: [ // TargetMaps
  *         { // TargetMap
  *           "<keys>": [ // TargetMapValueList
@@ -203,6 +204,7 @@ export interface CreateAssociationBatchCommandOutput extends CreateAssociationBa
  * //         },
  * //       ],
  * //       ScheduleOffset: Number("int"),
+ * //       Duration: Number("int"),
  * //       TargetMaps: [ // TargetMaps
  * //         { // TargetMap
  * //           "<keys>": [ // TargetMapValueList
@@ -278,6 +280,7 @@ export interface CreateAssociationBatchCommandOutput extends CreateAssociationBa
  * //           },
  * //         ],
  * //         ScheduleOffset: Number("int"),
+ * //         Duration: Number("int"),
  * //         TargetMaps: [
  * //           {
  * //             "<keys>": [

clients/client-ssm/src/commands/CreateAssociationCommand.ts

@@ -106,6 +106,7 @@ export interface CreateAssociationCommandOutput extends CreateAssociationResult,
  *     },
  *   ],
  *   ScheduleOffset: Number("int"),
+ *   Duration: Number("int"),
  *   TargetMaps: [ // TargetMaps
  *     { // TargetMap
  *       "<keys>": [ // TargetMapValueList
@@ -207,6 +208,7 @@ export interface CreateAssociationCommandOutput extends CreateAssociationResult,
  * //       },
  * //     ],
  * //     ScheduleOffset: Number("int"),
+ * //     Duration: Number("int"),
  * //     TargetMaps: [ // TargetMaps
  * //       { // TargetMap
  * //         "<keys>": [ // TargetMapValueList

clients/client-ssm/src/commands/DescribeAssociationCommand.ts

@@ -126,6 +126,7 @@ export interface DescribeAssociationCommandOutput extends DescribeAssociationRes
  * //       },
  * //     ],
  * //     ScheduleOffset: Number("int"),
+ * //     Duration: Number("int"),
  * //     TargetMaps: [ // TargetMaps
  * //       { // TargetMap
  * //         "<keys>": [ // TargetMapValueList

clients/client-ssm/src/commands/DescribeAvailablePatchesCommand.ts

@@ -29,6 +29,10 @@ export interface DescribeAvailablePatchesCommandOutput extends DescribeAvailable
 /**
  * @public
  * <p>Lists all patches eligible to be included in a patch baseline.</p>
+ *          <note>
+ *             <p>Currently, <code>DescribeAvailablePatches</code> supports only the Amazon Linux 1, Amazon
+ *     Linux 2, and Windows Server operating systems.</p>
+ *          </note>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

clients/client-ssm/src/commands/ListAssociationVersionsCommand.ts

@@ -106,6 +106,7 @@ export interface ListAssociationVersionsCommandOutput extends ListAssociationVer
  * //         },
  * //       ],
  * //       ScheduleOffset: Number("int"),
+ * //       Duration: Number("int"),
  * //       TargetMaps: [ // TargetMaps
  * //         { // TargetMap
  * //           "<keys>": [ // TargetMapValueList

clients/client-ssm/src/commands/ListAssociationsCommand.ts

@@ -76,6 +76,7 @@ export interface ListAssociationsCommandOutput extends ListAssociationsResult, _
  * //       ScheduleExpression: "STRING_VALUE",
  * //       AssociationName: "STRING_VALUE",
  * //       ScheduleOffset: Number("int"),
+ * //       Duration: Number("int"),
  * //       TargetMaps: [ // TargetMaps
  * //         { // TargetMap
  * //           "<keys>": [ // TargetMapValueList

clients/client-ssm/src/commands/UpdateAssociationCommand.ts

@@ -117,6 +117,7 @@ export interface UpdateAssociationCommandOutput extends UpdateAssociationResult,
  *     },
  *   ],
  *   ScheduleOffset: Number("int"),
+ *   Duration: Number("int"),
  *   TargetMaps: [ // TargetMaps
  *     { // TargetMap
  *       "<keys>": [ // TargetMapValueList
@@ -212,6 +213,7 @@ export interface UpdateAssociationCommandOutput extends UpdateAssociationResult,
  * //       },
  * //     ],
  * //     ScheduleOffset: Number("int"),
+ * //     Duration: Number("int"),
  * //     TargetMaps: [ // TargetMaps
  * //       { // TargetMap
  * //         "<keys>": [ // TargetMapValueList

clients/client-ssm/src/commands/UpdateAssociationStatusCommand.ts

@@ -133,6 +133,7 @@ export interface UpdateAssociationStatusCommandOutput extends UpdateAssociationS
  * //       },
  * //     ],
  * //     ScheduleOffset: Number("int"),
+ * //     Duration: Number("int"),
  * //     TargetMaps: [ // TargetMaps
  * //       { // TargetMap
  * //         "<keys>": [ // TargetMapValueList

clients/client-ssm/src/models/models_0.ts

@@ -1329,6 +1329,28 @@ export interface CreateAssociationRequest {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours the association can run before it is canceled. Duration applies to
+   *    associations that are currently running, and any pending and in progress commands on all targets.
+   *    If a target was taken offline for the association to run, it is made available again immediately,
+   *    without a reboot. </p>
+   *          <p>The <code>Duration</code> parameter applies only when both these conditions are true:</p>
+   *          <ul>
+   *             <li>
+   *                <p>The association for which you specify a duration is cancelable according to the parameters
+   *      of the SSM command document or Automation runbook associated with this execution. </p>
+   *             </li>
+   *             <li>
+   *                <p>The command specifies the <code>
+   *                      <a href="https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociation.html#systemsmanager-CreateAssociation-request-ApplyOnlyAtCronInterval">ApplyOnlyAtCronInterval</a>
+   *                   </code> parameter, which means that the association doesn't
+   *      run immediately after it is created, but only according to the specified schedule.</p>
+   *             </li>
+   *          </ul>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -1613,6 +1635,14 @@ export interface AssociationDescription {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours that an association can run on specified targets. After the resulting
+   *    cutoff time passes, associations that are currently running are cancelled, and no pending
+   *    executions are started on remaining targets.</p>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -1993,6 +2023,28 @@ export interface CreateAssociationBatchRequestEntry {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours the association can run before it is canceled. Duration applies to
+   *    associations that are currently running, and any pending and in progress commands on all targets.
+   *    If a target was taken offline for the association to run, it is made available again immediately,
+   *    without a reboot. </p>
+   *          <p>The <code>Duration</code> parameter applies only when both these conditions are true:</p>
+   *          <ul>
+   *             <li>
+   *                <p>The association for which you specify a duration is cancelable according to the parameters
+   *      of the SSM command document or Automation runbook associated with this execution. </p>
+   *             </li>
+   *             <li>
+   *                <p>The command specifies the <code>
+   *                      <a href="https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_CreateAssociationBatchRequestEntry.html#systemsmanager-Type-CreateAssociationBatchRequestEntry-ApplyOnlyAtCronInterval">ApplyOnlyAtCronInterval</a>
+   *                   </code> parameter, which means that the association doesn't
+   *      run immediately after it is created, but only according to the specified schedule.</p>
+   *             </li>
+   *          </ul>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -2217,7 +2269,7 @@ export interface DocumentRequires {
   /**
    * @public
    * <p>An optional field specifying the version of the artifact associated with the document. For
-   *    example, "Release 12, Update 6". This value is unique across all versions of a document, and
+   *    example, 12.6. This value is unique across all versions of a document, and
    *    can't be changed.</p>
    */
   VersionName?: string;
@@ -6810,7 +6862,7 @@ export interface DescribeDocumentRequest {
   /**
    * @public
    * <p>An optional field specifying the version of the artifact associated with the document. For
-   *    example, "Release 12, Update 6". This value is unique across all versions of a document, and
+   *    example, 12.6. This value is unique across all versions of a document, and
    *    can't be changed.</p>
    */
   VersionName?: string;
@@ -7794,6 +7846,10 @@ export interface PatchComplianceData {
    * @public
    * <p>The IDs of one or more Common Vulnerabilities and Exposure (CVE) issues that are resolved by
    *    the patch.</p>
+   *          <note>
+   *             <p>Currently, CVE ID values are reported only for patches with a status of
+   *      <code>Missing</code> or <code>Failed</code>.</p>
+   *          </note>
    */
   CVEIds?: string;
 }

clients/client-ssm/src/models/models_1.ts

@@ -739,7 +739,8 @@ export interface ParameterMetadata {
 
   /**
    * @public
-   * <p>The ID of the query key used for this parameter.</p>
+   * <p>The alias of the Key Management Service (KMS) key used to encrypt the
+   *    parameter. Applies to <code>SecureString</code> parameters only.</p>
    */
   KeyId?: string;
 
@@ -2262,8 +2263,7 @@ export interface GetConnectionStatusResponse {
 
   /**
    * @public
-   * <p>The status of the connection to the managed node. For example, 'Connected' or 'Not
-   *    Connected'.</p>
+   * <p>The status of the connection to the managed node.</p>
    */
   Status?: ConnectionStatus;
 }
@@ -2461,7 +2461,7 @@ export interface GetDocumentRequest {
   /**
    * @public
    * <p>An optional field specifying the version of the artifact associated with the document. For
-   *    example, "Release 12, Update 6". This value is unique across all versions of a document and can't
+   *    example, 12.6. This value is unique across all versions of a document and can't
    *    be changed.</p>
    */
   VersionName?: string;
@@ -2554,8 +2554,7 @@ export interface GetDocumentResult {
 
   /**
    * @public
-   * <p>The version of the artifact associated with the document. For example, "Release 12, Update
-   *    6". This value is unique across all versions of a document, and can't be changed.</p>
+   * <p>The version of the artifact associated with the document. For example, 12.6. This value is unique across all versions of a document, and can't be changed.</p>
    */
   VersionName?: string;
 
@@ -4434,7 +4433,8 @@ export interface ParameterHistory {
 
   /**
    * @public
-   * <p>The ID of the query key used for this parameter.</p>
+   * <p>The alias of the Key Management Service (KMS) key used to encrypt the
+   *    parameter. Applies to <code>SecureString</code> parameters only</p>
    */
   KeyId?: string;
 
@@ -5254,6 +5254,14 @@ export interface Association {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours that an association can run on specified targets. After the resulting
+   *    cutoff time passes, associations that are currently running are cancelled, and no pending
+   *    executions are started on remaining targets.</p>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -5453,6 +5461,14 @@ export interface AssociationVersionInfo {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours that an association can run on specified targets. After the resulting
+   *    cutoff time passes, associations that are currently running are cancelled, and no pending
+   *    executions are started on remaining targets.</p>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -7225,7 +7241,7 @@ export interface DocumentIdentifier {
   /**
    * @public
    * <p>An optional field specifying the version of the artifact associated with the document. For
-   *    example, "Release 12, Update 6". This value is unique across all versions of a document, and
+   *    example, 12.6. This value is unique across all versions of a document, and
    *    can't be changed.</p>
    */
   VersionName?: string;
@@ -7364,8 +7380,7 @@ export interface DocumentVersionInfo {
 
   /**
    * @public
-   * <p>The version of the artifact associated with the document. For example, "Release 12, Update
-   *    6". This value is unique across all versions of a document, and can't be changed.</p>
+   * <p>The version of the artifact associated with the document. For example, 12.6. This value is unique across all versions of a document, and can't be changed.</p>
    */
   VersionName?: string;
 

clients/client-ssm/src/models/models_2.ts

@@ -335,6 +335,28 @@ export interface UpdateAssociationRequest {
    */
   ScheduleOffset?: number;
 
+  /**
+   * @public
+   * <p>The number of hours the association can run before it is canceled. Duration applies to
+   *    associations that are currently running, and any pending and in progress commands on all targets.
+   *    If a target was taken offline for the association to run, it is made available again immediately,
+   *    without a reboot. </p>
+   *          <p>The <code>Duration</code> parameter applies only when both these conditions are true:</p>
+   *          <ul>
+   *             <li>
+   *                <p>The association for which you specify a duration is cancelable according to the parameters
+   *      of the SSM command document or Automation runbook associated with this execution. </p>
+   *             </li>
+   *             <li>
+   *                <p>The command specifies the <code>
+   *                      <a href="https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_UpdateAssociation.html#systemsmanager-UpdateAssociation-request-ApplyOnlyAtCronInterval">ApplyOnlyAtCronInterval</a>
+   *                   </code> parameter, which means that the association doesn't
+   *      run immediately after it is updated, but only according to the specified schedule.</p>
+   *             </li>
+   *          </ul>
+   */
+  Duration?: number;
+
   /**
    * @public
    * <p>A key-value mapping of document parameters to target resources. Both Targets and TargetMaps
@@ -517,7 +539,7 @@ export interface UpdateDocumentRequest {
   /**
    * @public
    * <p>An optional field specifying the version of the artifact you are updating with the document.
-   *    For example, "Release 12, Update 6". This value is unique across all versions of a document, and
+   *    For example, 12.6. This value is unique across all versions of a document, and
    *    can't be changed.</p>
    */
   VersionName?: string;

clients/client-ssm/src/protocols/Aws_json1_1.ts

@@ -13198,6 +13198,7 @@ const de_Association = (output: any, context: __SerdeContext): Association => {
     AssociationName: __expectString,
     AssociationVersion: __expectString,
     DocumentVersion: __expectString,
+    Duration: __expectInt32,
     InstanceId: __expectString,
     LastExecutionDate: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
     Name: __expectString,
@@ -13226,6 +13227,7 @@ const de_AssociationDescription = (output: any, context: __SerdeContext): Associ
     ComplianceSeverity: __expectString,
     Date: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
     DocumentVersion: __expectString,
+    Duration: __expectInt32,
     InstanceId: __expectString,
     LastExecutionDate: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
     LastSuccessfulExecutionDate: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
@@ -13365,6 +13367,7 @@ const de_AssociationVersionInfo = (output: any, context: __SerdeContext): Associ
     ComplianceSeverity: __expectString,
     CreatedDate: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
     DocumentVersion: __expectString,
+    Duration: __expectInt32,
     MaxConcurrency: __expectString,
     MaxErrors: __expectString,
     Name: __expectString,